CN113868080A - Expiration alarm method, device and medium for security certificate - Google Patents
Expiration alarm method, device and medium for security certificate Download PDFInfo
- Publication number
- CN113868080A CN113868080A CN202111104408.XA CN202111104408A CN113868080A CN 113868080 A CN113868080 A CN 113868080A CN 202111104408 A CN202111104408 A CN 202111104408A CN 113868080 A CN113868080 A CN 113868080A
- Authority
- CN
- China
- Prior art keywords
- time
- expiration
- security certificate
- alarm
- current time
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
- 238000000034 method Methods 0.000 title claims abstract description 70
- 238000004590 computer program Methods 0.000 claims description 13
- 239000002699 waste material Substances 0.000 abstract description 7
- 230000000694 effects Effects 0.000 abstract description 3
- 238000012423 maintenance Methods 0.000 description 12
- 230000000875 corresponding effect Effects 0.000 description 9
- 238000012545 processing Methods 0.000 description 9
- 230000008569 process Effects 0.000 description 6
- 238000010586 diagram Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 3
- 238000013473 artificial intelligence Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 230000007547 defect Effects 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 241000700605 Viruses Species 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000000295 complement effect Effects 0.000 description 1
- 230000002596 correlated effect Effects 0.000 description 1
- 125000004122 cyclic group Chemical group 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 230000004069 differentiation Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 230000005055 memory storage Effects 0.000 description 1
- 229910044991 metal oxide Inorganic materials 0.000 description 1
- 150000004706 metal oxides Chemical class 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000009877 rendering Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000035945 sensitivity Effects 0.000 description 1
- 230000001052 transient effect Effects 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/302—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
Abstract
The application discloses an expiration alarm method of a security certificate, which comprises the steps of judging whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period or not when the current time is not later than the expiration time through a preset alarm time period, and outputting a first alarm signal if the time interval is not greater than the first preset alarm time period. Compared with the prior art that the alarm signal is output when the safety certificate expires, the technical scheme is adopted to output the alarm signal when the time interval between the current time and the expiration time is not more than the first preset alarm time period, thereby realizing the advanced alarm of the expiration time of the safety certificate, ensuring the normal operation of the service and reducing the waste of time. The application also discloses an overdue alarm device and medium of the security certificate, which correspond to the overdue alarm method of the security certificate, and the effect is the same as the effect.
Description
Technical Field
The present application relates to the field of data processing technologies, and in particular, to an expiration alarm method, an expiration alarm device, and a medium for a security certificate.
Background
When a motherboard in a computer leaves a factory, some security certificates are often built in, wherein the security certificates are provided with public keys, and any operating system or hardware driver which is to be loaded on the motherboard must pass the authentication of the public keys to be normally used. The use time of the security certificate is often limited, and if the security certificate is expired, the user cannot enter an operating system or a hardware driver, and the security certificate can be normally used after being upgraded by operation and maintenance personnel.
The prior art can send out an alarm signal when the security certificate is overdue, and prompt operation and maintenance personnel to upgrade the security certificate. The method has the defects that a user cannot know the expiration time of the security certificate in advance, and when the user needs to use an operating system or a hardware driver, the user finds that the security certificate is expired, so that the service is influenced, and a large amount of time is wasted.
Therefore, how to realize the early warning of the expiration time of the security certificate, ensure the normal operation of the service and reduce the time waste is a problem to be solved urgently by technical personnel in the field.
Disclosure of Invention
The application aims to provide a security certificate expiration alarm method, a security certificate expiration alarm device and a security certificate expiration alarm medium.
In order to solve the technical problem, the application provides an expiration alarm method for a security certificate, which is used for realizing early alarm of the expiration time of the security certificate, ensuring normal operation of a service and reducing time waste. The method comprises the following steps:
judging whether the current time is later than the expiration time of each safety certificate;
and judging whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period or not for the security certificate of which the current time is not later than the expiration time, and if so, outputting a first alarm signal.
Preferably, the first alarm signal includes:
a time interval between the current time and the expiration time and a name of the security certificate.
