Digital certificate updating method and electronic equipment
By updating multiple operation certificates in user certificates and using multiple digital signature algorithm verification, the update problem of the existing certificate system under the threat of quantum computing is solved, and the trusted update and security guarantee of digital certificates are achieved.
Patent Information
- Application Number
- CN202510529634.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-25
- Publication Date
- 2025-07-25
AI Technical Summary
When facing the threat of quantum computing, the existing digital certificate system lacks an effective update mechanism, which leads to the inability to update in time after the certificate is compromised, resulting in the stolen certificate or no certificate is available, causing losses to users.
By determining the broken revoked operation certificate from the operation certificate set, updating the user certificate, ensuring that the user certificate contains multiple operation certificate information, and using a multi-digital signature algorithm for verification, ensuring the credible update of the certificate.
It ensures the security and trusted update of certificates without losing the availability of existing certificates, avoids the certificates being forged or misapproved, and maintains the security of communications and transactions.
Smart Images
Figure CN120378165A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of information security technology, and in particular, to a digital certificate update method and an electronic device. Background Art
[0002] With the continuous breakthroughs of quantum computing technology in fields such as communication and computers, the current traditional public key cryptosystem that we rely on, such as asymmetric encryption algorithms (RSA), elliptic curve cryptography (ECC), etc., is facing unprecedented challenges, thus giving rise to the emergence of quantum-resistant algorithms.
[0003] However, the current theories and technologies related to quantum-resistant cryptography are still in the development stage, and the analysis and attack means against quantum-resistant cryptographic algorithms are still being continuously improved. Some so-called "quantum-resistant" cryptographic algorithms actually cannot resist new attack means. In the past five years, in the international call for quantum-resistant cryptographic algorithms, there have been cases where quantum-resistant cryptographic algorithms of multiple technical routes such as multivariate and homomorphic have been broken by various new attacks, and the related algorithm proposals have also been withdrawn in the NIST call. In the future, it may become a "normal" phenomenon that both classical cryptographic algorithms and quantum-resistant algorithms are broken by various attacks. Therefore, it is urgent to upgrade the existing certificate system to meet the security requirements of the cryptographic system in the future quantum era.
[0004] In the current related solutions, whether it is traditional digital certificates, hybrid certificates or quantum-resistant certificates, when some algorithms are broken or threatened by new computations, a perfect certificate update processing mechanism is not provided, resulting in situations such as certificate theft and no available certificates during the time gap from algorithm breakage to certificate update, bringing huge losses to users. Summary of the Invention
[0005] The present invention provides a digital certificate update method and an electronic device to achieve trusted update of digital certificates.
[0006] According to an aspect of the present invention, there is provided a digital certificate update method applied to a certificate operation institution, including:
[0007] Determine at least one revoked operation certificate from the operation certificate set; wherein, the revoked operation certificate is the operation certificate corresponding to the broken digital signature algorithm; the operation certificate set includes at least two operation certificates;
[0008] Determine the user certificate including the revoked operation certificate; wherein, the user certificate includes at least two operation certificate information; the user certificate is the digital certificate currently used by the target user;
[0009] Update the user certificate according to the operation certificate set to obtain a new user certificate.
[0010] According to another aspect of the present invention, there is provided a digital certificate update device configured in a certificate operation institution, including:
[0011] A revoked certificate determination module, configured to determine at least one revoked operation certificate from an operation certificate set; wherein, the revoked operation certificate is an operation certificate corresponding to a compromised digital signature algorithm; the operation certificate set includes at least two operation certificates;
[0012] A user certificate determination module, configured to determine a user certificate including the revoked operation certificate; wherein, the user certificate includes at least two operation certificate information; the user certificate is a digital certificate currently used by a target user;
[0013] A certificate update module, configured to update the user certificate according to the operation certificate set to obtain a new user certificate.
[0014] According to another aspect of the present invention, there is provided an electronic device, the electronic device includes:
[0015] At least one processor; and
[0016] A memory communicatively connected to the at least one processor; wherein,
[0017] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the digital certificate update method according to any embodiment of the present invention.
[0018] According to another aspect of the present invention, there is provided a computer-readable storage medium storing computer instructions for causing a processor to implement the digital certificate update method according to any embodiment of the present invention when executed.
[0019] According to another aspect of the present invention, there is provided a computer program product including a computer program, and the computer program implements the digital certificate update method according to any embodiment of the present invention when executed by a processor.
