CN101697204B

CN101697204B - Electronic signature

Info

Publication number: CN101697204B
Application number: CN2009102358547A
Authority: CN
Inventors: 须清
Original assignee: Beijing Paragon Technology Co Ltd
Current assignee: Beijing Paragon Technology Co Ltd
Priority date: 2009-10-23
Filing date: 2009-10-23
Publication date: 2013-02-20
Anticipated expiration: 2029-10-23
Also published as: CN101697204A

Abstract

The invention provides an electronic signature which is used for signing on a medium and comprises an information processing component and a printing module, wherein the information processing component contains a cryptographic algorithm module and stores the signing messages and the secret key information of a signature owner; the printing module is connected with the information processing component; the printing module can print information on the medium; the cryptographic algorithm module is utilized to carry out cryptographic algorithm processing on the signing messages to obtain ciphertext information by taking the secret key information as the cipher; and the information processing component is utilized to convert the ciphertext information into singing data to be printed by the printing module. By employing the technology of the invention, the uniqueness and the non-imitating characteristic of the signing information on the basis of a medium based electronic bill is improved, thereby enabling the use of the electronic bill to be safer. Due to adopting a way which is easy to identify and use to realize effective signing on the electronic bill, the risk of the electronic bill in use can be remarkably reduced, thereby promoting the development of modern financial industry.

Description

Electronic Signature

Technical field

The present invention relates to Electronic Signature, particularly relate to the Electronic Signature that is used for bill identification that is printed on the information medium after stamped signature information is encrypted and passes to the electronic unit that is embedded in the medium.

Background technology

Along with the development of modern economy, the health of financial circles, orderly, safe development are significant for current economic development.In the financial circles development, popularize to the comprehensive of various financial documents gradually from money transaction, become the main means of payment that miscellaneous service is carried out in the modern economy such as the letter of credit, cashier's cheque, check etc.

But because the value of financial document itself and circulation are subject to very big challenge to the security of financial document.Report is arranged when forging case that the letter of credit, cashier's cheque, check carry out financial swindling all over the world.And owing to the circulation of the letter of credit, cashier's cheque, check can repeatedly be transferred the possession of, and wherein any once transfer appearance forgery all may bring massive losses to the related side.

With regard to the antifalsification of the present employed letter of credit, cashier's cheque, check normally based on some anti-false signs on concession manufacturing and the ticket; The validation of the letter of credit, cashier's cheque, check is based on the person's that provides the bill signature or endorsement.And based on the reason of cost and technology, the anti-false sign of the letter of credit, cashier's cheque, check is also uncomplicated, is easy to be copied by the fake producer.And there are two problems in the signature or the endorsement that are used for the validation of the letter of credit, cashier's cheque, check: be that signature or the endorsement that same person carries out in decentraction situation attitude, different time points can not guarantee in full accord on the one hand, cause effective signature or endorsement to be rejected acceptance, because the signature that requires to carry out or endorsement must be basic identical at every turn on the other hand, for the fake producer provides the chance of faking.Signer or endorsement person's signature or endorsement information is no matter how unique, in case seen signature or endorsement information by illegal person, the exercise by certain hour can realize the imitation for signature or endorsement information fully.And be to be compared to judge by human eye for the validation of the letter of credit, cashier's cheque, check now.The safety technique that obvious existing ticket adopts can not provide safeguard for the Secure Transaction function that realizes bill.

Use the replacement that carves a seal for many years to sign in China, although guaranteed the consistance of each signature, be imitated too easily owing to carve a seal, so and dangerous.Even by the administrative intervention of government, take the administrative authorization mode to specify and only have the professional through authorizing to carry out the business of carving a seal, but can not stop illegal person's imitated behavior owing to the technical not high of itself.

Although extensively popularizing of the development of modern network technology and internet is for the development of financial circles brings new opportunity.Such as Internet-based banking services and for the electronic key authentication techniques that guarantee Internet-based banking services safety are just becoming the important directions that modern finance already develops, but the safety that also greatly threatening Web bank such as network hacker, virus, fishing program simultaneously.Be still the major transaction instrument of modern finance industry based on the business transaction of financial document.

Summary of the invention

Technical matters to be solved by this invention is how to strengthen the safety of electronic bill and how to guarantee the signing messages of electronic bill and/or security and the validity of endorsement information, and realize effective circulation of electronic bill in the mode of a kind of easy identification and use, to reduce the risk in the electronic bill use, promote the development of modern finance industry.

The term explanation: during technical solution of the present invention was described, " Electronic Paper " referred to comprise the equipment that can show information or parts or the flexible display material with bistable state or multistable electronic material formation, can change its displaying contents by electronization.The electrodeless Electronic Paper of Beijing Pai Ruigen scientific and technological invention, the electric wetting Electronic Paper of Beijing Pai Ruigen scientific and technological invention, the electric ink of E-ink company, the electrophoresis cartridge of SIPIX company etc. are typically arranged.

The term explanation: during technical solution of the present invention was described, financial document was to be used for carrying out the voucher relevant with financial business in the financial business field.Recorded at least one information relevant with financial business on the bill.

The term explanation: during technical solution of the present invention was described, electronic bill was the voucher that is applied to every field and traffic aided.Recorded at least one information with traffic aided on the bill.Comprise passenger ticket in financial document, the communications and transportation and shipping ticket, film ticket, food and drink ticket, coupons, lottery ticket etc.

Term explanation: during technical solution of the present invention was described, endorsement referred to that the owner of bill transfers other people with bill and the behavior confirmed.Show as and stay at least one at bill and prove information or the sign of bill owner in order to confirm.

The term explanation: during technical solution of the present invention was described, radio electronic label, RFID, RF Tag, RFID tag, electronic tag etc. had identical implication.

