CN112926095A - Digital certificate handling method, system, mobile terminal and storage medium - Google Patents
Digital certificate handling method, system, mobile terminal and storage medium Download PDFInfo
- Publication number
- CN112926095A CN112926095A CN202110076644.9A CN202110076644A CN112926095A CN 112926095 A CN112926095 A CN 112926095A CN 202110076644 A CN202110076644 A CN 202110076644A CN 112926095 A CN112926095 A CN 112926095A
- Authority
- CN
- China
- Prior art keywords
- digital certificate
- information
- signature
- verification
- application information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 27
- 238000012795 verification Methods 0.000 claims abstract description 93
- 230000008520 organization Effects 0.000 claims description 47
- 238000013475 authorization Methods 0.000 claims description 35
- 238000004590 computer program Methods 0.000 claims description 11
- 230000011218 segmentation Effects 0.000 claims description 11
- 238000003709 image segmentation Methods 0.000 claims description 6
- 230000007246 mechanism Effects 0.000 claims description 4
- RWSOTUBLDIXVET-UHFFFAOYSA-N Dihydrogen sulfide Chemical compound S RWSOTUBLDIXVET-UHFFFAOYSA-N 0.000 abstract description 7
- 230000000694 effects Effects 0.000 description 4
- 238000010586 diagram Methods 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 238000004891 communication Methods 0.000 description 2
- 238000005260 corrosion Methods 0.000 description 2
- 230000007797 corrosion Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F18/00—Pattern recognition
- G06F18/20—Analysing
- G06F18/22—Matching criteria, e.g. proximity measures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
Abstract
The invention provides a digital certificate handling method, a system, a mobile terminal and a storage medium, wherein the method comprises the following steps: receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order; if a payment prompt aiming at the payment prompt is received, carrying out information verification on the digital certificate application information carried in the digital certificate transaction instruction; if the digital certificate application information is qualified, generating a digital certificate signature aiming at the digital certificate application information, and carrying out signature verification on the generated digital certificate signature; and if the digital certificate signature is qualified, generating a target digital certificate according to the digital certificate signature and the digital certificate application information, and sending the target digital certificate to a sending end of the digital certificate handling instruction. The invention can automatically generate the target digital certificate by adopting an online mode, so that a user does not need to transact the digital certificate by adopting an offline mode, and the digital certificate transacting efficiency is improved.
Description
Technical Field
The invention relates to the technical field of digital certificate issuing, in particular to a digital certificate handling method, a digital certificate handling system, a mobile terminal and a storage medium.
Background
The digital certificate is used as a proving mode for identifying identity information of each communication party in internet communication, and the application range of the digital certificate relates to various industries needing identity authentication and data security, including industrial and commercial, tax, social security, customs, quality supervision, medical treatment, finance, securities, insurance, tourism and other online business systems and electronic commerce systems.
The digital certificate is mainly used for identifying the identity of a digital certificate owner or an enterprise, comprises personal or enterprise identity information and public keys thereof, such as user names, certificate numbers, organization names, business licenses, legal identity cards and the like, and is a certificate which is issued by a legal third-party electronic authentication service organization and contains personal identity card information, is used for marking the identity of the enterprise in network activities such as information exchange, electronic signature, electronic government affairs, electronic commerce and the like, and ensures the safety, integrity, uniqueness and non-repudiation of the information in transmission.
In the existing digital certificate handling process, all the digital certificates are handled in an offline mode, a user needs to go to a designated certificate handling department for manual handling, and therefore operation of the user is complicated, and the digital certificate handling efficiency is reduced.
Disclosure of Invention
The embodiment of the invention aims to provide a digital certificate handling method, a digital certificate handling system, a mobile terminal and a storage medium, and aims to solve the problem of low digital certificate handling efficiency caused by off-line digital certificate handling in the existing digital certificate handling process.
The embodiment of the invention is realized in such a way that a digital certificate handling method comprises the following steps:
receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order;
if a payment prompt aiming at the payment prompt is received, carrying out information verification on the digital certificate application information carried in the digital certificate transaction instruction;
if the digital certificate application information is qualified, generating a digital certificate signature aiming at the digital certificate application information, and carrying out signature verification on the generated digital certificate signature;
and if the digital certificate signature is qualified, generating a target digital certificate according to the digital certificate signature and the digital certificate application information, and sending the target digital certificate to a sending end of the digital certificate transaction instruction.
