KEY DISTRIBUTION METHOD AND SYSTEM

摘要

A key distribution method and system are provided, and the method includes that: a card issuer management platform generates an initial key of a secondary security domain corresponding to an application provider, imports the initial key and a trusted root public key used for external authentication to the secondary security domain, and sends the information of the secondary security domain and the initial key to an application provider management platform (202); the application provider management platform receives the information of the secondary security domain and the initial key, and selects the secondary security domain of a smart card by a service terminal according to the information of the secondary security domain and the initial key (204); the application provider management platform generates a public key and a private key of the secondary security domain as well as a certificate of the secondary security domain, and encrypts the public key and the private key as well as the certificate and then sends them to the secondary security domain (206). Through the above process, the security of the key distribution for the secondary security domain can be improved.