Preferably, in the case that the time interval between the current time and the expiration time is not greater than a first preset alarm time period, the method further includes:
judging whether the time interval between the current time and the expiration time is not greater than a second preset alarm time period, if so, outputting a second alarm signal;
wherein the second alarm signal comprises a time interval of the current time and the expiration time and a name of the security certificate;
and the first preset alarm time period is greater than the second preset alarm time period.
Preferably, the method further comprises the following steps:
and for the security certificate of which the current time is later than the expiration time, sending the name of the security certificate and the expiration time to display equipment.
Preferably, the method further comprises the following steps:
storing the time interval between the current time and the expiration time and the name of the security certificate.
Preferably, the method further comprises the following steps:
storing the name of the security certificate and the expiration time sent to the display device.
Preferably, the method further comprises the following steps:
storing the time interval between the current time and the expiration time and the corresponding name of the security certificate included in the second alarm signal in association with the name of the security certificate sent to the display device and the expiration time.
In order to solve the above technical problem, the present application further provides an expiration alarm device for a security certificate, including:
the first judgment module is used for judging whether the current time is later than the expiration time of the security certificate;
the second judgment module is used for judging whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period or not if the current time is not later than the expiration time;
and the output module is used for outputting a first alarm signal if the first alarm signal is positive.
In order to solve the above technical problem, the present application further provides another security certificate expiration warning device, including:
a memory for storing a computer program;
a processor for implementing the steps of the method for alarming expiration of security certificates as described above when executing the computer program.
In order to solve the above technical problem, the present application further provides a computer-readable storage medium, on which a computer program is stored, and the computer program, when executed by a processor, implements the steps of the method for alarming expiration of security certificate as described above.
According to the expiration alarm method of the security certificate, whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period or not is judged through the preset alarm time period when the current time is not later than the expiration time, and if yes, a first alarm signal is output. Compared with the prior art that the alarm signal is output when the safety certificate expires, the technical scheme is adopted to output the alarm signal when the time interval between the current time and the expiration time is not more than the first preset alarm time period, thereby realizing the advanced alarm of the expiration time of the safety certificate, ensuring the normal operation of the service and reducing the waste of time.
The overdue alarm device and medium of the security certificate provided by the application correspond to the overdue alarm method of the security certificate, and the effect is the same as that of the overdue alarm device and medium of the security certificate.
Drawings
In order to more clearly illustrate the embodiments of the present application, the drawings needed for the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and that other drawings can be obtained by those skilled in the art without inventive effort.
Fig. 1 is a flowchart of a method for alarming expiration of a security certificate according to an embodiment of the present application;
fig. 2 is a flowchart of another security certificate expiration warning method according to an embodiment of the present disclosure;
fig. 3 is a structural diagram of an expiration alarm device for a security certificate according to an embodiment of the present application;
fig. 4 is a block diagram of another security certificate expiration warning apparatus according to an embodiment of the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments in the present application without any creative effort belong to the protection scope of the present application.
The Basic Input Output System (BIOS) of a computer is a set of programs that are solidified on a ROM chip on a motherboard in the computer, and it stores the most important Basic Input and Output programs of the computer, a self-test program after power-on and a System self-start program, and it can read and write specific information set by the System from a Complementary Metal Oxide Semiconductor (CMOS). Its primary function is to provide the lowest level, most direct hardware setup and control for the computer. Today, this system has become the target of some virus trojans. Once the system is destroyed, the consequences are not as conceivable. In order to solve the problem, as an upgraded version of the BIOS, a Unified Extensible Firmware Interface (UEFI), in which Secure Boot can prevent malicious software attacks, a secret key is used. UEFI stipulates that when the motherboard leaves the factory, some reliable security certificates can be built in, the security certificates have public keys, and any operating system or hardware driver which wants to be loaded on the motherboard must pass the authentication of the public keys. That is, the software must be signed with the corresponding public key, otherwise the motherboard refuses to load. Because the malware is unlikely to be authenticated, the UEFI cannot be destroyed.
However, the use time of the security certificate is often limited, and if the security certificate expires, the user cannot enter the operating system or the hardware driver, and the security certificate needs to be upgraded by the operation and maintenance personnel before being used normally.
