TWI242348B - System and method for integration of multiple authentication processes - Google Patents

Abstract

The invention discloses a system and method for integration of multiple authentication processes, which uses a communication network to communicate with at least two or more remote authentication systems. The two or more authentication systems each can issue a certificate in different format and the certificate can be authenticated by each other. This invention therefore enables receiving the related data in terms of the certificate transmitted from the operation system, determining the authentication system corresponding to the certificate, then transmitting the data related to the certificate to the corresponding v authentication system to carry out authentication, and also transmitting the authentication result back to the operation system for determining whether to proceed the operation procedure or not.

Description

1242348 V. Description of the invention (1) [Technical field to which the invention belongs] The present invention relates to the technical field of the authentication operation of electronic credentials on the Internet. In particular, it relates to the technical field of integrating multiple authentication operations. The business people who opened the business sent electricity, other products, and business management. All see the recognition of the completion of the first service party to follow the sub-service threatening pass is not exactly before the opening. The prestige of electricity and the news of hearing what the industry has said about new arrivals, such as the news of the enterprise, the time and the visibility? Think of me as a leader, wouldn't it be true that the road effect industry has increased its chances to see people threaten to increase the predecessors of online processing companies, such as my letter that Ren Ruwei used Zenghe products? It is expected that the domestic industry and the industry will be able to pay close attention to the needs of various industries, and to pay close attention to the short-term changes in the enterprises. When this change is made, is it expected that the Ans will lose at any time? The letter, the letter, the letter, the letter, and the letter passed to the electricity room in this field, a fund, with the famous masters of the empty city and the Sino-Prosperity signatories, a low-cost, universally-secured insurer sent by the industry Reducing the size and increasing the success of the world and gaining access to the technology industry, the former company is a child of the French Open. The power of the former company has been changed. Detectives are even here

Page 4

1242348 V. Description of the invention (2) c · Integrity (i n t e g r i t y): Confirm that the content of the transaction or communication has not been tampered with. d · Non-repudiation (η ο η-repudiati〇η) ·· Confirm that both parties to the transaction and their transaction behavior are undeniable, and enhance the legal validity of the transaction 0 Therefore, based on the above security requirements, On the road, unique authentication methods must often be used to conduct reliable business transactions. The method of certification for general financial services can be explained with reference to the first figure ', which outlines the system architecture of the certification operation. The client i 〇 wants to perform financial transactions such as banking transactions, securities trading, or futures trading. It is connected via the communication network 2 0, the external communication device used by the authentication system, and to the transaction systems of banks and securities dealers 4 〇. In order to improve the security of the Internet, 'banks and securities companies will require customers to register with the electronic certificate system (register' _RA) of the authentication system 50. Generally, customers provide their personal information and passwords. '1' The back-end system that has been reviewed by the managers of banks and securities dealers.] The certification system 60 (the certification system is referred to as the credential for short) is passed to the sub-certificate (certificate, in the appropriate storage medium, And the toilet = horse ~ magnetic-chip, IC card, hard disk or other end systems 50. The former system is green ^ It also shows that the relevant information of the poor material is stored in the former ^ j and the system 5 〇 usually includes ancient branches- Data voucher database 5 丨 Provides storage of customers and vouchers related management personnel to perform voucher registration as the second operation interface 52 and sub-interfaces. Management module 53 for register operations

1242348 V. Description of the invention (3)

When the customer wants to conduct a transaction, for example, when entering the banking, securities or futures trading system 40, the trading system 40 will ask the client 10 to provide a voucher and password, and transmit the relevant information required for authentication of the voucher to The certification system of the certification system 60 for certification (certificateauthorizat i ON, CA). The authentication system 60 receives the relevant information from the transaction system 40 requesting authentication, decrypts it in a specific way and / or checks whether the certificate is a legitimate certificate, generates an authentication result, and then returns the authentication result to the transaction system 40. In order for the trading system 40 to judge whether the transaction process can continue to be performed based on the authentication result. Generally speaking, the transaction process can be continued only after passing the authentication. If the authentication is not passed, the transaction process will be terminated or interrupted to prevent others from transacting under the pretext of authentication. Transaction system 4 〇 Generally, the front-end system 50 of the authentication system and the authentication system 60 are independent of each other, that is, outside the authentication system, only when the authentication is required in the execution of the transaction process, the credentials and passwords provided by customers It is transmitted to the authentication system 60 of the authentication system to request authentication, and then receives the reply authentication result to determine whether to continue the transaction process.

