TWI775405B - Credential management system for automatic network domain verification and method thereof - Google Patents

Abstract

A credential management system for automatic network domain verification and a method thereof are provided. Automatic certificate application is downloaded and installed by domain administrator device from certificate server. Automatic certificate management environment application link is provided to automatic certificate application by certificate server when at least one certificate application request is approved. Automatic certificate application is connected to automatic certificate management environment server according to automatic certificate management environment application link. At least one certificate application request is provided to automatic certificate management environment server from automatic certificate application. Random value and set location list are generated correspondence with at least one certificate application request respectively by automatic certificate management environment server. Random value and set location list are feedback to automatic certificate application from automatic certificate management environment server. Random value is set correspondence with domain according to each one of set location in set location list by automatic certificate application. Domain is connected by automatic certificate management environment server according to at least one certificate application request respectively to verify domain. Domain certificate is generated according to at least one certificate application request by certificate server when domain verification succeeded. Domain certificate is downloaded by automatic certificate application when automatic certificate application is connected to certificate server according to certificate download link. Therefore, the efficiency of reducing verification time and improving verification efficiency of domain certificate application may be achieved.

Description

Credential management system and method for automated domain verification

A certificate management system and method thereof, in particular to a certificate management system and method for automatic domain verification through automated certificate management environment service server for automatic domain verification.

In the existing application for domain certificate, it is necessary to verify whether the certificate applicant legally owns the domain, and the existing verification process for the domain requires the certificate applicant and certificate issuer to perform complicated domain settings and domain verification. .

The existing verification process for the domain is that after the certificate applicant submits an application, the certificate issuing unit will require the certificate applicant to set the information required by the certificate issuing unit, such as the designated path in the domain, the domain name system record, etc., in the certificate applicant. After completing the setting of the specified path, domain name system record, etc. required by the certificate issuing unit in the domain, the certificate applicant will need to wait for the certificate issuing unit to verify whether the certificate applicant legally owns the domain. Only after confirming that the certificate applicant legally owns the domain, the domain certificate is issued for the domain applied by the certificate applicant.

Existing applications for domain certificates often take too much time to verify whether the certificate applicant legally owns the domain, and a large number of domain certificate applications will also result in verification of whether the certificate applicant legally owns the domain troubles.

To sum up, it can be seen that there has been a long-standing problem in the prior art that the verification of whether the certificate applicant legally owns the domain is time-consuming and the verification process is inconvenient. Therefore, it is necessary to propose improved technical means to solve the problem. solve this problem.

In view of the existing problems in the prior art that it takes too much time to verify whether the certificate applicant legally owns the domain, and the verification process is inconvenient, the present invention discloses a certificate management system and method for automatic domain verification, wherein :

The certificate management system for automatic network domain verification disclosed in the present invention includes: a network domain administrator device, a certificate server, and an automated certificate management environment service server. The network domain administrator device downloads and installs the automatic certificate application from the certificate server. Application, the automated certificate application application further includes: a device receiving module, a device generating module, a device connection module, a setting module and a device sending module; the certificate server establishes a connection with the automated certificate application application, and the certificate The server also includes: a certificate receiving module, an auditing module, a certificate generating module and a certificate transmitting module; the automatic certificate management environment service server further includes: a server receiving module, a server generating module, a verification module and Server transfer module.

The device receiving module is used for receiving at least one certificate application information and receiving the automatic certificate management environment (Automatic Certificate Management Environment, ACME) application link; the device generating module is used for correspondingly generating at least one certificate application request according to the at least one certificate application information ; The device connection module is used to connect to the automated credential management environment service server when the automated credential management environment application link is triggered, and to provide at least one credential application request to the automated credential management environment service server, and to receive and communicate with at least one A list of random values and setting locations corresponding to the credential application request, receiving a successful verification response corresponding to at least one credential application request and transmitting a credential download request corresponding to at least one credential application request, and receiving a credential download link corresponding to at least one credential application request , when the certificate download link is triggered, link to the certificate server to download the domain certificate corresponding to at least one certificate application request; the setting module is used to set the corresponding random value according to each setting position in the setting position list The random value is set in the corresponding network domain; and the device transmission module transmits at least one certificate application request, and when the setting module completes the setting of the random value for the corresponding network domain, it transmits a corresponding setting completion response.

