Method and system for issuing seal data to USBKEY

Abstract

The invention discloses a method and a system for issuing seal data to a USBKEY, and belongs to the technical field of information security. The method comprises the following steps: calling a USBKEYto initiate a parameter acquisition request; calling the USBKEY to obtain the random parameters and the called serial number of the USBKEY, and calling a signature interface of the USBKEY to sign therandom parameters and the serial number; generating a seal data issuing request and receiving the seal data issuing request of the user; analyzing and issuing the seal data request, obtaining random parameters, serial numbers and signatures, and performing validity verification on the random parameters, the serial numbers and the signatures; preprocessing the random parameter and the serial numberto obtain a symmetric key, and encrypting the requested seal data by using the symmetric key to generate a seal data ciphertext; and receiving the seal data ciphertext, decrypting the seal data ciphertext to obtain seal data, and writing the seal data into the USBKEY. According to the invention, the seal data issuing efficiency and speed are improved, and the data security and attack resistance are ensured.

Description

technical field [0001] The present invention relates to the technical field of information security technology, and more specifically, to a method and system for sending stamp data to a USBKEY. Background technique [0002] Electronic signatures, like the digital certificates we use, are used as a means of identity verification. They generally refer to existence in electronic form, attached to electronic documents and logically associated with them, and can be used to identify the identity of the signer of the electronic document and ensure integrity of the document and signatory agrees to the content of the facts stated in the electronic document. The electronic signature system usually needs to be integrated with the business system, and often exists as a cryptographic service module of the business system. Usually, a certificate is required to make a seal, and the certificate is saved by the user himself with a USBKEY. In order to complete the signing operation on the c...

AI Technical Summary

Problems solved by technology

Usually, clear text transmission is used in the transmission process, and browsers are often insecure and easy to steal data. Attackers can obtain seal information such as stamps, certificates, seals, etc., and obtain user authenticity through other means such as browser page signature phishing. The signature information can complete the stamping of the counterfeit document, and it is technically impossible to distinguish the authenticity

Images