Mobile electronic signature-based trusteeship key use method and system, computer equipment and storage medium

Abstract

The invention relates to the technical field of PKI (Public Key Infrastructure), in particular to a mobile electronic signature-based trusteeship key use method and system, computer equipment and a storage medium. The method comprises the following steps: a mobile electronic signature client applies for an institution certificate, hosts the institution certificate and a private key in cloud password equipment, generates user private keys, dispersedly stores the user private keys in the mobile electronic signature client and a cloud collaborative signature system, and applies for a personal certificate; the mobile electronic signature client requests an institution certificate or a private key to authorize and verify; the mobile electronic signature server performs authority verification on the individual user, processes the service data by using an institution certificate or a private key, and returns a result; and the service processing record is digitally signed and stored by using the private key of the individual user. According to the method, the cloud password service technology is adopted to carry out centralized management on the secret keys, digital signature storage is carried out on log records while password services are provided for authorized users, and it is guaranteed that behaviors of the authorized users are not repudiated while the security of the private keys is guaranteed.

Description

technical field [0001] The present application relates to the technical field, in particular to a method, system, computer equipment and storage medium for using an escrow key based on a mobile electronic signature. Background technique [0002] With the continuous development of data informatization and Internet technology, encryption technology has played an increasingly important role in network and information security. Cryptography technology is a technology for encrypting, analyzing, identifying and confirming information, and managing keys. It can effectively guarantee user identity authentication in the network, the confidentiality of data messages is true and cannot be tampered with, and business behavior is undeniable. It is widely used in the network. in all levels. According to technical characteristics, modern cryptography algorithms are mainly divided into three categories: symmetric algorithms, asymmetric algorithms, and digest algorithms. Among them, asymmet...

AI Technical Summary

Problems solved by technology

In this implementation method, the organization certificate and private key are handed over to authorized users for safekeeping, and there are several problems as follows: First, there is a risk that the private key may be leaked or used by an illegal user

Second, there is a risk of authorized users illegally using organization certificates and private keys and denying them afterwards

Third, there is a risk that the data encrypted using the agency certificate cannot be decrypted due to the loss of the private key

Images