CN1858793A - Electronic contract managing system operation platform - Google Patents

Abstract

An operation platform of an electronic contract management system, including a client end and a server end connected to each other through a network. The server side includes: the electronic seal management center module, the contract template management center module and the user management center module connected with each other with the electronic contract management center module as the core; the client side includes: the system administrator module connected with each other, the electronic contract administrator Module and Electronic Contract User Module. As described in the structure, the operation platform is completely based on the electronic contract solution of the network, which is convenient and transparent. Its electronic seal is integrated with the encryption of the smart key disk, and the contract template is based on what you see and get The unforgeability of the seal. It is more convenient and reliable to manage in the way of enterprise binding and association.

Description

Electronic contract management system operation platform

technical field

The invention relates to an operation platform, in particular to an operation platform of an electronic contract management system.

Background technique

With the rapid development of e-commerce, the signing and management of traditional paper contracts are increasingly affecting the progress of business. People begin to use electronic documents, electronic documents and electronic data in large quantities to replace paper documents and data exchange. This has become a an inevitable development trend. However, security issues have become increasingly prominent. How to solve the problem of signing and sealing electronic documents, and how to ensure the authenticity, integrity, reliability and non-repudiation of various electronic documents have become bottlenecks restricting the full use of electronic documents.

Many countries have formulated electronic signature laws, and the implementation of China's "Electronic Signature Law of the People's Republic of China" opened the prelude to the application of electronic contracts in China. The application of electronic contracts is the first stage of digital paper to expand its application field, which makes digital paper technology initially show its strong influence in the field of information technology.

An electronic signature is not a digital representation of a written signature. It's actually an electronic code that allows recipients to easily verify the sender's identity and signature online. It realizes the confidentiality of information transmission, the integrity of data exchange, the non-repudiation of sent information, and the certainty of the identity of traders.

At present, electronic signatures can be realized through a variety of technical means, but the relatively mature, easy-to-use and operable electronic signature technology commonly used in advanced countries in the world and China is still based on PKI (Public Key Infrastructure) Digital signature technology.

Electronic signatures based on PKI (Public Key Infrastructure) are called "digital signatures". Some people claim that "electronic signature" is "digital signature" is wrong. A digital signature is just a specific form of an electronic signature. Although electronic signatures have achieved technical neutrality, they also bring inconvenience to use, and further provisions have been made on electronic signatures in law, such as the above-mentioned "Model Law on Electronic Signatures" of the United Nations Trade and Development Council and the "Common Framework for Electronic Signatures" of the European Union. "Reliable Electronic Signature" and "Advanced Electronic Signature" are specified in the Directive. In fact, it stipulates the function of digital signature, which makes digital signature obtain better application security and operability. At present, there is only the theory of public key cryptography for electronic signatures with practical significance. Therefore, at present, the digital signature technology based on PKI is widely used at home and abroad, the technology is mature and practical. As a public key infrastructure, PKI can provide various online security services, such as authentication, data confidentiality, data integrity and non-repudiation. Which uses digital signature technology.

The core executive body of PKI is the electronic certification service provider, collectively referred to as the CA (Certificate Authority), and the core factor of the PKI signature is the digital certificate issued by the CA. The PKI services it provides are authentication, data integrity, data confidentiality and non-repudiation. Its method is to use the certificate public key and the corresponding private key to encrypt/decrypt, and generate a signature and verify the signature of the digital message. Digital signature is to use public key cryptography and other cryptographic algorithms to generate a series of symbols and codes to form electronic passwords to sign, instead of writing signatures and seals; this electronic signature can also be verified technically, and its verification accuracy is higher than manual The verification of signatures and seals is unmatched. This signature method can be authenticated in a large group of trusted PKI domains, or cross-certified in multiple trusted PKI domains, and it is especially suitable for secure authentication and transmission on the Internet and wide area networks.

Because the technology of the Internet (Internet) e-commerce system enables customers who shop online to obtain the information of merchants and enterprises very conveniently and easily, but it also increases the risk of some sensitive or valuable data being misused. Both the buyer and the seller must be authentic and reliable for all financial transactions conducted on the Internet, and must have absolute confidence in all parties involved in the transaction, such as customers, merchants and enterprises. Therefore, the Internet (Internet) e-commerce system must be guaranteed to have Very reliable security and confidentiality technology, that is to say, must ensure the four major elements of network security, namely the confidentiality of information transmission, the integrity of data exchange, the non-repudiation of sent information, and the certainty of the identity of traders.