The term explanation: during technical solution of the present invention was described, the implication of " endorsement " referred in the industries such as financial field, electronic bill is realized the proof information of the relevant proprietorial transfer of electronic bill or payment respective value fund by specific information representation.The implication of " remote holder endorsement " is to show that the bill that the electronic bill holder obtains is that its bill supplier transfers the bill holder by " endorsement ", and the information of " remote holder endorsement " is the reliability prove of this transfer.

For addressing the above problem, the technical solution that proposes is at first to design a kind of Electronic Signature, employing presents the information of Electronic Signature in a kind of visible mode, even be that the information of Electronic Signature is not easy imitated or has imitated the thinking of dealing with problems that can not effectively use simultaneously.

At first, the electronic bill that technical solution of the present invention adopts and the electronic bill of prior art have difference, and the present invention is adopted as the special technology scheme of the present invention that realizes.

1, a kind of electronic bill is characterized in that the inclusion information medium, sets a particular signature zone at front and/or the reverse side of described information medium, signing messages is encrypted the cipher-text information that obtains is printed on described particular signature zone usefulness.

2, a kind of electronic bill, it is characterized in that the inclusion information medium, in described information medium, embedded electronic unit and in the front of described information medium and/or reverse side set a particular signature zone, signing messages is encrypted the cipher-text information that obtains is printed on described particular signature zone and/or signing messages is encrypted the cipher-text information that obtains and write in the described electronic unit; Perhaps with signing messages be encrypted the cipher-text information that obtains from the data message that described electronic unit reads and be printed on described particular signature zone and/or will comprise signing messages and be encrypted the cipher-text information that obtains from the data message that described electronic unit reads and write the described electronic unit.

3, a kind of electronic bill, it is characterized in that the inclusion information medium, in described information medium, embedded electronic unit and in the front of described information medium and/or reverse side set a particular signature zone, signing messages is encrypted the cipher-text information that obtains all or whole or second portion that first is printed on described particular signature zone and/or signing messages is encrypted the cipher-text information that obtains writes in the described electronic unit; Perhaps be printed on described particular signature zone and/or write the described electronic unit with signing messages with from the whole or second portion that the data message that described electronic unit reads is encrypted the cipher-text information that obtains with signing messages with from the whole or first that the data message that described electronic unit reads is encrypted the cipher-text information that obtains.

4, in the solution of above-mentioned electronic bill, described cipher-text information comprises the result who adopts asymmetric enciphering and deciphering algorithm to calculate as key to described signing messages take electronic bill supplier's private key.

5, in the solution of above-mentioned electronic bill, described cipher-text information comprises take electronic bill supplier's private key as key the result who adopts the second algoritic module of asymmetric enciphering and deciphering algorithm to calculate take electronic bill recipient's PKI as password again after adopting the first algoritic module of asymmetric enciphering and deciphering algorithm to calculate to described signing messages.

6, in the solution of above-mentioned electronic bill, described cipher-text information comprises take electronic bill recipient's PKI as key the result who adopts the second algoritic module of asymmetric enciphering and deciphering algorithm to calculate take electronic bill supplier's private key as password again after adopting the first algoritic module of asymmetric enciphering and deciphering algorithm to calculate to described signing messages.

7, in the solution of above-mentioned electronic bill, described cipher-text information comprises the first result of calculation of the first algoritic module of the asymmetric enciphering and deciphering algorithm of part or all of employing of described signing messages being calculated take electronic bill supplier's private key as key and to second result of calculation that partly or entirely adopts the second algoritic module of asymmetric enciphering and deciphering algorithm to calculate take electronic bill recipient's PKI as password of described signing messages.

8, in the solution of above-mentioned electronic bill, one of following information or several combinations have been recorded with the plaintext form in the surface of described information medium: the amount of money, the term of validity, the date of making out an invoice, the date of payment, drawer, payer, accepter, income people, whether negotiable.

9, in the solution of above-mentioned electronic bill, described signing messages comprises endorsement information, and described endorsement information comprises endorsement person's information and by endorsement person's information.Described endorsement information can further comprise one of following information or several combinations: date of endorsement, the term of validity, whether negotiable.

10, in the solution of above-mentioned electronic bill, described signing messages comprises one of following information of electronic bill or several combinations: the amount of money, the term of validity, the date of making out an invoice, the date of payment, drawer, payer, accepter, income people, whether negotiable.

11, in the solution of above-mentioned electronic bill, described signing messages can further comprise remote holder endorsement person signing messages partly or entirely.

Electronic Signature of the present invention has kinds of schemes, is respectively:

1, a kind of Electronic Signature is characterized in that signing at medium, comprises such as lower member:

Information processing apparatus, described information processing apparatus comprise enciphering algorithm module and have stored the key information of signing messages, signature owner;

Print module, described print module is connected with described information processing apparatus, and described print module can print information at medium;

Take described key information as password described signing messages is encrypted calculation process by described enciphering algorithm module and obtains cipher-text information, by described information processing apparatus described cipher-text information is converted to the signed data that described print module prints.

2, a kind of Electronic Signature is characterized in that signing at the medium that comprises electronic unit, comprises such as lower member:

Module for reading and writing, described module for reading and writing is connected with described information processing apparatus, described module for reading and writing data writing in the electronic unit;

Take described key information as password described signing messages is encrypted calculation process by described enciphering algorithm module and obtains cipher-text information, by described information processing apparatus described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; And/or by described information processing apparatus described cipher-text information is converted to the signed data that described print module prints.

3, a kind of Electronic Signature is characterized in that signing at the medium that comprises electronic unit, comprises such as lower member:

Take described key information as password described signing messages is encrypted calculation process by described enciphering algorithm module and obtains cipher-text information, by described information processing apparatus the whole or first of described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; And/or by described information processing apparatus the whole or second portion of described cipher-text information is converted to the signed data that described print module prints.

