CN115482131A - An electronic contract signing method, system, terminal device and readable storage medium - Google Patents

Abstract

The application provides an electronic contract signing method, system, terminal equipment and readable storage medium. The method includes: receiving the first target personal private key selected by the first user, the first user is a member of the first enterprise; signing the original contract according to the first target personal private key to obtain the first sealed contract, the first The sealed contract includes the original text of the contract and the corresponding first digital signature; the first sealed contract is encrypted according to the second contract key of the second enterprise to obtain the first encrypted contract; the first encrypted contract and the first encrypted contract are sent to the second enterprise system The corresponding first enterprise certificate. This application can enter the information of the person who stamped the seal in the contract, providing a basis for subsequent search for the information of the stamped personnel; it can also realize that the company is displayed externally, and the counterparty of the contract can also verify the digital signature, so that the counterparty of the contract cannot obtain the stamped personnel Under the information, the digital signature can also be verified by the first certificate to improve the confidentiality of the information.

Description

An electronic contract signing method, system, terminal device and readable storage medium

technical field

The application belongs to the technical field of electronic contracts, and in particular relates to an electronic contract signing method, system, terminal equipment and readable storage medium.

Background technique

At present, the circulation process of electronic contracts is that after the contract initiator drafts and approves the contract, he uses the corporate electronic seal to complete the seal, and sends the electronic contract to the counterparty of the contract; the contract counterparty receives the electronic contract for approval, and uses the corporate electronic seal to complete the seal after approval Chapter, and then transferred to the contract initiator to complete the contract signing.

Since the person who affixes the seal uses the electronic seal of the enterprise and involves confidentiality requirements, the personal information of the person who affixes the seal will not be involved in the electronic contract. If there is a dispute, it is difficult to trace the person who stamped the seal.

Contents of the invention

The embodiment of the present application provides a method and system for signing an electronic contract, a terminal device and a readable storage medium, which can solve the problem that it is difficult to trace the person who stamped the seal.

In the first aspect, the embodiment of the present application provides a method for signing an electronic contract, which is applied to the first enterprise system, including:

receiving a first target personal private key selected by a first user who is a member of a first enterprise;

Sign the original text of the contract according to the first target personal private key to obtain a first sealed contract, and the first sealed contract includes the original text of the contract and the corresponding first digital signature;

Encrypting the first sealed contract according to the second contract key of the second enterprise to obtain the first encrypted contract;

sending the first encrypted contract and corresponding first enterprise certificate to the second enterprise system;

Wherein, the first enterprise system is a system used by the first enterprise to sign an electronic contract, the first target personal private key is generated according to the first enterprise key of the first enterprise, and the first enterprise certificate is Generated according to the key of the first enterprise and the information of the first enterprise, the system of the second enterprise is a system used by the second enterprise to sign an electronic contract.

Optionally, after signing the original contract according to the first target personal key, after obtaining the first sealed contract, it also includes:

receiving a query instruction input by a second user, and obtaining the first digital signature in response to the query instruction, the second user being a member of the first enterprise;

Track the first digital signature according to the first personal public key in each first personal certificate, search for the first target personal certificate in the first personal certificate set, and the first target personal certificate in the first personal certificate The target personal public key and the first target personal private key are a key pair;

displaying the first target user information in the first target personal certificate;

Wherein, the first personal certificate is generated according to the first personal public key and the first user information, the first personal public key is generated according to the first enterprise key, and is related to the The first personal private key is a pair of key pairs.

Optionally, the second contract key is identification information of the second enterprise.

Optionally, after sending the first encryption contract and the corresponding first enterprise certificate to the second enterprise system, further include:

receiving a second encrypted contract and a corresponding second enterprise certificate from the second enterprise system;

Decrypt the second encrypted contract according to the first contract key to obtain the second sealed contract, the second sealed contract includes the original text of the contract and the corresponding first digital signature and the second digital signature, the The second digital signature is obtained by the second enterprise signing the original text of the contract;

verifying the second digital signature according to the second enterprise key in the second enterprise certificate and the original text of the contract;

If the verification of the second digital signature is passed, the second sealed contract is saved;

Wherein, the first contract key is the identification information of the first enterprise.

Optionally, after receiving the second encryption contract and the corresponding second enterprise certificate from the second enterprise, the method further includes:

verifying the identity of the second enterprise according to the information of the second enterprise in the second enterprise certificate;

If the identity verification is passed, enter the step of: decrypting the second encrypted contract according to the first contract key to obtain the second sealed contract.

