CN118900181A - Digital certificate updating method, device, computer equipment and storage medium - Google Patents

Abstract

The present application relates to a digital certificate update method, device, computer equipment and storage medium. It can be used in the field of artificial intelligence. The method includes: if the SIM shield of the target user ID has expired, the SIM shield expiration information is sent to the target user terminal, so that the target user terminal generates an update request based on the SIM shield expiration information. The click operation of the update button displayed on the update page generates an update request; when the security verification code in the received update request meets the security verification condition, the target user ID and the SIM shield associated information of the target user ID generate an updated SIM shield certificate. The SIM shield certificate identifier is sent to the server of the third-party system; the server of the third-party system sends the SIM shield certificate identifier to the SIM card of the target user ID; when the certificate feedback result sent by the server of the third-party system is successful, the status of the SIM shield certificate is set to the activated state to complete the update request operation. The use of this method can improve the update efficiency of the SIM shield certificate.

Description

Digital certificate updating method, device, computer equipment and storage medium

Technical Field

The present application relates to the field of computer technology, and in particular to a digital certificate updating method, apparatus, computer equipment and storage medium.

Background Art

With the development of computer technology, more and more security authentication technologies have emerged, such as the SIM Shield security authentication method jointly launched by Bank of China Mobile Banking and China Mobile, which can provide mobile banking users with a faster and more convenient security authentication method. Since the SIM Shield has a validity period, it cannot be used after expiration. The existing method of updating the validity period of the SIM Shield certificate requires users to go to bank branches to update the SIM Shield certificate, which makes the update efficiency of the SIM Shield certificate low.

Summary of the invention

Based on this, it is necessary to provide a digital certificate update method, device, computer equipment and storage medium that can efficiently update expired SIM shield certificates in response to the above technical problems, thereby improving the update efficiency of SIM shield certificates.

A digital certificate updating method, the method comprising:

If it is detected that the SIM shield corresponding to the target user identity is expired, the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code;

receiving an update request sent by the target user terminal, obtaining the security verification code from the update request, obtaining SIM shield association information corresponding to the target user identifier when the security verification code satisfies a security verification condition, generating an updated SIM shield certificate based on the SIM shield association information, and sending the target user identifier and the SIM shield certificate identifier corresponding to the updated SIM shield certificate to a server corresponding to the third-party system;

So that the server corresponding to the third-party system sends the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier;

Receive a certificate feedback result sent by the server corresponding to the third-party system, where the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, set the status of the SIM shield certificate to an activated status, and complete the operation corresponding to the update request.

In one embodiment, the method further comprises:

If it is detected that the SIM shield corresponding to the target user identity has not expired, the update button is shielded.

In one embodiment, the step of causing the target user terminal to display an update button on an update page based on the SIM shield expiration information and generating an update request based on a click operation on the update button includes:

So that the target user terminal enters the security verification method selection page based on the click operation, determines the target verification method from the candidate verification methods in the security verification selection page, obtains the security verification code corresponding to the target verification method, and generates the update request based on the security verification code.

In one embodiment, the candidate verification method includes a first candidate verification method and a second candidate verification method, and when the security verification code satisfies the security verification condition, the method includes:

When the target verification method is the first candidate verification method, the server of the security verification system corresponding to the first candidate verification method receives the security verification code sent by the target user terminal, obtains the verification reference code corresponding to the target user identifier, and when the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition;

When the target verification method is the second candidate verification method, the server of the security verification system corresponding to the second candidate verification method receives the security verification code sent by the target user terminal, and obtains the verification reference code corresponding to the preset hardware device identifier. When the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition; the preset hardware device corresponding to the preset hardware device identifier is connected to the target user terminal via a data cable, and both correspond to the target user identifier.

In one embodiment, after receiving the certificate feedback result sent by the server corresponding to the third-party system, the method further includes:

When the certificate feedback result is an unsuccessful state, the state of the SIM shield certificate corresponding to the target user identity is set to an unactivated state, and an activation failure message is sent to the target user terminal.

A digital certificate updating device, the device comprising:

A request module, configured to send SIM shield expiration information to a target user terminal corresponding to the target user identity if it is detected that the SIM shield corresponding to the target user identity is expired, so that the target user terminal displays an update button on an update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code;

an update module, configured to receive an update request sent by the target user terminal, obtain the security verification code from the update request, obtain the SIM shield association information corresponding to the target user identifier when the security verification code satisfies the security verification condition, generate an updated SIM shield certificate based on the SIM shield association information, and send the target user identifier and the SIM shield certificate identifier corresponding to the updated SIM shield certificate to a server corresponding to the third-party system;

A sending module, used to enable the server corresponding to the third-party system to send the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier;

An activation module is used to receive a certificate feedback result sent by a server corresponding to the third-party system, wherein the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, the status of the SIM shield certificate is set to an activated status to complete the operation corresponding to the update request.

