[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

CN113051539B - Method and device for calling digital certificate - Google Patents

Method and device for calling digital certificate Download PDF

Info

Publication number
CN113051539B
CN113051539B CN201911366459.2A CN201911366459A CN113051539B CN 113051539 B CN113051539 B CN 113051539B CN 201911366459 A CN201911366459 A CN 201911366459A CN 113051539 B CN113051539 B CN 113051539B
Authority
CN
China
Prior art keywords
equipment
tax
information
request
server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201911366459.2A
Other languages
Chinese (zh)
Other versions
CN113051539A (en
Inventor
石琛
马雁
张平
李继
刘畅
周磊
赵鑫
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Aisino Corp
Original Assignee
Aisino Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Aisino Corp filed Critical Aisino Corp
Priority to CN201911366459.2A priority Critical patent/CN113051539B/en
Publication of CN113051539A publication Critical patent/CN113051539A/en
Application granted granted Critical
Publication of CN113051539B publication Critical patent/CN113051539B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/33User authentication using certificates
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/34User authentication involving the use of external additional devices, e.g. dongles or smart cards

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

The invention provides a method and a device for calling a digital certificate, which are used for solving the problem of high cost for maintaining server equipment caused by adopting a soft certificate mode in the prior art. The method is applied to a server and comprises the following steps: receiving a first request, wherein the first request is used for requesting tax information from a service platform for providing tax service; the first request carries the tax number of the user corresponding to the tax information; determining target tax control equipment according to the tax number carried in the first request; the target tax control equipment stores a digital certificate of a user; sending a second request to the terminal equipment, wherein the terminal equipment is coupled with the target tax control equipment, and the second request is used for requesting to acquire verification information for verifying the identity of the user; receiving verification information sent by terminal equipment, and requesting tax information from a service platform according to the verification information; wherein the authentication information is generated based on a digital certificate of the user.

