CN1859092A

CN1859092A - Cell phone seal verifying method and its system

Info

Publication number: CN1859092A
Application number: CN 200510025637
Authority: CN
Inventors: 刘瑞祯
Original assignee: Individual
Current assignee: Individual
Priority date: 2005-04-30
Filing date: 2005-04-30
Publication date: 2006-11-08

Abstract

This invention provides a cell phone seal system, which signs electronic names to short messages to be transmitted, inserts the electronic stamps with the signing information into the short meaasges to be transmitted to certify the identity of a sending party, the complete content of a short message, the orthority of the receiving party based on the property of the electronic seals to guarantee the duty and right of the two parties and the mode of the seal can be handwriting or a seal containing the special information of the sending party, such as SIM seal with the SIM card information, a cipher seal with the cipher of the sending party and E-KEY with its information or even seals based on the bio-character of a sending party such as fingerprint, iris, face, handwritings and voice.

Description

Cell phone seal verifying method and system thereof

Technical field

The present invention relates to digital certificate, E-seal technology, particularly cell phone seal verifying method and system thereof.

Background technology

Mobile phone is as current topmost communication tool, for enterprise customer and domestic consumer have brought powerful convenience.Its major function also has powerful recreational and business office: multimedia message, GPRS wireless Internet access, shooting, MP3, recreation, broadcast listening or the like except conversation and note two big mobile telecommunication services are provided.Mobile phone has become instant mobile communication of main flow and the converter tools of 21 century.First generation mobile phone is absorbed in the communication function that mobile phone is provided, and second generation mobile phone becomes user's amusement new lover on the basis in conjunction with original service, and present mobile phone of new generation will be more perfect more putting in place of doing of existing mobile communication service.Mobile phone development merchant and software developer just seek the feasibility solution at the problems such as secure communication leak that exist in the existing mobile communication service, make mobile phone become an omnibearing safe and reliable believable communication, amusement, business platform.

Simple operation, low-cost and visualization function make note account for critical role in the every function of mobile phone." note family ", " thumb family " become the synonym of numerous common cellphone user gradually.Except that general information transmission, the user also can carry out bankings such as immediate consumption, account transfer, account balance and account funds inquiry by the mode of sending short message by mobile phone, has replaced traditional credit-card forms.But the user should consider its legality and fail safe, certainty in the transmitting-receiving note.How setting up the environment that a secure and trusted relies, will be to make the mobile communication service be tending towards one of key of perfect boundary.With regard to communication system security, so-called " secure and trusted relies environment " should provide following function:

1. integrality (Integrity): guarantee short message content that the recipient receives and to send content consistent, can not be tampered or forge.

2. identifiable (Authentication): the signature of guaranteeing individual (Entity) in the note is really as indicated in him, or this short message content is transmitted by this conveyer (Sender) really.

3. non-repudiation (Non-repudiation): undeniable its of transmit leg agreed the note of sending out.

4. confidentiality (Confidentiality): prevent that mistake receipts person from knowing protected secret short message content.

But existing mobile phone can not reach above-mentioned safety requirements.

Summary of the invention

The objective of the invention is the demand for security to SMS at the user, a kind of cell phone seal system is provided, it carries out operation of electronic signature to sent note, the E-seal that will contain electronic signature information is embedded in the note to be sent, utilize the characteristic of E-seal to reach transmit leg identity validation, complete, the note non-repudiation of short message content, the recipient checks authority, satisfies the fail safe that the user receives and sends messages, with responsibility and the rights and interests of guaranteeing receiving-transmitting sides.The form of E-seal can be handwritten signature or the seal that includes the transmit leg Proprietary Information, for example contain SIM card information the SIM chapter, contain the transmit leg password the password chapter, contain E-KEY (Encrypted-KEY, be commonly called as electron key) the E-KEY chapter of information etc., or even the seal that forms according to the transmit leg biological information, for example fingerprint chapter, iris chapter, face badge, person's handwriting chapter, sound chapter etc.

In order to realize the foregoing invention purpose, a kind of cell phone seal of the present invention system, it comprises:

One is used to generate the E-seal generating apparatus of various E-seals;

One is used for that E-seal is joined E-seal to be sent short messages embeds service unit;

One electronic signature that is used for seal early-period confirmation transmit leg user identity sends and receives service unit;

The one checking E-seal true and false is confirmed the signed by identity, obtains the access control right to note, confirms the E-seal service for checking credentials device that note is whether complete;

One for guaranteeing that having only designated user to read sends the note that receives, and prevents that the mistake of note from sending out, and satisfies the short message encryption device of the confidentiality of information; And

One with the corresponding note decryption device that has only designated user just can separate reading short message of SMS encryption device.