4, a kind of Electronic Signature is characterized in that signing at the medium that comprises electronic unit, comprises such as lower member:

Module for reading and writing, described module for reading and writing is connected with described information processing apparatus, described module for reading and writing in the electronic unit data writing and/or from electronic unit reading out data;

Take described key information as password the data that read, described signing messages are encrypted calculation process by described enciphering algorithm module from electronic unit and obtain cipher-text information, by described information processing apparatus described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; And/or by described information processing apparatus described cipher-text information is converted to the signed data that described print module prints.

5, a kind of Electronic Signature is characterized in that signing at the medium that comprises electronic unit, comprises such as lower member:

Take described key information as password the data that read, described signing messages are encrypted calculation process by described enciphering algorithm module from electronic unit and obtain cipher-text information, by described information processing apparatus the whole or first of described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; And/or by described information processing apparatus the whole or second portion of described cipher-text information is converted to the signed data that described print module prints.

In this scheme, be printed on the medium becoming enciphered message after the private key information processing of described signing messages by described rivest, shamir, adelman module employing signature owner, can guarantee the uniqueness of the stamped signature of signer.When being in modes such as bar code or two-dimensional bar codes, enciphered message can adopt easily now corresponding bar code scanner or two-dimensional bar code reader to carry out automatic reading.And can decipher this information with the public key information of signer and obtain raw information.

6, preferably described enciphering algorithm module adopts symmetric encipherment algorithm, described key information be encryption key also be decruption key; Perhaps

Described enciphering algorithm module adopts rivest, shamir, adelman, and described key information is the PKI of signature owner; Perhaps

Described enciphering algorithm module adopts rivest, shamir, adelman, and described key information is the private key of signature owner.

7, preferably such scheme further comprises:

Keyboard device, described information processing apparatus is processed the input message of described keyboard device.Can in signing messages, comprise the information that signer is inputted by this keyboard device, such as information such as the amount of money, date, signer names.

8, preferably such scheme further comprises:

Radio receiving transmitting module, described information processing apparatus are processed the information from the information of described radio receiving transmitting module and the described radio receiving transmitting module transmission of control.Can in signing messages, comprise the information that signer is inputted by this radio receiving transmitting module, such as the information such as password of the amount of money, date, signer name, use Electronic Signature.

9, preferably in the such scheme:

Described keyboard device comprises at least one and confirms button; Perhaps

Described keyboard device comprises button and affirmation button of input 0 to 9 at least; Perhaps

Described keyboard device comprises the button of input 0 to 9, an affirmation button, a cancellation button at least; Perhaps

Described keyboard device comprises the button of input 0 to 9, an affirmation button, a rollback button at least; Perhaps

Described keyboard device comprises the button of input 0 to 9, an affirmation button, a cancellation button, a rollback button at least.

10, preferably such scheme further comprises:

Display unit, described information processing apparatus is controlled the displaying contents of described display unit.Display unit can be used for the information of display keyboard input block input or the information that radio receiving transmitting module receives or the raw information of preparing signature.Preferably the information of signature demonstration can be used alternatives.Replace with " * " character during such as the password of, input Electronic Signature.

11, preferably such scheme further comprises the fixedly support of Electronic Signature.Increase support and be convenient to printed signature information or carry out electronization or carry out communication with electronic unit for Electronic Paper, play fixing, balance and stabilization.

12, preferably the described print module of such scheme comprises abundant print needle or fine ink-jet pipe, and described print needle or fine ink-jet pipe cover the scope that stamped signature needs print What at least.

13, preferably the described raw data of such scheme comprises the identification information of described signature owner and described medium recipient's identification information; Perhaps described raw data comprises the identification information of described signature owner, described medium recipient's identification information and timestamp.

14, preferably in the such scheme:

Described rivest, shamir, adelman module is supported commercial cipher algorithm and/or the dedicated asymmetric cryptographic algorithm of RSA Algorithm and/or China national approval;

15, preferably in above-mentioned several Electronic Signature scheme, described medium is paper medium or to comprise the medium of fibrous material.

16, preferably:

Described electronic unit is radio electronic label; Perhaps

Described electronic unit is contact type smart card chip or module; Perhaps

Described electronic unit is contact type intelligent card chip or module; Perhaps

Described electronic unit is contact storage card chip or module; Perhaps

Described electronic unit is contactless storage card chip or module.

The method that adopts above-mentioned Electronic Signature to sign is as follows:

1, a kind of method at signature on information medium is characterized in that comprising following steps:

Adopt the algoritic module of rivest, shamir, adelman to carry out calculation process take the private key of signer as password signing messages and obtain encrypt data;

Described encrypt data is converted to printed signature information;

Described printed signature information is printed on the information medium.

2, a kind of method at signature on information medium is characterized in that comprising following steps:

Adopt cryptographic algorithm to carry out calculation process take the key information of signature owner as password signing messages and obtain encrypt data;

Described encrypt data is converted to printed signature information;

Described printed signature information is printed on the information medium.

3, a kind of method at signature on information medium is characterized in that described information medium has embedded electronic unit, and signature comprises following steps:

Described encrypt data is converted to the signed data that writes to described electronic unit, and described encrypt data is converted to printed signature information;

Described signed data is write described electronic unit, and described printed signature information is printed on the information medium.

