Full life cycle monitoring method and system based on certificate distribution

Abstract

The invention relates to a full life cycle monitoring method based on certificate distribution, including constructing a fully connected distributed certificate distribution network, each node device of the distributed certificate distribution network is provided with a certificate distribution management system to send and receive certificates; The distributed certificate distribution network monitors the full life cycle of each node device; monitors the operation of all node devices through the certificate and optimizes the certificate distribution strategy based on the operation. The invention also relates to a full life cycle management system based on certificate distribution. By implanting each node device into a certificate distribution mechanism and constructing a fully connected distributed certificate distribution network, the present invention monitors the full life cycle of each node device and monitors the operation of all node devices through the certificate, thereby realizing Monitor and manage the entire life cycle of all equipment.

Description

technical field [0001] The present invention relates to the field of information security, and more particularly, to a whole life cycle monitoring method and system based on certificate distribution. Background technique [0002] Most of the existing public key infrastructure (Public Key Infrastructure, PKI) systems are used in the field of information security, mainly for building public key infrastructure. The PKI system usually consists of multiple subsystems, including: certificate authority (CA), certificate library, Web security communication platform, registration authority (RA), publishing system, application interface system, etc. Among them, CA is an authoritative entity. As a PKI management entity and service provider, it is responsible for managing the certificates of all users under the PKI organization, including the creation, issuance, renewal, revocation, and certification of users' keys or certificates. In the current PKI system, the CA is the only entity i...

AI Technical Summary

Problems solved by technology

In the current PKI system, CA is the only entity in the PKI framework that can create, revoke, and maintain the life cycle of certificates. Therefore, the certificate issuing equipment of the existing PKI system is independent and single.

Moreover, in the existing PKI system, the certificate issuance process is an independent link of some devices, and it is impossible to monitor the entire life cycle of all devices.

Images