Further, described E-seal generating apparatus comprises:

One is used to select the seal generating mode choice device of seal generating mode;

One is used for obtaining the information acquisition device of the information that joins chapter;

One is used for the information that information acquisition device obtains is joined the information adding apparatus of seal;

One is used to obtain the biological information deriving means of biological information;

One is used for the information issuing that the biological information deriving means obtains is become the apparatus for making stamp of seal; And

One is used to store the seal storage device of seal.

Described E-seal embeds service unit and comprises:

One is used to extract the note extraction element of short message content;

One is used to store the authentication information storage device of authentication information and the authentication information extraction element of information extraction content;

One is used to obtain the seal deriving means of signed by signature or seal;

The one electronic signature generating apparatus that utilizes authentication information that short message content is signed electronically;

One electronic signature that is used for generating be embedded into the signed by seal the E-seal generating apparatus; And

One is used for and will contains the E-seal of watermark and the dispensing device that note sends to the recipient.

Described electronic signature sends the reception service unit and comprises:

One is used to extract the biological information extraction element of the biological information of signed by;

One is used for the biological information gatherer of information import system that the biological information deriving means is obtained;

One is used to control the authority access control apparatus to the database access rights;

One is used to obtain the signed by password deriving means of signed by password;

One authentication information of utilizing the authentication information extraction element to extract is made the electronic signature generating apparatus of electronic signature;

One is used to send the electronic signature dispensing device of the electronic signature of generation;

One recipient is used for deriving from the electronic signature information that receives the authentication information let-off gear(stand) of authentication information;

One authentication information that is used for deriving from the authentication information let-off gear(stand) imports the authentication information import system device of recipient system; And

One is used to store the authentication information storage device of authentication information.

Described E-seal service for checking credentials device comprises:

One is used to show the access control right display unit of authority access control information;

One is used for extracting from the short message that contains E-seal that receives the watermark information extraction element of watermark information the E-seal;

The one E-seal demo plant that utilizes the watermark information of authentication information that the authentication information extraction element extracts and extraction to verify; And

One is used to show the checking device displaying result of verifying the result.

Described short message encryption device comprises:

One is used for the unsymmetrical key information encryption device that utilizes the signed by password to encrypt to the need information encrypted;

One is protection signed by password, utilizes the asymmetric-key encryption device of the public key encryption symmetric key in the digital certificate; And

One sends to the other side's enciphered message dispensing device with encrypted secret key and information encrypted.

Described note decryption device comprises:

The one public key encryption symmetric key that utilizes obtains the unsymmetrical key decryption device of decruption key;

One key that utilizes asymmetric decruption key device to decrypt is with the decrypts information device of the deciphering of the enciphered message in the reception information; And

The decryption information display unit that one information that deciphering is come out shows.

A kind of cell phone seal verification method is characterized in that it may further comprise the steps:

Generate various E-seals;

Described E-seal is joined in waiting to send short messages;

In earlier stage carry out the electronic signature of acknowledged user identity at seal;

The checking E-seal true and false is confirmed the signed by identity, obtains the access control right to note, confirms whether note is complete; And

For guaranteeing to have only designated user to read to send the note that receives, preventing that the mistake of note from sending out, satisfying the confidentiality of information, short message is encrypted;

Understand and the deciphering note according to SMS encryption.

The invention provides machine seal verifying method and system thereof, in conjunction with the E-seal in the cell phone seal system of electronic signature is that short message content and the electronic signature that contains the signed by biological information are embedded in the E-seal by digital watermark technology, the E-seal of this kind form shows with diversified form, it can be the handwritten signature of transmit leg, can be common seal form, can be meant armory, iris chapter, face badge, sound chapter or the like.The characteristics such as non-repudiation of integrality, unalterable feature and the side of signing and issuing of the note that note recipient receives have been guaranteed, simultaneously this signature system also can be directly with note with visual electronic signature by Wireless/wired Network Transmission on papery output or printing equipment, generate paper document, the recipient of note can be: computer, mobile phone, facsimile machine, seal operation and service system, whole device can be built in the mobile phone, also can place operation system.Mobile phone can land the seal operation platform, and directly carries out functions such as seal generates, manages, operates, downloads, affixes one's seal.