The prior art can send out an alarm signal when the security certificate is overdue, and prompt operation and maintenance personnel to upgrade the security certificate. The method has the defects that a user cannot know the expiration time of the security certificate in advance, and when the user needs to use an operating system or a hardware driver, the user finds that the security certificate is expired, so that the service is influenced, and a large amount of time is wasted.
The core of the application is to provide a method, a device and a medium for alarming the expiration of a security certificate, which can solve the problems.
In order that those skilled in the art will better understand the disclosure, the following detailed description will be given with reference to the accompanying drawings.
Fig. 1 is a flowchart of a method for alarming expiration of a security certificate according to an embodiment of the present application, where as shown in fig. 1, the method includes:
s10: and judging whether the current time is later than the expiration time of each security certificate, and if not, entering the step S11.
In step S10, it should be noted that the Secure Boot is in an enabled state, and if the Secure Boot is in a closed state, the Secure Boot cannot enter the system, and the present scheme cannot be executed. When the computer is started, the expiration time of reading the security certificate is traversed, and as a plurality of security certificates exist, the situation that all the security certificates are not read exists, namely the situation that the reading fails exists, the security certificates are read circularly for many times until the reading is confirmed to be successful. Certainly, the condition that the expiration time of a certain security certificate or certain security certificates cannot be read really exists, in order to guarantee the normal operation of the program, the cyclic reading can be set to be 3 times, the next step is carried out when the reading is successful, and if the 3 times fail, an alarm is given out. And when the reading is successful, comparing the current time with the expiration time of each security certificate, and if the current time is later than the expiration time, indicating that the security certificate exceeds the service life and cannot be normally used, and the security certificate can be normally used by a party needing to be upgraded. If the current time is not later than the expiration time, the security certificate is not expired. For an expired security certificate, UEFI may send its information to a Baseboard Management Controller (BMC) for processing. The information may include the name of the security certificate, expiration time, etc. The BMC may perform the process of displaying the name of the expired security certificate in a log interface or storing the name. When the UEFI sends the information to the BMC, the possibility of sending failure also exists, and similarly, after the information is sent for 3 times, if the information is still sent in failure, an alarm is sent out.
S11: and for the security certificate of which the current time is not later than the expiration time, judging whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period, and if so, entering the step S12.
In step S11, the UEFI may call a first pre-set warning period stored in advance for a security certificate whose current time is not later than the expiration time, i.e., no expired security certificate. The time interval between the current time and the expiration time of the security certificate is judged, namely, the time of the security certificate which is expired is judged, and whether the time is longer than a first preset alarm time period set by a user is judged, so that whether an alarm is given or not is confirmed. The first preset alarm time period is set according to the actual needs of the user and faces different use environments, for example, the first preset alarm time period can be set to several days when the alarm device is used by a family or a person, and can be set to several months when the alarm device is used by an enterprise.
S12: and outputting a first alarm signal.
In step S12, for example, the first preset alarm period set by the user is 7 days, the security certificate expires for 5 days, and the time interval is not greater than the first preset alarm period, at which time the first alarm signal is output to remind the user that the security certificate will expire. The first alarm signal here may be a warning sound, may be in different forms such as text, graphics, etc., or may be in a combined form. In a specific implementation, it may also be in the form of a signal that increases with decreasing time interval, for example, when the security certificate expires for 5 days, the prompt signal is yellow, and when the security certificate expires for 2 days, the prompt signal is red.
According to the expiration alarm method of the security certificate, provided by the embodiment of the application, through the preset alarm time period, when the current time is not later than the expiration time, whether the time interval between the current time and the expiration time is not more than the first preset alarm time period or not is judged, and if yes, a first alarm signal is output. Compared with the prior art that the alarm signal is output when the safety certificate expires, the technical scheme is adopted to output the alarm signal when the time interval between the current time and the expiration time is not more than the first preset alarm time period, thereby realizing the advanced alarm of the expiration time of the safety certificate, ensuring the normal operation of the service and reducing the waste of time.
In a specific implementation, in order to facilitate a user to know an upcoming expiration time of an accurate security certificate, on the basis of the foregoing embodiment, in this embodiment, the first alarm signal includes:
the time interval between the current time and the expiration time and the name of the security certificate.
