Design method of digital certificate issuing system, terminal device and storage medium

Abstract

The application discloses a kind of digital certificate issuing system design method, terminal equipment and storage medium, the digital certificate issuing system design method includes: output application information collection page, and application information is collected according to the application information collection page;The application information is sent to server, wherein, after the server receives the application information, digital certificate is generated based on the application information, and after the digital certificate is encapsulated into response body, it is fed back to the issuing terminal;The response body is received, and after the digital certificate is parsed by safe reading and writing plug-in, it is written into UKEY equipment.The user interface of digital certificate and issuing logic are decoupled, user interface is only used to collect application information and the display of data, and the issuing logic of digital certificate is handled by server, and then the business logic of user interface and server can be maintained and updated separately, so as to reduce the maintenance cost of digital certificate issuing system.

Description

Technical Field

[0001] This application relates to the field of data processing technology, and in particular to a design method, terminal device and storage medium for a digital certificate issuance system. Background Technology

[0002] A digital certificate is a digital authentication document that identifies the parties involved in internet communication. People can use it to verify each other's identity online. Digital certificates encrypt or decrypt information and data exchanged on computer networks, ensuring the integrity and security of information and data. Currently, banks issue digital certificates locally on the client side. By integrating a front-end operation page and the read / write functionality of a USB key (a hardware device with a USB interface) required for certificate issuance into the client, tellers operate the system, entering personal information and generating the digital certificate based on the customer's provided information. However, this issuance method integrates the user interface and the business logic of digital certificate issuance on the client side. Maintaining and updating the client requires repackaging the entire client system into a new version for download and installation—from major functional integrations to minor adjustments to front-end page elements—overwriting the old local version and increasing client maintenance costs.

[0003] The above content is only used to help understand the technical solution of the present invention and does not represent an admission that the above content is prior art. Summary of the Invention

[0004] This application provides a design method, terminal device, and computer-readable storage medium for a digital certificate issuance system, aiming to solve the technical problem of high client maintenance costs caused by local client-side issuance of digital certificates.

[0005] To achieve the above objectives, embodiments of the present invention provide a design method for a digital certificate issuance system, the design method of which includes the following:

[0006] Output the application information collection page, and collect application information based on the application information collection page;

[0007] The application information is sent to the server. After receiving the application information, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal.

[0008] The system receives the response body, parses the digital certificate using a secure read / write plugin, and then writes it to the UKEY device.

[0009] Optionally, the step of outputting the application information collection page and collecting application information according to the application information collection page includes:

[0010] Upon receiving the confirmation instruction from the application information collection page, obtain the verification function corresponding to the application information;

[0011] The application information is verified based on the verification function, and the verification result is determined based on the return value of the verification function.

[0012] The corresponding target action is determined based on the verification result and the target action is executed. The target action includes sending the application information to the server. When the target action is sending the application information to the server, it indicates that the application information has passed the verification.

[0013] Optionally, the step of determining the corresponding target action based on the verification result and executing the target action includes:

[0014] Input the verification result into the corresponding position in the verification vector formula to obtain the verification vector result;

[0015] Obtain the target action associated with the verification vector result, and execute the target action.

[0016] Optionally, the step of sending the application information to the server includes:

[0017] The application information is encrypted using an encryption algorithm;

[0018] The encrypted application information is sent to the server. When the server receives the encrypted application information, it decrypts the encrypted application information to obtain the application information, generates a digital certificate based on the application information, encrypts the digital certificate using the encryption algorithm, and encapsulates the encrypted digital certificate into the response body before sending it back to the issuing terminal.

[0019] Optionally, the step of receiving the response body, parsing the digital certificate through a secure read / write plugin, and then writing it to the UKEY device includes:

[0020] Based on the secure read / write plugin, the basic UKEY information of the UKEY device is read;

[0021] The UKEY basic information is sent to the server, wherein when the server receives the UKEY basic information, it performs device authentication on the UKEY device based on the UKEY basic information and feeds back the device authentication result to the issuing terminal;

[0022] Upon receiving the device authentication result and determining that the device authentication is successful based on the device authentication result, the digital certificate is written to the UKEY device.

[0023] Optionally, after receiving the response body and writing it to the UKEY device by parsing the digital certificate through a secure read / write plugin, the process includes:

[0024] Upon receiving a print request for the digital certificate, the digital certificate is retrieved from the UKEY device based on the secure read / write plugin and the print request.