[0020] The technical solution of the embodiment of the present invention determines at least one revoked operation certificate from the operation certificate set; wherein, the revoked operation certificate is the operation certificate corresponding to the compromised digital signature algorithm; the operation certificate set includes at least two operation certificates; the digital signature algorithms corresponding to different operation certificates are different; determine the user certificate containing the revoked operation certificate; wherein, the user certificate contains at least two operation certificate information; the user certificate is the digital certificate currently used by the target user; update the user certificate according to the operation certificate set to obtain a new user certificate. Compared with the traditional single digital signature algorithm certificate, the above technical solution provides a new certificate issuance mechanism. By updating the revoked operation certificate in the user certificate, it is possible to achieve a trustworthy update of the certificate corresponding to the compromised digital signature algorithm in the digital certificate without sacrificing the usability and security of the existing certificate.
[0021] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present invention, nor is it used to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS
[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on these drawings.
[0023] Figure 1 is a flowchart of a method for updating a digital certificate provided according to an embodiment of the present invention;
[0024] Figure 2 is a flowchart of a method for updating a digital certificate provided according to an embodiment of the present invention;
[0025] Figure 3 is a schematic structural diagram of a digital certificate update device provided according to an embodiment of the present invention;
[0026] Figure 4 is a schematic structural diagram of an electronic device for implementing the digital certificate update method of the embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS
[0027] To enable those skilled in the art to better understand the solution of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the scope of protection of the present invention.
[0028] It should be noted that in the description and claims of the present invention and the above-mentioned accompanying drawings, the terms "first", "second", etc. are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances, so that the embodiments of the present invention described herein can be implemented in an order different from those illustrated or described herein. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.
[0029] In addition, it should be further noted that in the technical solution of the present invention, the collection, storage, use, processing, transmission, provision and disclosure of relevant information such as operation certificates, root certificates, and user certificates comply with the provisions of relevant laws and regulations and do not violate public order and good customs.
[0030] Figure 1 is a flowchart of a digital certificate update method provided according to an embodiment of the present invention. This embodiment is applicable to the situation of how to ensure the security and availability of a certificate with a compromised digital signature algorithm. This method can be executed by a digital certificate update device, which can be implemented in the form of hardware and / or software and can be integrated into an electronic device carrying the digital certificate update function, such as a server of a certificate operation institution. As Figure 1 shown, the method includes:
[0031] S110. Determine at least one revoked operation certificate from the operation certificate set.
[0032] In this embodiment, the revoked operation certificate is the operation certificate corresponding to the compromised digital signature algorithm; the operation certificate set includes at least two operation certificates; different operation certificates correspond to different digital signature algorithms, where the digital signature algorithm can be a traditional cryptographic algorithm such as RSA or ECC; preferably, the digital signature algorithm can be a quantum-resistant signature algorithm.
[0033] Among them, the operation certificate refers to the certificate of the certificate operation institution. The operation institution is also called the operation CA and is responsible for specific management work such as certificate issuance, renewal, revocation, and query. They are usually intermediate CAs or end CAs and directly interact with the RA and end users. Optionally, the operation certificate is obtained by the root institution issuing it to the certificate operation institution based on the root certificate, and the authenticity and legality of the operation CA certificate are guaranteed through the digital signature of the root institution. The operation certificate corresponds one-to-one with the root certificate. The operation certificate includes root certificate information and the public key of the operation institution. Exemplarily, the operation certificate Subroot i =(CARoot i ,,PK SubCA ), where CARoot i represents the i-th root certificate, and PK SubCA represents the public key of the operation institution. Among them, the root certificate information includes the public key of the root institution, certificate information, signature value, extension items, validity period, etc. For example, CARoot i =(PK i ,MSG,SIG i ,EXT i ,TIME i ), where PK i represents the public key of the root institution, MSG represents the certificate information, SIG i represents the signature value, EXT i represents the extension items, and TIME i represents the validity period.
[0034] The so-called root certificate is generated by the root institution according to digital signature algorithms of multiple different technical routes. Specifically, the root institution is based on digital signature algorithms of multiple different technical routes, denoted as Alg1,…,Alg n , to generate corresponding root institution private keys SK1,…,SK n , and calculate the root institution public keys PK1,…,PK n according to the root institution private keys; where n represents a natural number greater than 1. Then the root institution respectively signs certificate information such as country (C), organization (O), common name (CN), etc. with the root institution private keys to obtain signature values SIG1,…,SIG n , and then the root institution publishes the root certificate. The root certificate includes root certificate information, denoted as CARoot1,…,CARoot n , where CARoot i =(PK i ,MSG,SIG i ,EXT i ,TIME i) It should be noted that the root certificate corresponds one-to-one with the digital signature algorithm. A root institution has multiple root certificates, and each root certificate is generated based on a digital signature algorithm, that is, different root certificates correspond to different digital signature algorithms. In addition, the digital signature algorithm in the root certificate can be updated regularly.
