Mobile informatization security protection method and system using digital certificate

Abstract

The invention relates to the technical field of information security, in particular to a mobile informatization security protection method and system using a digital certificate. The method comprises the following steps: collecting user name information when each user initiates each digital certificate request, the total number and the processing capability score of all mobile terminal devices of the user, the certificate request time and the certificate failure time of a digital certificate and the total number of times of initiating all digital certificate requests; obtaining the certificate demand degree of each user; obtaining the private key evaluation degree of each user; calculating a device terminal correction value of each mobile terminal device of each user; and then obtaining a private key adjustment factor of each mobile terminal device of each user, and obtaining a private key parameter when each mobile terminal device of each user initiates each digital certificate request. According to the invention, the informatization safety protection capability of the mobile terminal is improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and specifically to a mobile information security protection method and system using digital certificates. Background Art

[0002] Mobile information security protection refers to a series of technologies and measures used to protect mobile devices and information activities (data transmission, application use, etc.) conducted through these devices. The most important of these technologies is to authenticate the identity information of mobile network users through digital certificates. When issuing digital certificates, digital certificates need to be digitally signed. This is a technical means used to verify the integrity and authenticity of the certificate content. Asymmetric encryption algorithms are usually used to sign digital certificates.

[0003] The elliptic curve digital signature ECDSA algorithm is a type of asymmetric encryption algorithm with the advantages of fast signing and verification speed, so it is often used to digitally sign digital certificates. Generally speaking, the ECDSA algorithm generates a random number that meets certain conditions through a certain random function as the private key of the encryption algorithm, and generates a public key based on the elliptic curve, thereby realizing the signature of the digital certificate. In the traditional ECDSA algorithm, the generation of the private key has nothing to do with the information to be encrypted, and is only generated through a random function. The random number inside the computer is generated based on certain random rules, which is a pseudo-random process. If the random seed of the random number generator is not random enough or the random number generator is cracked, the user's private key may be predictable and derivable, thereby reducing the security of encryption. In addition, if the random private key parameter is large, it may not be suitable for encryption and decryption of mobile data terminals, which may easily cause slow processing speed and affect the normal operation of the device. Therefore, in response to the above problems, this solution proposes a mobile information security protection method and system using digital certificates. Summary of the invention

[0004] In order to solve the above technical problems, the purpose of this application is to provide a mobile information security protection method and system using digital certificates. The technical solutions adopted are as follows: In a first aspect, an embodiment of the present application provides a mobile information security protection method using a digital certificate, the method comprising the following steps: Collect the user name information of each digital certificate request initiated by each user, the total number and processing capability score of all mobile terminal devices of the user, the certificate request time of the digital certificate, the certificate expiration time and the total number of times all digital certificate requests were initiated; Based on the number of digital certificate requests initiated by the user, the average time interval between the certificate expiration time and the certificate request time, the degree of certificate demand of each user is obtained; Encode the username information, form a username complexity evaluation sequence based on the differences between adjacent codes, and obtain the username complexity index through the information entropy of the username complexity evaluation sequence; use the ratio of the certificate requirement degree and the username complexity index as the private key evaluation degree of each user; Obtaining a device terminal correction value for each mobile terminal device of each user based on the total number and processing capability score of all mobile terminal devices of the user; The private key evaluation degree and the device terminal correction value are summed, and the remainder of the sum value with respect to the preset bit character length is taken as the private key adjustment factor of each mobile terminal device of each user; A random number generation algorithm is used to generate a random number, and a private key parameter of each digital certificate request initiated by each mobile terminal device of each user is obtained based on the binary number of the private key adjustment factor and the binary number XOR operation of the random number.

[0005] Furthermore, the method for obtaining the degree of certificate requirement is: The average required time interval of each user is obtained based on the average time interval between the certificate request time of each digital certificate request and the certificate expiration time of the previous digital certificate request; For each user, the sum of the average demand time interval and the preset parameter adjustment factor is calculated, and the ratio of the total number of times all digital certificate requests are initiated to the sum is used as the certificate demand level of each user.

[0006] Furthermore, the method for obtaining the average demand time interval is: For each digital certificate request initiated by each user, the time interval between the certificate request time of each digital certificate and the certificate expiration time of the previous digital certificate request is calculated as the required time interval of each digital certificate request initiated by each user, and the average of the required time intervals of all digital certificate requests initiated by each user is taken as the average required time interval of each user.