4, a kind of method at signature on information medium is characterized in that described information medium has embedded electronic unit, and signature comprises following steps:

Read data information from electronic unit;

Described signing messages and described data message as adopting cryptographic algorithm to carry out calculation process, password are obtained encrypt data take the key information of signature owner;

5, a kind of method at signature on information medium is characterized in that described information medium has embedded electronic unit, and signature comprises following steps:

With the first of described encrypt data or all be converted to the signed data that writes to described electronic unit, and with the second portion of described encrypt data or all be converted to printed signature information;

6, a kind of method at signature on information medium is characterized in that described information medium has embedded electronic unit, and signature comprises following steps:

Read data information from electronic unit;

The Verification System design proposal that the electronic bill that adopts above-mentioned Electronic Signature to sign authenticates is as follows:

1, a kind of system that signature on information medium is authenticated is characterized in that comprising:

Certificate server, described certificate server inclusion information acquisition component, enciphering and deciphering algorithm calculating unit, data back;

Information medium, described information medium surface has pair signing messages to be encrypted the cipher-text information that obtains;

Described enciphering and deciphering algorithm calculating unit comprises the computing module of enciphering and deciphering algorithm;

Stored described information medium owner's approval signing messages in the described data back;

Described information acquisition parts gather described cipher-text information and described cipher-text information are converted to the cipher-text information data of being processed by described certificate server;

Described enciphering and deciphering algorithm calculating unit is decrypted the plaintext that obtains signing messages to described cipher-text information data;

The whether consistent authentication that realizes information medium of pre-stored approval signing messages in the plaintext of described certificate server by more described signing messages and the described data back.

2, a kind of system that signature on information medium is authenticated is characterized in that comprising:

Information medium has embedded electronic unit in the described information medium, has write in described electronic unit signing messages is encrypted the cipher-text information that obtains;

3, a kind of system that signature on information medium is authenticated is characterized in that comprising:

Information medium, described information medium comprises Electronic Paper, has in the described Electronic Paper signing messages is encrypted the cipher-text information that obtains;

4, a kind of system that signature on information medium is authenticated is characterized in that comprising:

Information medium, embedded electronic unit in the described information medium, write the first that signing messages is encrypted the cipher-text information that obtains in described electronic unit, described information medium surface has pair signing messages to be encrypted the second portion of the cipher-text information that obtains;

Described information acquisition parts gather the second portion of the first of described cipher-text information and cipher-text information and the first of described cipher-text information and the second portion of cipher-text information are converted to the cipher-text information data of being processed by described certificate server;

5, a kind of system that signature on information medium is authenticated is characterized in that comprising:

Information medium, embedded electronic unit in the described information medium, in described electronic unit, write the first that signing messages is encrypted the cipher-text information that obtains, described information medium comprises Electronic Paper, has the second portion that signing messages is encrypted the cipher-text information that obtains in the described Electronic Paper;

6, a kind of system that signature on information medium is authenticated is characterized in that comprising:

Information medium, embedded electronic unit in the described information medium, in described electronic unit, write the first that signing messages is encrypted the cipher-text information that obtains, described information medium comprises Electronic Paper, have the second portion that signing messages is encrypted the cipher-text information that obtains in the described Electronic Paper, described information medium surface has pair signing messages to be encrypted the third part of the cipher-text information that obtains;

Described information acquisition parts gather the third part of the second portion of first, cipher-text information of described cipher-text information and cipher-text information and the first of described cipher-text information, the second portion of cipher-text information and the third part of cipher-text information are converted to the cipher-text information data of being processed by described certificate server;

The method that signature on information medium is authenticated is as follows:

1, a kind of method that signature on information medium is authenticated comprises following steps:

Collection is printed on the cipher-text information of the conduct signature on the information medium;

Described cipher-text information deciphering is obtained signing messages;

Whether the approval signing messages of judging described signing messages and authentification of message system storage mates;

If mate then authentication success;

If do not mate then authentification failure.

2, a kind of method that signature on information medium is authenticated comprises following steps:

Collection is presented on the cipher-text information of the conduct signature on the Electronic Paper of information medium;

Described cipher-text information deciphering is obtained signing messages;

If mate then authentication success;

If do not mate then authentification failure.

3, a kind of method that signature on information medium is authenticated comprises following steps:

Collection is embedded in the cipher-text information of the conduct signature that the electronic unit in the information medium stores;

Described cipher-text information deciphering is obtained signing messages;

If mate then authentication success;

If do not mate then authentification failure.

4, a kind of method that signature on information medium is authenticated comprises following steps:

Collection be embedded in the conduct signature that the electronic unit in the information medium stores cipher-text information first and gather the second portion of the cipher-text information of the conduct signature that is printed on the information medium;

The first of described cipher-text information and the second portion deciphering of cipher-text information are obtained signing messages;

Whether the approval signing messages of judging described signing messages and described authentification of message system storage mates;

If mate then authentication success;

If do not mate then authentification failure.

5, a kind of method that signature on information medium is authenticated comprises following steps:

Collection be embedded in the conduct signature that the electronic unit in the information medium stores cipher-text information first and gather the second portion of the cipher-text information of the conduct signature on the Electronic Paper that is presented on information medium;

If mate then authentication success;

If do not mate then authentification failure.

6, a kind of method that signature on information medium is authenticated comprises following steps:

Collection is embedded in the first of the cipher-text information of the conduct signature that the electronic unit in the information medium stores, gather the conduct signature on the Electronic Paper that is presented on information medium cipher-text information second portion and gather the third part of the cipher-text information of the conduct signature that is printed on the information medium;

The first of described cipher-text information, the second portion of cipher-text information and the third part deciphering of cipher-text information are obtained signing messages;

If mate then authentication success;

If do not mate then authentification failure.

Beneficial effect of the present invention: the present invention improved signing messages uniqueness, can not copying property, make the use of electronic bill safer.Owing to adopt the mode of a kind of easy identification and use to realize effective signature of electronic bill, can significantly reduce the risk in the electronic bill use, promote the development of modern finance industry.

Description of drawings:

Fig. 1 is that Electronic Signature the first of the present invention realizes synoptic diagram.

Fig. 2 is that Electronic Signature the second of the present invention is realized synoptic diagram.

Fig. 3 is Electronic Signature the first implementation principle of work synoptic diagram of the present invention.

Fig. 4 is Electronic Signature the second implementation principle of work synoptic diagram of the present invention.

Fig. 5 is the third implementation principle of work synoptic diagram of Electronic Signature of the present invention.

Fig. 6 is the third realization synoptic diagram of Electronic Signature of the present invention.