The expiration alarm method of the security certificate is used for reminding a user of a first alarm signal which comprises the time interval between the current time and the expiration time, so that the user can accurately know the expiration date of the security certificate, the user can arrange time to perform subsequent operations conveniently, for example, searching operation and maintenance personnel to upgrade the security certificate, and the normal use of a computer is guaranteed. The first alarm signal also includes the name of the security certificate. It will be appreciated that the first alarm signal includes the name of the security certificate to be expired and the expiration date corresponding to each security certificate, and the user can know exactly which certificate or certificates are to be expired and how long they have been.
In a specific implementation, the first preset alarm time period is set to 365 days because the first preset alarm time period is set differently by each user. However, in use, the user's sensitivity to the first warning signal may be reduced over time, due to expiration caused by a deliberate omission of an upgrade to the security certificate.
Fig. 2 is a flowchart of another method for alarming expiration of a security certificate according to an embodiment of the present application, and as shown in fig. 2, on the basis of the foregoing embodiment, in this embodiment, when a time interval between a current time and an expiration time is not greater than a first preset alarm time period, the method further includes:
s13: and judging whether the time interval between the current time and the expiration time is not greater than a second preset alarm time period, if so, entering the step S14.
S14: and outputting a second alarm signal.
Wherein the second alarm signal comprises the time interval between the current time and the expiration time and the name of the security certificate; and the first preset alarm time period is greater than the second preset alarm time period.
It will be appreciated that the second alarm signal, as well as the first alarm signal, includes the name of the security certificate to be expired and its corresponding expiry date. Since the second alarm signal is sent out on the basis that the time interval between the current time and the expiration time is not greater than the first preset alarm time period, that is, the first alarm signal is sent out, the first preset alarm time period is greater than the second preset alarm time period. For example, the first preset alarm time period is 30 days, the second preset alarm time period is 7 days, and when the current time and the expiration time of the security certificate are not greater than 30 days, the first alarm signal is sent out, and the category of the first alarm signal is as described in the above embodiments, which is not described herein again. And when the current time and the expiration time of the security certificate are not more than 7 days, a second alarm signal is sent out. The second alarm signal may be the same as or different from the first alarm signal. It will be appreciated that if the alarm signal is the same, the user may be forcibly alerted of the future expiration of the security certificate by repeated alarms. If the alarm signals are different, the first alarm signal and the second alarm signal can be more easily sent out by the user respectively.
The embodiment provides that the computer sends out two kinds of alarm signals, and the two kinds of alarm signals are in a superposed relation. Of course, the first alarm signal and the second alarm signal may be in a consecutive relationship, for example, the first preset alarm time period is 7 to 30 days, the second alarm time period is 7 days, the computer sends the first alarm signal when the time interval between the current time and the expiration time is 7 to 30 days, and sends the second alarm signal when the time interval between the current time and the expiration time is not more than 7 days. It will be appreciated that in this method the first alarm signal and the second alarm signal are different triggering conditions, so for differentiation, and for ease of actual use by the user, the first alarm signal and the second alarm signal should be different.
According to the overdue alarm method for the security certificate, the second preset alarm time period is added, and the second alarm signal is sent out when the condition is met, so that the user is further reminded, and the further reminding is used as the final prompt before the expiration of the security certificate.
In specific implementation, the security certificate is expired and cannot be used due to the fact that the security certificate is not upgraded in time.
As shown in fig. 2, in addition to the above embodiment, in this embodiment, the method further includes:
s101: and for the security certificate of which the current time is later than the expiration time, sending the name and the expiration time of the security certificate to the display equipment.
In the traversal process, the steps mentioned in the above embodiment are executed for the security certificate whose current time is not later than the expiration time, and for the security certificate whose current time is later than the expiration time, the name and the expiration time of the security certificate are sent to the display device to inform the user of the specific expired security certificate. The display device is usually a screen collocated with a computer, and is often displayed on a BMC log interface, but of course, other devices may be used. In specific implementation, there may be a possibility of transmission failure, and the method provided in this embodiment is to loop this step 3 times if transmission fails, end this step when transmission succeeds, and issue an alarm if failure still occurs after 3 times. Of course, in order to distinguish the alarm sent when the security certificate fails to be read as mentioned in the above embodiments, the two alarms should not be identical when the alarm is sent, so that the user can distinguish the specific problem.