In one of the embodiments, the digital certificate updating device further comprises a shielding module, which is used to shield the update button if it is detected that the SIM shield corresponding to the target user identification is not expired.

In one of the embodiments, the digital certificate updating device also includes an unactivated module, which is used to set the status of the SIM shield certificate corresponding to the target user identity to an unactivated state when the certificate feedback result is an unsuccessful state, and send activation failure information to the target user terminal.

A computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

If it is detected that the SIM shield corresponding to the target user identity is expired, the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code;

receiving an update request sent by the target user terminal, obtaining the security verification code from the update request, obtaining SIM shield association information corresponding to the target user identifier when the security verification code satisfies a security verification condition, generating an updated SIM shield certificate based on the SIM shield association information, and sending the target user identifier and the SIM shield certificate identifier corresponding to the updated SIM shield certificate to a server corresponding to the third-party system;

So that the server corresponding to the third-party system sends the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier;

Receive a certificate feedback result sent by the server corresponding to the third-party system, where the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, set the status of the SIM shield certificate to an activated status, and complete the operation corresponding to the update request.

A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the following steps:

If it is detected that the SIM shield corresponding to the target user identity is expired, the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code;

receiving an update request sent by the target user terminal, obtaining the security verification code from the update request, obtaining SIM shield association information corresponding to the target user identifier when the security verification code satisfies a security verification condition, generating an updated SIM shield certificate based on the SIM shield association information, and sending the target user identifier and the SIM shield certificate identifier corresponding to the updated SIM shield certificate to a server corresponding to the third-party system;

So that the server corresponding to the third-party system sends the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier;

Receive a certificate feedback result sent by the server corresponding to the third-party system, where the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, set the status of the SIM shield certificate to an activated status, and complete the operation corresponding to the update request.

The above-mentioned digital certificate updating method, device, computer equipment and storage medium, if it is detected that the SIM shield corresponding to the target user identity is expired, then the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code; receives the update request sent by the target user terminal, obtains the security verification code from the update request, and when the security verification code meets the security verification condition, obtains the SIM shield association information corresponding to the target user identity, generates an updated SIM shield certificate based on the SIM shield association information, and compares the target user identity and the updated SIM shield certificate. The SIM shield certificate identifier corresponding to the target user ID is sent to the server corresponding to the third-party system; so that the server corresponding to the third-party system sends the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user ID; the certificate feedback result sent by the server corresponding to the third-party system is received, and the certificate feedback result is used to characterize the download status of the SIM shield certificate by the SIM card. When the certificate feedback result is a success status, the status of the SIM shield certificate is set to an activated status, and the operation corresponding to the update request is completed, thereby realizing the online update of the SIM shield certificate. In the process of online updating of the validity period of the SIM shield certificate, multiple types of selected security verification operations can be performed, which effectively improves the efficiency of updating the SIM shield certificate while ensuring the safety of the operation.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a diagram of an application environment of a digital certificate updating method in one embodiment;

FIG2 is a schematic diagram of a process of updating a digital certificate in one embodiment;

FIG3 is a structural block diagram of a digital certificate updating device in one embodiment;

FIG4 is a diagram showing the internal structure of a computer device in one embodiment;

FIG. 5 is a diagram showing the internal structure of a computer device in one embodiment.

DETAILED DESCRIPTION

In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

The digital certificate updating method provided in the embodiment of the present application can be applied in the application environment shown in FIG1 . Among them, the terminal 102, the server 104 and the server 106 communicate with each other through the network. The data storage system can store the data that the server 104 and the server 106 need to process. The data storage system can be integrated on the server 104 and the server 106, or it can be placed on the cloud or other network servers. The server 104 is used to send the SIM shield expiration information to the target user terminal 102 corresponding to the target user identity if it is detected that the SIM shield corresponding to the target user identity is expired; so that the target user terminal 102 is used to display an update button on the update page based on the SIM shield expiration information, and generate an update request based on the click operation on the update button, and the update request carries a security verification code; the server 104 is used to receive the update request sent by the target user terminal 102, obtain the security verification code from the update request, and when the security verification code meets the security verification condition, obtain the SIM shield association information corresponding to the target user identity, generate an updated SIM shield certificate based on the SIM shield association information, and send the SIM shield certificate identifier corresponding to the target user identity and the updated SIM shield certificate to the server 106 corresponding to the third-party system; so that the server 106 corresponding to the third-party system is used to send the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identity; the server 104 is used to receive the certificate feedback result sent by the server 106 corresponding to the third-party system, the certificate feedback result is used to characterize the download status of the SIM shield certificate by the SIM card, and when the certificate feedback result is a successful status, the status of the SIM shield certificate is set to an activated status, and the operation corresponding to the update request is completed.