[0025] Based on the secure read / write plugin, the printing parameters and printing template corresponding to the digital certificate are read;

[0026] According to the printing parameters of the digital certificate, the certificate information in the digital certificate is filled into the corresponding position of the printing template to generate the printed text of the digital certificate;

[0027] The text to be printed is sent to the printer for printing.

[0028] Optionally, before the step of obtaining the digital certificate from the UKEY device based on the secure read / write plugin according to the print request when the digital certificate is received, the method further includes:

[0029] Upon receiving a print preview request for the digital certificate, obtain the print preview template and display the print preview template on the print preview page;

[0030] Upon receiving a print request from the digital certificate, obtain the print preview parameters set on the print preview page, and replace the print preview parameters with the print parameters;

[0031] The step of filling the certificate information in the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate is performed.

[0032] Optionally, the step of filling the certificate information from the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate further includes:

[0033] Obtain each information identifier from the certificate information;

[0034] Match the printing parameters and the information identifier to determine the information content corresponding to the information identifier and its target position in the printing template;

[0035] The information content is filled into the target location to generate the printed text of the digital certificate.

[0036] In addition, to achieve the above objectives, the present invention also provides a terminal device, the terminal device comprising: a memory, a processor, and a design program for a digital certificate issuance system stored in the memory and executable on the processor, wherein when the design program for the digital certificate issuance system is executed by the processor, it implements the steps of the design method for the digital certificate issuance system as described above.

[0037] In addition, to achieve the above objectives, the present invention also provides a computer-readable storage medium storing a design program for a digital certificate issuance system, wherein the design program for the digital certificate issuance system, when executed by a processor, implements the steps of the design method for the digital certificate issuance system as described above.

[0038] This invention discloses a design method for a digital certificate issuance system. A terminal device and a computer-readable storage medium are used. The system outputs an application information collection page, collects application information based on this page, and then sends the application information to a server. Upon receiving the application information, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal. The issuing terminal receives the response body, parses the digital certificate using a secure read / write plugin, and writes it to a U-key device. By decoupling the user interface and issuance logic of the digital certificate—the user interface is only used for collecting application information and displaying data, while the issuance logic is handled by the server—the user interface and server business logic can be maintained and updated independently, thereby reducing the maintenance cost of the digital certificate issuance system. Attached Figure Description

[0039] Figure 1 This is a flowchart illustrating an embodiment of the design method for the digital certificate issuance system of the present invention;

[0040] Figure 2 This is an architecture diagram of the digital certificate issuance system involved in the present invention;

[0041] Figure 3 This is a detailed flowchart of step S10 in the second embodiment of the design method of the digital certificate issuance system of the present invention;

[0042] Figure 4 This is a further detailed flowchart of step S30 in the third embodiment of the design method of the digital certificate issuance system of the present invention;

[0043] Figure 5 This is a schematic diagram of the terminal structure of the hardware operating environment involved in the embodiments of the present invention.

[0044] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0045] It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0046] In related technologies, banks typically issue digital certificates locally on the client-side. This involves integrating a front-end interface and the read / write functionality of a USB key (a hardware device with a USB interface) into the client. During the digital certificate issuance process, a teller performs the operation, entering the customer's personal information and generating the digital certificate. However, this method integrates the user interface and the business logic of digital certificate issuance on the client. Maintaining and updating the client, from major functional integrations to minor adjustments to front-end elements, requires repackaging the entire client system into a new version, downloading and installing it, thus overwriting the old local version and increasing the client's maintenance costs.

[0047] To address the aforementioned deficiencies in related technologies, this invention proposes a design method for a digital certificate issuance system, the main steps of which include the following:

[0048] The system outputs an application information collection page, collects application information from this page, and then sends the information to the server. Upon receiving the application information, the server generates a digital certificate, encapsulates it into a response body, and sends it back to the issuing terminal. The issuing terminal receives the response body, parses the digital certificate using a secure read / write plugin, and writes it to the U-Key device. By decoupling the user interface and issuing logic of the digital certificate—the user interface is only used for collecting application information and displaying data, while the server handles the issuing logic—the system can maintain and update both the user interface and the server's business logic independently, thus reducing maintenance costs.