Cell phone seal provided by the invention system is on the basis of realizing this powerful communication function of SMS, with note information such as electronic signature be embedded in the E-seal, and with note and the binding of its E-seal, thereby realize short message content authenticity, can not forge the non-repudiation of alterability and signed by identity, and utilize high-intensity encryption technology to ensure the secret of short message content, prevent the mistake secret that misinformation a causes leakage.This system has reached validity, distinctive, non-repudiation, the confidentiality of SMS communication, makes the range of application of mobile phone wider.。

Description of drawings

Figure 1A～Figure 1B is the schematic diagram of some E-seals;

Fig. 2 A is for adding the schematic diagram of E-seal operation in mobile phone is waited to send short messages;

Fig. 2 B checks the schematic diagram of note operation for the recipient;

Fig. 3 is a cell phone seal entire system structural representation;

Fig. 4 is that E-seal embeds the service unit schematic diagram in the cell phone seal system;

Fig. 5 A is that the transmit leg electronic signature sends service unit in the cell phone seal system;

Fig. 5 B is recipient's reception service unit that signs electronically in the cell phone seal system;

Fig. 6 is an E-seal service for checking credentials device schematic diagram in the cell phone seal system;

Fig. 7 A is a note encryption device schematic diagram in the cell phone seal system;

Fig. 7 B is a note decryption device schematic diagram in the cell phone seal system;

Fig. 8 is an E-seal video generation device schematic diagram;

Below in conjunction with accompanying drawing the present invention is further described.

Embodiment

The original image 101 of the signed by signature that Figure 1A represents to obtain does not add watermark information, can do signature and sign effect to note, and can be used as the mother matrix of E-seal yet.

Figure 1B embeds electronic signature identification information in the described original image 101 of expression Figure 1A, the seal image 102 that includes the watermark information that signs electronically, except the sign effect of playing the information signature, also have the true and false of differentiating seal, judge functions such as its integrality, non-distorting property and legitimacy.

Fig. 2 A adds the E-seal operational flowchart that contains watermark information in note.As shown in the figure, its operating process is:

(1) editor waits to send short messages 201;

(2) treat the interpolation E-seal 202 of sending short messages;

(3) the seal picture 203 of in system, selecting desire to add;

(4) interpolation is finished, and sends SMS message 204;

Fig. 2 B is that the recipient checks the note operational flowchart.As shown in the figure, its operating process is:

(1) password is checked in input, obtains to check the authority 205 of encrypting note;

(2) check information 206;

Fig. 3 is a cell phone seal system global structure schematic diagram provided by the invention.The device that mainly comprises is:

(1) the E-seal generating apparatus 301;

(2) E-seal embeds service unit 302;

(3) the SMS encryption device 303;

(4) electronic signature transmission/receiving system 304;

(5) E-seal service for checking credentials device 305;

(6) the note decryption device 306;

Its operating process is:

(1) at first utilize E-seal generating apparatus 301 to generate the E-seal that needs;

(2) information of transmit leg to importing, be the purpose that realizes to authenticate, at first send service unit 304 authentication information and electronic signature information are sent to the recipient by electronic signature, the recipient utilizes the electronic signature receiving system with import systems such as authentication information, to reach the purpose of later stage signed by authentication;

(3) transmit leg utilizes E-seal to embed service unit 302 adding E-seal in waiting to send short messages and sends to the recipient.The recipient utilizes the true and false of E-seal service for checking credentials device 305 checking E-seals and can preserve and stay card;

(4) for preventing the misinformation of note, cause the leakage of confidential information, can be before note sends by transmitting behind the SMS encryption of SMS encryption device 303 with transmission, the recipient utilizes note decryption device 306 that the note deciphering is shown;

(5) note that contains E-seal that the recipient receives is printable comes out, to be used for later stage checking purpose.