In the conventional technology, 'a plurality of front-end systems 50 can be separately established at business providers such as banks, securities dealers, or government agencies to meet the needs of business providers' business systems, such as trading systems, service systems, and data. Processing systems, etc., each accept a customer's request to register and issue a certificate to its customer, and can further manage the customer's certificate. The authentication system 60 is generally not open to the general public, and is usually connected to the business system of the service provider to perform authentication according to the request of the business system. Charges for certification systems ’are generally based on the number of certificates issued and the number of times the certification is performed.

Page 6 1242348 V. Description of the invention (4) The supplier is charged in several ways, and the service provider can charge the customer for license issuance and service charges, but it may also absorb the cost by itself without charging the customer separately. 0 item & already has the related electronic voucher technology at midnight, for example, the Chinese people = Patent Case Announcement No. 548 5 64 to implement electronic transactions: ί: \ 置 β I conduct a When e-commerce transactions, it provides a smart line authentication to improve the network: = 丄: sent to the Internet-the server for electronic transactions: ::: disclosed in the case of Yi, enter-transaction requirements; b # :: = received on a server-the user receives the user from the user; C. according to the password e. The combination for the transaction to process the response to verify the user; at least the certificate of- Partially for the use of *; g ;;; use: pick up :: request, the second request contains the voucher = receive-key to confirm the part of the voucher and h. In view of the current domestic situation, Japan义 卜 丄 1; and easy service. VeraSlgn (Hltrutt) 'V'j ^ „The two largest authentication systems are MCa. The certificates issued by them are usually different authentication systems such as the right and RSA. The same certificate format two = two encryption and decryption methods are separately used. Use of inconsistent or even the same machine: General Bank usually has the authentication system selected when different business systems are planned: 2: The service system is also often due to special needs or regulations. These certificates are often set up separately because of A :: ' The required certificates must have different voucher formats and are not connected to each other, and the voucher application and management operations are also performed by the system.

Page 7 1242348 V. Description of the invention (5) It must be specified when it is different. Once the voucher is issued, it is often required in the voucher application. Therefore, it is confusing to use and manage. And for a variety of industries, please contact the management system to increase the workload. In order to solve the method of No. 4 3 4 5 16 revealing the voucher by the same backend to verify the validity of multiple certificates from the same visa, the processing unit calculates the product and uses this to decrypt all public input vouchers in this case. although

Authentication is reissued by other industries that it can adapt to. It can be seen that many kinds of business processes are often costly, and many kinds of kinds are based on the steps of the certificate issuer and the digital certificate holders. Up

The scope of use, that is, the latter is often unable to be serviced. In the future, the voucher developed or replaced depends on the number of certificates that customers face, and even applications such as application or government agencies must be managed and maintained simultaneously. The method of verifying the module certificate that can be verified by batch verification is more than one verification. The multiple public input vouchers include: the public key that provides the hash value of the key to decrypt the public key. Q business department asks the voucher service to provide a variety of voucher managers for their voucher use, which is not included in the system. However, it is necessary to divide the costs. For the equivalent, it is more complicated for different front-end members to apply for various certificates. The Republic of China Patent Case Announcement Digital Certificates and Identification of Non-Multiple Digital Certificates, however. The unsecured communication channel certificate as disclosed in this case, in order to confirm all public processing units; and the product of the profit product and the product hash value of the public key certificates and the public certificate, and the law must be shown The solution to verifying multiple digital vouchers is to use the multiplication to verify the loss.

