WO2018090481A1 - Method and system for verifying digital certificate of mobile terminal application - Google Patents

Abstract

A method and a system for verifying a digital certificate of a mobile terminal application are provided. The method comprises the following steps: a mobile terminal application transmitting a connection request to a service terminal to obtain a current certificate of the service terminal (S11); analyzing the certificate to obtain attribute information of the certificate (S12); transmitting the attribute information of the certificate to a verification proxy server (S13); the verification proxy server receiving the attribute information of the certificate, comparing the certificate with multiple certificates stored in the verification proxy server, and determining whether there is a certificate having the same attribute information as that of the certificate (S21); if so, returning state information of the certificate to the mobile terminal application (S211); and if not, obtaining state information of the certificate via a certification authority and returning the same to the mobile terminal application (S212). The method ensures the security of mobile terminal applications, such that verification is convenient and efficient, and mobile communication traffic and power consumption of mobile terminals are reduced.

Description

 Digital certificate verification method and system for mobile terminal application

Technical field

The present invention relates to the field of computer network communication technologies, and in particular, to a digital certificate verification method and system for a mobile terminal application.

Background technique

When a mobile terminal application (such as a browser) accesses a server website, it usually does not verify whether the certificate of the server is revoked. The purpose is to consider that the verification of the certificate is not only time-consuming and power-consuming, affecting the user's browsing experience, but also consuming the user. A lot of traffic charges, especially in non-WiFi mode. If the certificate of the server is already revoked, the security lock identifier is still displayed normally when accessed through the mobile terminal, which is a great security threat to the user, which may result in leakage of personal privacy information or account password, and fraudulently obtaining money. Wait.

Summary of the invention

The main object of the present invention is to provide a digital certificate verification method for a mobile terminal application, which aims to ensure the security of the mobile terminal, which is convenient and quick to verify, saves mobile traffic and power consumption of the mobile terminal, and has high verification efficiency.

To achieve the above object, the present invention provides a digital certificate verification method for a mobile terminal application, comprising the following steps:

Send a connection request to the server to obtain the current certificate of the server;

Parsing the certificate to obtain attribute information of the certificate;

Sending attribute information of the certificate to the verification proxy server;

The verification proxy server receives the attribute information of the certificate, compares with the plurality of certificates stored in the verification proxy server, determines whether there is a certificate with the same attribute information of the certificate, and if yes, returns the certificate. Status information to the mobile terminal application; if not, the status information of the certificate is obtained by the certificate authority and returned to the mobile terminal application.

Preferably, the verifying proxy server obtaining status information of the certificate by using a certificate authority comprises the following steps:

The verification proxy server receives the current certificate and the issuer certificate of the server;

Sending the current certificate and the issuer certificate to the certificate authority through the verification proxy server;

The verification proxy server acquires status information of the certificate from the certificate authority;

Parsing the status information of the certificate;

Storing the certificate and status information of the certificate;

The verification proxy server signs the status information of the certificate and sends it to the mobile terminal application that connects the request.

Preferably, the returning the status information of the same certificate information comprises the following steps:

The mobile terminal application accepts status information of the signed certificate;

Verify the signature and obtain status information of the certificate.

Preferably, the returning the status information of the same certificate information further includes the following steps:

The mobile terminal application determines whether the status information of the returned certificate is revocation status information or valid status information, and if the status information is revocation status, the service end is dangerously prompted, and if it is valid status information, the mobile terminal application is The program connects to the server to get the application.

Preferably, the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and an issuer key hash.

The invention also provides a digital certificate verification system for a mobile terminal application, comprising a mobile terminal and a verification proxy server,

The mobile terminal application includes:

Obtaining a module, sending a connection request to the server, and obtaining a current certificate of the server;

a parsing module, configured to parse the certificate, and obtain attribute information of the certificate;

a sending module, configured to send attribute information of the certificate to the verification proxy server;

The verification proxy server includes:

a determining unit, configured to compare the attribute information of the received certificate with a plurality of certificates stored in the verification proxy server, determine whether a certificate having the same attribute information as the certificate exists, and if yes, return the certificate Status information to the mobile terminal application; if not, the status information of the certificate is obtained by querying the certificate authority.