Fig. 4 is that E-seal provided by the present invention embeds the service unit schematic diagram.The device that mainly comprises is:

(1) the note extraction element 401;

(2) the authentication information storage device 402;

(3) the authentication information extraction element 403;

(4) the seal deriving means 404;

(5) electronic signature generating apparatus 405;

(6) the E-seal generating apparatus 406;

(7) dispensing device 407;

Its operating process is:

When (1) the transmit leg desire sends note, utilize note extraction element 401, the note of importing is extracted;

(2) system utilizes authentication information extraction element 403 to extract authentication information from authentication information storage device 402, and submits to electronic signature generating apparatus 405;

(3) note extraction element 401 is submitted to electronic signature generating apparatus 405 with the information of extracting;

(6) electronic signature generating apparatus 405 utilizes the authentication information that authentication information extraction element 403 obtains (comprising stamped signature people's biological information, private key, password etc.) that 401 notes of submitting to are made electronic signature, and submits to E-seal generating apparatus 406;

(7) seal deriving means 404 is given E-seal generating apparatus 406 with the seal that gets access to;

(8) E-seal generating apparatus 406 is submitted the electronic signature information come up to 405, is embedded in 404 seals that obtain to generate E-seal, and submits to dispensing device 407;

(9) dispensing device 407 E-seals that 401 raw informations of obtaining and 406 are generated bundle and send to the recipient;

Fig. 5 A is that transmit leg electronic signature provided by the present invention sends the service unit schematic diagram.Its main device comprises:

(1) signed by biological information extraction element 501;

(2) the signed by cipher input 502;

(3) address control set 503;

(4) the information gatherer 504;

(5) electronic signature generating apparatus 505;

(6) the authentication information storage device 506;

(7) the authentication information extraction element 507;

(8) electronic signature dispensing device 508;

Its main operating process is:

(1) extracts the signed by biological information and give information gatherer 504 by signed by biological information extraction element 501;

(2) signed by is imported passwords and is given 504 by cipher input 502;

(3) the input reference authority information is given address control set 503 and is given 504;

(4) information gatherer 504 imports authentication information storage device 506 with the information that imports;

(5) authentication information extraction element 507 obtains the authentication information that contains PKI from authentication storage device 506, and authentication information is submitted to electronic signature generating apparatus 505;

(6) electronic signature generating apparatus 505 utilizes 507 authentication information that get access to produce electronic signature and submits to electronic signature dispensing device 508;

(7) electronic signature dispensing device 508 sends to the recipient with 505 electronic signatures of making; Fig. 5 B receives the gatherer schematic diagram for the recipient corresponding to Fig. 5 A signs electronically.Its main device is:

(1) authentication information let-off gear(stand) 501B;

(2) authentication information imports client device 502B;

(3) authentication information storage device 503B;

Main operating process is:

(1) obtains the electronic signature information 500B that receives;

(2) contain the PKI authentication information for what the electronic signature information that gets access to utilized that authentication information let-off gear(stand) 501B extracts transmit leg;

(3) import client device 502B by authentication information, the authentication information that 501B is derived imports authentication information storage device 503B;

The effect of electronic signature is used for the sending and receiving both sides submits the purpose that contains the PKI authentication information and provides, and finally is used to encrypt the information or the checking seal that send to the other side, has only the targeted customer could decryption information to reach.

Fig. 6 is the E-seal service for checking credentials device schematic diagram that is used to verify provided by the present invention.The device that mainly comprises is: authority access control display unit 601, recipient's cipher input 602, password authentication device 603, contain watermark E-seal deriving means 604, watermark information extraction element 605, authentication information storage device 606, authentication information deriving means 607, electronic signature verifying device 608, the checking result reports display unit 609.

Operating process is:

(1) recipient receives note, authority access control display unit 601 display access authorities;

(2) authorized user is by cipher input 602 input passwords;

(3) password authentication device 603 checking input password correctness, correctly display message otherwise show mess code then;

(4) obtain E-seal by E-seal deriving means 604;

(5) from the E-seal that 604 obtain, extract watermark information by watermark information extraction element 605;

(6) from authentication information storage device 606, obtain authentication information by authentication information deriving means 607;

(7) by electronic signature verifying device 608 checking seal information;

(8) report that by the checking result display unit 609 shows with the authorization information that obtains;

Fig. 7 A is a short message encryption device schematic diagram.Authentication information deriving means 702 obtains being entered into asymmetric-key encryption device 706 after the authentication information from authentication information storage device 701, by encryption key 707.In addition, call application (device) 703 by information encryption and send application, produce symmetric key, be input to asymmetric-key encryption device 706 and information encryption device 708 respectively at symmetric key generating apparatus 704.Need information encrypted 705 also to be input to information encryption device 708 simultaneously.Information encryption device 708 produces enciphered message 709, and this enciphered message is input to enciphered message dispensing device 710 with above-mentioned encryption key 707.

