KEY DISTRIBUTION METHOD AND SYSTEM

摘要

The present invention discloses a key distribution method and system, said method includes: a Card Issuer Management Platform (CIMP) informs the Slave Security Domain corresponding to the Application Provider of generating the public and private key pair in the smart card, wherein said key pair includes a Public Key and  a Private Key, receives the Public Key returned from the Slave Security Domain, imports one Public Key for trust point for external authentication into the Slave Security Domain, and sends the Slave Security Domain information and the Public Key to the Application Provider Management Platform (APMP); the APMP receives the Slave Security Domain information and the Public Key from the CIMP, and selects the Slave Security Domain of the smart card by the service terminal according to the Slave Security Domain information and the Public Key; the APMP informs the Slave Security Domain to regenerate a Public Key and a Private Key, generates the Slave Security Domain Certificate according to the regenerated Public Key which is returned from the Slave Security Domain, and achieves the Slave Security Domain key distribution by sending the Slave Security Domain Certificate to the Slave Security Domain. The present invention is able to improve the security of the Slave Security Domain key distribution.