Method for creating digital signatures by cooperation of client and server

Abstract

The invention discloses a method for creating digital signatures by cooperation of a client and a server comprising that the client receives the requests of digital signatures from the external applications. The client sends signature original text m and personal identifying information identity of users to the server according to the requests of digital signatures from the external applications. The server tests whether a private key is revoked or not according to the personal identifying information identity of users. The server lookups corresponding second private key d2 according to the personal identifying information identity of users received if the private keys are revoked. First signature information S 1 is produced by utilizing the corresponding second private key d2 to make digital signatures through the signature original text m. And the first signature information S 1 is sent to the client. The method for creating the digital signatures by the cooperation of the client and the server has the advantages of achieving the high use complexity of users caused by the requirements that the users must carry hardware security devices to complete the digital signature operation in existing methods, and achieving the technical matters that users' signature operation cannot be terminated caused by the cancellation of the client key in time in the existing methods.

Description

technical field [0001] The invention belongs to the field of information security, and more specifically relates to a method for a client and a server to cooperatively generate a digital signature. Background technique [0002] At present, business systems mostly use Public Key Infrastructure (PKI) systems based on digital certificates to ensure business data security. Digital certificates are issued by Certificate Authority (CA) or third-party CAs. The public key cryptography mechanism with the certificate as the core can encrypt and decrypt, digitally sign and verify the information transmitted on the network, so as to ensure the confidentiality, integrity and authenticity of the transaction entity of the message transmitted on the network, as well as the non-repudiation of the signature , thereby ensuring the security of network applications. [0003] In the PKI system with digital certificate as the core, the digital signature is independently calculated by the client b...

AI Technical Summary

Problems solved by technology

[0007] Aiming at the above deficiencies or improvement needs of the prior art, the present invention provides a method for the client and the server to collaboratively generate a digital signature. The technical problems caused by the high complexity of the user's use caused by the signature operation, and the fact that the client key cannot be revoked in time lead to the inability to terminate the user's signature operation

Images