Patent ID: 9712326
Date: 2017-07-18
CPC Classifications: H04L

Claim:
1. A method for backing up a private key of an electronic signature token, comprising: sending by a first electronic signature token a private key backup request data packet, wherein the private key backup request data packet comprises a first signature, and the first signature is obtained by signing at least a first indication information using a CA private key, the first indication information recording a primary-backup relationship of the first electronic signature token; verifying by a second electronic signature token the first signature in the private key backup request data packet after receiving the private key backup request data packet; when the first signature passes verification, determining, according to the first indication information, whether the first electronic signature token has a primary-backup relationship with the second electronic signature token; when the first electronic signature token has a primary-backup relationship with the second electronic signature token; sending by the second electronic signature token a private key backup response data packet, wherein the private key backup response data packet comprises a second signature and the encrypted private key of the second electronic signature token, and the second signature is obtained by signing at least a second indication information using the CA private key, the second indication information recording a primary-backup relationship of the second electronic signature token; verifying by the first electronic signature token the second signature in the private key backup response data packet after receiving the private key backup response data packet; when the second signature passes verification, determining, according to the second indication information, whether the second electronic signature token has the primary-backup relationship with the first electronic signature token; and when the second electronic signature token has the primary-backup relationship with the first electronic signature token, decrypting by the first electronic signature token the encrypted private key of the second electronic signature token using the decrypting strategy to obtain the private key of the second electronic signature token.