A method and system for remote application of digital certificates based on disk group equipment

Abstract

The present invention relates to a method for remotely applying digital certificates based on disk group devices, the method comprising: a local business device starts a security client to prompt the security client to start the disk group device through a startup interface, the disk group device is used to host a tax electronic key, a golden tax disk certificate and a tax control disk certificate; the security client determines a target digital certificate that is desired to be remotely applied based on a target device identifier, and sends the target digital certificate and a verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate; when it is determined that the target digital certificate has passed the verification, a verification result message indicating that the target digital certificate has passed the verification is sent to the security client and a security server; the security client determines a target device that is desired to be accessed based on the target device identifier, determines a network interface of the target device provided by a security server, and sends a business request to the corresponding target device through the network interface of the target device.

Description

Technical Field

[0001] The present invention relates to the technical field of data certificates, and more specifically to a method and system for remotely applying digital certificates based on disk group equipment. Background Art

[0002] Paperless tax filing is achieved by applying information technologies such as formatted document management, electronic signatures, image recognition, and Internet tax filing, so that the electronic tax filing information filled out by taxpayers has the same legal effect as the paper information submitted, thereby eliminating the process of taxpayers submitting tax-related information.

[0003] Paperless tax filing will greatly save taxpayers' tax filing time, reduce tax filing costs, improve tax filing efficiency, and truly enable taxpayers to file taxes without leaving home.

[0004] The first step is to install the electronic signature client and certificate control.

[0005] The second step is to use tax UKey, Golden Tax Disk, and Tax Control Disk to apply for registration of electronic signature.

[0006] The third step is to review and approve the electronic signature registration (bureau-side review).

[0007] The fourth step is to use the tax UKey, Golden Tax Disk and Tax Control Disk to log in to the online tax payment platform to handle paperless business and affix an electronic signature.

[0008] After the tax UKey, Golden Tax Disk and Tax Control Disk are hosted on the U180 disk group device, when the user needs to use the selected authentication platform and other platforms that require digital certificates to verify identity, the digital certificate application function needs to exist on the customer's PC. At this time, since the digital certificate is on the U180, the user cannot use it normally. The tax control device needs to be taken from the disk group to the customer's PC. If the device is in the hosting room or accounting company, the tax control device needs to be mailed, which causes great inconvenience in use. Summary of the invention

[0009] The purpose of the present invention is to provide a standard, compatible and highly secure digital certificate application method.

[0010] Develop a set of products for remote use of digital certificates, which consists of a digital certificate driver client and a digital certificate remote application server. The digital certificate driver client is installed on the client PC and provides the same digital certificate service as the tax control device. The other end obtains the certificate operation results from the digital certificate application server through the cloud server. The digital certificate server is installed in the U180 and can communicate with the digital certificate data as needed to provide the data required by the digital certificate driver client.

[0011] According to one aspect of the present invention, a method for remotely applying a digital certificate based on a disk group device is provided, the method comprising:

[0012] The local service device obtains an identity authentication request from the user device, and parses the identity authentication request to obtain identification information, identity recognition information and a target device identification of the user device;

[0013] Acquire pre-stored authentication information in an authentication database based on identification information of the user device, verify the identity information of the user device based on the authentication information, and when the identity information of the user device passes the verification, perform face recognition verification on the user of the user device based on the authentication information;

[0014] When the user of the user device passes the face recognition verification, the local business device starts the security client to prompt the security client to start the disk group device through the startup interface, and the disk group device is used to host the tax electronic key, the golden tax disk certificate and the tax control disk certificate;

[0015] The security client determines the target digital certificate that is desired to be remotely applied based on the target device identifier, and sends the target digital certificate and a verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate;

[0016] When it is determined that the target digital certificate has passed the verification, a verification result message indicating that the target digital certificate has passed the verification is sent to the security client and the security server;

[0017] The security client determines the target device to be accessed based on the target device identifier, determines the network interface of the target device provided by the security server, and sends the service request to the corresponding target device via the security server through the network interface of the target device.