Optionally, before receiving the first target personal private key selected by the first user, it also includes:

Receive and store the first enterprise certificate and at least one first personal private key and corresponding first personal certificate generated by the certification authority;

Wherein, the first personal private key is generated according to the first enterprise key, each of the first personal private keys is different, and each of the first personal certificates is different.

In the second aspect, the embodiment of the present application provides a method for signing an electronic contract, which is applied to the second enterprise system, including:

receiving a first encrypted contract and a corresponding first enterprise certificate from the first enterprise system;

Deciphering the first encrypted contract through the second contract key to obtain a first sealed contract, the first sealed contract includes the original text of the contract and the corresponding first digital signature;

Verifying the first digital signature according to the first enterprise key in the first enterprise certificate and the original contract;

If the verification of the first digital signature is passed, the second target personal private key selected by the third user is received, and the third user is a member of the second enterprise;

Sign the original text of the contract according to the second target personal private key to obtain a second sealed contract, and the second sealed contract includes the original text of the contract and the corresponding first digital signature and the second digital signature;

Encrypting the second sealed contract according to the first contract key of the first enterprise to obtain a second encrypted contract;

sending the second encrypted contract and corresponding second enterprise certificate to the first enterprise system;

Wherein, the second enterprise system is the system used by the second enterprise to sign electronic contracts, the second target personal private key is generated according to the second enterprise key of the second enterprise, and the second enterprise certificate is Generated according to the second enterprise key and the information of the second enterprise, the first enterprise system is a system used by the first enterprise to sign an electronic contract.

In the third aspect, the embodiment of the present application provides an electronic contract signing system, including a first enterprise system and a second enterprise system;

The first enterprise system is configured to receive a first target personal private key selected by a first user, where the first user is a member of the first enterprise;

Sign the original text of the contract according to the first target personal private key to obtain a first sealed contract, and the first sealed contract includes the original text of the contract and the corresponding first digital signature;

Encrypting the first sealed contract according to the second contract key of the second enterprise to obtain the first encrypted contract;

sending the first encrypted contract and corresponding first enterprise certificate to the second enterprise system;

the second enterprise system is configured to receive a first encrypted contract and a corresponding first enterprise certificate from the first enterprise system;

Deciphering the first encrypted contract through the second contract key to obtain a first sealed contract, the first sealed contract includes the original text of the contract and the corresponding first digital signature;

Verifying the first digital signature according to the first enterprise key in the first enterprise certificate and the original contract;

If the verification of the first digital signature is passed, the second target personal private key selected by the third user is received, and the third user is a member of the second enterprise;

Sign the original text of the contract according to the second target personal private key to obtain a second sealed contract, and the second sealed contract includes the original text of the contract and the corresponding first digital signature and the second digital signature;

Encrypting the second sealed contract according to the first contract key of the first enterprise to obtain a second encrypted contract;

sending the second encrypted contract and corresponding second enterprise certificate to the first enterprise system;

Wherein, the first enterprise system is a system used by the first enterprise to sign an electronic contract, the first target personal private key is generated according to the first enterprise key of the first enterprise, and the first enterprise certificate is Generated according to the key of the first enterprise and the information of the first enterprise, the system of the second enterprise is the system used by the second enterprise to sign electronic contracts, and the second target personal private key is generated according to the second A second enterprise key of the enterprise is generated, and the second enterprise certificate is generated according to the second enterprise key and the information of the second enterprise.

In a fourth aspect, an embodiment of the present application provides a terminal device, including a memory, a processor, and a computer program stored in the memory and operable on the processor, when the processor executes the computer program The method described in any one of the first aspect or the second aspect is realized.

In the fifth aspect, the embodiment of the present application provides a computer-readable storage medium, the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned first or second aspect can be implemented. any one of the methods described.

In a sixth aspect, an embodiment of the present application provides a computer program product, which, when the computer program product is run on a terminal device, enables the terminal device to execute the method described in any one of the above-mentioned first aspect or the second aspect.

It can be understood that, for the beneficial effects of the above-mentioned second aspect to the sixth aspect, reference can be made to the related description in the above-mentioned first aspect, which will not be repeated here.

