Mobile terminal digital certificate electronic signature method

Abstract

The invention relates to a mobile terminal digital certificate electronic signature method. According to the method, based on the characteristics of public keys and private keys and on the premise of not violating the rules prescribed by the electronic signature law, for example, a private key should be generated in a user terminal and should not leave the user terminal, a private key should not be transmitted via the network, and the like, a private key is discarded and locally and discretely stored after encryption, and the cloud uses strategies such as storing the public key and certificate to ensure that the private key is not locally cracked. In the transport layer, strategies such as double key and one-time pad are adopted to ensure that important information is not intercepted and decoded in network transmission. The identity of a certificate applicant is verified through the interface of an issuing bank, the user identity verification result of the bank counter is inherited, and therefore, remote online certificate issuing is realized in the system. The method not only can ensure that all the links of certificate applying, certificate issuing, certificate storing and certificate using are safe, but also can prevent hackers and Trojans from stealing certificate files, prevent network package-capture parsing, prevent password intercepting through screen capture and prevent an algorithm from being known through software decompiling.

Description

technical field [0001] The invention relates to the technical field of mobile communication, in particular to a mobile terminal digital certificate electronic signature method. Background technique [0002] With the rapid development of Internet e-commerce, hardware digital certificates such as USBkeys, which are similar to U disks, have been widely used in online banking services. However, today more e-commerce and transactions are transitioning and developing to the mobile Internet, and the demand for using digital certificates for electronic signatures in mobile terminals (mobile phones) is increasing day by day. However, unlike a PC computer, a mobile phone cannot use a hardware digital certificate if a USB key cannot be inserted. The technology of issuing digital certificates and signing them in mobile phones is not difficult. The problem is how to effectively protect the digital certificates containing personal identity information and the user's private key from bein...

AI Technical Summary

Problems solved by technology

For example, the usual server password verification is to encrypt the user password and store it on the server. When the user logs in, the decrypted password is compared with the password submitted by the user this time. There are user passwords. Although they are encrypted, they still exist on the server in the final analysis. It is inevitable that internal technicians will have the opportunity to crack and master user passwords.

Images