[0007] Further, the method for obtaining the private key evaluation degree is: Obtaining a complex evaluation sequence of each user's username based on the username information; Obtain the username complexity index of each user based on the information uncertainty of the username complexity evaluation sequence; The ratio of each user's certificate requirement to the username complexity index is used as the private key evaluation degree of each user.

[0008] Furthermore, the method for obtaining the complex evaluation sequence of the user name is: The user name information of each user is converted into an ASCII code value, and a sequence consisting of the absolute values ​​of the differences between all two adjacent values ​​in the ASCII code value is used as the complex evaluation sequence of the user name of each user.

[0009] Furthermore, the calculation formula of the username complexity index is: ; Where B represents the complexity index of each user's username, Represents the complex evaluation sequence of each user's username, represents the calculation of information entropy, Represents a logarithmic function with a natural constant as a real number.

[0010] Furthermore, the calculation formula of the device terminal correction value is: ; Wherein, C represents the device terminal correction value of each mobile terminal device of each user; represents a logarithmic function with a value of 2 as the true number, M represents the total number of all mobile terminal devices of each user, Represents the normalized value of the processing capability score of each mobile terminal device of each user.

[0011] Furthermore, the method for obtaining the private key adjustment factor is: For each mobile terminal device of each user, the sum of the private key evaluation degree of each user and the device terminal correction value of each mobile terminal device of each user is calculated, and the remainder of the quotient of the sum result and the preset bit character length is calculated as the private key adjustment factor of each mobile terminal device of each user.

[0012] Furthermore, the method for obtaining the private key parameters is: A random number generation algorithm is used to obtain a random number when each digital certificate request is initiated by each user, and an XOR operation is performed on the binary number of the private key adjustment factor of each mobile terminal device of each user and the binary number of the random number to obtain the private key parameters when each digital certificate request is initiated by each mobile terminal device of each user.

[0013] In a second aspect, an embodiment of the present application also provides a mobile information security protection system using digital certificates, including a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor implements the steps of any one of the above methods when executing the computer program.

[0014] This application has at least the following beneficial effects: This application obtains the characteristic information of the user through the request information of the user's digital certificate. The user information of the user characteristics is analyzed, and the private key evaluation degree is obtained based on the user's application frequency and the complexity of the user parameters, which reflects the complexity of the signature private key required by each user in the communication transmission. At the same time, the device terminal correction value of the user is obtained by combining the processing capacity of each user's device terminal and the number of terminal devices, which reflects the influence of the device terminal processing capacity on the complexity of the signature private key. The private key correction factor is obtained, and the private key parameter is obtained by combining the original random parameter. Finally, the signing and issuance of the user's digital certificate are realized by combining the private key parameter pair, and the user identity is verified and identified based on the digital certificate during the user communication process. The problem that the private key parameters are pseudo-randomly generated when signing traditional digital certificates, and the processing capacity of the mobile device terminal for encryption and decryption is not considered, the application analyzes the user characteristics and finally generates the private key parameters, so that the private key information contains not only random characteristics, but also the identity characteristic information of the user, and the complexity of the private key is improved, so as to ensure the unforgeability of the digital certificate and improve the information security protection capability of the mobile terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions and advantages in the embodiments of the present application or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0016] Figure 1 A flowchart of the steps of a mobile information security protection method using a digital certificate provided in one embodiment of the present application; Figure 2 A schematic diagram of a digital certificate issuance process provided for an embodiment of the present application; Figure 3 A terminal communication identity authentication flow chart provided for one embodiment of the present application. DETAILED DESCRIPTION

[0017] In order to further explain the technical means and effects adopted by the present application to achieve the predetermined invention purpose, the following, in combination with the accompanying drawings and preferred embodiments, describes in detail the specific implementation methods, structures, features and effects of the mobile information security protection method and system using digital certificates proposed in the present application. In the following description, different "one embodiment" or "another embodiment" does not necessarily refer to the same embodiment. In addition, specific features, structures or characteristics in one or more embodiments may be combined in any suitable form.

[0018] Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs.

[0019] The specific scheme of the mobile information security protection method and system using digital certificates provided by this application is described in detail below with reference to the accompanying drawings.