Page 8

Relevant information required for authentication is initially identified. According to the voucher information in the voucher database, the relevant data required for authentication of the voucher is transmitted to the corresponding authentication system for authentication via the communication network, and the authentication result is received. To return the business system, in which the relevant information required for authentication of the certificate is part of the information of the certificate. According to another feature of the present invention, the method for integrating multiple authentication operations provided by the present invention communicates with two or more remote authentication systems via a communication network, wherein the two or more authentication systems can each issue Certificates in different formats can be authenticated, and the method should be authenticated by the system; the certificate information transmitted by the executive system is transmitted online to pass the data to the lack of technology and its data. The operations that can be performed on the plurality of available tubes include the steps of: storing at least one user data and the two at least one operation of the at least one voucher that it possesses; and carrying out phase verification data according to the relevant certification. In the same way, by using the identification certificate or more certificates and receiving the certificate information and receiving and verifying the certificate, compared with the previous database, the multi-certificate format can be used to allow the management of the materials and the related certification. Store the vouchers in the industry database by the related knowledge required for its certification; the user's sub-module is used to manage the poor materials. The voucher will be sent back to the industry as the voucher. The firm has a pair of vouchers from the module, one of which is a voucher; the user certificate and the authentication service system that responds to the voucher. An invented system of the certificate, multiple certificates, and a certification body can provide a certificate application and multiple certificates to perform the use of the certificate management system of the preliminary identification bank to enter into the sub-data. Proposed related assets and beneficial operations for maintenance and review

1242348 Description of the invention (8) 5 master book *, certificate issuance and other management operations; and the provided processing module is more recognizable = judge the certificate to be authenticated, and send the certificate to be authenticated to the corresponding system to request Certified. Therefore, the present invention can achieve at least the following effects: 1. It can support multiple credential formats. Through the system and method of the present invention, it can be connected with multiple authentication systems, and can register and issue multiple credentials. During the verification process, Can receive any kind of voucher data from multiple vouchers. After identification and judgment, the relevant data required for authentication of the voucher is transmitted to its corresponding authentication system to request verification, which can greatly save the cost of unified system construction. 2. The user can apply for, change, verify, cancel multiple certificates, etc. through the operation interface provided by the present invention, which is helpful for unified management and operation. It is quite convenient to use. 3. Through the system and method of the present invention, the use of certificates can be expanded.

System, increase the use of vouchers, one,… as a result, using vouchers can save money and benefit

1242348 V. Description of the invention (9) 7 3 and a processing module 74. Among them, in the second figure, three authentication systems 6 1 to 6 3 and three user terminal devices 1 1 to 13 are used as examples for illustration, and are not intended to limit the authentication system and application to which the present invention is applicable. Number of terminal devices. The communication network 20 may be any one of the Internet, a local area network, a telecommunication network, a dedicated line, a virtual private network (VPN), or a wireless network, or any combination of two or more of them. The communication device 30 can be a general commercially available communication device, and the specifications vary depending on the communication network used above. The communication network 20 and the communication device 30 are all conventional technologies, and are not described in detail here. Generally speaking, in order to improve the data processing speed and data security, system 70 and business systems outside multiple authentication systems 4 and 43 are better to be built in the same local network, as shown in the second figure. Among them, the business system 41 to 43 can be a transaction system, a service system, or a data processing system. However, in another embodiment of the present invention, multiple business systems can also be built on different local area networks, and then communicate with the system 70 through a communication device to communicate with the system 70 for data transmission and processing. The communication device The communication device and the communication network can share the communication device 30 and the communication network 20 with the above-mentioned authentication system, and can also be set separately. The credential database 71 is used to store multiple users (that is, the aforementioned customers) and related information about their credentials, such as the user's name, ID, account number and other basic information, and at least one of the credentials , The identification information of each certificate (such as the certificate serial number), the corresponding authentication system information, the certificate usage data (the business system that can use the certificate), and the validity period of the certificate. Make

1242348 V. Description of the invention (10) Many different voucher formats owned by the user can be used in the database 71.

