KR100723649B1 - method for issuing and verifying of on-line certificate with internet - Google Patents

Abstract

The present invention relates to a method for generating and verifying a civil certificate issued online via the Internet.

The present invention issues a two-dimensional bar code, which is coded together with the contents of the page, the contents of the page, and additional information for determining the authenticity of the contents of the corresponding page for each page constituting the civil certificate. In the verification, the 2D barcode of the page to be verified of the civil certificate is decoded to extract the contents and additional information of the corresponding page from the 2D barcode, and the extracted additional information is extracted from the 2D barcode. Verify the authenticity of the contents of the page.

Civil Certificate, Internet, Digital Signature, 2D Barcode, Verification, Document Unique Number

Description

Method for issuing and verifying of on-line certificate with internet}             

1 is a view showing a copy of a resident registration issued by the Internet at the current e-government site;

Figure 2 is a view showing a certified copy of the registration issued by the Internet at the current Supreme Court site,

3 is a functional block diagram showing a civil certificate issuing system to which the present invention is applied;

4 is a diagram illustrating a general digital signature and verification process;

5 is a diagram illustrating a process of an electronic signature method according to a first embodiment of the present invention;

FIG. 6 is a configuration diagram of each page of a civil certificate digitally signed according to the electronic signature method of the first embodiment of FIG. 5;

7 is a flowchart illustrating a method of verifying a digitally signed civil certificate according to the digital signature method of the first embodiment of FIG. 5;

8 is a view showing a process of an electronic signature method according to a second embodiment of the present invention;

FIG. 9 is a block diagram of each page of a civil certificate digitally signed according to the electronic signature method according to the second embodiment of FIG. 8;

FIG. 10 is a flowchart illustrating a method for verifying pages of a civil certificate digitally signed according to the electronic signature scheme according to the second embodiment of FIG. 8; FIG.

FIG. 11 is a flowchart illustrating a method of verifying a total civil certificate digitally signed according to the electronic signature method according to the second embodiment of FIG. 8;

12 is a view showing a process of an electronic signature method according to a third embodiment of the present invention;

FIG. 13 is a block diagram of each page of a civil certificate digitally signed according to the digital signature method according to the third embodiment of FIG.

14 is a diagram illustrating a process of an electronic signature method according to a fourth embodiment of the present invention;

FIG. 15 is a configuration diagram of each page of a civil certificate digitally signed according to the electronic signature method according to the fourth embodiment of FIG. 14.

The present invention relates to a method for generating and verifying a civil certificate issued online via the Internet.

Recently, the e-government website (www.egov.go.kr) operated by the Ministry of Government Administration and Home Affairs (www.egov.go.kr) has issued nine types of civil complaints, including resident registration and herbs, over the Internet. In addition, the Supreme Court website (www.scourt.go.kr) issues copies of registered copies over the Internet. The issuance of civil certificate through the internet is gradually increasing. In order to issue an online civil certificate through the Internet, tamper-proof and copy-protection technologies are required. The anti-tampering technique refers to a technology that can verify whether or not the issued civil certificate can be tampered with. The copy protection technology refers to a technology that prevents copying of the issued civil certificate to a copy machine and reuse it. it means.

Civil complaints currently issued on e-government sites or Supreme Court sites include means to prevent tampering with civil complaints when they are printed on a printer. For example, the civil certificate is printed with a high-density two-dimensional bar code containing the certificate-related contents to prevent tampering with the contents of the certificate, and a copy protection pattern to prevent illegal duplication of the certificate. 1 and 2 show an example of a copy of a resident registration issued at an e-government site and a registered copy issued at a Supreme Court site.

1 is a view showing a copy of a resident registration issued by the Internet at the current e-government site. This copy of the resident registration consists of a copy of the resident registration (101), document identification number (102), copy protection pattern (103), page number (104), and two-dimensional bar code (105). The copy protection pattern 103 and the two-dimensional bar code 105 may be output only when printing with a printer. The two-dimensional bar code 105 stores the contents of the resident registration copy, the document identification number, the page number, and the electronic signature value for the contents of the resident registration copy, the document identification number and the page number.