[0018] The identification information of the user equipment is a unique identifier that can identify the user equipment.

[0019] The identity identification information includes: user name, password and biometric information.

[0020] The authentication information includes: user name, password, biometric information and face recognition information.

[0021] After the service request is sent to the corresponding target device via the security server through the network interface of the target device, the target device performs service processing based on the service request and notifies the user device of the result of the service processing.

[0022] According to another aspect of the present invention, a system for remotely applying digital certificates based on a disk group device is provided, the system comprising:

[0023] An acquisition unit, which prompts the local service device to acquire an identity authentication request from a user device, and parses the identity authentication request to acquire identification information, identity recognition information and a target device identification of the user device;

[0024] a verification unit, which obtains pre-stored authentication information in an authentication database based on the identification information of the user device, verifies the identity information of the user device based on the authentication information, and performs face recognition verification on the user of the user device based on the authentication information when the identity information of the user device passes the verification;

[0025] A startup unit, when the user of the user device passes the face recognition verification, the local business device starts the security client to prompt the security client to start the disk group device through the startup interface, and the disk group device is used to host the tax electronic key, the golden tax disk certificate and the tax control disk certificate;

[0026] The sending unit prompts the security client to determine the target digital certificate that it wants to apply remotely based on the target device identifier, and sends the target digital certificate and the verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate; when it is determined that the target digital certificate has passed the verification, the verification result message indicating that the target digital certificate has passed the verification is sent to the security client and the security server; the security client determines the target device that it wants to access based on the target device identifier, determines the network interface of the target device provided by the security server, and sends the service request to the corresponding target device via the security server through the network interface of the target device.

[0027] The identification information of the user equipment is a unique identifier that can identify the user equipment.

[0028] The identity identification information includes: user name, password and biometric information.

[0029] The authentication information includes: user name, password, biometric information and face recognition information.

[0030] After the service request is sent to the corresponding target device via the security server through the network interface of the target device, the target device performs service processing based on the service request and notifies the user device of the result of the service processing.

[0031] The key points of the present invention include:

[0032] (1) The application of tax certificates remotely accesses tax control equipment by calling secure client interfaces, national encryption interfaces, CSP interfaces, and pkcs#11 interfaces. At the same time, it supports simultaneous remote use by multiple users, solving problems such as standards, security, convenience, and speed.

[0033] (2) The implementation method uses the function name and function parameters to be transparently transmitted in ciphertext form. The time-consuming operation is performed when the U180 is powered on.

[0034] (3) Use "Security Manager" to authorize and manage U180 tax control devices.

[0035] The beneficial effects of the present invention include:

[0036] The present invention uses U180 to use the tax certificate in the form of a network interface for the value-added tax invoice selection and confirmation platform and paperless office. You only need to install the corresponding certificate driver to use the U180 disk group device to host the tax UKey, Golden Tax Disk and Tax Control Disk certificate functions. If you want to use a tax control device, you can connect the corresponding tax control device through the security manager. It solves the defects of the U180 disk group device and provides value-added services. It is suitable for multiple tax certificate application platforms, thereby promoting the sales of U180 disk group devices and providing a profit point for the company. The key breakthrough of this project is to realize the cloudification of the tax certificate of the U180 disk group device, which brings business opportunities for the transformation of other products. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] A more complete understanding of exemplary embodiments of the present invention may be obtained by referring to the following drawings:

[0038] Figure 1 A flowchart of a method for remotely applying a digital certificate based on a disk group device according to an embodiment of the present invention;

[0039] Figure 2 It is a structural schematic diagram of a system for remotely applying digital certificates based on disk group equipment according to an embodiment of the present invention;

[0040] Figure 3 A schematic diagram of a business process according to an embodiment of the present invention. DETAILED DESCRIPTION

[0041] Figure 1 1 is a flowchart of a method for remotely applying a digital certificate based on a disk group device according to an embodiment of the present invention. The method 100 includes:

[0042] Step 101: A local service device obtains an identity authentication request from a user device, and parses the identity authentication request to obtain identification information, identity recognition information, and a target device identification of the user device.

