Method, device and storage medium for updating digital certificate of electronic signature

Abstract

The application provides a digital certificate updating method, device and storage medium of electronic signature, wherein the method comprises the following steps: automatically detecting whether the digital certificate used by the electronic signature is updated, and when it is detected that the digital certificate used by the electronic signature needs to be updated, generating a public-private key pair, combining object information corresponding to the electronic signature and the public-private key pair to generate a certificate request file, receiving a new digital certificate fed back by an authentication server for the certificate request file, and updating the digital certificate used by the electronic signature by using the new digital certificate. Therefore, without manual access, the automatic application of the digital certificate used by the electronic signature is realized, and the online and automatic updating of the digital certificate is realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computers, and particularly relates to a digital certificate updating method and device for electronic signature, an electronic device and a storage medium. BACKGROUND

[0002] In order to improve the efficiency, currently, electronic signature can be used to perform electronic signature on electronic files such as electronic contracts, settlement sheets, receipt sheets and warehouse entry sheets. In order to improve security, the digital certificate used by the electronic signature usually has a validity period. In the related art, a digital certificate updating request is submitted to a certificate authority (CA) in an artificial manner to obtain an updated digital certificate. Then, the updated digital certificate is provided to an electronic signature service platform. The electronic signature service platform puts the updated digital certificate online, and performs electronic signature on the electronic file based on the updated digital certificate and an electronic seal to be stamped on the electronic file. In this way, the business party needs to wait for the digital certificate provided by the enterprise party to perform electronic signature, which affects the use of online signature business. SUMMARY

[0003] The present application provides a digital certificate updating method and device for electronic signature, an electronic device and a storage medium.

[0004] An embodiment of the present application provides a digital certificate updating method for electronic signature, including: obtaining a digital certificate used by electronic signature, and determining whether the digital certificate used by the electronic signature meets an updating condition; if the digital certificate used by the electronic signature meets the updating condition, obtaining object information corresponding to the electronic signature, and generating a public-private key pair; generating a certificate request file according to the object information and the public-private key pair; sending the certificate request file to an authentication server, and receiving a new digital certificate fed back by the authentication server for the certificate request file; and updating the digital certificate used by the electronic signature by using the new digital certificate.

[0005] In an embodiment of the present application, the generating of the certificate request file according to the object information and the public-private key pair includes: generating certificate request information according to a public key in the public-private key pair and the object information; encrypting the certificate request information according to a private key in the public-private key pair to obtain an encrypted certificate request message; and generating the certificate request file according to the encrypted certificate request message.

[0006] In an embodiment of the present application, the judging whether the digital certificate used by the electronic seal satisfies the updating condition comprises: obtaining a valid time range of the digital certificate; obtaining a current time, and judging whether the current time is within the valid time range; and if the current time is not within the valid time range, determining that the digital certificate used by the electronic seal satisfies the updating condition.

[0007] In an embodiment of the present application, before the obtaining of the valid time range of the digital certificate, the method further comprises: receiving an electronic seal request, wherein the electronic seal request comprises object identification information to be sealed and an electronic file; querying whether the digital certificate used by the electronic seal exists according to the object identification information; if the digital certificate corresponding to the electronic seal exists, performing the step of obtaining the valid time range of the digital certificate; and after the updating of the digital certificate of the electronic seal by the new digital certificate, the method further comprises: performing electronic sealing on the electronic file according to the new digital certificate to obtain a sealed electronic file.

[0008] In an embodiment of the present application, after the receiving of the new digital certificate fed back by the authentication server for the certificate request file, the method further comprises: obtaining a private key in the public key pair; merging the digital certificate and the private key to obtain a digital certificate containing a private key; and the updating of the digital certificate of the electronic seal by the new digital certificate comprises: replacing the digital certificate used by the electronic seal with the digital certificate containing the private key.

[0009] In an embodiment of the present application, the method further comprises: obtaining preset password information; and encrypting the digital certificate containing the private key according to the password information to obtain digital certificate ciphertext.

[0010] The digital certificate updating method of the electronic seal according to the embodiments of the present application automatically detects whether the digital certificate used by the electronic seal needs to be updated, generates a public key pair when detecting that the digital certificate used by the electronic seal needs to be updated, generates a certificate request file in combination with object information corresponding to the electronic seal and the public key pair, receives a new digital certificate fed back by an authentication server for the certificate request file, and updates the digital certificate used by the electronic seal by the new digital certificate. Thus, without manual intervention, the automatic application of the digital certificate used by the electronic seal is realized, and the online and automatic updating of the digital certificate is realized.