Further, the step of performing information verification on the digital certificate application information carried in the digital certificate handling instruction includes:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
and inquiring application authorization information according to the information identifier, and respectively carrying out information verification on the legal representative person authorization book, the authorized person identification card, the business permit and the organization code card according to the application authorization information.
Further, the step of determining the legal representative's certificate, the authorized person's ID card, the business permit and the organization code card for inquiring the digital certificate application information according to the information identifier includes:
respectively acquiring legal representative identification, authorized person identification, license identification and mechanism code identification in the information identification;
and respectively matching the legal representative identifier, the authorized person identifier, the license identifier and the organization code identifier with the picture in the digital certificate application information to obtain the legal representative authorization book, the authorized person identity card, the business license and the organization code card.
Still further, the step of generating a digital certificate signature for the digital certificate application information includes:
acquiring a public key and a secret key parameter of a target authentication server, and acquiring a signature parameter in the digital certificate application information, wherein the signature parameter comprises an enterprise name, an enterprise type and/or a uniform credit code;
and signing the acquired signature parameters according to the public key and the key parameters to obtain the digital certificate signature.
Further, the step of performing information verification on the digital certificate application information carried in the digital certificate handling instruction includes:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
respectively obtaining verification areas corresponding to the information identifiers, and respectively carrying out image segmentation on the legal representative certificate, the authorized person identification card, the business permit and the organization code card according to the verification areas to obtain verification segmentation images;
carrying out image recognition on the verification segmentation image to obtain image information, and acquiring standard information corresponding to the information identification;
comparing the image information and the standard information corresponding to the same information identifier;
if the comparison between the image information corresponding to the same information identifier and the standard information is qualified, judging that the digital certificate application information is qualified in verification;
and if the comparison between the image information corresponding to any one of the information identifications and the standard information is unqualified, judging that the digital certificate application information is unqualified in verification.
Still further, the step of signature verifying the generated digital certificate signature comprises:
acquiring a decryption algorithm corresponding to a public key in a target authentication server, and decrypting the digital certificate signature according to the acquired decryption algorithm to obtain a decrypted signature;
if the decrypted signature is the same as the signature parameter, judging that the generated digital certificate signature is qualified;
and if the decrypted signature is not the same as the signature parameter, judging that the generated digital certificate signature is unqualified in verification.
Another object of an embodiment of the present invention is to provide a digital certificate handling system, including:
the order generation module is used for receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order;
the information verification module is used for verifying the information of the digital certificate application information carried in the digital certificate transaction instruction if a payment prompt aiming at the payment prompt is received;
the signature verification module is used for generating a digital certificate signature aiming at the digital certificate application information and carrying out signature verification on the generated digital certificate signature if the digital certificate application information is qualified in verification;
and the digital certificate generation module is used for generating a target digital certificate according to the digital certificate signature and the digital certificate application information if the digital certificate signature is qualified in verification, and sending the target digital certificate to a sending end of the digital certificate handling instruction.
Still further, the information verification module is further configured to:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
and inquiring application authorization information according to the information identifier, and respectively carrying out information verification on the legal representative person authorization book, the authorized person identification card, the business permit and the organization code card according to the application authorization information.
Another object of an embodiment of the present invention is to provide a mobile terminal, including a storage device and a processor, where the storage device is used to store a computer program, and the processor runs the computer program to make the mobile terminal execute the above digital certificate handling method.
Another object of an embodiment of the present invention is to provide a storage medium, which stores a computer program used in the above-mentioned mobile terminal, wherein the computer program, when executed by a processor, implements the steps of the above-mentioned digital certificate handling method.
The embodiment of the invention generates a certificate transacting order according to a digital certificate transacting instruction and sends a payment prompt to the certificate transacting order so as to achieve the effect of automatically prompting a user to transact and pay for a digital certificate, if the payment prompt aiming at the payment prompt is received, the digital certificate application information carried in the digital certificate transacting instruction is verified to automatically detect whether the digital certificate application information carried in the digital certificate transacting instruction is valid, if the digital certificate application information is verified to be qualified, a digital certificate signature is generated aiming at the digital certificate application information so as to automatically generate a digital certificate signature, the generated digital certificate signature is verified to automatically detect whether the generated digital certificate signature is correct, if the digital certificate signature is verified to be qualified, a target digital certificate is generated according to the digital certificate signature and the digital certificate application information, the user does not need to transact the digital certificate in an offline mode, the operation of the user is facilitated, and the digital certificate transacting efficiency is improved.