Business information in transactions is required to be kept confidential. If the account number and user name of the credit card are known, it may be stolen, and the information of ordering and payment is known to competitors, and business opportunities may be lost. Therefore, there is generally a requirement for encryption in the information dissemination during the electronic transaction process.

The two parties in an online transaction are likely to be strangers and separated by thousands of miles. To make the transaction successful, it is first necessary to confirm the identity of the other party. For the merchant, the client must not be a liar, and the customer will also worry about whether the online store is a black shop playing with fraud. Therefore, being able to confirm the identity of the other party conveniently and reliably is the premise of the transaction. For banks, credit card companies and sales stores that provide services to customers or users, in order to achieve safe, confidential and reliable service activities, identity authentication must be performed. For the relevant sales stores, they do not know the number of the credit card used by the customer, and the store can only hand over the confirmation work of the credit card to the bank to complete. Banks and credit card companies can use various confidentiality and identification methods to confirm whether the customer's identity is legitimate, and at the same time prevent chargebacks and confirm order and order receipt information.

Due to the ever-changing business conditions, once a deal is concluded, it cannot be denied. Otherwise, the interests of one party will inevitably be damaged. For example, when ordering gold, the price of gold is lower when ordering, but after receiving the order, the price of gold rises. If the acquirer can deny the actual time of receiving the order, or even deny the fact of receiving the order, the orderer will suffer losses. Therefore, all aspects of the electronic transaction communication process must be undeniable.

Transaction documents cannot be modified, such as the example given above - ordering gold. After receiving the order, the supplier finds that the price of gold has risen sharply. If it can change the content of the document and change the order quantity from 1 ton to 1 gram, it will benefit greatly, and the ordering unit may suffer losses as a result. Therefore, electronic transaction documents must also be immutable to ensure the seriousness and fairness of the transaction.

Contents of the invention

The purpose of this invention is to establish an operation platform for an electronic contract management system in accordance with the "Electronic Signature Law of the People's Republic of China". The electronic contract provided has the same legal effect as a traditional paper contract, and not only has the appearance of a paper contract As a result, it has a high degree of information security, non-repudiation, non-tampering, and the electronic seal on the electronic contract is inseparable. Electronic contracts can not only be printed, archived, and retrieved as they are, but also can extract useful data and directly interact with relational databases, thereby providing enterprises with a complete, safe, and efficient platform for electronic contract management systems.

In order to achieve the above-mentioned purpose, the technical measures adopted by the present invention are: provide an operation platform of an electronic contract management system, which includes: a client and a server connected through a network (including the Internet and a wide area network), wherein the server includes: The electronic seal management center module, the contract template management center module and the user management center module are interconnected with the electronic contract management center module as the core;

Among them, the electronic contract management center module is used to manage the contract, including accepting the user's contract invitation, selecting the contract template, entering into a new contract, filling in the contract content, confirming the contract, signing the contract, verifying the signature and validity of the contract, browsing and viewing Contract, formulate contract operation log, control the encrypted storage of the contract and the printing and printing times of the contract;

The electronic seal management center module is used to manage the seal in the contract of the electronic contract management center module, including receiving seal application and making, encrypting and storing the seal, updating and reporting the loss of the seal, resetting the password of the seal, and using the seal , contract seal log query, integrated use of corporate seal and corporate electronic certificate, and digital watermark encryption of the seal;

The user management center module is used for unified management of the contract templates selected by the electronic contract management center module and various contract templates required by customers, including the dynamic creation and editing of contract templates based on XML (Extensible Markup Language), and the division of contracts Application scope and usage rights of templates, query and statistics of contract templates, and printing and previewing of contract templates;

The user management center template is used for user application and registration, user domain management and division, user identity authentication, user authority management, binding of user information and user electronic seal, and user identification with a two-layer user identity authentication system;

The client includes: an interconnected system administrator module, an electronic contract administrator module and an electronic contract user module; the electronic contract user module is used to provide the real and detailed identity information of the user and the scanned picture of the physical seal; the electronic contract administrator module is used to Submit the contract form according to the user's requirements, verify the user's identity, content and signature time, and view the certificate; the system administrator module is used to provide the system interface, image encryption and compression, digital watermark encryption and provide the user's enterprise electronic certificate.