The terminal 102 may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, IoT devices, and portable wearable devices. The IoT devices may be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. The portable wearable devices may be smart watches, smart bracelets, head-mounted devices, etc. The server 104 and the server 106 may be implemented as independent servers or server clusters consisting of multiple servers.

The digital certificate updating method, apparatus, computer equipment and storage medium of the present application include but are not limited to use in the fields of artificial intelligence and finance.

In one embodiment, as shown in FIG. 2 , a digital certificate updating method is provided, which is described by taking the method applied to the server 104 in FIG. 1 as an example, and includes the following steps:

Step S200: If it is detected that the SIM shield corresponding to the target user identity is expired, the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, and the update request carries a security verification code.

Among them, the target user identifier refers to the unique identifier of the user who logs in to the terminal, which can be a mobile phone number, user ID, etc.; SIM Shield is the latest product launched by China Mobile that combines speed and security, based on the security chip of the USIM card (which can store multiple personal digital certificates); its essence is storage medium + CA certificate, which has passed the EAL4+ security certification and provides various identity authentication services, electronic signature services, encryption and decryption services, encrypted storage and other services; SIM Shield, as a carrier, can provide transfer transaction authentication protection for banks, securities and other companies, and provide security authentication for OA login, signing and approving official documents authorization, etc. for governments or enterprises. SIM Shield expiration information refers to the relevant information of the expiration of the validity period of the SIM Shield certificate, which is used to display it on the corresponding page so that the user name, certificate type, certificate number, SIM expiration status and other information corresponding to the SIM Shield can be presented on the page. Update button refers to the button used to trigger the update of the SIM certificate when the SIM Shield certificate expires. Update request refers to the request to update the expired SIM Shield certificate to maintain the validity of the SIM Shield certificate. Security verification code refers to the verification code used to verify the security of the operation, such as SMS verification code, Bank of China's E-Shield verification code, etc.

Specifically, the background system records the user ID (i.e. user identification), certificate ID (i.e. SIM shield certificate identification), certificate validity period data, certificate status and other information in advance. The server can monitor the expiration status of the SIM shield corresponding to each user identification in real time. When the current time has exceeded the validity period of the SIM shield certificate, the SIM shield expiration information is displayed on the update page and an update button is displayed, so that based on the click operation on the update button, a request to update the SIM shield certificate corresponding to the user identification can be made. For example, after the user logs in to the mobile banking, the background server can obtain the user identification from the session, query the corresponding SIM shield certificate information based on the user identification, and compare the certificate validity period in the SIM shield certificate information with the current time of the server. If the current time has exceeded the certificate validity period, an update button is displayed on the update page displaying the SIM shield information, and an update request to update the SIM shield certificate can be triggered based on the click operation on the update button; wherein, session is a special object created by the server to save the user status and is used to store information.

Step S202, receiving an update request sent by the target user terminal, obtaining a security verification code from the update request, obtaining SIM shield association information corresponding to the target user identity when the security verification code meets the security verification condition, generating an updated SIM shield certificate based on the SIM shield association information, and sending the target user identity and the SIM shield certificate identity corresponding to the updated SIM shield certificate to the server corresponding to the third-party system.

Among them, the security verification condition refers to the condition for the security verification code to be verified; it can be a judgment condition for whether the security verification code is consistent with the verification reference code of the corresponding security verification system. When the security verification code and the verification reference code are consistent, the security verification condition is met. SIM Shield associated information refers to information related to SIM Shield, including but not limited to the user identifier corresponding to the SIM Shield, the SIM Shield certificate type before the update, the SIM Shield certificate identifier before the update and other information. The updated SIM Shield certificate refers to the SIM Shield certificate after the SIM Shield certificate information is updated, which is different from the certificate identifier and certificate validity period corresponding to the SIM Shield certificate before the update. The third-party system refers to the manager or manufacturer of the SIM Shield, which can provide platform resources for generating SIM Shield certificates for other platforms or other systems. It can be the system corresponding to China Mobile.

