CN114580030A - Safe generation method, client and system for traffic management electronic document - Google Patents

Abstract

The invention relates to the technical field of traffic management safety, and specifically discloses a method for safely generating traffic management electronic documents, which includes: selecting a corresponding traffic management document template according to business data; automatically generating a traffic management document template corresponding to the business data according to the selected traffic management document template The electronic document, wherein the content of the electronic document includes business data and name signature information; initiate a security authentication application to the server to obtain the electronic signature authentication information of the electronic document by the server; save the electronic document with the electronic signature authentication information. The invention also discloses a client, an electronic signature system and a distributed network management system. The method for safely generating traffic management electronic documents provided by the invention effectively solves the problems of electronic documents and electronic signatures and seals used in traffic management services.

Description

Safe generation method, client and system of electronic document for traffic management

technical field

The invention relates to the technical field of traffic management safety, in particular to a method for safely generating traffic management electronic documents, a client, an electronic signature and signature system and a distributed network management system.

Background technique

With the rapid development of the economy and the improvement of people's living standards, the number of motor vehicles and the number of drivers is increasing rapidly, and the traffic management business volume is also increasing. However, in the process of motor vehicle registration, driver test, illegal handling, accident handling, etc., the traditional mode is still used, and a large number of legal documents such as motor vehicle registration application form, driver test transcript, illegal punishment decision and accident determination letter need to be printed. , and manually signed by the parties and the police. The existing business model is no longer compatible with the fast-growing business, and there are problems such as low efficiency, serious waste of paper, heavy file management, and serious constraints on business innovation. In order to further simplify the business processing process and improve the efficiency of service management, the key construction direction of electronic seals is planned.

Since the release of the electronic signature method, based on cryptographic technology, it has passed identity authentication, authorization management, two-factor authentication, check code, timestamp, log stamp, VPN, data identification, data encryption and decryption and key management, server certificate, random number, etc. Technology has developed rapidly, providing comprehensive basic authentication services such as identity authentication, privacy protection, information verification, and data anti-counterfeiting for protected objects such as networks, information infrastructure, information systems, terminal technology equipment, and data. Electronic documents and electronic signatures are widely used in many business fields such as finance, taxation, and social security, providing technical support for the rapid development of e-commerce and e-government systems.

There are several differences between the business requirements of electronic traffic management documents and electronic signatures and seals from the above-mentioned business systems: First, the network environment for traffic management business is complex (generally including public security communication network, Internet and dedicated local area network), and it needs to meet the distributed network environment. Second, there are many types of traffic management documents, which need to meet the requirements of automatic document generation; third, traffic management documents are generally collected and generated according to the requirements of laws and regulations according to specific procedures, and the certification of electronic signature collection equipment needs to be added. and encryption requirements for collected information.

SUMMARY OF THE INVENTION

The invention provides a safe generation method, a client, an electronic signature and seal system and a distributed network management system for traffic management electronic documents, and solves the problem in the related art that the electronic documents cannot be safely realized in the traffic management business.

As a first aspect of the present invention, a method for safely generating electronic documents for traffic management is provided, including:

Select the corresponding traffic management document template according to the business data;

An electronic document corresponding to the business data is automatically generated according to the selected traffic management document template, wherein the content of the electronic document includes business data and name signature information;

Initiating a security authentication application to the server to obtain the electronic signature authentication information of the electronic document by the server;

Save electronic documents with electronic signature authentication information.

Further, selecting the corresponding traffic management document template according to the business data includes:

determine the document category based on the business data;

According to the document category, the corresponding traffic management document template is retrieved from the template library.

Further, the electronic document corresponding to the business data is automatically generated according to the selected traffic management document template, wherein the content of the electronic document includes business data and name signature information, including:

Filling the business data into the corresponding traffic management document template;

Dynamically generate electronic documents according to the traffic management document template filled with business data;

Obtain the name signature picture information of the electronic signature collection device, and synthesize the signature picture information into the designated position of the signature of the electronic document.

Further, the method for securely generating the electronic document for traffic management further includes performing before the step of initiating a security authentication application to the server:

According to the business data, it is determined whether the current electronic document needs to be sealed.

Further, if the current electronic document does not need to be stamped, the security authentication application is initiated to the server to obtain the electronic signature authentication information of the electronic document by the server, including:

Initiating an electronic signature request to the server, the server can perform a digest operation on the electronic document according to the electronic signature request, and perform a signature operation on the digest information according to the private key corresponding to the identity digital certificate to obtain an electronic signature result, and feedback the electronic signature result and identity digital certificate;

The electronic signature result and the identity digital certificate that have passed the verification of the security device are attached to the electronic document.

Further, if the current electronic document needs to be sealed, the security authentication application is initiated to the server to obtain the electronic signature authentication information of the electronic document by the server, including:

Initiating an electronic signature request to the server, the server can perform a digest operation according to the electronic document, retrieve the electronic seal corresponding to the business data, and perform a signature operation on the digest information according to the electronic seal to obtain an electronic signature results, and feedback the electronic signature results and electronic seals;

The electronic signature result and electronic seal that have passed the verification of the security device are attached to the electronic document.

As another aspect of the present invention, a client is provided, which includes a memory and a processor, the memory and the processor are communicatively connected, the memory is used for storing computer instructions, and the processor is used for loading and executing the Computer instructions to implement the aforementioned method for securely generating electronic documents for traffic management.

As another aspect of the present invention, an electronic signature and signature system is provided, which includes a security device, an electronic signature collection device, and the aforementioned client, wherein both the security device and the electronic signature device communicate with the client. terminal communication connection, the security device is used to authenticate the identity information of the server, and the electronic signature device is used to receive the user's name signature and generate the name signature picture information.

As another aspect of the present invention, a distributed network management system is provided, which includes a key center management system, a server, and the aforementioned electronic signature signature system set in the distributed network, the electronic signature signature The chapter system is in communication connection with the server, and the server is in communication connection with the key center management system.

Further, the distributed network includes a public security communication network, the Internet and a dedicated communication network, the key center management system is deployed in the public security communication network, and the server and the electronic signature and seal system are respectively deployed in the Internet, the public security communication network and a dedicated communication network. In the communication network, the servers located in the Internet and the dedicated communication network are in communication connection with the server in the public security communication network, and the server in the public security communication network is in communication connection with the key center management system.

The method for safely generating traffic management electronic documents provided by the present invention, by making electronic seals and system identity digital certificates in a distributed network environment, dynamically generating electronic documents according to business data according to the set document templates in the process of handling traffic management services, and then using The terminal equipment collects the electronic signatures of the public and the police, and then uses electronic signatures and electronic signatures to encrypt and store the documents according to the different requirements of whether the documents need to be sealed. The stored electronic documents are transmitted in a distributed network environment. The electronic signature and seal of the electronic instrument and the certificate chain within it are verified after transmission. Therefore, the method for safely generating electronic documents for traffic management provided by the embodiments of the present invention constructs an electronic signature and signature service system based on the same certificate system in a distributed network environment, and designs an automatic method for automatically generating electronic documents based on document templates. The electronic signature, signature and certification of electronic documents in a distributed network environment effectively solves the problem of electronic documents and electronic signatures and signatures used in traffic management business, improves the convenience for the masses to handle business, and helps "decentralization, regulation and service." "Reform deepens.

Description of drawings

The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the specification, and together with the following specific embodiments, are used to explain the present invention, but do not constitute a limitation to the present invention. In the attached image:

FIG. 1 is a structural block diagram of a distributed network management system provided by the present invention.

FIG. 2 is a flowchart of a method for securely generating an electronic document for traffic management provided by the present invention.

FIG. 3 is a schematic diagram of a document template provided by the present invention.

FIG. 4 is a schematic diagram of the document template provided by the present invention after being saved in an xml format file.

FIG. 5 is a flow chart of authentication between the electronic signature and signature system provided by the present invention and the client.

FIG. 6 is a flowchart of automatic generation of electronic documents for traffic control and electronic signature and seal provided by the present invention.

FIG. 7 is a schematic diagram of the generated electronic document provided by the present invention.

Detailed ways

It should be noted that the embodiments of the present invention and the features of the embodiments may be combined with each other under the condition of no conflict. The present invention will be described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.

In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only Embodiments of some, but not all, of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

It should be noted that the terms "first", "second" and the like in the description and claims of the present invention and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific sequence or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances for the embodiments of the invention described herein. Furthermore, the terms "comprising" and "having", and any variations thereof, are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those expressly listed Rather, those steps or units may include other steps or units not expressly listed or inherent to these processes, methods, products or devices.

An embodiment of the present invention provides a distributed network management system, which, as shown in FIG. 1 , includes a key center management system, a server, and an electronic signature and signature system set in a distributed network. The electronic signature signature The chapter system is in communication connection with the server, and the server is in communication connection with the key center management system.

Specifically, the distributed network includes a public security communication network, the Internet, and a dedicated communication network, the key center management system is deployed on the public security communication network, and the server and the electronic signature system are deployed on the Internet, the public security communication network, and a dedicated communication network, respectively. In the communication network, the servers located in the Internet and the dedicated communication network are in communication connection with the server in the public security communication network, and the server in the public security communication network is in communication connection with the key center management system.

In the embodiment of the present invention, as shown in FIG. 1 , the distributed network management system includes three parts according to the vertical division, the first-level key center management system and the second-level server (that is, the key service system in FIG. 1 ). ) and an electronic signature signature system. The first-level key center management system is deployed in the ministerial-level public security communication network environment. It forms a secure computing environment based on security equipment such as cipher machines. On this basis, a digital certificate system is deployed to undertake the traffic control system, issue and manage digital certificates, and undertake public Validation of public keys in key systems. At the same time, an electronic seal system is also deployed in the ministerial environment to realize functions such as the production, management and status release of electronic seals. The secondary key service system is deployed in the provincial and municipal public security communication networks, Internet and dedicated communication network environments. The electronic seals and system identity digital certificates used in each network environment must be pre-applied for before use, and all application information is collected into the public security communication network. The second-level key service system of the system is used to export and import data files between the second-level key service system and the first-level key center for the issuance of system identity digital certificates and the production of electronic seals. The provincial and municipal cryptographic service systems form a secure computing environment based on security devices such as cryptographic machines, which are used to carry the system private key for electronic signature and the electronic seal private key of the traffic control department that performs the signature. The secret service module and the electronic seal service module are called by the electronic signature and signature system, and provide electronic signature, signature verification services, electronic signature and seal verification services for various business systems. The electronic signature and seal system invokes the client through HTTP request to realize the collection of electronic signatures, provides services for various business systems to realize the collection of electronic signatures and electronic legal documents and other services, and invokes the secret service module and electronic The seal service module realizes the electronic signature and electronic signature of electronic documents.

In this embodiment of the present invention, the electronic signature and signature system includes a security device, an electronic signature collection device, and a client. Both the security device and the electronic signature device are connected in communication with the client, and the security device For the identity information of the authentication server, the electronic signature device is used for receiving the user's name signature and generating the name signature picture information.

Specifically, the client includes a memory and a processor, the memory and the processor are connected in communication, the memory is used for storing computer instructions, and the processor is used for loading and executing the computer instructions, so as to realize the following The secure generation method of electronic documents for traffic management.

In this embodiment, a method for safely generating traffic management electronic documents is provided, and FIG. 2 is a flowchart of the method for safely generating traffic management electronic documents provided according to an embodiment of the present invention, as shown in FIG. 2 , including:

S110. Select a corresponding traffic management document template according to the business data;

In the embodiment of the present invention, according to the style of the traffic management document, the document template is designed using the xml document mode, the specific dynamic content of the document is marked with a specific tag name and a specific attribute, and the display style of the tag content is limited by the specific tag. As shown in Figure 3, a document template is designed, which includes elements such as fixed text content, text field, picture field, and seal field, and the design determines the font, size, color and other styles of each element, as well as the position relative to the edge of the paper. The designed document template is saved in an xml format file, as shown in Figure 4. Each element is represented by a tag, and the style and location information are saved in the form of tag attributes. After the design is completed, the document templates are stored in the template central library of the public security communication network, and then exchanged to other network environments and stored in their respective document template libraries.

Specifically, selecting the corresponding traffic management document template according to the business data includes:

determine the document category based on the business data;

According to the document category, the corresponding traffic management document template is retrieved from the template library.

In the embodiment of the present invention, in the distributed network environment, after the business data is saved in the process of handling the traffic management business, the corresponding document template is retrieved from the template library according to the document type.

S120, automatically generating an electronic document corresponding to the business data according to the selected traffic management document template, wherein the content of the electronic document includes business data and name signature information;

In this embodiment of the present invention, it includes:

Filling the business data into the corresponding traffic management document template;

Dynamically generate electronic documents according to the traffic management document template filled with business data;

Obtain the name signature picture information of the electronic signature collection device, and synthesize the signature picture information into the designated position of the signature of the electronic document.

It should be understood that each field of the document template is retrieved in the order from top to bottom and from left to right, the text field is filled with the corresponding business data, and the image field is filled with the image bytes retrieved from the business data. The previous text position, font size, and image display size calculate the actual position of the current field in the document, and dynamically generate an electronic document based on this. Then, through the client, the public and the police are guided to complete the electronic signature of the name on the electronic signature collection hardware device, during which asymmetric encryption algorithm is used between the client and the electronic signature collection device to achieve device authentication and encryption of transmitted information. After the client collects the electronic signature information and uploads the signature picture, the system synthesizes the electronic signature information into the designated position of the electronic document.

S130, initiate a security authentication application to the server to obtain the electronic signature authentication information of the electronic document by the server;

In the embodiment of the present invention, it is necessary to judge whether the current electronic document needs to be stamped according to the business data.

If the current electronic document does not need to be sealed, the security authentication application is initiated to the server to obtain the electronic signature authentication information of the electronic document by the server, including:

Initiating an electronic signature request to the server, the server can perform a digest operation on the electronic document according to the electronic signature request, and perform a signature operation on the digest information according to the private key corresponding to the identity digital certificate to obtain an electronic signature result, and feedback the electronic signature result and identity digital certificate;

The electronic signature result and the identity digital certificate that have passed the verification of the security device are attached to the electronic document.

If the current electronic document needs to be sealed, the security authentication application is initiated to the server to obtain the electronic signature authentication information of the electronic document by the server, including:

Initiating an electronic signature request to the server, the server can perform a digest operation according to the electronic document, retrieve the electronic seal corresponding to the business data, and perform a signature operation on the digest information according to the electronic seal to obtain an electronic signature results, and feedback the electronic signature results and electronic seals;

The electronic signature result and electronic seal that have passed the verification of the security device are attached to the electronic document.

After the system generates electronic documents, the server can be requested to perform electronic signature operations for documents that do not need to be sealed. Results and identity digital certificates are attached to the specific domain of the document. For documents that need to be sealed, the position of the seal is dynamically determined by finding the position of the seal field of the electronic document, and then the server is requested to perform the electronic signature operation. Seal, sign the summary information with the private key corresponding to the electronic seal, attach the signature result and the electronic seal to a specific field of the document, and affix the stamp image to the specified position of the document.

As shown in Figure 5, it is the authentication flow chart between the electronic signature and signature system and the client. In order to ensure the security of the electronic signature collection terminal equipment used by the system, a security device is installed in the device. After each startup of the terminal device, it is necessary to perform an identification with the background electronic signature and signature system through the client software and security device. Authentication operation, only the terminal equipment that has passed the authentication can be used for various operations of the system. The client program invokes the electronic signature and signature system through a network request to initiate an authentication operation, and the electronic signature and signature system generates a random number R1, which is sent to the client together with the queried system identity digital certificate Cert_Sys. The client program sends the received random number R1 and the system identity digital certificate Cert_Sys to the security device. The security device first verifies the digital certificate Cert_Sys. After the verification is passed, the random number R1 is signed with the private key of the security device to obtain Sign1. , the security device returns Sign1, R2 and the digital certificate Cert_Sam of the security device to the client program together. The client program uploads the received Sign1 and Cert_Sam to the electronic signature and signature system. The electronic signature and signature system verifies the security device digital certificate Cert_Sam. After the verification is passed, Cert_Sam is used to verify the Sign1. A trusted connection is established between the chapter system and the client program.

S140. Save the electronic document with the electronic signature authentication information.

Electronic signatures and electronically signed documents can be transmitted in a distributed network environment after storage.

It should be understood that after the electronically signed document is transmitted in a distributed network environment, the distributed network management system can obtain the signature result and identity digital certificate from the electronic document, and first use the signature root certificate to verify the identity digital certificate. After passing, use the identity digital certificate to verify the documents and signatures. After the electronic document after electronic signature is transmitted in a distributed network environment, the distributed network management system can obtain the signature result and electronic seal from the electronic document. The seal verifies electronic documents and signatures.

To sum up, the method for safely generating traffic management electronic documents provided by the embodiments of the present invention generates electronic seals and system identity digital certificates in a distributed network environment, and dynamically generates traffic management documents according to business data according to the set document templates in the process of handling traffic management services. Electronic documents, and then use the terminal equipment to collect the electronic signatures of the public and the police, and then use the electronic signature and electronic signature methods to encrypt and store the documents according to the different requirements of whether the documents need to be stamped. The stored electronic documents are stored in the distributed network. The electronic signature and seal of the electronic document and the certificate chain therein are verified after transmission. Therefore, the method for safely generating electronic documents for traffic management provided by the embodiments of the present invention constructs an electronic signature and signature service system based on the same certificate system in a distributed network environment, and designs an automatic method for automatically generating electronic documents based on document templates. Electronic signature and signature and authentication of electronic documents in a distributed network environment. It effectively solves the problem of electronic documents and electronic signatures and seals used in traffic management business, improves the convenience for the masses to handle business, and helps to deepen the reform of "decentralization, regulation and service".

It should be noted that before the generation of electronic documents, electronic seals and identity digital certificates need to be produced, including:

1) Application for electronic seal and digital identity certificate

In a distributed network environment (generally including public security communication network, Internet and dedicated local area network), the public and private key information of the electronic seal is generated, and the electronic seal application information (including seal description information, impression image and electronic seal public key information) is packaged, and the system identity is generated. Authenticate public and private key information, and package system identity digital certificate application information (including system description information and system identity authentication public key information). The electronic signature application information and system identity digital certificate application information packaged and generated in a distributed network environment are collected and transmitted to a unified network environment (usually the public security communication network).

2) Electronic seal production and system identity digital certificate issuance

After receiving the electronic signature application information and identity digital certificate application information packaged and uploaded in each network environment, the public security communication network uses the signature root private key to digitally sign the uploaded information in the digital certificate management center, and the completed seal and the system after issuance Digital certificates are exchanged back to the respective cryptographic service systems stored in the applicant network.

3) Electronic seal and system identity digital certificate management

During the use of the electronic seal and system identity digital certificate, operations such as revocation and cancellation of the corresponding certificate can be performed in the digital certificate management center of the public security communication network, and the corresponding information can be exchanged to the cryptographic service system in other network environments.

Figure 6 is a flow chart of automatic generation of electronic documents for traffic control and electronic signature and seal. Use the visual template editing tool to draw various traffic management documents, and the generated xml format template files are saved in the document template library. During the business operation, the system management module reads the template file. After compilation and security verification, the business service module fills in the data according to the template to generate an electronic document and returns it to the business front-end module for users to preview. The business front-end module calls the client program to collect the signature information. After that, call through the service module to complete the electronic document, and send the generated electronic document to the traffic management secret service system to complete the electronic signature and signature operation, and finally generate an encrypted electronic file and save it in the file system.

FIG. 7 is a schematic diagram of an electronic document generated by an embodiment of the present invention.

It can be understood that the above embodiments are only exemplary embodiments adopted to illustrate the principle of the present invention, but the present invention is not limited thereto. For those skilled in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also regarded as the protection scope of the present invention.

Claims (10)

1. A safe generation method of a traffic management electronic document is characterized by comprising the following steps:

selecting a corresponding traffic management document template according to the service data;

automatically generating an electronic document corresponding to the service data according to the selected delivery document template, wherein the content of the electronic document comprises the service data and name signature information;

initiating a security authentication application to a server to obtain electronic signature authentication information of the server on the electronic document;

and storing the electronic document with the electronic signature authentication information.

2. The method of claim 1, wherein selecting a corresponding delivery document template according to the service data comprises:

determining the document type according to the service data;

and retrieving the corresponding delivery document template from the template library according to the document type.

3. The secure generation method of a delivery electronic document according to claim 2, wherein the automatically generating an electronic document corresponding to the service data according to the selected delivery document template, wherein the content of the electronic document includes the service data and name signature information comprises:

filling the service data into the corresponding delivery management document template;

dynamically generating an electronic document according to the traffic management document template filled with the service data;

and acquiring name, signature and picture information of the electronic signature acquisition equipment, and synthesizing the signature and picture information to a signature designated position of the electronic document.

4. The secure generation method of the delivery electronic document according to any one of claims 1 to 3, further comprising, before the step of initiating a secure authentication application to the server:

and judging whether the current electronic document needs to be sealed according to the service data.

5. The method of claim 4, wherein if the current electronic document does not need to be sealed, the sending a security authentication application to the server to obtain the electronic signature authentication information of the server on the electronic document comprises:

initiating an electronic signature request to the server, wherein the server can perform summary operation on the electronic document according to the electronic signature request, perform signature operation on summary information according to a private key corresponding to an identity digital certificate to obtain an electronic signature result, and feed back the electronic signature result and the identity digital certificate;

and attaching the electronic signature result and the identity digital certificate which are qualified by the verification of the security equipment to the electronic document.

6. The method for securely generating a delivery electronic document according to claim 4, wherein if the current electronic document needs to be sealed, the sending a secure authentication application to the server to obtain the electronic signature authentication information of the server on the electronic document comprises:

initiating an electronic signature request to the server, wherein the server can perform abstract operation according to the electronic document, retrieve an electronic seal corresponding to the service data, perform signature operation on abstract information according to the electronic seal to obtain an electronic signature result, and feed back the electronic signature result and the electronic seal;

and attaching the electronic signature result and the electronic seal which are qualified by the verification of the security equipment to the electronic document.

7. A client comprising a memory communicatively coupled to a processor, the memory for storing computer instructions, and the processor for loading and executing the computer instructions to implement the method of secure generation of a managed electronic document of any of claims 1 to 6.

8. An electronic signature system, comprising a security device, an electronic signature capture device and the client of claim 7, wherein the security device and the electronic signature capture device are communicatively coupled to the client, the security device is configured to authenticate identity information of a server, and the electronic signature capture device is configured to receive a name signature of a user and generate name signature picture information.

9. A distributed network management system comprising a key center management system, a server and the electronic signature signing system of claim 8 disposed in a distributed network, the electronic signature signing system being communicatively coupled to the server, the server being communicatively coupled to the key center management system.

10. The distributed network management system of claim 9, wherein the distributed network comprises a public security communication network, an internet network and a private communication network, the key center management system is deployed in the public security communication network, the server and the electronic signature system are deployed in the internet network, the public security communication network and the private communication network, respectively, the server in the internet network and the private communication network is communicatively connected to the server in the public security communication network, and the server in the public security communication network is communicatively connected to the key center management system.

Images