A terminal certificate updating method based on private key confirmation

This paper proposes a new terminal certificate update method to solve the shortcomings of traditional public and private key generation and certificate update methods. The methods include: the terminal generates a key pair and sends the public key in the key pair to the central master station, so that the central master station generates an update terminal certificate command according to the public key generated by the key pair and the terminal certificate to be updated; After receiving the command to update the terminal certificate sent by the central master station, the terminal uses the key to perform matching authentication on the generated private key to update the terminal certificate. After passing the authentication, the terminal updates the certificate according to the terminal certificate to be updated, and updates the generated private key according to the key. The terminal sends the serial number of the terminal certificate to be updated and the public key generated by the key pair to the central master station, so that the central master station can update the terminal certificate according to the serial number of the terminal certificate to be updated, and the central master station can update the terminal public key according to the public key generated by the key pair, to ensure that the terminal private key matches the terminal certificate and the terminal certificate is updated correctly.