[0049] To better understand the above technical solutions, exemplary embodiments of this application will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of this application are shown in the drawings, it should be understood that this application can be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of this application and to fully convey the scope of this application to those skilled in the art.

[0050] Reference Figure 1 In one embodiment of the design method for the digital certificate issuance system of the present invention, the design method for the digital certificate issuance system includes the following steps:

[0051] Step S10: Output the application information collection page and collect application information according to the application information collection page;

[0052] In this embodiment, the design method of the digital certificate issuance system provided by the present invention is applied to the issuance terminal. When issuing a digital certificate, authentication is performed by logging into the issuance terminal. After successful login, the user can select the corresponding service according to the terminal's page navigation, such as digital certificate issuance, digital certificate query, digital certificate issuance processing, digital certificate issuance review, digital certificate invalidation, digital certificate download, and digital certificate printing. After selecting the corresponding service, information is collected through a corresponding page so that the server can process the service based on the collected information. When issuing a digital certificate, clicking the digital certificate issuance option on the issuance terminal triggers a digital certificate issuance event, which outputs an application information collection page. The user fills in their application information on this page, thus collecting the application information. This invention develops the issuance terminal based on the WEB (World Wide Web) low-code platform and uses the Vue framework to build the user interface of the issuance terminal. The Vue framework provides rich components and template syntax, which allows developers to directly select the corresponding general components and custom components to draw page components according to the user interface requirements, and complete the development of the user interface using the corresponding template syntax, thereby improving the development efficiency of the issuance terminal.

[0053] Step S20: Send the application information to the server, wherein after receiving the application information, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal;

[0054] In this embodiment, when the issuing terminal detects an application information submission confirmation command, it sends the application information to the server. Upon receiving the application information, the server reviews it to ensure there are no errors. After approval, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal. This invention employs a front-end / back-end separation model for digital certificate issuance. The issuing terminal provides a user interface used only for collecting application information and displaying data. The digital certificate issuance logic is handled by the server, allowing for separate maintenance and updates of both the user interface and the server's business logic, thereby reducing the maintenance cost of the digital certificate issuance system.

[0055] Optionally, the step of sending the application information to the server includes: encrypting the application information using an encryption algorithm, and then sending the encrypted application information to the server, wherein when the server receives the encrypted application information, it decrypts the encrypted application information to obtain the application information, generates a digital certificate based on the application information, encrypts the digital certificate using the encryption algorithm, and encapsulates the encrypted digital certificate into a response body and sends it back to the issuing terminal.

[0056] In this embodiment, the present invention provides a design method for a digital certificate issuance system. Digital certificates are issued through an issuance terminal and a server. Users access the issuance terminal via the internet, fill in the application information, and submit it. The issuance terminal then sends the application information to the server. However, this application information is vulnerable to interception by malicious actors during network transmission, potentially leading to its leakage. Therefore, before sending the application information to the server, the issuance terminal encrypts it using an encryption algorithm to prevent leakage during transmission. Similarly, after generating a digital certificate based on the application information, the server also encrypts the digital certificate and encapsulates it into a response body before sending it back to the issuance terminal, preventing leakage during transmission and ensuring the security of both the application information and the digital certificate during transmission. The encryption algorithms include, but are not limited to, symmetric and asymmetric encryption algorithms; this embodiment does not specifically limit the specific encryption algorithms used.

[0057] Step S30: Receive the response body, and after parsing the digital certificate through the secure read / write plugin, write it to the UKEY device.

[0058] In this embodiment, when the issuing terminal receives the response body, it sends the response body to the secure read / write plugin to parse the digital certificate, and then writes the digital certificate into the UKEY device for storage. The secure read / write plugin is a WinForms (Windows Forms) program implemented in C Sharp (a programming language). The secure read / write plugin runs in the user's local environment and listens for requests from the issuing terminal by opening a fixed port. It should be noted that the secure read / write plugin of this invention can be pre-installed by the user in their local environment and connected to the UKEY device via a USB interface to establish a communication connection between the secure read / write plugin and the UKEY device. Alternatively, after receiving the response body, the issuing terminal can output a prompt message asking whether to install the secure read / write plugin. When the user selects the installation command for the secure read / write plugin based on the issuing terminal's selection, the issuing terminal automatically installs the secure read / write plugin into the user's local environment and establishes a communication connection between the secure read / write plugin and the UKEY device. This embodiment does not specifically limit this approach. When the issuing terminal receives the response body, it sends the response body to the secure read / write plugin. The secure read / write plugin parses the response body to obtain the digital certificate, and then stores the digital certificate in the UKEY device.