To verify the authenticity of this resident registration copy issued over the Internet, scan the 2D barcode with a scanner, extract the contents of the resident registration, document identification number, page number, and digital signature value from the 2D barcode, verify the digital signature, and register the resident registration. By checking whether the copy of the resident registration copy 101, the document identification number 102 and the page number 104 of the copy is the same, it is determined whether the copy of the resident registration is tampered with or not.

Even if the copy of the resident registration is made up of several chapters, a two-dimensional barcode is generated including all the contents of the resident registration. At this time, if the entire 2D barcode is printed on one page, the size of the 2D barcode is larger than the contents of the resident registration of the page, so that the total 2D barcode is divided by the number of pages of the resident registration copy, and each divided 2D barcode is divided. Print at the bottom of the page of the resident registration.

In this case, in order to verify the falsification of the resident registration copy, it is necessary to scan and read the 2D barcodes of all pages, and verify the electronic signature. Therefore, the entire page must be scanned even if only the authenticity of the contents of a specific page is desired. There is a problem.

2 is a diagram showing a registered copy issued by the Internet at the current Supreme Court site. This registered copy is a copy of the corresponding page contents 201, the document unique number 202 uniquely assigned to the document, the copy protection pattern 203, and the issue number (204) for checking the issued document online. ) And a two-dimensional bar code 205. The two-dimensional bar code 205 stores the page content, the unique number, the issue number, and the electronic signature value for these information. Registered copies are usually composed of several chapters. The verification of the registered copies issued by the Internet is performed by scanning two-dimensional barcodes on each page, so that each page can be independently verified for its contents. The convenience of the user is increased, but there is a problem in that the registered copy that has passed each page verification cannot be automatically verified as one registered copy.

When the problems of the prior art are summarized, the entire resident registration can be verified when the electronic signature on the entire resident registration copy is generated, the two-dimensional bar code is generated, and the total number of pages is added to the resident registration copy. However, even when validating a specific page, there is a problem in that all the two-dimensional barcodes must be read.

Also, as in the Supreme Court site, if you digitally sign each page of the certified copy and generate a two-dimensional bar code and add it to the relevant page of the certified copy, you can verify the authenticity of the specific page, but the page belongs to the document. There is a problem that can not verify the recognition. That is, there is a problem in that it is not possible to verify whether several pages are one registered copy.

The present invention has been made to solve the above-mentioned problems of the prior art, provides a digital signature method that facilitates the verification of the entire document and page of the civil certificate, and creates and verifies the civil certificate to add a barcode including the electronic signature value The purpose is to provide a method.

Complaint certificate generation method for issuing the Internet according to the present invention for achieving the above object, the content (M ₁ , M ₂ , ..., M _n ) of each page constituting the complaint certificate (M) The first hash of each hash function, and the first hash results (H (M ₁ ), H (M ₂ ), ..., H (M _n )) and a second hash hash to one hash function An electronic signature step of applying the second hashed result value H (H (M ₁ ), H (M ₂ ), ..., H (M _n )) to an electronic signature algorithm to obtain an electronic signature value; ;

A bar code generation step of generating a bar code for each page by applying the contents of each page of the complaint certificate, the first hashed result values, and the electronic signature value to a barcode generation algorithm,

Each page is characterized in that for generating a complaint certificate by printing the content of the page and the bar code for each page.

