TWM618092U - Certificate management system for automated domain verification - Google Patents

Abstract

A certificate management system for automated domain verification. The domain administrator device downloads and installs an automated certificate application application from the certificate server. When at least one certificate application request is approved, the certificate server provides an automated certificate management environment to link the application to automation. The certificate application application is linked to the automatic certificate management environment service server based on the automatic certificate management environment application link and provides at least one certificate application request. The automatic certificate management environment service server generates a random value and corresponding to at least one certificate application request. Set the location list and feed back to the automated certificate application application. The automated certificate application application sets the corresponding random value to the corresponding domain according to each setting location in the set location list, and sets the random value to the automated certificate management environment service server Then, according to at least one certificate application request, connect to the corresponding domain to verify the domain. When the authentication is successful, the certificate server generates a domain certificate according to the corresponding at least one certificate application request, and the automated certificate application application passes The certificate download link is used to link to the certificate server to download the corresponding domain certificate, thereby reducing the verification time for domain certificate application in the domain verification and improving the efficiency of verification.

Description

Credential management system for automated domain verification

A certificate management system, in particular, refers to a certificate management system that performs automatic domain verification through an automated certificate management environment service server.

Existing domain certificate applications must first verify whether the certificate applicant legally owns the domain. The existing domain verification process requires the certificate applicant and the certificate issuer to perform complicated domain settings and domain verification .

The existing verification process for the domain is that after the certificate applicant submits an application, the certificate issuer will ask the certificate applicant to set the information required by the certificate issuer in the specified path of the domain, the domain name system record, etc., in the certificate applicant After completing the setting of the designated path for the domain name system record of the certificate issuer's request information, etc., the certificate applicant will need to wait for the certificate issuer to verify whether the certificate applicant legally owns the domain. Only after confirming that the certificate applicant legally owns the domain, the domain certificate issuance for the domain applied by the certificate applicant.

Existing domain certificate applications often take too much time to verify whether the certificate applicant legally owns the domain, and a large number of domain certificate applications will also cause verification of whether the certificate applicant legally owns the domain. Troubles.

In summary, it can be seen that in the prior art, there have been problems in the prior art that the verification of whether the certificate applicant legally owns the domain is too time-consuming and the verification process is inconvenient. Therefore, it is necessary to propose improved technical means. Solve this problem.

In view of the existing problems in the prior art that it takes too much time and inconvenience to verify whether the certificate applicant legally owns the domain in the domain certificate application, this creation discloses a certificate management system for automatic domain verification, in which: this creation The disclosed certificate management system for automated domain verification includes: a domain manager device, a certificate server, and an automated certificate management environment service server. The domain manager device downloads and installs an automated certificate application application from the certificate server , The automated certificate application application further includes: device receiving module, device generation module, device connection module, setting module, and device transmission module; the certificate server establishes a connection with the automated certificate application application, the certificate server It also includes: a certificate receiving module, an audit module, a certificate generation module, and a certificate transmission module; the automated certificate management environment service server also includes: a server receiving module, a server generating module, a verification module, and a server Transmission module.

The device receiving module is used to receive at least one certificate application information, and to receive the automatic certificate management environment (Automatic Certificate Management Environment, ACME) application link; the device generation module is connected to the device receiving module, and the device generation module is used to receive at least One certificate application information corresponds to generating at least one certificate application request; the device connection module is used to connect to the automatic certificate management environment service server when the automatic certificate management environment application link is triggered, and provide at least one certificate application request to the automation The certificate management environment service server receives and at least one certificate application request Corresponding random value and setting location list, receive a verification success response corresponding to at least one credential application request, transmit a credential download request corresponding to the at least one credential application request, receive a credential download link corresponding to the at least one credential application request, when the credential When the download link is triggered, it connects to the certificate server to download the domain certificate corresponding to at least one certificate application request; the setting module is connected to the device connection module, and the setting module is used to set each position in the list A setting location sets the corresponding random value in the corresponding domain to set the random value; and the device transmission module transmits at least one credential application request. After the setting module completes the random value setting of the corresponding domain, it transmits the corresponding The settings are complete and respond.