Fig. 7 is that the 4th kind of Electronic Signature of the present invention realized synoptic diagram.

Fig. 8 is the 4th kind of implementation principle of work synoptic diagram of Electronic Signature of the present invention.

Fig. 9 is the 5th kind of implementation principle of work synoptic diagram of Electronic Signature of the present invention.

Figure 10 is the 6th kind of implementation principle of work synoptic diagram of Electronic Signature of the present invention.

Figure 11 is that authentification of message of the present invention system the first realizes synoptic diagram.

Figure 12 is that authentification of message of the present invention system the second is realized synoptic diagram.

Figure 13 is the first method synoptic diagram that signs electronically.

Figure 14 is the second method synoptic diagram that signs electronically.

Figure 15 is the third method synoptic diagram that signs electronically.

Figure 16 is the 4th kind of method synoptic diagram that signs electronically.

Figure 17 is the first method synoptic diagram that carries out electronics endorsement signature.

Figure 18 is the second method synoptic diagram that carries out electronics endorsement signature.

Figure 19 is the first method synoptic diagram that carries out electronics reendorse signature.

Figure 20 is the second method synoptic diagram that carries out electronics reendorse signature.

Figure 21 is the first method synoptic diagram that carries out electron underwriting authentication.

Figure 22 is the second method synoptic diagram that carries out electron underwriting authentication.

Figure 23 is electronic bill synoptic diagram of the present invention.

Embodiment:

Further describe specific embodiments of the present invention below in conjunction with accompanying drawing.

Fig. 1 is that Electronic Signature the first of the present invention realizes synoptic diagram.Electronic Signature 100 inclusion information processing element 101 and print module 102, print module 102 is connected with described information processing apparatus 101, and print module 102 can print information at medium.Print module 102 has one to print surface of contact 110 and medium contact or close.Medium described herein refers generally to electronic bill, referring to Figure 23.Figure 23 is electronic bill synoptic diagram of the present invention, sets a specific region 2302 at the information medium 2301 of electronic bill 2300 and is used for electronic signature.When signing electronically, the printing surface of contact 110 of print module 102 contacts with specific region 2302, and signing messages is printed on specific region 2302.Described information processing apparatus 101 comprises the rivest, shamir, adelman module and has stored the private key information of signing messages, signature owner; By described rivest, shamir, adelman module described signing messages, described private key information are carried out calculation process and obtain output information, by described information processing apparatus 101 described output information is converted to the signed data that described print module 102 prints.The signed data of printing usually can be rendered as a string data and be convenient to Human Perception.But the automatic identification of the inconvenient machine of a string data, therefore the signed data of printing preferably is in modes such as bar code or two-dimensional bar codes and can adopts easily now corresponding bar code scanner or two-dimensional bar code reader to carry out automatic reading, can realize the automatic identification of signing messages.In this scheme, the public key information of signer is public information, and can decipher this information with the public key information of signer and obtain raw information.The true and false of the signing messages that therefore can sign by machinery and equipment automatic discrimination Electronic Signature.

Fig. 2 is that Electronic Signature the second of the present invention is realized synoptic diagram.Implementation than Fig. 1, in the implementation of Fig. 2, Electronic Signature 200 has increased the first fixed support 202 and the second fixed support 203, and the Electronic Signature main body of inclusion information processing element 101 and print module 102 can be slided at the first fixed support 202 and the second fixed support 203.When not only printing the Electronic Signature main body, described the first fixed support 202 and the second fixed support 203 as the supporting ﹠ stablizing effect, but also be convenient to aiming at and the location of print module 102 and specific region 2302.Such as, set a position reference point at electronic bill, by determining the relative position of reference point and the first fixed support 202 and/or the second fixed support 203, signing messages can both be printed to specific region 2302 in the time of just can guaranteeing to sign at every turn.

With the multiple implementation of being combined with of signing messages and electronic bill, Fig. 3, Fig. 4, Fig. 5 have provided respectively the principle of work of three kinds of implementations.Fig. 3 is Electronic Signature the first implementation principle of work synoptic diagram of the present invention.Electronic Signature inclusion information processing element 302 and print module 303, print module 303 is connected with described information processing apparatus 302, and it is the module signal of the principle of work of Fig. 1.

Fig. 4 is Electronic Signature the second implementation principle of work synoptic diagram of the present invention.Electronic Signature inclusion information processing element 402 and radio frequency module for reading and writing 403, radio frequency module for reading and writing 403 and described information processing apparatus 402 are connected by radiofrequency signal.This scheme requires to embed radio electronic label in electronic bill, write radio electronic label by radio frequency module for reading and writing 403 after signing messages is encrypted.After adopting radio electronic label, although its information human eye is invisible, the characteristics of its contactless identification more are conducive to the use of Electronic Signature.If people wish simultaneously to have the effect that seeing is believing or carry out double authentication, the scheme of Fig. 3 and Fig. 4 can be carried out combination, referring to Fig. 5.

Fig. 5 is the third implementation principle of work synoptic diagram of Electronic Signature of the present invention.Electronic Signature inclusion information processing element 502, radio frequency module for reading and writing 503, MIM message input module 505 and print module 501.In order to comprise more information in the information that makes electronic signature, as the information such as the date of signing, the bill term of validity, payer, beneficiary, increased MIM message input module 505 in this programme, these information exchanges can be crossed MIM message input module 505 and be input to information processing apparatus 502, as the part of signing messages.And will both write in the radio electronic label of electronic bill by radio frequency module for reading and writing 503 after the signing messages encryption, again signing messages is encrypted the rear specific region that is printed on electronic bill by print module 501.