Drawings
FIG. 1 is a flow chart of a digital certificate handling method according to a first embodiment of the present invention;
FIG. 2 is a flow chart of a digital certificate handling method according to a second embodiment of the present invention;
FIG. 3 is a schematic structural diagram of a digital certificate handling system according to a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of a mobile terminal according to a fourth embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
In order to explain the technical means of the present invention, the following description will be given by way of specific examples.
Example one
Referring to fig. 1, a flowchart of a digital certificate handling method according to a first embodiment of the present invention is shown, which includes the steps of:
step S10, receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order;
the digital certificate transaction instruction can be transmitted in a voice instruction, a touch instruction or a wireless signal instruction mode, and when the digital certificate transaction instruction sent by any user side is received, it is determined that the operation user corresponding to the user side needs to transact the digital certificate.
In the step, a certificate handling order is generated according to the digital certificate handling instruction, and a payment prompt is sent to the certificate handling order, so that an operating user can be automatically prompted to pay, a payment address in the payment prompt can be any appointed third party payment platform, optionally, an order number and order information corresponding to the certificate handling order are stored in the payment prompt, and the order information is used for representing instruction content of the digital certificate handling instruction.
Step S20, if receiving the payment prompt aiming at the payment prompt, then carrying out information verification on the digital certificate application information carried in the digital certificate transaction instruction;
when the third party payment platform receives payment for the certificate transacted order, a payment prompt is automatically sent for the payment prompt, and the operation user is judged to have paid for the certificate transacted order by sending the payment prompt.
In the step, whether the digital certificate application information carried in the digital certificate handling instruction can be normally handled is judged by performing information verification on the digital certificate application information carried in the digital certificate handling instruction.
Specifically, in this step, the digital certificate application information may be stored in the digital certificate transaction instruction in a picture form, and the digital certificate application information includes a legal representative certificate, an authorized person identification card, a business license, and/or an organization code card.
Optionally, in this step, if the digital certificate application information is not qualified in the verification, it is determined that the digital certificate application information is not qualified, that is, the digital certificate application information does not satisfy the application transaction condition of the digital certificate.
Step S30, if the digital certificate application information is qualified, generating a digital certificate signature for the digital certificate application information, and performing signature verification on the generated digital certificate signature;
if the digital certificate application information is verified to be qualified, the digital certificate application information is judged to meet the application and handling conditions of the digital certificate, and a digital certificate signature is generated aiming at the digital certificate application information to guarantee the handling operation of the subsequent digital certificate.
Specifically, in this step, the step of generating a digital certificate signature for the digital certificate application information includes:
acquiring a public key and a secret key parameter of a target authentication server, and acquiring a signature parameter in the digital certificate application information, wherein the signature parameter comprises an enterprise name, an enterprise type and/or a uniform credit code;
signing the acquired signature parameters according to the public key and the key parameters to obtain the digital certificate signature;
in this step, the obtained signature parameters are encrypted and signed according to the public key and the secret key parameters to generate a digital certificate signature corresponding to the digital certificate application information.
Further, the step of signature verifying the generated digital certificate signature includes:
acquiring a decryption algorithm corresponding to a public key in a target authentication server, and decrypting the digital certificate signature according to the acquired decryption algorithm to obtain a decrypted signature;
if the decrypted signature is the same as the signature parameter, judging that the generated digital certificate signature is qualified;
if the decrypted signature is not the same as the signature parameter, determining that the generated digital certificate signature is unqualified in verification;
the decryption algorithm corresponding to the public key in the target authentication server can be set according to requirements, and is used for decrypting the generated digital certificate signature and comparing the decrypted signature obtained through decryption with the signature parameters to judge whether the generated digital certificate signature is qualified or not.
Optionally, in this step, if the decrypted signature is different from the signature parameter, it is determined that the generated digital certificate signature has an error, and the generation of the digital certificate signature may be performed again by sending an error prompt.
Further, in this step, when the number of applications of generating a digital certificate signature by the same digital certificate application information within a preset time is greater than a number threshold, a certificate signature exception prompt is sent to prompt a user to manually verify the digital certificate application information.