Description

Method and device for calling digital certificate
Technical Field
The invention relates to the field of tax, in particular to a method and a device for calling a digital certificate.
Background
The entry data in the related platform based on the tax office side provides entry invoice service for enterprises, and identity authentication is needed when the related platform of the tax office side operates in order to ensure the security of the entry data.
At present, a digital certificate used for identity verification is usually stored in a special server device, such as a signature verification server, that is, the digital certificate is centrally managed by the special server device in a "soft certificate" mode, and the corresponding digital certificate needs to be downloaded from the server device during verification, so that the server device needs to be maintained in such a mode, the maintenance workload is large, and the cost is high.
Disclosure of Invention
The invention provides a method and a device for calling a digital certificate, which are used for solving the problem of high cost for maintaining server equipment caused by adopting a soft certificate mode in the prior art.
In a first aspect, an embodiment of the present invention provides a method for invoking a digital certificate, which is applied to a server, and includes:
Receiving a first request, wherein the first request is used for requesting tax information from a service platform for providing tax service; the first request carries the tax number of the user corresponding to the tax information;
determining target tax control equipment according to the tax number carried in the first request; the target tax control equipment stores a digital certificate of the user;
Sending a second request to a terminal device, wherein the terminal device is coupled with the target tax control device, and the second request is used for requesting to acquire verification information for verifying the identity of the user;
receiving verification information sent by the terminal equipment, and requesting the tax information from the service platform according to the verification information; wherein the authentication information is generated based on a digital certificate of the user.
In an alternative implementation, the method further includes:
When the terminal equipment is determined to be coupled with the target tax control equipment, establishing a Transmission Control Protocol (TCP) long connection with the terminal equipment;
the sending the second request to the terminal device includes:
and sending a second request to the terminal equipment through the TCP long connection.
In an optional implementation manner, the server stores equipment information of at least one tax control equipment, wherein the equipment information comprises tax numbers and equipment state marks of users corresponding to the tax control equipment, and the equipment state marks are insertion marks or removal marks;
According to the tax number carried in the first request, determining a target tax control device comprises:
And when the equipment state mark in the equipment information corresponding to the tax number carried in the first request is determined to be the insertion mark, determining the tax control equipment indicated by the tax number carried in the first request as target tax control equipment.
In an alternative implementation, the server is a proxy server;
the step of requesting the tax information from the service platform according to the verification information comprises the following steps:
The verification information is sent to the service platform, and a token sent by the service platform when the user identity is verified to pass according to the verification information is received;
And sending the token and the first request to a cloud server to request the tax information from the service platform through the cloud server.
In a second aspect, an embodiment of the present invention provides a method for invoking a digital certificate, applied to a terminal device, where the method includes:
receiving a second request sent by a server in the process that a user requests tax information from a service platform for providing tax service; the second request is used for requesting to acquire verification information for verifying the identity of the user;
And sending the verification information to the server, wherein the verification information is generated based on the digital certificate of the user, and the digital certificate of the user is stored in a tax control device coupled with the terminal device.
In an alternative implementation, the method further includes: when the terminal equipment is coupled with the target tax control equipment, a Transmission Control Protocol (TCP) long connection is established with the server;
the sending the verification information to the server includes:
And sending the verification information to the server through the TCP long connection.
In an alternative implementation, the method further includes:
Saving equipment information of tax control equipment coupled with the terminal equipment to the server; the device information includes a device status flag, the device status flag being an insertion flag;
And when the fact that the coupling between the tax control equipment and the terminal equipment is disconnected is monitored, informing the server to update the equipment information of the tax control equipment, wherein the equipment state mark in the updated equipment information is a removal mark.
In a third aspect, an embodiment of the present invention provides a device for invoking a digital certificate, which is disposed in a server, including:
The receiving module is used for receiving a first request, wherein the first request is used for requesting tax information from a service platform for providing tax service; the first request carries the tax number of the user corresponding to the tax information;
The determining module is used for determining target tax control equipment according to the tax number carried in the first request; the target tax control equipment stores a digital certificate of the user;
the request module is used for sending a second request to the terminal equipment, the terminal equipment is coupled with the target tax control equipment, and the second request is used for requesting to acquire verification information for verifying the identity of the user;
the receiving module is further used for receiving the verification information sent by the terminal equipment;
the request module is further used for requesting the tax information from the service platform according to the verification information; wherein the authentication information is generated based on a digital certificate of the user.
In an alternative implementation, the apparatus further comprises a connection module;
the determining module is further used for determining that the terminal equipment is coupled with the target tax control equipment;
the connection module is used for establishing a Transmission Control Protocol (TCP) long connection with the terminal equipment when the terminal equipment is coupled with the target tax control equipment;
the request module is specifically configured to send a second request to a terminal device through the TCP long connection.
In an optional implementation manner, the server stores equipment information of at least one tax control equipment, wherein the equipment information comprises tax numbers and equipment state marks of users corresponding to the tax control equipment, and the equipment state marks are insertion marks or removal marks;
the determining module is specifically configured to determine, when the device status flag in the device information corresponding to the tax number carried in the first request is an insertion flag, a tax control device indicated by the tax number carried in the first request as a target tax control device.
In an alternative implementation, the server is a proxy server;
The request module is specifically configured to:
The verification information is sent to the service platform, and a token sent by the service platform when the user identity is verified to pass according to the verification information is received;
And sending the token and the first request to a cloud server to request the tax information from the service platform through the cloud server.
In a fourth aspect, an embodiment of the present invention provides a device for invoking a digital certificate, provided in a terminal device, where the device includes:
The receiving module is used for receiving a second request sent by the server in the process that the user requests tax information from the service platform for providing tax service; the second request is used for requesting to acquire verification information for verifying the identity of the user;
And the sending module is used for sending the verification information to the server, wherein the verification information is generated based on the digital certificate of the user, and the digital certificate of the user is stored in the tax control equipment coupled with the terminal equipment.
