CN110889146A - A kind of electronic signature method, device and storage medium - Google Patents

Abstract

The present disclosure discloses a method, a device and a storage medium for an electronic signature, including: a first acquisition step: acquiring an electronic signature application request and data to be signed; a first certificate downloading step: initiating an electronic signature download request to an application server Send the data to be signed to the application server; obtain the electronic signature and the summary of the document to be signed from the application server; merge the documents to be signed corresponding to the electronic signature and the summary of the document to be signed, and perform the merged data. Encrypt to obtain an encrypted data stream; send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server.

Description

A kind of electronic signature method, device and storage medium

technical field

The present disclosure relates to the technical field of electronic signatures, and in particular, to a method, a device and a storage medium for electronic signatures.

Background technique

The statements in this section merely mention background related to the present disclosure and do not necessarily constitute prior art.

The electronic signature system can identify the identity of the signer of the electronic document and ensure the authenticity, integrity and non-repudiation of the document. , military field command and other fields.

In the process of realizing the present disclosure, the inventor found that the following technical problems exist in the prior art:

Due to the rapid development of mobile informatization, more and more electronic signature processes are carried out based on mobile terminals. The existing electronic signature process is based on the terminal binding electronic signature. If the system deletes the application or replaces the terminal, it needs to re-apply for the certificate and pay for the re-applied certificate. During the period of use, the user may log in to multiple devices. The device and one device have been logged in by multiple users. Many users will re-apply for certificates if they frequently replace their mobile terminals. This mode will cause a great waste of money and affect the user experience.

SUMMARY OF THE INVENTION

In order to solve the deficiencies of the prior art, the present disclosure provides an electronic signature method, device and storage medium;

In a first aspect, the present disclosure provides a method for electronic signature;

A method of electronic signature, comprising:

The first obtaining step: obtain the electronic signature application request and the data to be signed;

The first certificate download step: initiating an electronic signature download request to the application server and sending the data to be signed to the application server; the electronic signature and the abstract of the file to be signed obtained from the application server;

Merge the documents to be signed corresponding to the electronic signature and the summary of the document to be signed, and encrypt the merged data to obtain an encrypted data stream;

Send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server.

In a second aspect, the present disclosure also provides a method for electronic signature;

A method of electronic signature, comprising:

The second obtaining step: obtain the electronic signature application request and the data to be signed sent by the client;

The second certificate download step: receiving the electronic signature download request and the data to be signed sent by the client; the electronic signature and the summary of the file to be signed generated based on the data to be signed;

Send the generated electronic signature and the summary of the document to be signed to the client;

Receive the encrypted data stream sent by the client, encrypt the encrypted data stream to obtain a signature file, and feed back the signature file to the client; the encrypted data stream is a summary of the electronic signature and the file to be signed by the client The corresponding files to be signed are merged, and the merged data is encrypted.

In a third aspect, the present disclosure also provides an electronic signature client;

An electronic signature client, including:

a first obtaining module, which is configured to: obtain an electronic signature application request and data to be signed;

a first certificate download module, which is configured to: initiate an electronic signature download request to the application server and send the data to be signed to the application server; obtain the electronic signature and the abstract of the file to be signed from the application server;

a first encryption processing module, which is configured to: combine the electronic signature and the documents to be signed corresponding to the abstract of the document to be signed, and encrypt the combined data to obtain an encrypted data stream;

The receiving module is configured to: send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server.

In a fourth aspect, the present disclosure also provides an electronic signature server;

An electronic signature server, including:

The second obtaining module is configured to: obtain the electronic signature application request and the data to be signed sent by the client;

The second certificate download module is configured to: receive the electronic signature download request and the data to be signed sent by the client; the electronic signature and the file abstract to be signed are generated based on the data to be signed;

a sending module, which is configured to: send the generated electronic signature and the summary of the document to be signed to the client;

The second encryption processing module is configured to: receive the encrypted data stream sent by the client, obtain a signature file after encrypting the encrypted data stream, and feed back the signature file to the client; the encrypted data stream is generated by the client It is obtained by merging the electronic signature and the document to be signed corresponding to the summary of the document to be signed, and encrypting the merged data.

