KR101502944B1 - System for Digital Signing Using Portable Terminal - Google Patents

Abstract

The present invention relates to a digital signature system using a mobile terminal. The digital signature system using a mobile terminal comprises: a user mobile terminal (40) for generating a digital signature value by performing a digital signature using a previously stored certificate, a digital signature key, and a certificate password inputted by a user; a user terminal (20) for receiving the digital signature value from the user mobile terminal (40), and submitting the digital signature value to a service server (10); and a relay server (30) for connecting the user mobile terminal (40) and the user terminal (20), and relaying a digital signature request and a result. The user terminal (20) is configured to transmit the original signature and the identification information of the service server (10) to the relay server (30), and the user mobile terminal (40) is configured to transform and display the data format of the original signature before performing a digital signature.

Description

[0001] The present invention relates to a digital signing system using a mobile terminal,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates generally to an electronic signature technology using a mobile terminal, and more particularly, to a mobile terminal that uses a new portable terminal To an electronic signature system.

With the development of personal computers and the Internet, transactions and services using open networks such as Internet banking, electronic transactions, and electronic information services are being activated. In such an electronic transaction or the like, the electronic signature can prevent forgery and falsification of the electronic document and provide functions such as denial of the electronic transaction behavior. Accordingly, the electronic signature is widely used as a means of subscriber authentication in a login step, an account transfer step, or a credit card settlement step of an Internet banking, a cyber securities transaction, a credit card homepage, or the like.

A process of performing digital signature using a conventional authorized certificate will be described below. First, an electronic signature request is transmitted from the service server to the user PC together with the signature text. Then, the authorized authentication module installed in the user PC is executed, and an electronic signature interface is displayed for allowing the user to select an appropriate authorized certificate and input the certificate password. The user can designate the memory location where the authorized certificate is stored on the digital signature interface, select the appropriate authorized certificate from the authorized certificate at the specified location, and input the certificate password. Then, the authorized authentication module can perform digital signature using the signature text temporarily stored in the cache memory, the selected authorized certificate and digital signature key read from the memory, and the certificate password entered by the user. When the digital signature is performed, an electronic signature value is generated. The digital signature value thus generated can be transmitted to a service server that requests digital signature, for example, an Internet banking service server, a cyber securities transaction service server, a credit card payment server, or the like.

In general, a public certificate and an electronic signature key can be stored in a hard disk of a user's PC, a universal serial bus (USB) memory, an IC card, a security token, etc. Recently, a universal subscriber identity module (USIM, Universal Subscriber Identification Module "). In the case of storing a public certificate and an electronic signature key on a PC's hard disk, when a keyboard hacking program, a malicious virus, or the like is installed on a PC or a user accesses a phishing site unintentionally, A signature key, and / or an authorized certificate password may be exposed to a third party.

In order to solve such a problem, a personal identification certificate and an electronic signature key are stored in a portable terminal whose access to a malicious third party is blocked by a telephone network, rather than a PC exposed to the risk of a hacking of a third party, A technique has been proposed in which after a digital signature request is transmitted to a mobile terminal, digital signatures are performed in the mobile terminal and only the result value is transmitted to the PC.

For example, a registered publication of "Domestic Registration No. 10-0785894 (registered on Dec. 7, 2007) entitled" System and Method for Performing Digital Signature Using a Mobile Phone "includes a subscriber terminal requesting an electronic signature to a subscriber's mobile phone via a relay agency A subscriber's cellular phone generates a digital signature and transmits the generated digital signature to the subscriber terminal. In another publication, for example, Korean Patent Laid-Open Publication No. 2001-0071945 (published on July 3, 2012) entitled "Method and System for Utilizing a USIM Certified Certificate in a Wired Environment" The digital signature request is transmitted to the terminal, the financial APP of the wireless terminal is driven in response to the request, and after the digital signature is processed in the USIM, the result value can be transmitted to the PC via the relay server. On the other hand, in the registration bulletin of the " digital signature device using the security token and its method ", registered in the Korean Patent No. 10-1215927 (filed on July 31, 2012, registered on December 20, 2012) Discloses an electronic signature technique using a security token stored in a USIM.

As described above, the digital signature technology using the portable terminal stores the certificate and the digital signature key in the portable terminal of the user, and provides the user to input the certificate password through the portable terminal of the user in digital signature. Accordingly, the electronic signature technology using the portable terminal provides an advantage that the exposure of the certificate, the digital signature key, and the certificate password, which are necessary for executing the digital signature operation, to the third party can be prevented .

