METHOD AND SYSTEM FOR GENERATING KEY FOR IC CARD

摘要

PROBLEM TO BE SOLVED: To solve the problem that it is impossible to confirm whether or not a key is surely generated in an IC card in the case that the key is generated online for the IC card via a network. SOLUTION: First an IC card stores a secret key SK1 and a public key PK1, stores a public key certificate C generated by a credible 3rd party for the public key PK1, the IC card generates a new secret key SK2 and a new public key PK2 upon the receipt of a key generating command, uses the secret key SK1 corresponding to the public key PK1 of the public key certificate C to provide an electronic signature S to the newly generated public key PK2 and outputs the public key PK2 together with the public key certificate C. Verifying the public key certificate C and the electronic signature S can confirm that the newly generated public key PK2 is generated in the IC card.