[0043] Step 102, based on the identification information of the user device, obtain pre-stored authentication information in the authentication database, verify the identity information of the user device based on the authentication information, and when the identity information of the user device passes the verification, perform face recognition verification on the user of the user device based on the authentication information.

[0044] Step 103, when the user of the user device passes the face recognition verification, the local business device starts the security client to prompt the security client to start the disk group device through the startup interface, and the disk group device is used to host the tax electronic key, the golden tax disk certificate and the tax control disk certificate.

[0045] Step 104: the security client determines the target digital certificate to be remotely applied based on the target device identifier, and sends the target digital certificate and a verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate.

[0046] Step 105: When it is determined that the target digital certificate has passed the verification, a verification result message indicating that the target digital certificate has passed the verification is sent to the security client and the security server.

[0047] Step 106 , the security client determines the target device to be accessed based on the target device identifier, determines the network interface of the target device provided by the security server, and sends the service request to the corresponding target device via the security server through the network interface of the target device.

[0048] The identification information of the user device is a unique identifier that can identify the user device. The identification information includes: user name, password and biometric information. The authentication information includes: user name, password, biometric information and face recognition information. After the service request is sent to the corresponding target device via the security server through the network interface of the target device, the target device performs service processing based on the service request and notifies the user device of the result of the service processing.

[0049] Figure 2 2 is a schematic diagram of the structure of a system for remotely applying digital certificates based on disk group devices according to an embodiment of the present invention. The system 200 comprises: an acquisition unit 201 , a verification unit 202 , a start unit 203 and a sending unit 204 .

[0050] The acquisition unit 201 prompts the local service device to acquire an identity authentication request from the user device, and parses the identity authentication request to acquire the identification information, identity recognition information and target device identification of the user device.

[0051] The verification unit 202 obtains pre-stored authentication information in the authentication database based on the identification information of the user device, verifies the identity information of the user device based on the authentication information, and performs face recognition verification on the user of the user device based on the authentication information when the identity information of the user device passes the verification.

[0052] Startup unit 203, when the user of the user device passes the face recognition verification, the local business device starts the security client to prompt the security client to start the disk group device through the startup interface, and the disk group device is used to host the tax electronic key, the golden tax disk certificate and the tax control disk certificate.

[0053] The sending unit 204 prompts the security client to determine the target digital certificate that it wants to apply remotely based on the target device identifier, and sends the target digital certificate and the verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate; when it is determined that the target digital certificate has passed the verification, a verification result message indicating that the target digital certificate has passed the verification is sent to the security client and the security server; the security client determines the target device that it wants to access based on the target device identifier, determines the network interface of the target device provided by the security server, and sends the service request to the corresponding target device via the security server through the network interface of the target device.

[0054] The identification information of the user device is a unique identifier that can identify the user device. The identification information includes: user name, password and biometric information. The authentication information includes: user name, password, biometric information and face recognition information. After the service request is sent to the corresponding target device via the security server through the network interface of the target device, the target device performs service processing based on the service request and notifies the user device of the result of the service processing.

[0055] Figure 3 It is a schematic diagram of the business process according to an embodiment of the present invention. The user logs in through the local web page, and then the Golden Tax Disk is started. The Security Manager client is started through the web interactive library. The Security Manager client opens the Ticket Manager, and then starts the U180 application. Among them, the tax UKey, Golden Tax Disk and Tax Control Disk driver package (U180_SecurityAuth.dll) are hosted by the U180 application. The U180 application can communicate with the Security Manager server. And the Security Manager client can communicate with the Security Manager server.

[0056] The system consists of a digital certificate driver client and a digital certificate remote application server. The digital certificate driver client is installed on the client PC and provides the same digital certificate service as the tax control device. The other end obtains the certificate operation results from the digital certificate application server through the cloud server. The digital certificate server is installed in the U180 and can communicate with the digital certificate data as needed to provide the data required by the digital certificate driver client. The tax certificate application remotely accesses the tax control device by calling the security client interface, national secret interface, CSP interface, and pkcs#11 interface. At the same time, it supports multiple users to use it remotely at the same time. It solves the problems of standards, security, convenience and speed. The implementation method uses the function name and function parameters to be transparently transmitted in ciphertext. Time-consuming operations are performed when the U180 is powered on. Use "Security Manager" to authorize the authorization and management of the U180 tax control device.

Claims

1. A method for remotely applying a digital certificate based on a disk group device, the method comprising: The local service device obtains an identity authentication request from the user device, and parses the identity authentication request to obtain identification information, identity recognition information and a target device identification of the user device; Acquire pre-stored authentication information in an authentication database based on identification information of the user device, verify the identity information of the user device based on the authentication information, and when the identity information of the user device passes the verification, perform face recognition verification on the user of the user device based on the authentication information; When the user of the user device passes the face recognition verification, the local business device starts the security client to prompt the security client to start the disk group device through the startup interface, and the disk group device is used to host the tax electronic key, the golden tax disk certificate and the tax control disk certificate; The security client determines the target digital certificate that is desired to be remotely applied based on the target device identifier, and sends the target digital certificate and a verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate; When it is determined that the target digital certificate has passed the verification, a verification result message indicating that the target digital certificate has passed the verification is sent to the security client and the security server; The security client determines the target device to be accessed based on the target device identifier, determines the network interface of the target device provided by the security server, and sends the service request to the corresponding target device via the security server through the network interface of the target device. 2 . The method according to claim 1 , wherein the identification information of the user equipment is a unique identifier capable of identifying the user equipment.

3. The method according to claim 1, wherein the identity information comprises: Usernames, passwords, and biometric information.

4. The method according to claim 1, wherein the authentication information comprises: Username, password, biometric information, and facial recognition information.

5. According to the method of claim 1, after the service request is sent to the corresponding target device via the security server through the network interface of the target device, the target device performs service processing based on the service request and notifies the user device of the result of the service processing.

6. A system for remotely applying digital certificates based on disk group equipment, the system comprising: An acquisition unit, which prompts the local service device to acquire an identity authentication request from a user device, and parses the identity authentication request to acquire identification information, identity recognition information and a target device identification of the user device; a verification unit, which obtains pre-stored authentication information in an authentication database based on the identification information of the user device, verifies the identity information of the user device based on the authentication information, and performs face recognition verification on the user of the user device based on the authentication information when the identity information of the user device passes the verification; A startup unit, when the user of the user device passes the face recognition verification, the local business device starts the security client to prompt the security client to start the disk group device through the startup interface, and the disk group device is used to host the tax electronic key, the golden tax disk certificate and the tax control disk certificate; The sending unit prompts the security client to determine the target digital certificate that it wants to remotely apply based on the target device identifier, and sends the target digital certificate and the verification request of the target digital certificate to the disk group device, so that the disk group device verifies the target digital certificate; When it is determined that the target digital certificate has passed the verification, a verification result message indicating that the target digital certificate has passed the verification is sent to the security client and the security server; The security client determines the target device to be accessed based on the target device identifier, determines the network interface of the target device provided by the security server, and sends the service request to the corresponding target device via the security server through the network interface of the target device. 7 . The system according to claim 6 , wherein the identification information of the user equipment is a unique identifier capable of identifying the user equipment.

8. The system according to claim 6, wherein the identity information comprises: Usernames, passwords, and biometric information.

9. The system according to claim 6, wherein the authentication information comprises: Username, password, biometric information, and facial recognition information.

10. The system according to claim 6, after sending the service request to the corresponding target device via the security server through the network interface of the target device, the target device performs service processing based on the service request and notifies the user device of the result of the service processing.

Images