[0020] See also Figure 1 , which shows a flowchart of a mobile information security protection method using a digital certificate provided by an embodiment of the present application, the method comprising the following steps: Step S1, collecting the user name information of each digital certificate request initiated by each user, the total number and processing capability score of all mobile terminal devices of the user, the certificate request time of the digital certificate and the certificate expiration time and the total number of times all digital certificate requests are initiated.

[0021] In network communication, in order to ensure the privacy of information between the two parties, an asymmetric encryption algorithm is used to encrypt the session, that is, "public key encryption, private key decryption". However, there are still technical loopholes in the use process. If there is a middleman between the two, the public key information of the receiver is intercepted and the public key information of the sender is sent to tamper with and intercept the content of the session. Therefore, a binding authentication method of the public key and the user identity is required. Digital certificates are the main means to achieve this function. In order to ensure the integrity and security of digital certificates, digital certificates need to be digitally signed.

[0022] When the two communicating parties initiate communication, the sender and receiver need to publicize their own public keys in a digital certificate. The issuance of digital certificates needs to be based on a third-party digital certificate certification authority (CA), and the database in the third-party digital certificate certification authority is used as the CA database.

[0023] Generate a public-private key pair in a single mobile terminal user, establish a communication connection with a third-party digital certificate certification authority, and initiate digital certificate requests to the third-party digital certificate certification authority. The digital certificate request content includes the user's username information, the information of the user's mobile terminal device, and the certificate expiration date of the digital certificate, and obtain the certificate request time of each digital certificate request.

[0024] The number of all mobile terminal devices of each user and the total number of times all digital certificate requests are initiated are counted. Furthermore, the processing capability score of each mobile terminal can be obtained from each mobile terminal device of each user, wherein the processing capability score reflects the ability of the mobile device to process information.

[0025] Step S2, based on the number of digital certificate requests initiated by the user, the average of the time interval between the certificate expiration time and the certificate request time, obtain the certificate demand degree of each user; based on the user name information and the certificate demand degree, obtain the private key evaluation degree of each user.

[0026] With the rapid development of mobile Internet, mobile information security protection faces great challenges. Currently, it is mainly based on two verification methods. One is SMS verification code, which is simple to verify, but has weak security and the SMS verification code information is easy to be stolen; the other is hardware device verification, such as SIM card, U shield, etc., which has high security but increased usage costs and complicated operation procedures. Therefore, there is a need for a method to issue digital certificates to mobile terminals through software without adding hardware devices to mobile terminals to achieve terminal authentication.

[0027] The user's digital certificate is digitally signed to ensure its consistency and integrity. A single digital certificate has a certain time limit. When a single digital certificate expires, the user terminal needs to re-initiate the certificate. The more frequent the digital certificate requests corresponding to a single username, the higher the frequency of the user's mobile communications. Therefore, in order to ensure the privacy of their data transmission, the digital signature on the digital certificate issued to the user requires a higher private key complexity.

[0028] Furthermore, for each digital certificate request initiated by each user, the time interval between the certificate request time of each digital certificate and the certificate expiration time of the previous digital certificate request is calculated as the required time interval of each digital certificate request initiated by each user, and the average of the required time intervals of all digital certificate requests initiated by each user is taken as the average required time interval of each user. The unit of the time interval is days.

[0029] According to the above analysis, for each user, based on the number of digital certificate requests initiated by the user and the average demand time interval, the degree of certificate demand of each user is obtained, and the calculation formula is: ; In the formula, A represents the degree of certificate demand of each user, N represents the total number of digital certificate requests initiated by each user, is the average demand time interval of each user, Preset parameter adjustment factor, in this embodiment The value of is 1 to avoid the formula being unable to calculate when the denominator is zero. The implementer can choose other values ​​according to the actual situation.

[0030] It should be noted that the user's need for the certificate is obtained by analyzing the number of applications for the user's digital certificate and the urgency of the application. If the time interval between the expiration of the certificate and the reapplication is smaller, it means that the user has a higher need for the digital certificate. At the same time, if the number of applications is greater, the value of the certificate need will be greater, reflecting that the user has a higher communication demand, so the private key complexity of the digital signature of the digital certificate is higher.

[0031] Furthermore, when a user communicates with a mobile terminal, the complexity of the user name can reflect the user's security. The more complex the user name, the more difficult it is to guess or crack, and the more difficult it is to be cracked by attackers through brute force or dictionary attacks. Therefore, the more complex the user name, the better the privacy.