In a fifth aspect, the present disclosure also provides a system for electronic signatures;

An electronic signature system includes: the electronic signature client in the third aspect and the electronic signature server in the fourth aspect.

In a sixth aspect, the present disclosure also provides an electronic device, including a memory and a processor, and computer instructions stored in the memory and executed on the processor, the computer instructions being executed by the processor to complete the first aspect or the first aspect. The steps of the method described in the second aspect.

In a seventh aspect, the present disclosure further provides a computer-readable storage medium for storing computer instructions that, when executed by a processor, complete the steps of the method of the first aspect or the second aspect.

Compared with the prior art, the beneficial effects of the present disclosure are:

In order to prevent the privacy of users from being leaked, a three-party certificate authentication system is adopted, part of which exists in the user's own client as a non-copyable and unreadable file. Whether you have applied for a certificate before, and whether you can re-apply for a new certificate for free. Through the signature optimization process, the security of signatures is guaranteed, unnecessary capital consumption is reduced, user costs are saved, and user experience is improved. High automation, time and cost saving, safety, ease of use, and comprehensive functions. In order to solve the double payment caused by the user changing the mobile phone or logging in with other mobile phones, the mobile phone, the signature server and the cloud signature server jointly store the signature to ensure the security of the signature.

Description of drawings

The accompanying drawings that form a part of the present application are used to provide further understanding of the present application, and the schematic embodiments and descriptions of the present application are used to explain the present application and do not constitute improper limitations on the present application.

Fig. 1 is the method flow chart of the first implementation manner of the first embodiment;

FIG. 2 is a flow chart of the method of the second implementation of the first embodiment.

Detailed ways

It should be noted that the following detailed description is exemplary and intended to provide further explanation of the application. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs.

It should be noted that the terminology used herein is for the purpose of describing specific embodiments only, and is not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly dictates otherwise, the singular is intended to include the plural as well, furthermore, it is to be understood that when the terms "comprising" and/or "including" are used in this specification, it indicates that There are features, steps, operations, devices, components and/or combinations thereof.

Embodiment 1, this embodiment provides a method for electronic signature;

As shown in Figure 1, a method for electronic signature includes:

S101: The first obtaining step: obtaining the electronic signature application request and the data to be signed;

S102: the first certificate download step: initiating an electronic signature download request to the application server and sending the data to be signed to the application server; the electronic signature and the abstract of the file to be signed obtained from the application server;

S103: Merge the files to be signed corresponding to the electronic signature and the summary of the file to be signed, and encrypt the merged data to obtain an encrypted data stream;

S104: Send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server.

As one or more embodiments, between the first obtaining step and the first certificate downloading step, further includes:

The step of judging whether the electronic signature exists or not: verifying whether the electronic signature already exists in the local database, if so, enter the step of judging the validity period of the certificate; if not, enter the step of downloading the certificate.

As one or more embodiments, as shown in FIG. 2 , between the first obtaining step and the first certificate downloading step, the step further includes: a certificate validity period judging step, and the certificate validity period judging step is judging whether the electronic signature exists or not. After the step, before the certificate download step;

The step of judging the validity period of the certificate: judging whether the certificate is within the validity period, if it is within the validity period, the digital certificate will be retrieved from the local database and displayed, and finished; if it is not within the validity period, the certificate download step will be entered.

Further, the signature file encrypted and processed by the application server is generated after the application server invokes the cloud signature server interface and the signature server interface to realize three-party combined verification.

The three-party combined verification refers to: refers to the client, the signature server and the cloud signature server, one third of the user certificate information managed by the three, and whether the user's complete certificate can be synthesized according to the unique identification code.

The cloud signing server refers to a server that specially manages the user's certificate information and verifies the use authority of the user's certificate.

The signature server refers to a server that performs a signature action.