Compared with the prior art, the embodiments of the present application have the following beneficial effects:

In this embodiment, by receiving the first target personal private key selected by the first user, the original contract is signed according to the first target personal private key, and the first sealed contract is obtained. The first sealed contract includes the original contract and the corresponding first contract. Digital signature can enter the information of the person who stamped the seal in the contract, providing a basis for subsequent search for the information of the stamped personnel.

At the same time, based on the first target personal private key is generated based on the first enterprise key, and the first enterprise certificate is generated based on the first enterprise key and the information of the first enterprise, so that the enterprise is displayed externally and the counterparty of the contract can also verify The digital signature enables the counterparty to the contract to verify the digital signature through the first enterprise certificate even if the counterparty to the contract cannot obtain the information of the stamped personnel, improving the confidentiality of information.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the accompanying drawings that need to be used in the descriptions of the embodiments or the prior art will be briefly introduced below. Obviously, the accompanying drawings in the following description are only for the present application For some embodiments, those of ordinary skill in the art can also obtain other drawings based on these drawings without any creative effort.

Fig. 1 is a schematic diagram of a system provided by an embodiment of the present application;

Fig. 2 is a first schematic flow chart of an electronic contract signing method provided by an embodiment of the present application;

Fig. 3 is a second schematic flow chart of an electronic contract signing method provided by an embodiment of the present application;

Fig. 4 is a schematic structural diagram of a terminal device provided by an embodiment of the present application.

detailed description

In the following description, specific details such as specific system structures and technologies are presented for the purpose of illustration rather than limitation, so as to thoroughly understand the embodiments of the present application. It will be apparent, however, to one skilled in the art that the present application may be practiced in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present application with unnecessary detail.

It should be understood that when used in this specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and/or components, but does not exclude one or more other Presence or addition of features, wholes, steps, operations, elements, components and/or collections thereof.

It should also be understood that the term "and/or" used in the description of the present application and the appended claims refers to any combination and all possible combinations of one or more of the associated listed items, and includes these combinations.

As used in this specification and the appended claims, the term "if" may be construed, depending on the context, as "when" or "once" or "in response to determining" or "in response to detecting ". Similarly, the phrase "if determined" or "if [the described condition or event] is detected" may be construed, depending on the context, to mean "once determined" or "in response to the determination" or "once detected [the described condition or event] ]” or “in response to detection of [described condition or event]”.

In addition, in the description of the specification and appended claims of the present application, the terms "first", "second", "third" and so on are only used to distinguish descriptions, and should not be understood as indicating or implying relative importance.

Reference to "one embodiment" or "some embodiments" or the like in the specification of the present application means that a particular feature, structure, or characteristic described in connection with the embodiment is included in one or more embodiments of the present application. Thus, appearances of the phrases "in one embodiment," "in some embodiments," "in other embodiments," "in other embodiments," etc. in various places in this specification are not necessarily All refer to the same embodiment, but mean "one or more but not all embodiments" unless specifically stated otherwise. The terms "including", "comprising", "having" and variations thereof mean "including but not limited to", unless specifically stated otherwise.

Nowadays, electronic contracts have been widely used in various fields of social and economic activities. Generally, digital certificates and digital signatures are required to sign electronic contracts, so enterprises need to submit materials to the certification center to apply for enterprise keys and contract keys. The certification center generates and stores the enterprise key and contract key, and then generates at least one personal key pair based on the enterprise key, including a personal private key and a personal public key; then generates an enterprise certificate based on the enterprise key and enterprise information, according to The personal public key and the specified user information generate a personal certificate, and simultaneously issue the enterprise certificate, at least one personal private key and the corresponding personal certificate to the enterprise.

The first enterprise receives and stores the first enterprise certificate generated by the certification authority, at least one first personal private key and the corresponding first personal certificate.

Wherein, the first enterprise key and the first contract key are generated by the certification center based on the information of the first company, and the first individual public key and the first individual private key are generated by the certification center based on the first enterprise key. The first personal certificate is generated by the certification center according to the first personal public key and the first user information. All first person key pairs are different, and all first person certificates are different. The first enterprise certificate is generated according to the first enterprise key and the information of the first enterprise.

The second enterprise receives and stores the second enterprise certificate generated by the certification center, at least one second personal private key and the corresponding second personal certificate.

Wherein, the second enterprise key and the second contract key are generated by the certification center according to the information of the second company, and the second personal public key and the second personal private key are generated by the certification center according to the second enterprise key. The second personal certificate is generated by the certification center according to the second personal public key and the second user information. All second personal key pairs are different, and all second personal certificates are different. The second enterprise certificate is generated by the certification center according to the second enterprise key and the information of the second enterprise.