Step S40, if the signature of the digital certificate is qualified, generating a target digital certificate according to the signature of the digital certificate and the application information of the digital certificate, and sending the target digital certificate to a sending end of a digital certificate handling instruction;
the target digital certificate is automatically generated according to the digital certificate signature and the information such as the organization name, the validity period, the seal and the like in the digital certificate application information, so that a user does not need to transact the digital certificate in an offline mode, and the operation of the user is facilitated.
In this embodiment, a certificate transaction order is generated according to a digital certificate transaction instruction, and a payment prompt is sent to the certificate transaction order, so as to achieve the effect of automatically prompting a user to pay for the transaction of a digital certificate, if a payment prompt for the payment prompt is received, a digital certificate signature is generated by generating the digital certificate application information carried in the digital certificate transaction instruction, so as to automatically detect whether the digital certificate application information carried in the digital certificate transaction instruction is valid, if the digital certificate application information is verified to be qualified, a digital certificate signature is automatically generated by generating the digital certificate application information, a signature verification is performed on the generated digital certificate signature, so as to automatically detect whether the generated digital certificate signature is correct, if the digital certificate signature is verified to be qualified, a target digital certificate is generated according to the digital certificate signature and the digital certificate application information, the user does not need to transact the digital certificate in an offline mode, the operation of the user is facilitated, and the digital certificate transacting efficiency is improved.
Example two
Referring to fig. 2, a flowchart of a digital certificate handling method according to a second embodiment of the present invention is shown, where the digital certificate handling method according to the second embodiment is used to further refine step S20 in the first embodiment, and includes the steps of:
step S21, respectively obtaining the information identification in the digital certificate application information, and determining and inquiring the legal representative 'S authorization book, authorized person' S ID card, business permit and organization code card of the digital certificate application information according to the information identification;
the information identifier is a type identifier, the type identifier is used for representing image types corresponding to different images in the digital certificate application information, and the type of the type identifier comprises an authorization book type, an identity card type, a license type and a code card type.
In this step, the legal representative's certificate, the authorized person's ID card, the business permit and the organization code card in the digital certificate application information are obtained by respectively obtaining the information identifiers corresponding to different images in the digital certificate application information and respectively identifying the types of the information identifiers.
Step S22, respectively obtaining the verification areas corresponding to the information identifiers, and respectively performing image segmentation on the legal representative' S certificate, the authorized person identification card, the business permit and the organization code card according to the verification areas to obtain verification segmentation images;
in this embodiment, a verification area lookup table is prestored, and the verification area corresponding to the information identifier is obtained by matching the identifier type corresponding to the information identifier with the verification area lookup table, where the verification area lookup table stores corresponding relationships between different identifier types and corresponding verification areas.
In this step, the image segmentation is performed on the legal representative's certificate, the authorized person's identity card, the business permit or the organization code card according to the obtained area coordinates corresponding to the verification area, so as to obtain the verification segmentation image corresponding to the legal representative's certificate, the authorized person's identity card, the business permit or the organization code card, thereby effectively facilitating the subsequent information verification on the legal representative's certificate, the authorized person's identity card, the business permit or the organization code card.
Step S23, carrying out image recognition on the verification segmentation image to obtain image information, and acquiring standard information corresponding to the information identification;
the image information is obtained by performing image corrosion processing on the verification segmented image, extracting an image contour in the verification segmented image after the image corrosion processing, and matching the extracted image contour with an image database, wherein the image database stores preset information such as characters, letters or numbers.
In this embodiment, an information lookup table is prestored, and a corresponding relationship between different information identifiers and corresponding standard information is stored in the information lookup table, so that the corresponding standard information is obtained by matching the information identifiers in the digital certificate application information with the information lookup table, and the standard information is used to detect whether the image information corresponding to the information identifiers is accurate.
Step S24, comparing the image information and the standard information corresponding to the same information identifier;
and comparing the image information corresponding to the same information identifier with the standard information to respectively judge whether the image information corresponding to the information identifier is accurate.
Specifically, in this step, the verification divided images corresponding to the type of the certificate of authority, the type of the identification card, the type of the license, and the type of the code card are compared with the standard information, respectively, to determine whether the legal representative certificate of authority, the identification card of the authorized person, the business license, and the code card of the organization in the digital certificate application information are accurate.
Step S25, if the comparison between the image information corresponding to the same information identifier and the standard information is qualified, determining that the digital certificate application information is qualified;
when the comparison between the image information corresponding to the same information identifier and the standard information is qualified, the legal representative's certificate, the authorized person's identity card, the business permit and the organization code card in the digital certificate application information are all determined to be accurate, that is, the information verification of the digital certificate application information carried in the digital certificate transaction instruction is qualified.