The salient features of the operation platform of the present invention are:

1. As above-mentioned structure, adopted the technology of ActiveX (based on building up the object model, in order to support the control technology embedded on the network site) component in the operation platform of the present invention, the thought of described component will focus on developing from modeling itself to Considerations for software production that components can be reused in the production of software in the application domain as additional components into new systems. After abstraction, the complex system is refined and necessary isolated, and presented to the application in a unified form. In the environment provided by the digital signature, the application can better focus on the business logic and exist in the form of components, and finally achieve good collaboration in the heterogeneous environment naturally;

2. The operation platform of the present invention is originally an XML-based visual contract template editor, which can dynamically create a visual contract template. Visual Contract Template Editor is a WYSIWYG (what you see is what you get) template designer. It is mainly used to design tables, drawings, paintings, and generate XML (Extensible Markup Language) format content. It is characterized by:

●Has strong affinity, flexibility, intuition and ease of use;

●All use simple operations such as clicking to select and dragging to move;

●Provide ready-made templates, and you can also set up your own templates, so that what you see is what you get;

●The designed XML form can be directly converted into a Web form (XML Web Form) and directly deployed to the Web application system;

●Support XML data format, fully follow W3C's XML signature specification;

●Support any custom XML Schema (architecture);

● Ability to manage projects and templates.

3. The contract templates in the operation platform of the present invention are selected and managed according to the requirements of customers. That is, the contract templates are divided according to the management mode related to the enterprise, which is easy to manage, so that the filing of similar templates is also convenient for the division of authority.

4. On the operation platform of the present invention, the sealing position of the contract seal can be adjusted and dragged, and the user can drag it arbitrarily when signing the seal, and adjust the position of the seal to realize a more convenient signing process. However, once the seal is confirmed, the seal will be locked and cannot be moved. The data generated by the digital signature of the electronic contract data through the electronic seal, the content of the electronic seal, and the unified mixed encrypted storage of the electronic contract data, the contract user can only view the electronic contract data after decrypting the electronic seal, making the electronic The seal and electronic contract data cannot be separated.

5. The transparent processing of the contract seal by the operation platform of the present invention makes the seal more realistic, and the user's signature on the electronic contract is as transparent as the traditional seal, and the cascading effect makes the seal transparent through the transparent processing algorithm to the seal graphic data, In addition, based on the standard ActiveX (based on the component object model to support the control technology embedded in the network site) component technology, the seal is displayed on the upper layer of the contract text.

6. The operation platform of the present invention uses the encrypted binding of the electronic seal and the enterprise digital certificate. The independent seal scan picture does not have legal effect. After the digital certificate is bound with the electronic seal, the electronic seal can digitally sign the data. to be identified.

7. The digital certificate encryption authentication on the operation platform of the present invention is to ensure the security of users in network communication by establishing an SSL (Secure Sockets Layer) security channel between the client browser and the platform server. Because it is bound to the IP address and domain name of the website, it can ensure the authenticity of the website and not be counterfeited.

8. The operation platform of the present invention restricts the digital certificate encryption of the viewing authority of the electronic contract, and uses the hybrid encryption technology based on the digital certificate to encrypt and transmit the content of the electronic contract. Only the parties to the contract can view the contract content, and even if the transmitted content is intercepted, it cannot be crack.

9. The operation platform of the present invention is an electronic seal based on digital watermark anti-counterfeiting technology. This platform adopts digital watermark technology, which ensures that the seal cannot be forged. Visible watermark information, when the electronic seal containing the watermark information is printed out, the embedded watermark information can be detected by using a laser detector the size of a U disk, or the stamp image can be scanned into the computer through a scanner, and the watermark extraction software can be used The watermark information can be extracted, so as to achieve the purpose of anti-counterfeiting of the seal. The seal anti-counterfeiting technology based on digital watermark is the most reliable and mature anti-counterfeiting technology at present, and the cost of using it is relatively low.

10. The operation platform of the present invention adopts the integration of corporate seal, personal seal and handwritten signature, namely

Encryption in electronic seals integrates corporate seals, personal seals, and handwritten signatures. Make electronic seal more convenient and safe.

11. The contract users of the operation platform of the present invention are managed in the way of binding and associating enterprises, and the enterprises with a large number of contracts are used as nodes to manage users in groups. In this way, contract users can be better managed and promoted, and the solution Handling of various contract forms.

