Full life cycle monitoring method and system based on certificate distribution

Abstract

The invention relates to a full life cycle monitoring method based on certificate distribution, comprising the following steps: constructing a fully connected distributed certificate distribution network, each node device of the distributed certificate distribution network being provided with a certificate distribution management system to transmit and receive certificates; monitoring the full life cycle condition of each node device through the distributed certificate distribution network; and monitoring operation conditions of all node devices through the certificates, and optimizing a certificate distribution strategy based on the operation conditions. The invention also relates to a full life cycle management system based on certificate distribution. According to the invention, each node device is implanted with a certificate distribution mechanism and a full-connection distributed certificate distribution network is constructed, the full-life-cycle condition of each node device is monitored, and the operation condition of all node devices is monitored through certificates, so that the full-life-cycle monitoring and management of all devices are realized.

Description

technical field [0001] The present invention relates to the field of information security, and more specifically, to a method and system for monitoring a full life cycle based on certificate distribution. Background technique [0002] Most of the existing public key infrastructure (Public Key Infrastructure, PKI) systems are applied in the field of information security, mainly for building public key infrastructure. The PKI system usually consists of multiple subsystems, including: certificate authority (certificate authority, CA), certificate library, Web security communication platform, registration authority (Registration Authority, RA), publishing system, application interface system, etc. Among them, CA is an authoritative entity. As a PKI management entity and service provider, it is responsible for managing the certificates of all users under the PKI organization, including the creation, issuance, renewal, revocation, and authentication of user keys or certificates. ...

AI Technical Summary

Problems solved by technology

In the current PKI system, CA is the only entity in the PKI framework that can create, revoke, and maintain the life cycle of certificates. Therefore, the certificate issuing equipment of the existing PKI system is independent and single.

Moreover, in the existing PKI system, the certificate issuance process is an independent link of some devices, and it is impossible to monitor the entire life cycle of all devices.

Images