[0032] In order to better represent the complexity of the user name, the user name information of each user is converted into an ASCII code value, and the sequence consisting of the absolute values ​​of the differences between all two adjacent values ​​in the ASCII code value is used as the user name complexity evaluation sequence F of each user.

[0033] Furthermore, in order to evaluate the complexity of each user's private key, the private key evaluation degree of each user is obtained based on the uncertainty of the username complexity evaluation sequence and the degree of certificate demand. The acquisition method is: based on the information uncertainty of the username complexity evaluation sequence, the username complexity index of each user is obtained. The calculation formula of the username complexity index is: ; Where B represents the complexity index of each user's username, Represents the complex evaluation sequence of each user's username, represents the calculation of information entropy, Represents a logarithmic function with a natural constant as a real number.

[0034] The ratio of each user's certificate requirement to the username complexity index is used as the private key evaluation degree of each user.

[0035] It should be noted that, for each user, the higher the complexity of the user name, the more difficult it is for a middleman to break into the communication session in the network communication, and the smaller the need for the complexity of the private key. On the contrary, the lower the complexity of the user name, the weaker the user name protection capability, and the higher the complexity of the private key protection is required. The user's private key evaluation degree is obtained by combining this with the user's certificate demand degree. The larger the value of the evaluation degree, the higher the private key complexity required for each user. On the contrary, the smaller the value, the lower the complexity of the private key can be appropriately reduced.

[0036] Step S3, obtaining the device terminal correction value of each mobile terminal device of each user based on the total number of all mobile terminal devices of the user and the processing capability score; obtaining the private key adjustment factor of each mobile terminal device of each user based on the private key evaluation degree and the device terminal correction value; obtaining the private key parameters of each digital certificate request initiated by each mobile terminal device of each user based on the private key adjustment factor.

[0037] According to the above steps, based on the user name information and the user's application status in the CA database, the complexity of each user's private key is obtained, which is used to measure the complexity of the digital signature private key when each user issues a digital certificate. However, in the actual process, a single user may correspond to multiple device terminals, and the data processing capabilities of different device terminals are different. Further processing is required in combination with the user's mobile terminal information.

[0038] In order to ensure the convenience of information transmission, usually a single user will have multiple devices and terminals, and different digital certificates need to be issued for different mobile terminals to ensure the correspondence between user information and communication public keys. The more mobile terminal devices a single user has, the weaker the privacy protection of calls, and the more stringent protection is needed. In addition, in mobile information security protection, the processing power of the mobile terminal is an important measurement indicator. If the private key of the digital signature is too complex, it may take a long time for mobile terminals with weaker processing power, thereby affecting the actual conversation communication quality. Therefore, it is necessary to measure the complexity of the private key in combination with the actual computing processing power between mobile device terminals.

[0039] Based on the above analysis, the number of different terminals under each user name is obtained through the CA database by query, where the device terminal is distinguished by its serial number. The device terminal correction value is obtained: ; Wherein, C represents the device terminal correction value of each mobile terminal device of each user; represents a logarithmic function with a value of 2 as the true number, M represents the total number of all mobile terminal devices of each user, Represents the normalized value of the processing capability score of each mobile terminal device of each user; it should be noted that the processing capability score is the normalized value, because during the performance test, the devices with the lowest scores are basically eliminated, so the value of the processing capability distribution is not zero.

[0040] The above formula is used to obtain the device terminal correction value of the user's corresponding certificate request, which measures the encryption degree of the device terminal when signing the digital certificate. When the user has a device terminal with strong processing capabilities and a large number of terminals, a larger private key complexity is used. On the contrary, in order to consider the terminal processing capabilities, a relatively low private key complexity is required.

[0041] Furthermore, the private key adjustment factor of each mobile terminal device of each user is obtained based on the private key evaluation degree and the device terminal correction value. The obtaining method is: for each mobile terminal device of each user, the sum of the private key evaluation degree of each user and the device terminal correction value of each mobile terminal device of each user is calculated, and the remainder of the quotient of the sum result and the preset bit character length is calculated as the private key adjustment factor of each mobile terminal device of each user. In this embodiment, the value of the preset bit character length is 128, and the implementer can select other values ​​according to actual conditions.

[0042] It should be noted that the corresponding private key adjustment factor is obtained based on the user identity information and the mobile device terminal information. Its purpose is to obtain the private key adjustment value based on the user's identity information, so that the generated private key information contains certain user characteristics and is no longer generated only as a pseudo-random number. The larger the weighted value of the private key evaluation degree and the device terminal correction value, the greater the private key complexity required. The general private key bit character length is 128, so the maximum value of the private key adjustment factor is limited by region.