[0035] Specifically, after it is recognized that a certain digital signature algorithm has been compromised, the root certificate and the operating certificate corresponding to the digital signature algorithm are determined, and the operating certificate is used as the revoked operating certificate. Then, the certificate operating agency determines the corresponding revoked operating certificate from the certificate operation set.
[0036] It is worth noting that in the existing digital certificate authentication system, an intermediate certificate can also be included between the root certificate and the operating certificate. The intermediate certificate is issued by the root institution to the intermediate institution and is a bridge connecting the protected root certificate and the user certificate issued to the public, forming a certificate chain. The advantage of this is that even if the intermediate certificate is compromised, the security of the root certificate is still guaranteed. When there is an intermediate certificate, this solution still applies. The root institution issues an intermediate certificate for a single intermediate institution based on each root certificate, and the intermediate certificate issues the corresponding operating certificate for the operating agency based on each intermediate certificate, that is, the digital signature algorithm - root certificate - intermediate certificate - operating certificate forms a one-to-one relationship. There is no limitation in actual application, as long as the purpose of this solution can be achieved based on this idea, it is within the protection scope of this solution.
[0037] S120. Determine the user certificate containing the revoked operating certificate.
[0038] In this embodiment, the user certificate contains at least two operating certificate information, that is, it contains at least two digital signature algorithms; the user certificate is the digital certificate currently used by the target user. It should be noted that both the root certificate and the operating certificate are digital certificates. The so-called operating certificate information refers to the relevant information contained in the operating certificate.
[0039] Among them, the user certificate is a digital certificate issued by the certificate operation institution for the target user according to the operation certificate. Optionally, the operation certificates can be classified according to information such as the performance of the digital signature algorithm (such as key generation, signature, and signature verification performance), security level, key length, and signature value size. At least two operation certificate information are selected based on the operation certificate category to generate the user certificate. Among them, the user certificate includes a basic certificate domain Basic info, an extended domain Ext info, and a signature domain Sig info. Among them, the basic certificate domain includes optional fields such as version number VerSion, serial number Serial Number, at least two digital signature algorithms Signature Algorithm, issuer Issuer, validity period Validity, subject Subject, subject public key information (Subject Public KeyInfo), issuer unique identifier (Issuer Unique ID), and subject unique identifier (Subject Unique ID); among them, the version number is used to identify the version followed by the certificate, such as X.509v1, v2, v3, etc.; the serial number is a unique number assigned by the certificate issuing authority, that is, the certificate operation institution, and is used to identify the certificate; the digital signature algorithm refers to the signature algorithm used by the certificate operation institution when issuing the certificate; the issuer describes the name of the CA in X.500 format, including information such as country (C), organization (O), department (OU), etc.; the validity period includes the certificate effective time (notBefore) and the expiration time (notAfter), usually in UTC time format; the subject describes the identity information of the certificate holder, including fields such as name (CN), organization (O), country (C), etc., and uniqueness needs to be ensured; the subject public key information includes the public key algorithm and the bit string representation of the public key value; the issuer unique identifier and the subject unique identifier are optional fields used to uniquely identify the issuer and the certificate holder.The extension field is an optional part that provides additional attributes and management functions. Common extension items include: Key Usage, Extended Key Usage, Certificate Policies, Basic Constraints, CRL Distribution Points, Subject Alternative Name, Authority Information Access (AIA). Among them, Key Usage defines the usage of the public key (such as digital signature, encryption, certificate issuance, etc.); Extended Key Usage further refines the key usage (such as TLS server authentication, code signing, etc.); Certificate Policies describe the security policies applicable to the certificate; Basic Constraints identify whether the certificate is a CA certificate and the maximum depth of the certificate chain; CRL Distribution Points provide the acquisition path of the Certificate Revocation List (CRL); Subject Alternative Name supports multi-domain name identification (such as IP address, email, etc.); Authority Information Access provides the download link for the operating CA or root CA certificate. The signature field includes a signature algorithm identifier and a signature value. Among them, the signature algorithm identifier is the same as the signature algorithm in the basic field, used to verify the signature, and contains two or more digital signature algorithms; the signature value is the result of signing the hash value of the certificate content (basic field + extension field) by the operating agency's private key with the operating agency, ensuring the integrity and authenticity of the certificate, and contains two or more signature values. Exemplarily, taking the signature of the target user by the certificate operating agency selecting the signature algorithms Alg1 and Alg2 as an example, where PK. u1 ,PK u2 are the user public keys for the signature algorithms Alg1 and Alg2 for the target user respectively. Then the internal and external records of the user certificate are:
[0040] Cert =
[0041] (PK u1 ,PK u2 ,Basic info,Ext info,Subroot1,Subroot2,Sig1,Sig2).
