Document introduction of digital certificate

A digital certificate is a file digitally signed by a certificate authority, which contains public key owner information and public key. The simplest certificate contains a public key, a name and the digital signature of the certification authority. Another important feature of digital certificates is that they are only valid for a specific period of time.

Digital certificate is an authoritative electronic document, which can be issued by an authoritative and impartial third-party organization, namely CA (for example, CA companies all over China) centers or enterprise-level CA systems.

Its encryption technology based on digital certificate (encryption transmission, digital signature, digital envelope and other security technologies) can encrypt and decrypt the information transmitted on the network, and digitally sign and verify the signature, thus ensuring the confidentiality and integrity of the information transmitted on the network and the undeniable nature of the transaction. With a digital certificate, even if the information you send is intercepted by others online, or even if you lose your personal account, password and other information, you can still ensure the security of your account and funds.

It is an authoritative electronic document, which can provide authentication on the Internet. People can use it to prove their identity and identify each other in Internet communication. Of course, CA, as an authoritative, fair and reliable third party, plays an important role in the process of digital certificate authentication. How to judge whether the status of a fair third party in a digital authentication center is authoritative and credible? As of March 20 1 1, 2065438, the Ministry of Industry and Information Technology has successively awarded vocational qualifications to more than 30 relevant institutions in a qualified and compliant manner.

Due to the technology of Internet e-commerce system, customers can easily get the information of merchants and enterprises when shopping online, but at the same time, it also increases the risk of abusing some sensitive or valuable data. In order to ensure the security and confidentiality of online electronic transactions and payments, and prevent fraud in the process of transactions and payments, it is necessary to establish a trust mechanism on the Internet. This requires that both buyers and sellers involved in e-commerce must have legal identities and can be effectively and correctly verified online.

Digital certificates can be used for secure electronic transaction processing and secure electronic transaction activities, such as sending secure emails, visiting secure websites, online securities trading, online bidding and purchasing, online office, online insurance, online taxation, online signing and online banking. There are many numbers and English in the digital certificate. When a digital certificate is used for identity authentication, it will randomly generate a 128-bit identity code. Each digital certificate can generate a corresponding number that can't be the same every time, which ensures the confidentiality of data transmission and is equivalent to generating a complex password.

Digital certificate binds the public key and the real identity of the holder, similar to the resident ID card in real life. The difference is that the digital certificate is no longer a paper certificate, but electronic data that contains the identity information of the certificate holder and is examined and issued by the certification center, which can be used in e-commerce and e-government more conveniently and flexibly. safe

(1) In order to avoid the security risks such as certificate loss caused by improper use in the traditional digital certificate scheme, Alipay creatively launched a dual-certificate solution: when Alipay members apply for digital certificates, they will get two certificates at the same time, one for verifying Alipay accounts and the other for verifying the computers currently used by members. (2) The second certificate cannot be backed up, and members must apply for a new certificate for each computer. In this way, even if a member's digital certificate is illegally stolen by others, he can still ensure that his account will not be lost. (3) Payment Shield is a physical security tool similar to USB flash drive. Its built-in micro smart card processor can block various risks and keep your account in a safe environment all the time. At present (20 15.06), the way to ensure e-mail security is digital certificate.

Uniqueness

(1) Alipay digital certificate gives corresponding access rights to network resources according to user identity. (2) After applying for using the digital certificate, if other computers log in to Alipay account without importing the digital certificate backup, they can only query the account and can't do anything. This is equivalent to having a digital certificate similar to a "key", which enhances the security of account use.

convenient

(1) instant application, instant opening and instant use. (2) Tailor-made ways to maintain digital certificates, such as SMS, security issues, etc. (3) Users can easily master digital certificates without any knowledge.