[0011] Another aspect of the present application provides an electronic signature digital certificate updating device, comprising: a judging module configured to obtain a digital certificate used by an electronic signature, and judge whether the digital certificate used by the electronic signature meets an updating condition; a first generating module configured to, if the digital certificate used by the electronic signature meets the updating condition, acquire object information corresponding to the electronic signature, and generate a public-private key pair; a second generating module configured to generate a certificate request file according to the object information and the public-private key pair; a communication module configured to send the certificate request file to an authentication server, and receive a new digital certificate fed back by the authentication server in response to the certificate request file; and an updating module configured to update the digital certificate used by the electronic signature by using the new digital certificate.

[0012] In an embodiment of the present application, the second generating module comprises: a first generating unit configured to generate certificate request information according to a public key in the public-private key pair and the object information; an encrypting unit configured to encrypt the certificate request information according to a private key in the public-private key pair to obtain an encrypted certificate request message; and a second generating unit configured to generate the certificate request file according to the encrypted certificate request message.

[0013] In an embodiment of the present application, the judging module comprises: an acquiring unit configured to acquire a valid time range of the digital certificate; and a judging unit configured to acquire a current time, and judge whether the current time is within the valid time range; wherein if the current time is not within the valid time range, it is determined that the digital certificate used by the electronic signature meets the updating condition.

[0014] In an embodiment of the present application, the device further comprises: a receiving module configured to receive an electronic signature request, wherein the electronic signature request comprises object identification information to be stamped and an electronic file; a querying module configured to query whether the digital certificate used by the electronic signature exists according to the object identification information; and an acquiring unit further configured to, if the digital certificate used by the electronic signature exists, perform the step of acquiring the digital certificate used by the electronic signature; and the device further comprises: a stamping module configured to perform electronic signature on the electronic file according to the new digital certificate to obtain a stamped electronic file.

[0015] In an embodiment of the present application, the device further comprises: a first acquiring module configured to acquire a private key in the public-private key pair; and a merging module configured to merge the digital certificate and the private key to convert into a digital certificate containing the private key; and the updating module is specifically configured to update the digital certificate used by the electronic signature by using the new digital certificate.

[0016] In an embodiment of the present application, the device further comprises a second obtaining module configured to obtain preset password information; and an encryption module configured to encrypt the digital certificate containing the private key according to the password information to obtain a digital certificate ciphertext.

[0017] The digital certificate updating device for electronic signature according to the embodiments of the present application automatically detects whether the digital certificate used by the electronic signature needs to be updated, and when it is detected that the digital certificate used by the electronic signature needs to be updated, generates a public-private key pair, generates a certificate request file in combination with the object information corresponding to the electronic signature and the public-private key pair, receives a new digital certificate fed back by an authentication server in response to the certificate request file, and updates the digital certificate used by the electronic signature by using the new digital certificate. Thus, without manual intervention, the automatic application of the digital certificate used by the electronic signature is realized, and the online and automatic updating of the digital certificate is realized.

[0018] In another aspect, the embodiments of the present application provide an electronic device, which comprises a memory and a processor, and the memory stores computer instructions which, when executed by the processor, implement the digital certificate updating method for electronic signature according to the embodiments of the present application.

[0019] In another aspect, the embodiments of the present application provide a non-transitory computer readable storage medium storing computer instructions, and the computer instructions are used to cause a computer to execute the digital certificate updating method for electronic signature according to the embodiments of the present application.

[0020] In another aspect, the embodiments of the present application provide a computer program product, and when an instruction processor in the computer program product executes, the digital certificate updating method for electronic signature according to the embodiments of the present application is implemented.

[0021] The other effects of the above optional mode will be described in combination with specific embodiments below. BRIEF DESCRIPTION OF DRAWINGS

[0022] The accompanying drawings are used to better understand the present application, but do not limit the present application. Among them:

[0023] Figure 1 FIG. 1 is a flowchart of a digital certificate updating method for electronic signature according to an embodiment of the present application.

[0024] Figure 2 FIG. 3 is a detailed flowchart of generating a certificate request file according to object information and a public-private key pair.