In addition, the civil certificate generation method for issuing the Internet according to another embodiment of the present invention, each page constituting the civil certificate (M), the document unique number (DN) and page number (PN) and the total number of pages (n) ) And the contents of the corresponding page (M ₁ , M ₂ , ..., M _n ) are reconstructed, and the reconstructed page-specific information is hashed with a hash function, and the hashed values are respectively converted into the digital signature algorithm. An electronic signature step of applying and obtaining an electronic signature value for each page;

A bar code generation step of generating a bar code for each page by applying additional information including the contents of each page of the civil certificate, the document unique number, the page number, the total number of pages, and the electronic signature value of the corresponding page to the barcode generation algorithm. ,

Each page is characterized in that for generating a complaint certificate by printing the content of the page and the bar code for each page.

In addition, according to another embodiment of the present invention, a method for generating a civil certificate for issuing the Internet may include content (M ₁ , M ₂ ,..., M _n ) of each page constituting the civil complaint certificate (M), respectively. A first digital hashing step using a hash function and applying the first hashed result values to an electronic signature algorithm, respectively, to digitally sign each page to obtain an electronic signature value for each page;

A full document digital signature step of obtaining a full document digital signature value using the civil certificate;

For each page of the complaint certificate, the content of the page and the electronic signature value of the page are applied to a barcode generation algorithm to generate a bar code for each page, and the entire document on at least one page of page barcodes constituting the complaint certificate It includes a barcode generation step of adding a barcode for the digital signature value,

Each page is characterized in that for generating a complaint certificate by printing the content of the page and the bar code for each page.

In addition, the civil certificate generation method for issuing the Internet according to another embodiment of the present invention, the first step of hashing the contents of the individual pages constituting the civil certificate (M) with a hash function, respectively;

A group-specific digital signature step of grouping pages of the civil certificate by a predetermined number to obtain a digital signature value for each group;

A full document electronic signature step of obtaining a full document electronic signature value using the civil certificate;

For each page of the civil certificate, the bar code for each page is applied to the barcode generation algorithm by applying the contents of the page, the first hashed values of the pages belonging to the group to which the page belongs, and the electronic signature of the group to which the page belongs. Generating and adding a barcode for the entire document digital signature value to at least one page-specific bar code constituting the complaint certificate;

Each page is characterized in that for generating a complaint certificate by printing the content of the page and the bar code for each page.

In addition, the civil certificate verification method for issuing the Internet according to the present invention is issued to the client system for the civil petitioner through the Internet, and determines the content of the page, the content of the page, and the authenticity of the content of each page. In a method for verifying the authenticity of a civil certificate with a barcode coded with additional information for

A first step of decoding a bar code of a page to be verified of the civil certificate and extracting contents and additional information of the corresponding page from the bar code;

A second step of verifying an electronic signature included in the additional information extracted from the barcode;

And if the digital signature verification succeeds in the second step, displaying the contents of the page extracted from the barcode on the screen, and outputting a verification failure message if the digital signature verification fails in the second step. It features.

Hereinafter, a method for generating and verifying a civil certificate for issuing the Internet according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

3 is a functional block diagram illustrating a civil certificate issuing system to which the present invention is applied. Civil certificate issuance system is composed of a civil complaint issuance system 310, the Internet 320 and the civil complaint output system (331).

The civil complaint issuance system 310 issues the civil complaint certificate requested by the civil complaint applicant to the civil complaint output system 331. The complaint issuance system verifies the identity of the petitioner and digitally signs the complaint so that the complaint is not tampered with. Civil output system 331 is a system for receiving a civil certificate from the civil complaint issuance system 310, the printer 332 for printing the civil certificate 333 issued online is connected. Before the certificate is printed on the printer, a two-dimensional barcode containing the contents of the certificate and the corresponding digital signature value is generated and printed on the certificate.

Finally, in the civil certificate 333 output from the civil complaint output system 331 to the printer 332, a two-dimensional bar code including the civil certificate contents, the civil certificate contents, and the electronic signature value information is printed.