[0043] A random number generation algorithm is used to obtain a random number when each digital certificate request is initiated by each user, and an XOR operation is performed on the binary number of the private key adjustment factor of each mobile terminal device of each user and the binary number of the random number to obtain the private key parameters when each digital certificate request is initiated by each mobile terminal device of each user.

[0044] The final private key parameters are obtained, which include both the original random parameters and the user's characteristic information, making it more difficult to crack by brute force using intermediate values ​​and improving the tamper-proof nature of the digital signature.

[0045] Step S4: Sign and issue the digital certificate based on the private key parameter value of each user's certificate request.

[0046] Based on the above analysis, the private key parameter value of each user's certificate request can be obtained, and the signing and issuance of digital certificates can be realized based on this. The specific process is as follows: Figure 2 shown.

[0047] Send certificate request: Before making a call, the user needs to be authenticated by a third-party organization to prove its identity. That is, the user characteristics are sent to the third-party CA organization, and the user identity information, device terminal and communication public key are sent to the CA organization. It should be noted that the sent communication public key and communication private key exist in pairs, and the purpose is to realize data encryption during the communication between end users, which needs to be distinguished from the signature private key and public key in the digital signature process.

[0048] Generate digital signature: When the organization receives a user certificate request, the private key parameters are generated in the above step, and the private key and public key information of the digital signature are obtained using the ECDSA digital signature algorithm. A hash operation is performed based on the user's characteristic information to obtain a hash value, and the hash value is encrypted with the signature private key to obtain a digital signature. When digitally signing, "private key signature, public key signature verification" is adopted.

[0049] Generate and issue a digital certificate: Generate a digital certificate based on the obtained digital signature and user feature information. The digital certificate contains the user's feature information to indicate the correspondence between the user's communication public key and the user's identity, and the digital signature is used to ensure the authority of the digital certificate.

[0050] Step S5, implementing identity verification of both parties before communication based on the digital certificate of the user terminal.

[0051] The digital certificate of the user terminal is obtained in step S4, and the identity authentication of both parties is realized based on the digital certificate before communication. The authentication process of both parties is the same, so a single direction is taken as an example here. The specific process is as follows: Figure 3 As shown: Obtain digital certificate information: During the communication process, you need to send your own digital certificate to the other party. When the other party receives the digital certificate, it reads the information, including obtaining the user characteristics and digital signature of user B.

[0052] Obtaining hash value: Perform hash operation based on user feature information to obtain hash value. If the user's identity information is tampered with, the hash value will be greatly deviated. At the same time, decryption is performed based on the signature public key during digital signature to obtain the corresponding hash value.

[0053] It should be noted that the signature public key is transmitted over the network. In order to ensure that the signature public key is issued by a third-party authority and has not been tampered with, user A needs to verify the signature public key based on the root CA. The root CA has been integrated into the device during the device production process and does not need to be transmitted over the network, thus forming a complete certificate chain.

[0054] Digital certificate verification: Based on the comparison of the obtained verification hash value and the calculated hash value, if the two are consistent, it means that the communication public key corresponds to the identity of user B. Therefore, during the communication process, the public key can be used to encrypt the communication content. If the hash values ​​are inconsistent, it means that the communication public key does not correspond to the identity of user B, and the identity of user B may be impersonated by a middleman, thus interrupting the communication, thereby achieving security protection of the mobile terminal information transmission process.

[0055] Based on the same inventive concept as the above method, an embodiment of the present application also provides a mobile information security protection system using digital certificates, including a memory, a processor, and a computer program stored in the memory and running on the processor. When the processor executes the computer program, the steps of the mobile information security protection method using digital certificates are implemented in any one of the above mobile information security protection methods using digital certificates.

[0056] It should be noted that the above sequence of the embodiments of the present application is for description only and does not represent the advantages and disadvantages of the embodiments. The above is a description of a specific embodiment of this specification. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0057] The various embodiments in the present application are described in a progressive manner, and the same or similar parts between the various embodiments can be referenced to each other, and each embodiment focuses on the differences from other embodiments.

[0058] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the principles of the present application should be included in the protection scope of the present application.