Personal private keys can only be used by designated enterprise members with authority, and enterprise members use their dedicated personal private keys to sign electronic contracts.

Fig. 1 is a schematic diagram of a system provided by an embodiment of the present application. As shown in FIG. 1 , the system includes a first enterprise system and a second enterprise system. Wherein, the first enterprise system 1 is a system used by the first enterprise to sign an electronic contract, including at least one first terminal. Exemplarily, it includes the first terminal 10 , the first terminal 11 , the first terminal 12 and the first terminal 13 . The terminal user's specific personal key and the first enterprise certificate are stored in the first terminal.

The second enterprise system 2 is a system used by the second enterprise to sign electronic contracts, including at least one second terminal. Exemplarily, it includes the second terminal 20 , the second terminal 21 , the second terminal 22 and the second terminal 23 . A personal key specific to the end user and a second enterprise certificate are stored in the second terminal.

When the first enterprise signs an electronic contract with the second enterprise, the first enterprise acts as the initiator of the contract, and the second enterprise acts as the counterparty of the contract.

Fig. 2 is a schematic flow chart of the first electronic contract signing method provided by an embodiment of the present application. As shown in Figure 2, the description includes:

S11: The first enterprise system receives the first target personal private key selected by the first user.

Wherein, the first user is a member of the first enterprise, and the first target personal private key is generated by the certification center according to the first enterprise key of the first enterprise.

In the application, the enterprise initiates the electronic contract process internally. After the original contract is approved internally, the final approver, the first user, clicks on his dedicated personal private key on the first terminal used. The first terminal receives the first target personal private key selected by the first user.

S12: Sign the original text of the contract according to the private key of the first target individual to obtain the first sealed contract.

Wherein, the first sealed contract includes the original text of the contract and the corresponding first digital signature.

In the application, the first terminal uses the first target personal private key to sign the original text of the contract, so as to affix the digital signature of the first user on the original text of the contract. Since the private key of the first person is generated by the certification center based on the key of the first enterprise, the first digital signature is also equivalent to the digital signature of the first enterprise.

S13: Encrypt the first sealed contract according to the second contract key of the second enterprise to obtain the first encrypted contract.

In the application, the first terminal uses the pre-stored second contract key of the second company to encrypt the first sealed contract, so that the first sealed contract can be encrypted and transmitted, and it can also prevent others from stealing information after being stolen .

S14: Send the first encrypted contract and the corresponding first enterprise certificate to the second enterprise system.

In the application, after the first terminal generates the first encrypted contract, it sends the first encrypted contract and the corresponding first enterprise certificate to the second enterprise system of the second enterprise.

Among them, the first enterprise certificate is displayed as an enterprise, and because the first personal private key used by the first user is generated according to the first enterprise key, the first enterprise key in the first enterprise certificate can verify the first digital sign.

It can be understood that by receiving the first target personal private key selected by the first user and signing the original contract according to the first target personal private key, the first sealed contract is obtained. The first sealed contract includes the original contract and the corresponding first contract. A digital signature, which can enter the information of the person who stamped the seal in the contract, providing a basis for subsequent search for the information of the stamped personnel.

At the same time, based on the first target personal private key is generated based on the first enterprise key, and the first enterprise certificate is generated based on the first enterprise key and the information of the first enterprise, so that the enterprise is displayed externally and the counterparty of the contract can also verify The digital signature enables the counterparty to the contract to verify the digital signature through the first enterprise certificate even if the counterparty of the contract cannot obtain the information of the person who stamped the seal, which improves the confidentiality of information and embodies anonymity.

S21: The second enterprise system receives the first encrypted contract and the corresponding first enterprise certificate from the first enterprise system.

In the application, a certain second terminal in the second enterprise system receives the first encryption contract and the corresponding first enterprise certificate.

S22: Decrypt the first encrypted contract by using the second contract key to obtain the first sealed contract.

Wherein, the first sealed contract includes the original text of the contract and the corresponding first digital signature.

In the application, since the first enterprise uses the second contract key, correspondingly, the second terminal receiving the contract uses the second contract key to decrypt the first encrypted contract.

S23: Verify the first digital signature according to the first enterprise key in the first enterprise certificate and the original contract.