[0059] Optionally, the step of receiving the response body, parsing the digital certificate through a secure read / write plugin, and writing it to the UKEY device includes: the issuing terminal reading the basic UKEY information of the UKEY device through the secure read / write plugin, including but not limited to device identifier, UKEY account, and UKEY password. Then, the basic UKEY information is sent to the server. When the server receives the basic UKEY information, it authenticates the UKEY device based on the information and sends the authentication result back to the issuing terminal. The issuing terminal receives the authentication result, and if the device authentication is successful, it writes the digital certificate to the UKEY device. This helps prevent UKEY device impersonation or deception, improving the security of the digital certificate issuance system. If the device authentication fails, a preset prompt message is output; this embodiment does not specifically limit this.

[0060] Optionally, refer to Figure 2 , Figure 2This is an architecture diagram of the digital certificate issuance system involved in this invention. This invention connects the issuing terminal to an issuing terminal log platform and the server to a server log platform. After generating logs, the issuing terminal and server send these logs to their respective log platforms for storage. Therefore, when the issuing terminal or server malfunctions, maintenance personnel can directly access the logs of the issuing terminal or server via the network connection to the corresponding log platform, and troubleshoot and repair the problem based on the logs, without needing to go to the site for troubleshooting and repair, thus quickly achieving fault elimination and repair. Since the security plugin is installed in the user's local environment, the security plugin's logs are stored in the user's local environment. When the security plugin malfunctions, the issuing terminal can send a log retrieval request to the security plugin to obtain the logs recorded by the security plugin, and then send the security plugin's logs to the log platform connected to the issuing terminal. Maintenance personnel can then access the security plugin's logs via the network connection to the issuing terminal's log platform, thereby achieving rapid fault diagnosis and repair. It is understood that the log platforms connected to the issuing terminal and server can be the same; this invention does not specifically limit this.

[0061] In the technical solution provided in this embodiment, an application information collection page is output, and application information is collected based on the application information collection page. The application information is then sent to the server. Upon receiving the application information, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal. The issuing terminal receives the response body, parses the digital certificate using a secure read / write plugin, and writes it to the UKEY device. By decoupling the user interface and issuing logic of the digital certificate, the user interface is only used for collecting application information and displaying data, while the issuing logic of the digital certificate is handled by the server. This allows for separate maintenance and updates of both the user interface and the server's business logic, thereby reducing the maintenance cost of the digital certificate issuing system.

[0062] Reference Figure 3 In the second embodiment, based on the first embodiment, step S10 includes:

[0063] Step S11: Upon receiving the confirmation instruction from the application information collection page, obtain the verification function corresponding to the application information;

[0064] Step S12: Verify the application information based on the verification function, and determine the verification result based on the return value of the verification function;

[0065] In this embodiment, upon receiving the confirmation instruction from the application information collection page, the application information needs to be verified to ensure that the data format of the application information meets the preset requirements. This ensures that the application information, after being sent to the server, will not be rejected due to non-compliance with the preset requirements, thus preventing a reduction in the efficiency of digital certificate generation. It is understood that different information in the application information requires different verification methods and content. Therefore, this invention pre-configures corresponding verification functions based on the information identifiers of the application information to be filled in on the application information collection page. Upon receiving the confirmation instruction from the application information collection page, it obtains the information identifiers and information content corresponding to each piece of information in the application information, acquires the verification function associated with the information identifier, verifies the information content corresponding to the information identifier based on the verification function, and obtains the return value of the verification function to determine the verification result corresponding to the information identifier.

[0066] For example, the application information collection page requires the user's name, document type, and document number. The information identifiers corresponding to the user's name, document type, and document number can be obtained separately. The information identifier for the user's name is "username", the information identifier for the document type is "cardtype", and the information identifier for the document number is "cardnum". The corresponding verification functions can then be associated and bound with the information identifiers to achieve the purpose of configuring corresponding verification functions for different information identifiers.