The certificate receiving module is used to receive at least one certificate application request from the device transmission module, and receive a verification success response corresponding to the at least one certificate application request; the verification module is connected to the certificate receiving module, and the verification module is used to A certificate application request is reviewed; the certificate generation module is used to generate a domain certificate according to the corresponding at least one certificate application request when the certificate receiving module receives a corresponding verification success response; and the certificate transmission module is used when at least one When the certificate application request is approved, the automatic certificate management environment application link is sent to the device receiving module.

The server receiving module is used to receive at least one certificate application request from the device connection module, receive the corresponding setting completion response from the device transmission module, and receive the certificate download corresponding to the at least one certificate application request from the device connection module Request; the server generation module is used to generate a random value and a list of setting locations according to at least one certificate application request, and generate a corresponding certificate download link according to the certificate download request; the verification module is connected to the server receiving module, and the verification module The group connects to the corresponding domain according to at least one certificate request request, and verifies whether there is a random value and whether the random value is correct according to each setting position in the corresponding setting position list; and the server transmission module is used To send the corresponding random value and setting location list to the device connection module, when setting the location bar in the corresponding domain When the random value set in each setting position in the table is successfully verified, the corresponding verification success response is sent to the device connection module and the certificate receiving module, and the certificate download link is sent to the device connection module.

The system disclosed in this creation is as above, and the difference between it and the prior art is that the domain administrator device downloads and installs an automated certificate application application from the certificate server. When at least one certificate application request is approved, the certificate server provides an automated certificate The management environment application is linked to the automated certificate application application, and the automated certificate management environment application link is linked to the automated certificate management environment service server and provides at least one certificate application request, and the automated certificate management environment service server respectively applies at least one certificate application Request to generate a random value and setting location list correspondingly, the automated certificate application application will set the random value to the corresponding domain according to each setting location in the setting location list, and the automated certificate management environment service server will then follow it At least one certificate application request is connected to the corresponding domain for domain verification. When the verification is successful, the certificate server generates a domain certificate according to the corresponding at least one certificate application request, and the automated certificate application application downloads the certificate through the certificate Link to link to the certificate server to download the corresponding domain certificate.

Through the above-mentioned technical means, this creation can achieve the technical effect of reducing the verification time of domain certificate application in the domain verification and improving the verification efficiency.

10: Domain Manager Device

11: Automated certificate application application

12: Device receiving module

13: Device generation module

14: Device connection module

15: Setting up the module

16: Device transfer module

20: certificate server

21: Certificate receiving module

22: Audit module

23: Credential generation module

24: Certificate Transmission Module

30: Automated certificate management environment service server

31: Server receiving module

32: Server generation module

33: Verification Module

34: Server transmission module

41: Credential application request

42: Application link for automated certificate management environment

43: random value

44: Set location list

45: Set up complete response

46: Verification success response

47: domain certificate

48: Credential download request

49: Certificate download link

Step 101: The domain administrator device downloads and installs the automated certificate application application from the certificate server

Step 102: The domain administrator device receives at least one certificate application information and correspondingly generates at least one certificate application request according to the at least one certificate application information

Step 103: The domain administrator device sends at least one certificate application request to the certificate server through the automated certificate application application

Step 104: The certificate server separately reviews at least one certificate application request

Step 105: When at least one certificate application request is approved, the certificate server provides an automated certificate management environment application link to the automated certificate application application

Step 106: The domain administrator device links to the automated certificate management environment service server through the automated certificate application application and provides at least one certificate application request according to the automated certificate management environment application link

Step 107: The automated certificate management environment service server respectively generates a random value and a list of setting locations according to at least one certificate application request

