Method for protecting certificate of intelligent password equipment and intelligent password equipment

Abstract

The invention discloses a method for protecting certificate of intelligent password equipment and the intelligent password equipment, and the method comprises the steps that A, the intelligent cryptographic device receives certificate application data transmitted by a server in a certificate downloading process; b, the intelligent password device analyzes the certificate application data to obtaina certificate type and public key data; c, the intelligent password device compares the certificate type and the public key data obtained through analysis with the certificate type and the corresponding public key data stored in the intelligent password device; and D, when it is determined that the certificate type and the public key data obtained through analysis are consistent with the certificate type and the corresponding public key data stored in the intelligent cryptographic device, the intelligent cryptographic device returns certificate application data to the server. According to theinvention, key information such as certificate types and the like can be effectively prevented from being maliciously attacked and tampered in the certificate downloading process of the intelligent password equipment, so that the risk that a high-security-level certificate is reduced to be abused by a common certificate is prevented.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for protecting certificates of smart cryptographic devices and smart cryptographic devices. Background technique [0002] With people's attention to information security, many cryptographic devices begin to use PKI certificates to implement identity authentication. The validity period of equipment certificates issued by banks, governments, CAs and other institutions is generally 3 years, 5 years, etc. When the user's cryptographic device certificate expires or is about to expire, the user's application system generally requires the user to complete the certificate renewal operation on the Internet before using the cryptographic device normally. Due to many security factors in the online system, the user may have the risk of certificate tampering and forgery in the process of updating the certificate. [0003] General smart cryptographic devices such as common online...

AI Technical Summary

Problems solved by technology

However, there are two hidden dangers in this process: the first is that the user does not know whether the smart password device he is using is a legal device during the process of issuing the certificate, that is, the smart password device produced by the designated manufacturer

The second question is how to ensure that the type of key pair generated by the user is consistent with the type of certificate actually issued during the certificate issuance process, that is, how to ensure the security of the certificate type, so as to avoid the risk of high security level certificates being tampered with and ordinary certificates

Images