[0042] S130. Update the user certificate according to the operating certificate set to obtain the new user certificate.
[0043] In this embodiment, the user's new certificate refers to the digital certificate after the user's certificate is updated, and the user's new certificate contains at least two operating certificate information. It should be noted that the number of operating certificates contained in the user's new certificate and the user's certificate may be different. To ensure the availability of the user's certificate during the update interval of the user's certificate, the user's new certificate and the user's certificate contain at least one identical digital signature algorithm.
[0044] Specifically, an appropriate operating certificate can be selected from the operating certificate set to replace the revoked operating certificate in the user's certificate, and the user's new certificate can be obtained.
[0045] The technical solution of the embodiment of the present invention determines at least one revoked operating certificate from the operating certificate set; wherein, the revoked operating certificate is the operating certificate corresponding to the compromised digital signature algorithm; the operating certificate set includes at least two operating certificates; determines the user's certificate containing the revoked operating certificate; wherein, the user's certificate contains at least two operating certificate information; the user's certificate is the digital certificate currently used by the target user; updates the user's certificate according to the operating certificate set to obtain the user's new certificate. Compared with the traditional single digital signature algorithm certificate, the above technical solution provides a new certificate issuance mechanism. By updating the revoked operating certificate in the user's certificate, it is possible to achieve a trustworthy update of the certificate corresponding to the compromised digital signature algorithm in the digital certificate without losing the availability and security of the existing certificate.
[0046] Based on the above embodiment, as an optional implementation manner of the present invention, when the user's new certificate only contains two operating certificate information, then during the process of using the user's new certificate to sign or authenticate the identity, after it is recognized that the digital signature algorithms corresponding to all the operating certificates in the user's new certificate are verified to pass, the authentication is completed, otherwise the certificate is unavailable.
[0047] Specifically, when the user's new certificate only contains two operating certificate information, then during the process of using the user's new certificate to sign or authenticate the identity, only after it is recognized that the digital signature algorithms corresponding to all the operating certificates in the user's new certificate are simultaneously verified to pass, the authentication is completed.
[0048] It can be understood that when one of the digital signature algorithms in the user's certificate is compromised and the other is not, the attacker cannot forge the signatures of both algorithms at the same time, so that the old certificate can still be used normally during the update process of the user's certificate, and the new certificate is used for authentication after the update is completed, realizing the security of the certificate.
[0049] Based on the above embodiment, as an optional implementation manner of the present invention, when the user's new certificate contains at least three operating certificate information, then during the process of using the user's new certificate to sign or authenticate the identity, after it is recognized that the digital signature algorithms corresponding to the set number of operating certificates in the user's new certificate are verified to pass, the authentication is completed.
[0050] Specifically, when the user's new certificate contains at least three operating certificate information, during the process of using the user's new certificate to sign or authenticate the identity, after the digital signature methods corresponding to the set number of operating certificates in the user's new certificate are verified and passed. For example, if the user's new certificate contains 6 operating certificate information, after the digital signature algorithms corresponding to 4 operating certificates are verified and passed, the certificate authentication is completed.
[0051] It can be understood that when there are enough operating certificates included in the user's certificate and the number of compromised certificates is less than the number of operating certificates included in the user's certificate, under the premise of ensuring security authentication, a small number of digital signature algorithms can be selected for verification, which can improve the authentication rate.
[0052] It should be noted that the verification process of digital certificates is mainly used to ensure the authenticity, integrity, and validity of digital certificates. The following are the specific steps:
[0053] a) Obtain the digital certificate. When the user needs to verify a certain digital certificate, the first step is to obtain the digital certificate. For example, when accessing a secure website, the browser will automatically obtain the digital certificate of the server from the server.
[0054] b) Verify the format and syntax of the certificate. Check whether the digital certificate conforms to the format requirements of relevant specifications such as the X.509 standard, including whether all fields of the certificate are complete, correct, and the syntax is correct, etc. If the certificate format is incorrect, it will be regarded as an invalid certificate.
[0055] c) Verify the validity period of the certificate. Check the validity period of the certificate and confirm whether the current time is within the valid start and end time range of the certificate. If the current time is not within the validity period, then the certificate has expired or has not taken effect yet and cannot be trusted.