’Can be from different certification systems, 罝 and can be used in different business systems, and the second: general commercial storage devices or special data base

The above information comes from the application information, the information provided by the administrator and the user when applying for the certificate :::::, and the relevant information when the certification system issues the certificate 1 2 3 The voucher database 7 丨 is used for setting up the two ports, when the administrator performs voucher management operations, or during the process. Order W… The operation module 72 is used to perform related tasks of the user and its multiple certificates, including submitting application certificates, canceling certificates, checking certificates, querying or modifying user data, and so on. Generally speaking, the operation module 72 is preferably provided with a web page ^ as an operation interface. The above-mentioned options for various operations can be presented on the web page, allowing users to enter data to perform the above operations, and can also be managed by ^ ^ Enter based on the information provided by the user. In another embodiment, the operation module 7 2 may also be set on the user terminal device 1 1 to 1 3 to generate a specific operation day and time on the device 1 1 to 13 for use by the customer. Rotate lean materials, perform operations, and transfer related data to the system 70 for the operations described above. Those skilled in the art can obviously select and design these functional details appropriately for the specific purpose desired, without violating the spirit of the present invention. 0 The management module 7 3 is for managers to users. Multiple vouchers for various administrative tasks, such as reviewing the relevant information for users applying for vouchers

Page 13 1242348

V. Description of the invention (π) materials, registration of new vouchers, issuance of permits, implementation of existing vouchers for renewal, suspension, lifting of bans, cancellations, record inquiry, etc. Among them, $ 理 Module 7 3 transmits the information required for applying for a certificate and its password to the corresponding authentication system 6 for registration and issuance of new certificates to the corresponding authentication system 6 丨 ~ 6 3 以 ^ 求 '主 # Book 'After the authentication system 6 1 ~ 6 3 is registered, the new certificate and its identification data (such as the certificate serial number) are returned to the management module 73, and the management module 73 transmits the identification data of the new certificate, the corresponding authentication system, Approved certificate usage etc. ^ =, stored in the certificate database 7 丨, and send the new certificate to the user

= Storage media (such as magnetic disks, 1 (: cards, hard disks, etc.) to be stored by = users. Similar to the form of the operation module, the management module 73 also provides a network as the operation interface For better, various credential management industry = remote items can be presented on the network f, allowing managers to input data to perform the above operations. The same official management group 7 3 can also be set on a manager terminal device (Figure Τ is not displayed, and a specific day surface is displayed as an operating interface for the manager to lose his mind and to understand the information required for the relevant operation. The manager's terminal device can be two, the communication network 2 0 and the system 7 〇Communication, to transfer the above information to the department, 70, 70 to perform credential management related operations.

Private industry system 4 1 ~ 4 3 When you need to perform authentication in the execution of business processes, you must enter, ^ ^ Provide credential data 'via communication network 2 0 and communication device 3 0 future ^ w 1 required data is transmitted to the system 7 0. The processing module 74 receives it, and the system 41 ~ 4 3 sends the relevant information required for the certificate to be authenticated, orders the initial identification of the certificate, and reads the material of the certificate in the certificate database 7 丨 and the corresponding authentication system. Information that will be required for certification

Page 14 1242348 V. Description of the invention (12)-A document is transmitted to its corresponding authentication system 61 ~ 63 for authentication, and the authentication result returned by the corresponding authentication system 6 and 63 is returned to the business system 4丨 ~ 43 for them to judge whether they can continue the business process. In the system of the present invention, the certificate provided by the user is one of the multiple certificates that the user possesses-'must be initially identified and judged by the processing module 74 before the relevant data of the certificate can be transmitted to the correct authentication system 61 ~ 63, complete the certification process. The relevant information required for authentication by t-login can be at least a part of the voucher in the voucher or all the data in the voucher. Depending on the requirements of each authentication system, each authentication system is not exactly the same, and usually can be Contains the voucher serial number, voucher validity date, customer specific information, etc. of the voucher. In addition, general vouchers have their own applicable vouchers ^ and are not applicable to any business. As mentioned earlier, when issuing vouchers, managers have previously used the vouchers for their purposes (that is, their applicable transactions, services, or data processing). Items, etc.) are stored in the certification database 71. In order to avoid unnecessary authentication, the processing module 74 can read the certificate usage data in the certificate database 71 to determine whether the certificate can be used for the currently executed business project when it initially identifies the certificate. If not, continue This authentication procedure transmits the credentials and password to the corresponding authentication systems 61 ~ 63; if not, the authentication process is terminated, and the relevant message is returned to the user, informing that the credentials are not applicable to the business. In the same way, general vouchers also have a valid period, which can be stored in the voucher itself 'or stored in the voucher database 71, and the processing module 74 can also read the voucher or voucher database when it initially recognizes the voucher The date of validity of the certificate in 7 丨 to determine whether the certificate is still valid, to determine whether the certification process can continue. ''