Specifically, after clicking the update button, a security verification mode selection page will be entered first, and the target verification mode can be determined from the security verification mode selection page. Based on the target verification mode, the user terminal or the preset hardware device will receive the verification code corresponding to the target verification mode. The user can enter the security verification code in the corresponding security authentication page according to the received verification code. After the user terminal obtains the security verification code, it is sent to the security authentication system corresponding to the target verification mode. If the security verification code is consistent with the verification reference code corresponding to the target verification mode, the security verification code meets the security verification condition. When the security verification condition is met, the update operation of the SIM shield certificate is started, that is, the updated SIM shield certificate can be generated based on the SIM shield association information in the resource platform provided by the third-party system. At this time, the update information corresponding to the updated SIM shield certificate can also be recorded in the database, thereby updating the relevant information of the SIM shield corresponding to the target user identity stored in the original database, wherein the update information includes but is not limited to the validity period of the updated SIM shield certificate and the SIM shield certificate identifier. After the updated SIM shield certificate is generated, the target user identity and the updated SIM shield certificate identifier can also be sent to the server corresponding to the third-party system, so that the server corresponding to the third-party system issues the updated SIM shield certificate to activate the updated SIM shield certificate.

Step S204, the server corresponding to the third-party system sends the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier.

Specifically, the third-party system can manage and control the SIM shield corresponding to each user. It can directly determine the corresponding SIM shield certificate based on the SIM shield certificate identifier. To activate the updated SIM shield certificate, the third-party system can send the updated SIM shield certificate to the SIM card corresponding to the target user identifier, so that the SIM card corresponding to the target user identifier downloads the updated SIM shield certificate. When the download is successful, the activation of the updated SIM shield certificate is completed.

Step S206, receiving the certificate feedback result sent by the server corresponding to the third-party system, the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate, when the certificate feedback result is a success status, the status of the SIM shield certificate is set to an activated status, and the operation corresponding to the update request is completed.

Specifically, the certificate feedback result of the SIM card corresponding to the target user identity downloading the updated SIM shield certificate can be fed back to the third-party system through the target user terminal. After receiving the certificate feedback result sent by the target user terminal, the server corresponding to the third-party system sends the certificate feedback result to the server in this case, and judges the certificate feedback result. If the certificate feedback result is a successful state, that is, the SIM card successfully downloads the updated SIM shield certificate, it means that the updated SIM shield certificate has been successfully activated. At this time, the state of the SIM shield certificate can be set to the activated state, and the update request operation of the expired SIM shield certificate is completed; if the certificate feedback result is an unsuccessful state, that is, the SIM card fails to successfully download the updated SIM shield certificate, it means that the activation of the updated SIM shield certificate fails, and the state of the SIM shield certificate can be set to the unactivated state, and the updated SIM certificate can be re-issued to the SIM card corresponding to the target user identity through the third-party system, and the activation operation of the updated SIM shield certificate is re-performed. Among them, the number of times the updated SIM shield certificate can be re-issued to the SIM card corresponding to the target user identity after the activation fails is preset by the specific situation, and after the preset number of repetitions, the security verification operation can be performed again to ensure the security of the operation.

In the above-mentioned digital certificate updating method, if it is detected that the SIM shield corresponding to the target user identity is expired, the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, and the update request carries a security verification code; the update request sent by the target user terminal is received, and the security verification code is obtained from the update request. When the security verification code meets the security verification condition, the SIM shield association information corresponding to the target user identity is obtained, and an updated SIM shield certificate is generated based on the SIM shield association information, and the SIM shield certificate mark corresponding to the target user identity and the updated SIM shield certificate is added. The SIM Shield certificate is sent to the server corresponding to the third-party system; the server corresponding to the third-party system sends the SIM Shield certificate corresponding to the SIM Shield certificate identifier to the SIM card corresponding to the target user identifier; the certificate feedback result sent by the server corresponding to the third-party system is received, and the certificate feedback result is used to characterize the download status of the SIM card for the SIM Shield certificate. When the certificate feedback result is a success status, the status of the SIM Shield certificate is set to an activated status, and the operation corresponding to the update request is completed, thereby realizing the online update of the SIM Shield certificate. In the process of online updating of the validity period of the SIM Shield certificate, multiple types of selected security verification operations can be performed, which effectively improves the efficiency of updating the SIM Shield certificate while ensuring the safety of the operation.

In one embodiment, the method further includes: if it is detected that the SIM shield corresponding to the target user identity is not expired, then shielding the update button.