[0056] d) Verify the signature of the certificate. The digital certificate is signed by the certificate operating agency (denoted as CA) using its private key. When verifying, first obtain the public key of the CA. Usually, the root certificates of some well-known CAs are pre-installed in the operating system or browser, which contain the public key of the CA. Use the public key of the CA to decrypt the signature of the certificate to obtain a digest value. At the same time, calculate a digest value for the other parts of the certificate except the signature (usually called the certificate content) using the same hash algorithm. Compare these two digest values. If they are equal, it means that the content of the certificate has not been tampered with during the transmission process and is signed by the CA using its private key, thus proving the authenticity and integrity of the certificate.
[0057] e) Verify the revocation status of the certificate. Even if the certificate passes the above verifications, it is also necessary to check whether the certificate has been revoked. The CA maintains a Certificate Revocation List (CRL) or uses the Online Certificate Status Protocol (OCSP) to provide certificate revocation information.
[0058] f) The verifying party queries the CRL or the OCSP server to determine whether the certificate is on the revocation list. If the certificate has been revoked, then even if it is within the validity period and the signature verification passes, it cannot be trusted.
[0059] Through the above series of verification processes, it is possible to comprehensively determine whether a digital certificate is trustworthy, thereby ensuring the security of communication and transactions.
[0060] Figure 2 It is a flowchart of a method for updating a digital certificate provided according to an embodiment of the present invention. On the basis of the above embodiment, this embodiment further optimizes "updating the user certificate according to the set of operating certificates to obtain a new user certificate" and provides an optional implementation solution. As Figure 2 shown, the method includes:
[0061] S210. Determine at least one revoked operating certificate from the set of operating certificates.
[0062] Among them, the revoked operating certificate is the operating certificate corresponding to the broken digital signature algorithm; the set of operating certificates includes at least two operating certificates; the digital signature algorithms corresponding to different operating certificates are different.
[0063] It should be noted that when a digital signature algorithm is broken by the latest technology, the status of the root certificate corresponding to the digital signature algorithm is marked as the revoked status, and the status of the operating certificate is marked as the revoked status.
[0064] S220. Determine the user certificate that includes the revoked operating certificate.
[0065] Among them, the user certificate includes at least two pieces of operating certificate information; the user certificate is the digital certificate currently used by the target user.
[0066] S230. Determine the set of available operating certificates from the set of operating certificates.
[0067] Among them, the available operating certificates in the set of available operating certificates are not broken, and the set of available operating certificates is dynamically changing.
[0068] An optional way is to remove the revoked operating certificates from the set of operating certificates to obtain the set of available operating certificates.
[0069] Another optional method is to remove the revoked operation certificates from the operation certificate set to obtain a candidate operation certificate set; based on the certificate attribute information of the revoked operation certificates, determine an available operation certificate set from the candidate operation certificate set; wherein, the certificate attribute information includes at least one of signature algorithm performance, security level, key length, signature size, and application scenario.
[0070] Specifically, remove the revoked operation certificates from the operation certificate set to obtain a candidate operation certificate set, and based on the certificate attribute information of the revoked operation certificates, select candidate operation certificates in the candidate operation certificate set that are the same as or similar to the certificate attribute information of the revoked operation certificates as the operation certificates in the available operation certificate set.
[0071] It can be understood that since the application scenarios corresponding to different digital signature algorithms are different, by selecting candidate operation certificates that are the same as or similar to the certificate attribute information of the revoked operation certificates as the available operation certificate set, the security and availability of the certificates can be ensured.
[0072] S240. Determine replacement operation certificates from the available operation certificate set according to the revoked operation certificates.
[0073] An optional method is to select the same number of available operation certificates from the available operation certificate set as the replacement operation certificates.
[0074] Specifically, select the same number of available operation certificates from the available operation certificate set as the replacement operation certificates. For example, the user certificate is obtained based on two digital signature algorithms, Alg1 and Alg2. When the Alg1 digital signature algorithm is broken by the latest technology, select the available operation certificate corresponding to Alg3 from the available operation certificates as the replacement operation certificate.
[0075] Furthermore, the number of operation certificates in the user's new certificate can be greater than the number of operation certificates in the user certificate. In this case, the number of selected replacement operation certificates should be greater than the number of revoked operation certificates.
[0076] S250. Replace the revoked operation certificates in the user certificate with the replacement operation certificates, and reissue a certificate for the target user to obtain a new user certificate.
