Mail server access method and system based on digital certificate

Abstract

The invention discloses a mail server access method based on a digital certificate. The method comprises the following steps: firstly, an authentication server with both an authentication server certificate and an authentication server private key respectively issues a mail server certificate and a mail server private key to a mail server and issues a user terminal certificate and a user terminal private key to a user terminal; secondly, the user terminal is accessed into the mail server providing mail access service, based on certificates held by the user terminal, the mail server and the authentication server, and the corresponding private keys, identity information verification can be carried out to enable the user terminal and the mail server to achieve mutual and bidirectional authentication, so as to complete synchronization of data secret keys for confidentiality of mail transfer between the user terminal and the mail server; and thirdly, the user terminal and the mail server which complete mutual and bidirectional authentication utilize the data secret key to achieve secure mail receiving and transmitting. The invention also discloses a mail server access system based on the digital certificate.

Description

technical field [0001] The invention relates to the technical field of electronic information, in particular to a digital certificate-based mail server access method and system. Background technique [0002] With the continuous development of network technology, users hope to communicate through the network, so the network-based e-mail systems and solutions that can provide real-time and fast information exchange functions have been widely used. However, due to the high sensitivity of emails and the highly open nature of the network, how to ensure security is a very important issue when using mobile devices to access emails. [0003] In the current mail server system, there may be multiple mail servers in the system, and one mail server may be accessed by multiple users at the same time, and these users are completely independent, and the geographical locations of the mail servers and user terminals are distributed everywhere. of. In this case, it is very difficult to mana...

AI Technical Summary

Problems solved by technology

[0007] The embodiment of the present invention proposes a mail server access method and system based on a digital certificate, which solves the mutual and two-way identity verification between the user terminal and the mail server during the access process of the current mail server system, and the data confidentiality of the user sending and receiving mail. question

Images