In the application, the second terminal receiving the contract obtains the first enterprise key from the first enterprise certificate, decrypts the first digital signature, and obtains the contract abstract from the first digital signature. Then perform hash calculation on the original text of the contract to obtain an abstract of the original text, and compare the abstract of the contract in the first digital signature with the original text abstract obtained by the hash calculation. If they are the same, it means that the electronic contract has not been tampered with during the transfer process, and the verification is passed. If they are not the same, it means that the electronic contract has been tampered with during the transfer process, and the verification fails.

Through signature verification, it is known whether the original contract has been tampered with, ensuring the security of the transaction.

S24: If the verification of the first digital signature is passed, receive the second target personal private key selected by the third user.

In the application, if the verification is passed, an internal audit is carried out, and finally the third user of the approver clicks on his dedicated personal private key on the second terminal used. The second terminal receives the second target personal private key selected by the third user.

Wherein, the second target personal private key is generated according to the second enterprise key of the second enterprise.

S25: Sign the original text of the contract according to the private key of the second target individual to obtain the second sealed contract.

Wherein, the second sealed contract includes the original text of the contract and the corresponding first and second digital signatures, and the third user is a member of the second enterprise.

In the application, the signing second terminal uses the first target personal private key to sign the original text of the contract, so as to stamp the digital signature of the third user on the original text of the contract. Since the second personal private key is generated by the certification center based on the second enterprise key, the second digital signature is also equivalent to the digital signature of the second enterprise.

S26: Encrypt the second sealed contract according to the first contract key of the first enterprise to obtain a second encrypted contract.

In the application, the signed second terminal uses the pre-stored first contract key of the first company to encrypt the second sealed contract, so that the second sealed contract can be encrypted and transmitted, and it can also prevent others from stealing Steal information.

S27: Send the second encryption contract and the corresponding second enterprise certificate to the first enterprise system.

In the application, after the signed second terminal generates the second encrypted contract, it sends the second encrypted contract and the corresponding second enterprise certificate to the first enterprise system of the first enterprise.

In this embodiment, the second terminal receiving the contract and the second terminal signing the contract are the same terminal. In other embodiments, it may be a different terminal.

Understandably, by receiving the second target personal private key selected by the third user, the original contract is signed according to the second target personal private key, and the second sealed contract is obtained. The second sealed contract includes the original contract, the corresponding first 2. Digital signature, which can enter the information of the person who stamped the seal in the contract, providing a basis for subsequent search for the information of the stamped personnel.

At the same time, based on the second target personal private key is generated based on the second enterprise key, and the second enterprise certificate is generated based on the second enterprise key and the second enterprise information, so that the contract initiator can also verify the number while the enterprise is displayed externally Signature, so that the contract initiator can verify the digital signature through the second enterprise certificate even if the contract initiator cannot obtain the information of the person who stamped the seal, improving the confidentiality of information.

S15: The first enterprise system receives the second encrypted contract and the corresponding second enterprise certificate from the second enterprise system.

In the application, a certain first terminal in the first enterprise system receives the second encryption contract and the corresponding second enterprise certificate.

S16: Decrypt the second encrypted contract according to the first contract key to obtain the second sealed contract.

Wherein, the second sealed contract includes the original contract text and the corresponding first digital signature and the second digital signature, and the second digital signature is obtained by signing the original contract text by the second enterprise.

In the application, because the second enterprise uses the first contract key, correspondingly, the first terminal receiving the contract uses the first contract key to decrypt the second encrypted contract.

S17: Verify the second digital signature according to the second enterprise key in the second enterprise certificate and the original contract.

In the application, the first terminal receiving the contract obtains the second enterprise key from the second enterprise certificate, decrypts the second digital signature, and obtains the contract abstract from the second digital signature. Then perform hash calculation on the original text of the contract to obtain an abstract of the original text, and compare the abstract of the contract in the second digital signature with the original text abstract obtained by the hash calculation. If they are the same, it means that the electronic contract has not been tampered with during the transfer process, and the verification is passed. If they are not the same, it means that the electronic contract has been tampered with during the transfer process, and the verification fails.

S18: If the verification of the second digital signature is passed, save the second sealed contract.

In the application, if the verification is passed, the second sealed contract is saved for archival purposes. Through signature verification, it is known whether the original contract has been tampered with, ensuring the security of the transaction.

Fig. 3 is a schematic flow chart of a second electronic contract signing method provided by an embodiment of the present application. As shown in Figure 3, after step S12, also include:

S121: Receive a query instruction input by a second user, and obtain a first digital signature in response to the query instruction, where the second user is a member of the first enterprise.