In an alternative implementation, the apparatus further comprises a connection module;
the connection module is used for establishing a Transmission Control Protocol (TCP) long connection with the server when the terminal equipment is coupled with the target tax control equipment;
The sending module is specifically configured to send the verification information to the server through the TCP long connection.
In an alternative implementation, the apparatus further comprises a monitoring module;
The sending module is further used for storing equipment information of the tax control equipment coupled with the terminal equipment to the server; the device information includes a device status flag, the device status flag being an insertion flag;
The monitoring module is also used for monitoring the coupling disconnection between the tax control equipment and the terminal equipment;
the sending module is further configured to notify the server to update the device information of the tax control device when the coupling between the tax control device and the terminal device is disconnected, where the device state flag in the updated device information is a removal flag.
In a fifth aspect, an embodiment of the present invention provides an electronic device, including:
A memory and a processor;
A memory for storing program instructions;
and a processor, configured to invoke program instructions stored in the memory, and execute the method according to any implementation manner of the first aspect or the method according to any implementation manner of the second aspect according to the obtained program.
In a sixth aspect, embodiments of the present invention provide a computer readable storage medium storing computer instructions that, when run on a computer, cause the computer to perform any one of the implementations of the first aspect or any one of the implementations of the second aspect.
In the embodiment of the invention, the tax control equipment storing the digital certificate of the user and the terminal equipment currently coupled with the tax control equipment are determined according to the tax number of the user carried in the first request, and verification information generated based on the digital certificate is sent and acquired to the terminal equipment for identity verification on a service platform. When the user to be authenticated is determined, the terminal equipment where the tax control equipment is located requests to acquire the authentication information generated based on the digital certificate, so that the method is suitable for the situation that the number of enterprise users is large, the special server equipment is not required to store and manage the digital certificates corresponding to all the enterprise users, and the maintenance workload and hardware cost of maintaining the server equipment can be reduced.
Drawings
Fig. 1 is a schematic structural diagram of a digital certificate invoking system according to an embodiment of the present invention;
fig. 2 is a flow chart of a method for calling a digital certificate according to an embodiment of the present invention;
FIG. 3 is a flowchart illustrating another method for invoking a digital certificate according to an embodiment of the present invention;
FIG. 4 is a schematic diagram of an interaction flow provided in an embodiment of the present invention;
FIG. 5 is a block diagram of a digital certificate calling device according to an embodiment of the present invention;
FIG. 6 is a block diagram illustrating an alternative digital certificate calling device according to an embodiment of the present invention;
fig. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail below with reference to the accompanying drawings, and it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The term "plurality" as used herein means two or more. "and/or", describes an association relationship of an association object, and indicates that there may be three relationships, for example, a and/or B, and may indicate: a exists alone, A and B exist together, and B exists alone. The character "/" generally indicates that the context-dependent object is an "or" relationship. In addition, it should be understood that although the terms first, second, etc. may be used in describing various data in embodiments of the present invention, these data should not be limited to these terms. These terms are only used to distinguish one data element from another.
An entry invoice cloud Service access platform (or entry channel cloud) is used as a public entry SaaS (Software-as-a-Service) access Service, a tax Service providing Service platform (hereinafter referred to as a Service platform) of a tax office is provided, entry invoice services are provided for enterprises based on entry data in the tax office related platform, for example, cloud interface services of 'entry data downloading, checking, authentication and checking' are provided for large enterprises, cloud interface services of 'entry data downloading, checking' are provided for small and medium enterprises, and the like. In order to ensure the safety of the incoming data, identity authentication is required during the operation of the relevant platform of the tax office.
At present, digital certificates (CERTIFICATE AUTHORITY, CA) of enterprise users are filled in a dedicated server device such as a signature verification server, the dedicated server device centrally manages the digital certificates, namely, a soft certificate mode is adopted, corresponding digital certificates are downloaded from the server device when an entry channel cloud docking service platform is interacted, and verification information is generated for the service platform to perform identity verification. Such a method requires maintenance of the server device, and is large in maintenance workload, not suitable for use in the order of millions of users, and high in hardware cost.
Based on the above, the embodiment of the invention provides a method and a device for calling a digital certificate, which are used for solving the problem of high cost for maintaining server equipment caused by adopting a soft certificate mode in the prior art. The method, the device and the system are based on the same inventive concept, and because the principles of solving the problems by the method, the device and the system are similar, the implementation of the method, the device and the system can be mutually referred to, and the repetition is not repeated.
For easy understanding, the embodiment of the invention first describes a digital certificate calling system.
Referring to fig. 1, an embodiment of the present invention provides a system 100 for invoking digital certificates, including a server 101 and one or more terminal devices, where fig. 1 illustrates one terminal device 102.
The server 101 is configured to request, from the terminal device 102 coupled with the tax control device 103, acquisition of authentication information generated based on the digital certificate in the tax control device 103, so as to complete the foregoing authentication process when the service platform 104 operates.
The verification information comprises an encryption character string corresponding to the digital certificate, which changes according to a preset period, has certain timeliness, ensures that the obtained verification information can be used for verifying the identity of the user only in the validity period, and avoids response business risks caused by the fact that the verification information is always valid. In the implementation, the verification information can be generated and updated by the tax control equipment based on the digital certificate, and can be read and called by the terminal equipment coupled with the tax control equipment.
The terminal device 102 is configured to obtain, in response to a request from the server 101, authentication information generated based on the digital certificate through the tax control device coupled to the terminal device, and send the authentication information to the server 101.
The manner in which the terminal device 102 is coupled to the tax control device may be through bluetooth, wireless, or an external device interface, such as when the tax control device is a USB device, the terminal device may be inserted into the terminal device based on the USB interface on the terminal device to implement coupling between the terminal device and the target tax control device, and specifically, the tax control device may be a digital certificate for storing the identity of the user, such as a gold tax disc, a gold tax disc-M, a tax disc, a haitaikey, a text tripod creating USB KEY, a holding USB KEY, or the like.
In the embodiment of the present invention, the server 101 determines to request the terminal device 102 coupled with the tax control device 103 for obtaining the authentication information, so as to perform the authentication on the service platform 104. The digital certificates corresponding to all enterprise users are not required to be stored and managed by the special server equipment, the maintenance workload and hardware cost of maintaining the server equipment can be reduced, and the method is suitable for the situation that the number of enterprise users is large. Furthermore, to facilitate understanding of the interactions between the foregoing devices, a tax control device 103 and a service platform 104 are also illustrated in fig. 1.
In an optional implementation manner, the server may be a cloud server indicating the aforementioned entry channel cloud, and based on the acquired verification information, complete identity verification on the service platform to obtain a token (token) fed back by the service platform, so that the service platform provides an entry invoice service for the user; in another alternative, the server may be a proxy server of the aforementioned inbound channel cloud, which may be referred to as a channel proxy. The channel proxy completes identity verification on the service platform based on the acquired verification information to obtain a token fed back by the service platform, and sends the token to the entry channel cloud to complete the butt joint between the entry channel cloud and the service platform. In the subsequent business interaction, the channel proxy is used as an intermediate interface between the entry channel cloud and the user interaction, namely, the channel proxy receives a business request initiated by the user and sends the business request to the entry channel cloud, and the entry channel cloud returns an execution result to the channel proxy after carrying out corresponding business interaction with the service platform based on the business request and returns the execution result to the user through the channel proxy.
In an alternative embodiment, the communication between the server and the one or more terminal devices is based on a transmission control protocol (TCP, transmission Control Protocol) long connection. In this embodiment, when the terminal device determines that the terminal device is coupled with the tax control device, the request of the long TCP connection is initiated to the server, and the server accepts the request of the long TCP connection to establish a secure and stable communication connection mechanism, i.e., long TCP connection with the terminal device. Based on the keep-alive function of the TCP long connection, the connection is not actively closed after being established, and interaction between the two parties can continue to use the connection within the protection timing; in the implementation, the server may further send a detection message segment to the terminal device when there is no data interaction between the terminal device and the server within a preset period of time, for example, two hours, so as to detect the state of the terminal device to determine whether the TCP long connection is closed.
In an alternative embodiment, an executable program exe (hereinafter, simply referred to as a management program) for managing the tax control apparatus may be installed on the terminal apparatus, and the management program is responsible for listening to a request sent by the server to acquire authentication information generated based on the digital certificate in the tax control apparatus, and saving the apparatus information of the tax control apparatus to the server and notifying the server to update the apparatus information of the tax control apparatus saved therein. According to the embodiment of the invention, the management program is installed, and verification information is acquired in a mode that the dll plug-in is not called by the browser, so that the situation of acquisition operation errors caused by incompatibility of the dll plug-in by the browser can be avoided.
When the method is implemented, before data such as equipment information and the like are transmitted between the management program and the server, the client certificate and the channel proxy server certificate are adopted to carry out identity authentication, and the method can be realized by calling a digital certificate interface. After the identity authentication is completed, a secure channel between the management program and the server is established, and the management program transmits data such as equipment information and the like to the server through the secure channel in an xml mode.
Specifically, taking the manner that the tax control equipment is inserted into the USB interface of the terminal equipment as an example, the management program can automatically detect whether the tax control equipment is inserted into the terminal equipment or not during running. When the insertion of the tax control equipment is detected, equipment information of the tax control equipment is obtained, and the equipment information (equipment number, tax number, network connection or not and equipment insertion state) and related network information (mode setting, protocol type, remote access password setting or not, tax control equipment password setting or not, channel proxy IP, channel proxy port, remote equipment IP and remote equipment port) are displayed on a management program interface. Transmitting the equipment information (equipment number, tax number, protocol type, equipment insertion mark and network password) of the tax control equipment inserted into the terminal equipment to a server through a secure channel for storage; when the tax control equipment on the terminal equipment is detected to be removed, the equipment number, tax number and equipment removal mark of the tax control equipment are sent to a server through a safety channel, so that the server updates the stored equipment information of the tax control equipment, namely, the state mark in the equipment information is changed into the removal mark; when the fact that the tax control equipment is inserted into the terminal equipment but the network connection state is disconnected is detected, the network connection is retried, equipment information (equipment number, tax number, protocol type, equipment insertion mark and network password) of the tax control equipment is sent to the server when the connection is successful, and if the retry is failed for a plurality of times, error information for prompting the network connection failure is output.
In specific implementation, the version number of the management program can be configured in the server, and the version number can be uploaded to the server periodically when the management program runs, so that the server can perform version verification and update the management program in time. When the server determines that the version number of the current configuration is smaller than or equal to the version number uploaded by the management program, the server does not operate; when the version number of the current configuration is determined to be greater than the version number uploaded by the management program, the download address of the upgrade management program is returned to the management program, so that the installation download address of the management program obtains the installation upgrade package, and the upgrade program is started to upgrade the version of the management program when the download is successful.
Further, referring to fig. 2, an embodiment of the present invention provides a method for invoking a digital certificate, which is applied to the foregoing server 101, and includes:
step S201, receiving a first request, wherein the first request is used for requesting tax information from a service platform for providing tax service; the first request carries the tax number of the user corresponding to the tax information.
The tax number is a tax payer identification number and is used for indicating the enterprise tax payer, namely the user. In particular implementations, the first request may be a request triggered by a user through a browser application associated with the server.
Step S202, determining target tax control equipment according to tax numbers carried in the first request; the target tax control equipment stores the digital certificate of the user.
Step S203, a second request is sent to the terminal device, the terminal device is coupled with the target tax control device, and the second request is used for requesting to acquire verification information for verifying the identity of the user.
Step S204, receiving verification information sent by terminal equipment, and requesting tax information from a service platform according to the verification information; wherein the authentication information is generated based on a digital certificate of the user.
In the embodiment of the invention, the tax control equipment storing the digital certificate of the user and the terminal equipment currently coupled with the tax control equipment are determined according to the tax number of the user carried in the first request, and verification information generated based on the digital certificate is sent and acquired to the terminal equipment for identity verification on a service platform. When the user to be authenticated is determined, the terminal equipment where the tax control equipment is located requests to acquire the authentication information generated based on the digital certificate, so that the method is suitable for the situation that the number of enterprise users is large, the special server equipment is not required to store and manage the digital certificates corresponding to all the enterprise users, and the maintenance workload and hardware cost of maintaining the server equipment can be reduced.
