A New Protection Method of Private Key File in Smart Card

As the PKI system is widely used in e-commerce and e-government, the smart card which generates public/private key pair by itself has good prospects because of its "private key not out of card" key feature. However, when the viruses and Trojan horses are in flood, the security of smart card terminals can\´t always be guaranteed. Some risks may still exist in the processes of generation, replacement and revocation of the private key, resulting in various types of problems in the PKI applications based on private-key as a core. This paper firstly elaborates the original security system of smart card, then conducts the research to the private key\´s use process in the entire smart card life cycle, carries on comprehensive and thorough analysis to the latent risk, and proposes a smart card private key protection solution based on the production public key certificate.