Preferably, the verification proxy server further includes:

a receiving unit, configured to receive a current certificate and a certificate of the issuer of the server;

a sending unit, configured to send the current certificate and the issuer certificate to the certificate authority by using the verification proxy server;

An obtaining unit, configured to obtain status information of the certificate from the certificate authority;

a parsing unit, configured to parse status information of the certificate;

a storage unit, configured to store the certificate and status information of the certificate;

And a signature unit, configured to sign the status information of the certificate and send the connection to the mobile terminal application that requests the connection.

Preferably, the mobile terminal application further includes:

Receiving module, accepting status information of the signed certificate;

The verification module verifies the signature and obtains status information of the certificate.

Preferably, the mobile terminal application further includes: a determining module, configured to determine, by the mobile terminal application, whether the status information of the returned certificate is revocation status information or valid status information, and if the status information is revocation status, the connection is The server performs a dangerous prompt. If it is valid status information, the mobile terminal application connects to the server to acquire an application.

Preferably, the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and an issuer key hash.

When the connection request is sent to the server, the technical solution of the server sends the attribute information of the certificate of the server to the verification proxy server, verifies the attribute information of the certificate received by the proxy server, and compares with the plurality of certificates stored in the verification proxy server, and determines Whether there is a certificate with the same attribute information as the certificate. If yes, the status information of the certificate is returned to the mobile terminal, which makes the verification convenient and fast, saves mobile traffic and saves power consumption, and has high efficiency. If not, it is obtained through the certificate authority. After the status information of the certificate, the status of the simple byte is returned to the mobile terminal application, thereby ensuring the security of the mobile terminal application.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and those skilled in the art can obtain other drawings according to the structures shown in the drawings without any creative work.

1 is a schematic diagram showing the working principle of an embodiment of a digital certificate verification method for a mobile terminal application according to the present invention;

2 is a schematic diagram showing the working principle of an embodiment of the state information obtained by the certificate authority in FIG. 1;

3 is a schematic diagram showing the working principle of another embodiment of status information of obtaining a certificate by a certificate authority in FIG. 1;

4 is a schematic diagram of a mobile terminal function module of a digital certificate verification system for a mobile terminal application;

5 is a functional block diagram of a verification proxy server of a digital certificate verification system for a mobile terminal application.

Description of the reference numerals:

Label	name	Label	name
10	Mobile terminal application	twenty one	Judging unit
11	Acquisition module	twenty two	Receiving unit
12	Parsing module	twenty three	Sending unit
13	Sending module	twenty four	Acquisition unit
14	Receiving module	25	Parsing unit
15	Verification module	26	Storage unit
16	Judgment module	27	Signature unit
20	Authentication proxy server

The implementation, functional features, and advantages of the present invention will be further described in conjunction with the embodiments.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

It should be noted that all directional indications (such as up, down, left, right, front, back, ...) in the embodiments of the present invention are only used to explain between components in a certain posture (as shown in the drawing). Relative positional relationship, motion situation, etc., if the specific posture changes, the directional indication also changes accordingly.

In the present invention, the terms "connected", "fixed" and the like should be understood broadly, unless otherwise clearly defined and limited. For example, "fixed" may be a fixed connection, or may be a detachable connection, or may be integrated; It may be a mechanical connection or an electrical connection; it may be directly connected or indirectly connected through an intermediate medium, and may be an internal connection of two elements or an interaction relationship of two elements unless explicitly defined otherwise. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood on a case-by-case basis.

In addition, the descriptions of "first", "second", and the like in the present invention are used for the purpose of description only, and are not to be construed as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. Thus, features defining "first" or "second" may include at least one of the features, either explicitly or implicitly. In addition, the technical solutions between the various embodiments may be combined with each other, but must be based on the realization of those skilled in the art, and when the combination of the technical solutions is contradictory or impossible to implement, it should be considered that the combination of the technical solutions does not exist. It is also within the scope of protection required by the present invention.