Complaint certificate printed in the complaint output system 331 can be received where needed. Since the certificate issued online is exposed to the risk of being tampered with, the complaint certificate was not altered at the reception desk. There is a need to verify whether it is

The verification system 342 downloads and installs a verification program from the web server 311 or another website through the Internet 350. The scanner 341 is connected to the verification system 342. Scan and read the two-dimensional barcode of the civil certificate issued online with the scanner 341, and the verification program decodes the two-dimensional barcode to extract the contents and additional information of the civil certificate stored in the two-dimensional barcode, and included in the additional information. After verifying the digital signature, if the digital signature is successfully verified, the content of the civil certificate is displayed on the screen.

In order to prevent tampering of the civil certificate issued online, an electronic signature process and a two-dimensional barcode generation process are required. The electronic signature method proposed by the present invention is different from the widely used digital signature method. 4 illustrates a general digital signature generation and verification process.

In the digital signature generation and verification process, a digital signature value is generated by using a hash function (H) such as MD4, MD5, SHA-1, HAS160, etc., which generates a fixed output value as an input, and RSA, DSA, etc. The digital signature algorithm (SIG), the digital signature verification algorithm (VER) for verifying the digital signature value, the digital signature generation key (sk), and the digital signature verification key (pk) included in the digital signature certificate are required.

4A illustrates a process of digitally signing the message M. Referring to FIG.

If any message (M) 401 is entered into the hash function (H) 402, the hash function (H) 402 hashes the input message (M) and results in a result (H (M)) 403. Create The digital signature algorithm (SIG) 404 receives the hash function result value (H (M)) 403 and the digital signature generation key (sk) 405 and receives the digital signature value (SIG (H) for the message (M). (M))) 406 is generated.

4B illustrates a process of verifying the digital signature value SIG (H (M)) for the message M. Referring to FIG.

The method of verifying whether the digital signature value SIG (H (M)) 416 is the digital signature of the message M is performed by hashing the message M 411 with a hash function H 412. After generating the hash function result (H (M)) 413, the hash function result (H (M)) 413 and the digital signature value (SIG (H (M))) 416 and the digital signature The verification key pk 415 is input to the digital signature verification algorithm VER 414 to calculate a verification result value 417. The verification result value is output as YES if SIG (H (M)) 416 is the digital signature value of the message M, and as NO if it is not the electronic signature value.

The present invention proposes an electronic signature method and a civil certificate generation method capable of verifying pages and verifying entire documents by applying the above-described general digital signature process.

After that, the digital signature generation key sk and the digital signature verification key pk are omitted for convenience of description.

5 is a diagram illustrating a process of an electronic signature method according to a first embodiment of the present invention. According to the electronic signature method of the first embodiment, it is possible to verify the page of the civil certificate.

When the content of the civil certificate to be digitally signed M (501) is divided into a plurality of pages 502 when printed through the printer, the content to be printed on the first page M ₁ , the content to be printed on the second page M _The content to be printed on the ₂ , ..., nth page (last page) is called M _n . Contents of n pages M ₁ , M ₂ , ..., M _n results of hashing H _n with the hash function H (503), respectively H (M ₁ ), H (M ₂ ), ..., H ( H _n (504) is hashed back to the hash function H (505) and hashed to the hash function H (505). H (H (M ₁ ), H (M ₂ ), ..., H (M _n )) 506 is digitally signed with the digital signature algorithm SIG 507, and the resulting values S (= SIG (H (H (M ₁ ), H (M ₂ ), ..., H (M _n )). )) 508 is obtained.

FIG. 6 is a configuration diagram of each page of a civil certificate digitally signed according to the electronic signature method of the first embodiment of FIG. 5.

The i-th page 600 of the civil certificate is divided into a part 601 in which the contents M _i of the i-th page are printed and a part 602 in which a two-dimensional bar code is printed. The two-dimensional barcode 602 is generated by inputting the i-th page content M _i 601 and additional information 603 into the barcode generation algorithm 604. The additional information 603 includes n hash result values H (M ₁ ), H (M ₂ ), ..., H (M _n ) corresponding to each page of the complaint certificate, and the electronic signature value S of the entire document. do.