The summary of the document to be signed refers to the unique hash code generated according to the algorithm of the pdf file to be signed or signed.

The cloud signature server is used to apply for electronic signatures and bind users.

The signature server is used to verify the local certificate of the client, and is invoked by the application server to combine the data of the client and the cloud signature server, generate an electronic signature, and return it to the application server.

It should be understood that the digital certificate is a file that cannot be copied or read. After the user applies for the first time, the digital certificate and user name are stored in the database. When the user changes the client or logs in to operate the business on another client, the user needs to apply again.

It should be understood that the client includes: a mobile phone, a notebook or a tablet computer.

It should be understood that the data to be signed includes: the user's unit name or handwritten signature.

Embodiment 2, this embodiment also provides a method for electronic signature;

A method of electronic signature, comprising:

S201: the second obtaining step: obtaining the electronic signature application request and the data to be signed sent by the client;

S202: the second certificate downloading step: receiving the electronic signature download request and the data to be signed sent by the client; the electronic signature and the file abstract to be signed generated based on the data to be signed;

S203: Send the generated electronic signature and the summary of the document to be signed to the client;

S204: Receive the encrypted data stream sent by the client, obtain a signature file after encrypting the encrypted data stream, and feed back the signature file to the client; the encrypted data stream is the electronic signature and the signature to be signed by the client The files to be signed corresponding to the file abstracts are merged, and the merged data is encrypted.

Further, the signature file obtained after encrypting the encrypted data stream is generated after the application server invokes the cloud signature server interface and the signature server interface to realize three-party combined verification.

Embodiment 3, this embodiment also provides an electronic signature client;

An electronic signature client, including:

a first obtaining module, which is configured to: obtain an electronic signature application request and data to be signed;

a first certificate download module, which is configured to: initiate an electronic signature download request to the application server and send the data to be signed to the application server; obtain the electronic signature and the abstract of the file to be signed from the application server;

a first encryption processing module, which is configured to: combine the electronic signature and the documents to be signed corresponding to the abstract of the document to be signed, and encrypt the combined data to obtain an encrypted data stream;

The receiving module is configured to: send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server.

As one or more embodiments, between the obtaining module and the certificate downloading module, further includes:

The judging module for the existence or not of the electronic signature is configured to: verify whether the electronic signature already exists in the local database, if so, enter the certificate validity judging step; if not, enter the certificate downloading step.

As one or more embodiments, the acquisition module and the certificate download module further include: a certificate validity period judgment module, and the certificate validity period judgment module is after the electronic signature judgment module and before the certificate download module;

The certificate validity judging module is configured to: judge whether the certificate is within the validity period, if within the validity period, call and display the local database in the digital certificate, and end; if not within the validity period, enter the certificate downloading step.

Embodiment 4, this embodiment also provides an electronic signature server;

An electronic signature server, including:

The second obtaining module is configured to: obtain the electronic signature application request and the data to be signed sent by the client;

The second certificate download module is configured to: receive the electronic signature download request and the data to be signed sent by the client; the electronic signature and the file abstract to be signed are generated based on the data to be signed;

a sending module, which is configured to: send the generated electronic signature and the summary of the document to be signed to the client;

The second encryption processing module is configured to: receive the encrypted data stream sent by the client, obtain a signature file after encrypting the encrypted data stream, and feed back the signature file to the client; the encrypted data stream is generated by the client It is obtained by merging the electronic signature and the document to be signed corresponding to the summary of the document to be signed, and encrypting the merged data.

Embodiment 5, this embodiment also provides an electronic signature system;

An electronic signature system includes: the electronic signature client in the third embodiment and the electronic signature server in the fourth embodiment.

Embodiment 6, this embodiment also provides an electronic device, including a memory, a processor, and computer instructions stored on the memory and run on the processor, and when the computer instructions are run by the processor, the first or The steps of the method described in the second embodiment.

In Embodiment 7, this embodiment further provides a computer-readable storage medium for storing computer instructions. When the computer instructions are executed by a processor, the steps of the method described in Embodiment 1 or Embodiment 2 are completed.