Fig. 6 is the third realization synoptic diagram of Electronic Signature of the present invention.Electronic Signature 600 inclusion information processing element 601, interface unit 603 and print module 602 and with external safety component (not drawing in the drawings), print module 602 is connected with described information processing apparatus 601, and print module 102 can print information at medium; Interface unit 603 is connected with described information processing apparatus 601, simultaneously interface unit 603 comprises connector and is connected with external safety component, the key information and the cryptographic algorithm that are encrypted are focused on external safety component, can make the use of Electronic Signature more flexible.Print module 602 has one to print surface of contact 610 and medium contact or close.Compare with the realization of Fig. 1, the realization of Fig. 6 is that the security-related part of Electronic Signature is realized by external safety component.Described safety component comprises security information processing module, rivest, shamir, adelman module and has stored the private key information of signing messages, signature owner.

Fig. 7 is that the 4th kind of Electronic Signature of the present invention realized synoptic diagram.This programme is for the situation that comprises Electronic Paper in the electronic bill.Realize because the information of Electronic Paper presents by Electronic Paper being carried out electronization, thus its realization and Fig. 1 some is different.The first electrode surface 710 and second electrode surface 703 of Electronic Signature 700 inclusion information processing element 701 and Electronic Paper electronization module 702 and Electronic Paper electronization, Electronic Paper electronization module 702 is connected with described information processing apparatus 701, and Electronic Paper electronization module 702 can present information in the Electronic Paper on medium by the first electrode surface 710 and the second electrode surface 703.The first electrode surface 710 be connected electrode surface 703 by one slidably web member 705 connect; Place electronic bill between the first electrode surface 710 and the second electrode surface 703, and the Electronic Paper part of electronic bill is just in time placed the surface of contact of the first electrode surface 710 and the second electrode surface 703.Described information processing apparatus 701 comprises the rivest, shamir, adelman module and has stored the private key information of signing messages, signature owner; By described rivest, shamir, adelman module described signing messages, described private key information are carried out calculation process and obtain output information, by described information processing apparatus 701 described output information is converted to the signed data that described Electronic Paper electronization module 702 is carried out electronization.The signed data of electronization usually can be rendered as a string data and be convenient to Human Perception.But the automatic identification of the inconvenient machine of a string data, therefore the signed data of printing preferably is in modes such as bar code or two-dimensional bar codes and can adopts easily now corresponding bar code scanner or two-dimensional bar code reader to carry out automatic reading, can realize the automatic identification of signing messages.In this scheme, the public key information of signer is public information, and can decipher this information with the public key information of signer and obtain raw information.The true and false of the signing messages that therefore can sign by machinery and equipment automatic discrimination Electronic Signature.

Fig. 8 is the 4th kind of implementation principle of work synoptic diagram of Electronic Signature of the present invention.Electronic Signature inclusion information processing element 802 is connected with print module and is passed through the smart card 804 that intelligent card interface 801 connects, and it is the module signal of the principle of work of Fig. 6.Described safety component adopts intelligent card interface 801 with smart card 804, interface unit.Because smart card is popularized very wide, easy to carry, wieldy characteristics now, therefore also adopt the mode of smart card in the preferred implementation of the present invention.

Fig. 9 is the 5th kind of implementation principle of work synoptic diagram of Electronic Signature of the present invention.The smart card 904 that Electronic Signature inclusion information processing element 902 is connected with the radio frequency module for reading and writing and is passed through intelligent card interface 901 connections.Described safety component adopts intelligent card interface 901 with smart card 904, interface unit.Because smart card is popularized very wide, easy to carry, wieldy characteristics now, therefore also adopt the mode of smart card in the preferred implementation of the present invention.Radio frequency module for reading and writing 903 and described information processing apparatus 902 are connected by radiofrequency signal.This scheme requires to embed radio electronic label in electronic bill, write radio electronic label by radio frequency module for reading and writing 903 after signing messages is encrypted.After adopting radio electronic label, although its information human eye is invisible, the characteristics of its contactless identification more are conducive to the use of Electronic Signature.If people wish simultaneously to have the effect that seeing is believing or carry out double authentication, the scheme of Fig. 8 and Fig. 9 can be carried out combination.

Figure 10 is the 6th kind of implementation principle of work synoptic diagram of Electronic Signature of the present invention.Than Fig. 9, this specific implementation is connected with the radio frequency module for reading and writing except inclusion information processing element 902 and is passed through has also increased MIM message input module 1005 smart card 904 of intelligent card interface 901 connections.These information exchanges can be crossed MIM message input module 1005 and be input to information processing apparatus 902, as the part of signing messages.

Figure 11 is that authentification of message of the present invention system the first realizes synoptic diagram.The authentification of message system comprises certificate server 1101, information medium 1103, described certificate server inclusion information acquisition component 1102, enciphering and deciphering algorithm calculating unit, data back.Described information medium 1103 refers generally to electronic bill, also can be other media that need to sign, and the surface comprises the cipher-text information of visible signing messages; Described enciphering and deciphering algorithm calculating unit comprises the computing module of enciphering and deciphering algorithm; Stored described information medium owner's approval signing messages in the described data back; Described information acquisition parts 1102 gather the cipher-text information on described information medium 1103 surfaces and described cipher-text information are converted to by the cipher-text information data of described certificate server 1101 processing; Described asymmetric enciphering and deciphering algorithm calculating unit is decrypted described cipher-text information data and obtains signing messages; Described certificate server 1101 is by the whether consistent authentication that realizes information medium of approval signing messages pre-stored in more described signing messages and the described data back.

Figure 12 is that authentification of message of the present invention system the second is realized synoptic diagram.The authentification of message system comprises certificate server 1201, information medium 1203, safety feature 1204.Described certificate server 1201 inclusion information acquisition component 1202, data back, safety feature interface unit; Described information medium surface comprises the cipher-text information of visible signing messages; Described safety feature 1204 comprise endorsement person PKI, realized module by endorsement person's private key and decipherment algorithm; Described certificate server 1201 is undertaken by described safety feature interface unit and described safety feature 1204 that wire signal is connected or wireless signal connects; Stored described information medium 1203 owners' approval signing messages in the described data back; Described information acquisition parts 1202 gather the cipher-text information on described information medium surface and described cipher-text information are converted to the cipher-text information data of being processed by described certificate server; Described certificate server 1201 passes to described safety feature 1204 with the cipher-text information data, is decrypted by 1204 pairs of described cipher-text information data of described safety feature to obtain signing messages and signing messages is passed to described certificate server 1201; Described certificate server 1201 is by the whether consistent authentication that realizes information medium of approval signing messages pre-stored in more described signing messages and the described data back.