[0067] Step S13: Determine the corresponding target action based on the verification result and execute the target action, wherein the target action includes the action of sending the application information to the server, and when the target action is sending the application information to the server, it indicates that the application information verification is successful.

[0068] In this embodiment, the return value of the verification function is used as the verification result, and then the corresponding target action is determined and executed based on the verification result. It is understood that if at least one verification function returns false, it indicates that the application information verification fails. Based on the false return value verification result, the corresponding target action is obtained and executed. After the target action is executed, corresponding prompt information is output on the issuing terminal, allowing the user to directly modify the filled application information on the issuing terminal according to the prompt information and then resubmit it. This ensures that the data format of the application information sent to the server meets the preset requirements, avoiding rejection by the server due to the application information's data format not meeting the preset requirements, thus reducing the efficiency of digital certificate generation. If all verification functions return true, it indicates that the application information verification passes, and the step of sending the application information to the server is executed. The server, upon receiving the application information, generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal.

[0069] Optionally, to avoid repeatedly verifying information that has already passed verification in the application information, a verification function table can be set up. The verification function table records each information identifier and the verification function associated with the information identifier. Then, when a confirmation instruction is received from the application information collection page, the verification function table is retrieved, and the information content corresponding to the information identifier recorded in the verification function table is verified. After the first verification, the verification function that returns a true value is deleted from the verification function table. Then, in the next verification, only the information that fails the verification is re-verified, thereby improving the verification efficiency of the application information.

[0070] Optionally, the step of determining the corresponding target action based on the verification result and executing the target action includes: inputting the verification result into the corresponding position of the verification vector formula to obtain the verification vector result, obtaining the target action associated with the verification vector result, and executing the target action.

[0071] In related technologies, after verifying application information and obtaining the verification result, it is necessary to judge the verification result to determine the target action to be executed. For example, conditional statements are used to judge the verification result to determine the target action. However, even if the verification results corresponding to different information identifiers are the same, the target actions executed will not be the same. Therefore, multiple conditional statements are needed to judge the verification results of different information identifiers separately. This will cause code redundancy and reduce the efficiency of application information verification.

[0072] In this embodiment, a verification vector formula is pre-constructed, which is composed of various verification results. This invention obtains the verification vector result by filling the corresponding positions in the verification vector formula with the verification results, and then obtains and executes the target action associated with the verification vector result. It is understood that the target action associated with the verification vector result includes the target actions corresponding to all verification results that failed, eliminating the need to judge each verification result sequentially, thus improving the verification efficiency of application information.

[0073] For example, the verification vector formula is T = (a, b, c), assuming a corresponds to the verification result of username, b to the verification result of cardtype, and c to the verification result of cardnum. After verifying the application information, the verification result of username is 0, the verification result of cardtype is 0, and the verification result of cardnum is 1. Therefore, the combined verification vector result is T = (0, 0, 1). At this point, the target actions associated with T = (0, 0, 1) are c and d, and then the target actions c and d can be executed directly, thereby improving the verification efficiency of application information.

[0074] In the technical solution provided in this embodiment, when a confirmation instruction is received from the application information collection page, the verification function corresponding to the application information is obtained, and then the application information is verified based on the verification function to determine the verification result. Based on the verification result, the corresponding target action is determined and the target action is executed. The target action includes sending the application information to the server. When the target action is to send the application information to the server, it indicates that the application information verification is successful, avoiding the application information being rejected by the server due to the data format not meeting the preset requirements, thus reducing the efficiency of digital certificate generation.

[0075] Currently, in banking operations, when processing related transactions for users, it is necessary to print out and stamp the user's digital certificate, ID card, and other relevant documents for archiving and subsequent traceability. In related technologies, a client typically connects to the printer, and during digital certificate printing, the print format is adjusted on a print preview page to ensure the printed digital certificate meets format requirements. However, since the issuing terminal of this invention is not deployed in a local environment but accessed via a web page, the printing of digital certificates is previewed through a web-based printing plugin. However, the certificate information recorded in digital certificates includes sensitive information, such as the U-key password. Print previewing could lead to the leakage of sensitive information, resulting in the theft of user identity information and posing a security risk. Therefore, this invention proposes a digital certificate printing solution, as described in the third embodiment.

