Intelligent terminal application program installing file networking digital signature method

Abstract

The invention relates to an intelligent terminal application program installing file networking digital signature method. A developer uses a local signature card to sign a to-be-signed source file to generate a local signature file with a local end signature tool. The local signature file is sent to a signature server. After the local signature file passes data verification of the signature server, the local signature file is sent to a network signature terminal, a network signature card of a manufacturer is used for signature, a network signature file is generated and is sent back to the signature server, and network signature file is sent to the local end signature tool to generate a final signature file. Private key data is stored in the signature card and cannot be read, a private key of the signature card can be used for signature only after code verification is passed, the storing and using safety of the private key is improved, a signature server end verifies local signature data accuracy, local certificate validity, developer identity legality, and the manufacturer can authorize and control signature authority limit.

Description

technical field [0001] The invention relates to the field of application program installation file signatures, in particular to a networked digital signature method for application program installation files. Background technique [0002] With the advent of the intelligent era, the development of smart terminals (mobile phones, POS, TVs and other terminals that can install smart applications) is also accelerating. The development of smart terminals has also brought continuous innovation of application software. On the smart terminal, users can realize more functions by installing their favorite application software. However, due to the diversity of application software on the network, the security of smart terminals is also facing great challenges. Usually different application software is designed by different software providers or software designers, and the functions of various application software are also different. In recent years, due to the emergence of many malici...

AI Technical Summary

Problems solved by technology

The security of the private key storage is low. The private key data used in the digital signature is stored in the form of a file on the PC, and there is a risk of being copied. At the same time, there is no verification of the identity of the signer during the signing process.

Due to the low security guarantee of the private key and digital certificate stored on the PC, it is easy to be copied or infected by poisoning. In this way, when others illegally obtain the private key and digital certificate, they will carry out illegal activities, and the rights and interests of the parties will not be protected.

Images