Figure 13 is the first method synoptic diagram that signs electronically.At first in step 1301, adopt the algoritic module of rivest, shamir, adelman to carry out calculation process take the private key of signer as password signing messages and obtain encrypt data, then in step 1302, described encrypt data is converted to printed signature information, when step 1303, described printed signature information is printed on the information medium at last.The method of this electronic signature is to carry out the description of electric endorsement method as Electronic Signature take the implementation of Fig. 1.

Figure 14 is the second method synoptic diagram that signs electronically.For electronic signature and the electronic bill that has embedded radio electronic label are bound, can be with the identifying information of the information of radio electronic label such as the electronic tag part as signing messages when signing electronically.Therefore the endorsement method step is as follows: at first in step 1400 from radio electronic label read data information, enter step 1401 described signing messages and described data message are obtained encrypt data take the private key of signer as password adopts the algoritic module of rivest, shamir, adelman to carry out calculation process, then in step 1402, described encrypt data is converted to printed signature information, when step 1403, described printed signature information is printed on the information medium at last.

Figure 15 is the third method synoptic diagram that signs electronically.Corresponding with the Electronic Signature implementation of Fig. 6, because Electronic Signature is divided into separable safety component and electronic signature body, therefore its electric endorsement method step is as follows: the information communication of at first safety component being carried out information connection and foundation and electronic signature body in step 1500 by the interface unit of electronic signature body, enter in the step 1301 signing messages is obtained encrypt data take the private key of signer as password adopts the algoritic module of rivest, shamir, adelman to carry out calculation process, then in step 1302, described encrypt data is converted to printed signature information, when step 1303, described printed signature information is printed on the information medium at last.

Figure 16 is the 4th kind of method synoptic diagram that signs electronically.For electronic signature and the electronic bill that has embedded radio electronic label are bound, can be with the identifying information of the information of radio electronic label such as the electronic tag part as signing messages when signing electronically.Therefore the endorsement method step is as follows: the information communication of at first safety component being carried out information connection and foundation and electronic signature body in step 1600 by the interface unit of electronic signature body, and in step 1400 from radio electronic label read data information, enter step 1401 described signing messages and described data message are obtained encrypt data take the private key of signer as password adopts the algoritic module of rivest, shamir, adelman to carry out calculation process, then in step 1402, described encrypt data is converted to printed signature information, when step 1403, described printed signature information is printed on the information medium at last.

Figure 17 is the first method synoptic diagram that carries out electronics endorsement signature.At first in step 1701, adopt the first computing module of rivest, shamir, adelman to carry out calculation process take the private key of signer as password signing messages and obtain the first operation result, then in step 1702, adopt the second computing module of rivest, shamir, adelman to carry out calculation process take quilt endorsement person's PKI as password to described the first operation result and obtain encrypt data, enter step 1703 described encrypt data is converted to printed signature information, in step 1704, described printed signature information is printed on the information medium at last.The signing messages in when signature of generally endorsing comprises endorsement person's information, by endorsement person's information, disburser's information, the person's of honouring information, signature date, the term of validity etc., a plurality of endorsements signatures can be coupled together the continuity that forms the endorsement signature by signing messages.

Figure 18 is the second method synoptic diagram that carries out electronics endorsement signature.For electronic signature and the electronic bill that has embedded radio electronic label are bound, can be with the identifying information of the information of radio electronic label such as the electronic tag part as signing messages when signing electronically.Therefore the endorsement method step of endorsing is as follows: at first in step 1800 from radio electronic label read data information, and in step 1801, described signing messages and described data message are obtained the first operation result take the private key of signer as password adopts the first computing module of rivest, shamir, adelman to carry out calculation process; Then in step 1802, adopt the second computing module of rivest, shamir, adelman to carry out calculation process take quilt endorsement person's PKI as password to described the first operation result and obtain encrypt data, enter step 1803 described encrypt data is converted to printed signature information, in step 1804, described printed signature information is printed on the information medium at last.The signing messages in when signature of generally endorsing comprises endorsement person's information, by endorsement person's information, disburser's information, the person's of honouring information, signature date, the term of validity etc., a plurality of endorsements signatures can be coupled together the continuity that forms the endorsement signature by signing messages.

Figure 19 is the first method synoptic diagram that carries out electronics reendorse signature.Carrying out reendorse when signature, needing to obtain the information of remote holder signature, with the consistance that guarantees signing messages and prevent that the unauthorized person from carrying out the interests loss of the electronic bill that reendorse causes.Concrete grammar is described below: at first in step 1901 described remote holder signed data is decrypted and obtains the remote holder signing messages, in step 1902 described remote holder signing messages, reendorse signing messages are obtained the first operation result take quilt endorsement person's PKI as password adopts the first computing module of rivest, shamir, adelman to carry out calculation process; Then in step 1903, adopt the second computing module of rivest, shamir, adelman to carry out calculation process take the private key of signer as password to described the first operation result and obtain encrypt data; Enter step 1904 described encrypt data is converted to printed signature information, in step 1905, described printed signature information is printed on the information medium at last.

