Digital certificate lightweight transmission method and system thereof

Abstract

The invention provides a digital certificate lightweight transmission method. The method comprises the following steps: presetting trust certificates stored in a broadcast terminal device to generatea trust certificate list, and sending the trust certificate list to an authentication center device in the form of an application request message; receiving authorization message data information returned by the authentication center equipment according to the application request message, broadcasting on the broadcast terminal equipment; and the broadcast terminal device identifies the certificatenumber of the authorized broadcast terminal device, and when the certificate number of the authorized broadcast terminal device corresponds to the broadcast terminal device, the broadcast terminal device verifies the digitally signed trust certificate list and the digitally signed trust certificate data according to a preset root certificate and stores the verified trust certificate list and thedigitally signed trust certificate data. Through a lightweight digital certificate protocol, the problems of limited storage capacity of broadcast terminal equipment and broadcast and television network transmission are solved, and the mode that the validity of the digital certificate can be verified only by depending on OCSP and LDAP services is simplified in a safe white list mode.

Description

technical field [0001] The present application relates to the field of information security, in particular to a digital certificate lightweight transmission method and system. Background technique [0002] Traditional digital certificates usually adopt the X509 standard, and the size of the certificate is large. The commonly used X.509v3 version certificate includes a series of contents such as version number, certificate serial number, issuer name, subject, etc., and the general length is 500 bytes to 1.5 Kbytes, such a large amount of data is not suitable for transmission in broadcast wireless networks, especially narrowband transmissions such as FM radio and medium wave radio. [0003] X.509 standard certificates generally adopt the DER encoding mode, and the encoding and decoding are relatively complicated. For many terminals in the broadcasting field, the equipment itself is generally designed with a single-chip microcomputer, and internal storage and computing resource...

AI Technical Summary

Problems solved by technology

In the field of broadcasting, the use of X.509 standard certificates and services such as OCSP and LDAP requires the establishment of corresponding information systems on county-level platforms. However, the level of informatization in these county-level and township-level units is relatively low, and their operation and management capabilities are weak. With limited investment, building these systems will greatly increase the financial pressure of such units, and even if they are built, subsequent operation and maintenance work will be very difficult

Images