Digital certificate processing method and device, blockchain node and storage medium

Patent metadata

Field	Value
Publication number	US-11863692-B2
Application number	US-201917046780-A
Country	US
Kind code	B2
Filing date	Apr 1, 2019
Priority date	Apr 12, 2018
Publication date	Jan 2, 2024
Grant date	Jan 2, 2024

Abstract

A digital certificate processing method includes: receiving a distribution request for a digital certificate, wherein the digital certificate does not contain validity period information; acquiring a verification result for the digital certificate; and according to the verification result, recording the digital certificate which has passed verification to a blockchain.

First claim

The invention claimed is:

1. A method for processing a digital certificate, comprising:
receiving an issuing request for the digital certificate, wherein the issuing request comprises the digital certificate and carries validity period information corresponding to the digital certificate, the validity period information is not contained in the digital certificate, and the validity period information is used to determine an effective time of the digital certificate;
acquiring a verification result of the digital certificate; wherein the verification result of the digital certificate is used for indicating whether the digital certification has passed verification;
determining the effective time of the digital certificate according to the validity period information carried in the issuing request;
wherein the verification result of the digital certificate is a verification result issued by a verification node after verification based on a consensus mechanism; and the method further comprises: when the verification result issued by verification nodes reaching a predetermined ratio indicates that the digital certificate has passed verification, or the verification result provided by a predetermined number of verification nodes indicates that the digital certificate has passed verification, determining that the digital certificate has passed verification; and
when the effective time of the digital certificate is reached, recording, according to the verification result, the digital certificate which has passed verification to a blockchain.

2. The method of claim 1 , wherein
acquiring the verification result of the digital certificate comprises:
acquiring the verification result issued when the effective time is reached.

3. A method for processing a digital certificate, comprising:
receiving an issuing request for the digital certificate, wherein the issuing request comprises the digital certificate and carries validity period information corresponding to the digital certificate, the validity period information is not contained in the digital certificate, and the validity period information is used to determine an effective time of the digital certificate;
determining the effective time of the digital certificate according to the validity period information carried in the issuing request;
when the effective time of the digital certificate is reached, verifying the digital certificate to obtain a verification result of the digital certificate; wherein the verification result of the digital certificate is used for indicating whether the digital certification has passed verification;
wherein the verification result of the digital certificate is a verification result issued by a verification node after verification based on a consensus mechanism; and the method further comprises: when the verification result issued by verification nodes reaching a predetermined ratio indicates that the digital certificate has passed verification, or the verification result provided by a predetermined number of verification nodes indicates that the digital certificate has passed verification, determining that the digital certificate has passed verification; and
issuing the verification result of the digital certificate.

4. An apparatus for processing a digital certificate, comprising:
a processor; and
memory for storing a computer program executable on the processor,
wherein when the computer program is executed by the processor, the processor is configured to perform:
receiving an issuing request for the digital certificate, wherein the issuing request comprises the digital certificate and carries validity period information corresponding to the digital certificate, the validity period information is not contained in the digital certificate, and the validity period information is used to determine an effective time of the digital certificate;
acquiring a verification result of the digital certificate; wherein the verification result of the digital certificate is used for indicating whether the digital certification has passed verification;
determining the effective time of the digital certificate according to the validity period information carried in the issuing request;
wherein the verification result of the digital certificate is a verification result issued by a verification node after verification based on a consensus mechanism; and the processor is further configured to perform, when the verification result issued by verification nodes reaching a predetermined ratio indicates that the digital certificate has passed verification, or the verification result provided by a predetermined number of verification nodes indicates that the digital certificate has passed verification, determining that the digital certificate has passed verification; and
when the effective time of the digital certificate is reached, recording, according to the verification result, the digital certificate which has passed verification to a blockchain.

5. The apparatus of claim 4 , wherein the acquiring the verification result of the digital certificate comprises:
acquiring the verification result issued when the effective time is reached.

Assignees

• China Mobile Comm Co Ltd Res Inst
• China Mobile Communications Group Co Ltd
• China Mobile Communication Co Ltd Res Inst

Inventors

• Yan Junzhi

Classifications

• H04L9/3268 Primary

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• H04L9/3265

  using certificate chains, trees or paths; Hierarchical trust model · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3263 Primary

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/3239 Primary

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title