In an alternative embodiment, the foregoing method further comprises: when the terminal equipment is determined to be coupled with the target tax control equipment, establishing a Transmission Control Protocol (TCP) long connection with the terminal equipment; based on this, the sending of the second request to the terminal device may be implemented with reference to the following: and sending a second request to the terminal equipment through the TCP long connection.
In an optional implementation manner, the server stores equipment information of at least one tax control equipment, wherein the equipment information comprises tax numbers and equipment state marks of users corresponding to the tax control equipment, and the equipment state marks are insertion marks or removal marks;
according to the tax number carried in the first request, determining the target tax control equipment comprises the following steps:
and when the equipment state mark in the equipment information corresponding to the tax number carried in the first request is determined to be the insertion mark, the tax control equipment indicated by the tax number carried in the first request is determined to be the target tax control equipment.
In an alternative embodiment, the server is a proxy server, and the server is associated with a cloud server that interacts with the service platform.
The aforementioned request for tax information from the service platform according to the verification information may be implemented with reference to the following manner:
(1) Transmitting the verification information to a service platform, and receiving a token transmitted by the service platform when the user identity passes through verification according to the verification information;
(2) And sending the token and the first request to the cloud server to request the tax information from the service platform through the cloud server.
In the specific implementation, the proxy server and the terminal equipment can be uniformly arranged in an enterprise intranet, the proxy server is communicated with the terminal equipment, and then the proxy server and the service platform are interacted to complete identity verification to obtain the token, and then the token is sent to the cloud server, so that the possible abnormal risk of the terminal equipment after the terminal equipment directly interacts with the cloud server across multiple networks can be avoided.
Further, referring to fig. 3, the embodiment of the present invention further provides another method for invoking a digital certificate, which is applied to the foregoing terminal device 102, and the method includes:
Step S301, receiving a second request sent by a server in the process that a user requests tax information from a service platform providing tax service; the second request is for requesting acquisition of authentication information for authenticating the identity of the user.
Step S302, transmitting authentication information to the server, the authentication information being generated based on a digital certificate of the user, the digital certificate of the user being stored in a tax control device coupled to the terminal device.
In the specific implementation, in order to ensure the safety of data transmission, corresponding encryption algorithms can be configured on two sides of the terminal equipment and the server; after the terminal equipment acquires the verification information, the verification information can be encrypted based on a configured encryption algorithm and sent to a server; the server decrypts the received encrypted verification information, and further obtains the verification information. In particular, the foregoing encryption algorithm may be a symmetric encryption algorithm, such as the SM4 algorithm.
In the embodiment of the invention, when receiving a second request sent by a server to acquire verification information for verifying the identity of a user in the process that a user requests tax information from a service platform providing tax service, terminal equipment sends the verification information generated based on a digital certificate in tax control equipment coupled with the terminal equipment to the server. The tax control equipment storing the digital certificates of the users is coupled with the terminal equipment, and the server only needs to initiate a request to the corresponding terminal equipment to call when the verification information generated based on the digital certificates is needed, so that the special server equipment is not needed to store and manage the digital certificates corresponding to all enterprise users, the maintenance workload and hardware cost of maintaining the server equipment can be reduced, and the method is suitable for the situation that the number of the enterprise users is large.
In an alternative embodiment, the method further comprises: when the terminal equipment is coupled with the target tax control equipment, a Transmission Control Protocol (TCP) long connection is established with a server; based on this, in an alternative embodiment, verifying information to a server includes: sending verification information to a server through TCP long connection; in another alternative embodiment, verifying information to a server includes: encrypting the verification information; and sending the encrypted verification information to the server through the TCP long connection.
In an alternative embodiment, the method further comprises:
(1) Saving equipment information of tax control equipment coupled with the terminal equipment to a server; the device information includes a device status flag, the device status flag being an insertion flag;
(2) When the coupling disconnection between the tax control equipment and the terminal equipment is monitored, the server is informed to update the equipment information of the tax control equipment, and the equipment state mark in the updated equipment information is the removal mark.
For easy understanding, referring to fig. 4, the embodiment of the present invention further provides an interaction flow diagram, which specifically illustrates an interaction process among the terminal device, the proxy server, the cloud server and the service platform in the above method embodiment. The specific steps are as follows:
In step S401, the terminal device uploads the device information of the tax control device coupled to itself to the proxy server for saving, where the device information includes the tax number of the user of the tax control device.
In step S402, the proxy server receives a first request triggered by the user through the associated browser application, where the first request carries the tax number of the user.
In step S403, the proxy server determines the target tax control device according to the device information corresponding to the tax number.
In step S404, the proxy server sends a second request to the terminal device coupled with the target tax control device, to request the terminal device to send verification information for verifying the identity of the user. In this embodiment, the terminal device in step S101 is shown as being coupled to the target tax control device by way of example, but is not limited to that shown in fig. 4.
In step S405, the terminal device sends verification information generated based on the digital certificate in the self-coupled tax control device to the proxy server.
In step S406, the proxy server performs a user identity verification process on the service platform based on the obtained verification information, and realizes the login of the service platform after the verification is passed.
In step S407, the service platform sends a token to the proxy server after the user authentication is passed.
In step S408, the proxy server sends the received first request and token to the cloud server.
In step S409, the cloud server performs service interaction with the service platform based on the first request and the token.
In step S410, the cloud service sends the processing result corresponding to the first request obtained by interaction with the service platform to the proxy server, so that the proxy server returns the processing result to the user through the associated browser application.
Based on the same inventive concept as the foregoing embodiment of a method for invoking a digital certificate, referring to fig. 5, an embodiment of the present invention provides an apparatus 500 for invoking a digital certificate, where the apparatus 500 is disposed in a server, and includes:
A receiving module 501, configured to receive a first request, where the first request is used to request tax information from a service platform that provides a tax service; the first request carries the tax number of the user corresponding to the tax information;