In the application, after the first stamped contract is generated, when the second user in the first enterprise needs to inquire about the information of the person who stamped the first stamped contract, he inputs a query command on the first terminal used, and the first terminal receives In response to the query instruction, the first digital signature is obtained from the first sealed contract according to the query instruction.

Or, when the second user in the first enterprise needs to inquire about the information of the person who affixed a certain second contract, the inquiring instruction is input on the first terminal used. The first terminal receives the query instruction, and in response to the query instruction, acquires the first digital signature from the second sealed contract according to the query instruction.

S122: Track the first digital signature according to the first personal public key in each first personal certificate, and search for the first target personal certificate in the first personal certificate set.

Wherein, the first target personal public key and the first target personal private key in the first target personal certificate are a key pair.

In the application, after the first digital signature is obtained, in the first personal certificate set, the first digital signature is decrypted one by one by using the first personal public key in the first personal certificate. If the decryption is successful, the first target personal public key and the first target personal certificate are obtained at the same time. The user's information, that is, the first user's information, is obtained from the first target personal certificate.

Wherein, the first terminal of the second user pre-stores the first personal certificate set.

S123: Display the first target user information in the first target personal certificate.

In the application, the first target user information is displayed on the first terminal used by the second user.

In this embodiment, the first digital signature is tracked according to the first personal public key in each first personal certificate, and the first target personal certificate is searched in the first personal certificate set, and the first target personal certificate in the first target personal certificate is displayed. One-target user information, to realize the information query of the person who signs the electronic contract, without the need to query through other complicated processes or through the auxiliary query of the business system.

In one embodiment, the first contract key is the identification information of the first enterprise, and the second contract key is the identification information of the second enterprise. In this case, both parties to the contract do not need to receive additional digital certificates for decrypting the contract, reducing the difficulty of digital certificate management, and at the same time do not need to verify these digital certificates, reducing the cumbersome verification process.

For example, the identification information is personally identifiable information or enterprise identifiable information.

In one embodiment, after S15, it also includes:

According to the information of the second enterprise in the second enterprise certificate, the identity of the second enterprise is verified.

In the application, according to the information of the second enterprise, it is determined whether the second encryption contract comes from the second enterprise and whether it comes from the opposite party of the contract.

If the identity verification is passed, enter the step of: decrypting the second encrypted contract according to the first contract key to obtain the second sealed contract.

In the application, if it is determined that it is from the second enterprise, the verification is passed, and the second encrypted contract is decrypted.

In this embodiment, by verifying the identity of the second company based on the information of the second company in the certificate of the second company, to verify whether the electronic contract comes from the counterparty of the contract, timely intercept maliciously forged electronic contracts, and ensure the security of the transaction.

In one embodiment, before saving the second stamped contract, further includes:

Verify the first digital signature according to the first enterprise key in the first enterprise certificate and the original contract;

If the verification of the first digital signature is passed, then enter the step of saving the second sealed contract.

In this embodiment, the first digital signature is verified according to the first enterprise key in the first enterprise certificate and the original text of the contract, so as to verify the first digital signature again, to detect maliciously forged electronic contracts in time, and to ensure the integrity of the transaction. safety.

It should be understood that the sequence numbers of the steps in the above embodiments do not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation to the implementation process of the embodiment of the present application.

FIG. 4 is a schematic structural diagram of a terminal device provided by an embodiment of the present application. As shown in FIG. 4 , the terminal device 3 of this embodiment includes: at least one processor 30 (only one is shown in FIG. 4 ), a memory 31 and stored in the memory 31 and can be used in the at least one processor 30 A computer program 32 running on the computer, when the processor 30 executes the computer program 32, the steps in any of the above method embodiments are realized.

The terminal device 3 may be a computing device such as a desktop computer, a notebook, a palmtop computer, or a cloud server. The terminal device 3 may include, but not limited to, a processor 30 and a memory 31 . Those skilled in the art can understand that Fig. 4 is only an example of the terminal device 3, and does not constitute a limitation to the terminal device 3, and may include more or less components than those shown in the figure, or combine certain components, or different components , for example, may also include input and output devices, network access devices, and so on.