Figure 20 is the second method synoptic diagram that carries out electronics reendorse signature.When being divided into safety component and electronic signature body in the realization of Electronic Signature, when it carries out the reendorse signature, need first safety component and electronic body to be set up being connected of information.Concrete grammar is described below: the information communication of at first safety component being carried out information connection and foundation and electronic signature body in step 2000 by the interface unit of electronic signature body, and in step 1901, described remote holder signed data is decrypted and obtains the remote holder signing messages, in step 1902, described remote holder signing messages, reendorse signing messages as adopting the first computing module of rivest, shamir, adelman to carry out calculation process, password are obtained the first operation result take quilt endorsement person's PKI; Then in step 1903, adopt the second computing module of rivest, shamir, adelman to carry out calculation process take the private key of signer as password to described the first operation result and obtain encrypt data; Enter step 1904 described encrypt data is converted to printed signature information, in step 1905, described printed signature information is printed on the information medium at last.

Figure 21 is the first method synoptic diagram that carries out electron underwriting authentication.Electronic Signature of the present invention is after electronic bill is signed, when the authentification of message system among employing the present invention authenticates signing messages, its implementation is as follows: at first gather the cipher-text information of the conduct signature that is printed on the electronic bill in step 2101, then in step 2102 described cipher-text information deciphering is obtained signing messages; Then judge in step 2103 whether the approval signing messages of described signing messages and described authentification of message system storage mates; If coupling enters step 2104 and shows authentication success; Do not enter step 2105 and show authentification failure if do not mate.

Figure 22 is the second method synoptic diagram that carries out electron underwriting authentication.The invention allows for the public key information of employing signer when signing messages is carried out asymmetric encryption as key, need to use by endorsement person's private key information when therefore deciphering, and private key information belongs to endorsement person's security information.Proposed in the present invention and will have been made independently safety feature by endorsement person's private key information and decipherment algorithm, when carrying out authentification of message, safety feature is connected with the authentification of message system, and the deciphering of information is finished by safety feature, can guarantee can not leaked by endorsement person's security information.Concrete authentication method is: the cipher-text information that at first gathers the conduct signature that is printed on the electronic bill in step 2201, then in the system of authentification of message described in the step 2202 cipher-text information is passed to safety feature by wire communication mode and/or wireless communication mode, by described safety feature described cipher-text information data are decrypted and obtain signing messages and signing messages is passed to described authentification of message system; Then judge in step 2203 whether the approval signing messages of described signing messages and described authentification of message system storage mates; If coupling enters step 2204 and shows authentication success: do not enter step 2205 and show authentification failure if do not mate.

Claims

1. Electronic Signature, it is characterized in that signing at electronic bill, described electronic bill inclusion information medium has embedded electronic unit and has set a particular signature zone at front and/or the reverse side of described information medium in described information medium, comprise such as lower member:

Print module, described print module is connected with described information processing apparatus, and described print module can print information at described information medium;

Take described key information as password described signing messages is encrypted calculation process by described enciphering algorithm module and obtains cipher-text information; By described information processing apparatus described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; And/or by described information processing apparatus described cipher-text information is converted to the signed data that described print module prints;

The described signed data that prints is printed on described particular signature zone and/or the described signed data that writes in the electronic unit is write in the described electronic unit.

2. Electronic Signature, it is characterized in that signing at electronic bill, described electronic bill inclusion information medium has embedded electronic unit and has set a particular signature zone at front and/or the reverse side of described information medium in described information medium, comprise such as lower member:

Take described key information as password described signing messages is encrypted calculation process by described enciphering algorithm module and obtains cipher-text information;

By described information processing apparatus the first of described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; Or

By described information processing apparatus the second portion of described cipher-text information is converted to the signed data that described print module prints; Or

By described information processing apparatus the first of described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit, by described information processing apparatus the second portion of described cipher-text information is converted to the signed data that described print module prints; Or

By described information processing apparatus described cipher-text information whole are converted to the signed data that described module for reading and writing writes in the electronic unit, by described information processing apparatus the second portion of described cipher-text information are converted to the signed data that described print module prints; Or

By described information processing apparatus the first of described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit, by described information processing apparatus described cipher-text information whole is converted to the signed data that described print module prints;

3. Electronic Signature, it is characterized in that signing at electronic bill, described electronic bill inclusion information medium has embedded electronic unit and has set a particular signature zone at front and/or the reverse side of described information medium in described information medium, comprise such as lower member:

Module for reading and writing, described module for reading and writing is connected with described information processing apparatus, described module for reading and writing in the electronic unit data writing and from electronic unit reading out data;

Take described key information as password the data that read and described signing messages are encrypted calculation process by described enciphering algorithm module from electronic unit and obtain cipher-text information; By described information processing apparatus described cipher-text information is converted to the signed data that described module for reading and writing writes in the electronic unit; And/or by described information processing apparatus described cipher-text information is converted to the signed data that described print module prints;

4. Electronic Signature, it is characterized in that signing at electronic bill, described electronic bill inclusion information medium has embedded electronic unit and has set a particular signature zone at front and/or the reverse side of described information medium in described information medium, comprise such as lower member:

Take described key information as password the data that read and described signing messages are encrypted calculation process by described enciphering algorithm module from electronic unit and obtain cipher-text information;

5. each described Electronic Signature in 4 according to claim 1 is characterized in that described enciphering algorithm module adopts symmetric encipherment algorithm, described key information be encryption key also be decruption key; Perhaps

6. each described Electronic Signature in 4 according to claim 1, it is characterized in that described Electronic Signature further comprises: keyboard device, described information processing apparatus is processed the input message of described keyboard device.

7. each described Electronic Signature in 4 according to claim 1, it is characterized in that described Electronic Signature further comprises radio receiving transmitting module, described information processing apparatus is processed the information from the information of described radio receiving transmitting module and the described radio receiving transmitting module transmission of control.

8. each described Electronic Signature in 4 according to claim 1 is characterized in that further comprising the fixedly support of Electronic Signature.

9. each described Electronic Signature in 4 according to claim 1 is characterized in that described Electronic Signature further comprises display unit, and described information processing apparatus is controlled the displaying contents of described display unit.