[0077] An optional method is to replace the revoked operation certificates in the user certificate with the replacement operation certificates to obtain a new operation certificate; based on the new operation certificate, reissue a certificate for the target user to obtain a new user certificate; mark the certificate status of the user certificate as the cancellation status, and mark the certificate status of the new user certificate as the available status.
[0078] Specifically, replace the revoked operation certificate in the user certificate with a replacement operation certificate to obtain a new operation certificate, and then reissue a certificate for the target user based on the new operation certificate to obtain a new user certificate. As in the above example, replace the revoked operation certificate corresponding to Alg1 with the available operation certificate corresponding to Alg3, that is, the certificate operation agency uses two digital signature algorithms, Alg2 and Alg3, to issue a new user certificate for the target user. That is, the content of the new user certificate is:
[0079] Cert ′ =
[0080] (PK u2 , PK u3 , Basic info′, Ext info′, Subroot2, Subroot3, Sig ′ 2, Sig ′ 3).
[0081] Furthermore, mark the certificate status of the user certificate as the cancellation status, and mark the certificate status of the new user certificate as the available status. During the user certificate update process, the user certificate remains available.
[0082] It should be noted that in different stages, since the trust chain of user certificate authentication needs to verify Alg1, Alg2 or Alg2, Alg3 simultaneously, and since the algorithm Alg2 has never been broken, the user signature and identity can never be effectively forged. That is, forging the signature of the Alg1 algorithm alone cannot forge the identity, ensuring that after some algorithms are broken, the user certificate remains secure, trustworthy and available throughout the entire update process.
[0083] It can be understood that since the user certificate contains multiple operation certificates, by selecting the unbroken operation certificate to replace the broken certificate in the user certificate, the user certificate can still be used during the replacement process, ensuring security, trustworthiness and availability during the certificate update process.
[0084] The technical solution provided by the embodiment of the present invention determines an available operation certificate set from the operation certificate set; determines a replacement operation certificate from the available operation certificate set according to the revoked operation certificate; replaces the revoked operation certificate in the user certificate with the replacement operation certificate, and reissues a certificate for the target user to obtain a new user certificate. The above technical solution realizes the trusted update of the user certificate based on the operation certificate set containing multiple digital signature algorithms, ensuring that the user certificate cannot be forged throughout the entire update cycle, and can prevent attackers from forging signatures or forging identities.
[0085] The certificate trusted update solution of the present invention can ensure the availability of old certificates within the update cycle, and ensure that users have available certificates at any time node. Although there are sacrifices in terms of certificate volume and verification performance, it can ensure that the electronic authentication system maintains higher security under the threat of various attacks on post-quantum cryptography.
[0086] Figure 3 It is a schematic structural diagram of a digital certificate update device provided according to an embodiment of the present invention. This embodiment is applicable to the situation of how to ensure the security and availability of certificates with compromised digital signature algorithms. The device can be implemented in the form of hardware and / or software, and can be integrated into an electronic device carrying the digital certificate update function, such as a server of a certificate operation institution. As Figure 3 shown, the device includes:
[0087] A revoked certificate determination module 310, configured to determine at least one revoked operating certificate from an operating certificate set; wherein, the revoked operating certificate is the operating certificate corresponding to the compromised digital signature algorithm; the operating certificate set includes at least two operating certificates; different operating certificates correspond to different digital signature algorithms;
[0088] A user certificate determination module 320, configured to determine a user certificate including the revoked operating certificate; wherein, the user certificate includes at least two operating certificate information; the user certificate is the digital certificate currently used by the target user;
[0089] A certificate update module 330, configured to update the user certificate according to the operating certificate set to obtain a new user certificate.
[0090] The technical solution of the embodiment of the present invention is to determine at least one revoked operating certificate from the operating certificate set; wherein, the revoked operating certificate is the operating certificate corresponding to the compromised digital signature algorithm; the operating certificate set includes at least two operating certificates; different operating certificates correspond to different digital signature algorithms; determine a user certificate including the revoked operating certificate; wherein, the user certificate includes at least two operating certificate information; the user certificate is the digital certificate currently used by the target user; update the user certificate according to the operating certificate set to obtain a new user certificate. Compared with the traditional single digital signature algorithm certificate, the above technical solution provides a new certificate issuance mechanism. By updating the revoked operating certificate in the user certificate, it can achieve the trusted update of the certificate corresponding to the compromised digital signature algorithm in the digital certificate without sacrificing the availability and security of the existing certificates.
[0091] Optionally, the digital signature algorithm is a post-quantum signature algorithm.