a determining module 502, configured to determine a target tax control device according to the tax number carried in the first request; the target tax control equipment stores a digital certificate of a user;
A request module 503, configured to send a second request to a terminal device, where the terminal device is coupled to the target tax control device, where the second request is used to request to obtain verification information for verifying the identity of the user;
The receiving module 501 is further configured to receive verification information sent by the terminal device;
the request module 503 is further configured to request tax information from the service platform according to the verification information; wherein the authentication information is generated based on a digital certificate of the user.
In the embodiment of the invention, when receiving a second request sent by a server to acquire verification information for verifying the identity of a user in the process that a user requests tax information from a service platform providing tax service, terminal equipment sends the verification information generated based on a digital certificate in tax control equipment coupled with the terminal equipment to the server. The tax control equipment storing the digital certificates of the users is coupled with the terminal equipment, and the server only needs to initiate a request to the corresponding terminal equipment to call when the verification information generated based on the digital certificates is needed, so that the special server equipment is not needed to store and manage the digital certificates corresponding to all enterprise users, the maintenance workload and hardware cost of maintaining the server equipment can be reduced, and the method is suitable for the situation that the number of the enterprise users is large.
In an alternative embodiment, apparatus 500 further comprises a connection module 504;
the determining module 502 is further configured to determine that the terminal device is coupled to the target tax control device;
a connection module 504, configured to establish a TCP long connection with a terminal device when the terminal device is coupled to a target tax control device;
The request module 503 is specifically configured to send a second request to the terminal device through a TCP long connection.
In an optional implementation manner, the server stores equipment information of at least one tax control equipment, wherein the equipment information comprises tax numbers and equipment state marks of users corresponding to the tax control equipment, and the equipment state marks are insertion marks or removal marks;
the determining module 502 is specifically configured to determine, when the device status flag in the device information corresponding to the tax number carried in the first request is an insertion flag, a tax control device indicated by the tax number carried in the first request as a target tax control device.
In an alternative embodiment, the server is a proxy server;
The request module 503 is specifically configured to:
Transmitting the verification information to a service platform, and receiving a token transmitted by the service platform when the user identity passes through verification according to the verification information;
The token and the first request are sent to a cloud server to request tax information from the service platform through the cloud server.
Based on the same inventive concept as the foregoing another digital certificate invoking method embodiment, referring to fig. 6, another digital certificate invoking apparatus 600 is provided in an embodiment of the present invention, where the apparatus 600 is disposed in a terminal device, and includes:
a receiving module 601, configured to receive a second request sent by a server in a process that a user requests tax information from a service platform that provides tax service; the second request is used for requesting to acquire verification information for verifying the identity of the user;
a sending module 602, configured to send verification information to the server, where the verification information is generated based on a digital certificate of the user, and the digital certificate of the user is stored in a tax control device coupled to the terminal device.
In the embodiment of the invention, the corresponding user is determined according to the tax information indicated by the first request, the tax control equipment of the user and the terminal equipment currently coupled with the tax control equipment are determined, and an acquisition request is sent to the terminal equipment to acquire the digital certificate in the tax control equipment for identity verification on the service platform. When the user to be authenticated is determined, the terminal equipment where the tax control equipment is located is requested to acquire the digital certificate, so that the method is suitable for the situation that the number of enterprise users is large, the special server equipment is not required to store and manage the digital certificates corresponding to all enterprise users, and the maintenance workload and hardware cost of maintaining the server equipment can be reduced.
In an alternative embodiment, the apparatus 600 further comprises a connection module 603;
A connection module 603, configured to establish a TCP long connection with the server when the terminal device is coupled to the target tax control device;
The sending module 602 is specifically configured to send verification information to the server through a TCP long connection.
In an alternative embodiment, apparatus 600 further comprises a monitoring module 604;
The sending module 602 is further configured to store device information of the tax control device coupled to the terminal device to a server; the device information includes a device status flag, the device status flag being an insertion flag;
the monitoring module 604 is used for monitoring the coupling disconnection between the tax control equipment and the terminal equipment;
the sending module 602 is further configured to notify the server to update the device information of the tax control device when the coupling between the tax control device and the terminal device is disconnected, where the device status flag in the updated device information is a removal flag.
Corresponding to the above method, an embodiment of the present invention further provides an electronic device, as shown in fig. 7, including:
A communication interface 701, a memory 702, and a processor 703;
Wherein the processor 703 communicates with other devices via the communication interface 701; a memory 702 for storing program instructions; a processor 703 for calling the program instructions stored in the memory 702, and executing the method executed by the server or the method executed by the terminal device in the above embodiment according to the obtained program.
The specific connection medium between the communication interface 701, the memory 702, and the processor 703 is not limited in the embodiment of the present application, and the bus may be classified into an address bus, a data bus, a control bus, and the like.
In the embodiment of the present application, the processor may be a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the methods, steps and logic blocks disclosed in the embodiments of the present application. The general purpose processor may be a microprocessor or any conventional processor or the like. The steps of a method disclosed in connection with the embodiments of the present application may be embodied directly in a hardware processor for execution, or in a combination of hardware and software modules in the processor for execution.
In the embodiment of the present application, the memory may be a nonvolatile memory, such as a hard disk (HARD DISK DRIVE, HDD) or a solid-state disk (SSD), or may be a volatile memory (RAM). The memory may also be any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer, but is not limited to such. The memory in embodiments of the present application may also be circuitry or any other device capable of performing memory functions for storing program instructions and/or data.
Further, embodiments of the present invention also provide a computer-readable storage medium storing computer instructions that, when run on a computer, cause the computer to perform the above-described method.
It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present invention have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. It is therefore intended that the following claims be interpreted as including the preferred embodiments and all such alterations and modifications as fall within the scope of the invention.
It will be apparent to those skilled in the art that various modifications and variations can be made to the present invention without departing from the scope of the invention. Thus, it is intended that the present invention also include such modifications and alterations insofar as they come within the scope of the appended claims or the equivalents thereof.