The credential receiving module is used to receive at least one credential application request from the device transmission module, and receive a verification success response corresponding to the at least one credential application request; the auditing module is used to examine the at least one credential application request; the credential generating module The group is used to generate a domain certificate according to the corresponding at least one certificate application request when the certificate receiving module receives the corresponding verification success response; and the certificate transmission module is used to transmit the automated certificate when at least one certificate application request is approved. The management environment application is linked to the device receiving module.

The server receiving module is used to receive at least one certificate application request from the device connection module, receive a corresponding setup completion response from the device transmission module, and receive a certificate download corresponding to the at least one certificate application request from the device connection module request; the server generation module is used to respectively generate a random value and a setting location list according to at least one certificate application request, and generate a corresponding certificate download link according to the certificate download request; the verification module is used to connect separately according to at least one certificate application request to the corresponding domain, and verify whether there is a random value and whether the random value is correct according to each setting location in the corresponding setting location list; and the server transmission module is used to transmit the corresponding random value and setting location list to The device connection module, when the random value set at each setting location in the corresponding network domain setting location list is successfully verified, it sends the corresponding verification success response to the device connection module and the certificate receiving module, respectively, and sends The certificate download link is linked to the device connection module.

The credential management method for automatic domain verification disclosed in the present invention includes the following steps:

First, the domain manager device downloads and installs an automated certificate application application program from the certificate server; then, the domain manager device receives at least one certificate application information and generates at least one certificate application request correspondingly according to the at least one certificate application information; then, The domain manager device transmits at least one certificate application request to the certificate server through the automated certificate application application; then, the certificate server separately examines the at least one certificate application request; then, when the at least one certificate application request is approved, the certificate The server provides the automated certificate management environment application link to the automated certificate application application; then, the domain administrator device applies the link through the automated certificate application application according to the automated certificate management environment to link to the automated certificate management environment service server and provides at least one A certificate application request; then, the automated certificate management environment service server respectively generates a random value and a setting location list according to at least one certificate application request; then, the automated certificate management environment service server feeds back the corresponding random value and setting location list to the automated certificate Apply for an application; then, the automated certificate application application sets the corresponding random value to the corresponding domain according to each setting location in the setting location list; After completing the setting of the random value, the feedback corresponding setting is completed and a response is sent to the automatic certificate management environment service server; then, the automatic certificate management environment service server is respectively connected to the corresponding network domain according to at least one certificate application request, and according to the corresponding Each setting location in the setting location list verifies whether it has a random value and whether the random value is correct; then, when the random value set by each setting location in the setting location list in the corresponding domain is verified successfully, the automated credential The management environment service server respectively feeds back the corresponding verification success response to the automated certificate application application and the certificate server; then, when the certificate server receives the verification success response, the certificate server generates a domain according to the corresponding at least one certificate application request certificate; then, the automated certificate application application sends a certificate download request corresponding to at least one certificate application request to the automatic certificate management environment service server; then, the automatic certificate management environment service server generates a corresponding certificate download link according to the certificate download request and Feed back to the automated certificate application application; finally, the automated certificate application application connects to the certificate server through the certificate download link to download the corresponding domain certificate.

The system and method disclosed in the present invention are as above, and the difference between the system and the prior art is that the domain administrator device downloads and installs the automated certificate application application program from the certificate server. When at least one certificate application request is approved, the certificate server provides The automated credential management environment application is linked to the automated credential application application, so as to connect to the automated credential management environment service server according to the automated credential management environment application and provide at least one credential application request, and the automated credential management environment service server is based on the at least one The certificate application request generates a list of random values and setting locations. The automated certificate application application sets the corresponding random value to the corresponding domain according to each setting location in the setting location list. The automatic certificate management environment service server Then, according to the at least one certificate application request, it is respectively connected to the corresponding domain for verification of the domain. When the verification is successful, the certificate server generates a domain certificate according to the corresponding at least one certificate application request, and the automated certificate application application passes the Certificate download link to link to the certificate server for the corresponding domain certificate download.