[0092] Optionally, the certificate update module 330 includes:
[0093] An available operation certificate set determination unit, configured to determine an available operation certificate set from an operation certificate set;
[0094] A replacement operation certificate determination unit, configured to determine a replacement operation certificate from the available operation certificate set according to a revoked operation certificate;
[0095] A certificate update unit, configured to replace the revoked operation certificate in the user certificate with the replacement operation certificate, and reissue a certificate for the target user to obtain a new user certificate.
[0096] Optionally, the available operation certificate set determination unit is specifically configured to:
[0097] Exclude the revoked operation certificate from the operation certificate set to obtain a candidate operation certificate set;
[0098] Based on the certificate attribute information of the revoked operation certificate, determine an available operation certificate set from the candidate operation certificate set; wherein, the certificate attribute information includes at least one of signature algorithm performance, security level, key length, signature size, and application scenario.
[0099] Optionally, the replacement operation certificate determination unit is specifically configured to:
[0100] Select the same number of available operation certificates as the revoked operation certificate from the available operation certificate set as the replacement operation certificate.
[0101] Optionally, the certificate update unit is specifically configured to:
[0102] Replace the revoked operation certificate in the user certificate with the replacement operation certificate to obtain a new operation certificate;
[0103] Based on the new operation certificate, reissue a certificate for the target user to obtain a new user certificate;
[0104] Mark the certificate status of the user certificate as the cancelled status, and mark the certificate status of the new user certificate as the available status.
[0105] Optionally, the operation certificate corresponds to the root certificate one by one, and the operation certificate includes root certificate information and an operation institution public key; the operation certificate is issued by the root institution to the certificate operation institution according to the root certificate.
[0106] Optionally, the root certificate corresponds to the digital signature algorithm one by one, and the root certificate includes a signature value generated by the private key pair for the certificate information based on the digital signature algorithm and a root institution public key; the digital signature algorithm in the root certificate is updated regularly.
[0107] Optionally, the device further includes a certificate authentication module, configured to:
[0108] When there are only two operation certificate information in the user's new certificate, during the process of signing or authenticating the identity using the user's new certificate, the authentication is completed only after all the quantum-resistant signature algorithms corresponding to the operation certificates in the user's new certificate are verified and passed during the identification process.
[0109] Optionally, the certificate authentication module is further configured to:
[0110] When there are at least three operation certificate information in the user's new certificate, during the process of signing or authenticating the identity using the user's new certificate, the authentication is completed only after the quantum-resistant signature algorithms corresponding to a set number of operation certificates in the user's new certificate are verified and passed during the identification process.
[0111] The digital certificate update device provided by the embodiments of the present invention can execute the digital certificate update method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing the method.
[0112] According to an embodiment of the present invention, the present invention also provides an electronic device, a readable storage medium, and a computer program product.
[0113] Figure 4 It is a schematic structural diagram of an electronic device for implementing the digital certificate update method of the embodiments of the present invention. Figure 4 FIG. shows a schematic structural diagram of an electronic device 10 that can be used to implement the embodiments of the present invention. The electronic device is intended to represent various forms of digital computers, such as, laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as, personal digital processors, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are only examples and are not intended to limit the implementation of the present invention described and / or claimed herein.
[0114] As Figure 4 shown, the electronic device 10 includes at least one processor 11, and a memory communicatively connected to at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc. Among them, the memory stores a computer program executable by at least one processor. The processor 11 can execute various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. The input / output (I / O) interface 15 is also connected to the bus 14.
[0115] Multiple components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disc, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.
[0116] The processor 11 can be various general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include but are not limited to a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the digital certificate update method.
[0117] In some embodiments, the digital certificate update method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as the storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed onto the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the digital certificate update method described above can be executed. Alternatively, in other embodiments, the processor 11 can be configured to execute the digital certificate update method by any other suitable means (e.g., by means of firmware).
[0118] The various embodiments of the systems and technologies described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGA), application specific integrated circuits (ASIC), application specific standard products (ASSP), systems on a chip (SOC), complex programmable logic devices (CPLD), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include: implemented in one or more computer programs, the one or more computer programs can be executed and / or interpreted on a programmable system including at least one programmable processor, the programmable processor can be a dedicated or general programmable processor, can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit the data and instructions to the storage system, the at least one input device, and the at least one output device.
[0119] A computer program for implementing the method of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowchart and / or block diagram to be implemented. The computer programs can be executed entirely on the machine, partially on the machine, as a stand-alone software package partially on the machine and partially on a remote machine, or entirely on a remote machine or server.
