TWI732247B - Method to display the validation of certificate at signing time - Google Patents

Abstract

The present invention relates to a method to display the validation of certificate at signing time, wherein a signature server executes: generating a key pair and applying to a Certificate Authority for the certificate of the key pair, establishing an initial record block, when a signature is generated, the hash value of the previous record block is written into the authentication attribute of the signature, and the hash value of the previous record block is added to the hash value of the signature body of the signature to establish a new record block, wherein when the expiration date of the certificate is not about to expire, the new signature is continuously generated in the above manner, and those blocks are made into a record chain, and in addition, when the expiration date of the certificate is about to expire, a time stamp from a TimeStamp Authority and a certificate validity evidence from the Certificate Authority are obtained by using the hash value of the last record block for confirmation of the validity of the certificate at the signing time.

Description

Record method to prove the validity of the certificate at the time of signing

The present invention relates to a technology for verifying the validity of a certificate, in detail, it relates to a recording method for proving the validity of a certificate when signing.

The current general digital signature method is that the issuer needs to register its public key with a digital certificate authority (CA) in the public key infrastructure, obtain the corresponding digital certificate as identity authentication, and use asymmetric encryption technology To achieve file integrity and non-repudiation. When verifying the validity of the signature, in addition to using asymmetric encryption technology to verify that the document has not been changed, it is also necessary to verify the validity of the certificate to confirm that its identity has not been fraudulently used, that is, if the certificate has expired or has been cancelled , This digital signature is invalid. If you want this digital signature to be considered valid even when the certificate has expired or has been cancelled, you must prove that the certificate was valid when the digital signature was generated.

In the aforementioned method of proving the validity of the certificate, if the third-party time stamp is used to prove that the time of signature falls within the validity period of the certificate, the possibility that the certificate has been cancelled at the time of signing cannot be ruled out, because the digital certificate certification authority will not After maintaining the cancellation list, it is no longer possible to verify with the digital certificate certification authority whether this certificate has been cancelled. Therefore, the most complete approach is to When signing, use a third-party time stamp to prove the current signing time, and at the same time obtain proof that the certificate has not been cancelled, that is, the certificate revocation list (CRL) or online certificate status agreement (OCSP) package at that time, and The time stamp and proof that the certificate has not been cancelled are added to the document signature for future verification. However, in practical applications, the validity period of most digital signatures is equivalent to the validity period of the voucher. Only a few of them must be considered valid after the voucher expires or is cancelled. For example, banks issue a large number of statements. The user has verified that the digital signature is valid at the moment, indicating that it was issued by this bank and the content has not been altered. There are only a few digital signatures in the statement. For example, it is very long if it is used as evidence in the court. After a period of time and the bank certificate has expired, it is necessary to prove that the digital signature is still valid.

It can be seen from the above that if we can find a technology to verify the validity of the certificate, especially how to prove that the certificate is valid when the digital signature is generated, and there is no need to go to a third party to obtain the time stamp and the complexity of the certificate validity certificate every time the certificate is generated. The procedures that are time-consuming and wasteful of resources will become the goal of those skilled in the art who are eager to pursue solutions.

The purpose of the present invention is to propose a method of signature and verification. It is only necessary to obtain a time stamp and proof that the certificate has not been cancelled before the certificate is about to expire or be cancelled, and the validity of the certificate at the time of signing can be confirmed, and there is no need to The time stamp and proof that the certificate has not been cancelled are added for each signature to reduce the network transmission and computing performance during each signature.

In order to achieve the above and other objectives, the present invention proposes a recording method for proving the validity of a certificate at the time of signing, which includes: instructing a signing server to generate a key pair to apply to a digital certificate certification authority for the key pair Certificate; make the signature server create an initial record area Block; when the signature server generates the signature, it writes the hash value of the previous record block into the authentication attribute of the signature, and adds the hash value of the previous record block to the current signature The hash value of the signature is used to create a new record block, where, when the signature server checks that the expiration date of the certificate is not about to expire, new signatures are continuously generated in the above manner to make the initial record The block and at least one new record block become a record chain; and when the signing server checks that the expiration date of the certificate is about to expire, the signing server is made to use the hash value of the last record block Obtain the time stamp from the one-time stamp service center and obtain the certificate validity certificate from the digital certificate certification body to confirm the validity of the certificate at the time of signing.