The above descriptions are only preferred embodiments of the present application, and are not intended to limit the present application. For those skilled in the art, the present application may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included within the protection scope of this application.

Claims (10)

1. a method for electronic signature, is characterized in that, comprises: The first obtaining step: obtain the electronic signature application request and the data to be signed; The first certificate download step: initiating an electronic signature download request to the application server and sending the data to be signed to the application server; the electronic signature and the abstract of the file to be signed obtained from the application server; Merge the documents to be signed corresponding to the electronic signature and the summary of the document to be signed, and encrypt the merged data to obtain an encrypted data stream; Send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server. 2. The method according to claim 1, wherein, between the first obtaining step and the first certificate downloading step, further comprising: The step of judging whether the electronic signature exists or not: verifying whether the electronic signature already exists in the local database, if so, enter the step of judging the validity period of the certificate; if not, enter the step of downloading the certificate. 3. The method according to claim 2, wherein, between the first obtaining step and the first certificate downloading step, further comprising: a certificate validity period judging step, wherein the certificate validity period judging step depends on whether the electronic signature exists or not. After the judgment step, before the certificate download step; The step of judging the validity period of the certificate: judging whether the certificate is within the validity period, if it is within the validity period, the digital certificate will be retrieved from the local database and displayed, and finished; if it is not within the validity period, the certificate download step will be entered. 4. The method according to claim 1, wherein the signature file encrypted and processed by the application server is generated after the application server invokes the cloud signature server interface and the signature server interface to implement three-party merge verification. 5. A method for electronic signature, comprising: The second obtaining step: obtain the electronic signature application request and the data to be signed sent by the client; The second certificate download step: receiving the electronic signature download request and the data to be signed sent by the client; the electronic signature and the summary of the document to be signed generated based on the data to be signed; Send the generated electronic signature and the summary of the document to be signed to the client; Receive the encrypted data stream sent by the client, encrypt the encrypted data stream to obtain a signature file, and feed back the signature file to the client; the encrypted data stream is a summary of the electronic signature and the file to be signed by the client The corresponding files to be signed are merged, and the merged data is encrypted. 6. An electronic signature client, characterized in that it comprises: a first obtaining module, which is configured to: obtain an electronic signature application request and data to be signed; a first certificate download module, which is configured to: initiate an electronic signature download request to the application server and send the data to be signed to the application server; obtain the electronic signature and the abstract of the file to be signed from the application server; a first encryption processing module, which is configured to: combine the electronic signature and the documents to be signed corresponding to the abstract of the document to be signed, and encrypt the combined data to obtain an encrypted data stream; The receiving module is configured to: send the encrypted data stream to the application server, and receive the signature file encrypted and processed by the application server. 7. An electronic signature server, characterized in that it comprises: The second obtaining module is configured to: obtain the electronic signature application request and the data to be signed sent by the client; The second certificate downloading module is configured to: receive the electronic signature download request and the data to be signed sent by the client; the electronic signature and the document abstract to be signed are generated based on the data to be signed; a sending module, which is configured to: send the generated electronic signature and the summary of the document to be signed to the client; The second encryption processing module is configured to: receive the encrypted data stream sent by the client, obtain a signature file after encrypting the encrypted data stream, and feed back the signature file to the client; the encrypted data stream is generated by the client It is obtained by merging the electronic signature and the document to be signed corresponding to the summary of the document to be signed, and encrypting the merged data. 8 . An electronic signature system, comprising: the electronic signature client according to claim 6 and the electronic signature server according to claim 7 . 9. An electronic device, characterized in that it comprises a memory and a processor and a computer instruction stored in the memory and run on the processor, when the computer instruction is run by the processor, completes any one of claims 1-5 the steps described in the method. 10. A computer-readable storage medium, characterized in that it is used for storing computer instructions, and when the computer instructions are executed by a processor, the steps described in any one of the methods of claims 1-5 are completed.

Images