Adaptive verification method and verification system for sm2 security certificate

Abstract

The invention discloses an adaptive verification method and a verification system of an SM2 security certificate, and relates to the technical field of information security. It includes an adaptive verification method, wherein the steps of the adaptive verification method are as follows: S1: a pre-installed certificate service system; S2: the user accesses an Https website on the Internet, S3: obtains the SM2-based security of the Https website by visiting the Https website Certificate, S4: Call the certificate service system to verify the Https website security certificate, S5: After the website certificate verification is passed, the user can use the functions of the website safely. The invention realizes the website certificate verification of the SM2 cryptographic algorithm through the provision of the certificate verification function, which can ignore whether the operating system and the browser support the SM2 cryptographic algorithm, solves the problem that the open source operating system cannot support the national commercial cryptography, and accelerates the security during SM2 security certificate verification.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an adaptive verification method and a verification system of an SM2 security certificate. Background technique [0002] When a user accesses a website through a browser, the security certificate of the website needs to be verified. With the development of cryptographic technology, more and more cryptographic systems are applied, some of which are not supported by some operating system versions. [0003] Although some developers continue to release patches to the operating system to support more cryptographic systems, there are the following shortcomings: [0004] First, due to the large number of branch lines and versions of open source operating systems, the patches formed often cannot cover all operating system versions, resulting in some operating systems still unable to support national commercial passwords; [0005] Second, the development results do not necess...

AI Technical Summary

Problems solved by technology

[0004] First, due to the many branches and versions of the open source operating system, the patches formed often cannot cover all operating system versions, resulting in some operating systems still not supporting national commercial encryption;

[0005] Second, the development results do not necessarily meet the relevant specifications;

[0006] Third, after the browser obtains the security certificate of the website, it needs to check whether the certificate authority recorded in its information summary is among the organizations trusted by the browser; if the security certificate of the website is not issued by the organization trusted by the browser, the browser will The validity of the certificate could not be confirmed

Images