Claims

1. A mobile information security protection method using digital certificates, characterized in that: The method comprises the following steps: Collect the user name information of each digital certificate request initiated by each user, the total number and processing capability score of all mobile terminal devices of the user, the certificate request time of the digital certificate, the certificate expiration time and the total number of times all digital certificate requests were initiated; Based on the number of digital certificate requests initiated by the user, the average time interval between the certificate expiration time and the certificate request time, the degree of certificate demand of each user is obtained; Encode the username information, form a username complexity evaluation sequence based on the differences between adjacent codes, and obtain the username complexity index through the information entropy of the username complexity evaluation sequence; use the ratio of the certificate requirement degree and the username complexity index as the private key evaluation degree of each user; Obtaining a device terminal correction value for each mobile terminal device of each user based on the total number and processing capability score of all mobile terminal devices of the user; The private key evaluation degree and the device terminal correction value are summed, and the remainder of the sum value with respect to the preset bit character length is taken as the private key adjustment factor of each mobile terminal device of each user; A random number generation algorithm is used to generate a random number, and a private key parameter of each digital certificate request initiated by each mobile terminal device of each user is obtained based on the binary number of the private key adjustment factor and the binary number XOR operation of the random number.

2. The mobile information security protection method using digital certificates as claimed in claim 1, characterized in that: The method for obtaining the certificate requirement degree is as follows: The average required time interval of each user is obtained based on the average time interval between the certificate request time at each digital certificate request and the certificate expiration time at the previous digital certificate request; For each user, the sum of the average demand time interval and the preset parameter adjustment factor is calculated, and the ratio of the total number of times all digital certificate requests are initiated to the sum is used as the certificate demand level of each user.

3. The mobile information security protection method using digital certificates as claimed in claim 2, characterized in that: The method for obtaining the average demand time interval is: For each digital certificate request initiated by each user, the time interval between the certificate request time of each digital certificate and the certificate expiration time of the previous digital certificate request is calculated as the required time interval of each digital certificate request initiated by each user, and the average of the required time intervals of all digital certificate requests initiated by each user is taken as the average required time interval of each user.

4. The mobile information security protection method using digital certificates as claimed in claim 1, characterized in that: The method for obtaining the private key evaluation degree is: Obtaining a complex evaluation sequence of usernames of each user based on the username information; Obtain the username complexity index of each user based on the information uncertainty of the username complexity evaluation sequence; The ratio of each user's certificate requirement to the username complexity index is used as the private key evaluation degree of each user.

5. The mobile information security protection method using digital certificates as claimed in claim 4, characterized in that: The method for obtaining the complex evaluation sequence of the user name is: The user name information of each user is converted into an ASCII code value, and a sequence consisting of the absolute values ​​of the differences between all two adjacent values ​​in the ASCII code value is used as the complex evaluation sequence of the user name of each user.

6. The mobile information security protection method using digital certificates as claimed in claim 4, characterized in that: The calculation formula of the username complexity index is: ; Where B represents the complexity index of each user's username, Represents the complex evaluation sequence of each user's username, represents the calculation of information entropy, Represents a logarithmic function with a natural constant as a real number.

7. The mobile information security protection method using digital certificates as claimed in claim 1, characterized in that: The calculation formula of the equipment terminal correction value is: ; Wherein, C represents the device terminal correction value of each mobile terminal device of each user; represents a logarithmic function with a value of 2 as the true number, M represents the total number of all mobile terminal devices of each user, Represents the normalized value of the processing capability score of each mobile terminal device of each user.

8. The mobile information security protection method using digital certificates as claimed in claim 1, characterized in that: The method for obtaining the private key adjustment factor is: For each mobile terminal device of each user, the sum of the private key evaluation degree of each user and the device terminal correction value of each mobile terminal device of each user is calculated, and the remainder of the quotient of the sum result and the preset bit character length is calculated as the private key adjustment factor of each mobile terminal device of each user.

9. The mobile information security protection method using digital certificates as claimed in claim 1, characterized in that: The method for obtaining the private key parameters is: A random number generation algorithm is used to obtain a random number when each digital certificate request is initiated by each user, and an XOR operation is performed on the binary number of the private key adjustment factor of each mobile terminal device of each user and the binary number of the random number to obtain the private key parameters when each digital certificate request is initiated by each mobile terminal device of each user.

10. A mobile information security protection system using digital certificates, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the computer program, the steps of the mobile information security protection method using digital certificates as described in any one of claims 1-9 are implemented.

Images