7 is a flowchart illustrating a method of verifying a digitally signed civil certificate according to the digital signature method of the first embodiment of FIG. 5. The verification system receives the i-th page of the civil certificate by scanning with the scanner (S701). The two-dimensional bar code 602 is decoded to extract the contents M _i of the i th page and additional information (S702). As additional information, n hash values H (M ₁ ), H (M ₂ ),..., H (M _n ) and the electronic signature S are included. The content M _i of the i th page decoded in the 2D barcode is hashed, and the hash result value is compared with the i th hash value H (M _i ) decoded in the 2D barcode (S704). If the two hash values are the same (S704), the hashed n hash values H (M ₁ ), H (M ₂ ), ..., H (M _n ) decoded in the two-dimensional bar code are hashed. The digital signature S is verified by applying the hash result value and the digital signature S decoded from the two-dimensional bar code to the verification algorithm VER (S705). If the verification result is successful (S706), the contents of the i-th page decoded in the two-dimensional bar code are displayed on the screen (S707), and the verifier verifies the contents of the i-th page of the civil certificate and the i-th page decoded in the two-dimensional bar code. Allow the content to be compared. If the two hash values in step S704 are not the same or the verification result fails in step S706, a verification failure message is output (S708).

In the electronic signature method according to the first embodiment, since the hash value for each page to be stored in the two-dimensional bar code increases as the number of pages of the civil certificate increases, the storage capacity of the two-dimensional bar code is limited when the number of pages of the civil certificate is large. There is a problem that is difficult to apply.

Therefore, in order to solve the problem of the electronic signature method according to the first embodiment described above, an electronic signature method according to the second embodiment is proposed. The digital signature method according to the second embodiment is a method of storing one hash value information and digitally signing each page regardless of the number of pages of the civil certificate.

8 is a diagram illustrating a process of an electronic signature method according to a second embodiment of the present invention.

When the contents of the civil certificate to be digitally signed M 801 are divided into multiple pages 802 when printed through the printer, the contents to be printed on the first page M ₁ , and the contents to be printed on the second page M _The content to be printed on the ₂ , ..., nth page (last page) is called M _n . Each page is expressed as DN ∥i∥n∥Mi by concatenating document unique number (DN), page number (i), total number of pages (n) and contents of the page (Mi) of the civil certificate M. Hash each page (DN ∥ _i ∥ M _i ) represented by a hash function (H) 803. H (DN ∥ ₁ ∥ M ₁ ), H (DN ∥ ₂ ∥ n ∥ M ₂ ), which is n results 804 that hashed each page, ..., H (DN ∥n ∥n∥ M _n ) are each digitally signed with the digital signature algorithm SIG 805 to obtain the n digital signature result values 806, S ₁ , S ₂ ,..., S _n .

FIG. 9 is a configuration diagram of each page of a civil certificate digitally signed according to the electronic signature method according to the second embodiment of FIG. 8.

The civil certificate 900 includes a portion 901 on which the contents M _i of the i-th page of the civil certificate is printed, and a portion 902 on which a two-dimensional bar code is printed. The two-dimensional bar code 902 generates the contents M _i of the i th page and the additional information 903 through a barcode generation algorithm 904. This additional information 903 includes a document unique number DN, a page number PN = i, a total number of pages n, and an electronic signature value S _i of the i th page.

FIG. 10 is a flowchart illustrating a method for verifying pages of a civil certificate digitally signed according to the electronic signature method according to the second embodiment of FIG. 8.

The verification system scans the two-dimensional bar code of the i-th page of the civil certificate with the scanner (S1001), decodes the two-dimensional bar code, contents of the i-th page (M _i ), document unique number (DN), and page number (PN = i), the total number of pages n and the digital signature value S _i of the i th page are extracted (S1002). Then, after concatenating the document unique number (DN), the page number (PN), the total number of pages (n) and the i-th page content (M _i ) decoded by the two-dimensional bar code, input the hash result value H ( calculating DN∥PN∥n∥M _i), and the calculated hash result H (DN∥PN∥n∥M _i) and the digital signature value in decoding the two-dimensional bar code (S _i) a digital signature verification algorithm ( VER) to verify the digital signature (S1003). If the verification of step S1003 is successful (S1004), the contents of the i-th page decoded in the two-dimensional bar code are displayed on the screen (S1005), and the verifier decodes the contents printed on the i-th page of the complaint certificate and the two-dimensional bar code. Allows you to compare the contents of the i th page. If the digital signature verification result fails in step S1004, a verification failure message is output (S1006).

The civil certificate digitally signed by the electronic signature method according to the second embodiment described above requires a method for verifying the entire document.

FIG. 11 is a flowchart illustrating a method of verifying the entire civil certificate digitally signed according to the electronic signature method according to the second embodiment of FIG. 8.

Scan the two-dimensional bar code of the entire page of the civil certificate with a scanner (S1101). Then, the electronic signature is verified for each individual page according to the procedure of FIG. 10 (S1102). In the process of verifying the digital signature for each page, the two-dimensional bar code of each page is decoded. It is verified whether the document unique number (DN) extracted from all pages and the total number of pages (n) are the same (S1103). As a result of the verification in step S1103, if both the document unique number and the total number of pages of all pages match (S1104), it is verified whether there are any missing pages or duplicate pages in the collected page number (PN) (S1105). If there are no duplicate pages or missing pages in the verification result of step S1105 (S1106), a verification success message is output (S1107). If the verification result of step S1103 does not match both the document unique number and the total number of pages (S1104), or if the verification result of step S1105 includes duplicate or missing pages (S1106), a verification failure message is output (S1108).

Since the electronic signature method according to the second embodiment described above has only an electronic signature for an individual page and no electronic signature for the entire complaint certificate, the effect of preventing the tampering of the entire complaint certificate is low. Therefore, in order to improve the problems of the electronic signature method according to the second embodiment, the electronic signature method according to the third embodiment, which can verify the entire civil certificate and page verification, is proposed.

12 is a diagram illustrating a process of an electronic signature method according to a third embodiment of the present invention.

If the content of the civil certificate to be digitally signed M 1201 is divided into multiple pages 1202 when printed through the printer, the content to be printed on the first page M ₁ , the content to be printed on the second page M _The content to be printed on the ₂ , ..., nth page (last page) is called M _n . The contents of each page M ₁ , M ₂ , ..., M _n are hashed by the hash function H (1203), respectively, and n hash values H (M ₁ ), H (M ₂ ), ..., H (M _n ) 1204 is obtained. Each of the n hash values H (M ₁ ), H (M ₂ ), ..., H (M _n ) is digitally signed by the digital signature algorithm SIG (1205), and the n digital signature values S ₁ , S ₂ , ..., S _n (1206). Finally, n of the hash value _{H (M 1), H (} M 2), ..., H (M n) of all the hash back to the input hash value of the hash function H (1207) H (H ( M 1 ), H (M ₂ ), ..., H (M _n )) and digitally sign it with the digital signature algorithm SIG (1208) to obtain the digital signature value S (1209) for the entire civil certificate.

Here, the electronic signature value for the entire civil certificate may be obtained by separately hashing the contents of the entire civil certificate and applying the hash result value to the digital signature algorithm.

FIG. 13 is a configuration diagram of each page of a civil certificate digitally signed according to the digital signature method according to the third embodiment of FIG. 12.

When the total number of pages of the civil certificate is n, the information contained in the two-dimensional barcodes of the non-last page 1310 and the last page 1320 is different. First, any i-th page 1310 of the 1 to (n-1) th pages is comprised of the content portion (M _i ) 1311 and the two-dimensional barcode printing portion 1312 of the page. The two-dimensional bar code is generated by inputting the contents M _i of the i th page and the electronic signature S _i 1313 of the i th page into the barcode generation algorithm 1314.

The last n th page 1320 is composed of an n th page content portion (M _n ) 1321 and a two-dimensional barcode printing portion 1322. The two-dimensional bar code is generated by inputting the additional information 1323, which consists of the n th page content M _n , the n th page electronic signature S _n, and the electronic signature S of the entire complaint certificate content, to the barcode generation algorithm 1324.

12 and 13, the individual page verification of the civil signature electronically signed by the digital signature method according to the third embodiment of FIG. 12 is a hash value hashing the contents of the corresponding page decoded in the two-dimensional bar code and the electronic decoded in the two-dimensional bar code The signature is applied to the digital signature verification algorithm to verify the digital signature of the page. In addition, the verification of the entire civil certificate is possible by verifying the electronic signature S stored in the two-dimensional bar code of the last n-th page.

In the electronic signature method according to the first embodiment, it is possible to verify the page and the entire civil certificate with one electronic signature. However, as the number of pages increases, the hash value information to be stored in the two-dimensional barcode is increased. On the contrary, in the digital signature method according to the third embodiment, even though the number of pages increases, the hash value information to be stored in the two-dimensional bar code does not increase, but since the digital signature must be performed by the number of pages, the system load increases due to the increase in the number of pages. There is a problem.

Therefore, by combining the two digital signature methods, the number of hash value information stored in the two-dimensional bar code can be fixed while reducing the number of digital signatures. FIG. 14 illustrates an electronic signature method according to the fourth embodiment of the present invention. Figure is a diagram. The digital signature method according to the fourth embodiment combines the digital signature method according to the first embodiment and the electronic signature method according to the third embodiment.

When the contents of the civil certificate to be digitally signed M (1401) are printed by dividing into a plurality of pages 1402 when printed through the printer, the content to be printed on the first page M ₁ , the content to be printed on the second page M _The content to be printed on the ₂ , ..., nth page (last page) is called M _n . For a predetermined parameter k, the quotient of dividing n by k is q, and the remainder is r, then multiple pages 1402 are divided into (M ₁ , ..., M _k ), (M _{k + 1} , ..., M _2k ), ..., (M _{qk + 1} , ..., M _{qk + r} ).

The contents of each page M ₁ , ..., M _n are hashed with the hash function H (1403) and the hash values (H (M ₁ ), ..., H (M _k )), (H (M _{k + 1} ), ..., H (M _2k )), ..., (H (M _{qk + 1} ), ..., H (M _{qk + r} )) 1404. T ₁ = H (H (M ₁ ), ..., H (M _k )), T ₂ by n hashes, packed into k units and hashed again with the input of hash function H (1405) = H (H (M _{k + 1} ), ..., H (M _2k )), ..., T _{q + 1} = H (H (M _{qk + 1} ), ..., H (M _{qk + r} )) (1406). Each of these double hash values T ₁ , ..., T _{q + 1} is digitally signed with the digital signature algorithm SIG (1407), and (q + 1) digital signature values S ₁ , S ₂ , ..., S _{q + 1} (1408) is obtained. Finally, (q + 1) double hash values T ₁ , ..., T _{q + 1} are hashed again in hash function (H) 1409 and the hash values H (T ₁ , T ₂ , ... , T _{q + 1} ) is digitally signed by the digital signature algorithm SIG 1410 to obtain the digital signature value S 1411 of the entire civil certificate.

Here, the digital signature value for each group may be obtained by separately hashing the contents of pages belonging to the group, and applying the hash result value to the digital signature algorithm. In addition, the electronic signature value for the entire civil certificate may be obtained by separately hashing the contents of the entire civil certificate and applying the hash result to the digital signature algorithm.