Page 15 1242348 V. Description of the invention (14) ---- The certificate can be a certificate verified by the two or more authentication systems, and the certificate data includes the identification information of the certificate and its =% system Information;, "Response step 3 0 3, perform the relevant work of the user and its multiple vouchers, including submitting a clearing voucher, canceling vouchers, checking vouchers, querying the information of the person, etc .; & modify the use of step 3 0 5. Provide administrators with the management of the user's credentials, including reviewing the relevant information of the user's application for vouchers, registering new credentials, issuing certifications, performing updates on existing credentials, 'temporarily lifting the ban, Cancellation, record inquiry, etc .; Step 3 07: Receive the relevant information required for authentication from a business system and perform preliminary identification, such as judging based on the relevant identification data of the certificate stored in the certificate database. Whether the user and the passed voucher pay, 4 vouchers are still valid, to determine whether the authentication process can continue; and step 309, according to the voucher database The certificate data, and the relevant information required for authentication of the certificate is transmitted to the corresponding delta tolerance system for authentication via the communication network, and the result of the § forbearance certificate is received to return to the business system. Wherein, this step After 3 07, an additional step 3 0 8 may be included, that is, after preliminary identification, based on the voucher usage data, determine whether the voucher can be used for the currently executed business project; if yes, continue to step 3 0 9; if not , Then terminate the authentication process and reply to the user with a message informing them that the certificate is not applicable to the business.

Page 17 1242348 V. Description of the invention (15) In order to expand the use of the voucher, in the above step 305, the management of the voucher may include and store the registration information of the voucher extended use; and in the above step 308 Among them, it is based on the voucher usage data and the voucher extension registration data to determine whether the voucher can be used in the business.

The foregoing descriptions in specific embodiments have fully disclosed the features of the present invention. For those skilled in the art, they can apply their existing knowledge and easily modify or change it for various specific uses without departing from the spirit and scope of the present invention. It should also be understood that the terminology used herein is for the purpose of description without limitation, and therefore, the present invention is intended to include all modifications and changes that fall within the meaning and scope of the scope of the attached patent application.

Page 18 1242348 Brief description of the drawings The first diagram shows the system architecture of the conventional technology for authentication. The second figure illustrates a system architecture for integrating multiple authentication operations according to the present invention. The third diagram is a flowchart showing steps in the method of the present invention. Schematic component symbol description

1 0 ~ client; 1 1 ~ 1 3 ~ user terminal device; 2 0 ~ communication network; 3 0 ~ communication device; 40 ~ transaction system; 4 1-4 3 ~ business system; 50 ~ front-end system; 5 certificate database; 5 2 to operation module; 53 to management module; 60 to 63 3 to authentication system; 70 to the system of the present invention; 7 certificate database; 7 2 to operation module; 7 3 ~ management module; 7 4 ~ processing module.

Page 19

Claims (1)