12. Compared with the prior art, the operating platform of the present invention has:

1) The operating platform of the present invention realizes the encrypted integration of electronic seal and EKEY (intelligent key disk), making customer application safer and more convenient;

2) The operation platform of the present invention realizes the template customization function, which solves the different needs of different users for the content style of the electronic contract;

3) The operation platform of the present invention is completely based on the electronic contract solution of the (Internet) network, which is easy to use, easy to deploy, easy to manage, and low in operating costs;

4) The operating platform of the present invention adopts a combination of automatic management and self-management for all tools through the supporting interface, which is flexible and easy to use. Concentrate on solving the problems of complicated use and high cost of security products on the market;

5) The operating platform of the present invention adopts a smart key disk (i.e. hardware device: eKey) to store seals, signatures and key information, and jointly controls the signature acquisition authority with software; supports standard third-party CA certification agencies, and solves the problems of different eKeys simultaneously. Compatibility issues;

6) The operating platform of the present invention adopts digital watermark technology, which ensures the unforgeability of the seal.

Description of drawings

Fig. 1 is a schematic structural diagram of the operation platform of the present invention.

FIG. 2 is a schematic diagram of the specific structure of the server side.

Fig. 3 is a schematic diagram of the operating structure of the server-side electronic contract management center module.

Fig. 4 is a schematic diagram of the specific structure of the electronic signature of the module of the electronic contract management center.

Fig. 5 is a schematic diagram of the process of making an electronic seal by the module of the electronic seal management center.

Fig. 6 is a schematic structural diagram of the contract template management center module dynamically formulating a contract template.

Fig. 7 is a schematic diagram of contract templates specifically managed by the contract template management center module.

Fig. 8 is a structural schematic diagram of user management center module management.

Fig. 9 is a flow chart of the operation of the operation platform of the present invention.

Detailed ways

The structure and characteristics of the operating platform of the present invention will be described in detail below in conjunction with the accompanying drawings and embodiments.

As shown in Figure 1, the operation platform of the electronic contract management system of the present invention is based on the B/S (browser/server) framework, which includes: a client 1 and a server connected to each other through a network 3 (including the Internet and a wide area network, etc.) 2.

Wherein the server end 2 includes: an electronic seal management center module 202, a contract template management center module 203 and a user management center module 204 connected to each other with the electronic contract management center module 201 as the core;

The client terminal 1 includes: a system administrator module 102 , an electronic contract administrator module 101 and an electronic contract user module 103 connected to each other.

FIG. 2 is a schematic structural diagram of the server end 2 . As shown in FIG. 2 , the server 2 includes: an electronic contract management center module 201 , an electronic seal management center module 202 , a contract template management center module 203 and a user management center template 204 . in,

The electronic contract management center module 201 includes: the receiving contract invitation sub-module 2011 connected sequentially, the contract template sub-module 2012 selected, the contract drafting sub-module 2013, the contract content filling sub-module 2014, the contract confirmation sub-module 2015, and the contract signing sub-module 2016 , the contract verification encryption submodule 2017, the contract database submodule 2018, the contract browsing submodule 2019, and the contract operation log and printing submodule 20110.

The electronic seal management center module 202 includes: receiving contract seal application and making contract submodule 2021 connected successively, seal encryption storage submodule 2022, seal update report loss submodule 2023, seal password reset submodule 2024, use seal submodule 2025 and Make seal log query submodule 2026.

The contract template management center module 203 includes: a contract template creation submodule 2031 , a contract use authority assignment submodule 2032 , a statistical storage retrieval submodule 2033 and a contract template printing submodule 2034 connected in sequence.

The user management center module 204 includes: a management user registration submodule 2041 , a contract user identity authentication submodule 2042 , an authority verification submodule 2043 , a user domain management submodule 2044 and a user domain seal integration management submodule 2045 , which are sequentially connected.