In recent years, however, a third party of malicious hacking of the memory of the user PC has caused a problem by forging a signature text that is an object of electronic signature. Consider, for example, a case where a user accesses a bank server providing an Internet banking service using a PC, and then electronically signs the user's smartphone to transfer a certain amount of money from the account to another account. In this case, the bank server transmits the signature original text (i.e., the withdrawal account information, the deposit account information, the 'core information' such as the transfer amount information) to the user PC and requests the digital signature. This signature text is temporarily stored in the cache memory of the user PC. Then, the user PC sends the electronic signature request and the original text of the signature to the user smart phone through the relay server. The user smart phone can perform a digital signature on the received signature text using the certificate, the digital signature key, and the certificate password, and then transmit the resultant value to the user PC.

At this time, it is possible that a malicious third party hacked the memory of the PC before the original text is transmitted from the PC to the smartphone, thereby forging the withdrawal account information and the transfer amount information out of the original text of the signature. In this case, the PC transmits the forged signature text to the smartphone, and the smartphone can perform the digital signature on the forged signature text. Therefore, in the digital signature technology using the portable terminal, secure financial transactions must be possible by ensuring that the original text of the signature, which is the subject of the digital signature performed by the portable terminal, matches the original text of the signature requested by the service server There is a desperate need to.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to solve such a conventional problem. For example, when performing a digital signature on a signature text received from a user PC in a user portable terminal, So that it is possible to ensure that the original text of the signature requesting the electronic signature at the service server coincides with the original text of the signature to be performed by the mobile terminal And an object of the present invention is to provide an electronic signature system.

In addition, by converting the signature texts from different services and / or different service servers having different data formats into a signature text in a data format suitable for the user portable terminal and visually displaying it, It is an object of the present invention to provide an electronic signature system using a new portable terminal in which a signature text of different data formats provided by a plurality of service servers is stably displayed on a user portable terminal.

Furthermore, the conversion engine necessary for converting the original text of the signature having different data formats into the original text of the data format suitable for the user portable terminal is stored in the relay server, and is transferred from the user PC to the user portable terminal By transmitting the corresponding conversion engine to the user portable terminal at the time of requesting the digital signature, the conversion engine can be easily managed by the relay server without having to install and update the conversion engine in each user portable terminal And an electronic signature system using the new portable terminal.

The above objects are provided by an electronic signature system using a portable terminal provided according to the present invention.

An electronic signature system using a portable terminal provided according to an aspect of the present invention includes a user portable terminal for generating an electronic signature value by performing an electronic signature using a stored certificate and an electronic signature key and a certificate password input to a user, A user terminal for receiving the digital signature value from the user portable terminal and submitting the digital signature value to the service server, and a relay server for relaying the digital signature request and the result by connecting the user portable terminal and the user terminal, Wherein the service server is configured to transmit a signature text to the user terminal; The user terminal is configured to transmit the signature text together with identification information of the service server to the relay server; The user portable terminal may be configured to convert and display the data format of the signature text prior to performing the digital signature.

In one embodiment, the conversion information includes: an operation of, when executed by a computer processor, converting a signature text having a data format corresponding to a specific service provided by a specific service server into a data format corresponding to a specific user portable terminal And may be a translation engine that includes computer-executable instructions to perform.

In another embodiment, the service server may be configured to: transmit the conversion engine to the user terminal together with the signature text, and subsequently forwarded to the user portable terminal via the user terminal and the relay server .

In another embodiment, the user terminal may be configured to: store the conversion engine, and transmit the conversion engine together with the signature text to the user portable terminal via the relay server.

In another embodiment, the relay server stores at least one conversion engine, and upon receipt of the identification information of the service server together with the signature text from the user terminal, among the plurality of conversion engines, Searches the conversion engine corresponding to the identification information of the server, and transmits the retrieved conversion engine to the user portable terminal.

In another embodiment, the user portable terminal includes: a Universal Subscriber Identification Module (USIM) chip for storing the certificate and the digital signature key, receiving a certificate password from a user and performing an electronic signature to generate an electronic signature value, . ≪ / RTI >

According to the present invention as described above, when the user performs a digital signature on the original document received from the user PC, the user can confirm the original text of the signature before the user inputs the certificate password. This makes it possible to ensure that the original text of the signature requesting the electronic signature at the service server coincides with the original text of the signature to be subjected to digital signature performed by the portable terminal.