Claims (14)

1. A method for invoking a digital certificate, applied to a server, comprising:
Receiving a first request, wherein the first request is used for requesting tax information from a service platform for providing tax service; the first request carries the tax number of the user corresponding to the tax information; the server stores equipment information of at least one tax control device, wherein the equipment information comprises tax numbers of users corresponding to the tax control device and equipment state marks, and the equipment state marks are insertion marks or removal marks;
When the equipment state mark in the equipment information corresponding to the tax number carried in the first request is determined to be an insertion mark, the tax control equipment indicated by the tax number carried in the first request is determined to be target tax control equipment; the target tax control equipment stores a digital certificate of the user;
Sending a second request to a terminal device, wherein the terminal device is coupled with the target tax control device, and the second request is used for requesting to acquire verification information for verifying the identity of the user;
Receiving verification information sent by the terminal equipment, and requesting the tax information from the service platform according to the verification information; wherein the verification information is acquired by a management program installed on the terminal device after the second request is detected; the management program is used for storing the equipment information of the tax control equipment to the server and notifying the server to update the equipment information of the tax control equipment stored in the server; the authentication information is generated based on the digital certificate of the user, and the authentication information comprises an encryption character string corresponding to the digital certificate, which changes according to a preset period.
2. The method of claim 1, wherein the method further comprises:
When the terminal equipment is determined to be coupled with the target tax control equipment, establishing a Transmission Control Protocol (TCP) long connection with the terminal equipment;
the sending the second request to the terminal device includes:
and sending a second request to the terminal equipment through the TCP long connection.
3. The method of any of claims 1-2, wherein the server is a proxy server;
the step of requesting the tax information from the service platform according to the verification information comprises the following steps:
The verification information is sent to the service platform, and a token sent by the service platform when the user identity is verified to pass according to the verification information is received;
And sending the token and the first request to a cloud server to request the tax information from the service platform through the cloud server.
4. A method for invoking a digital certificate, applied to a terminal device, the method comprising:
Receiving a second request sent by a server in the process that a user requests tax information from a service platform for providing tax service; the server stores equipment information of at least one tax control device, wherein the equipment information comprises tax numbers of users corresponding to the tax control device and equipment state marks, and the equipment state marks are insertion marks or removal marks; the second request is sent after the server receives the first request and determines that the tax control equipment indicated by the tax number carried in the first request is the target tax control equipment when the equipment state mark in the equipment information corresponding to the tax number carried in the first request is the insertion mark; the target tax control equipment stores a digital certificate of the user; the second request is used for requesting to acquire verification information for verifying the identity of the user;
Saving equipment information of the target tax control equipment coupled with the terminal equipment to the server; the equipment information of the target tax control equipment comprises equipment state marks, wherein the equipment state marks of the target tax control equipment are insertion marks;
transmitting the authentication information to the server, wherein the authentication information is acquired by a management program installed on the terminal device after the second request is detected; the management program is used for storing the equipment information of the tax control equipment to the server and notifying the server to update the equipment information of the tax control equipment stored in the server; the verification information is generated based on the digital certificate of the user, and comprises an encryption character string corresponding to the digital certificate, which changes according to a preset period; the digital certificate of the user is stored in a target tax control device coupled to the terminal device.
5. The method of claim 4, wherein the method further comprises: when the terminal equipment is coupled with the target tax control equipment, a Transmission Control Protocol (TCP) long connection is established with the server;
the sending the verification information to the server includes:
And sending the verification information to the server through the TCP long connection.
6. The method of claim 4, wherein the method further comprises: and when the fact that the coupling between the target tax control equipment and the terminal equipment is disconnected is monitored, informing the server to update the equipment information of the target tax control equipment, wherein the equipment state mark in the updated equipment information is a removal mark.
7. A digital certificate invoking device, which is characterized in that the invoking device is arranged on a server and comprises:
The receiving module is used for receiving a first request, wherein the first request is used for requesting tax information from a service platform for providing tax service; the first request carries the tax number of the user corresponding to the tax information; the server stores equipment information of at least one tax control device, wherein the equipment information comprises tax numbers of users corresponding to the tax control device and equipment state marks, and the equipment state marks are insertion marks or removal marks;
The determining module is used for determining that the tax control equipment indicated by the tax number carried in the first request is a target tax control equipment when the equipment state mark in the equipment information corresponding to the tax number carried in the first request is an insertion mark; the target tax control equipment stores a digital certificate of the user;
the request module is used for sending a second request to the terminal equipment, the terminal equipment is coupled with the target tax control equipment, and the second request is used for requesting to acquire verification information for verifying the identity of the user;
the receiving module is further used for receiving the verification information sent by the terminal equipment;
The request module is further used for requesting the tax information from the service platform according to the verification information; wherein the verification information is acquired by a management program installed on the terminal device after the second request is detected; the management program is used for storing the equipment information of the tax control equipment to the server and notifying the server to update the equipment information of the tax control equipment stored in the server; the authentication information is generated based on the digital certificate of the user, and the authentication information comprises an encryption character string corresponding to the digital certificate, which changes according to a preset period.
8. The apparatus of claim 7, wherein the apparatus further comprises a connection module;
the determining module is further used for determining that the terminal equipment is coupled with the target tax control equipment;
the connection module is used for establishing a Transmission Control Protocol (TCP) long connection with the terminal equipment when the terminal equipment is coupled with the target tax control equipment;
the request module is specifically configured to send a second request to a terminal device through the TCP long connection.
9. The apparatus of any of claims 7-8, wherein the server is a proxy server;
The request module is specifically configured to:
The verification information is sent to the service platform, and a token sent by the service platform when the user identity is verified to pass according to the verification information is received;
And sending the token and the first request to a cloud server to request the tax information from the service platform through the cloud server.
10. A digital certificate invoking apparatus, characterized in that it is provided in a terminal device, the apparatus comprising:
The receiving module is used for receiving a second request sent by the server in the process that the user requests tax information from the service platform for providing tax service; the server stores equipment information of at least one tax control device, wherein the equipment information comprises tax numbers of users corresponding to the tax control device and equipment state marks, and the equipment state marks are insertion marks or removal marks; the second request is sent after the server receives the first request and determines that the tax control equipment indicated by the tax number carried in the first request is the target tax control equipment when the equipment state mark in the equipment information corresponding to the tax number carried in the first request is the insertion mark; the target tax control equipment stores a digital certificate of the user; the second request is used for requesting to acquire verification information for verifying the identity of the user;
The sending module is used for storing the equipment information of the target tax control equipment coupled with the terminal equipment to the server; the equipment information of the target tax control equipment comprises equipment state marks, wherein the equipment state marks of the target tax control equipment are insertion marks; transmitting the authentication information to the server, wherein the authentication information is acquired by a management program installed on the terminal device after the second request is detected; the management program is used for storing the equipment information of the tax control equipment to the server and notifying the server to update the equipment information of the tax control equipment stored in the server; the verification information is generated based on the digital certificate of the user, and comprises an encryption character string corresponding to the digital certificate, which changes according to a preset period; the digital certificate of the user is stored in a target tax control device coupled to the terminal device.
11. The apparatus of claim 10, wherein the apparatus further comprises a connection module;
the connection module is used for establishing a Transmission Control Protocol (TCP) long connection with the server when the terminal equipment is coupled with the target tax control equipment;
The sending module is specifically configured to send the verification information to the server through the TCP long connection.
12. The apparatus of claim 10, wherein the apparatus further comprises a monitoring module;
the monitoring module is also used for monitoring the disconnection of the coupling between the target tax control equipment and the terminal equipment;
the sending module is further configured to notify the server to update device information of the target tax control device when coupling between the target tax control device and the terminal device is disconnected, where a device state flag in the updated device information is a removal flag.
13. An electronic device, comprising:
A memory and a processor;
A memory for storing program instructions;
A processor for invoking program instructions stored in the memory and executing the method of any of claims 1-3 or the method of any of claims 4-6 according to the obtained program.
14. A computer readable storage medium storing computer instructions which, when run on a computer, cause the computer to perform the method of any one of claims 1 to 3 or the method of any one of claims 4 to 6.
CN201911366459.2A 2019-12-26 2019-12-26 Method and device for calling digital certificate Active CN113051539B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911366459.2A CN113051539B (en) 2019-12-26 2019-12-26 Method and device for calling digital certificate