The present invention provides a digital certificate verification method and system for a mobile terminal application.

Referring to FIG. 1, in an embodiment of the present invention, the digital certificate verification method for a mobile terminal application includes the following steps:

S11: Send a connection request to the server to obtain a current certificate of the server.

S12: parsing the certificate to obtain attribute information of the certificate;

S13: Send the attribute information of the certificate to the verification proxy server;

S21: The verification proxy server receives the attribute information of the certificate, compares with the plurality of certificates stored in the verification proxy server, and determines whether there is a certificate with the same attribute information as the certificate, and S211: if yes, returns the status information of the certificate to the mobile Terminal; S212: If not, the status information of the certificate is obtained by a certificate authority (CA).

In the digital certificate verification method for the mobile terminal application of the embodiment, first, the mobile terminal application sends a connection request to the server, such as a browser on various mobile terminals: Apple Safari browser, Google Chrome browser, Firefox A browser, a Tencent browser, a 360 browser, or a UC browser, etc., to input a domain name or address of the server, etc., an embodiment is to access the website by https on the browser; or an email client application on the mobile terminal It is necessary to verify the revocation status of the mail signature and the encryption certificate; or the mobile terminal operating system needs to verify whether the digital signature of the application to be installed is valid or the like. Then, the certificate can be parsed by the mobile terminal application, and only the attribute information of the certificate is obtained. At this time, only the attribute information of the certificate of the simple byte is submitted to the verification proxy server. Preferably, the verification proxy server is a cloud server, so that different regions and multiple people can perform the verification certificate through the cloud server more quickly and conveniently. The verification proxy server stores a plurality of certificates and status information of the certificate, and the certificate includes attribute information of the certificate. Preferably, the attribute information of the certificate includes a certificate serial number, an issuer name hash, and an issuer key hash. The attribute information of the certificate can be classified in turn, such as by the serial number of the certificate, so that the attribute information of the certificate or certificate submitted to the verification proxy server can be quickly stored or compared, and the comparison is convenient to quickly find the certificate. A certificate with the same attribute information, if it exists, returns only the status information of the certificate. With a small number of bytes, the query is fast, saving traffic and power consumption, and high efficiency. If it does not exist, the certificate authority obtains the status information of the certificate and returns the status of the simple byte to the mobile terminal application to ensure the security of the mobile terminal.

Further, the verification proxy server can automatically update the status information of the stored certificate, and continuously add the newly issued certificate. After obtaining the status information of the certificate by the certificate authority, the verification proxy server automatically saves the certificate status, and the verification proxy server can also Recording the certificate for initial certificate verification, the proxy query can still return the verification result in a simple byte and save wireless traffic and power consumption. When the mobile terminal or other mobile terminal performs certificate verification again through the mobile server, it first authenticates with the record. The certificate is compared and directly feedbacks the status information of the certificate, thereby improving efficiency and making the query faster. When the verification proxy server performs data update of the certificate, it can also refresh only the certificate with the updated record, so that the record is All certificates are not updated one by one to further improve query efficiency.

When the connection request is sent to the server, the technical solution of the server sends the attribute information of the certificate of the server to the verification proxy server, verifies the attribute information of the certificate received by the proxy server, and compares with the plurality of certificates stored in the verification proxy server, and determines Whether there is a certificate with the same attribute information as the certificate. If yes, the status information of the certificate is returned to the mobile terminal, which makes the verification convenient and fast, saves traffic and power, and has high efficiency. If not, the certificate authority obtains the status information of the certificate. After returning the status of the simple byte to the mobile terminal application, the security of the mobile terminal is guaranteed.

Referring to FIG. 2, preferably, the verification proxy server obtains status information of the certificate through the certificate authority, including the following steps:

S22: The verification proxy server receives the current certificate and the issuer certificate of the server;

S23: Send the current certificate and the issuer certificate to the certificate authority by verifying the online certificate status protocol of the proxy server;

S24: The verification proxy server obtains status information of the certificate from the certification authority;

S25: Parsing status information of the certificate;

S26: storing the certificate and status information of the certificate;

S27: The verification proxy server signs the status information of the certificate and sends it to the mobile terminal application that connects the request.

In the digital certificate verification method for the mobile terminal application of the embodiment, when the verification proxy server obtains the status information of the certificate through the certificate authority, the verification proxy server parses the status information of the certificate, and stores the status information in the verification agent in order. In the database of the server, records are also recorded so that the mobile terminal can directly query the record for the next time to access the certificate to quickly verify the certificate. By verifying the proxy server to sign the status information of the certificate, the status information of the certificate may be digitally signed or the like to be sent to the mobile terminal application of the connection request to prevent illegal tampering, etc., and the security of the verification result.

Referring to FIG. 3, further, the digital certificate verification method for the mobile terminal application further includes the following steps:

S14: The mobile terminal application accepts status information of the signed certificate;

S15: Verify the signature and obtain status information of the certificate.

The digital certificate verification method for the mobile terminal application in this embodiment performs verification whether the verification is valid information through the verification information corresponding to the mobile terminal, thereby selectively refusing or verifying the status information of obtaining the certificate.

Referring to FIG. 1, preferably, the digital certificate verification method for the mobile terminal application further includes the following steps:

S16: The mobile terminal application determines whether the status information of the returned certificate is the revocation status information or the valid status information. If the status information is revocation status, S161: dangerously prompting the connection server; if it is valid status information, S162: Connect the server to the security prompt, or directly through the connection request of the mobile terminal application, and the mobile terminal application connects to the server to obtain the application.

The digital certificate verification method for the mobile terminal application in this embodiment performs the corresponding display by determining whether the status information of the returned certificate is the revocation status information or the valid status information by using the software loaded by the mobile terminal or the related plug-in. Reminder, making it easier for mobile terminal applications to directly display the certificate status of the server.

Referring to FIG. 1 and FIG. 2, the present invention further provides a digital certificate verification system for a mobile terminal application, including a mobile terminal application 10 and a verification proxy server 20.

The mobile terminal application 10 includes:

The obtaining module 11 sends a connection request to the server to obtain a current certificate of the server.

The parsing module 12 is configured to parse the certificate to obtain attribute information of the certificate;

The sending module 13 is configured to send the attribute information of the certificate to the verification proxy server 20;

The verification proxy server 20 includes:

The determining unit 21 is configured to compare the attribute information of the received certificate with the plurality of certificates stored in the verification proxy server 20, and determine whether there is a certificate with the same attribute information as the certificate, and if yes, return the status information of the certificate to The mobile terminal application 10; if not, the status information of the certificate is obtained by the certificate authority.

The mobile terminal application 10 described above sends a connection request to the server, such as a browser on the mobile terminal, an Apple Safari browser, a Google browser, a Firefox browser, a Tencent browser, a 360 browser, or a UC browser. The domain name or the address of the terminal, etc., in one embodiment, the website is accessed by https on the browser, the certificate of the website is obtained by the obtaining module 11, and the attribute information of the certificate of the website is parsed by the parsing module 12; or the mobile terminal application is also used. The client application of the email installed on the 10 needs to verify the revocation status of the mail encryption certificate, and the sending mail party is the server, the obtaining module 11 obtains the current certificate and related information of the sending mail party, or the mobile terminal application 10 The operating system needs to verify whether the digital signature of the application to be installed is valid, etc., and the development software that provides the application is the server, and the obtaining module 11 obtains the current certificate of the application development software. Then, the certificate can be parsed by the parsing module 12 built in the mobile terminal application 10, and only the attribute information of the certificate is obtained. At this time, the attribute information of the certificate of the simple byte is submitted to the verification proxy server 20 through the sending module 13. Preferably, the verification proxy server 20 is a cloud server, so that different regions and multiple people can perform verification certificates through the cloud server more quickly and conveniently. . The verification proxy server 20 stores a plurality of certificates and status information of the certificate, and the certificate includes attribute information of the certificate. Preferably, the attribute information of the certificate includes a certificate serial number, an issuer name hash, and an issuer key hash. . The attribute information of the certificate may be sequentially classified, for example, by the serial number of the certificate, and the attribute information of the certificate or the certificate submitted to the verification proxy server may be quickly stored or compared by the judging unit 16, and the comparison is convenient and fast. Find the certificate with the same attribute information as the certificate. If it exists, return only the status information of the certificate. With a small number of bytes, the query is fast, saves traffic, and is highly efficient. If it does not exist, the certificate authority obtains the status information of the certificate, and the simple byte returns the certificate status to the mobile application to ensure the security of the mobile terminal application 10.

Further, the verification proxy server 20 can automatically update the status information of the stored certificate and add a new registered certificate. After obtaining the status information of the certificate by the certificate authority, the verification proxy server 20 automatically saves the certificate, and the verification proxy server 20 The certificate for initial certificate verification may also be recorded. When the mobile terminal application 10 or other mobile terminal performs certificate verification again through the verification proxy server 20, the certificate is first compared with the record verified certificate, and the status information of the certificate is directly fed back. In order to improve the efficiency and make the query faster, when the verification proxy server 20 performs the data update of the certificate, it is also possible to refresh only the certificate with the updated record, so that all the recorded certificates are not updated one by one, thereby further improving the query efficiency. .

Referring to FIG. 2, preferably, the verification proxy server 20 further includes:

The receiving unit 22 is configured to receive a current certificate and a certificate of the server of the server;

The sending unit 23 is configured to send the current certificate and the issuer certificate to the certificate authority by verifying the online certificate status protocol of the proxy server 20;

The obtaining unit 24 is configured to obtain status information of the certificate from a certificate authority;

The parsing unit 25 is configured to parse status information of the certificate;

a storage unit 26, configured to store the certificate and the status information;

The signature unit 27 is configured to sign the status information of the certificate and send it to the mobile terminal application that connects the request.

When the verification proxy server 20 acquires the status information of the certificate from the certificate authority through the obtaining unit 24, the verification proxy server 20 performs the state information for parsing the certificate through the parsing unit 25, and stores it in the verification proxy server 20 in order through the storage unit 26. In the database, records are also recorded so that the mobile terminal application 10 can directly query the record for the next time to access the certificate to quickly verify the certificate. The status information of the certificate is signed by the signature unit 27, and the status information of the certificate can be signed and sent to the mobile terminal application 10 of the connection request to prevent illegal tampering and the like, thereby ensuring the security of the transmitted information.

With further reference to FIG. 1, preferably, the mobile terminal application 10 further includes:

Receiving module 14, accepting status information of the signed certificate;

The verification module 15 verifies the signature and obtains status information of the certificate.

In this embodiment, the receiving module 14 receives the verification information corresponding to the mobile terminal application 10, and the verification module 15 performs verification whether the information is valid, and the mobile terminal can determine whether to trust the certificate.

Preferably, the mobile terminal application 10 further includes: a determining module 16 for the mobile terminal application 10 to determine whether the status information of the returned certificate is revocation status information or valid status information, and if the status information is revocation status, the connection service is The terminal performs a dangerous prompt. If it is the valid status information, the mobile terminal application 10 connects to the server to acquire the application directly through the connection request of the mobile terminal application 10.

The determining module 16 of the mobile terminal application 10 may perform the software or related plug-in loaded by the mobile terminal application 10, and determine whether the status information of the returned certificate is the revocation status information or the valid status information, and perform corresponding display. Remind that the mobile terminal application 10 can more conveniently display the certificate status of the server directly.

The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structural transformation, or direct/indirect use, of the present invention and the contents of the drawings are used in the inventive concept of the present invention. It is included in the scope of the patent protection of the present invention in other related technical fields.

Claims (16)

1. A digital certificate verification method for a mobile terminal application, characterized in that the digital certificate verification method for a mobile terminal application comprises the following steps:

   Send a connection request to the server to obtain the current certificate of the server;

   Parsing the certificate to obtain attribute information of the certificate;

   Sending attribute information of the certificate to the verification proxy server;

   The verification proxy server receives the attribute information of the certificate, compares with the plurality of certificates stored in the verification proxy server, determines whether there is a certificate with the same attribute information of the certificate, and if yes, returns the certificate. Status information to the mobile terminal application; if not, the status information of the certificate is obtained by the certificate authority and returned to the mobile terminal application.
2. The digital certificate verification method for a mobile terminal application according to claim 1, wherein the verifying proxy server obtaining status information of the certificate by using a certificate authority comprises the following steps:

   The verification proxy server receives the current certificate and the issuer certificate of the server;

   Sending the current certificate and the issuer certificate to the certificate authority through the verification proxy server;

   The verification proxy server acquires status information of the certificate from the certificate authority;

   Parsing the status information of the certificate;

   Storing the certificate and status information of the certificate;

   The verification proxy server signs the status information of the certificate and sends it to the mobile terminal application that connects the request.
3. The digital certificate verification method for a mobile terminal application according to claim 2, wherein the digital certificate verification method for the mobile terminal application further comprises the following steps:

   The mobile terminal application accepts status information of the signed certificate;

   Verify the signature and obtain status information of the certificate.
4. The digital certificate verification method for a mobile terminal application according to claim 1, wherein the digital certificate verification method for the mobile terminal application further comprises the following steps:

   The mobile terminal application determines whether the status information of the returned certificate is revocation status information or valid status information, and if the status information is revocation status, the service end is dangerously prompted, and if it is valid status information, the mobile terminal application is The program connects to the server to get the application.
5. The digital certificate verification method for a mobile terminal application according to claim 1, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
6. The digital certificate verification method for a mobile terminal application according to claim 2, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
7. The digital certificate verification method for a mobile terminal application according to claim 3, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
8. The digital certificate verification method for a mobile terminal application according to claim 4, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
9. A digital certificate verification system for a mobile terminal application, comprising: a mobile terminal application and a verification proxy server,

   The mobile terminal application includes:

   Obtaining a module, sending a connection request to the server, and obtaining a current certificate of the server;

   a parsing module, configured to parse the certificate, and obtain attribute information of the certificate;

   a sending module, configured to send attribute information of the certificate to the verification proxy server;

   The verification proxy server includes:

   a determining unit, configured to compare the attribute information of the received certificate with a plurality of certificates stored in the verification proxy server, determine whether a certificate having the same attribute information as the certificate exists, and if yes, return the certificate Status information to the mobile terminal; if not, the status information of the certificate is obtained by the certificate authority.
10. The digital certificate verification system for a mobile terminal application according to claim 9, wherein the verification proxy server further comprises:

    a receiving unit, configured to receive a current certificate and a certificate of the issuer of the server;

    a sending unit, configured to send the current certificate and the issuer certificate to the certificate authority by using the verification proxy server;

    An obtaining unit, configured to obtain status information of the certificate from the certificate authority;

    a parsing unit, configured to parse status information of the certificate;

    a storage unit, configured to store the certificate and status information of the certificate;

    And a signature unit, configured to sign the status information of the certificate and send the connection to the mobile terminal application that requests the connection.
11. The digital certificate verification system for a mobile terminal application according to claim 10, wherein the mobile terminal application comprises:

    Receiving module, accepting status information of the signed certificate;

    The verification module verifies the signature and obtains status information of the certificate.
12. The digital certificate verification system for a mobile terminal application according to claim 9, wherein the mobile terminal application further comprises:

    a judging module, configured to determine, by the mobile terminal application, whether the status information of the returned certificate is revocation status information or valid status information, and if the status information is revocation status, performing a dangerous prompt to connect the server, if the status is valid Information, the mobile terminal application connects to the server to obtain the application.
13. The digital certificate verification system for a mobile terminal application according to claim 9, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
14. The digital certificate verification system for a mobile terminal application according to claim 10, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
15. The digital certificate verification system for a mobile terminal application according to claim 11, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.
16. The digital certificate verification system for a mobile terminal application according to claim 12, wherein the verification proxy server is a cloud server, and the attribute information of the certificate includes a certificate serial number, an issuer name hash, and Issuer key hash.