Step 108: The automatic certificate management environment service server feedbacks the corresponding random value and setting location list to the automatic certificate application application

Step 109: The automated certificate application application sets the corresponding random value to the corresponding domain according to each setting location in the setting location list to set the random value

Step 110: After the automated certificate application application completes the setting of the random value for the corresponding domain, feedback the corresponding setting completion response to the automated certificate management environment service server

Step 111: The automated certificate management environment service server then connects to the corresponding domain according to at least one certificate application request, and verifies whether the random value has a random value and whether the random value is correct according to each setting location in the corresponding setting location list

Step 112: When the random value set for each setting location in the setting location list in the corresponding domain is verified successfully, the automated certificate management environment service server respectively feedbacks the corresponding verification success response to the automated certificate application application and the certificate server Device

Step 113: When the certificate server receives the verification success response, the certificate server generates a domain certificate according to the corresponding at least one certificate application request

Step 114: The automated certificate application application sends a certificate download request corresponding to at least one certificate application request to the automated certificate management environment service server

Step 115: The automated certificate management environment service server generates the corresponding certificate download link according to the certificate download request and feeds it back to the automated certificate application application

Step 116: The automated certificate application application links to the certificate server through the certificate download link to download the corresponding domain certificate

Figure 1A shows the system block diagram of the certificate management system for this authoring automated domain verification.

Figure 1B is a schematic diagram of the components of the device and server mentioned in this creation.

Figure 2 shows a schematic diagram of the information flow of the certificate management for this authoring automated domain verification.

Figures 3A to 3C show the flow chart of the method of credential management for authoring automated domain verification.

The following will describe the implementation of this creation in detail with the drawings and embodiments, so as to fully understand and implement the implementation process of how this creation uses technical means to solve technical problems and achieve technical effects.

The following first describes the certificate management system for automated domain verification disclosed in this creation, and please refer to "Figure 1A". "Figure 1A" shows the system block of the certificate management system for automated domain verification for this creation. picture.

The certificate management system for automated domain verification disclosed in this creation includes: a domain manager device 10, a certificate server 20, and an automated certificate management environment service server 30. The domain manager device 10 is downloaded from the certificate server 20 And install the automated certificate application application 11, which further includes: a device receiving module 12, a device generating module 13, a device connection module 14, a setting module 15, and a device sending module 16; certificate server The certificate server 20 establishes a connection with the automated certificate application application 11, and the certificate server 20 further includes: a certificate receiving module 21, an audit module 22, a certificate generation module 23, and a certificate transmission module 24; an automatic certificate management environment service server 30 further includes: a server receiving module 31, a server generating module 32, a verification module 33, and a server transmitting module 34.

The domain manager device 10, the certificate server 20, and the automated certificate management environment service server 30 are all different presentation forms of computing devices. The domain manager device 10, the certificate server 20, and the automated certificate management environment service server 30 are biased toward It focuses on the performance of computing equipment’s computing performance and data security protection..., but it does not mean that the domain manager device 10, the certificate server 20, and the automated certificate management environment service server 30 ignore the other performance of the computing equipment. It is only an example, and does not limit the application scope of this creation.

Please refer to "Figure 1B", "Figure 1B" is a schematic diagram of the components of the device and server mentioned in this creation.

The computing device mentioned in this creation includes, but is not limited to, one or more processors 501, one or more memory modules 502, and hardware components such as a bus 503, where the bus 503 can be connected to different hardware components . Through the included multiple hardware components, the computing device can load and execute the operating system, make the operating system run on the computing device, and can also execute software or programs. The computing device also includes a housing 509, and the above-mentioned hardware components are arranged in the housing.

The bus 503 of the computing device mentioned in this creation can include one or more types, for example, including data bus, address bus, control bus, and extended function bus. (expansion bus), and/or local bus (local bus) and other types of bus. The bus of computing equipment includes, but is not limited to, parallel industry standard architecture (ISA) bus, peripheral component interconnect (PCI) bus, Video Electronics Standards Association (VESA) local bus, and serial universal serial bus (USB), Fast Peripheral Component Interconnect (PCI-E) bus, etc.

The processor 501 of the computing device mentioned in this creation is coupled to the bus 503. The processor 501 includes a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and passed through dedicated electrical Connected and/or coupled to the processor via the bus. The processor 501 may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and they are coupled and communicated through a bus. The processor 501 can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., so as to run the operating system or execute various programs, modules, and/ Or components.

The processor 501 of the computing device can be coupled to the chipset or electrically connected to the chipset through the bus 503. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and peripheral input/output (I/O) controllers, that is to say, the memory controller and peripheral input/output controllers can be included in In an integrated circuit, two or more integrated circuits can also be used. Chipsets usually provide I/O and memory management functions, as well as multiple general-purpose and/or special-purpose registers, timers, etc., among which the aforementioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor 501 of the computing device can also access the data in the memory module 502 and the mass storage area installed on the computing device through the memory controller. The above-mentioned memory module 502 includes any type of volatile memory (volatile memory) and/or non-volatile (NVRAM) memory, such as static random access memory (SRAM), dynamic random access memory (SRAM) Take memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned large-capacity storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, flash drives (flash memory), memory cards (memory cards), and solid state disks (Solid State Disk, SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processor 501 of the computing device can also connect and communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through the peripheral I/O controller via the bus 503. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, for example Touch screen, etc. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include a mobile communication network that supports Wi-Fi, Zigbee and other wireless local area networks, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G, etc. The wired communication interface can be an Ethernet device, Asynchronous Transfer Mode (ATM) device, DSL modem, cable modem, etc. The processor 501 can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device with the above-described components .

The modules mentioned in the domain manager device 10, the certificate server 20, and the automated certificate management environment service server 30 usually execute a specific program loaded into the memory module 502 by the processor 501 in the respective computing device. Generated later, or included in the processor 501.

The domain manager device 10 is, for example, a general computer, a notebook computer, etc., which are only examples for illustration and do not limit the application scope of this creation. The domain manager device 10, the certificate server 20, and automation The certificate management environment service servers 30 establish a connection with each other through a wired transmission method or a wireless transmission party. The aforementioned wired transmission method is, for example, a cable network, an optical fiber network, etc., and the aforementioned wireless transmission method is, for example, : Wi-Fi, mobile communication network (for example: 3G, 4G, 5G... etc.)... etc., this is just an example, and it does not limit the application scope of this creation.

Please refer to "Figure 1A" and "Figure 2" at the same time. "Figure 2" shows a schematic diagram of the information flow of the certificate management for the automatic domain verification of this creation.

When the domain administrator needs to apply for a certificate for the domain, he can use the automatic certificate application application 11 downloaded and installed from the certificate server 20 through the domain administrator device 10 to perform automatic certificate application, and the domain administrator can apply through the automatic certificate Enter the user interface provided by Application 11 to One less voucher application information. The voucher application information includes basic information, contact information, and payment information.

After the domain administrator inputs at least one certificate application information in the user interface, the device receiving module 12 can receive at least one certificate application information. When the device receiving module 12 receives at least one certificate application information, the device generating module 13 can generate at least one certificate application request 41 corresponding to at least one certificate application information. When the device generation module 13 generates at least one certificate application request 41 corresponding to at least one certificate application information, the device transmission module 16 can send at least one certificate application request 41. The certificate application request 41 goes to the certificate receiving module 21.

When the certificate receiving module 21 receives at least one certificate application request 41 from the device transmission module 16, the verification module 22 can review the at least one certificate application request 41. The verification module 22 is the basic information in the certificate application information. , Contact information, payment information... and other information, such as: confirm the contact by providing a one-time password through the mobile phone number in the contact information, and import and export the account number and the remittance amount according to the payment information To confirm the correctness of the remittance amount... etc., this is just an example, not to limit the application scope of this creation.

When at least one certificate application request 41 passes the review by the review module 22, the certificate transmission module 24 can send the automated certificate management environment application link 42 to the device receiving module 12, and the device receiving module 12 can send from the certificate transmission module 24. Receive the automated certificate management environment application link 42. When the automated certificate management environment application link 42 is triggered by the domain manager, the device connection module 14 can connect to the automated certificate management environment service server 30, and the device connection module The group 14 provides at least one certificate application request 41 to the automated certificate management environment service server 30.

When the server receiving module 31 receives at least one certificate application request 41 from the device connection module 14, the server generating module 32 can respectively generate random values corresponding to the at least one certificate application request 41 43 and the setting location list 44. The setting location list 44 has at least one setting location. The setting location is, for example, the designated path of the domain, the DNS record of the domain name system, etc. This is only an example for illustration. Do not limit the application scope of this creation.

It is worth noting that each setting position in the setting position list 44 can be set to the same random value 43, or each setting position in the setting position list 44 can be set to a different random value 43. Specifically, in Set a random value of 43 to 123456 for the specified path of the domain and set a random value of 43 to 123456 in the domain name system record, or set a random value of 43 to 123456 in the specified path of the domain and set a random value of 43 in the domain name system record It is 654321, which is just an example for illustration, and does not limit the application scope of this creation. The server generating module 32 generates the random value 43 by directly calculating the random value or according to the corresponding certificate application request 41 The calculation of the random value 43 is just an example here, and it does not limit the application scope of this creation.

When the server generating module 32 respectively generates the random value 43 and the setting location list 44 corresponding to the at least one certificate application request 41, the server sending module 34 can send the random value 43 and the setting corresponding to the at least one certificate application request 41 The location list 44 is sent to the device connection module 14. When the device connection module 14 receives the random value 43 corresponding to at least one certificate request request 41 and the setting location list 44 from the server transmission module 34, the setting module 15 That is, according to each setting position in the setting position list 44, the corresponding random value 43 is set in the corresponding network domain.

The setting module 15 sets the corresponding random value 43 to the corresponding network domain according to each setting position in the setting position list 44, that is, the setting module 15 completes the setting of the random value 43 for the corresponding network domain. The device transmission module 16 then transmits a setting completion response 45 corresponding to the at least one certificate application request 41 to the server receiving module 31.

When the server receiving module 31 receives the setting completion response 45 corresponding to the at least one certificate application request 41 from the device transmission module 16, the verification module 33 will connect to the corresponding domain according to the at least one certificate application request 41. , And verify whether there is a random value 43 and whether the random value 43 is correct according to each setting position in the setting position list 44 corresponding to the at least one credential application request 41.

When the random value 43 set for each setting position in the setting position list 44 in the corresponding domain is successfully verified by the verification module 33, the server transmission module 34 can send and at least one certificate application request 41 respectively. The corresponding verification success response 46 is sent to the device connection module 14 and the certificate receiving module 21.

When the certificate receiving module 21 receives the verification success response 46 corresponding to at least one certificate application request 41 from the server transmission module 34, the certificate generation module 23 generates a domain certificate according to the corresponding at least one certificate application request 41 47.

When the device connection module 14 receives the verification success response 46 corresponding to the at least one certificate application request 41 from the server transmission module 34, the device connection module 14 can transmit the certificate corresponding to the at least one certificate application request 41 The download request 48 is sent to the server receiving module 31. When the server receiving module 31 receives the certificate download request 48 corresponding to at least one certificate application request 41 from the device connection module 14, the server generating module 32 can follow The credential download request 48 generates a corresponding credential download link 49.

When the server generating module 32 generates the corresponding certificate download link 49 according to the certificate download request 48, the server sending module 34 can send the certificate download link 49 to the device connection module 14. When the certificate download link 49 is triggered , The automated certificate application application 11 can connect to the certificate server 20 to download the domain certificate 47 corresponding to the at least one certificate application request 41.

Next, the following will explain the operation of this creation, and please refer to the "Figure 3A" to "Figure 3C" as shown. "Figure 3A" to "Figure 3C" show the certificate of automatic domain verification for this creation. Flow chart of management method.

First, the domain administrator device downloads and installs an automated certificate application application from the certificate server (step 101); then, the domain administrator device receives at least one certificate application information and generates at least one certificate application corresponding to the at least one certificate application information Request (step 102); then, the domain administrator device sends at least one certificate application request to the certificate server through the automated certificate application application (step 103); then, the certificate server separately reviews at least one certificate application request (step 104); Then, when at least one certificate application request is approved, the certificate server provides an automated certificate management environment application link to the automated certificate application application (step 105); then, the domain administrator device uses the automated certificate application basis The automated certificate management environment application link links to the automated certificate management environment service server and provides at least one certificate application request (step 106); then, the automated certificate management environment service server generates random values and settings corresponding to the at least one certificate application request respectively Location list (step 107); then, the automated certificate management environment service server feeds back the corresponding random value and the set location list to the automated certification application application (step 108); then, the automated certification application application sets each item in the location list A setting location sets the corresponding random value to the corresponding domain to set the random value (step 109); then, when the automated credential application application completes the random value setting for the corresponding domain, it returns the corresponding setting completion response to The automated certificate management environment service server (step 110); then, the automated certificate management environment service server connects to the corresponding domain according to at least one certificate application request, and sets the position according to each of the corresponding setting positions list Verify that there is a random value and verify that the random value is correct (step 111); then, when each of the location lists is set in the corresponding domain When the verification of the random value set in the setting location is successful, the automated certificate management environment service server feeds back the corresponding verification success response to the automated certificate application application and the certificate server (step 112); then, when the certificate server receives the verification success In response, the certificate server generates a domain certificate according to the corresponding at least one certificate application request (step 113); then, the automated certificate application application sends a certificate download request corresponding to the at least one certificate application request to the automated certificate management environment service server (Step 114); Next, the automated certificate management environment service server generates the corresponding certificate download link according to the certificate download request and feeds it back to the automated certificate application application (Step 115); Finally, the automated certificate application application links through the certificate download link Go to the certificate server to download the corresponding domain certificate (step 116).

In summary, it can be seen that the difference between this creation and the prior art is that the domain administrator device downloads and installs the automated certificate application application from the certificate server. When at least one certificate application request is approved, the certificate server provides an automated certificate The management environment application is linked to the automated certificate application application, and the automated certificate management environment application link is linked to the automated certificate management environment service server and provides at least one certificate application request, and the automated certificate management environment service server respectively applies at least one certificate application Request to generate a random value and setting location list correspondingly, the automated certificate application application will set the random value to the corresponding domain according to each setting location in the setting location list, and the automated certificate management environment service server will then follow it At least one certificate application request is connected to the corresponding domain for domain verification. When the verification is successful, the certificate server generates a domain certificate according to the corresponding at least one certificate application request, and the automated certificate application application downloads the certificate through the certificate Link to link to the certificate server to download the corresponding domain certificate.

This technical method can solve the existing problems in the prior art regarding the verification of the domain certificate application as to whether the certificate applicant legally owns the domain, which takes too much time and the verification process is inconvenient. In order to achieve the technical effect of reducing the verification time of the domain certificate application in the domain verification and improving the verification efficiency.

Although the implementation methods disclosed in this creation are as above, the content described is not used to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs can make some changes in the form and details of the implementation without departing from the spirit and scope of this creation. The scope of patent protection for this creation shall still be subject to the scope of the attached patent application.

