WO2019178763A1

WO2019178763A1 - Certificate importing method and terminal

Info

Publication number: WO2019178763A1
Application number: PCT/CN2018/079746
Authority: WO
Inventors: 王明伟; 徐永标
Original assignee: 福建联迪商用设备有限公司
Priority date: 2018-03-21
Filing date: 2018-03-21
Publication date: 2019-09-26
Also published as: CN108496323A; CN108496323B

Abstract

The present invention relates to the field of information security, and in particular to a certificate importing method and a terminal. In the present invention, a preset root certificate is compiled into an executable file. When a database write request corresponding to a certificate is received, the executable file acquires a public key corresponding to the root certificate. The executable file verifies a digital signature of the certificate according to the public key, and obtains a verification result, the verification result comprising one of a verification success and a verification failure. If the verification result is a verification success, the executable file writes the certificate and a certificate chain corresponding to the certificate into a database. The present invention improves the effectiveness of certificates without increasing hardware costs.

Description

Certificate importing method and terminal

Technical field

The present invention relates to the field of information security, and in particular, to a certificate importing method and a terminal.

Background technique

With the widespread use of digital certificate technology, more and more system platforms and transaction terminals use the X.509 certificate system to complete secure authentication or sensitive data download transactions. Because the X.509 certificate comes with authenticity and integrity verification, its application is very extensive. In the field of electronic payment, the payment terminal certificate can be used as the identity certificate of the terminal to realize the identity authentication with the interactive background. In addition, the payment terminal and the receipt The background key download service front-end can use the certificate to download the terminal master key.

X.509 certificates, especially the root certificate and certificate chain, are the basis for trust between the two parties to authenticate each other. Although the certificate itself has integrity verification, if the system or terminal is not properly stored and kept, the root certificate or certificate chain is replaced, or the attacker inserts a malicious root certificate and certificate chain, the trust building established by the certificate is at risk. It is. Especially in some sensitive application scenarios, such as a key management system for remotely downloading financial keys, if the system has this vulnerability, it is easy to cause a financial institution key to leak, thereby causing serious security incidents. The X.509 certificate authentication system is used for identity authentication. The X.509 certificate in the key management system is important data, which is the key to ensuring the reliability of the authentication system. Any unintentional modification or malicious attack may result in the whole process. The remote key distribution system is at risk, threatening the security of the distribution key.

The current common practices are as follows:

Method 1: The certificate is directly stored in the database or the file system in text form. For example, when the STUNNEL agent is used to establish a secure communication link, the text file of the certificate file configuration can be modified at will, and the certificate can be added or deleted; if the attacker accesses it. The database or file that stores the certificate, so the attacker can easily add, delete, and modify the certificate and certificate chain in the system.

Method 2: Use a special physical device to store certificates, such as the U shield used to verify the identity of the client in the banking system. This approach is not suitable for system-side certificate storage, and hardware-based storage methods add additional cost.

technical problem

The technical problem to be solved by the present invention is how to improve the validity of the certificate without increasing the hardware cost.

Technical solution

In order to solve the above technical problems, the technical solution adopted by the present invention is:

The invention provides a certificate importing method, comprising:

S1, compiling the preset root certificate to the executable file;

S2. When receiving a write database request corresponding to a certificate, the executable file acquires a public key corresponding to the root certificate;

S3. The executable file verifies the digital signature of the certificate according to the public key, and obtains a verification result; the verification result includes a verification pass and a verification fails;

S4. When the verification result is verification pass, the executable file writes the certificate and the certificate chain corresponding to the one certificate to a database.

The present invention also provides a certificate import terminal comprising one or more processors and a memory, the memory storing a program, and being configured to perform the following steps by the one or more processors:

S1, compiling the preset root certificate to the executable file;

Beneficial effect

The invention has the beneficial effects that the present invention compiles the root certificate into the executable file at compile time by compiling the root certificate for verifying the validity of the certificate to be imported, so the executable file is run. There is no way to replace, modify, or add information about the root certificate during the process. When receiving an import request for a certificate, it must first use the root certificate to digitally verify it. Only valid certificates can be successfully imported into the database, and the criminal cannot modify the root certificate stored in the database. Unable to successfully import a malicious certificate to the database. The implementation effectively improves the validity of the certificate stored in the database without increasing the hardware cost.