Fig. 7 B is a short message decryption device schematic diagram.Be input to decruption key device 711 behind the encryption key 711 that reception information (device) 712 receives from enciphered message dispensing device 710, simultaneously.The authentication information that authentication information reading device 711 is read also is input to the decruption key device.In addition, the enciphered message 713 that receives from enciphered message dispensing device 710 is input to decrypts information device 714 with authentication information, and the information after the deciphering shows in decryption information display unit 715.

Fig. 8 is an E-seal video generation device schematic diagram.Whether seal generating mode choice device 801 selects the handwritten signature chapter, in this way, then obtains handwritten signature in information acquisition device 802, behind information adding apparatus 805, is input to seal storage device 806 again.If not, then whether select common chapter form: in this way, common chapter form is obtained common chapter in information acquisition device 802, behind information adding apparatus 805, be input to seal storage device 806 again; As not being, in biological information deriving means 803, obtain biological information, behind apparatus for making stamp 804, make seal, be input to seal storage device 806 again.

Claims

1, a kind of cell phone seal system is characterized in that it comprises:

One is used to generate the E-seal generating apparatus of various E-seals;

2, cell phone seal as claimed in claim 1 system is characterized in that described E-seal generating apparatus comprises:

One is used to store the seal storage device of seal.

3, cell phone seal as claimed in claim 1 system is characterized in that, described E-seal embeds service unit and comprises:

One is used to extract the note extraction element of short message content;

One is used to obtain the seal deriving means of signed by signature or seal;

4, cell phone seal as claimed in claim 1 system is characterized in that, described electronic signature sends and receives service unit and comprise:

5, cell phone seal as claimed in claim 1 system is characterized in that described E-seal service for checking credentials device comprises:

6, cell phone seal as claimed in claim 1 system is characterized in that described short message encryption device comprises:

7, cell phone seal as claimed in claim 1 system is characterized in that described note decryption device comprises:

8, a kind of cell phone seal verification method is characterized in that it may further comprise the steps:

Generate various E-seals;

Described E-seal is joined in waiting to send short messages;

Understand and the deciphering note according to SMS encryption.

9, cell phone seal verification method as claimed in claim 8 is characterized in that, described E-seal generates and comprises the steps:

Select the seal generating mode choice device of seal generating mode;

Obtain the information that joins in the chapter;

The information of obtaining is joined in the seal;

Obtain biological information;

The biological information that obtains is made into seal; And

Store above-mentioned seal.

10, cell phone seal verification method as claimed in claim 8 is characterized in that, the service of embedding of described E-seal comprises the steps:

Extract the note extraction element of short message content;

Storage authentication information and information extraction content;

Obtain signed by signature or seal;

Utilize authentication information that short message content is signed electronically;

The electronic signature that generates is embedded in the signed by seal; And

The E-seal and the note that will contain watermark send to the recipient.

11, cell phone seal verification method as claimed in claim 8 is characterized in that, described electronic signature sends and may further comprise the steps:

Extract the biological information of signed by;

Biological information is imported;

Control is to the database access rights;

Obtain the password of signed by;

The authentication information of extracting is made electronic signature;

Send the electronic signature that generates;

From the electronic signature information that receives, derive authentication information;

The authentication information that derives is imported the recipient system; And

The storage authentication information.

12, cell phone seal verification method as claimed in claim 8 is characterized in that, the described E-seal service for checking credentials may further comprise the steps:

Show the authority access control information;

From the short message that contains E-seal that receives, extract watermark information in the E-seal;

The authentication information of extracting and verifying; And

Show the checking result.

13, cell phone seal verification method as claimed in claim 8 is characterized in that, described weak point disappears to encrypt and may further comprise the steps:

Utilize the signed by password to encrypt to the need information encrypted;

Be protection signed by password, utilize the unsymmetrical key of the public key encryption symmetric key in the digital certificate; And

Encrypted secret key and information encrypted are sent to the other side.

14, cell phone seal verification method as claimed in claim 8 is characterized in that, described note deciphering may further comprise the steps:

The public key encryption symmetric key that utilizes obtains decruption key;

Utilize the decrypts information device of asymmetric decruption key with the deciphering of the enciphered message in the reception information; And

The information that deciphering is come out shows.