摘   要：随着移动互联网和商用密码行业的发展，手机等移动智能终端已经具备了作为数字证书私钥介质存储的条件，也明显地提高了用户使用数字证书的便捷性。论文中所涉及项目在企业登记全程电子化中创新使用了手机盾，将PKI密码技术与云服务技术相结合，以云端+SDK中间件方式实现了以手机作为数字证书的载体，在企业设立登记、变更登记、注销登记等业务环节进行自然人电子签名，同时还应用了符合国情的电子印章技术，使得电子签名具备类似纸质文件签名的可视效果，完成了移动智能签名，保障了移动端用户身份的真实性、签署材料的完整性和有效性。同时，在全国14个省份企业登记全程电子化项目的建设中得到了实际应用和推广，助力实现了“一网办，不见面”的登记模式。

关键词：商用密码;手机盾;可信身份;数字证书;密钥分割

中图分类号：TP309          文献标识码：B

Abstract： With the development of the mobile Internet and the commercial password industry， mobile intelligent terminals such as mobile phones have been equipped with the conditions to be stored as the private key media of digital certificates and greatly improved the convenience for users to use digital certificates. This project in the enterprise registration to the innovative use of the mobile phone in electronic shield， combining PKI password technology and cloud service technology， implements the cloud + SDK middleware way to mobile phones as the carrier of digital certificate， the enterprise establishment registration， change registration， cancellation registration and other business links with a natural person electronic signature， as well as the application conforms to the national conditions of electronic seal technology， the electronic signature has the similar paper document signature visual effects， completed the mobile intelligent signature， guarantee the authenticity of the mobile end user identity， integrity and effectiveness of the signed material. The project has been practically applied and promoted in the whole process of enterprise registration electronic project construction in 14 provinces of China， helping to realize the registration mode of "one network office， no meeting".

Key words： business password; mobile shield; trusted identity; digital certificate; division of the secret key

1 引言

推行工商局企業登记全程电子化管理，是新形势下全面深化“放管服”改革的重大举措，是顺应商事登记制度改革、建立便捷高效、规范统一、推进宽进严管登记制度的有效手段。采用依法设立的第三方电子认证服务机构发放的数字证书，为工商局企业登记全程电子化管理提供身份认证、电子签名等服务，既符合《电子签名法》及电子政务电子认证相关法律规定，又能够发挥数字证书的优势。同时，这也是充分利用社会资源服务政府的合理方式，符合国家深化改革发展方向。……