[0025] Figure 3 FIG. 4 is a flowchart of a digital certificate updating method for electronic signature according to another embodiment of the present application.

[0026] Figure 4 is a flowchart of an electronic signature digital certificate updating method according to an embodiment of the present application.

[0027] Figure 5 is a structural diagram of an electronic signature digital certificate updating device according to an embodiment of the present application.

[0028] Figure 6 is a structural diagram of an electronic signature digital certificate updating device according to another embodiment of the present application.

[0029] Figure 7 is a block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0030] Embodiments of the present application are described in detail below with reference to the accompanying drawings. The same or similar components have the same reference numbers throughout the drawings and a repeated description is omitted. Embodiments described below are examples for explaining the present application and are not intended to limit the present application.

[0031] An electronic signature digital certificate updating method, device, electronic device and storage medium according to embodiments of the present application are described below with reference to the accompanying drawings.

[0032] Figure 1 is a flowchart of an electronic signature digital certificate updating method according to an embodiment of the present application. It should be noted that the electronic signature digital certificate updating method provided in this embodiment is executed by an electronic signature digital certificate updating device, which has a function of updating a digital certificate of an electronic signature. In addition, the electronic signature digital certificate updating device can also have a function of electronically signing an electronic file. The electronic signature digital certificate updating device can be implemented by software and / or hardware. In this embodiment, the electronic signature digital certificate updating device can be configured in an electronic device. The electronic device in this embodiment can include a terminal device and a server, and the like. The electronic device is not limited in this embodiment.

[0033] As shown in Figure 1 , the electronic signature digital certificate updating method can include the following steps.

[0034] In step 101, a digital certificate used by an electronic signature is obtained, and it is determined whether the digital certificate used by the electronic signature meets an updating condition.

[0035] It can be understood that the above update condition is preset, and in some embodiments, the update condition is whether the remaining time of the validity period of the digital certificate is reached a preset threshold. In other embodiments, the update condition can be whether the current time is within the effective time range of the digital certificate used by the electronic seal. In other embodiments, the update condition can also be whether the use duration of the digital certificate reaches a preset time threshold, wherein the preset time threshold is determined based on the effective duration of the digital certificate of the electronic seal, for example, the preset time threshold can be 99% of the effective duration.

[0036] It can be understood that in the process of electronically sealing the corresponding electronic file, not only the electronic file, the sealing position of the electronic file, the electronic seal to be sealed of the electronic file, but also the corresponding digital certificate are needed. After obtaining the electronic seal, the electronic file, the sealing position of the electronic file, and the corresponding digital certificate, the electronic file can be electronically sealed according to the electronic seal, the sealing position, and the corresponding digital certificate to obtain the sealed electronic file.

[0037] Step 102, if the digital certificate used by the electronic seal meets the update condition, the object information corresponding to the electronic seal is obtained, and a public-private key pair is generated.

[0038] It can be understood that the digital certificate used in the process of the electronic seal is usually corresponding to the object information.

[0039] In an embodiment of the present application, one possible implementation of the above judging whether the digital certificate used by the electronic seal meets the update condition is: obtaining the effective time range of the digital certificate; obtaining the current time, and judging whether the current time is within the effective time range; wherein if the current time is not within the effective time range, it is determined that the digital certificate used by the electronic seal meets the update condition. Thus, the effective time range of the digital certificate used by the electronic seal can be combined to accurately determine whether the digital certificate is expired, and if it is expired, it is determined that the digital certificate used by the electronic seal meets the update condition.

[0040] The object information can include object name information, object identification information, etc.

[0041] In some embodiments, the object information can include user identification information and user name information. In other embodiments, the object can be any organization, and the object information can include organization identification information, organization name information, etc., for example, the object can be any school, enterprise, hospital, etc.

[0042] As an example, in the case where the object is an enterprise, the object information can be enterprise name information, enterprise identification information, etc. The enterprise identification information can include, but is not limited to, a unified social credit code, an organization code, a business license number, etc., and the embodiments are not limited in this regard.

[0043] In an embodiment of the present application, in order to improve security, the electronic seal digital certificate updating apparatus can generate a public-private key pair through a preset key pair generation algorithm. The public-private key pair includes a public key and a private key.

[0044] In some embodiments, the key pair generation algorithm can be an RSA algorithm, which is a key pair algorithm. In other embodiments, the key pair generation algorithm can be an SM2 algorithm. It can be understood that the RSA algorithm and the SM2 algorithm are examples of key pair generation algorithms, and the key pair generation algorithm of the embodiments is not limited in this regard. In actual applications, the key pair generation algorithm used can be selected according to actual needs, and the embodiments are not limited in this regard.

[0045] Step 103: generating a certificate request file according to the object information and the public-private key pair.

[0046] Step 104: sending the certificate request file to an authentication server and receiving a new digital certificate fed back by the authentication server for the certificate request file.

[0047] The certificate request file can be in a PKCS#10 (Public-Key Cryptography Standards) format.

[0048] The authentication server refers to a server corresponding to a certification authority. The authentication server can generate a corresponding digital certificate based on the certificate request file and return the digital certificate to the electronic seal digital certificate updating apparatus.

[0049] An example implementation of the authentication server generating a digital certificate based on a certificate request file is that the authentication server obtains the corresponding public key (the public key in the public-private key pair) provided by the electronic seal digital certificate updating apparatus, decrypts the file content in the certificate request file to obtain a decrypted authentication request message, and generates a corresponding digital certificate according to the public key in the authentication request message and the object information.

[0050] Step 105: updating the digital certificate used by the electronic seal with the new digital certificate.

[0051] The digital certificate updating method of the electronic seal of the embodiment of the present application automatically detects whether the digital certificate used by the electronic seal is updated, and when it is detected that the digital certificate used by the electronic seal needs to be updated, generates a public-private key pair, generates a certificate request file in combination with the object information corresponding to the electronic seal and the public-private key pair, receives the new digital certificate fed back by the authentication server for the certificate request file, and updates the digital certificate used by the electronic seal by using the new digital certificate. Thus, without manual access, the automatic application of the digital certificate used by the electronic seal is realized, and the online and automatic updating of the digital certificate is realized.

[0052] In an embodiment of the present application, in order to improve the security of the public key and the object information and avoid the object information and the public key being leaked in the process of communication, the above-mentioned possible implementation manner of generating the certificate request file according to the object information and the public-private key pair can include: Figure 2

[0053] Step 201: generating certificate request information according to the public key in the public-private key pair and the object information.

[0054] As an exemplary implementation, the PKCS#10 certificate request message can be generated according to the public key in the public-private key pair and the object information.

[0055] Step 202: encrypting the certificate request information according to the private key in the public-private key pair to obtain an encrypted certificate request message.

[0056] Step 203: generating a certificate request file according to the encrypted certificate request message.

[0057] Based on the above-mentioned embodiment, in some embodiments, in order to improve the security of the electronic seal, before the digital certificate used by the electronic seal is updated by using the new digital certificate, the method further includes: obtaining the private key in the public-private key pair, and then merging the digital certificate and the private key to convert the digital certificate into a digital certificate containing the private key. Correspondingly, the digital certificate used by the electronic seal is replaced by the digital certificate containing the private key.

[0058] The digital certificate containing the private key can be a PKCS#12 (The Public-Key Cryptography Standards, public key cryptography standard) format certificate.

[0059] In an embodiment of the present application, in order to improve the security of the digital certificate containing the private key in the updating device, preset password information can be obtained; and the digital certificate containing the private key is encrypted according to the password information to obtain digital certificate ciphertext.

[0060] ​The preset password information is preset by an enterprise side corresponding to the electronic seal.

[0061] Figure 3 FIG. 4 is a flowchart of an electronic seal digital certificate updating method according to another embodiment of the present application. The embodiment is a further refinement or optimization of the above-mentioned embodiment.

[0062] As shown in FIG. 4, the electronic seal digital certificate updating method can include the following steps. Figure 3

[0063] Step 301, receiving an electronic seal request, wherein the electronic seal request includes object identification information and an electronic file to be sealed.

[0064] In some embodiments, the object identification information is user identification information. In other embodiments, the object information can be organization identification information, for example, enterprise identification information.

[0065] The electronic seal request further includes organization name information to be sealed, enterprise seal image, and seal position information.

[0066] Step 302, querying whether a digital certificate used by the electronic seal exists according to the object identification information, if yes, executing step 303, and if no, executing step 305.

[0067] That is, before performing the electronic seal on the electronic file, the object identification information in the electronic seal request can be combined to determine whether the digital certificate required for performing the electronic seal exists in the electronic seal device.

[0068] Step 303, obtaining the digital certificate used by the electronic seal and obtaining the validity time range of the digital certificate.

[0069] Step 304, obtaining the current time and judging whether the current time is within the validity time range, if no, executing step 305, and if yes, executing step 310.

[0070] Step 305, obtaining the object information corresponding to the electronic seal and generating a public-private key pair.

[0071] Step 306, generating a certificate request file according to the object information and the public-private key pair.

[0072] Step 307, sending the certificate request file to an authentication server and receiving a new digital certificate fed back by the authentication server for the certificate request file.

[0073] Step 308, updating the digital certificate used by the electronic seal by using the new digital certificate.

[0074] ​Step 309, according to the new digital certificate, the electronic file is electronically signed to obtain the signed electronic file.

[0075] Specifically, the electronic file can be signed according to the new digital certificate, the stamping position corresponding to the electronic file and the electronic seal to be stamped, to obtain the signed electronic file. It can be understood that the appearance of the electronic seal corresponding to the enterprise and the physical seal is the same.

[0076] Step 310, according to the digital certificate, the electronic file is electronically signed to obtain the signed electronic file.

[0077] That is, according to the electronic signature request, the stamping position of the electronic file can be determined, and according to the electronic signature request, the electronic seal corresponding to the object identification information can be determined, and the digital certificate used for electronic signature is in the valid period, and the electronic file can be directly stamped according to the electronic seal, the digital certificate and the stamping position, so that the electronic file after stamping.

[0078] In order to make the skilled in the art can clearly understand the following Figure 4 The method of this embodiment is further described. As Figure 4 As shown, it can include:

[0079] 1, business calls JAR package (Java Archive, Java archive) in electronic signature interface, pass in the required interface parameters.

[0080] Specifically, the business prepares the necessary parameters for calling the electronic signature interface, and then the business calls the electronic signature interface in the JAR package.

[0081] Among them, the necessary parameters can include the enterprise name to be stamped, the enterprise unique identification (unified social credit code, organization code and business license number, etc.), enterprise seal picture, electronic file to be stamped, stamping position and other information.

[0082] Among them, JAR package is a JAVA executable package. Among them, the JAR package in the embodiment can include but not limited to the following functions: electronic signature of electronic file and updating the function of digital certificate used for electronic signature.

[0083] 2, AR package receives the information passed in by the business, according to the enterprise name and enterprise unique identification, to find out whether there is a corresponding digital certificate, if there is no corresponding digital certificate or the digital certificate has expired, execute the application digital certificate process, get a valid digital certificate. If there is a valid digital certificate, the normal electronic signature process can be executed.

[0084] 3, application number certificate process. Among them, the specific process of the number certificate process is:

[0085] 31, create a new public-private key pair.

[0086] 32, create PKCS#10 according to public-private key pair, object information, etc.

[0087] 33, create a certificate request file CSR (Cerificate Signing Request) according to PKCS#10, timestamp, etc.

[0088] 34, JAR package applies for digital certificate through public network according to CA requirements.

[0089] 4, after receiving the digital certificate returned by the CA institution, the JAR saves the private key and public key certificate in a proper way.

[0090] In the embodiment, in order to improve the security of the digital certificate and avoid the leakage of sensitive data of the digital certificate, the private key certificate (private key digital certificate) can be encrypted by a preset password to obtain a certificate ciphertext.

[0091] Correspondingly, after obtaining the public key certificate and the private key certificate, in the case of needing to perform electronic signature on the electronic file, the electronic seal of the corresponding enterprise can be obtained, and the electronic file is processed by electronic signature by using the above-mentioned private key certificate and the electronic seal, so as to obtain the electronic file processed by signature.

[0092] Corresponding to the electronic signature digital certificate updating method provided by the above-mentioned several embodiments, an embodiment of the application further provides an electronic signature digital certificate updating device. Since the electronic signature digital certificate updating device provided by the embodiment of the application corresponds to the electronic signature digital certificate updating method provided by the above-mentioned several embodiments, the implementation mode of the electronic signature digital certificate updating method is also applicable to the electronic signature digital certificate updating device provided by the embodiment of the application. In the embodiment, it will not be described in detail.

