Digital certificate application
AssigneeAdvanced New Technologies Co., Ltd.
InventorYawen Wei
Life of this patent
Estimating the term…
Abstract
Application information is received by a client and from a server, and the application information includes an application identifier corresponding to a digital certificate application request transmitted by the client to the server. The application information is delivered to a secure element associated with the client by the client. A public and private key pair are generated by the secure element. The application identifier is signed using the private key to generate terminal signature data. Specified format data is generated by encapsulating the terminal signature data and the public key into the specified format data. The specified format data is transmitted from the secure element to the client. The specified format data is transmitted by the client to the server.
Claims17
A computer-implemented method, comprising:
- receiving, by a client and from a server, application information, wherein the application information comprises an application identifier corresponding to a digital certificate application request transmitted by the client to the server, asymmetric algorithm information, signature algorithm information, and a timestamp;
- delivering, by the client, the application information to a secure element associated with the client;
- generating, by the secure element, a public and private key pair;
- signing the application identifier using the private key to generate terminal signature data;
- generating specified format data by encapsulating the terminal signature data and the public key into the specified format data;
- transmitting the specified format data from the secure element to the client;
- and
- transmitting, by the client, the specified format data to the server.
A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
- receiving, by a client and from a server, application information, wherein the application information comprises an application identifier corresponding to a digital certificate application request transmitted by the client to the server, asymmetric algorithm information, signature algorithm information, and a timestamp;
- delivering, by the client, the application information to a secure element associated with the client;
- generating, by the secure element, a public and private key pair;
- signing the application identifier using the private key to generate terminal signature data;
- generating specified format data by encapsulating the terminal signature data and the public key into the specified format data;
- transmitting the specified format data from the secure element to the client;
- and
- transmitting, by the client, the specified format data to the server.
A computer-implemented system, comprising:
- one or more computers;
- and
- one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
- receiving, by a client and from a server, application information, wherein the application information comprises an application identifier corresponding to a digital certificate application request transmitted by the client to the server, asymmetric algorithm information, signature algorithm information, and a timestamp;
- delivering, by the client, the application information to a secure element associated with the client;
- generating, by the secure element, a public and private key pair;
- signing the application identifier using the private key to generate terminal signature data;
- generating specified format data by encapsulating the terminal signature data and the public key into the specified format data;
- transmitting the specified format data from the secure element to the client;
- and
- transmitting, by the client, the specified format data to the server.
Dependencies are inferred from the claim text.