[0076] Reference Figure 4 In the third embodiment, based on any of the above embodiments, after step S30, the following is included:

[0077] Step S40: Upon receiving a print request for the digital certificate, based on the secure read / write plugin, retrieve the digital certificate from the UKEY device according to the print request;

[0078] Step S50: Based on the secure read / write plugin, read the printing parameters and printing template corresponding to the digital certificate;

[0079] Step S60: According to the printing parameters, fill the certificate information in the digital certificate into the corresponding position of the printing template to generate the print text of the digital certificate;

[0080] Step S70: Send the text to the printer for printing.

[0081] In this embodiment, upon receiving a print request for a digital certificate, the print request is directly sent to the secure read / write plugin. The plugin then directly retrieves the digital certificate from the UKEY device based on the print request. The secure read / write plugin obtains a preset print configuration file and reads the corresponding print parameters and print template from the print configuration file. The print parameters include the print format parameters of the digital certificate and the location parameters of the certificate information. The print format parameters include, but are not limited to, printer selection, print page range, page layout, print quality, and color options. Then, based on the location parameters, the certificate information is filled into the corresponding positions in the print template to generate print text. The print text and print format parameters are then sent to the printer so that the printer prints the text according to the print format parameters. No print preview of the digital certificate is provided, avoiding print preview at the issuing terminal and preventing leakage of the digital certificate information.

[0082] Optionally, the step of filling the certificate information in the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate further includes: obtaining each information identifier in the certificate information, then matching the position parameters and the information identifiers to determine the information content corresponding to the information identifiers at the target position in the print template, thereby filling the information content into the target position to generate the print text of the digital certificate. This embodiment does not specifically limit this step. It is understood that the position parameters include the information identifiers and the target position where the information content corresponding to the information identifiers is located.

[0083] Optionally, before the step of obtaining the digital certificate from the UKEY device based on the secure read / write plugin according to the print request when the digital certificate is received, the method further includes: obtaining a print preview template and displaying the print preview template on the print preview page when the print preview request of the digital certificate is received; obtaining print preview parameters set based on the print preview page and replacing the print preview parameters with the print parameters when the print request of the digital certificate is received; and performing the step of filling the certificate information in the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate.

[0084] In this embodiment, upon receiving a print preview request for a digital certificate, the issuing terminal obtains a print preview template and displays it on the print preview page. This allows the user to preview the template and anticipate the final print layout of the digital certificate, ensuring accurate layout and avoiding repeated printing due to layout issues. The print preview page also supports adjusting the position of the template certificate information and setting the print format of the digital certificate, i.e., setting print preview parameters. These parameters include print format parameters and position parameters for the certificate information. When the issuing terminal receives a print request for the digital certificate, it obtains the print preview parameters set on the print preview page and transmits them to the secure read / write plugin. The secure read / write plugin replaces these parameters with the print parameters and then executes the step of filling the certificate information from the digital certificate into the corresponding positions of the print template according to the print parameters, generating the print text of the digital certificate. It is understood that during the entire execution process described above, the certificate information of the digital certificate is not transmitted to the issuing terminal or the print preview page. This ensures the security of the digital certificate while also ensuring that the layout of the printed digital certificate text meets the requirements, eliminating the need for repeated printing and saving paper resources. Optionally, this invention allows users to adjust the position of the template certificate information in the print preview template by dragging and dropping, i.e., adjusting the position parameters of the template certificate information. The print format parameters are provided to the user through corresponding options, and this embodiment does not specifically limit this.

[0085] In the technical solution provided in this embodiment, upon receiving a print request for a digital certificate, the digital certificate is retrieved from the UKEY device based on a secure read / write plugin. Then, the plugin reads the corresponding print parameters and print template. Following the print parameters, the certificate information from the digital certificate is filled into the corresponding positions in the print template to generate the print text of the digital certificate. This print text is then sent to the printer for printing. By directly sending the generated print text to the printer without providing a print preview of the digital certificate, the certificate information could be leaked due to print previewing on the issuing terminal.

[0086] Reference Figure 5 , Figure 5 This is a schematic diagram of the terminal structure of the hardware operating environment involved in the embodiments of the present invention.

[0087] In this embodiment of the invention, the terminal can be a terminal device, which can be a mobile phone, a computer, or a server. This embodiment does not specifically limit the type of terminal device.