[0120] In the context of the present invention, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, the computer-readable storage medium can be a machine-readable signal medium. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
[0121] In order to provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which the user can provide input to the electronic device. Other kinds of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, speech input, or tactile input).
[0122] The systems and techniques described herein can be implemented in a computing system including backend components (e.g., as a data server), or a computing system including middleware components (e.g., an application server), or a computing system including frontend components (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described herein), or a computing system including any combination of such backend components, middleware components, or frontend components. The components of the system can be interconnected to each other by digital data communication in any form or medium (e.g., a communication network). Examples of communication networks include: local area network (LAN), wide area network (WAN), blockchain network, and the Internet.
[0123] The computing system can include a client and a server. The client and the server are generally far from each other and typically interact through a communication network. The client-server relationship is created by computer programs running on respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or a cloud host, which is a host product in the cloud computing service system, solving the defects of difficult management and weak business scalability existing in traditional physical hosts and VPS services.
[0124] It should be understood that various forms of the processes shown above can be used, steps can be reordered, added, or deleted. For example, the steps recited in the present invention can be executed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved, and no limitation is made herein.
[0125] The above specific embodiments do not constitute a limitation on the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.
Claims
1. A method for updating a digital certificate, characterized in that Applied to a certificate operation institution, including: Determine at least one revoked operation certificate from an operation certificate set; wherein, the revoked operation certificate is an operation certificate corresponding to a compromised digital signature algorithm; the operation certificate set includes at least two operation certificates; The digital signature algorithms corresponding to different operation certificates are different; Determine a user certificate containing the revoked operation certificate; wherein, the user certificate contains at least two operation certificate information; the user certificate is the digital certificate currently used by the target user; Update the user certificate according to the operation certificate set to obtain a new user certificate.
2. The method according to claim 1, characterized in that The digital signature algorithm is a quantum-resistant signature algorithm.
3. The method according to claim 1, wherein Updating the user certificate according to the operation certificate set to obtain a new user certificate includes: Determine an available operation certificate set from the operation certificate set; Determine a replacement operation certificate from the available operation certificate set according to the revoked operation certificate; Replace the revoked operation certificate in the user certificate with the replacement operation certificate, and reissue a certificate for the target user to obtain a new user certificate.
4. The method according to claim 3, characterized in that, Determining an available operation certificate set from an operation certificate set includes: Remove the revoked operation certificate from the operation certificate set to obtain a candidate operation certificate set; Based on the certificate attribute information of the revoked operation certificate, determine an available operation certificate set from the candidate operation certificate set; wherein, the certificate attribute information includes at least one of signature algorithm performance, security level, key length, signature size, and application scenario.
5. The method according to claim 3, characterized in that Determining a replacement operation certificate from the available operation certificate set according to the revoked operation certificate includes: Select the same number of available operation certificates as the revoked operation certificate from the available operation certificate set as the replacement operation certificate.
6. The method according to claim 3, wherein Replacing the revoked operation certificate in the user certificate with the replacement operation certificate and reissuing a certificate for the target user to obtain a new user certificate includes: Replace the revoked operation certificate in the user certificate with the replacement operation certificate to obtain a new operation certificate; Based on the new operation certificate, reissue a certificate for the target user to obtain a new user certificate; Mark the certificate status of the user certificate as the cancelled status, and mark the certificate status of the new user certificate as the available status.
7. The method according to any one of claims 1-6, characterized in that, The operation certificate corresponds to the root certificate one by one. The operation certificate includes root certificate information and the public key of the operation institution. The operation certificate is issued by the root institution to the certificate operation institution according to the root certificate.
8. The method according to any one of claims 7, characterized in that The root certificate corresponds to the digital signature algorithm one by one. The root certificate includes a signature value generated by the private key pair for the certificate information based on the digital signature algorithm and the public key of the root institution. The digital signature algorithm in the root certificate is updated regularly.
9. The method according to any one of claims 1-6, characterized in that, Also included: When the new user certificate only contains two operation certificate information, during the process of using the new user certificate to sign or authenticate the identity, authentication is completed only after all the digital signature algorithms corresponding to all the operation certificates in the new user certificate are verified to pass.
10. The method according to any one of claims 1-6, characterized in that, Also included: When the new user certificate contains at least three operation certificate information, during the process of using the new user certificate to sign or authenticate the identity, authentication is completed only after the digital signature algorithms corresponding to a set number of operation certificates in the new user certificate are verified to pass.
11. An electronic device, characterized in that, The electronic device includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein, the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the digital certificate update method according to any one of claims 1-9.