The structure shown in Figure 2, the electronic contract management center module 201 is mainly used for electronic contract drafting, fills in the contract content, obtains the electronic contract confirmation of user identity and authority authentication from the user management center module 204; From the contract template management center module 203 Select the contract template used in the electronic seal management center module 202 to obtain the electronic seal used by the user to complete the electronic contract signature; then, complete the electronic contract browsing, viewing, verification, encryption and storage;

The electronic seal management center module 202 is mainly used for the application, production, encryption, storage of the seal, the renewal of the seal, the report of the loss of the seal, the reset of the seal password, providing the use of the electronic contract management center module 201 seal, making operation logs and providing inquiries;

The contract template management center module 203 is mainly used to complete the dynamic creation of the template visualization according to the requirements of the electronic contract management center module 201 and the user; complete the division of application scope of the template; integrate with the corresponding seal in the electronic seal management center module 202, and The verification of user identity and authority of the management center module 204 completes the distribution of use authority; completes the statistics of contract templates and establishes a database of contract templates to provide retrieval and printing of contract templates;

The user management center module 204 is mainly used to complete the management of user registration and user groups; complete the authentication of the user identity and authority of the contract signed by the electronic contract management center module 201; complete the authority verification and management of the electronic contract; Integrated management of seals.

FIG. 3 is a schematic diagram of the operating structure of the electronic contract management center module 201 at the server end 2 . The structure of the electronic contract management center module 201 shown in Figure 2, in the operating structure shown in Figure 3, includes:

01) Invitation to conclude a contract: firstly, the contract invitation sub-module 2011 receives the invitation for both parties of the contract to conclude a contract, because the contract users must first invite each other and accept the invitation before signing the contract, and the user can only sign the contract between the inviting parties ;

02) Contract template selection, drafting, content filling, and storage: After completing the contract invitation, start drafting the contract, first select the contract template, and then select the other party to the contract, and both parties fill in the contract content; select the contract template sub-module 2012 according to the contract Party B ( or Party A), select the contract template from the contract template database in the contract template management center module 203; the contract drafting submodule 2013 and the contract content filling submodule 2014 draft and fill in the contract content according to the wishes of Party B and Party A, and Stored in the electronic contract database sub-module 2018;

03) Contract confirmation and encryption: the contract confirmation sub-module 2015 takes out the filled-in contract from the electronic contract database sub-module 2018 and gives it to both parties of the contract for confirmation, and the contract confirmed by both parties is encrypted after verification by the contract verification and encryption sub-module 2017;

04) Contract signature: the electronic contract through verification and encryption is taken out by the contract signature submodule 2016 from the contract signature database in the electronic seal management center module 202, and the seals of both parties of contract A and Party B are signed on the contract (after use up) Return the signature to the contract signature database), the electronic contract signed by both parties is an effective electronic contract, and then the encrypted effective electronic contract is stored in the electronic contract database module:

05) Contract viewing, verification, and printing: The contract browsing and viewing submodule 2019 will send the effective electronic contract to Party A and Party B of the contract for viewing and verification, and then, the contract printing and formulation operation log submodule 20110 will print and formulate the operation log. The contract browsing and viewing sub-module 2019 is provided for ordinary users. When a signed contract needs to be viewed and verified, this software must be installed to verify whether the contract has been modified and to verify the identity of the signer; electronic contracts can be viewed and signed Information about the certificate holder, including certificate version, certificate serial number, signature algorithm, issuer details, valid start date, valid end date, user detailed information, DER (Distinguished Encoding Rules) public key value, Certificate customization level. It can provide users with quick query and statistical contract-related information.

Fig. 4 is a schematic diagram of the specific structure of the electronic signature of the electronic contract management center module; specifically, Fig. 4 is a schematic diagram of the specific structure of the electronic signature of the contract signature sub-module 2016 in Figs. 2 and 3 above.

As shown in Figure 4, the electronic signature of the contract includes three necessary parts: 001) the protected contract; 002) the signature software; 003) the electronic seal key disk. in,

001) The protected contract includes: valid data of the electronic contract (including all texts, fonts, colors, graphics, etc.) and additional verification data (encrypted hidden feature information);

002) signature software: in the present embodiment, the signature software that adopts is the general software in the electronic signature, and it comprises: HASH (hash) encryption technology module, digital signature and identity authentication system module and confusion encryption technology module ;

003) The electronic seal key disc includes: an Ekey authentication system module and an electronic seal database module. As shown in Figure 4, the basic process of the electronic signature is that the signature software 002 passes through the electronic seal key disk

In 003, the electronic seal extracted from the electronic seal database module certified by the Ekey authentication system model is used to digitally sign the electronic contract, and store it in the electronic contract database module after obfuscation and encryption.