In one embodiment, making the initial record block and at least one new record block become the record chain means that each record block in the blockchain technology includes the hash value of the previous record block. To ensure that the order and content of the record blocks have not been tampered with.

In another embodiment, putting the hash value of the previous record block into the authentication attribute in the signature uses asymmetric encryption technology to ensure that the hash value record cannot be tampered with.

In addition, the content of the initial record block includes information related to the signature certificate or any pre-appointed content.

In another embodiment, the signature server is made to obtain the time stamp from the time stamp service center using the hash value of the last record block to prove that the record chain exists before the time stamp time. In addition, the signing server obtains the certificate validity certificate from the digital certificate certification authority, including obtaining a certificate revocation list (CRL) or online real-time certificate status query (Online Certificate Status Protocol, OCSP) to prove the validity of the certificate. The certificate is valid under the time stamp.

In another embodiment, if the private key is lost or leaked, the signature server The hash value of the last record block is used to obtain the time stamp from the time stamp service center and obtain the certificate validity certificate from the digital certificate certification authority, and then cancel the certificate from the digital certificate certification authority.

In one embodiment, the method for recording the validity of a certificate at the time of signing as described in this case includes: when the certificate has expired or has been cancelled, the verifier uses the record string retained by the signing server Chain, the time stamp, and the proof of the validity of the certificate to confirm the validity of the certificate.

In the above embodiment, the verification of the validity of the certificate includes: checking whether there is a record block in the record chain that matches the signature; checking the record block to the last record block, every time Whether a record block correctly contains the hash value of the previous record block; check whether the hash value of the last record block correctly appears in the time stamp; and check whether the time stamp time of the time stamp is valid in the certificate Proof of sex before time.

In other embodiments, after the signature server obtains the time stamp from the time stamp service center with the hash value of the last record block and obtains the certificate validity certificate from the digital certificate certification authority, when the signature server obtains the time stamp from the time stamp service center, When the chapter server wants to execute the signature action, it needs to regenerate a new key pair and apply for a new certificate to generate the record chain corresponding to the new certificate.

In summary, the recording method for proving the validity of the certificate at the time of signature proposed by the present invention is to include the hash value of the previous record block in the signature and create a new record block, which contains the hash of the current signature Value and the hash value of the previous record block. Through this method, the signing server cannot forge the signing order; in addition, when the certificate used by the signing server is about to expire or the used When your key is lost or leaked and you need to cancel the certificate, you only need to take the hash value of the last record block to the Time Stamp Authority (TSA) Obtain the time stamp and obtain the certificate validity certificate (OCSP or CRL) from a digital certificate authority (CA), which can confirm all the signatures that appear on the chain of records. The certificate is valid at the time of signing. Because all the signatures appearing on the chain of records exist before the time point when the time stamp and the validity of the certificate are obtained, and the time stamp and the certificate validity certificate can prove that the certificate is valid at this point in time, the present invention can prevent In order to save certificate costs, the signature server continues to use expired certificates to generate signatures, but forges the signature record, claiming that the certificate is valid at the time of the signature. In addition, it can also save the creation of a long-term signature. The calculation cost and network transmission for the three parties to obtain the time stamp and the validity of the certificate.

11‧‧‧Signing Server

12‧‧‧Signing Server Administrator

13‧‧‧Digital Certificate Certification Authority

14‧‧‧Time Stamp Service Center

15‧‧‧Verifier

S11~S14‧‧‧Step

101~106‧‧‧Process

201, 202‧‧‧ process

301, 302‧‧‧ process

S501~S508‧‧‧Process

S601~S607‧‧‧Process

Figure 1 is a step diagram of the method for recording the validity of a certificate when proving the signature of the present invention.

Figure 2 is a schematic diagram of the system architecture and message transmission of a specific embodiment of the method for recording the validity of a certificate at the time of signature verification of the present invention.

Figure 3 is a schematic diagram of the signature of the present invention.

Figure 4 is a schematic diagram of the record chain of the present invention.

Figure 5 is a flowchart of the signature server implementation of the present invention.

Figure 6 is a flow chart of the validity of the certificate when verifying the signature of the present invention.

The following describes the technical content of the present invention with specific specific embodiments. Those familiar with the art can easily understand the advantages and effects of the present invention from the content disclosed in this specification. However, the present invention can also be implemented or applied by other different specific embodiments.