When the electronic signature is performed by the electronic signature method according to the fourth embodiment described above, and the total number of pages of the civil complaint certificate is n (= qk + r), pages 1 to qk, qk + 1 to qk + r-1 The pages up to and the last n (= qk + r) th pages are different from the information added to the two-dimensional bar code.

FIG. 15 is a configuration diagram of each page of a civil certificate digitally signed according to the electronic signature method according to the fourth embodiment of FIG. 14.

Each page 1500 of the complaint certificate consists of a page content portion (M _i ) 1501 and a portion 1502 on which a two-dimensional bar code is printed. The two-dimensional bar code is generated by applying the content of the page and additional information to the barcode generation algorithm 1503. The information added to this two-dimensional bar code is different for each page. Here, the quotient of dividing i by k is called t. The additional information 1504 when i is greater than or equal to 1 and less than or equal to qk includes k hash values H (M _{tk + 1} ), H (M _{tk + 2} ), ..., H (M _{(t + 1) k} ) and the (t + 1) th digital signature S _{t + 1} . If i is greater than qk and less than or equal to qk + r-1, the additional information 1505 contains r hash values H (M _{qk + 1} ), H (M _{qk + 2} ), ..., H (M _{qk + r} ) and the (q + 1) th digital signature S _{q + 1} . In the case of the last nth page, additional information 1506 includes r hash values H (M _{qk + 1} ), H (M _{qk + 2} ), ..., H (M _{qk + r} ), (q + 1 ) Th digital signature S _{q + 1} , and the digital signature S for the entire civil certificate.

Page verification of the civil signature electronically signed by the digital signature method according to the fourth embodiment as shown in FIGS. 14 and 15 is possible by verification of the electronic signature S _t in each page, and the verification of the entire civil certificate is the last nth This can be done by verifying the digital signature S stored in the 2D barcode of the page.

Although the technical spirit of the present invention has been described above with reference to the accompanying drawings, it is intended to exemplarily describe the best embodiment of the present invention, but not to limit the present invention. In addition, it is obvious that any person skilled in the art may make various modifications and imitations without departing from the scope of the technical idea of the present invention.

As described above, the civil certificate issued online according to the present invention can easily verify the page and verify the entire civil certificate, thereby contributing to the safe handling of the civil certificate issued through the Internet.

Claims (13)

delete delete delete delete delete In the method for generating a civil certificate issued to the client system of the civil petitioner through the Internet, A hash step of hashing the contents of the individual pages constituting the complaint certificate (M) with a hash function, respectively; A group-specific digital signature step of grouping pages of the civil certificate by a predetermined number to obtain a digital signature value for each group; A full document electronic signature step of obtaining a full document electronic signature value using the civil certificate; For each page of the civil certificate, the bar code for each page is applied to the barcode generation algorithm by applying the contents of the page, the first hashed values of the pages belonging to the group to which the page belongs, and the electronic signature of the group to which the page belongs. It generates a barcode generation step, For each page to print the content of the page and the bar code for each page to generate a complaint certificate, The barcode generation step is a method for generating a civil certificate for the Internet issuance, characterized in that for adding at least one page of the bar code for each page of the civil certificate, the bar code for the electronic document electronic signature value. The method of claim 6, wherein the digital signature for each group, By hashing the first hashed results of the pages belonging to the group for each group by one hash function, the second hashed results are applied to the digital signature algorithm, respectively, to obtain the digital signature value for each group. How to create a civil certificate for issuing the Internet. The method of claim 7, wherein the full document digital signature step, Generating a third-party hash of the second hashed results with one hash function, and applying the third hashed result to an electronic signature algorithm to obtain a full document digital signature value. Way. The electronic document signature step of claim 6, wherein Hashing the entire contents of the civil certificate separately, and applying the result of the separate hash to the digital signature algorithm to obtain a full document electronic signature value, characterized in that the civil certificate generation method for the Internet issuance. delete delete delete delete

Images