The so-called processor 30 can be a central processing unit (Central Processing Unit, CPU), and the processor 30 can also be other general-purpose processors, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit) , ASIC), off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

The storage 31 may be an internal storage unit of the terminal device 3 in some embodiments, such as a hard disk or memory of the terminal device 3 . The memory 31 may also be an external storage device of the terminal device 3 in other embodiments, such as a plug-in hard disk equipped on the terminal device 3, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, flash memory card (Flash Card), etc. Further, the memory 31 may also include both an internal storage unit of the terminal device 3 and an external storage device. The memory 31 is used to store operating system, application program, boot loader (BootLoader), data and other programs, such as the program code of the computer program. The memory 31 can also be used to temporarily store data that has been output or will be output.

It should be noted that the information interaction and execution process between the above-mentioned devices/units are based on the same concept as the method embodiment of the present application, and its specific functions and technical effects can be found in the method embodiment section. I won't repeat them here.

Those skilled in the art can clearly understand that for the convenience and brevity of description, only the division of the above-mentioned functional units and modules is used for illustration. In practical applications, the above-mentioned functions can be assigned to different functional units, Completion of modules means that the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above. Each functional unit and module in the embodiment may be integrated into one processing unit, or each unit may exist separately physically, or two or more units may be integrated into one unit, and the above-mentioned integrated units may adopt hardware It can also be implemented in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the protection scope of the present application. For the specific working process of the units and modules in the above system, reference may be made to the corresponding process in the foregoing method embodiments, and details will not be repeated here.

The embodiment of the present application also provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the foregoing method embodiments can be implemented.

An embodiment of the present application provides a computer program product. When the computer program product runs on a terminal device, the terminal device can implement the steps in the foregoing method embodiments when executed.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, all or part of the procedures in the methods of the above embodiments in the present application can be completed by instructing related hardware through computer programs, and the computer programs can be stored in a computer-readable storage medium. The computer program When executed by a processor, the steps in the above-mentioned various method embodiments can be realized. Wherein, the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file or some intermediate form. The computer-readable medium may at least include: any entity or device capable of carrying computer program codes to a photographing device/terminal device, a recording medium, a computer memory, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), electrical carrier signal, telecommunication signal, and software distribution medium. Such as U disk, mobile hard disk, magnetic disk or optical disk, etc. In some jurisdictions, computer readable media may not be electrical carrier signals and telecommunication signals under legislation and patent practice.

In the above-mentioned embodiments, the descriptions of each embodiment have their own emphases, and for parts that are not detailed or recorded in a certain embodiment, refer to the relevant descriptions of other embodiments.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application.

In the embodiments provided in this application, it should be understood that the disclosed device/network device and method may be implemented in other ways. For example, the device/network device embodiments described above are only illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be other division methods, such as multiple units Or components may be combined or may be integrated into another system, or some features may be omitted, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

The above-described embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still implement the foregoing embodiments Modifications to the technical solutions described in the examples, or equivalent replacements for some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the application, and should be included in the Within the protection scope of this application.

Claims (10)

1. An electronic contract signing method, applied to a first enterprise system, comprises the following steps:

receiving a first target individual private key selected by a first user, wherein the first user is a member of a first enterprise;

signing the identical original text according to the first target individual private key to obtain a first sealing contract, wherein the first sealing contract comprises the contract original text and a corresponding first digital signature;

encrypting the first sealing contract according to a second contract key of a second enterprise to obtain a first encryption contract;

sending the first encryption contract and the corresponding first enterprise certificate to the second enterprise system;

the first enterprise system is a system used by the first enterprise to sign an electronic contract, the first target individual private key is generated according to a first enterprise key of the first enterprise, the first enterprise certificate is generated according to the first enterprise key and information of the first enterprise, and the second enterprise system is a system used by the second enterprise to sign an electronic contract.

2. The method of claim 1, wherein said signing the contract text based on the first target individual key, after obtaining a first sealed contract, further comprises:

receiving a query instruction input by a second user, and responding to the query instruction to acquire the first digital signature, wherein the second user is a member of the first enterprise;

tracking the first digital signature according to a first personal public key in each first personal certificate, and searching a first target personal certificate in a first personal certificate set, wherein the first target personal public key in the first target personal certificate and the first target personal private key are a key pair;

displaying first target user information in the first target personal certificate;

the first personal certificate is generated according to the first personal public key and first user information, and the first personal public key is generated according to the first enterprise key and belongs to a key pair with the first personal private key.