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911366459.2A CN113051539B (en) 2019-12-26 2019-12-26 Method and device for calling digital certificate

Publications (2)

Publication Number Publication Date
CN113051539A CN113051539A (en) 2021-06-29
CN113051539B true CN113051539B (en) 2024-07-26

Family

ID=76505366

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911366459.2A Active CN113051539B (en) 2019-12-26 2019-12-26 Method and device for calling digital certificate

Country Status (1)

Country Link
CN (1) CN113051539B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113259493B (en) * 2021-07-07 2021-10-15 深圳高灯计算机科技有限公司 Ukey information acquisition method, device, equipment and storage medium based on Ukey cabinet
CN113781194A (en) * 2021-09-06 2021-12-10 青岛微智慧信息有限公司 Access supervision method and system suitable for flexible employment
CN115037539A (en) * 2022-06-07 2022-09-09 深圳微众信用科技股份有限公司 Invoice inquiry method, device, equipment and storage medium based on tax control equipment

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102479412A (en) * 2010-11-26 2012-05-30 航天信息股份有限公司 Method and system for processing network billing data, tax control device and acceptance server
CN108198064A (en) * 2018-01-25 2018-06-22 深圳微众税银信息服务有限公司 A kind of tax silver interactive service method for supporting and system

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106201525A (en) * 2016-07-15 2016-12-07 浪潮软件集团有限公司 Tax control equipment embedded software design method
CN106504044A (en) * 2016-11-09 2017-03-15 百望金赋科技有限公司 A kind of billing method and system
CN108243220B (en) * 2016-12-26 2021-04-16 航天信息股份有限公司 Tax control server-based invoice issuing method and system supporting multi-type invoice terminal
CN109784030A (en) * 2018-11-30 2019-05-21 畅捷通信息技术股份有限公司 A kind of method and system of CA certificate management

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102479412A (en) * 2010-11-26 2012-05-30 航天信息股份有限公司 Method and system for processing network billing data, tax control device and acceptance server
CN108198064A (en) * 2018-01-25 2018-06-22 深圳微众税银信息服务有限公司 A kind of tax silver interactive service method for supporting and system

Also Published As

Publication number Publication date
CN113051539A (en) 2021-06-29

Similar Documents

Publication Publication Date Title
EP2705642B1 (en) System and method for providing access credentials
CN101258505B (en) Secure software updates
CN109905312B (en) Message pushing method, device and system
CN113051539B (en) Method and device for calling digital certificate
CN113472790B (en) Information transmission method, client and server based on HTTPS protocol
CN110069909B (en) Method and device for login of third-party system without secret
US11902789B2 (en) Cloud controlled secure Bluetooth pairing for network device management
KR20160057828A (en) Method and apparatus for managing an application of a terminal remotely in a wireless communication system
EP3851983B1 (en) Authorization method, auxiliary authorization component, management server and computer readable medium
CN110557255A (en) certificate management method and device
US20220174058A1 (en) Peer-to-peer notification system
CN111585970A (en) Token verification method and device
CN108289074A (en) User account login method and device
US12120522B2 (en) Provision of application level identity
US9723436B2 (en) Mobile device location
CN105721515A (en) Cloud agent device, cloud storage and file transfer method
JP6527576B2 (en) Method, apparatus and system for acquiring local information
US11016746B2 (en) Method and apparatus for remotely updating satellite devices
CN115150162B (en) Root certificate updating method and device
CN111666590A (en) Distributed file secure transmission method, device and system
CN112219416A (en) Techniques for authenticating data transmitted over a cellular network
US10681755B2 (en) Routing method and network entity performing same
US20240031805A1 (en) Download of a subscription profile to a communication device
CN108200046B (en) Registration method and device of terminal equipment, terminal equipment and proxy server
CN105404795B (en) Software installation authority control method and device based on cloud computing

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant