SYSTEM AND METHOD FOR REMOTE AND SECURELY UPLOADING AND RENEWING ELECTRONIC SIGNATURE CERTIFICATES TO HARDWARE SIGNATURE DEVICES.

Abstract

The invention relates to a system and method for remotely and securely loading and renewing an electronic signature certificate belonging to a user into a secure element within a hardware signature device connected to the user's computer; in this context, the user ID, device ID, and transaction session are matched together on the server side, a person-device-transaction locking mechanism is implemented to protect the same user and device throughout the transaction, the certificate is generated in a secure infrastructure and preferably transmitted to the client application via mTLS, and injected only into the verified hardware signature device; the invention also reduces the risks of physical contact, hardware logistics, loading to the wrong device, and loss of transaction integrity by enabling certificate renewal without changing the existing hardware, multi-channel triggering, verification with the active certificate or alternative remote authentication methods, and secure management of the old certificate when necessary.