1242348 VI. Scope of patent application 1 · A system integrating multiple authentication operations, which communicates with two or more remote authentication systems via a communication network, wherein the two or more authentication systems can each issue different formats The certificate can be authenticated and the certificate issued by it can be authenticated, and the system includes: a certificate database 'used to store at least one user data and identification information of the at least one certificate and corresponding authentication system data, which /, The certificate may be any certificate issued by the two or more authentication systems; an operation module for users to perform related operations of at least one certificate thereof; a management module for managers to perform Management of user credentials; and a processing module that receives relevant information required for authentication from a business system and performs initial identification, and authenticates the credentials based on the credential data in the credential database Relevant required information is transmitted to the corresponding authentication system for authentication via the communication network, and the authentication result is received for transmission. The business systems, which were part of the evidence-based information on relevant information necessary for the authentication credentials. 2 · If the system of the first patent application scope, wherein the communication network is any one of the Internet, local area network, telecommunication network, dedicated line, virtual private network and wireless network, or two of them More than one combination. 3. If the system of item 2 of the patent application scope, the business system is set on the same local area network as the integrated multiple authentication operating systems. 4 · The system according to item 1 of the scope of patent application, wherein the business system is a transaction system for executing at least one transaction process. Page 20 1242348 VI. Scope of patent application Existing vouchers are updated, suspended, lifted, cancelled, records checked, etc. 1 2. If the system of item 丨 丨 of the scope of patent application, the management module transmits the information required for applying for a new certificate and its password information to the authentication system that it applies for when issuing a new certificate After requesting registration, after being registered by the authentication system, the new certificate and its identification data are returned to the management module; and where 'the management module stores the identification information of the new certificate, the corresponding authentication system, and the designated certificate purpose, etc. In the certificate database, the new certificate is sent to the client for storage. 1 3 · The system of item 1 in the scope of patent application, wherein the management module provides a web page as an operation interface for the manager to perform Feng Zheng management operations. ~ Also 1 4 · If the system of the first scope of the patent application, the manager is connected to the system via a communication network via a manager terminal device; and wherein the management module is provided on the manager terminal Device, and display a specific daylight surface as an operation interface on the official manager ’s terminal device for the administrator to input data required for performing credential management-related operations and transmit it to the system via the communication network to perform credential management-related operations. 1 5 If the system of item 1 of the scope of patent application, the voucher information further includes the voucher usage information of the voucher; and, where 'the processing module sends the voucher to the corresponding authentication system' according to the voucher Use the data to determine whether the certificate can be used in the business system, and based on the judgment result, decide whether to transfer the relevant information required for the certificate to the corresponding authentication system. ~ ° 仃 Page 22 1242348 VI. Scope of Patent Application ^-1 6 · If the system of patent application No. 丨 5, in which the user certificate management operation provided by the management module also includes certificate use extension ^ registration 'for Store the relevant data of the certificate usage extension registration in the Saki certificate database to record the expansion materials beyond the original certificate use of the certificate; and 'Wherein, the processing module transmits the certificate to the corresponding authentication system before , According to the voucher usage data and voucher expansion registration data, to determine whether the voucher can be used in the business system, and based on the judgment result, decide whether to transfer the relevant data required for voucher authentication to its corresponding authentication system . , ~ 1 7 · If the system of the scope of patent application No. 1, wherein the voucher data further includes the date of validity of the voucher; and where 'the processing module transmits the relevant data required for authentication of the voucher to the corresponding Before the authentication system, according to the validity date of the certificate, to determine whether the certificate can be used in the business system, and to determine whether to transfer the relevant information required for the certificate to its corresponding authentication system. 18 · — A system integrating multiple authentication operations, which communicates with two or more remote authentication systems via a communication network, wherein the two or more authentication systems can each issue certificates with different formats and The certificates issued by it are authenticated, and the system includes: a certificate database for storing at least one user data and identification information, purpose data, valid date data and corresponding authentication system data of at least one certificate owned by the user, The certificate may be the two or more certificates. Page 23 1242348 VI. Any certificate issued by the patent application system;… an operation module for users to perform at least one related operation of the certificate, including applying for a certificate, canceling a certificate, checking a certificate, and querying and modifying a user Data and other operations; an official management module 'for managers to perform management operations on user credentials' includes reviewing relevant information on application credentials submitted by users, issuing new credentials, updating existing credentials, Suspension, lifting of ban, cancellation, record inquiry, use extension registration, etc .; and Two processing modules: It receives the certificate from a business system for certification, data and preliminary identification, and determines whether the certificate is valid or not according to the certificate use data, use extension registration data, and effective date data in the certificate database. It can be used in the business system. If it is available, according to the corresponding authentication system data in the credential database, the relevant data required for authenticating the credential is transmitted to the corresponding authentication system for authentication through the communication network, and Receive its authentication results to return to the business system, where the relevant information required for the certificate to be authenticated is part of the certificate. 19. A method for integrating a plurality of authentication operations, communicating with one or more $ tolerance card systems of a transport terminal via a communication network, wherein the two or more authentication systems can each issue certificates with different formats and The issued certificate performs authentication, and the method includes the steps of: 8 storing at least one user data and identification information of the at least one certificate and corresponding authentication system data, wherein the certificate may be the two or more Any certificate issued by an authentication system; performing related operations of at least one certificate of the user; Page 24 1242348 VI. Scope of patent application ^ ^^ —- Checking vouchers, querying and modifying user data, etc. 27. The method according to item 19 of the scope of patent application, wherein the method is provided by a supply-net: as an operation interface for a user to perform at least related operations. Heart 2 8 · The method of claiming item 9 of the patent scope, which includes the following steps: However, the cloud communicates with a user terminal device via a communication network; and displays a message on the 4 user terminal device. The specific day surface is used as an operation interface for the user to input necessary data for performing his / her voucher-related operations to perform voucher-related operations. m 29. According to the method of applying for item 19 in the scope of patent application, where the administrator = user, the management of the certificate includes checking the relevant stature of the application certificate submitted by the user, issuing a new certificate, and verifying the existing certificate. There are credentials to update, suspend, lift, cancel, and query records. 30 · If the method of item 29 of the scope of patent application is applied, in the process of issuing a new certificate, the information required for applying for a new certificate and its password information are transmitted to the authentication system to which it is applied to request registration, The authentication system will "return the new certificate and its identification data after the master book"; and, of which, "the identification information of the new certificate, the corresponding authentication system, and the designated certificate use will be stored and the new certificate will be stored" Send to user for storage. 3 1 · The method according to item 19 of the scope of patent application, in which a web page is provided as an operation interface, so that the administrator can perform credential management operations. 3 2 · The method of item 19 in the scope of patent application, wherein the method is more Page 26 1242348 VI. The steps included in the scope of patent application are: · Communicating with a manager terminal device via a communication network; and displaying a specific screen on the manager terminal device as an operation interface for the manager to enter for credential management The data required for related operations is returned via the communication network to perform related operations for certificate management. 3 3 · If you apply for the method of item 19 in the scope of patent application, the voucher data also includes the voucher usage data of the voucher, and the method further includes the steps of: · Sending the relevant data required for authentication of the voucher to Before the corresponding authentication system, it is judged whether the certificate can be used in the business system based on the use information of the certificate, and according to the judgment result, it is decided whether to transfer the relevant information required for the certificate to the corresponding authentication system. 34. If the method according to item 33 of the scope of patent application, the management of the voucher further includes the registration of the extended use of the voucher, and the method further includes the steps of: storing the relevant data of the extended registration of the voucher, To record the extended use data other than the original certificate use; and to send the certificate to the corresponding authentication system, according to the certificate use data and the certificate use extended registration data to determine whether the certificate can be used in the business system, And according to the judgment result, it is decided whether to transmit the relevant data required for the certificate authentication to the corresponding authentication system. 3 5. The method according to item 19 of the scope of patent application, wherein the voucher data further includes valid date information of the voucher, and the method further includes the steps of: Page 27 1242348 VI. Before applying for the scope of the patent, the relevant information required for the certification of the certificate is transmitted to the corresponding certification system, based on the validity date of the certificate, to determine whether the certificate is not used in the business system, and according to The result of this judgment is to decide whether to transmit the relevant data required for authentication of the certificate to the corresponding authentication system. 3 6 · — A method of integrating multiple authentication operations, communicating with two or more remote authentication systems via a communication network, wherein the two or more authentication systems can each issue certificates with different formats and can The certificate issued by it is authenticated, and the method includes the steps of: storing at least one user data and identification information, purpose data, expiration date data and corresponding authentication system data of the at least one certificate owned by the user, wherein, the The voucher can be any voucher issued by the two or more authentication systems. Perform at least one voucher related operation of the user, including operations such as applying for voucher, canceling voucher, checking voucher, querying and modifying user data, etc .; The management of the user credentials by the administrator includes the relevant information of reviewing the application credentials submitted by the users, the issuing of new credentials, the updating of existing credentials, the suspension, lifting, cancellation, record query, and use expansion Registration, etc .; and receiving a voucher from a business system, based on the voucher usage data and usage expansion Record data and valid date data to determine whether the certificate can be used in the business system, and if it can be used, the relevant data required for authentication of the certificate is transmitted to the corresponding authentication system for authentication through the communication network, and Receive its authentication results to return to the business system, where the relevant information required for the certificate to be authenticated is part of the certificate. Page 28