Specifically, it is possible to monitor in real time whether the validity period of the SIM shield certificate corresponding to each user identity has reached the current time. If it has not reached or exceeded the current time, the function of updating the SIM shield certificate is not provided, thereby avoiding the situation of randomly updating the SIM shield certificate. That is, when it is detected that the SIM shield corresponding to the target user identity has not expired, the update button on the update page is shielded, and the operation of triggering the update of the SIM shield certificate in the update button is shielded, thereby improving the security of updating the SIM shield certificate.

In one embodiment, generating an update request based on a click operation on an update button in step S200 includes: enabling the target user terminal to enter a security verification method selection page based on the click operation, determining a target verification method from candidate verification methods in the security verification selection page, obtaining a security verification code corresponding to the target verification method, and generating an update request based on the security verification code.

The security verification method selection page refers to the interface used to display the security verification method that triggers the user to select. Candidate verification methods refer to multiple verification methods used to verify the security of operations, including but not limited to SMS verification methods and Bank of China's E-Shield verification methods. Target verification method refers to the security verification method selected by the target user ID, which can be any one selected from the candidate verification methods.

Specifically, the target user terminal can enter the security verification method selection page based on a click operation of the update button on the update page. The user can select the target verification method from the candidate verification methods on the security verification method selection page, so that the target user terminal obtains the user's selection result and thus determines the target verification method. Different verification methods correspond to different security authentication systems. After the target verification method is determined, the target user terminal obtains the security verification code corresponding to the target verification method entered by the user on the security authentication page, and generates an update request based on the security verification code, thereby laying a security foundation for backward update operations and making data preparations.

In this embodiment, the target user terminal is enabled to enter the security verification method selection page based on a click operation, the target verification method is determined from the candidate verification methods in the security verification selection page, the security verification code corresponding to the target verification method is obtained, and an update request is generated based on the security verification code, thereby ensuring the efficiency of online updating of the SIM shield certificate and improving the security of online updating of the SIM shield certificate.

In one embodiment, the candidate verification methods include a first candidate verification method and a second candidate verification method, and when the security verification code satisfies the security verification condition in step S202, the following steps are included:

Step S300, when the target verification method is the first candidate verification method, the server of the security verification system corresponding to the first candidate verification method receives the security verification code sent by the target user terminal, and obtains the verification reference code corresponding to the target user identifier. When the verification reference code is consistent with the security verification code, the security verification code meets the security verification conditions.

Step S302, when the target verification method is the second candidate verification method, the server of the security verification system corresponding to the second candidate verification method receives the security verification code sent by the target user terminal, and obtains the verification reference code corresponding to the preset hardware device identifier. When the verification reference code is consistent with the security verification code, the security verification code meets the security verification condition; the preset hardware device corresponding to the preset hardware device identifier is connected to the target user terminal through a data cable, and both correspond to the target user identifier.

The first candidate verification method refers to the SMS verification method. The second candidate verification method refers to the E-Shield verification method. The preset hardware device identifier refers to an identifier used to identify the preset hardware device. The preset hardware device refers to a hardware device used to receive verification code information, which may be an E-Shield hardware device. E-Shield is a high-security authentication tool of Bank of China that can be connected via Bluetooth or audio.

Specifically, if the target verification method is the first candidate verification method, the server will send a corresponding verification code acquisition request to the communication operator (i.e., the security verification system of the first candidate verification method) based on the previously stored user identification information (which can be a mobile phone number). The communication operator sends the verification code to the target user terminal identified by the target user based on the user identification information. The user enters the security verification code on the security authentication page of the target user terminal. The target user terminal obtains the security verification code and sends the security verification code to the security verification system for comparison. When the security verification code is consistent with the verification reference code of the security verification system corresponding to the first candidate verification method, it means that the security verification code meets the security verification conditions. The security verification system can send the information that meets the security verification conditions to the server of this case, so that the server of this case performs subsequent operations. If the target verification method is the second candidate verification method, the security verification system corresponding to the second candidate verification method can first send the verification code to a preset hardware device (which can be an E-Shield device) that is connected to the target user terminal via a data cable and corresponds to the same target user identifier, and display the verification code on the terminal corresponding to the preset hardware device. The user can obtain the verification code information from the preset hardware device and enter the security verification code on the target user terminal. The target user terminal obtains the security verification code and sends the security verification code to the server of the security verification system corresponding to the second candidate verification method, so that the security verification system obtains the corresponding verification reference code based on the preset hardware device identifier, and compares the security verification code with the verification reference code. When the verification reference code is consistent with the security verification code, a signal that the security verification code meets the security verification condition is sent to the server of this case, so that the server of this case performs subsequent operations.

