Method and apparatus for realizing secure signature

A method for realizing secure signature, comprising:

• step F1, when a personal identification number (PIN) verification instruction sent by a terminal is received, generating, by a signature module, a second shared key according to a terminal public key and a stored signature module private key in the PIN verification instruction, and verifying a first calculation result in the PIN verification instruction by using the second shared key, if the verifying is successful, executing step F2;
• if the verifying is failed, regenerating a signature module key pair and replacing a stored signature module key pair;
• wherein the signature module key pair comprises a signature module private key and a signature module public key;
• step F2, generating, by the signature module, PIN verification signature data and storing the PIN verification signature data, generating a second calculation result according to the second shared key and the PIN verification signature data, and sending the second calculation result to the terminal;
• step H1, when a signature operation instruction sent by the terminal is received, determining, by the signature module, whether a PIN verification signature data in the signature operation instruction is consistent with the stored PIN verification signature data, if yes, executing step H2;
• otherwise, reporting an error;
• step H2, signing, by the signature module, intermediate data to be signed in the signature operation instruction by using a stored signature private key;
• and
• step H3, determining, by the signature module, whether a current state meets a preset condition, if yes, clearing the stored PIN verification signature data, and returning a signature result to the terminal;
• otherwise, returning the signature result to the terminal.