In addition, the signature texts from different services and / or different service servers having different data formats can not be directly displayed on the user portable terminal. In this case, according to the embodiment, the signature texts of different data formats are converted into the signature texts of one data format suitable for the portable terminal and displayed visually. In addition, signature texts of different data formats provided by a plurality of service servers can be stably displayed before the user performs digital signature on the portable terminal.

Furthermore, according to the embodiment, the conversion engine necessary for converting the original text having the different data format into the original text of the data format suitable for the portable terminal is stored in the relay server without being installed in the user portable terminal Can be managed. Accordingly, when requesting an electronic signature from the user PC to the user portable terminal through the relay server, the relay server can transmit a conversion engine suitable for the corresponding original signature text to the portable terminal, and the portable terminal uses the transmitted conversion engine The data format of the original text can be converted. Therefore, the conversion engine can be easily managed by the relay server without installing and updating the conversion engine in each user portable terminal.

1 is a block diagram schematically showing the overall configuration of an electronic signature system using a mobile terminal according to an embodiment of the present invention;
BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic signature system using a mobile terminal, and more particularly,
3 is an exemplary diagram for explaining a signature text transmitted from a user portable terminal service server of an electronic signature system using a mobile terminal according to an embodiment of the present invention and core information therein, .
4 is a schematic flowchart illustrating a process of performing an electronic signature in an electronic signature system using a portable terminal according to an embodiment of the present invention.

The present invention is characterized in that, when a user performs a digital signature on a signature original text for a digital signature received from a user PC, the signature text is displayed visually on the portable terminal so that the user can confirm the signature text before the user inputs the certificate password Can be provided. Accordingly, in the case where the memory of the user PC is hacked by a malicious third party and the original text of the signature is forged, the user can confirm the fact on the screen of the portable terminal before performing the digital signature. As a result, An electronic signature for the user can be prevented.

However, for this purpose, the mobile terminal must display the original text of the signature received from the PC in a form that the user can recognize. However, the format of the original text of the signatures may be different for each financial institution. In the same financial institution, the form of the original text may differ depending on the service type. Moreover, these signature texts may be encoded in a format that is difficult for the user to recognize. Therefore, in the case where the data format of the original text of the signature is displayed on the screen of the portable terminal as it is without being converted into a format suitable for the screen of the portable terminal, the main contents included in the original text of the signature may not be easily grasped, It may be difficult to recognize the fact that the original text of the signature displayed on the screen of the terminal is forged or altered.

In order to solve such a problem, it is necessary to convert the data format of the original text of the signature into a data format which allows the user to easily display the main contents at a glance on the screen of the mobile terminal. To this end, it is desirable to allow the portable terminal to execute a conversion engine for converting the data format of the original text of the signature.

Such a conversion engine may be installed in advance in the portable terminal according to an embodiment. For example, a user can access a bank server that deals with him / herself by using his / her smartphone, and then download a conversion engine app (application) provided by the bank server and install the conversion engine app (application) on the smart phone. Such a conversion engine may be included in the form of a plug-in of an electronic signature application already installed in a smart phone, or may be in the form of an independent application driven by an electronic signature application.

However, since the conversion engine can be different for each service and can be updated periodically or non-periodically, in such a case, a user connects to each of a plurality of bank servers and downloads and installs different conversion engines for respective services Updating is very troublesome. Since the conversion engine converts the data format of the original text of the signature, it can be implemented in the form of a relatively small applet. Therefore, whenever a digital signature is required, it is preferable that the conversion engine corresponding to the original signature text is interlocked with the original document and transmitted and received through the communication network, rather than storing the conversion engine in advance in the portable terminal.

In this case, in the case where the digital signature request is transmitted from the service server to the user portable terminal via the user terminal and the relay server, the conversion engine of the original document text is managed by the service server, the user terminal, .

In the case where the service server manages the conversion engine, whenever the service server requests the digital signature, the service server transmits the corresponding conversion engine together with the corresponding signature text to the user terminal, have. In this case, the service server can determine the data format of the signature text suitable for the portable terminal of the user based on the subscriber information of the user. The subscriber information may include relevant information such as, for example, the type of operating system (e.g., iOS or Android) of the user's portable terminal.

On the other hand, in the case where the user terminal manages the conversion engine, whenever the service server requests the digital signature, the user terminal transmits the corresponding conversion engine together with the corresponding signature text to the relay server, can do. In this case, before the digital signature is performed, the user terminal can receive the data format of the signature text suitable for the user portable terminal from the user, and can download and store the corresponding conversion engine from the plurality of service servers.

Further, in the case where the relay server manages the conversion engine, each time the service server requests the digital signature, the user terminal transmits the information for identifying the service server requesting the digital signature together with the corresponding signature text and the user portable terminal information to the relay server Lt; / RTI > The relay server can select an appropriate conversion engine among the conversion engines stored in advance using the received service server identification information and the user portable terminal information. The selected conversion engine can be transmitted from the relay server to the user portable terminal. In this case, the relay server may previously store various conversion engines for converting the signature original data format corresponding to the various services of the various service servers into the data format of various user portable terminals.

In particular, in the case where the relay server manages the conversion engine, there is no need to change the system of the existing service server, that is, the financial institution, and it is unnecessary for the user to update the various conversion engines from time to time. It is advantageous that the maintenance of the conversion engine is easy.

According to the present invention as described above, the user's portable terminal can receive an appropriate conversion engine from the relay server for any type of original document, and the user can recognize the main content included in the original text from the received conversion engine It can be easily displayed on the screen. Accordingly, for example, even if a user makes a financial transaction using a PC infected with a malicious virus, it is possible to confirm whether the content of the original signature to be digitally displayed on the smartphone screen is intentional or falsified Therefore, it is possible to reduce the occurrence of damage such as financial damage or personal information leakage.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a block diagram schematically showing the overall configuration of an electronic signature system using a mobile terminal according to an embodiment of the present invention. Referring to FIG. The system 100 operates in an environment in which a service server 10, a user terminal 20, a relay server 30, and a user portable terminal 40, which are computing devices, are interconnected through a network capable of bidirectional data communication. The system illustrated in Fig. 1 is an example in which the conversion engine is managed by the relay server.

Here, it is assumed that the user terminal 10 and the user portable terminal 40 belong to one same user and are used simultaneously. For example, the user accesses a service server 10 such as a bank server through a user terminal 20 such as a PC to start a direct debit service, and transmits an electronic signature necessary for completing the debit service to a user portable terminal (40), and then the resulting digital signature value can be submitted from the PC to the bank server.

The service server 10 may provide an online service such as Internet banking to the user terminal 20 and may request a digital signature required for the service. By receiving and verifying the required digital signature value from the user terminal 20, the service server 10 can complete the corresponding service initiated by the user terminal 20. The service server 10 provides the signature text to be digitally signed together with the digital signature request.

The user terminal 20 transfers the digital signature request and the original text of the signature received from the service server 10 to the user portable terminal 40 via the relay server 30 and also transmits the digital signature request to the user portable terminal 40 via the relay server 30 And receives the digital signature value from the terminal 40 and submits it to the service server 10.

The relay server (30) relays data transmission / reception between the user terminal (20) and the user portable terminal (40). The relay server 30 can be connected to the user portable terminal by receiving the identification number of the user portable terminal such as a telephone number from the user terminal 20. [ The relay server (30) can store and manage the conversion engine (32).

The user portable terminal 40 stores a certificate and an electronic signature key to be used for digital signatures, and an application for digital signatures may be installed. Upon receipt of the digital signature request and the signature text through the relay server 30, the electronic signature can be generated by performing a digital signature using the certificate and the digital signature key and the certificate password input to the user. The user portable terminal 40 may be a portable computing device identified by a " telephone number " such as, for example, a smart phone, a feature phone, or the like.

Also, according to one embodiment, the user portable terminal 40 may include a Universal Subscriber Identification Module (USIM) The USIM chip 42 has its own processor and memory. The USIM chip 42 may be interfaced with the operating system of the user portable terminal 40 but may be operated by a separate, independently operating operating system. The memory of the USIM chip 42 may store an electronic signature applet and a certificate for electronic signature and an electronic signature key so that they can perform electronic signature. Then, the USIM chip 42 can generate an electronic signature value by driving an electronic signature applet, receiving a certificate password from a user, performing a digital signature, and generating an electronic signature value. The digital signature value generated by the USIM chip 42 may be transferred to the digital signature application running on the operating system of the user portable terminal 40 and then to the user terminal 20 via the relay server 30 .