Figure 1 is a step diagram of the method for recording the validity of a certificate when proving the signature of the present invention. As shown in the figure, the recording method for proving the validity of a certificate at the time of signing of the present invention discloses how to record the signing process, so that it can be subsequently verified whether the certificate is valid at the time of signing.

In step S11, the signing server is asked to generate a key pair to apply for a certificate of the key pair from a digital certificate certification authority. In this step, when the signature manager first generates a key pair to perform an application for registration of the public key with the digital certificate certification authority, the digital certificate certification authority issues the certificate of the key pair.

In step S12, the signature server is asked to create an initial record block. In order to verify the validity of the certificate at the time of signing in the future, the signing server will execute a record every time a signature is issued by the signing server, recording the sequence of each signature output, so that you can find out if there is any It has been tampered with, therefore, the present invention proposes a technical concept similar to a blockchain, which records the signature by establishing a chain of records, so an initial record block is generated at the beginning.

In one embodiment, the content of the aforementioned initial record block includes information related to the signature certificate or any pre-appointed content, which can be mainly distinguished from other subsequent record blocks.

In step S13, when the signature server generates the signature, it writes the hash value of the previous record block into the authenticated/signed attribute of the signature, and uses the previous record block The hash value of the current signature is added to the hash value of the signature body of the current signature to create a new record block. When the signature server checks that the expiration date of the certificate is not about to expire, it will continue to generate new records in the above manner The signature of, so that the initial record block and at least one new record block become a record chain. This step is to explain how the aforementioned record chain is established, which can be divided into a signature part and a record block part.

First, the signature part will write the hash value of the previous record block into the authentication attribute of the signature, so when the authentication attribute content of the signature is tampered with, the authentication of the signature will fail. In other words, it can be compared with The record chain is linked to ensure that this signature will appear after the record chain.

In addition, in addition to the aforementioned signature part, there is also the creation of a new record block, that is, the hash value of the previous record block plus the hash value of the signature body of the current signature to create a new record block, which is created here The record block of can correspond to the aforementioned signature, that is, the signature part will write the hash value of the previous record block into the authentication attribute of the signature, and the corresponding record block contains the previous record The hash value of the block plus the hash value of the signature of the current signature. That is to say, this method uses the characteristic that each section in the blockchain technology contains the hash value of the previous section, that is, each record block contains the hash value of the previous record block, so it can ensure these The order and content of the record blocks are difficult to be tampered with.

Subsequently, when a new record block is created, when the signature server checks that the expiration date of the certificate is not about to expire, it can continue to generate a new signature in the same way and generate a corresponding record block, and These record blocks and the initial initial record block can become a record chain.

In one embodiment, putting the hash value of the previous record block into the authentication attribute in the signature uses asymmetric encryption technology, which can ensure that the hash value record cannot be tampered with.

In step S14, when the signing server checks that the expiration date of the certificate is about to expire, the signing server is asked to obtain the time stamp from the time stamp service center with the hash value of the last record block and send it to the time stamp service center. The digital certificate certification authority obtains the certificate validity certificate. The signature server sends Obtained by the digital certificate certification authority. Specifically, the time stamp obtained by the signing server and the certificate validity certificate can be stored together with the record chain, so it can provide subsequent "validity of the certificate at the time of signing" check. In detail, in step S13, when the expiration date of the certificate is not about to expire, the signature and record block are continuously generated. If the expiration date of the certificate is about to expire, the signature server The time stamp will be obtained from the time stamp service center with the hash value of the last record block to prove that the record chain already exists before the time stamp time, that is, the entire record chain appears before the time stamp time. In addition, the signature The chapter server will obtain the certificate validity certificate from the digital certificate certification authority to confirm the validity of the certificate at the time of signing. If you need to explain, the signing server can use the digital certificate if the certificate has not expired and is not cancelled. The certification body obtains proof of the validity of the certificate.

In another embodiment, obtaining the certificate validity certificate from the digital certificate authority by the signing server includes obtaining a certificate revocation list (CRL) or online real-time certificate status query (Online Certificate Status Protocol, OCSP). ) To prove that the voucher is valid under the time stamp.

In addition, the foregoing description shows that the certificate is not expired or cancelled. If the certificate has expired or has been cancelled, the verifier can use the record chain, the time stamp, and the time stamp saved by the signature server. The validity of the certificate is used to confirm the validity of the certificate.

In the aforementioned method, if the private key of the signature server is lost or leaked, the hash value of the last record block will be used to obtain the time stamp from the time stamp service center and obtain the time stamp from the digital certificate certification authority. Proof of the validity of the certificate, and then cancel the certificate with the digital certificate certification authority. In the above case, after the certificate is cancelled, even if the leaked private key is maliciously used to generate a signature, it will be generated by the certificate invalid and a non-signature server, so there is no signature record block to prove The certificate is valid at the time of signing, so it will be regarded as an invalid signature.

In addition, the verification of the validity of the certificate may include the following steps: check whether there is a record block in the record chain that matches the signature; check between the record block and the last record block, Whether each record block correctly contains the hash value of the previous record block; check whether the hash value of the last record block correctly appears in the time stamp; and check whether the time stamp time of the time stamp is in the certificate Before the proof of validity.

In the above steps, it will first check whether the obtained signature matches the content of a record block in the record chain. If so, it will further check from this record block to the last record block, each record block Whether the hash value of the previous record block is included correctly, as mentioned above, through the record chain method, each record block will contain the hash value of the previous record block. If there is any discrepancy, it means that the validity of the certificate is problematic . Then, check whether the hash value of the last record block is in the time stamp, and check whether the time stamp time of the time stamp is before the proof time of the validity of the certificate. If all of the above are met, it can be proved that the certificate is in the time stamp. It is valid at the time of signature.

In other embodiments, after the signing server obtains the time stamp from the time stamp service center with the hash value of the last record block and obtains the certificate validity certificate from the digital certificate certification authority, if the signing server also executes the signature During the chapter action, you need to regenerate a new key pair and, in step S11, you must apply for the certificate of the new key pair from the digital certificate certification authority, and generate the corresponding record chain corresponding to the new certificate. After the time stamp service center obtains the time stamp and obtains the certificate validity certificate from the digital certificate certification authority, the entire record block will be re-recorded.

Figure 2 is a schematic diagram of the system architecture and message transmission of a specific embodiment of the method for recording the validity of a certificate at the time of signature verification of the present invention. As shown in the figure, the method of the present invention can include five roles and ten message transmission processes. Among them, the signing server 11 can provide a large number of signing services. Add electronic signature to prevent account If the single content is tampered with or forged, it is necessary to build such a signature server. The signature server administrator 12 is responsible for the application, cancellation and related management functions of the signature certificate, and the digital certificate certification authority 13 is responsible for issuance and management. The impartial third-party authority of digital certificates, the time stamp service center 14 is a impartial third-party unit that provides time stamp services, and the verifier 15 is the person who needs to perform the verifier. For example, it can be a customer who accepts electronic bills and wants to verify Whether this electronic bill has been tampered with or forged.

The first is the related process of creating a signature, including: process 101 generates a key pair for the signature server 11, and then the signature server administrator 12 registers the public key with the digital certificate certification authority 13; the process 102 is the digital certificate certification authority 13 Issue the certificate, and the signing server administrator 12 imports the certificate to the signing server 11; the process 103 is for the signing server 11 to determine that the certificate is about to expire, or the private key is lost or leaked and signed When the server administrator 12 prepares to cancel the certificate with the digital certificate certification authority 13, the hash value of the last record block is sent to the time stamp service center 14; the process 104 is the time stamp service center 14 to return the time stamp; the process 105 is the signature The server 11 requests a certificate validity certificate from the digital certificate certification authority 13; the process 106 is for the digital certificate certification authority 13 to return a certificate validity certificate.

In general, the verification procedure when the certificate has not expired is as follows: flow 201 is that when the certificate has not expired, the verifier 15 asks the digital certificate certification authority 13 to verify the validity of the certificate to determine the status of the certificate; flow 202 is a digital certificate The certification authority 13 returns the current status of the certificate.

If the certificate expires or the result of the process 202 is that the certificate has been cancelled, the process 301 is executed, that is, the verification terminal 15 requests the signing server 11 for the chain of records, time stamps, and certificate validity certificates stored by the signing server 11 In addition, the process 302 is for the signature server 11 to return the record chain, time stamp, and certificate validity certificate stored by it.

Figure 3 is a schematic diagram of the signature of the present invention, and Figure 4 is a schematic diagram of the record chain of the present invention. Please also refer to Figures 2-4. The method of the present invention requires the signing server 11 to first create an initial block L ₀ , the content of which can be related to the signing certificate or any agreed content, which can be combined with other record areas. Block difference can be. When generating a first signature S ₁ of the L hash value H _0, heteroaryl (L _0), writing in the signature authentication attributes, and generates a record of block L _1, which comprises a content H (L ₀₎ And the hash value H(S' ₁ ) of the signature body in this signature, where the signature body is a part of the signature, which is the result of using the private key to encrypt the hash value of the authentication attribute area. The schematic diagram of the signature can be as As shown in Figure 2.

When this signature server 11 generates the signature S _i i-th time, the previous record will heteroaryl L _i-1 of the block hash value H (L _i-1), writing of signature authentication attributes, And generate a record block _Li , whose content includes H(L _i-1 ) and the hash value H(S' _i ) of the signature in this signature. The example of the signature and record chain generated by the aforementioned method is As shown in Figure 3. In the method of the present invention, using the feature that each section in the blockchain technology contains the hash value of the previous section, it can ensure that the order and content of these record blocks are difficult to tamper with. Among them, put in the signature The hash value to the authentication attribute of the previous record block can use asymmetric encryption technology to ensure that the hash value record cannot be tampered with, and to link with the record chain to ensure that the record chain already exists before signing. It can prevent the signature server 11 from generating multiple signatures, and then arbitrarily reverse their order to establish a corresponding chain of records to achieve the purpose of forging the order of signatures.

In addition, when the signing server 11 determines that the certificate is about to expire or a private key is lost or leaked, and the signing server administrator 12 prepares to cancel the certificate with the digital certificate certification authority 13, the signing server 11 will record the current record The hash value H(L _f ) of the last block L _f of the chain is time stamped by the time stamp service center 14 to prove that the record chain exists before the time stamp time, and the certificate is valid from the digital certificate authority 13 Proof of nature (CRL or OCSP) for subsequent proof that the status of the certificate is valid at this time stamp. It should be noted that after the above actions, if the signing server 11 still wants to perform the signing action, it needs to regenerate the key pair and apply for the certificate, and then generate the record chain corresponding to the new certificate.

It can be seen from the above that the method of the present invention requires the signing server 11 to save the record chain, time stamp, and certificate validity certificate, so that it can be accessed by any verification terminal 15 that wants to verify the validity of the certificate when signing, and Since there is only a hash value in the record chain, there is no need to worry about the leakage of the signature file data.

When the verification terminal 15 to verify the validity of the signature S _t their credentials, while not expired certificate, certificate status queries 13 directly to the digital certificate authentication mechanism. In addition, when the certificate has expired or the certificate has been cancelled, the verifier 15 needs to obtain the record chain, time stamp, and certificate validity certificate stored by the signature server 11. At this time, the verifier 15 first verifies the signature S _'(t and authentication attributes in H _t hash S) H value' (L _t-1) is a combination of a record block L _t appears in the record chaining, followed by verification L _t to L _f, each Whether a record block correctly contains the hash value of the previous record block, and verify _{whether the hash value H(L f} ) of the last record block appears in the time stamp. Finally, the verification terminal 15 verifies whether the time stamp time is Before the time for proof of the validity of the voucher, to confirm the validity of the voucher. Based on the characteristics of the blockchain, it is only necessary to check the L _t to L _f record chain to prove that L _t appears _{before L f} , and there is no need to process the record block before _{L t , and since L f} exists before the time stamp time, and when the point in time stamp has demonstrated proof of validity certificate credentials to prove effective, whereby proof signatures S _t at the time of signature credentials are valid.

Figure 5 is a flowchart of the signature server implementation of the present invention, which explains that the generation of the signature will create a record block, and when it is confirmed that the certificate is about to expire, the time stamp and the certificate will be obtained. Proof of effectiveness.

The process S501 is to generate a key pair to apply for a certificate of the key pair from a digital certificate certification authority. In this process, the signing server will generate a key pair, and the signing server administrator will apply for the certificate of this key pair from the digital certificate authority, and the signing server administrator will import the certificate to the signing server .

The process S502 is to create an initial record block. In this process, the signing server creates an initial record block. The content of the initial record block is information related to the signing certificate or any pre-appointed content, which can be distinguished from other record blocks.

The process S503 is to write the hash value of the previous record block into the authentication attribute to generate a signature. In this process, the signature server adds the hash value of the previous record block to the authentication attribute of the signature to link with the record chain to ensure that this signature appears after the record chain. If the authentication attribute content of the chapter is tampered with, the signature verification will fail.

The process S504 creates a new record block for the hash value of the previous record block and the hash value of the signature. In this process, the signing server creates a new record block after completing the signature. Its content includes the hash value of this signature and the hash value of the previous record block. Specifically, the blockchain technology can be used Each section contains the characteristics of the hash value of the previous section to ensure that the order and content of these record blocks are difficult to tamper with.

The process S505 is to determine whether the voucher is about to expire. In this process, the signing server checks the expiration date of the certificate, and if it is not about to expire, it repeats the process S503 and the process S504 to generate a signature and corresponding record block, and if it is about to expire, executes the process S506.

The process S506 is to obtain the time stamp from the time stamp service center based on the hash value of the last record block. In this process, the signature server sends the hash value of the last record block to the time stamp server The service center obtains the time stamp, and the content of the time stamp obtained will contain the hash value of the last record block. The purpose is to prove that the entire record chain appears before the time stamp time.

The process S507 is to obtain a certificate validity certificate (OCSP or CRL) from the digital certificate certification authority. In this process, the signing server obtains the certificate validity certificate from the digital certificate certification authority, and uses the time stamp and certificate validity certificate obtained in the processes S506 and S507 to confirm the validity of the certificate at the time of signing in the future.

In addition, the process S508 explains that if the private key is lost or leaked, S506 and S507 need to be executed first, and then the certificate is cancelled with the digital certificate certification authority to avoid the failure of S507 to obtain the certificate validity certificate. After the certificate is cancelled, because the certificate is invalid or even if the signature is generated maliciously, it is not generated by the signature server. Therefore, there is no signature record block to prove that the certificate is valid when the signature is signed. This can ensure that the maliciously generated signature is Invalid signature.

Figure 6 is a flow chart of the present invention for verifying the validity of the certificate when signing, which explains how to verify the validity of the certificate when signing. Please refer to Figure 4 for description below.

The process S601 is to check whether the certificate has not expired, that is, the verifier checks the expiration date of the certificate to see if it has not expired. The process S602 is to query the digital certificate certification authority whether the certificate has not been cancelled, that is, the verification terminal queries the digital certificate certification authority whether the certificate has not been cancelled.

The process S603 is to obtain the record chain, time stamp, and certificate validity certificate from the signature server in the case of failing S601 or S602. In this process, if the process S601 or S602 is not passed, the verifier obtains the record chain, time stamp, and certificate validity certificate from the signature server. In practical applications, the process S601 and the process S602 can prove the signature. The certificate is valid at the time of the seal, and only a few signatures need to verify the validity of the certificate at the time of signing when the certificate is invalid after a long period of time.

The process S604 is to check whether there is a record block whose content matches the signature, that is, the verifier checks whether there is a record block L _t in the record chain that matches the signature.

The process S605 is to check whether each record block correctly contains the hash value of the previous block from this record block to the last record block. In this process, the verifier checks from this record block L _t to the last record block L _f , whether each record block correctly contains the hash value of the previous block, and according to the characteristics of the blockchain, it only needs to be checked The _{record chain from L t} to L _f can prove that L _t appears _{before L f} , and there is no need to process the record block before _{L t.}

The process S606 is to check whether the hash value of the last block correctly appears in the time stamp, that is, the verifier will check whether the hash value of the last block correctly appears in the time stamp, and the hash value of the last block appears in the time stamp. In stamp, it means that the entire record chain appears before the time stamp time.

The process S607 is to check whether the time stamp time is before the certificate validity proof time, that is, the verifier checks whether the time stamp time is before the certificate validity proof time, and the time stamp time is before the certificate validity proof time, which represents the status of the certificate at this time. The stamp time is valid. Therefore, through the results of the processes S605 to S607, it can be proved that the certificate is valid at the time of signing.

In summary, the present invention requires the signature server to write the hash value of the previous record block into the authentication attribute in the signature, and create a new record area from the hash value of the previous record block and the hash value of the signature. Blocks are retained and the block chain is used. There is no need to disclose this record in real time or hand it over to a third-party notarization, which achieves the purpose that the signature server cannot change the order of signatures. In addition, the present invention requires the signing server to use the hash value of the last record block to obtain the time stamp and to the digital value when the signing certificate is about to expire or the used key is lost or leaked. The certificate certification authority obtains the certificate validity certificate and keeps it together with the record chain, so it can provide a follow-up check on the validity of the certificate at the time of signing; in addition, the present invention can be used after the certificate expires or is cancelled. It can be verified that the certificate is valid at the time of signing by the record chain, time stamp, and certificate validity certificate saved by the signing server. Therefore, the validity of the signature will not be affected by the current status of the certificate. This is the same as every time the certificate is signed. All need to go to a third party to get the time stamp and the certificate validity certificate to achieve the validity of the signature after the certificate expires or is cancelled. Compared with the existing method that can prove the validity of the signature, the present invention greatly saves the computational cost and network required for each signature. transmission.

The above-mentioned embodiments only exemplarily illustrate the principles and effects of the present invention, and are not intended to limit the present invention. Anyone who is familiar with this technique can modify and change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the rights of the present invention should be listed in the scope of patent application described later.

S11~S14‧‧‧Step

Claims (10)

A recording method for proving the validity of a certificate at the time of signing includes: ordering a signing server to generate a key pair to apply for a certificate of the key pair from a digital certificate certification authority; ordering the signing server to create an initial record area Block; when the signature server generates the signature, it writes the hash value of the previous record block into the authentication attribute of the signature, and adds the hash value of the previous record block to the current signature The hash value of the signature is used to create a new record block, where, when the signature server checks that the expiration date of the certificate is not about to expire, new signatures are continuously generated in the above manner to make the initial record The block and at least one new record block become a record chain; and when the signing server checks that the expiration date of the certificate is about to expire, the signing server is made to use the hash value of the last record block Obtain the time stamp from the one-time stamp service center and obtain the certificate validity certificate from the digital certificate certification body to confirm the validity of the certificate at the time of signing. For example, the recording method for proving the validity of the certificate at the time of signing as described in the scope of patent application, wherein, making the initial record block and at least one new record block become a record chain refers to the use of each block chain technology A record block contains the characteristics of the hash value of the previous record block to ensure that the order and content of the record blocks are not tampered with. For example, the recording method for proving the validity of the certificate at the time of signing as described in item 1 of the scope of patent application, wherein the hash value of the previous record block is placed in the signature to the authentication attribute by using asymmetric encryption technology Ensure that the hash value record cannot be tampered with. For example, the recording method for proving the validity of the certificate at the time of signing as described in item 1 of the scope of patent application, wherein the content of the initial record block includes information related to the signing certificate or any pre-appointed content. For example, the recording method for proving the validity of the certificate at the time of signing as described in item 1 of the scope of patent application, in which the signing server is made to obtain the time stamp system from the time stamp service center with the hash value of the last record block It is used to prove that the record chain already exists before the time stamp time. For example, the method for recording the validity of a certificate at the time of signing as described in item 5 of the scope of patent application, wherein the signing server obtains the certificate validity certificate from the digital certificate certification authority including obtaining a certificate revocation list (Certificate Revocation List). , CRL) or online real-time certificate status query (Online Certificate Status Protocol, OCSP) to prove that the certificate is valid under the time stamp. For example, the recording method for proving the validity of the certificate at the time of signing as described in item 1 of the scope of patent application, in which, if the private key is lost or leaked, the signing server uses the hash value of the last record block to forward The time stamp service center obtains the time stamp and obtains the certificate validity certificate from the digital certificate certification authority, and then cancels the certificate from the digital certificate certification authority. For example, the method of recording the validity of a certificate at the time of signing as described in item 1 of the scope of patent application includes the record string kept by the verifier through the signing server when the certificate has expired or has been cancelled. Chain, the time stamp, and the proof of the validity of the certificate to confirm the validity of the certificate. For example, the recording method for proving the validity of the certificate at the time of signing as described in item 8 of the scope of patent application, wherein the confirmation of the validity of the certificate includes: checking whether there is a record block in the chain of records that matches the signature ； Check whether each record block correctly contains the hash value of the previous record block between the record block and the last record block; check whether the hash value of the last record block correctly appears on the time stamp Middle; and check whether the time stamp time of the time stamp is before the proof time of the validity of the certificate. For example, the recording method for proving the validity of a certificate at the time of signing as described in item 1 of the scope of patent application, wherein the signature server uses the hash value of the last record block to obtain the time stamp from the time stamp service center and After obtaining the certificate validity certificate from the digital certificate authority, when the signing server wants to perform the signing action, it needs to regenerate a new key pair and apply for a new certificate to generate the record chain corresponding to the new certificate .

Images