[0093] Figure 5 It is a structure schematic diagram of the electronic signature digital certificate updating device according to an embodiment of the application.

[0094] As Figure 5 shown, the electronic signature digital certificate updating device 500 includes a judgment module 501, a first generation module 502, a second generation module 503, a communication module 504, and an updating module 505.

[0095] The judgment module 501 is configured to obtain the digital certificate used by the electronic signature, and judge whether the digital certificate used by the electronic signature meets the updating condition.

[0096] The first generating module 502 is configured to acquire object information corresponding to the electronic seal and generate a public-private key pair if the digital certificate used by the electronic seal meets the updating condition.

[0097] The second generating module 503 is configured to generate a certificate request file according to the object information and the public-private key pair.

[0098] The communication module 504 is configured to send the certificate request file to an authentication server and receive a new digital certificate fed back by the authentication server for the certificate request file.

[0099] The updating module 505 is configured to update the digital certificate used by the electronic seal with the new digital certificate.

[0100] In an embodiment of the present application, based on the device embodiment shown in Figure 5 As shown in the device embodiment shown in Figure 6 The second generating module 503 comprises:

[0101] The first generating unit 5031 is configured to generate certificate request information according to the public key in the public-private key pair and the object information.

[0102] The encryption unit 5032 is configured to encrypt the certificate request information according to the private key in the public-private key pair to obtain an encrypted certificate request message.

[0103] The second generating unit 5033 is configured to generate the certificate request file according to the encrypted certificate request message.

[0104] In an embodiment of the present application, the judging module 501 comprises:

[0105] The acquiring unit 5011 is configured to acquire a valid time range of the digital certificate.

[0106] The judging unit 5012 is configured to acquire a current time and judge whether the current time is within the valid time range.

[0107] If the current time is not within the valid time range, it is determined that the digital certificate used by the electronic seal meets the updating condition.

[0108] In an embodiment of the present application, the device further comprises:

[0109] The receiving module 506 is configured to receive an electronic seal request, wherein the electronic seal request comprises object identification information to be sealed and an electronic file.

[0110] The querying module 507 is configured to query whether there is a digital certificate used by the electronic seal according to the object identification information.

[0111] The acquisition unit 5011 is further configured to, if there is a digital certificate used by the electronic signature, acquire the digital certificate used by the electronic signature.

[0112] In an embodiment of the present application, as shown in Figure 6 the device further comprises:

[0113] The signature module 508 is configured to perform electronic signature on the electronic file according to the new digital certificate to obtain a signed electronic file.

[0114] In an embodiment of the present application, as shown in Figure 6 the device further comprises:

[0115] The first acquisition module 509 is configured to acquire the private key in the public-private key pair.

[0116] The merging module 510 is configured to merge the digital certificate and the private key to convert into a digital certificate containing the private key.

[0117] The updating module 505 is specifically configured to update the digital certificate used by the electronic signature by using the new digital certificate.

[0118] In an embodiment of the present application, as shown in Figure 6 the device further comprises:

[0119] The second acquisition module 511 is configured to acquire preset password information.

[0120] The encryption module 512 is configured to encrypt the digital certificate containing the private key according to the password information to obtain a digital certificate ciphertext.

[0121] The digital certificate updating device for electronic signature of the embodiment of the present application automatically detects whether the digital certificate used by the electronic signature needs to be updated, and when it is detected that the digital certificate used by the electronic signature needs to be updated, generates a public-private key pair, combines object information corresponding to the electronic signature and the public-private key pair to generate a certificate request file, receives a new digital certificate fed back by an authentication server for the certificate request file, and updates the digital certificate used by the electronic signature by using the new digital certificate. Thus, without manual access, the automatic application of the digital certificate used by the electronic signature is realized, and the online and automatic updating of the digital certificate is realized.

[0122] According to the embodiments of the present application, the present application further provides an electronic device and a readable storage medium.

[0123] As shown in Figure 7 is a block diagram of an electronic device according to an embodiment of the present application.

[0124] As shown in Figure 7As shown, the electronic device includes:

[0125] The memory 701, the processor 702 and the computer instructions stored in the memory 701 and executable on the processor 702.

[0126] The processor 702 implements the electronic signature digital certificate updating method provided in the above embodiments when executing the instructions.