In this embodiment, the specific electronic seal signing process is: provide the used seal through the preliminary test of the seal key disk, and the key disk must pass through the seal making software to write the seal user, password and other information into the seal key disk , before distribution to end users. The software must be strictly managed and backed up in time after each seal is made; when signing a seal, the seal or signature must be scanned as it is, for example, using a resolution of 300dpi, and then using color selection in photoshop (digital image processor) Tool, select red, then copy the selected part, create a new window, paste it into the new window, and convert its image to 96dpi resolution, and save it as gif (graphics interchange format) type, The number of colors is between 4-8, and it is made into a picture in pure white format except for the seal or signature information.

eKey (intelligent password key) is the physical carrier of the electronic seal, and its legal effect is equivalent to the physical seal of the enterprise.

As shown in FIG. 4 above, the electronic signature of the present invention adopts a public key system, that is, a pair of matching keys is used for encryption and decryption. It is computationally impossible to deduce one set of keys from another. According to the current computer technology level, it will take thousands of years of computing time to crack the 1024-bit RSA key (also used in the present invention) currently used. The user uses his own private key to process the information. Since the key is only owned by the user, a file that cannot be generated by others is generated, and an electronic signature is formed. With electronic signature, the following two points can be confirmed:

(1) Guarantee that the information is sent by the signer himself, and the signer cannot deny or cannot deny;

(2) Guarantee that the information has not been modified in any way since it was issued and received, and that the issued documents are authentic documents.

The electronic contract management system of the present invention uses secure hash algorithm (SHA-1), DES encryption algorithm and PKI frame (Public Key Interface) electronic signature and binding of electronic seal, and personal private key is saved to a collection of USB interface. The smart card and reader are integrated into the USB encryption key EKEY (intelligent password key). This key has passed the identification of the National Encryption Management Committee of China and the Ministry of Public Security of China, and is the standard of the CA certification center in Shanghai, China.

As above-mentioned key point of encryption technique of the present invention:

1. The present invention complies with the electronic signature specification of the Electronic Signature Law of the People's Republic of China and complies with China's national security standards;

2. Adopt PKI: (Public Key Infrastructure), PKI is a universal security infrastructure that uses public key theory and technology to implement and provide security services;

3. Use the digital certificate of an authoritative third-party CA certification agency, which meets the requirements of relevant laws on electronic seals;

4. Use digital certificates to bind electronic seals or handwritten signature information (obfuscated encryption technology) to ensure that the source of signature information is reliable;

5. Use the standard hash algorithm (HASH) to generate a digital summary of the file content to ensure that the electronic signature and the signed document are closely bound; use the standard RSA, DES (Data Encryption Standard Data Encryption Standard) algorithm to encrypt the electronic signature entity data ;

6. Use the smart key disk (that is, hardware devices: such as Minghua eKey) to store seals, signatures and key information, and jointly control the signature and access rights with the software; support standard third-party CA certification agencies;

7. Support signature log, that is, the system saves the information of each signature of the user in a unified log file for easy query;

8. Support signature log, that is, the system saves the information of each signature of the user in a unified log file for easy query;

9. The platform of the present invention is fully compatible with the international standard (x509, PKCS) certificate format, and can be directly integrated into the PKI (public key infrastructure) system of countries and international organizations;

10. A verification mechanism with signature and content integrity and non-tamperable modification;

11. Through the supporting interface, all tools adopt the combination of automatic management and self-management, which is flexible and easy to use. It concentrates on solving the problems that the security products on the market are complicated to use and the cost is very high.

12. Easy to use, easy to deploy, easy to manage, low operating cost

As mentioned above, the platform of the present invention adopts the standard ActiveX (based on the component object model, in order to support the control technology embedded on the network site) client electronic signature component, and the thought of the component will focus on developing from modeling itself to the Consideration of software production, i.e. components can be reused in the software production of the application domain as parts incorporated into new systems. After abstraction, the complex system is refined and necessary isolated, and presented to the application in a unified form. In the environment provided by the digital signature, the application can better focus on the business logic and exist in the form of components, and finally realize good collaboration in the heterogeneous environment naturally.