DRAWINGS

1 is a flow chart of a specific implementation manner of a certificate importing method provided by the present invention;

2 is a structural block diagram of a specific implementation manner of a certificate importing terminal provided by the present invention;

Label description:

1, the processor; 2, memory.

detailed description

The most critical technical idea of the present invention is that the present invention compiles the root certificate for verifying the validity of the certificate to be imported into the executable file, so that no method can be replaced, modified or added during the execution of the executable file. The information of the root certificate, thereby effectively improving the validity of the certificate stored in the database without increasing the hardware cost.

Please refer to FIG. 1 and FIG. 2,

As shown in FIG. 1, the present invention provides a certificate importing method, including:

S1, compiling the preset root certificate to the executable file;

Further, it also includes:

Obtain identity information;

The certificate writing function of the executable file is activated when the identity information is authenticated; the certificate writing function is configured to receive a write database request corresponding to a certificate.

It can be seen from the above description that only the executable program generated by the legally compiled link can modify, replace, and add the certificate and certificate chain information, and only the authorized operator who performs the authentication can perform the operation of modifying the certificate information, thereby effectively improving the operation. The validity of the certificate stored in the database.

Further, it also includes:

Obtain a preset verification key;

Obtaining data to be verified according to the certificate and the certificate chain;

Performing a MAC operation on the to-be-verified data according to the verification key to obtain a first MAC value;

Storing the first MAC value to the database.

Further, it also includes:

Obtaining the to-be-verified data from the database when receiving a key distribution request;

Performing a MAC operation on the data to be verified according to the verification key to obtain a second MAC value;

When the first MAC value and the second MAC value are the same, the key is distributed according to the one certificate.

Further, it also includes:

The MAC operation is performed using the X9.19 algorithm.

Further, the data to be verified includes a time for writing the certificate, the certificate, and the certificate chain.

Further, it also includes:

The verification key is injected into the hardware security module.

It can be seen from the above description that each time the key stored in the database is used for key distribution, the certificate information in the database is forced to be MAC-checked. Therefore, any illegal modification of the certificate can be detected, and the key is improved. The security of the distribution.

Further, it also includes:

Set the data type of the root certificate to a constant.

It can be seen from the above description that the present invention designs the root certificate as a constant of the executable file, and when the executable file is compiled, it has been loaded into the system application, so that the illegal element cannot tamper with the root certificate during the execution of the executable program. The information improves the reliability of the validity verification of the certificate to be imported, thereby improving the validity of the certificate stored in the database.

As shown in FIG. 2, the present invention further provides a certificate import terminal including one or more processors 1 and a memory 2, the memory 2 storing a program and configured to be configured by the one or more processors 1 Perform the following steps:

S1, compiling the preset root certificate to the executable file;

Further, it also includes:

Obtain identity information;

Further, it also includes:

Obtain a preset verification key;

Storing the first MAC value to the database.

Further, it also includes:

The MAC operation is performed using the X9.19 algorithm.

Further, before the S2, the method further includes:

The verification key is injected into the hardware security module.

Further, it also includes:

Set the data type of the root certificate to a constant.

Embodiment 1 of the present invention is:

This embodiment provides a certificate importing method, including:

S1. Compile the default root certificate to the executable file.

Optionally, the data type of the root certificate is set to be a constant.

Among them, the root certificate is a trusted CA certificate. CA (Certification Authority) is a certification center. It uses PKI (Public Key Infrastructure) public key infrastructure technology, which provides network identity authentication services and is responsible for issuing and managing digital certificates.

Since this embodiment involves the verification of a public key certificate, the public key in the trusted CA certificate needs to be loaded into the system. In order to improve security, in the present embodiment, the public key of the CA certificate is designed as a constant of the application, and is already loaded into the executable file when the application is compiled.

S2: Inject a preset verification key into the hardware security module.

The verification key is a key for calculating the MAC value of the certificate data, and is a key element of the security and integrity guarantee of the certificate data stored in the database. In this embodiment, it is required to verify the password before the system is officially put into use. The key is injected into the HSM (High Security Machine, which is a hardware encryptor in the system) and the authentication key is configured into the system parameters.

S3. Acquire identity information; when the identity information passes the identity verification, activate a certificate writing function of the executable file; the certificate writing function is configured to receive a write database request corresponding to a certificate.

Among them, only the authorized operator can use the executable file to add, delete, and modify the certificate in the database.

S4. When receiving a write database request corresponding to a certificate, the executable file acquires a public key corresponding to the root certificate.

S5. The executable file verifies the digital signature of the certificate according to the public key, and obtains a verification result; the verification result includes a verification pass and a verification fails; when the verification result is a verification pass, the executable file may The execution file writes the certificate and the certificate chain corresponding to the one certificate to the database.

The X.509 certificate and the certificate chain are imported in an effective manner, and the public key certificate number and other related information are generated; and the digital signature of the imported X.509 certificate is verified by using the trusted root CA certificate public key compiled into the executable file, and Analyze the certificate body information, determine the validity of the public key certificate; write the verified X.509 certificate to the database, and also write the relevant information such as the public key certificate number.

S6: Acquire the verification key; obtain data to be verified according to the one certificate and the certificate chain; the data to be verified includes the certificate, the certificate chain, importing the certificate, and the certificate The time of the chain and the identity information; performing MAC operations on the data to be verified according to the verification key to obtain a first MAC value; and storing the first MAC value to the database.

Optionally, the MAC operation is performed using an X9.19 algorithm.

S7: When the key distribution request is received, the data to be verified is obtained from the database; performing MAC operation on the data to be verified according to the verification key to obtain a second MAC value; When the MAC value and the second MAC value are the same, the key is distributed according to the one certificate.

As can be seen from the above description, in this embodiment, the trusted root CA certificate is compiled into the system application. As long as the public key certificate issued by the legal CA can be verified by the RSA public password mechanism, the public key in the CA certificate is used to verify the legality. Sex, this is indeed feasible and effective.

In this embodiment, the unique security interface of the public key certificate entering the system is designed, and the trusted root CA certificate data is compiled into the application compiling stage. The lower-level public key certificate imported through the interface must be verified by the root certificate of the trusted root CA certificate. The data is MAC-calculated using the verification key (the verification key is injected into the HSM in advance) and written into the system database. Each time the public key certificate data is obtained from the database, the data is forcibly required to perform MAC verification. Therefore, the validity of the public key certificate used is guaranteed; in addition, the public key certificate is issued by the CA center that meets the security standard, and the security can be guaranteed. In summary, the public key certificate meets the security requirements when it is generated, processed, and stored.

In this embodiment, the data MAC value verification scheme is adopted to ensure the integrity and certifiability of the stored data. The public key certificate data of the verification and its related content are subjected to the MAC operation of the X9.19 algorithm using the verification public key, and are stored as key data in the system database, and the same algorithm is used each time the public key certificate is used. The obtained public key certificate data can be MAC-checked. The data of this embodiment has the characteristics of integrity and certifiability.

Embodiment 2 of the present invention is:

The embodiment provides a certificate import terminal including one or more processors 1 and a memory 2, the memory 2 storing a program, and being configured to perform the following steps by the one or more processors 1:

S1. Compile the default root certificate to the executable file.

Optionally, the data type of the root certificate is set to be a constant.

S2: Inject a preset verification key into the hardware security module.

Optionally, the MAC operation is performed using an X9.19 algorithm.

In summary, the present invention provides a certificate import method and a terminal, by compiling a root certificate for verifying the validity of a certificate to be imported into an executable file, so that the root certificate is loaded into an executable at compile time. File, so there is no way to replace, modify, or add information about the root certificate while the executable is running. When receiving an import request for a certificate, it must first use the root certificate to digitally verify it. Only valid certificates can be successfully imported into the database, and the criminal cannot modify the root certificate stored in the database. Unable to successfully import a malicious certificate to the database. The implementation effectively improves the validity of the certificate stored in the database without increasing the hardware cost. Further, only the executable program generated by the legal way to compile the link can modify, replace, and add the certificate and certificate chain information, and only the legal operator who performs the authentication can perform the operation of modifying the certificate information, thereby effectively improving the database. The validity of the stored certificate. Further, each time the key stored in the database is used for key distribution, the certificate information in the database is forced to be MAC-checked. Therefore, any illegal modification of the certificate can be detected, and the key distribution is improved. safety. Further, the present invention designs the root certificate as a constant of the executable file, and when the executable file is compiled, it is already loaded into the system application, so that the illegal element cannot tamper with the root certificate information during the execution of the executable program. Improves the reliability of certificate validation for imported certificates, thereby increasing the validity of certificates stored in the database.

Claims

A certificate importing method, comprising:

S1, compiling the preset root certificate to the executable file;

S2. When receiving a write database request corresponding to a certificate, the executable file acquires a public key corresponding to the root certificate;

S3. The executable file verifies the digital signature of the certificate according to the public key, and obtains a verification result; the verification result includes a verification pass and a verification fails;

S4. When the verification result is verification pass, the executable file writes the certificate and the certificate chain corresponding to the one certificate to a database.
The certificate importing method according to claim 1, wherein before the S2, the method further comprises:

Obtain identity information;

The certificate writing function of the executable file is activated when the identity information is authenticated; the certificate writing function is configured to receive a write database request corresponding to a certificate.
The certificate importing method according to claim 1, wherein after the step S4, the method further comprises:

Obtain a preset verification key;

Obtaining data to be verified according to the certificate and the certificate chain;

Performing a MAC operation on the to-be-verified data according to the verification key to obtain a first MAC value;

Storing the first MAC value to the database.
The certificate importing method according to claim 3, further comprising:

Obtaining the to-be-verified data from the database when receiving a key distribution request;

Performing a MAC operation on the data to be verified according to the verification key to obtain a second MAC value;

When the first MAC value and the second MAC value are the same, the key is distributed according to the one certificate.
The certificate importing method according to claim 3, further comprising:

The MAC operation is performed using the X9.19 algorithm.
The certificate importing method according to claim 3, wherein the data to be verified includes a time for writing the certificate, the certificate, and the certificate chain.
The certificate importing method according to claim 3, wherein before the S2, the method further comprises:

The verification key is injected into the hardware security module.
The method for importing a certificate according to claim 1, further comprising:

Set the data type of the root certificate to a constant.
A certificate import terminal, comprising: one or more processors and a memory, the memory storing a program, and being configured to perform the following steps by the one or more processors:

S1, compiling the preset root certificate to the executable file;

S2. When receiving a write database request corresponding to a certificate, the executable file acquires a public key corresponding to the root certificate;

S3. The executable file verifies the digital signature of the certificate according to the public key, and obtains a verification result; the verification result includes a verification pass and a verification fails;

S4. When the verification result is verification pass, the executable file writes the certificate and the certificate chain corresponding to the one certificate to a database.
The certificate importing terminal according to claim 9, wherein before the S2, the method further comprises:

Obtain identity information;

The certificate writing function of the executable file is activated when the identity information is authenticated; the certificate writing function is configured to receive a write database request corresponding to a certificate.
The certificate importing terminal according to claim 9, wherein after the step S4, the method further comprises:

Obtain a preset verification key;

Obtaining data to be verified according to the certificate and the certificate chain;

Performing a MAC operation on the to-be-verified data according to the verification key to obtain a first MAC value;

Storing the first MAC value to the database.
The certificate importing terminal according to claim 11, further comprising:

Obtaining the to-be-verified data from the database when receiving a key distribution request;

Performing a MAC operation on the data to be verified according to the verification key to obtain a second MAC value;

When the first MAC value and the second MAC value are the same, the key is distributed according to the one certificate.
The certificate importing terminal according to claim 11, further comprising:

The MAC operation is performed using the X9.19 algorithm.
The certificate importing terminal according to claim 11, wherein the data to be verified includes a time for writing the certificate, the certificate, and the certificate chain.
The certificate importing terminal according to claim 11, wherein before the S2, the method further comprises:

The verification key is injected into the hardware security module.
The certificate importing terminal according to claim 9, further comprising:

Set the data type of the root certificate to a constant.