[0088] like Figure 5As shown, the terminal may include: a processor 1001, such as a CPU; a network interface 1004; a user interface 1003; a memory 1005; and a communication bus 1002. The communication bus 1002 is used to enable communication between these components. The user interface 1003 may include a display screen, an input unit, etc., and optionally, the user interface 1003 may also include a standard wired interface or a wireless interface. The network interface 1004 may optionally include a standard wired interface or a wireless interface (such as a Wi-Fi interface). The memory 1005 may be high-speed RAM or stable non-volatile memory, such as a disk drive. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0089] Those skilled in the art will understand that Figure 5 The terminal structure shown does not constitute a limitation on the terminal and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0090] like Figure 5 As shown, the memory 1005, which serves as a computer storage medium, may include an operating system, a network communication module, a user interface module, and a design program for a digital certificate issuance system.

[0091] exist Figure 5 In the terminal shown, network interface 1004 is mainly used to connect to the backend server and communicate with it; processor 1001 can be used to call the design program of the digital certificate issuance system stored in memory 1005 and perform the following operations:

[0092] Output the application information collection page, and collect application information based on the application information collection page;

[0093] Output the application information collection page, and collect application information based on the application information collection page;

[0094] The application information is sent to the server. After receiving the application information, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal.

[0095] The system receives the response body, parses the digital certificate using a secure read / write plugin, and then writes it to the UKEY device.

[0096] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0097] Upon receiving the confirmation instruction from the application information collection page, obtain the verification function corresponding to the application information;

[0098] The application information is verified based on the verification function, and the verification result is determined based on the return value of the verification function.

[0099] The corresponding target action is determined based on the verification result and the target action is executed. The target action includes sending the application information to the server. When the target action is sending the application information to the server, it indicates that the application information has passed the verification.

[0100] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0101] Input the verification result into the corresponding position in the verification vector formula to obtain the verification vector result;

[0102] Obtain the target action associated with the verification vector result, and execute the target action.

[0103] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0104] The application information is encrypted using an encryption algorithm;

[0105] The encrypted application information is sent to the server. When the server receives the encrypted application information, it decrypts the encrypted application information to obtain the application information, generates a digital certificate based on the application information, encrypts the digital certificate using the encryption algorithm, and encapsulates the encrypted digital certificate into the response body before sending it back to the issuing terminal.

[0106] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0107] Based on the secure read / write plugin, the basic UKEY information of the UKEY device is read;

[0108] The UKEY basic information is sent to the server, wherein when the server receives the UKEY basic information, it performs device authentication on the UKEY device based on the UKEY basic information and feeds back the device authentication result to the issuing terminal;

[0109] Upon receiving the device authentication result and determining that the device authentication is successful based on the device authentication result, the digital certificate is written to the UKEY device.

[0110] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0111] Upon receiving a print request for the digital certificate, the digital certificate is retrieved from the UKEY device based on the secure read / write plugin and the print request.

[0112] Based on the secure read / write plugin, the printing parameters and printing template corresponding to the digital certificate are read;

[0113] According to the printing parameters of the digital certificate, the certificate information in the digital certificate is filled into the corresponding position of the printing template to generate the printed text of the digital certificate;

[0114] The text to be printed is sent to the printer for printing.

[0115] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0116] Upon receiving a print preview request for the digital certificate, obtain the print preview template and display the print preview template on the print preview page;

[0117] Upon receiving a print request from the digital certificate, obtain the print preview parameters set on the print preview page, and replace the print preview parameters with the print parameters;

[0118] The step of filling the certificate information in the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate is performed.

[0119] Furthermore, the processor 1001 can call the design program of the digital certificate issuance system stored in the memory 1005, and also perform the following operations:

[0120] Obtain each information identifier from the certificate information;

[0121] Match the printing parameters and the information identifier to determine the information content corresponding to the information identifier and its target position in the printing template;

[0122] The information content is filled into the target location to generate the printed text of the digital certificate.

[0123] In addition, to achieve the above objectives, the present invention also provides a terminal device, the terminal device comprising: a memory, a processor, and a design program for a digital certificate issuance system stored in the memory and executable on the processor, wherein when the design program for the digital certificate issuance system is executed by the processor, it implements the steps of the design method for the digital certificate issuance system as described above.

[0124] In addition, to achieve the above objectives, the present invention also provides a computer-readable storage medium storing a design program for a digital certificate issuance system, wherein the design program for the digital certificate issuance system, when executed by a processor, implements the steps of the design method for the digital certificate issuance system as described above.