According to the expiration alarm method for the security certificate, the name of the expired security certificate and the specific time of expiration of the expired security certificate are displayed to inform a user of the specific expired security certificate, and therefore the user can operate the method in a targeted mode conveniently.
In a specific implementation, since the verification of the expiration of the security certificate is performed when the computer is powered on, in order to facilitate the user to view and detect the security certificate in the subsequent use process, on the basis of the foregoing embodiment, in this embodiment, the method further includes:
the time interval between the current time and the expiration time and the name of the security certificate are stored.
According to the expiration alarm method of the security certificate, the security certificate meeting the first preset alarm time period and the time left by expiration of the corresponding security certificate are stored by storing the time interval between the current time and the expiration time and the name of the security certificate, so that a user can conveniently check the security certificate later.
In a specific implementation, since the expired security certificate is not upgraded, in order to facilitate the operation and maintenance staff to upgrade the expired security certificate, as shown in fig. 2, on the basis of the foregoing embodiment, in this embodiment, the method further includes:
s15: the name and expiration time of the security certificate sent to the display device are stored.
According to the overdue alarm method for the security certificate, the name of the overdue security certificate and the corresponding overdue time are stored, and operation and maintenance personnel can conveniently search the security certificate when upgrading the security certificate.
In specific implementation, due to the distance problem between the user and the operation and maintenance personnel and the time problem between the user and the operation and maintenance personnel, the operation and maintenance personnel cannot update the security certificate in time when the security certificate expires.
In order to solve the above problem, in the present embodiment, on the basis of the above embodiment, the method further includes:
and storing the time interval of the current time and the expiration time and the name of the corresponding security certificate included by the second alarm signal and the name and the expiration time of the security certificate sent to the display device in an associated manner.
According to the overdue alarm method of the security certificate, the overdue security certificate and the security certificate included in the second alarm signal are stored in an associated mode. When the operation and maintenance personnel upgrade and check the expired security certificate, the information meeting the second preset alarm time period, namely the information of the security certificate to be expired, can be viewed in a correlated manner, and the operation and maintenance personnel can upgrade the security certificate to be expired together or arrange the security certificate to be expired subsequently.
In the above embodiments, a method for alarming expiration of a security certificate is described in detail, and the application also provides embodiments corresponding to an apparatus for alarming expiration of a security certificate. It should be noted that the present application describes the embodiments of the apparatus portion from two perspectives, one from the perspective of the function module and the other from the perspective of the hardware.
Fig. 3 is a structural diagram of an expiration alarm apparatus for a security certificate according to an embodiment of the present application, as shown in fig. 3, the apparatus includes:
the first judging module 10 is configured to judge whether the current time is later than the expiration time of the security certificate.
The second determining module 11 is configured to determine whether a time interval between the current time and the expiration time is not greater than a first preset alarm time period if the current time is not later than the expiration time.
And the output module 12 is configured to output a first alarm signal if the first alarm signal is positive.
According to the overdue alarm device for the security certificate, provided by the embodiment of the application, through the preset alarm time period, when the current time is not later than the overdue time, whether the time interval between the current time and the overdue time is not more than the first preset alarm time period or not is judged, and if yes, a first alarm signal is output. Compared with the prior art that the alarm signal is output when the safety certificate expires, the technical scheme is adopted to output the alarm signal when the time interval between the current time and the expiration time is not more than the first preset alarm time period, thereby realizing the advanced alarm of the expiration time of the safety certificate, ensuring the normal operation of the service and reducing the waste of time.
Since the embodiments of the apparatus portion and the method portion correspond to each other, please refer to the description of the embodiments of the method portion for the embodiments of the apparatus portion, which is not repeated here.
Fig. 4 is a block diagram of another security certificate expiration warning apparatus provided in an embodiment of the present application, and as shown in fig. 4, the apparatus includes: a memory 20 for storing a computer program;
a processor 21 for implementing the steps of the method for alarming expiration of a security certificate as described in the above embodiments when executing the computer program.
The expiration alarm device of the security certificate provided by the embodiment may include, but is not limited to, a smart phone, a tablet computer, a notebook computer, or a desktop computer.
The processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, and the like. The processor 21 may be implemented in at least one hardware form of a DSP (Digital Signal Processing), an FPGA (Field-Programmable Gate Array), and a PLA (Programmable Logic Array). The processor 21 may also include a main processor and a coprocessor, where the main processor is a processor for Processing data in an awake state, and is also called a Central Processing Unit (CPU); a coprocessor is a low power processor for processing data in a standby state. In some embodiments, the processor 21 may be integrated with a GPU (Graphics Processing Unit), which is responsible for rendering and drawing the content required to be displayed on the display screen. In some embodiments, the processor 21 may further include an AI (Artificial Intelligence) processor for processing a calculation operation related to machine learning.
The memory 20 may include one or more computer-readable storage media, which may be non-transitory. Memory 20 may also include high speed random access memory, as well as non-volatile memory, such as one or more magnetic disk storage devices, flash memory storage devices. In this embodiment, the memory 20 is at least used for storing a computer program 201, wherein after being loaded and executed by the processor 21, the computer program is capable of implementing the steps related to the method for alarming when a security certificate expires disclosed in any of the foregoing embodiments. In addition, the resources stored in the memory 20 may also include an operating system 202, data 203, and the like, and the storage manner may be a transient storage manner or a permanent storage manner. Operating system 202 may include, among others, Windows, Unix, Linux, and the like. The data 203 may include, but is not limited to, a first preset alarm period, a first alarm signal, a second preset alarm period, a second alarm signal, and the like.
In some embodiments, the device for alarming the expiration of the security certificate may further include a display 22, an input/output interface 23, a communication interface 24, a power supply 25, and a communication bus 26.
Those skilled in the art will appreciate that the configuration shown in fig. 4 does not constitute a limitation of the expiration warning means of the security certificate and may include more or fewer components than those shown.
The expiration alarm device of the security certificate provided by the embodiment of the application comprises a memory and a processor, wherein when the processor executes a program stored in the memory, the following method can be realized: the alarm of the safety certificate expiration time is realized in advance, the normal operation of the service is ensured, and the waste of time is reduced.
Finally, the application also provides a corresponding embodiment of the computer readable storage medium. The computer-readable storage medium has stored thereon a computer program which, when being executed by a processor, carries out the steps as set forth in the above-mentioned method embodiments.
It is to be understood that if the method in the above embodiments is implemented in the form of software functional units and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application may be substantially or partially implemented in the form of a software product, which is stored in a storage medium and executes all or part of the steps of the methods of the embodiments of the present application, or all or part of the technical solutions. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The method, the device and the medium for alarming the expiration of the security certificate provided by the application are described in detail above. The embodiments are described in a progressive manner in the specification, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description. It should be noted that, for those skilled in the art, it is possible to make several improvements and modifications to the present application without departing from the principle of the present application, and such improvements and modifications also fall within the scope of the claims of the present application.
It is further noted that, in the present specification, relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
Claims (10)
1. An expiration alarm method for a security certificate, comprising:
judging whether the current time is later than the expiration time of each safety certificate;
and judging whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period or not for the security certificate of which the current time is not later than the expiration time, and if so, outputting a first alarm signal.
2. The method of claim 1, wherein the first alarm signal comprises:
a time interval between the current time and the expiration time and a name of the security certificate.
3. The method for alarming expiration of security certificate as claimed in claim 2, further comprising, in case that the time interval between the current time and the expiration time is not greater than a first preset alarm time period:
judging whether the time interval between the current time and the expiration time is not greater than a second preset alarm time period, if so, outputting a second alarm signal;
wherein the second alarm signal comprises a time interval of the current time and the expiration time and a name of the security certificate;
and the first preset alarm time period is greater than the second preset alarm time period.
4. The method for alarming expiration of security certificate according to claim 3, further comprising:
and for the security certificate of which the current time is later than the expiration time, sending the name of the security certificate and the expiration time to display equipment.
5. The method for alarming expiration of security certificate according to claim 2, further comprising:
storing the time interval between the current time and the expiration time and the name of the security certificate.
6. The method for alarming expiration of security certificate according to claim 4, further comprising:
storing the name of the security certificate and the expiration time sent to the display device.