3. The method of claim 1, wherein: the second contract key is identification information of the second enterprise.

4. The method of any of claims 1-3, wherein after sending the first encryption contract and corresponding first enterprise certificate to the second enterprise system, further comprising:

receiving a second encryption contract and a corresponding second enterprise certificate from the second enterprise system;

decrypting the second encrypted contract according to the first contract key to obtain a second seal contract, wherein the second seal contract comprises the contract original text and a corresponding first digital signature and a second digital signature, and the second digital signature is obtained by signing the contract original text through the second enterprise;

verifying the second digital signature according to the second enterprise key and the contract original text in the second enterprise certificate;

if the second digital signature passes the verification, the second seal contract is stored;

wherein the first contract key is identification information of the first enterprise.

5. The method of claim 4, wherein after receiving a second encryption contract and corresponding second enterprise certificate from the second enterprise, further comprising:

verifying the identity of the second enterprise according to the information of the second enterprise in the second enterprise certificate;

if the identity passes the verification, the method enters the following steps: and decrypting the second encrypted contract according to the first contract key to obtain a second sealing contract.

6. The method of claim 5, wherein prior to receiving the first target individual private key selected by the first user, further comprising:

receiving and storing a first enterprise certificate, at least one first personal private key and a corresponding first personal certificate which are generated by a certificate authority;

the first private key is generated according to the first enterprise key, the first private keys are different from one another, and the first personal certificates are different from one another.

7. An electronic contract signing method, applied to a second enterprise system, includes:

receiving a first encryption contract and a corresponding first enterprise certificate from a first enterprise system;

decrypting the first encryption contract through a second contract key to obtain a first sealing contract, wherein the first sealing contract comprises contract original text and a corresponding first digital signature;

verifying the first digital signature according to the first enterprise key and the contract original text in the first enterprise certificate;

if the first digital signature passes the verification, receiving a second target personal private key selected by a third user, wherein the third user is a member of a second enterprise;

signing the contract original text according to the second target individual private key to obtain a second sealing contract, wherein the second sealing contract comprises the contract original text and a corresponding first digital signature and a second digital signature;

encrypting the second sealing contract according to the first contract key of the first enterprise to obtain a second encryption contract;

sending the second encryption contract and a corresponding second enterprise certificate to the first enterprise system;

the second enterprise system is a system used by the second enterprise to sign an electronic contract, the second target individual private key is generated according to a second enterprise key of the second enterprise, the second enterprise certificate is generated according to the second enterprise key and information of the second enterprise, and the first enterprise system is a system used by the first enterprise to sign an electronic contract.

8. An electronic contract signing system is characterized by comprising a first enterprise system and a second enterprise system;

the first enterprise system is used for receiving a first target personal private key selected by a first user, and the first user is a member of a first enterprise;

signing the identical original text according to the first target individual private key to obtain a first sealing contract, wherein the first sealing contract comprises the contract original text and a corresponding first digital signature;

encrypting the first sealing contract according to a second contract key of a second enterprise to obtain a first encryption contract;

sending the first encryption contract and the corresponding first enterprise certificate to the second enterprise system;

the second enterprise system is used for receiving the first encryption contract and the corresponding first enterprise certificate from the first enterprise system;

decrypting the first encrypted contract through a second contract key to obtain a first sealing contract, wherein the first sealing contract comprises contract original texts and a corresponding first digital signature;

verifying the first digital signature according to the first enterprise key and the contract original text in the first enterprise certificate;

if the first digital signature passes the verification, receiving a second target personal private key selected by a third user, wherein the third user is a member of a second enterprise;

signing the contract original text according to the second target individual private key to obtain a second sealing contract, wherein the second sealing contract comprises the contract original text and a corresponding first digital signature and a second digital signature;

encrypting the second sealing contract according to the first contract key of the first enterprise to obtain a second encryption contract;

sending the second encryption contract and a corresponding second enterprise certificate to the first enterprise system;

the first enterprise system is a system for signing an electronic contract for the first enterprise, the first target individual private key is generated according to a first enterprise key of the first enterprise, the first enterprise certificate is generated according to the first enterprise key and information of the first enterprise, the second enterprise system is a system for signing an electronic contract for the second enterprise, the second target individual private key is generated according to a second enterprise key of the second enterprise, and the second enterprise certificate is generated according to the second enterprise key and information of the second enterprise.

9. A terminal device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the method according to any of claims 1 to 6 or 7 when executing the computer program.

10. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, carries out the method according to any one of claims 1 to 6 or 7.

Images