Through the above-mentioned technical means, the present invention can achieve the technical effect of reducing the verification time of the verification of the domain certificate application in the domain and improving the verification efficiency.

The embodiments of the present invention will be described in detail below with the drawings and examples, so as to fully understand and implement the implementation process of how the present invention applies technical means to solve technical problems and achieve technical effects.

The following first describes the credential management system for automatic domain verification disclosed in the present invention, and please refer to "Fig. 1". "Fig. 1" shows the system blocks of the credential management system for automated domain verification of the present invention. picture.

The certificate management system for automatic domain verification disclosed in the present invention includes: a domain manager device 10 , a certificate server 20 and an automated certificate management environment service server 30 , and the domain manager device 10 downloads the certificate from the certificate server 20 The automated certificate application application 11 is installed, and the automated certificate application application 11 further includes: a device receiving module 12, a device generating module 13, a device connection module 14, a setting module 15 and a device transmission module 16; a certificate server The server 20 establishes a connection with the automated certificate application application 11, and the certificate server 20 further includes: a certificate receiving module 21, an auditing module 22, a certificate generating module 23 and a certificate transmitting module 24; the automatic certificate management environment service server 30 further includes: a server receiving module 31 , a server generating module 32 , a verification module 33 and a server transmitting module 34 .

The domain manager device 10 is, for example, a general computer, a notebook computer, etc., which are only illustrative and not limited to the scope of application of the present invention. The domain manager device 10 , the certificate server 20 and the automation The certificate management environment service servers 30 are connected to each other through wired transmission or wireless transmission. The aforementioned wired transmission is, for example, a cable network, an optical fiber network, etc. : Wi-Fi, mobile communication network (for example: 3G, 4G, 5G, etc.), etc., which are only illustrative, and do not limit the scope of application of the present invention.

Please refer to "Fig. 1" and "Fig. 2" at the same time, "Fig. 2" is a schematic diagram of the information flow of the certificate management for automated domain verification according to the present invention.

When the domain administrator needs to apply for a certificate for the domain, he can apply for an automated certificate through the automated certificate application application 11 downloaded and installed from the certificate server 20 on the domain administrator device 10 , and the domain administrator can apply for the certificate through the automated certificate. The user interface provided by the application program 11 inputs at least one certificate application information. The certificate application information includes basic information, contact information and payment information, etc., which are only for illustration, and are not intended to limit the application of the present invention. category.

After the domain administrator completes inputting at least one certificate application information on the user interface, the device receiving module 12 can receive at least one certificate application information, and when the device receiving module 12 receives at least one certificate application information, the device generating module 13 can generate at least one certificate application request 41 correspondingly according to the at least one certificate application information, and when the device generation module 13 generates at least one certificate application request 41 correspondingly according to the at least one certificate application information, the device transmission module 16 can transmit at least one certificate application request 41. The voucher application request 41 is sent to the voucher receiving module 21 .

When the credential receiving module 21 receives at least one credential application request 41 from the device transmission module 16, the auditing module 22 can examine the at least one credential application request 41, and the auditing module 22 is to examine the basic information in the credential application information. , contact information and payment information...etc. for review, for example: confirm the contact person by providing a one-time password via SMS through the mobile phone number in the contact information, import account, export account and remittance amount according to the payment information Confirming the correctness of the remittance amount, etc., are only illustrative here, and are not intended to limit the scope of application of the present invention.

When at least one credential application request 41 passes the verification of the verification module 22, the credential transmission module 24 can transmit the automated credential management environment application link 42 to the device receiving module 12, and the device receiving module 12 can send the certificate from the credential transmitting module 24 receives the automated credential management environment application link 42, when the automated credential management environment application link 42 is triggered by the domain administrator, the device connection module 14 can be connected to the automated credential management environment service server 30, and the device connection module The group 14 provides at least one credential application request 41 to the automated credential management environment service server 30 .

When the server receiving module 31 receives at least one certificate application request 41 from the device connection module 14, the server generating module 32 can respectively generate a random value 43 and a setting location list 44 according to the at least one certificate application request 41, and set the The location list 44 has at least one setting location. The setting location is, for example, a designated path of a network domain, a DNS record, etc., which are only for illustration, and are not intended to limit the application of the present invention. category.