Fig. 5 is the process of specifically making an electronic seal, as shown in Fig. 5, the electronic contract user module 103 placed in the client 1 includes providing the user's real detailed identity information submodule and the physical seal scanning picture submodule; placed in the client 1 The internal system administrator module 102 includes graphic encryption compression and digital watermark encryption submodules, and provides user enterprise electronic certificate submodules and system interfaces (shown in Figure 6); Detailed identity information and physical seal scan pictures are submitted to the system administrator module 102 (shown in Fig. 1); the system administrator module 102 encrypts graphics and digital watermark encryption, and submits them to the electronic seal management together with the user's enterprise electronic certificate The central module 202; the electronic seal management center module 202 makes an electronic signature and saves it in the key disk. As mentioned above, the present invention uses image processing technology to process the complex image of the signature pattern and the electronic document background, so that the signature pattern can float on the background and achieve the same visual effect as the paper document signature and stamp. In order to save storage space, complex image compression and decompression technology is adopted; and digital watermark technology is used to ensure that the seal cannot be forged. Digital watermarking technology is a popular digital anti-counterfeiting technology at present. The digital watermark-based electronic seal system is to embed invisible watermark information in the electronic seal. After the electronic seal containing the watermark information is printed out, the embedded watermark can be detected by using a laser detector the size of a U disk. information, you can also scan the seal picture into the computer through a scanner, and use the watermark extraction software to extract the watermark information, so as to achieve the purpose of anti-counterfeiting of the seal. The seal anti-counterfeiting technology based on digital watermark is the most reliable and mature anti-counterfeiting technology at present, and the cost of using it is low.

Fig. 6 is a schematic structural diagram of the contract template management center module dynamically formulating a contract template. In order to adapt to different electronic contract templates required by different users, the contract template management center module 203 visually and dynamically designs and provides contract templates with various functions. The system administrator module 102 (shown in FIG. 1 ) can use the interface provided by the system to conveniently request various contract templates according to the needs of users.

As shown in Figure 6, the electronic contract administrator module 101 (shown in Figure 1) of the client 1 submits the contract form to the system administrator module 102 according to the requirements of the electronic contract user module 103, and the system administrator module 102 uses the contract template making tool system interface, submit to the contract template management center module 203, the contract template management center module 203 according to the contract style submitted by the system administrator module 102 based on XML visual contract template editor technology, make a visual contract template and save it to the contract in the template database module. It solves the needs of different users for different styles.

Fig. 7 is a schematic diagram of contract templates managed by the contract template management center module 203; as shown in Fig. 7, the management contract templates of the contract template management center module 203 are organized in units of enterprises, and different enterprises have different authority to use the templates. Contract templates are stored in a unified manner and managed by each enterprise separately, and enterprises only have the authority to manage their own templates. Only contract users related to an enterprise can use the enterprise's contract template. As shown in Figure 7, users who establish a contract relationship with a certain A company use the contract template of a certain A company; users who establish a contract relationship with a certain B company use the contract template of a certain B company; A user who establishes a contract relationship with a certain...company uses the contract template of a certain...company.

FIG. 8 is a schematic structural diagram of the user management center module 204 managing users. The user management center module 204 manages users, taking enterprises with a large number of contracts as nodes to manage users in groups. As shown in Figure 8, user A1 and user A2 form a group, which are "users who have established a contractual relationship with a certain A company"; user B1 and user B2 form a group, which are "users who have established a contractual relationship with a certain B company" "; user... and user... are a group, which is "a user who has established a contractual relationship with a certain... enterprise". This group management is convenient and reliable.

Fig. 9 is a flow chart of the operation of the operation platform of the present invention. In this embodiment, the operating environment of the operating platform is: the hardware at the server side is: the main frequency is above intel P4 1.6GMHz, the internal memory is 512MB, the hard disk is above 40G, and the operating system is Windows NT, Windows 2000/2003; The software is Microsoft SQL 2000, Tomcat 5.0 Apache 3.1.

The main frequency of the client hardware is above 800MHz, the memory is above 128MB, and the color configuration of the graphics card needs to be set to 24-bit enhanced color or 32-bit true color; the operating system supports Windows 98, Windows ME, Windows NT, Windows 2000/2003, Windows XP; the software to be installed includes Microsoft IE5.0 or above.

