Certificate information processing method and system based on block chain

Abstract

The invention discloses a certificate information processing method and system based on a block chain. The method comprises the following steps: acquiring user identity registration information; determining an issuer meeting an issuing verification condition according to the user identity registration information; obtaining a certificate template issued by an issuer; and in response to the received certificate application request, generating a target certificate according to the identity registration information of the requester and the certificate template. The certificate can be flexibly generated based on the published certificate template and the user identity registration information, and the participation threshold is reduced based on the identity registration information.

Description

[0001] This application claims the priority of the Chinese patent application with the application number 202010217520.3 and the invention titled "Blockchain-based certificate information processing method and system" filed with the China Patent Office on March 25, 2020, the entire contents of which are incorporated by reference in this application. technical field [0002] The present invention relates to the technical field of blockchain, in particular to a method and system for processing positive number information based on blockchain. Background technique [0003] The current certificate system is centered on the CA (certificate authority), and there is a set of hierarchical CA systems around the world, among which the root CA is an organization recognized by almost everyone. The root CA will issue a positive number to the lower-level CA. The lower-level CA must have the certificate issued by the upper-level CA to have the authority to issue the certificate. Ultimately,...

AI Technical Summary

Problems solved by technology

[0004] However, the current system has the following problems. The types of certificates are single. Usually, the content of the certificate basically proves the correspondence between the domain name and the public key. Everyone is credible, so the entry threshold is relatively high; since the verification of the certificate includes two parts, the first is authenticity, which is guaranteed by digital signature technology, and the second is validity, which is guaranteed by querying the certificate revocation list (CRL).

The CRL query includes that the browser regularly downloads and updates the local CRL from the CA organization, and it is verified locally every time it is verified. This method is not real-time, but the CA organization provides a query interface, which is queried in real time every time it is verified. , this method requires the CA organization to deploy additional services, and there are risks such as single point of failure

It can be seen that the existing certificate system has a high entry threshold and a single type of certificate, and cannot guarantee real-time update of the certificate status

Images