[0125] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or system. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element.

[0126] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0127] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes several instructions to cause a terminal device (which may be a mobile phone, computer, or server) to execute the methods described in the various embodiments of the present invention.

[0128] The above are merely preferred embodiments of the present invention and do not limit the scope of the patent. Any equivalent structural or procedural transformations made based on the description and drawings of the present invention, or direct or indirect applications in other related technical fields, are similarly included within the scope of patent protection of the present invention.

Claims

1. A design method for a digital certificate issuance system, characterized in that, A signing terminal applied to a signing system, the design method of the digital certificate signing system includes: Output the application information collection page, and collect application information based on the application information collection page; The application information is sent to the server. After receiving the application information, the server generates a digital certificate based on the application information, encapsulates the digital certificate into a response body, and sends it back to the issuing terminal. The system receives the response body and reads the basic UKEY information of the UKEY device through a secure read / write plugin; it then sends the basic UKEY information to the server, whereby the server, upon receiving the basic UKEY information, performs device authentication on the UKEY device based on the basic UKEY information and sends the device authentication result back to the issuing terminal; upon receiving the device authentication result and determining that the device authentication is successful based on the device authentication result, it writes the digital certificate to the UKEY device. Upon receiving a print request for the digital certificate, the system retrieves the digital certificate from the UKEY device based on the secure read / write plugin; it then reads the print parameters and print template corresponding to the digital certificate; according to the print parameters, it fills the certificate information from the digital certificate into the corresponding positions of the print template to generate the print text of the digital certificate; and finally, it sends the print text to the printer for printing. The process of outputting the application information collection page and collecting application information based on the application information collection page includes: upon receiving a confirmation instruction from the application information collection page, obtaining a verification function corresponding to the application information; verifying the application information based on the verification function, and determining the verification result based on the return value of the verification function; determining the corresponding target action based on the verification result, and executing the target action, wherein the target action includes sending the application information to the server, and when the target action is sending the application information to the server, it indicates that the application information verification has passed.

2. The design method of the digital certificate issuance system as described in claim 1, characterized in that, The step of determining the corresponding target action based on the verification result and executing the target action includes: Input the verification result into the corresponding position in the verification vector formula to obtain the verification vector result; Obtain the target action associated with the verification vector result, and execute the target action.

3. The design method of the digital certificate issuance system as described in claim 1, characterized in that, The step of sending the application information to the server includes: The application information is encrypted using an encryption algorithm; The encrypted application information is sent to the server. When the server receives the encrypted application information, it decrypts the encrypted application information to obtain the application information, generates a digital certificate based on the application information, encrypts the digital certificate using the encryption algorithm, and encapsulates the encrypted digital certificate into the response body before sending it back to the issuing terminal.

4. The design method of the digital certificate issuance system as described in claim 1, characterized in that, Before the step of retrieving the digital certificate from the UKEY device based on the secure read / write plugin upon receiving a print request for the digital certificate, the method further includes: Upon receiving a print preview request for the digital certificate, obtain the print preview template and display the print preview template on the print preview page; Upon receiving a print request from the digital certificate, obtain the print preview parameters set on the print preview page, and replace the print preview parameters with the print parameters; The step of filling the certificate information in the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate is performed.

5. The design method of the digital certificate issuance system as described in claim 4, characterized in that, The step of filling the certificate information in the digital certificate into the corresponding position of the print template according to the print parameters of the digital certificate to generate the print text of the digital certificate further includes: Obtain each information identifier from the certificate information; Match the printing parameters and the information identifier to determine the information content corresponding to the information identifier and its target position in the printing template; The information content is filled into the target location to generate the printed text of the digital certificate.

6. A terminal device, characterized in that, The terminal device includes: a memory, a processor, and a design program for a digital certificate issuance system of the terminal device stored in the memory and executable on the processor. When the design program for the digital certificate issuance system of the terminal device is executed by the processor, it implements the steps of the design method for the digital certificate issuance system as described in any one of claims 1 to 5.

7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a design program for a digital certificate issuance system for a terminal device. When the design program for the digital certificate issuance system for the terminal device is executed by a processor, it implements the steps of the design method for the digital certificate issuance system as described in any one of claims 1 to 5.

Images