10: Domain Manager Device

11: Automated certificate application application

12: Device receiving module

13: Device generation module

14: Device connection module

15: Setting up the module

16: Device transfer module

20: certificate server

21: Certificate receiving module

22: Audit module

23: Credential generation module

24: Certificate Transmission Module

30: Automated certificate management environment service server

31: Server receiving module

32: Server generation module

33: Verification Module

34: Server transmission module

Claims (5)

A certificate management system for automatic domain verification includes: a domain manager device downloads and installs an automatic certificate application application from a certificate server, the automatic certificate application application further includes: a device receiving module, Used to receive at least one certificate application information, receive an automatic certificate management environment (Automatic Certificate Management Environment, ACME) application link; a device generation module, the device generation module is connected to the device receiving module for The at least one certificate application information correspondingly generates at least one certificate application request; a device connection module is used to connect to an automatic certificate management environment service server when the automatic certificate management environment application link is triggered, and provide The at least one certificate application request is sent to the automated certificate management environment service server, a random value and a setting location list corresponding to the at least one certificate application request are received, and a list corresponding to the at least one certificate application request is received Respond to a successful verification and send a certificate download request corresponding to the at least one certificate application request, receive a certificate download link corresponding to the at least one certificate application request, and link to the certificate download link when the certificate download link is triggered A certificate server to download a domain certificate corresponding to the at least one certificate application request; A setting module, the setting module is connected to the device connection module, and is used to perform the random value on the corresponding network domain according to each setting position in the setting position list Value setting; and a device transmission module that transmits the at least one credential application request, and after the setting module completes the setting of the random value for the corresponding network domain, transmits a corresponding setting completion response; the The certificate server establishes a connection with the automated certificate application application, and the certificate server further includes: a certificate receiving module for receiving the at least one certificate application request from the device transmission module, and receiving and The verification success response corresponding to the at least one certificate application request; an audit module connected to the certificate receiving module for auditing the at least one certificate application request; a certificate generation module Group for generating the domain certificate according to the corresponding at least one certificate application request when the certificate receiving module receives the corresponding verification success response; and a certificate transmission module, when the at least one certificate application request is When a certificate application request is approved, the automatic certificate management environment application link is sent to the device receiving module; and the automatic certificate management environment service server further includes: a server receiving module for receiving The device connection module receives the at least one certificate application request, and receives the corresponding one from the device transmission module Setting completion response, receiving the certificate download request corresponding to the at least one certificate application request from the device connection module; a server generating module for generating all corresponding certificates according to the at least one certificate application request. The random value and the setting location list generate a corresponding certificate download link according to the certificate download request; a verification module, the verification module is connected to the server receiving module, according to the at least one certificate The application request is respectively connected to the corresponding network domain, and verifying whether the random value is present and verifying whether the random value is correct according to each setting position in the corresponding setting position list; and a server transmission module, Used to transmit the corresponding random value and the setting location list to the device connection module, when the random value set at each setting location in the setting location list in the corresponding network domain is verified successfully When the corresponding verification success response is sent to the device connection module and the certificate receiving module, respectively, the certificate download link is sent to the device connection module. The certificate management system for automated domain verification according to claim 1, wherein the server generating module generates the random value and the setting location list corresponding to the at least one certificate application request, and the setting location The list has at least one setting position, and each setting position in the setting position list is correspondingly set with the same random value. The certificate management system for automated domain verification according to claim 1, wherein the server generating module generates the random value and the device corresponding to the at least one certificate request request. A list of setting positions, where the setting position list has at least one setting position, and each setting position in the setting position list is correspondingly set with the different random value. The certificate management system for automated domain verification according to claim 1, wherein the server generating module generates the random value and the setting location list corresponding to the at least one certificate application request, and the setting location The list has at least one setting location, and the at least one setting location includes a designated path of a network domain and a DNS record. The certificate management system for automated domain verification according to claim 1, wherein the review module reviews the at least one certificate application request by reviewing basic information, contact information, and payment information in the certificate application information Conduct an audit.

Images