[0127] Further, the electronic device further includes:

[0128] The communication interface 703 is used for communication between the memory 701 and the processor 702.

[0129] The memory 701 is used for storing the computer instructions executable on the processor 702.

[0130] The memory 701 can include a high-speed RAM memory, and can also include a non-volatile memory, for example, at least one disk memory.

[0131] The processor 702 is used for implementing the electronic signature digital certificate updating method of the above embodiments when executing the program.

[0132] If the memory 701, the processor 702 and the communication interface 703 are independently implemented, the communication interface 703, the memory 701 and the processor 702 can be connected to each other through a bus and complete communication between each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, Figure 7 In the figure, only one thick line is used to represent, but it does not mean that there is only one bus or one type of bus.

[0133] Optionally, in specific implementation, if the memory 701, the processor 702 and the communication interface 703 are integrated on a chip, the memory 701, the processor 702 and the communication interface 703 can complete communication between each other through an internal interface.

[0134] The processor 702 can be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or a plurality of integrated circuits configured to implement one or more embodiments of the application.

[0135] The application also provides a computer program product, which, when executed by an instruction processor, implements the method for updating the digital certificate of the electronic signature according to the embodiments of the application.

[0136] In the description of the specification, the description of the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the application. In the specification, the illustrative description of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any appropriate manner in any one or more embodiments or examples. In addition, the person skilled in the art can combine and combine the different embodiments or examples described in the specification and the features of the different embodiments or examples without contradiction and combination.

[0137] In addition, the terms "first", "second" are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include at least one of the features. In the description of the application, the meaning of "multiple" is at least two, for example, two, three, etc., unless otherwise specifically limited.

[0138] Any process or method descriptions in flow charts or otherwise described herein can be understood as representing code modules, segments, or portions of code that include one or more executable instructions for implementing the specified logic functions or processes, and the preferred embodiments of the application include additional implementations in which the order of execution or the functions themselves can be changed, including according to the intended function, by running in substantially simultaneous with, or in reverse order, which should be understood by those skilled in the art of the technical field of the embodiments of the application.

[0139] The logic and / or steps represented in the flowcharts and / or described herein, for example, can be considered as a sequence of instructions to implement logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, apparatus, or device, such as a computer-based system, processor- based system, or other system that can fetch the instructions from the instruction execution system, apparatus, or device and execute the instructions. For purposes of this specification, a "computer-readable medium" can be any apparatus that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device. The computer-readable medium can be a computer- readable storage medium or a computer-readable signal medium. The computer- readable storage medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer-readable storage medium include the following: an electrical connection having one or more wires (electronic), a portable computer diskette (magnetic), a RAM (random access memory), a ROM (read-only memory), an EPROM (erasable programmable ROM), an EEPROM (electrically erasable programmable ROM), and a portable compact disc read-only memory (CD-ROM) (optical). In addition, the computer-readable medium can even be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, for example, via the optical scanner of a device or device or via the acoustical scanning of another device, and then processed in an electronic manner, for example, by an electronic reading device or device, to generate the program, and then stored in a computer memory.

[0140] It should be understood that aspects of the application can be implemented in hardware, software, firmware or combinations thereof. In the above embodiments, the various steps or methods can be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. As such, if implemented in hardware, the various steps or methods can be implemented in any one or combination of the following technologies, which are all well known in the art: discrete logic circuitry having logic gates for implementing logic functions upon data signals, application specific integrated circuits having appropriate combinational logic gates, programmable gate arrays (PGA), field programmable gate arrays (FPGA), and so forth.

[0141] Those of skill in the art would understand that information and signals can be represented using any of a variety of technologies and techniques. For example, data, instructions, commands, information, signals, bits, symbols, and chips that can be referenced throughout the above description can be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields or particles, or any combination thereof.

[0142] In addition, each of the functional units in the various embodiments of the present application can be integrated in one processing module, or each of the units can be physically present separately, or two or more units can be integrated in one module. The integrated module can be realized in the form of hardware or in the form of a software functional module. When the integrated module is realized in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer readable storage medium.

[0143] The storage medium mentioned above can be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it should be understood that the above embodiments are exemplary and should not be construed as limiting the present application, and those skilled in the art can make changes, modifications, replacements and variations to the above embodiments within the scope of the present application.