Step S26, if the comparison between the image information corresponding to any information identifier and the standard information is not qualified, determining that the digital certificate application information is not qualified in verification;
optionally, in this step, referring to step S20 in the embodiment of fig. 1, the step of performing information verification on the digital certificate application information carried in the digital certificate transaction instruction includes:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
and inquiring application authorization information according to the information identifier, and respectively carrying out information verification on the legal representative person authorization book, the authorized person identification card, the business permit and the organization code card according to the application authorization information.
Further, in this embodiment, the step of determining, according to the information identifier, a legal representative certificate, an authorized person identification card, a business license, and an organization code card for querying the digital certificate application information includes:
respectively acquiring legal representative identification, authorized person identification, license identification and mechanism code identification in the information identification;
and respectively matching the legal representative identifier, the authorized person identifier, the license identifier and the organization code identifier with the picture in the digital certificate application information to obtain the legal representative authorization book, the authorized person identity card, the business license and the organization code card.
In this embodiment, the information identifiers corresponding to different images in the digital certificate application information are respectively obtained, and the type identification is respectively performed on the information identifiers to identify and obtain the legal representative certificate, the authorized person identification card, the business permit and the organization code card in the digital certificate application information, the image segmentation is performed on the legal representative certificate, the authorized person identification card, the business permit or the organization code card according to the area coordinates corresponding to the obtained verification area to obtain the verification segmentation image corresponding to the legal representative certificate, the authorized person identification card, the business permit or the organization code card, so that the subsequent information verification on the legal representative certificate, the authorized person identification card, the business permit or the organization code card is effectively facilitated, and the type of the certificate, the type of the identification card, the type of the authorization card, the business permit or the organization code card is performed, And respectively carrying out information comparison on the verification segmentation images corresponding to the license type and the code card type with standard information so as to judge whether the legal representative person authorization book, the authorized person identity card, the business license and the organization code card in the digital certificate application information are accurate or not.
EXAMPLE III
Referring to fig. 3, a schematic structural diagram of a digital certificate handling system 100 according to a third embodiment of the present invention is shown, including: an order generation module 10, an information verification module 11, a signature verification module 12 and a digital certificate generation module 13, wherein:
the order generating module 10 is configured to receive a digital certificate handling instruction, generate a certificate handling order according to the digital certificate handling instruction, and send a payment prompt to the certificate handling order.
And the information verification module 11 is configured to perform information verification on the digital certificate application information carried in the digital certificate transaction instruction if a payment prompt for the payment prompt is received.
Wherein, the information verification module 11 is further configured to: respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
and inquiring application authorization information according to the information identifier, and respectively carrying out information verification on the legal representative person authorization book, the authorized person identification card, the business permit and the organization code card according to the application authorization information.
Further, the information verification module 11 is further configured to: respectively acquiring legal representative identification, authorized person identification, license identification and mechanism code identification in the information identification;
and respectively matching the legal representative identifier, the authorized person identifier, the license identifier and the organization code identifier with the picture in the digital certificate application information to obtain the legal representative authorization book, the authorized person identity card, the business license and the organization code card.
Further, the information verification module 11 is further configured to: respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
respectively obtaining verification areas corresponding to the information identifiers, and respectively carrying out image segmentation on the legal representative certificate, the authorized person identification card, the business permit and the organization code card according to the verification areas to obtain verification segmentation images;
carrying out image recognition on the verification segmentation image to obtain image information, and acquiring standard information corresponding to the information identification;
comparing the image information and the standard information corresponding to the same information identifier;
if the comparison between the image information corresponding to the same information identifier and the standard information is qualified, judging that the digital certificate application information is qualified in verification;
and if the comparison between the image information corresponding to any one of the information identifications and the standard information is unqualified, judging that the digital certificate application information is unqualified in verification.
And the signature verification module 12 is configured to generate a digital certificate signature for the digital certificate application information if the digital certificate application information is qualified in verification, and perform signature verification on the generated digital certificate signature.
Wherein the signature verification module 12 is further configured to: acquiring a public key and a secret key parameter of a target authentication server, and acquiring a signature parameter in the digital certificate application information, wherein the signature parameter comprises an enterprise name, an enterprise type and/or a uniform credit code;
and signing the acquired signature parameters according to the public key and the key parameters to obtain the digital certificate signature.
Further, the signature verification module 12 is further configured to: acquiring a decryption algorithm corresponding to a public key in a target authentication server, and decrypting the digital certificate signature according to the acquired decryption algorithm to obtain a decrypted signature;
if the decrypted signature is the same as the signature parameter, judging that the generated digital certificate signature is qualified;
and if the decrypted signature is not the same as the signature parameter, judging that the generated digital certificate signature is unqualified in verification.
And the digital certificate generation module 13 is configured to generate a target digital certificate according to the digital certificate signature and the digital certificate application information if the digital certificate signature is qualified through verification, and send the target digital certificate to a sending end of the digital certificate transaction instruction.
In this embodiment, a certificate transaction order is generated according to a digital certificate transaction instruction, and a payment prompt is sent to the certificate transaction order, so as to achieve the effect of automatically prompting a user to pay for the transaction of a digital certificate, if a payment prompt for the payment prompt is received, a digital certificate signature is generated by generating the digital certificate application information carried in the digital certificate transaction instruction, so as to automatically detect whether the digital certificate application information carried in the digital certificate transaction instruction is valid, if the digital certificate application information is verified to be qualified, a digital certificate signature is automatically generated by generating the digital certificate application information, a signature verification is performed on the generated digital certificate signature, so as to automatically detect whether the generated digital certificate signature is correct, if the digital certificate signature is verified to be qualified, a target digital certificate is generated according to the digital certificate signature and the digital certificate application information, the user does not need to transact the digital certificate in an offline mode, the operation of the user is facilitated, and the digital certificate transacting efficiency is improved.
Example four
Referring to fig. 4, a mobile terminal 101 according to a fourth embodiment of the present invention includes a storage device and a processor, where the storage device is used to store a computer program, and the processor runs the computer program to make the mobile terminal 101 execute the above-mentioned digital certificate handling method, and the mobile terminal 101 may be a robot.
The present embodiment also provides a storage medium on which a computer program used in the above-mentioned mobile terminal 101 is stored, which when executed, includes the steps of:
receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order;
if a payment prompt aiming at the payment prompt is received, carrying out information verification on the digital certificate application information carried in the digital certificate transaction instruction;
if the digital certificate application information is qualified, generating a digital certificate signature aiming at the digital certificate application information, and carrying out signature verification on the generated digital certificate signature;
and if the digital certificate signature is qualified, generating a target digital certificate according to the digital certificate signature and the digital certificate application information, and sending the target digital certificate to a sending end of the digital certificate transaction instruction. The storage medium, such as: ROM/RAM, magnetic disk, optical disk, etc.
It will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-mentioned division of the functional units and modules is used as an example, in practical applications, the above-mentioned function distribution may be performed by different functional units or modules according to needs, that is, the internal structure of the storage device is divided into different functional units or modules to perform all or part of the above-mentioned functions. Each functional unit and module in the embodiments may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit, and the integrated unit may be implemented in a form of hardware, or may be implemented in a form of software functional unit. In addition, specific names of the functional units and modules are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present application.
Those skilled in the art will appreciate that the component structures shown in FIG. 3 are not intended to be limiting of the digital certificate handling system of the present invention and may include more or fewer components than those shown, or some of the components may be combined, or a different arrangement of components may be used, and that the digital certificate handling method of FIG. 1 may be implemented using more or fewer components than those shown in FIG. 3, or some of the components may be combined, or a different arrangement of components. The units, modules, etc. referred to herein are a series of computer programs that can be executed by a processor (not shown) in the current digital certificate handling system and that function to perform certain functions, all of which may be stored in a storage device (not shown) of the current digital certificate handling system.
The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents and improvements made within the spirit and principle of the present invention are intended to be included within the scope of the present invention.
Claims (10)
1. A method of digital certificate handling, the method comprising:
receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order;
if a payment prompt aiming at the payment prompt is received, carrying out information verification on the digital certificate application information carried in the digital certificate transaction instruction;
if the digital certificate application information is qualified, generating a digital certificate signature aiming at the digital certificate application information, and carrying out signature verification on the generated digital certificate signature;
and if the digital certificate signature is qualified, generating a target digital certificate according to the digital certificate signature and the digital certificate application information, and sending the target digital certificate to a sending end of the digital certificate transaction instruction.
2. The digital certificate handling method according to claim 1, wherein the step of performing information verification on the digital certificate application information carried in the digital certificate handling instruction comprises:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
and inquiring application authorization information according to the information identifier, and respectively carrying out information verification on the legal representative person authorization book, the authorized person identification card, the business permit and the organization code card according to the application authorization information.
3. The digital certificate transaction method as claimed in claim 2, wherein said step of determining the legal representative's certificate, the authorized person's identification card, the business permit and the organization code card for querying the digital certificate application information based on the information identifier comprises:
respectively acquiring legal representative identification, authorized person identification, license identification and mechanism code identification in the information identification;
and respectively matching the legal representative identifier, the authorized person identifier, the license identifier and the organization code identifier with the picture in the digital certificate application information to obtain the legal representative authorization book, the authorized person identity card, the business license and the organization code card.
4. The digital certificate transaction method of claim 1, wherein the step of generating a digital certificate signature for the digital certificate application information comprises:
acquiring a public key and a secret key parameter of a target authentication server, and acquiring a signature parameter in the digital certificate application information, wherein the signature parameter comprises an enterprise name, an enterprise type and/or a uniform credit code;
and signing the acquired signature parameters according to the public key and the key parameters to obtain the digital certificate signature.
5. The digital certificate handling method according to claim 1, wherein the step of performing information verification on the digital certificate application information carried in the digital certificate handling instruction comprises:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
respectively obtaining verification areas corresponding to the information identifiers, and respectively carrying out image segmentation on the legal representative certificate, the authorized person identification card, the business permit and the organization code card according to the verification areas to obtain verification segmentation images;
carrying out image recognition on the verification segmentation image to obtain image information, and acquiring standard information corresponding to the information identification;
comparing the image information and the standard information corresponding to the same information identifier;
if the comparison between the image information corresponding to the same information identifier and the standard information is qualified, judging that the digital certificate application information is qualified in verification;
and if the comparison between the image information corresponding to any one of the information identifications and the standard information is unqualified, judging that the digital certificate application information is unqualified in verification.
6. The digital certificate transaction method of claim 1, wherein the step of signature verifying the generated digital certificate signature comprises:
acquiring a decryption algorithm corresponding to a public key in a target authentication server, and decrypting the digital certificate signature according to the acquired decryption algorithm to obtain a decrypted signature;
if the decrypted signature is the same as the signature parameter, judging that the generated digital certificate signature is qualified;
and if the decrypted signature is not the same as the signature parameter, judging that the generated digital certificate signature is unqualified in verification.
7. A digital certificate handling system, the system comprising:
the order generation module is used for receiving a digital certificate handling instruction, generating a certificate handling order according to the digital certificate handling instruction, and sending a payment prompt to the certificate handling order;
the information verification module is used for verifying the information of the digital certificate application information carried in the digital certificate transaction instruction if a payment prompt aiming at the payment prompt is received;
the signature verification module is used for generating a digital certificate signature aiming at the digital certificate application information and carrying out signature verification on the generated digital certificate signature if the digital certificate application information is qualified in verification;
and the digital certificate generation module is used for generating a target digital certificate according to the digital certificate signature and the digital certificate application information if the digital certificate signature is qualified in verification, and sending the target digital certificate to a sending end of the digital certificate handling instruction.
8. The digital certificate handling system of claim 7, wherein the information verification module is further configured to:
respectively obtaining information identifiers in the digital certificate application information, and determining and inquiring legal representative person authorization, authorized person identification card, business permit and organization code card of the digital certificate application information according to the information identifiers;
and inquiring application authorization information according to the information identifier, and respectively carrying out information verification on the legal representative person authorization book, the authorized person identification card, the business permit and the organization code card according to the application authorization information.
9. A mobile terminal, characterized by comprising a storage device for storing a computer program and a processor for executing the computer program to cause the mobile terminal to perform the digital certificate handling method according to any one of claims 1 to 6.
10. A storage medium, characterized in that it stores a computer program for use in a mobile terminal according to claim 9, which, when executed by a processor, implements the steps of the digital certificate handling method according to any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110076644.9A CN112926095A (en) | 2021-01-20 | 2021-01-20 | Digital certificate handling method, system, mobile terminal and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110076644.9A CN112926095A (en) | 2021-01-20 | 2021-01-20 | Digital certificate handling method, system, mobile terminal and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112926095A true CN112926095A (en) | 2021-06-08 |
Family
ID=76165027
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110076644.9A Pending CN112926095A (en) | 2021-01-20 | 2021-01-20 | Digital certificate handling method, system, mobile terminal and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112926095A (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2016137517A1 (en) * | 2015-02-27 | 2016-09-01 | Hewlett Packard Enterprise Development Lp | Manufacturer-signed digital certificate for identifying a client system |
| CN107612697A (en) * | 2017-10-20 | 2018-01-19 | 阿里巴巴集团控股有限公司 | Applying digital certificate method and apparatus |
| CN109150539A (en) * | 2018-07-24 | 2019-01-04 | 深圳前海益链网络科技有限公司 | A kind of Distributed CA System based on block chain, method and device |
| CN110322646A (en) * | 2019-07-05 | 2019-10-11 | 上海卓繁信息技术股份有限公司 | Digital certificate handles method |
| CN111144394A (en) * | 2019-12-13 | 2020-05-12 | 中国平安财产保险股份有限公司 | Automatic auditing method, device and equipment based on artificial intelligence and storage medium |
| CN111709413A (en) * | 2020-06-22 | 2020-09-25 | 中国平安财产保险股份有限公司 | Certificate verification method and device based on image recognition, computer equipment and medium |
-
2021
- 2021-01-20 CN CN202110076644.9A patent/CN112926095A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2016137517A1 (en) * | 2015-02-27 | 2016-09-01 | Hewlett Packard Enterprise Development Lp | Manufacturer-signed digital certificate for identifying a client system |
| CN107612697A (en) * | 2017-10-20 | 2018-01-19 | 阿里巴巴集团控股有限公司 | Applying digital certificate method and apparatus |
| CN109150539A (en) * | 2018-07-24 | 2019-01-04 | 深圳前海益链网络科技有限公司 | A kind of Distributed CA System based on block chain, method and device |
| CN110322646A (en) * | 2019-07-05 | 2019-10-11 | 上海卓繁信息技术股份有限公司 | Digital certificate handles method |
| CN111144394A (en) * | 2019-12-13 | 2020-05-12 | 中国平安财产保险股份有限公司 | Automatic auditing method, device and equipment based on artificial intelligence and storage medium |
| CN111709413A (en) * | 2020-06-22 | 2020-09-25 | 中国平安财产保险股份有限公司 | Certificate verification method and device based on image recognition, computer equipment and medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11088855B2 (en) | System and method for verifying an identity of a user using a cryptographic challenge based on a cryptographic operation | |
| CN108876332B (en) | Block chain safe transaction method and device based on biometric feature mark authentication | |
| US11190355B2 (en) | Secure biometric authentication using electronic identity | |
| CN108777684B (en) | Identity authentication method, system and computer readable storage medium | |
| US9978094B2 (en) | Tokenization revocation list | |
| US8095519B2 (en) | Multifactor authentication with changing unique values | |
| CN108418808B (en) | Identity information changing method and device, terminal equipment and storage medium | |
| CN101651675B (en) | By the method and system that authentication code is verified client | |
| CN116132063A (en) | Security token distribution | |
| US20020165830A1 (en) | Process and device for electronic payment | |
| CN109361697B (en) | Method for realizing credible identity authentication based on SIM card loading PKI | |
| US20240015150A1 (en) | Authenticating devices via tokens and verification computing devices | |
| CN112508578B (en) | Resource transfer request verification and sending method and device based on block chain | |
| KR20180113229A (en) | Loan service providing method using black chain and system performing the same | |
| EP3933624B1 (en) | Blockchain-based identity verification method and related hardware | |
| US11494769B2 (en) | System, methods and computer program products for identity authentication for electronic payment transactions | |
| KR20120070079A (en) | User authenication system by using personal identification number, user terminal device, inquiry apparatus, authenication server, and user authenication method therefor | |
| KR20210058608A (en) | History management method, apparatus and program for preventing fake using blockchain | |
| KR101876672B1 (en) | Digital signature method using block chain and system performing the same | |
| CN112926095A (en) | Digital certificate handling method, system, mobile terminal and storage medium | |
| WO2016083987A1 (en) | Method of and system for obtaining proof of authorisation of a transaction | |
| CN115600178A (en) | Transaction request processing method and device, electronic equipment and storage medium | |
| CN114936848A (en) | Contract flow management method and storage medium | |
| US20220376914A1 (en) | Token management system and method | |
| US11475446B2 (en) | System, methods and computer program products for identity authentication for electronic payment transactions |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210608 |