In one embodiment, the candidate verification method may also be face recognition, a combination of SMS + face recognition, etc., and the preset hardware device can not only be connected to the target user terminal based on a data cable, but also be connected based on Bluetooth or the network, and the corresponding connection operation can be set according to the actual situation.

In the above embodiment, when the target verification method is the first candidate verification method, the server of the security verification system corresponding to the first candidate verification method receives the security verification code sent by the target user terminal, and obtains the verification reference code corresponding to the target user identifier. When the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition. When the target verification method is the second candidate verification method, the server of the security verification system corresponding to the second candidate verification method receives the security verification code sent by the target user terminal, and obtains the verification reference code corresponding to the preset hardware device identifier. When the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition. The preset hardware device corresponding to the preset hardware device identifier is connected to the target user terminal via a data line, and both correspond to the target user identifier, thereby enriching the function of the security verification method and improving the security in the process of updating the SIM shield certificate.

In one embodiment, after receiving the certificate feedback result sent by the server corresponding to the third-party system, it also includes: when the certificate feedback result is an unsuccessful state, setting the state of the SIM shield certificate corresponding to the target user identity to an unactivated state, and sending activation failure information to the target user terminal.

The activation failure information refers to information used to characterize the activation failure, including but not limited to the certificate identifier of the activated SIM shield certificate, the certificate type, the user identifier, the activation failure prompt content and other information.

Specifically, after receiving the certificate feedback result sent by the server corresponding to the third-party system, if it is determined that the certificate feedback result is an unsuccessful state, that is, the SIM card corresponding to the target user identity has not successfully downloaded the updated SIM shield certificate, the SIM shield certificate corresponding to the target user identity can be set to an unactivated state, and the activation failure information is sent to the target user terminal. At this time, the third-party system can also re-issue the updated SIM shield certificate to the SIM card corresponding to the target user identity for re-download, wherein before the third-party system re-issues the SIM shield certificate, the corresponding security verification method can be preset or a preset number of re-operation restrictions can be set, or corresponding security operation rules can be set according to specific circumstances to ensure the safety and effectiveness of the operation.

In this embodiment, when the certificate feedback result is an unsuccessful state, the state of the SIM shield certificate corresponding to the target user identity is set to an unactivated state, and the activation failure information is sent to the target user terminal, thereby achieving real-time feedback of the operation status, facilitating re-issuance according to the feedback result, and improving the efficiency of updating the SIM shield certificate to a certain extent.

In one embodiment, the online update of the SIM Shield certificate in the SIM Shield security authentication method jointly launched by the Bank of China Mobile Mobile Banking and China Mobile is described as an example. The backend system of the Bank of China pre-stores the user identification (i.e., user ID), SIM Shield certificate identification (i.e., certificate ID), SIM Shield certificate validity period data, SIM Shield certificate status, and other related information corresponding to each user. When the user terminal logs in to the mobile banking, the server of the backend system of the Bank of China can obtain the user information from the session, and query the status of the corresponding SIM Shield based on the user identification in the user information. If it is detected that the SIM Shield corresponding to the user identification is expired, the SIM Shield expiration information including but not limited to the user identification, SIM Shield certificate identification, SIM Shield certificate status, etc. will be sent to the user terminal corresponding to the user identification, so that the user terminal can display and display the update button on the corresponding page based on the SIM Shield expiration information, and enter the security verification method selection interface based on the click operation on the update button, where the security verification method interface displays SMS verification, face verification, etc. , Bank of China E-Shield verification, etc., the user terminal obtains the user's choice and determines the target verification method. Different verification methods are sent by different security verification systems to the corresponding terminal devices. For example, in SMS verification, the security verification system corresponds to China Mobile. China Mobile can send the verification code to the user terminal according to the user ID (that is, the user's mobile phone number). After receiving the verification code, the user terminal obtains the security verification code entered by the user and sends the security verification code to China Mobile for verification. If the verification is successful, subsequent operations are performed. For example, in Bank of China E-Shield verification, the security verification system corresponds to Bank of China. Bank of China can send the verification code to the E-Shield device terminal corresponding to the E-Shield device ID according to the user ID or the E-Shield device ID corresponding to the user ID, and obtain the security verification code entered by the user. The back-end system of Bank of China verifies the security verification code. If the verification passes, subsequent update request operations are performed.