Claims

1. An automatic updating method of a digital certificate of an electronic signature, characterized by, The method comprises the following steps: receiving an electronic seal request, wherein the electronic seal request comprises object identification information to be sealed; querying whether a digital certificate used by an electronic seal exists according to the object identification information; if the digital certificate used by the electronic seal exists, obtaining the digital certificate used by the electronic seal, and judging whether the digital certificate used by the electronic seal meets an update condition; if the digital certificate used by the electronic seal meets the update condition or the digital certificate used by the electronic seal does not exist, obtaining object information corresponding to the electronic seal, and generating a public-private key pair; generating certificate request information according to a public key in the public-private key pair and the object information, encrypting the certificate request information according to a private key in the public-private key pair, and generating a certificate request file according to the encrypted certificate request information; sending the certificate request file to an authentication server, and receiving a new digital certificate fed back by the authentication server for the certificate request file; after receiving the new digital certificate fed back by the authentication server for the certificate request file, obtaining the private key in the public-private key pair; merging the new digital certificate and the private key to obtain a digital certificate containing the private key; obtaining preset password information; encrypting the digital certificate containing the private key according to the password information to obtain digital certificate ciphertext; updating the digital certificate used by the electronic seal by using the digital certificate ciphertext.

2. The method of claim 1, wherein, The judgment of whether the digital certificate used by the electronic seal meets the update condition comprises the following steps: obtaining a valid time range of the digital certificate; obtaining a current time, and judging whether the current time is within the valid time range; if the current time is not within the valid time range, it is determined that the digital certificate used by the electronic seal meets the update condition.

3. The method of claim 1, wherein, The electronic seal request further comprises an electronic file to be sealed. After the updating of the digital certificate used by the electronic seal by using the new digital certificate, the method further comprises the following steps: performing electronic sealing on the electronic file according to the new digital certificate to obtain a sealed electronic file.

4. An automatic digital certificate update device for electronic signatures, characterized in that, The device comprises the following modules: a receiving module, configured to receive an electronic seal request, wherein the electronic seal request comprises object identification information to be sealed and an electronic file; a querying module, configured to query whether a digital certificate used by an electronic seal exists according to the object identification information; a judging module, configured to, if the digital certificate used by the electronic seal exists or the digital certificate used by the electronic seal does not exist, obtain the digital certificate used by the electronic seal, and judge whether the digital certificate used by the electronic seal meets an update condition; a first generating module, configured to, if the digital certificate used by the electronic seal meets the update condition, obtain object information corresponding to the electronic seal, and generate a public-private key pair; The second generating module is configured to generate certificate request information according to the public key in the public-private key pair and the object information, encrypt the certificate request information according to the private key in the public-private key pair, and generate a certificate request file according to the encrypted certificate request information; The communication module is configured to send the certificate request file to an authentication server and receive a new digital certificate fed back by the authentication server for the certificate request file; The first obtaining module is configured to obtain the private key in the public-private key pair after receiving the new digital certificate fed back by the authentication server for the certificate request file; The merging module is configured to merge the new digital certificate and the private key to obtain a digital certificate containing the private key; The second obtaining module is configured to obtain preset password information; The encryption module is configured to encrypt the digital certificate containing the private key according to the password information to obtain a digital certificate ciphertext. The updating module is configured to update the digital certificate used by the electronic seal by using the digital certificate ciphertext.

5. The apparatus of claim 4, wherein, The judging module includes: The obtaining unit is configured to obtain a valid time range of the digital certificate; The judging unit is configured to obtain a current time and judge whether the current time is within the valid time range; If the current time is not within the valid time range, it is determined that the digital certificate used by the electronic seal meets an updating condition.

6. The apparatus of claim 4, wherein, The electronic seal request further includes an electronic file to be sealed. The device further includes: The sealing module is configured to, after updating the digital certificate used by the electronic seal by using the new digital certificate, perform electronic sealing on the electronic file according to the new digital certificate to obtain a sealed electronic file.

7. An electronic device, comprising: A memory and a processor; The memory stores computer instructions, and when the computer instructions are executed by the processor, the electronic seal digital certificate automatic updating method in any one of claims 1-3 is implemented.

8. A non-transitory computer-readable storage medium having stored thereon computer instructions, wherein, The computer instructions are used to enable the computer to perform the electronic seal digital certificate automatic updating method in any one of claims 1-3.

Images