The flow chart of the specific operation of the electronic contract management system on the operation platform of the present invention is as shown in Figure 9:

<0001> First is the login authentication of the electronic contract user: the electronic contract user enters the user name, password, inserts the electronic seal Ekey, and logs into the system. If the user name and password are wrong, illegal electronic seals cannot pass the user login authentication. If the authentication fails, you will not be able to log in to the system;

<0002>Invitation to conclude an electronic contract: Before signing a contract, users of an electronic contract must first invite each other and accept the invitation. Users can only sign a contract between the two inviting parties. If the parties do not mutually accept the invitation, the contract process will not proceed;

<0003>Contract template selection: After completing the contract conclusion invitation, the user starts to draft the contract, and first selects the contract template. Users can choose templates that they have permission to use to draft contracts;

<0004>Establish the parties to the contract: After the contract template is selected, the drafting party will choose the roles of the parties in the contract to establish the contract; Fill in the contract content: After the parties to the contract are established, each party will fill in the contract content;

<0005>Contract confirmation: After the contract is completed, all parties to the contract will confirm the contract. The contract will be considered drafted only after each party confirms the contract. The drafted contract will be locked, and the confirmed contract can be signed. The parties to the contract can deny the contract if they find that there is an error in the contract, and the contract that is denied will be void.

<0006>Contract signing and sealing: Contract signing and sealing is a very critical step in electronic contracts. Both parties to the contract use their own electronic seals to sign the contract. legal validity. If the signing process is not completed, the signature can be refused. Contracts that are refused to be signed will be void.

Claims (6)

1. A kind of electronic contract management system operation platform, comprises the client end and the server end that are mutually connected by network, it is characterized in that server end comprises: the electronic seal management center module that is core interconnected with the electronic contract management center module, contract template The management center module and the user management center module; among them, the electronic contract management center module is used to manage the contract, including accepting the user's contract invitation, selecting the contract template, signing a new contract, filling in the contract content, confirming the contract, signing the contract, and verifying the contract. Signature and validity, browse and view contracts, formulate contract operation logs, encrypt storage of contracts and control the printing and printing times of contracts; The electronic seal management center module is used to manage the seal of the electronic contract, including receiving seal application, making, encrypting and storing the contract seal, updating and reporting the loss of the seal, reset the password of the seal, using the seal, querying the log of the contract seal, and corporate seal Integrated use with enterprise electronic certificates, and digital watermark encryption for seals; The contract template management center module is used for unified management of the contract templates selected by the electronic contract management center module and various contract templates required by customers, including dynamic creation and editing of contract templates based on extensible markup language and storage visualization, and division of contract templates Application scope and usage rights, query statistics contract templates, and print and preview contract templates; The user management center template is used for user application and registration, user domain management and division, user identity authentication, user authority management, binding of user information and user electronic seal, and user identification with a two-layer user identity authentication system; The client includes: an interconnected system administrator module, an electronic contract administrator module and an electronic contract user module; the electronic contract user module is used to provide the real and detailed identity information of the user and the scanned picture of the physical seal; the electronic contract administrator module is used to Submit the contract form according to the user's requirements, verify the user's identity, content and signature time, and view the certificate; the system administrator module is used to provide the system interface, image encryption and compression, digital watermark encryption and provide the user's enterprise electronic certificate. 2. The electronic contract management system operating platform according to claim 1, wherein said electronic contract management center module includes: a submodule for receiving contract invitations connected in sequence, a submodule for selecting a contract template, a submodule for contract drafting, and a submodule for contract drafting. Content filling sub-module, contract confirmation sub-module, contract signing sub-module, contract verification and encryption sub-module, contract database sub-module, contract browsing and viewing sub-module, contract operation log and printing sub-module. 3. according to the described electronic contract management system operation platform of claim 1, it is characterized in that the electronic seal management center module comprises: receive contract seal application and make contract seal sub-module connected successively, seal encryption storage sub-module, seal update and report loss sub-module , seal password reset sub-module, use seal sub-module and make contract seal log query sub-module. 4. The operation platform of the electronic contract management system according to claim 1, characterized in that the contract template management center module includes: a submodule for creating a contract template connected in sequence, a submodule for assigning authority to use contract templates, and a statistical storage and retrieval submodule for contract templates and contract template printing submodule. 5. The operation platform of the electronic contract management system according to claim 1, wherein the user management center module includes: a management user registration submodule connected in sequence, a contract user identity authentication submodule, an authority verification submodule, and a user domain management submodule. module and user domain seal integration management sub-module. 6. The operation platform of the electronic contract management system according to claim 1, characterized in that the system administrator module placed on the client side includes: graphic encryption compression and digital watermark encryption sub-modules, providing user enterprise electronic certificate sub-modules and system interfaces.

Images