Patent ID: 8533482

Claim:
A method for generating a key pair and transmitting a request file to request a certificate, comprising the following steps: (1) Storing a key A in an information security device, wherein the key A cannot be exported; (2) Generating a key pair which comprise a private key C and a public key D using the information security device, wherein the private key C is stored in the information security device and cannot be exported; (3) Generating authentication information M for the public key D generated by the information security device using the key A by: signing the public key D using the private key A to generate signature information M or by calculating out a message authentication code M of the public key D using the shared key A; (4) Exporting the public key D and the authentication information M from the information security device; (5) Combining the exported public key D with user information to generate request file of a certificate; (6) The information security device signing the request file of a certificate using the private key C; (7) Appending the authentication information M to the request file of a certificate signed by the private key C and transmitting the authentication information M along with the request file of a certificate to a CA; (8) The CA verifying the request file of a certificate and the authentication information M.