It is worth noting that each setting position in the setting position list 44 can be correspondingly set with the same random value 43, or each setting position in the setting position list 44 can be correspondingly set with a different random value 43. Specifically, in Set the random value of 43 to 123456 in the specified path of the domain and set the random value of 43 to 123456 in the domain name system record, or set the random value of 43 to 123456 in the specified path of the domain and set the random value of 43 in the domain name system record It is 654321, which is only for illustration, and does not limit the application scope of the present invention. The random value 43 generated by the server generation module 32 can be calculated directly or according to the corresponding certificate application request 41. The calculation of the random value 43 is only illustrative here, and does not limit the scope of application of the present invention.

When the server generation module 32 respectively generates the random value 43 and the setting position list 44 according to the at least one certificate application request 41 , the server transmission module 34 can transmit the random value 43 and the setting corresponding to the at least one certificate application request 41 . The location list 44 is sent to the device connection module 14. When the device connection module 14 receives the random value 43 corresponding to at least one certificate application request 41 and the setting location list 44 from the server transmission module 34, the setting module 15 That is, according to each setting position in the setting position list 44, the corresponding random value 43 is set as a random value in the corresponding network domain.

In the setting module 15, according to each setting position in the setting position list 44, the corresponding random value 43 is set to the random value in the corresponding network domain, that is, the setting module 15 completes the setting of the random value 43 for the corresponding network domain, The device transmission module 16 then transmits a setup completion response 45 corresponding to the at least one certificate application request 41 to the server reception module 31 .

When the server receiving module 31 receives a setup completion response 45 corresponding to the at least one certificate application request 41 from the device transmission module 16 , the verification module 33 will connect to the corresponding network domain according to the at least one certificate application request 41 respectively. , and verify whether each setting position in the setting position list 44 corresponding to the at least one certificate application request 41 has a random value 43 and whether the random value 43 is correct.

When the random value 43 set at each setting position in the setting position list 44 in the corresponding network domain is successfully verified by the verification module 33 , the server transmission module 34 can respectively transmit at least one certificate application request 41 with The corresponding verification success response 46 is sent to the device connection module 14 and the certificate receiving module 21 .

When the certificate receiving module 21 receives a verification success response 46 corresponding to at least one certificate application request 41 from the server transmission module 34 , the certificate generation module 23 will generate a domain certificate according to the corresponding at least one certificate application request 41 47.

When the device connection module 14 receives a verification success response 46 corresponding to the at least one certificate application request 41 from the server transmission module 34 , the device connection module 14 can transmit the certificate corresponding to the at least one certificate application request 41 The download request 48 is sent to the server receiving module 31. When the server receiving module 31 receives the certificate downloading request 48 corresponding to at least one certificate application request 41 from the device connection module 14, the server generating module 32 can The credential download request 48 generates a corresponding credential download link 49 .

When the server generation module 32 generates the corresponding certificate download link 49 according to the certificate download request 48, the server transmission module 34 can transmit the certificate download link 49 to the device connection module 14. When the certificate download link 49 is triggered , the automated certificate application application 11 can be connected to the certificate server 20 to download the domain certificate 47 corresponding to the at least one certificate application request 41 .

Next, the operation method of the present invention will be described below, and please refer to "Fig. 3A" to "Fig. 3C" at the same time. Method flow diagram of the credential management method.

First, the domain administrator device downloads and installs an automated certificate application application from the certificate server (step 101 ); then, the domain administrator device receives at least one certificate application information and generates at least one certificate application correspondingly according to the at least one certificate application information request (step 102 ); then, the domain administrator device transmits at least one certificate application request to the certificate server through the automated certificate application application (step 103 ); then, the certificate server checks the at least one certificate application request respectively (step 103 ) 104); then, when at least one certificate application request is approved, the certificate server provides an automatic certificate management environment application link to the automatic certificate application application (step 105); The automatic certificate management environment application link is connected to the automatic certificate management environment service server and provides at least one certificate application request (step 106 ); then, the automatic certificate management environment service server correspondingly generates random values and settings according to the at least one certificate application request. Location list (step 107 ); then, the automated certificate management environment service server feeds back the corresponding random value and setting location list to the automated certificate application application (step 108 ); A setting location sets the corresponding random value in the corresponding domain (step 109 ); then, after the automated certificate application application completes the setting of the random value for the corresponding domain, the corresponding setting is completed and the response is sent to The automated certificate management environment service server (step 110 ); then, the automated certificate management environment service server is connected to the corresponding network domain according to at least one certificate application request, and is set according to each setting location in the corresponding setting location list Verify whether there is a random value and verify whether the random value is correct (step 111 ); then, when the random value set in each setting location in the setting location list in the corresponding network domain is successfully verified, the automated certificate management environment service server respectively Feedback the corresponding verification success response to the automated certificate application application and the certificate server (step 112 ); then, when the certificate server receives the verification success response, the certificate server generates a domain certificate according to the corresponding at least one certificate application request ( Step 113); then, the automated certificate application application sends a certificate download request corresponding to at least one certificate application request to the automated certificate management environment service server (step 114); then, the automated certificate management environment service server generates a certificate download request according to the certificate download request The corresponding certificate download link is fed back to the automated certificate application application (step 115 ); finally, the automated certificate application application connects to the certificate server through the certificate download link to download the corresponding domain certificate (step 116 ).

From the above, it can be seen that the difference between the present invention and the prior art is that the domain administrator device downloads and installs the automated certificate application application program from the certificate server. When at least one certificate application request is approved, the certificate server provides the automatic certificate The management environment application is linked to the automated certificate application application, so as to apply for a link according to the automated certificate management environment to link to the automated certificate management environment service server and provide at least one certificate application request, and the automated certificate management environment service server respectively applies according to the at least one certificate The request corresponds to generate a random value and a list of setting locations. The automated certificate application application sets the corresponding random value to the corresponding domain according to each setting location in the setting location list. The automated certificate management environment service server then follows At least one certificate application request is respectively connected to the corresponding domain for verification of the domain. When the verification is successful, the certificate server generates a domain certificate according to the corresponding at least one certificate application request, and the automated certificate application application downloads the certificate through the certificate Link to link to the certificate server for the corresponding domain certificate download.

This technical means can solve the existing problems in the prior art that the verification of whether the certificate applicant legally owns the domain takes too much time and the verification process is inconvenient, thereby reducing the need for domain certificate applications in the domain. Verification time for verification and technical efficacy to improve verification efficiency.

Although the embodiments disclosed in the present invention are as above, the above-mentioned contents are not used to directly limit the scope of the patent protection of the present invention. Anyone with ordinary knowledge in the technical field to which the present invention pertains can make some changes in the form and details of the implementation without departing from the spirit and scope of the present invention. The scope of patent protection of the present invention shall still be defined by the scope of the appended patent application.

10: Domain Manager Device 11: Automated Credential Request App 12: Device receiving module 13: Device generation module 14: Device connection module 15: Set up the module 16: Device transfer module 20: Certificate Server 21: Credential receiving module 22: Audit Module 23: Credential Generation Module 24: Credential transfer module 30: Automated Credential Management Environment Service Server 31: Server receiving module 32: Server Generation Module 33: Verification Module 34: Server Transmission Module 41: Credential Application Request 42: Application link for automated credential management environment 43: random value 44: Set the location list 45: Setup complete response 46: Verification successful response 47: Domain Credentials 48: Credential download request 49: Certificate download link Step 101: The domain administrator device downloads and installs the automated certificate request application from the certificate server Step 102: The domain manager device receives at least one certificate application information and generates at least one certificate application request correspondingly according to the at least one certificate application information Step 103: The domain administrator device sends at least one certificate application request to the certificate server through the automated certificate application application Step 104: The certificate server checks the at least one certificate application request respectively Step 105: When at least one certificate application request is approved, the certificate server provides the automatic certificate management environment application link to the automatic certificate application application Step 106: The domain administrator device connects to the automated certificate management environment service server through the automated certificate application application according to the automated certificate management environment application link and provides at least one certificate application request Step 107: The automated certificate management environment service server correspondingly generates a random value and a setting location list according to at least one certificate application request. Step 108: The automatic certificate management environment service server feeds back the corresponding random value and setting location list to the automatic certificate application application Step 109: The automated certificate application application sets the corresponding random value to the corresponding domain according to each setting location in the setting location list Step 110: After the automated certificate application application completes the setting of the random value for the corresponding domain, the corresponding setting is completed and a response is sent to the automated certificate management environment service server Step 111: The automated certificate management environment service server is then connected to the corresponding domain according to the at least one certificate application request, and verifies whether the random value has a random value and whether the random value is correct according to each setting location in the corresponding setting location list. Step 112: When the random value set at each setting location in the setting location list in the corresponding network domain is successfully verified, the automated certificate management environment service server respectively feeds back the corresponding verification success response to the automated certificate application application and the certificate server. device Step 113: When the certificate server receives the verification success response, the certificate server generates a domain certificate according to the corresponding at least one certificate application request Step 114: The automated certificate application application sends a certificate download request corresponding to the at least one certificate application request to the automated certificate management environment service server Step 115: The automatic certificate management environment service server generates a corresponding certificate download link according to the certificate download request and feeds it back to the automatic certificate application application Step 116: The automated certificate application application connects to the certificate server through the certificate download link for the corresponding domain certificate download

FIG. 1 is a system block diagram of the credential management system for automatic domain verification according to the present invention. FIG. 2 is a schematic diagram of the information flow of the certificate management of automated domain verification according to the present invention. FIG. 3A to FIG. 3C are method flowcharts of the credential management method for automated domain verification according to the present invention.

10: Domain Manager Device

11: Automated Credential Request App

12: Device receiving module

13: Device generation module

14: Device connection module

15: Set up the module

16: Device transfer module

20: Certificate Server

21: Credential receiving module

22: Audit Module

23: Credential Generation Module

24: Credential transfer module

30: Automated Credential Management Environment Service Server

31: Server receiving module

32: Server Generation Module

33: Verification Module

34: Server Transmission Module

Claims (10)

A certificate management system for automated domain verification, comprising: a domain administrator device downloading and installing an automated certificate application application program from a certificate server, the automatic certificate application application program further comprising: a device receiving module, is used for receiving at least one certificate application information, and receiving an automatic certificate management environment (Automatic Certificate Management Environment, ACME) application link; a device generating module, connected with the device receiving module, for applying according to the at least one certificate Generate at least one certificate application request corresponding to the information; a device connection module is used to link to an automatic certificate management environment service server when the automatic certificate management environment application link is triggered, and provide the at least one certificate application request to the automated certificate management environment service server, receive a random value and a set location list corresponding to the at least one certificate application request, receive a verification success response corresponding to the at least one certificate application request, and transmit and A certificate download request corresponding to the at least one certificate application request, receiving a certificate download link corresponding to the at least one certificate application request, and when the certificate download link is triggered, linking to the certificate server for performing and A network domain certificate corresponding to the at least one certificate application request is downloaded; a setting module is connected to the device connection module, and is used for setting the corresponding random location according to each setting location in the setting location list. The random value is set for the corresponding domain; and A device transmission module transmits the at least one certificate application request, and after the setting module completes the setting of the random value for the corresponding network domain, transmits a corresponding setting completion response; the certificate server communicates with the corresponding network domain. The automated certificate application application establishes a connection, and the certificate server further includes: a certificate receiving module for receiving the at least one certificate application request from the device transmission module, and receiving and communicating with the at least one certificate application The verification response corresponding to the request is successful; an auditing module is connected to the credential receiving module, and is used for auditing the at least one credential application request; a credential generating module is used when the credential receiving module is used. When the group receives the corresponding verification success response, generate the domain certificate according to the corresponding at least one certificate application request; and a certificate transmission module, when the at least one certificate application request is approved, transmit the certificate The automated credential management environment application is linked to the device receiving module; and the automated credential management environment service server further includes: a server receiving module for receiving the at least one from the device connecting module For a certificate application request, the corresponding setup completion response is received from the device transmission module, and the certificate download request corresponding to the at least one certificate application request is received from the device connection module; a server generating module, connected to the server receiving module, and used for correspondingly generating the random value and the setting location list according to the at least one certificate application request, and generating corresponding The certificate download link; a verification module, connected with the server receiving module, so as to connect to the corresponding network domain according to the at least one certificate application request, and according to the corresponding settings in the location list. Each setting position verifies whether the random value has the random value and whether the random value is correct; and a server sending module for sending the corresponding random value and the setting position list to the device connection module group, when the random value set at each setting location in the setting location list in the corresponding network domain is successfully verified, send the corresponding verification success response to the device connection module and the device connection module respectively. The certificate receiving module transmits the certificate download link to the device connection module. The certificate management system for automated domain verification according to claim 1, wherein the server generation module generates the random value and the setting location list correspondingly according to the at least one certificate application request, and the setting location The list has at least one setting position, and each setting position in the setting position list correspondingly sets the same random value. The certificate management system for automated domain verification according to claim 1, wherein the server generation module generates the random value and the setting location list correspondingly according to the at least one certificate application request, and the setting location The list has at least one setting position, and each setting position in the setting position list corresponds to the random value with different settings. The certificate management system for automated domain verification according to claim 1, wherein the server generation module generates the random value and the setting location list correspondingly according to the at least one certificate application request, and the setting location The list has at least one setting location, and the at least one setting location includes a designated path of the network domain and a DNS record. The credential management system for automatic domain verification according to claim 1, wherein the auditing module audits the at least one credential application request by examining basic information, contact information and payment information in the credential application information audit. A certificate management method for automated domain verification, comprising the following steps: a domain administrator device downloads and installs an automated certificate application application program from a certificate server; the domain administrator device receives at least one certificate application information and at least one certificate application request is correspondingly generated according to the at least one certificate application information; the domain manager device transmits the at least one certificate application request to the certificate server through the automatic certificate application application; the certificate server The certificate server checks the at least one certificate application request respectively; when the at least one certificate application request is approved, the certificate server provides an automatic certificate management environment (Automatic Certificate Management Environment, ACME) application link to the automation a certificate application application; the domain administrator device connects to an automatic certificate management environment service server and provides the at least one certificate application request through the automatic certificate application application according to the automatic certificate management environment application link; The automated credential management environment service server respectively generates a random value and a setting location list according to the at least one credential application request; the automated credential management environment service server feeds back the corresponding random value and the setting location list to the automatic certificate application application; the automatic certificate application application sets the corresponding random value in the corresponding network domain according to each setting position in the setting position list; when After the automatic certificate application application completes the setting of the random value for the corresponding network domain, it feeds back a corresponding setting completion response to the automatic certificate management environment service server; the automatic certificate management environment service server then responds according to The at least one certificate application request is respectively connected to the corresponding network domain, and it is verified whether the random value has the random value and whether the random value is correct according to each setting location in the corresponding setting location list; When the random value set at each setting location in the setting location list in the network domain is successfully verified, the automated certificate management environment service server respectively feeds back a corresponding verification success response to the automated certificate application application and the certificate server; when the certificate server receives the verification success response, the certificate server generates a domain certificate according to the corresponding at least one certificate application request; The automated credential application application program transmits a credential download request corresponding to the at least one credential application request to the automated credential management environment service server; the automated credential management environment service server generates a corresponding credential download request according to the credential download request and the automated certificate application application connects to the certificate server through the certificate download link to download a corresponding domain certificate. The credential management method for automated domain verification according to claim 6, wherein the automated credential management environment service server corresponds to the step of generating the random value and the setting location list according to the at least one credential application request. , the setting position list has at least one setting position, and each setting position in the setting position list correspondingly sets the same random value. The credential management method for automated domain verification according to claim 6, wherein the automated credential management environment service server corresponds to the step of generating the random value and the setting location list according to the at least one credential application request. , the setting location list has at least one setting location, and each setting location in the setting location list corresponds to the random value with different settings. The credential management method for automated domain verification according to claim 6, wherein the automated credential management environment service server corresponds to the step of generating the random value and the setting location list according to the at least one credential application request. , the setting location list has at least one setting location, and the at least one setting location includes the designated path of the network domain and the DNS record of the network domain. The credential management method for automated domain verification according to claim 6, wherein the step of the credential server separately auditing the at least one credential application request is to check basic information and contact information in the credential application information. and paid information for review.

Images