公开(公告)号：US20040093499A1

公开(公告)日：2004-05-13

申请号：US10659796

申请日：2003-09-11

Applicant: France Telecom

Inventor： David Arditi ,  Laurent Frisch ,  Dimitri Mouton

IPC: H04L009/00

CPC classification number: H04L9/3247 ,  H04L9/3263 ,  H04L9/3271 ,  H04L9/3297 ,  H04L2209/68 ,  H04L2209/80

Abstract: In order to apply an electronic signature from a client station having authentication resources at a server, the following steps are carried out: the client station is authenticated at the server, thus establishing an authenticated communication channel; a private key/public key pair is generated at the client station; a signature certificate request generated by means of at least the public key is transmitted from the client station to the server via the authenticated channel; a signature certificate obtained in response to the request is returned via the authenticated channel; this certificate is verified at the client station; an electronic signature is calculated at the client station by means of the private key, after which this private key is destroyed; and the calculated signature is formatted with the aid of the signature certificate received via the authenticated channel.

Abstract translation: 为了从具有服务器认证资源的客户站应用电子签名，执行以下步骤：在服务器处认证客户端站，从而建立认证通信信道; 在客户端生成私钥/公钥对; 至少通过公钥生成的签名证书请求经由认证信道从客户端发送到服务器; 通过认证通道返回响应请求而获得的签名证书; 该证书在客户站进行验证; 在客户端通过私钥计算电子签名，之后该私钥被销毁; 并借助于通过认证信道接收的签名证书格式化计算出的签名。