Furthermore, when the security verification is passed, the server of the Bank of China's back-end system can obtain the SIM shield association information corresponding to the user identifier, generate an updated SIM shield certificate based on the SIM shield association information in the platform system for generating SIM shield certificates provided by China Mobile, and update the corresponding SIM shield related information in the database, such as the validity period data corresponding to the updated SIM shield certificate and the identifier of the updated certificate. After the updated SIM shield certificate is generated, the user identity and the SIM shield certificate identity of the updated SIM shield certificate are sent to the server of China Mobile, so that the server of China Mobile sends the SIM shield certificate corresponding to the updated SIM shield identity to the SIM card corresponding to the user identity for downloading. The user terminal can send the certificate feedback result representing the download status of the updated SIM shield certificate downloaded by the SIM card to the server of China Mobile, so that the server of China Mobile sends the certificate feedback result to the server of Bank of China. If the server of Bank of China determines that the certificate feedback result is a successful state, the SIM shield state corresponding to the user identity is set to an activated state. If the certificate feedback result is determined to be an unsuccessful state, the activation failure information is sent to the user terminal, so that the user decides whether to re-operate, thereby realizing the online update of the SIM shield certificate and improving the user experience. In the process of online updating the validity period of the SIM shield certificate, multiple types of security verification operations can be selected, which effectively improves the efficiency of updating the SIM shield certificate while ensuring the safety of the operation.

It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

Based on the same inventive concept, the embodiment of the present application also provides a digital certificate update device for implementing the digital certificate update method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more digital certificate update device embodiments provided below can refer to the limitations on the digital certificate update method above, and will not be repeated here.

In one embodiment, as shown in FIG. 3 , a digital certificate updating device is provided, including: a request module 300, an update module 302, a delivery module 304 and an activation module 306, wherein:

The request module 300 is used to send the SIM shield expiration information to the target user terminal corresponding to the target user identity if it is detected that the SIM shield corresponding to the target user identity is expired, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code.

The update module 302 is used to receive the update request sent by the target user terminal, obtain the security verification code from the update request, and when the security verification code meets the security verification condition, obtain the SIM shield association information corresponding to the target user identity, generate an updated SIM shield certificate based on the SIM shield association information, and send the target user identity and the SIM shield certificate identity corresponding to the updated SIM shield certificate to the server corresponding to the third-party system.

The sending module 304 is used to enable the server corresponding to the third-party system to send the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier.

The activation module 306 is used to receive the certificate feedback result sent by the server corresponding to the third-party system, and the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, the status of the SIM shield certificate is set to an activated status, and the operation corresponding to the update request is completed.

In one embodiment, the digital certificate updating device further includes a shielding module 308, which is used to shield the update button if it is detected that the SIM shield corresponding to the target user identity is not expired.

In one embodiment, the digital certificate updating device further includes an unactivated module 310, which is used to set the status of the SIM shield certificate corresponding to the target user identity to an unactivated status when the certificate feedback result is an unsuccessful status, and send activation failure information to the target user terminal.

In one embodiment, the request module 300 is also used to enable the target user terminal to enter the security verification method selection page based on the click operation, determine the target verification method from the candidate verification methods in the security verification selection page, obtain the security verification code corresponding to the target verification method, and generate the update request based on the security verification code.

In one embodiment, the update module 302 is also used to, when the target verification method is the first candidate verification method, enable the server of the security verification system corresponding to the first candidate verification method to receive the security verification code sent by the target user terminal, and obtain the verification reference code corresponding to the target user identifier, and when the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition; when the target verification method is the second candidate verification method, enable the server of the security verification system corresponding to the second candidate verification method to receive the security verification code sent by the target user terminal, and obtain the verification reference code corresponding to the preset hardware device identifier, and when the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition; the preset hardware device corresponding to the preset hardware device identifier is connected to the target user terminal via a data line, and both correspond to the target user identifier.

Each module in the above digital certificate update device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module.

In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG4. The computer device includes a processor, a memory, an input/output interface (Input/Output, referred to as I/O) and a communication interface. The processor, the memory and the input/output interface are connected through a system bus, and the communication interface is connected to the system bus through the input/output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data related to the execution process. The input/output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a digital certificate update method is implemented.

In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG5. The computer device includes a processor, a memory, an input/output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input/output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input/output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input/output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner may be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a digital certificate update method is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

Those skilled in the art will understand that the structures shown in FIGS. 4 and 5 are merely block diagrams of partial structures related to the scheme of the present application, and do not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device may include more or fewer components than those shown in the figures, or combine certain components, or have a different arrangement of components.

In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

In one embodiment, a computer-readable storage medium is provided, storing a computer program, which implements the steps in the above method embodiments when executed by a processor.

In one embodiment, a computer program product or computer program is provided, the computer program product or computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the steps in the above-mentioned method embodiments.

It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims (10)

1. A method for updating a digital certificate, characterized in that the method comprises: If it is detected that the SIM shield corresponding to the target user identity is expired, the SIM shield expiration information is sent to the target user terminal corresponding to the target user identity, so that the target user terminal displays an update button on the update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code; receiving an update request sent by the target user terminal, obtaining the security verification code from the update request, obtaining SIM shield association information corresponding to the target user identifier when the security verification code satisfies a security verification condition, generating an updated SIM shield certificate based on the SIM shield association information, and sending the target user identifier and the SIM shield certificate identifier corresponding to the updated SIM shield certificate to a server corresponding to the third-party system; So that the server corresponding to the third-party system sends the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier; Receive a certificate feedback result sent by the server corresponding to the third-party system, where the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, set the status of the SIM shield certificate to an activated status, and complete the operation corresponding to the update request. 2. The method according to claim 1, characterized in that the method further comprises: If it is detected that the SIM shield corresponding to the target user identity has not expired, the update button is shielded. 3. The method according to claim 1, wherein the step of causing the target user terminal to display an update button on an update page based on the SIM shield expiration information and generating an update request based on a click operation on the update button comprises: So that the target user terminal enters the security verification method selection page based on the click operation, determines the target verification method from the candidate verification methods in the security verification selection page, obtains the security verification code corresponding to the target verification method, and generates the update request based on the security verification code. 4. The method according to claim 3, characterized in that the candidate verification methods include a first candidate verification method and a second candidate verification method, and when the security verification code satisfies the security verification condition, the method includes: When the target verification method is the first candidate verification method, the server of the security verification system corresponding to the first candidate verification method receives the security verification code sent by the target user terminal, obtains the verification reference code corresponding to the target user identifier, and when the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition; When the target verification method is the second candidate verification method, the server of the security verification system corresponding to the second candidate verification method receives the security verification code sent by the target user terminal, and obtains the verification reference code corresponding to the preset hardware device identifier. When the verification reference code is consistent with the security verification code, the security verification code satisfies the security verification condition; the preset hardware device corresponding to the preset hardware device identifier is connected to the target user terminal via a data cable, and both correspond to the target user identifier. 5. The method according to claim 1, characterized in that after receiving the certificate feedback result sent by the server corresponding to the third-party system, it also includes: When the certificate feedback result is an unsuccessful state, the state of the SIM shield certificate corresponding to the target user identity is set to an unactivated state, and an activation failure message is sent to the target user terminal. 6. A digital certificate updating device, characterized in that the device comprises: A request module, configured to send SIM shield expiration information to a target user terminal corresponding to the target user identity if it is detected that the SIM shield corresponding to the target user identity is expired, so that the target user terminal displays an update button on an update page based on the SIM shield expiration information, and generates an update request based on a click operation on the update button, wherein the update request carries a security verification code; an update module, configured to receive an update request sent by the target user terminal, obtain the security verification code from the update request, obtain the SIM shield association information corresponding to the target user identifier when the security verification code satisfies the security verification condition, generate an updated SIM shield certificate based on the SIM shield association information, and send the target user identifier and the SIM shield certificate identifier corresponding to the updated SIM shield certificate to a server corresponding to the third-party system; A sending module, used to enable the server corresponding to the third-party system to send the SIM shield certificate corresponding to the SIM shield certificate identifier to the SIM card corresponding to the target user identifier; An activation module is used to receive a certificate feedback result sent by a server corresponding to the third-party system, wherein the certificate feedback result is used to characterize the download status of the SIM card for the SIM shield certificate. When the certificate feedback result is a success status, the status of the SIM shield certificate is set to an activated status to complete the operation corresponding to the update request. 7. The device according to claim 6, characterized in that the device comprises a shielding module, which is used to shield the update button if it is detected that the SIM shield corresponding to the target user identity is not expired. 8. The device according to claim 6 is characterized in that the device includes an unactivated module, which is used to set the state of the SIM shield certificate corresponding to the target user identity to an unactivated state when the certificate feedback result is an unsuccessful state, and send activation failure information to the target user terminal. 9. A computer device, comprising a memory and a processor, wherein the memory stores a computer program, wherein the processor implements the steps of the method according to any one of claims 1 to 5 when executing the computer program. 10. A computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented.