WO2022099909A1

WO2022099909A1 - Application method for delegating electronic certificate among multiple roles

Info

Publication number: WO2022099909A1
Application number: PCT/CN2020/142471
Authority: WO
Inventors: 吴志雄; 黄文峰; 汪翔; 吴真
Original assignee: 南威软件股份有限公司
Priority date: 2020-11-13
Filing date: 2020-12-31
Publication date: 2022-05-19
Also published as: CN112288409A; CN112288409B

Abstract

The present invention relates to an application method for delegating an electronic certificate among multiple roles. According to the method, a trust system of electronic certificates is constructed on the basis of a blockchain technology, and a decentralized scheme for delegated certificate data verification, autonomous delegated certificate management, and certificate storage of a delegation and authorization process is provided for governments, masses and enterprises in a delegation affair handling process. The characteristics of decentralization, tamper resistance, traceability and the like of the blockchain are utilized to ensure that the whole process of certificate management and delegation use is chained and credible. Moreover, a digital signature technology is applied in an electronic certificate delegation process, and the digital signature technology is a numeric string which can only be generated by a client and cannot be counterfeited by others; the numeric string is also an effective proof for authenticity of information sent by the client; a digital signature mechanism serves as one of measures for guaranteeing network information security. The technologies of timestamps, serial numbers and the like play an important role in anti-counterfeiting, identifiable performance, tamper-proof, replay-proof, denial-proof, confidentiality and the like in the whole delegation process.

Description

An application method for entrusting electronic certificates among multiple roles

technical field

The invention relates to an application method for entrusting an electronic certificate among multiple roles.

Background technique

Entrustment, as the name suggests, is entrusting things to others or other institutions to handle. After the certificate holder has been authenticated by the "real name + real person" credible identity, he can authorize or entrust others to use the electronic certificate he holds. The entrusted use of the certificate means that the holder of the certificate entrusts others to use it as an agent in a specific matter and a specific period of time. At present, the act of entrustment mainly occurs in offline office halls. If A entrusts B to handle a certain matter, A needs to hand over the paper certificate and power of attorney to B by offline or by mail, and then B will replace A with full authority. Complete the transaction. When the principal of the entrusting party takes the paper certificate and power of attorney to the window to handle affairs on behalf of the principal of the entrusting party, it is not only easy to cause the loss of the paper certificate, but also the reliability of the handwritten signature cannot be guaranteed.

Due to these difficulties, the offline work materials are unusually large and complex. If the materials are accidentally lost or incomplete, it will also lead to frequent errands by the masses and low work efficiency.

With the rapid development of society, the needs of the masses and enterprises are increasing day by day, and the scenes of offline work are gradually increasing. There are usually the following three service scenarios: individuals are entrusted to individuals, individuals are entrusted to enterprises, and enterprises are entrusted to individuals. Among them, the scene where the enterprise entrusts the individual is the most complicated. First of all, small-scale enterprises may not have many staff, and usually the legal representative will go to the window to handle matters. However, in large-scale enterprises, personnel management is relatively strict. As well as relevant documents such as certificates and licenses, hand it over to the management personnel of the enterprise. After the management personnel have finalized the staff, the legal representative also needs to sign by hand on the authorization letter that clarifies the staff, and then the management staff will hand it over to the staff to complete matters handle.

With the promotion of electronic licenses, "Internet + government affairs" has greatly changed the working habits of the masses and enterprises, and the existing scenarios are no longer applicable. On the one hand, the method of paper certificate + handwritten authorization letter cannot guarantee the security of the certificate, and the authenticity of the signature is also questioned. Manually signed documents are not confidential. Once the document is lost, the information in it is very likely to be leaked. . For example, when the window staff gets the handwritten authorization letter, how to verify the signature handwriting? How can the entrusting party be sure that its certificate has been used with true and correct authorization? On the other hand, the links of the work process also become cumbersome and lengthy due to layer-by-layer transmission.

technical problem

The purpose of the present invention is to provide an application method for entrusting electronic certificates among multiple roles, which can improve the efficiency of public affairs and improve reliability.

technical solutions

In order to achieve the above purpose, the technical scheme of the present invention is: an application method for entrusting electronic certificates among multiple roles, comprising the following steps: Step S1, when an individual/enterprise initiates an entrustment, a face-to-face code scanning entrustment or a remote entrustment method is adopted; Step S2. If it is a face-to-face scan code entrustment, the entrusting party selects the electronic certificate to be used when handling the matter, fills in the reason for the entrustment, and selects the start date and end date of the entrustment; if it is a remote entrustment, the entrusting party must first select to be entrusted. After filling in the information of the entrusted party, select the electronic certificate to be used when handling the matter, fill in the reason for the entrustment, and select the start date and end date of the entrustment; Step S3, the entrusting party makes an electronic handwritten signature or selects the signature handwriting, and the entrustment is successful After that, the power of attorney is automatically generated and viewed and presented on the entrustment details page; Step S4, if it is a face-to-face scan code entrustment, the entrusting party generates and presents the entrustment code, and the entrusting party scans the entrustment code; if it is a remote entrustment, it is entrusted The client will get the notification of the entrustment, and can choose to accept or reject the entrustment in the entrustment list, and then feed back the notification of the entrusting party's result; step S5, after the successful entrustment, both parties to the entrustment can view the entrustment in the entrustment list. The entrusting party can take the initiative to revoke the entrusted electronic certificate; in step S6, when the entrusted party goes to the offline window to do business, the window staff can scan the code by showing the authorization code to obtain it, or actively scan the window to show the authorization code. Associate the entrusted electronic certificate in the certificate package to complete the handling of the matter; in step S7, the production of the power of attorney and the entrustment and authorization of the electronic certificate are recorded on the blockchain, and there are traces to follow.

In an embodiment of the present invention, the fields of the power of attorney can be dynamically configured according to different business scenarios, so that there are different templates to provide services for different businesses in different regions.

In an embodiment of the present invention, in step S7, the production of the power of attorney and the entrustment and authorization of the electronic certificate are recorded on the chain. Specifically: the entrusting party: the real-name authentication is required before using the certificate package, and the real-name authentication is required at the same time. The result will be stored on the blockchain. When the entrusting party initiates the entrustment, the entrusting behavior will be stored on the chain. The entrusted behavior cannot be denied. The entrusted behavior is verified to confirm that the entrusted behavior actually exists; the entrusted party: Before using the entrustment function, the entrusted party also needs to perform real-name authentication, and store the result of the real-name authentication on the blockchain for other applications. The result of the certificate will be verified, and the acceptance/rejection of the entrusted party will also be stored on the chain. Both parties involved in the entrustment can confirm the entrustment through the result of the deposit of the blockchain, and whether the entrusting party has successfully entrusted it. Certificate, whether the entrusted party successfully receives the entrusted certificate can be verified through the certificate information of the blockchain. At the same time, when the entrusted party authorizes the entrusted electronic certificate to others, the authorization behavior of the entrusted electronic certificate will be displayed in real time. chain, the authorization behavior will also be synchronized to the entrusting party, and the entrusting party will know in real time whether the entrusted party uses the electronic certificate to handle the transaction correctly according to the entrustment requirements through the certificate deposit result of the blockchain. Revocation of the entrustment of this electronic certificate; Recipient: When the entrusted party goes to the offline window to handle matters, the recipient verifies the entrusted party through the real-name authentication information on the blockchain. After passing the verification, the recipient Scan the authorization code presented by the entrusted party to receive the entrusted electronic certificate authorized during the handling of the matter, download and view the certificate according to the needs, and the authorization and use behavior will be stored on the blockchain, and the entrusting party can The authenticity of the authorization behavior is confirmed by reading the results of the blockchain certificate.

beneficial effect

Compared with the prior art, the present invention has the following beneficial effects: 1. Establishing an entrusted mode and mechanism, adapting to offline work and management needs, improving work efficiency, improving the safety of using licenses, and solving the problems between the masses and the multi-roles of enterprises; 2. Establish the traceability of entrustment, and promote the occurrence of online entrustment business based on the mechanism of blockchain authentication. Record the public's entrustment and authorization behavior on the chain, so that the public can use it with confidence.

Description of drawings

FIG. 1 is a schematic diagram of making a power of attorney in an example of the present invention.

FIG. 2 is a schematic diagram of an application method for entrusting a sub-license among multiple roles according to the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

The technical solutions of the present invention will be described in detail below with reference to the accompanying drawings.

The present invention provides an application method for entrusting an electronic certificate among multiple roles, and the specific implementation is as follows: 1. Making a power of attorney, as shown in Figure 1; 2. Entrusting management between multiple roles of an electronic certificate, as shown in Figure 2 , as follows: 1. Management of electronic certificates among multiple roles; (1) Individuals, first of all, personal electronic certificates are managed by an independent certificate package before entrusting to ensure the independence and security of certificates. When there is an entrusting behavior between them, the licenses entrusted to me by others and the licenses entrusted to others by me will also be managed separately.

(2) For enterprises, first of all, the electronic certificates of enterprises are managed independently by the enterprise certificate package, just like individuals. The difference from individuals is that in addition to the management and use of the enterprise certificate package by the legal representative, the legal representative can also formulate a For managers, the authority is given to administrators to exercise on their behalf. Except that managers can no longer designate managers, other authority is equivalent to the legal representative. For example, the administrator who has obtained the authority can directly entrust the enterprise's license to the clerk to handle the matter. This setting is not only in line with the management model of offline enterprises, but also greatly reduces the workload of the legal representative level.

2. Entrustment of electronic licenses between multiple roles, (1) Scanning entrustment, that is, when entrusting both parties to handle matters face-to-face, entrust the use of licenses by issuing codes and scanning codes.

Scan code entrustment process: Step 1. Individuals/enterprises choose face-to-face entrustment when initiating an entrustment.

Step 2. Select the certificate to be used when handling the matter, fill in the reason for the entrustment, and select the start date and end date of the entrustment.

Step 3. The entrusting party performs an electronic handwritten signature or selects the signature handwriting. After the entrustment is successful, a power of attorney will be automatically generated and viewed and presented on the entrustment details page.

Step 4. The entrusting party generates and presents the entrustment code, and the entrusted party scans the entrustment code using the "scan" function of the mobile app.

Step 5. After success, both parties can view the entrusted electronic certificate in the entrustment list. The entrusting party can voluntarily revoke the entrusted electronic certificate.

Step 6. When the entrusted party goes to the offline window to do business, the staff at the window can scan the code to obtain the authorization code by showing the authorization code or actively scan the authorization code shown at the window, and associate the authorization certificate in the certificate package to complete the handling of the matter.

Step 7. The production of the power of attorney and the entrustment and authorization of the certificate are recorded on the chain, and there are traces to follow.

(2) Remote entrustment, that is, when we do not meet, the license is entrusted to be used by means of remote entrustment.

Remote entrustment process: Step 1. Individuals/enterprises choose the method of remote entrustment when initiating an entrustment.

Step 2. Select the certificate to be used when handling the matter, and select the entrusted party. At this time, you need to manually add the identity information of the entrusted party. If the entrusted object is an individual, enter the name, ID number, mobile phone If the entrusted object is an enterprise, enter the unified social credit code and the mobile phone number of the legal representative/administrator.

Step 3. After selecting the entrusted party, continue to fill in the reason for the entrustment, and select the start date and end date of the entrustment.

Step 4. The entrusting party performs an electronic handwritten signature or selects the signature handwriting. After the entrustment is successful, a power of attorney will be automatically generated and viewed and presented on the entrustment details page.

Step 5. After the remote entrustment is initiated, the entrusted party will receive the message through a short message, and the user of the same mobile application can obtain the entrusted notification in the message push of the application.

Step 6. The entrusted party can choose to accept or reject this entrustment in the entrustment list. No matter what kind of result, the entrusting party will receive a notification of the result.

Step 7. After the entrusted party accepts the entrustment, both parties can view the entrusted electronic certificate in the entrustment list. If you choose to refuse, the entrustment will not be established. The entrusting party can also voluntarily revoke the entrusted electronic certificate.

Step 8. When the entrusted party goes to the offline window to do business, the staff at the window can scan the code to obtain the authorization code by showing the authorization code or actively scan the authorization code shown at the window, and associate the authorization certificate in the certificate package to complete the handling of the matter.

Step 9. The production of the power of attorney and the entrustment and authorization of the certificate are recorded on the chain, and there are traces to follow.

3. Dynamic configuration of the power of attorney, the fields of the power of attorney can be dynamically configured according to different business scenarios, and then there are different templates to provide services for different businesses in different regions. For example, the power of attorney sample in area A needs to display the ID numbers of both the entrusting parties, then dynamically configure the display of the ID number fields of both parties according to this requirement. Configure independently according to this matter.

4. The application of blockchain in the entrustment business, based on the mechanism of blockchain authentication, promotes the occurrence of online entrustment business.

Client: Whether it is an individual user or a legal person user, real-name authentication is required before using the certificate package, and the result of the real-name authentication will be stored on the blockchain. When the entrusting party initiates the entrustment, the entrustment behavior will be stored on the chain, and the entrusted behavior cannot be denied. Other application parties can verify the entrusting party's entrusting behavior through the results of the blockchain certificate to confirm that the entrusting behavior really exists.

Entrusted party: Before using the delegation function, the entrusted party also needs to perform real-name authentication, and store the result of real-name authentication on the blockchain for other application parties to verify the result of the deposit. The accepted/rejected behavior of the entrusted party will also be stored on the chain. Both parties involved in the entrusted behavior can confirm the entrusted behavior through the results of the blockchain certification. Whether the entrusting party has successfully entrusted the certificate, the entrusted party Whether the entrusted certificate is successfully received can be verified through the deposit information of the blockchain. At the same time, when the entrusted party authorizes the entrusted certificate to others, the authorization behavior of the entrusted certificate will be uploaded on the chain in real time, and the authorization behavior will also be synchronized to the entrusting party. The entrusting party can know in real time whether the entrusted party uses the certificate correctly in accordance with the entrustment requirements through the results of the blockchain certificate.

Recipient: When the entrusted party goes to the offline window to handle matters, the recipient verifies the entrusted party through the real-name authentication information on the blockchain. After passing the verification, the recipient scans the authorization code presented by the entrusted party to receive the entrusted certificate authorized during the handling of the matter, and downloads and views the certificate as required. At the same time, the authorization and use behavior will be recorded on the blockchain. Deposit certificate, the entrusting party can confirm the authenticity of the authorization behavior by reading the result of the blockchain deposit certificate.

The above are the preferred embodiments of the present invention, all changes made according to the technical solutions of the present invention, when the resulting functional effects do not exceed the scope of the technical solutions of the present invention, belong to the protection scope of the present invention.

Claims

An application method for entrusting an electronic certificate among multiple roles, characterized in that it comprises the following steps:

Step S1, when the individual/enterprise initiates the entrustment, the method of face-to-face scanning code entrustment or remote entrustment is adopted;

Step S2. If it is a face-to-face scan code entrustment, the entrusting party selects the electronic certificate to be used when handling the matter, fills in the reason for the entrustment, and selects the start date and end date of the entrustment; if it is a remote entrustment, the entrusting party must first select to be entrusted. After filling in the information of the entrusted party, select the electronic certificate to be used when handling the matter, fill in the reason for the entrustment, and select the start date and end date of the entrustment;

Step S3, the entrusting party performs an electronic handwritten signature or selects the signature handwriting. After the entrustment is successful, a power of attorney is automatically generated and viewed and presented on the entrustment details page;

Step S4, if it is a face-to-face scan code entrustment, the entrusting party generates and presents the entrusting code, and the entrusting party scans the entrusting code; if it is a remote entrustment, the entrusting party will obtain the notification of the entrustment, and can choose to receive or receive in the entrustment list. Reject the entrustment, and then feed back the notification of the entrusting party's result;

Step S5, after successful entrustment, both entrusting parties can view the entrusted electronic certificate in the entrustment list; the entrusting party can voluntarily revoke the entrusted electronic certificate;

Step S6, when the entrusted party goes to the offline window to do business, the window staff can scan the code by showing the authorization code to obtain it, or actively scan the window to show the authorization code, and associate the entrusted electronic certificate in the certificate package to complete the handling of the matter;

In step S7, the production of the power of attorney and the entrustment and authorization of the electronic certificate are recorded on the blockchain, and there are traces to follow.
The application method for entrusting an electronic certificate among multiple roles according to claim 1, wherein the fields of the entrustment letter can be dynamically configured according to different business scenarios, and then there are different templates to provide services for different businesses in different regions .
The application method for entrusting an electronic certificate among multiple roles according to claim 1, characterized in that, in step S7, the making of the power of attorney and the entrustment and authorization behavior of the electronic certificate are recorded on the chain and specifically refer to:

Entrusting party: Real-name authentication is required before using the certificate package, and the result of the real-name authentication will be stored on the blockchain. , other application parties can verify the entrusting behavior of the entrusting party through the results of the blockchain certificate to confirm that the entrusting behavior really exists;

Entrusted party: Before using the entrustment function, the entrusted party also needs to perform real-name authentication, and store the result of the real-name authentication on the blockchain for other application parties to verify the results of the deposit. The entrusted party accepts/rejects The behavior will also be stored on the chain, and both parties involved in the entrusted behavior can confirm the entrusted behavior through the results of the blockchain certification, whether the entrusting party has successfully entrusted the certificate, and whether the entrusted party has successfully received the entrusted certificate. At the same time, when the entrusted party authorizes the entrusted electronic certificate to others for use, the authorization behavior of the entrusted electronic certificate will be uploaded on the chain in real time, and the authorization behavior will also be synchronized to the entrusting party. The party knows in real time whether the entrusted party uses the electronic certificate to handle the affairs correctly according to the entrustment requirements through the results of the blockchain certificate.

Recipient: When the entrusted party goes to the offline window to handle matters, the recipient verifies the entrusted party through the real-name authentication information on the blockchain. After passing the verification, the recipient scans the authorization code presented by the entrusted party. Collect the entrusted electronic certificate authorized in the process of handling this matter, download and view the certificate according to the needs, and this authorization and use behavior will be stored on the blockchain. read to confirm the authenticity of the authorization behavior.