Here, the user terminal is a PC and the user portable terminal is a smart phone, but the present invention is not limited thereto. The user terminal is a computing device including a processor, a memory, a user input / output device, and the like, and can be any device capable of transmitting and receiving data through a communication network. For example, the user terminal may be a desktop, a laptop, a tablet, a personal digital assistant (PDA), or the like. Further, the portable terminal is not limited to a smart phone, and may be a portable computing device having a processor, a memory, a display, a user input device, and the like, and may include a terminal that can be connected through a telephone number. If you have, you will understand. For example, a portable terminal may include, but is not limited to, a smart phone, a feature phone, a tablet, a PDA, and the like.

Referring to Figures 2 and 3, according to an embodiment, the service server 10 may send the signature text 200 as illustrated in Figure 2 to the user terminal 20. The original document 200 is subject to digital signature. One signature text 200 is generated in the service server 10 for each digital signature process and transferred to the user terminal 20 and then to the user portable terminal 40 via the relay server 30 . Then, the user portable terminal 40 can generate the digital signature value using the certificate, the digital signature key, and the certificate password, using the signature original text 200 as a target. The digital signature value generated in the user portable terminal 40 is transmitted to the service server 10 via the relay server 30 and the user terminal 20 in a reverse manner so that one digital signature process can be completed.

The signature source text 200 transmitted in each digital signature process requires each service server 10 or digital signature in addition to the core information 210 indicating the main content that should not be forged by a malicious third party Related codes for encoding a data format that is dependent on the service being executed.

The user terminal 20 encrypts the original document text 200 and generates service server identification information capable of identifying the service server 10 and portable terminal identification information (e.g., telephone number) To the relay server 30.

The relay server 30 can store and manage at least one conversion engine 32. [ Each conversion engine, when executed by a computer processor, causes a computer to execute a process of converting a signature text having a data format corresponding to a particular service provided by a particular service server into a data format corresponding to a particular user portable terminal Lt; RTI ID = 0.0 > possible instructions. An 'instruction' may include an instruction, a set of instructions, a software, a plug-in, a module, an engine, a procedure, a thread, data or a data structure executed by a computer processor.

The relay server 30 may search the conversion engine corresponding to the service server identification information received from the user terminal 20 and determine the conversion engine to be transmitted to the user portable terminal 40 among the stored conversion engines. When the conversion engine to transmit is determined, the relay server 30 can transmit the conversion engine determined by the user portable terminal 40 identified through the portable terminal identification information received from the user terminal 20. [

Then, the user portable terminal 40 can decrypt the encrypted original document 200 and deliver the decrypted original document 200 to the USIM chip 42. The user portable terminal 40 can extract the core content 210, which is the main content that the user needs to check, from the decrypted signature text 200 using the conversion engine received from the relay server 30. [ In the illustrated embodiment, the original document 200 is associated with an account transfer service of the Internet banking. In this case, the core information 210 includes the main contents necessary for account transfer, namely, withdrawal account information, deposit account information, . ≪ / RTI > In another example, the core information 210 may be a part of the original document 200 that is included in text form, except for an encoding code for indicating a data format.

3, the extracted core information 210 is converted into core information 310 having a new data format by the conversion engine. The core information 310 is displayed on the screen of the user portable terminal 40 And may be included in the user interface 300 for the verification of the original text. Here, the conversion engine may further include a function of generating the user interface 300 for checking the original text of the signature and displaying the interface 300, in addition to the function of generating the core information 310 of the new format.

The user interface for signature text verification 300 may include, in addition to the core information 310, a control that the user can click with a mouse or touch by touching. In the example shown in FIG. 3, if it is determined that the core information 310 displayed on the screen is not forged, the user can touch the 'OK' control. Then, on the screen of the user portable terminal 40, a prompt to input the certificate password may be displayed. In response, a digital signature can be performed if the user enters a certificate password. On the other hand, if it is determined that the core information 310 displayed on the screen is forged, the user can touch the 'cancel' control, and the digital signature process can be terminated without a certificate encryption procedure.

In the example shown in FIG. 3, the user interface for signature text verification 300 does not include a portion for inputting a certificate password. Alternatively, it is possible that an input form means can be included that can receive the certificate password from the user in the user interface 300 for sign validation. The format of the signature textual verification user interface 300 shown in FIG. 3 is provided by way of example only, and the present invention is not limited to the illustrated format. In other words, it is obvious that any type of data format can be used as long as the core information 210, which is the information required to be confirmed by the user, is easily recognized by the user.