7. The method for alarming expiration of security certificate according to claim 6, further comprising:
storing the time interval between the current time and the expiration time and the corresponding name of the security certificate included in the second alarm signal in association with the name of the security certificate sent to the display device and the expiration time.
8. An expiration alarm device for a security certificate, comprising:
the first judgment module is used for judging whether the current time is later than the expiration time of the security certificate;
the second judgment module is used for judging whether the time interval between the current time and the expiration time is not greater than a first preset alarm time period or not if the current time is not later than the expiration time;
and the output module is used for outputting a first alarm signal if the first alarm signal is positive.
9. An apparatus for alerting of expiration of a security certificate, comprising a memory for storing a computer program;
a processor for implementing the steps of the method of security certificate expiration alerting as claimed in any one of claims 1 to 7 when executing said computer program.
10. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, which computer program, when being executed by a processor, carries out the steps of the method for security certificate expiration warning as claimed in any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111104408.XA CN113868080A (en) | 2021-09-18 | 2021-09-18 | Expiration alarm method, device and medium for security certificate |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111104408.XA CN113868080A (en) | 2021-09-18 | 2021-09-18 | Expiration alarm method, device and medium for security certificate |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113868080A true CN113868080A (en) | 2021-12-31 |
Family
ID=78993016
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111104408.XA Withdrawn CN113868080A (en) | 2021-09-18 | 2021-09-18 | Expiration alarm method, device and medium for security certificate |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113868080A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117318959A (en) * | 2023-11-28 | 2023-12-29 | 苏州元脑智能科技有限公司 | Expiration early warning method, device, system, equipment and medium for digital certificate |
-
2021
- 2021-09-18 CN CN202111104408.XA patent/CN113868080A/en not_active Withdrawn
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117318959A (en) * | 2023-11-28 | 2023-12-29 | 苏州元脑智能科技有限公司 | Expiration early warning method, device, system, equipment and medium for digital certificate |
| CN117318959B (en) * | 2023-11-28 | 2024-03-01 | 苏州元脑智能科技有限公司 | Expiration early warning method, device, system, equipment and medium for digital certificate |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9589139B2 (en) | Method and device for altering a unified extensible firmware interface (UEFI) secure boot process in a computing device | |
| CN109670319B (en) | Server flash safety management method and system thereof | |
| US20200320193A1 (en) | Baseboard management controller to perform security action based on digital signature comparison in response to trigger | |
| EP3188065A1 (en) | Secure intelligent terminal device and information processing method | |
| US20150220736A1 (en) | Continuous Memory Tamper Detection Through System Management Mode Integrity Verification | |
| CN108292342B (en) | Notification of intrusions into firmware | |
| CN111158767A (en) | BMC-based server secure starting method and device | |
| CN111435311A (en) | Firmware safety protection method and electronic system using same | |
| CN113868080A (en) | Expiration alarm method, device and medium for security certificate | |
| CN110457953B (en) | Method and device for detecting integrity of file | |
| US10742412B2 (en) | Separate cryptographic keys for multiple modes | |
| CN111967016B (en) | Dynamic monitoring method of baseboard management controller and baseboard management controller | |
| JP6128388B2 (en) | Information processing device | |
| WO2023147744A1 (en) | Key state inspection method and apparatus, and device and medium | |
| CN110362983B (en) | Method and device for ensuring consistency of dual-domain system and electronic equipment | |
| US20160283718A1 (en) | Information processing device and information processing method | |
| US20200244461A1 (en) | Data Processing Method and Apparatus | |
| US11023591B2 (en) | Data processing system having distributed security controller with local control and method for securing the data processing system | |
| CN113051576A (en) | Control method and electronic device | |
| CN108228219B (en) | Method and device for verifying BIOS validity during in-band refreshing of BIOS | |
| JP2017045308A (en) | Software alteration detection system and network security system | |
| CN115130114B (en) | Gateway secure starting method and device, electronic equipment and storage medium | |
| JP2018198000A (en) | Monitoring program, monitoring method and information processing device | |
| CN114861157A (en) | Credibility authentication method, device and medium for PCIE (peripheral component interface express) equipment card | |
| US20220414216A1 (en) | Electronic apparatus and security protection method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20211231 |