4 is a schematic flowchart for explaining a process of performing an electronic signature in an electronic signature system using a mobile terminal according to an embodiment of the present invention.

The service server 10 may transmit the digital signature request together with the signature text to the user terminal 20 (401). The user terminal 20 may transmit the service server information and the mobile terminal information together with the signature text and the digital signature request to the relay server 30 (403). Then, the relay server 30 transmits the signature original text and the digital signature request To the user portable terminal 40 (405).

Then, the user portable terminal 40 can convert the format of the original text of the signature using the conversion engine received from the relay server 30, and display it on the screen (407). This step 407 is a step for the user to confirm whether or not a forgery or falsification by a malicious third party among the original texts for digital signature is confirmed. That is, except for the encoding code related to the data format of the signature text on the screen of the user portable terminal 40 on which the digital signature is performed, only the text portion of the signature text can be extracted and displayed. By visually confirming the displayed content, the user can be assured that the contents of the original text have not been tampered with. If the original text of the signature is forged due to a malicious third party hacking the memory of the user's terminal 20, the user can confirm that the original text has been tampered with before the user enters the certificate password for the electronic signature, You can stop typing the password for signing.

Then, the user portable terminal 40 may prompt the user to input the certificate password (409) after driving the application for electronic signature or simultaneously after displaying the original text on the screen. Since the user has confirmed whether the content of the original text displayed on the screen of the user portable terminal 40 is intended by the user or falsified by a third party, if the user does not have any abnormality, So that the digital signature is performed (411). When the digital signature is performed, a digital signature value is generated in the user portable terminal 40 and transmitted to the relay server 30 (413). This digital signature value may be transmitted (415) from the relay server (30) to the user terminal (20) and finally submitted to the service server (417).

On the other hand, if it is determined in step 409 that the content of the original text displayed on the screen of the portable terminal 40 is forged by a third party, the user can cancel the electronic signature without performing the digital signature. In this case, steps 413 to 417 in which the digital signature value is transmitted from the digital signature execution step 411 to the service server 10 are not performed.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is evident that many alternatives, modifications, and variations will be apparent to those skilled in the art. Therefore, it should be pointed out that the scope of the present invention is not limited to the described embodiments, but should be construed according to the appended claims.

10: Service server
20: User terminal
30: Relay server
40: user portable terminal
42: USIM chip

Claims (7)

delete delete A service server 10 for transmitting the original text of the signature to the user terminal 20, a user terminal 20 for generating an electronic signature value by performing a digital signature using a pre-stored certificate and an electronic signature key, A user terminal 20 receiving the digital signature value from the user portable terminal 40 and submitting the digital signature value to the service server 10 and a user terminal 20 connecting the user portable terminal 40 and the user terminal 20 to each other And a relay server (30) for relaying a request for an electronic signature and a result thereof, the electronic signature system comprising:
The user terminal 20 is configured to transmit the signature text received from the service server 10 to the relay server 30;
The relay server (30) is configured to transmit a conversion engine for converting the data format of the signature text together with the signature text to the user portable terminal (40);
The user portable terminal 40 may convert the data format of the signature text by the conversion engine received from the relay server 30 before performing the digital signature on the signature text, Respectively,
The conversion engine includes computer executable instructions for causing the processor of the user portable terminal 40 to provide a signature text having a data format corresponding to a particular service provided by the service server 10 To the data format corresponding to the user portable terminal (20)
And the electronic signature system using the portable terminal. The method of claim 3,
The service server 10 transmits the conversion engine to the user terminal 20 together with the signature text,
And the relay server (30) is configured to transmit the conversion engine received from the user terminal (20) to the user portable terminal (40). The method of claim 3,
The user terminal 20 stores the conversion engine and transmits it to the relay server 30 together with the signature text,
The relay server 30 is configured to forward the conversion engine received from the user terminal 20 to the user portable terminal 40
And the electronic signature system using the portable terminal. The method of claim 3,
The relay server 30 stores at least one conversion engine and receives the identification information of the service server 10 together with the signature text from the user terminal 20, Searches the conversion engine corresponding to the identification information of the service server (10) among the conversion engines, and transmits the retrieved conversion engine to the user portable terminal (40). 7. The method according to any one of claims 3 to 6,
The user portable terminal 40 includes:
And a Universal Subscriber Identification Module (USIM) chip for storing the certificate and the digital signature key, receiving a certificate password from a user, and performing a digital signature on the signature text to generate an electronic signature value. Digital signature system using terminal.

Images