KR102166690B1 - Management server and method of digital signature for electronic document - Google Patents

Abstract

In the present invention, when a party of the document content provides an electronic signature file, it is combined with the electronic document to replace the signature, and the realization of the document content is authenticated for each item even after the electronic document that has been digitally signed is stored in a highly reliable data storage. It relates to an electronic signature management server and a management method for electronic documents.

Description

Electronic signature management server and management method for electronic documents {MANAGEMENT SERVER AND METHOD OF DIGITAL SIGNATURE FOR ELECTRONIC DOCUMENT}

In the present invention, when a party of the document content provides an electronic signature file, it is combined with the electronic document to replace the signature, and the realization of the document content is authenticated for each item even after the electronic document that has been digitally signed is stored in a highly reliable data storage. It relates to an electronic signature management server and a management method for electronic documents.

In general, in the process of conducting business or social life between companies, between companies and individuals, and between individuals, it is often necessary to prepare various documents such as necessary contracts, litigation documents, and legal due diligence documents.

In recent years, when writing the above documents, the electronic documentation that is written using an electronic technique rather than the conventional paper document has become more common. Therefore, authentication or signature between parties for electronic documents is becoming important.

Accordingly, in Korean Patent Registration No. 10-1013935 and Korea Registration Patent No. 10-1239893, the creditworthiness of the parties is evaluated during consumption lending or trading, and the contract according to the contents of the written legal document is used as a mobile text service or an accredited certificate between the parties. It is established.

However, the above conventional techniques are basically a method of verifying the written legal document, that is, separate from the electronic document and only between the company, so that the electronic document itself is encrypted by the authentication key and is not a technology that prevents changes to the document content. .

In addition, by certifying that both parties have confirmed the electronic document, it only confirms that the content of the document has been established, and after that, it does not provide a function to certify that the content of the document has been realized or changed in stages.

Korean Patent Registration No. 10-1013935 Korean Patent Registration No. 10-1239893

The present invention is to solve the above-described problem, and when a party provides an electronic signature file, it replaces the signature by combining it with an electronic document, and the document content is stored in a highly reliable data storage. It is intended to provide an electronic signature management server and management method for electronic documents that authenticate realization by each item.

To this end, the electronic signature management server for an electronic document according to the present invention fetches the original electronic document from the original DB before the digital signature was made and provides it to the first party, and the first signature for which the first party has completed the digital signature A document transmission module for providing a document to a second party; A signature combining module that combines the electronic signature of the first party with the original electronic document and combines the digital signature of the second party with the first signature document to generate a second signature document; A first authentication DB for receiving and storing a primary signature document in which the digital signature of the first party is formed in the original electronic document; A second authentication DB for receiving and storing a second signature document to which the digital signature of the second party is added to the first signature document; And a document recording module that prevents forgery and alteration of the electronic document by registering the second signature document stored in the second authentication DB in a reliable data storage after the electronic document is signed.

At this time, a transition management module for extracting and analyzing information segments representing the document content of the electronic document, and for authenticating the realization of the document content by combining electronic signatures with the information segments while registered in the data storage; It is preferable to include.

In addition, it is preferable that the implementation management module certify that at least one of the signature of the party required for the step-by-step implementation of the document content, the signature of the third party, the conditions, the deadline, the cancellation, the cancellation, and the restoration of the original state have been successfully executed.

In addition, it is preferable that the data storage in which the digitally signed secondary signature document is registered by the document recording module is a blockchain network (block-chain NT).

In addition, it is preferable that the electronic signature combined with the electronic document further includes an electronic signature of a third party other than the first party and the second party.

In addition, it is preferable that the electronic signature combined with the electronic document includes at least one of a signature image file and a stamp image file.

In addition, it is preferable that the electronic signature combined with the electronic document includes public authentication or biometric authentication, and the authentication processing module combines an authentication key issued after public authentication or biometric authentication by an authentication authority to the electronic document.

Meanwhile, the electronic signature management method for an electronic document according to the present invention includes: a first document transmission step of fetching an original electronic document from an original DB before the digital signature is made and providing it to a first party; A first signature combining step of combining the electronic signature of the first party with the original electronic document; A first document storage step of receiving and storing the first signature document generated by combining the digital signature of the first party; A second document transmission step of providing the first signed document to a second party by the first party; A second signature combining step of creating a second signature document by combining the digital signature of the second party with the first signature document; A second document storing step of receiving and storing a second signature document to which the digital signature of the second party is added to the first signature document; And a document recording step of preventing forgery and alteration of the electronic document by registering the second signed document in a reliable data storage after the electronic document is signed.

At this time, a transition management step of extracting and analyzing information segments representing the document content of the electronic document, and authenticating the realization of the document content by combining the electronic signatures with the information segments in a state registered in the data storage; It is preferable to include.

In addition, in the implementation management step, it is desirable to certify that at least one of the signature of the party required for the step-by-step implementation of the document content, the signature of the third party, the conditions, the deadline, the cancellation, the cancellation, and the restoration of the original state have been successfully executed.

In addition, the digital signature combined with the electronic document includes public authentication or biometric authentication, but the authentication processing step in which the party combines the authentication key issued by public authentication or biometric authentication with the electronic document as the electronic signature. It is preferable to include.

In the present invention as described above, the digital signature file provided by the party of the document content is combined with the electronic document itself verified by the parties to replace the signature. In addition, it is possible to store the digitally signed electronic document in a highly reliable data storage, and even after that, the realization of the document content can be authenticated for each item.

1 is a network configuration diagram to which the present invention is applied.
2 is a conceptual diagram of an electronic signature to which the present invention is applied.
3 is a block diagram showing an electronic signature management server for an electronic document according to the present invention.
4 is a diagram illustrating a registration state of an electronic document with an electronic signature of FIG. 3.
5 is a diagram illustrating an information segment included in the electronic document of FIG. 3.
6 is a flow chart showing a method for managing an electronic signature for an electronic document according to the present invention.

Hereinafter, an electronic signature management server and a management method for an electronic document according to a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings. However, in the following description, an example is given of two parties to an electronic document. However, it will be apparent that the number of parties below is not limited, as the number of parties to the document may be three or more in associations and in many other cases.

First, as shown in Fig. 1, the electronic signature management server 100 for an electronic document according to the present invention according to the present invention is connected to the servers 20 and 30 and the client terminals 10a and 10b connected through a wired/wireless network. Digitally sign the document.

At this time, the electronic document may be representative of legal documents such as sales, leases, and consumption loans, but is not limited thereto, and includes all documents requiring signature, such as legal due diligence, various civil, criminal, domestic, administrative, and work cases.

In addition, electronic signatures are used in place of signatures (or names) and seals (or signatures), etc., which were conventionally performed on paper documents, and are meant to clearly understand the contents of the electronic document and to confirm, agree, or implement it. Grant.

To this end, the server 100 of the present invention is connected to the terminal 10a of the first party, the terminal 10b of the second party, the authentication service server 20, and the data storage 30 through a wired/wireless network on the system. .

The first party will be the user of the server 100 according to the present invention and the second party will normally be the other party, but the user and the other party may be interchangeable. For example, the first party is the seller, the second party is the other party, the buyer, and they are the direct parties to the legal relationship.

Terminals (10a, 10b) of the end user, such as PCs, notebooks (laptops), smartphones, tablets, etc., are all terminals capable of accessing web/mobile sites related to signing electronic documents or installing and executing service-only applications. Means device.

In addition, the terminals 10a and 10b may perform overall service operations such as configuring an electronic document screen, inputting information, transmitting and receiving data, and storing data under the control of a web/mobile site or a dedicated application. In particular, it connects to the server and enables electronic signature requests.

The authentication service server 20 is implemented as a server platform operated by an accredited authentication authority, etc., and provides an authentication key through phone authentication, text authentication, public authentication, biometric authentication, etc. upon request of a party. The provided authentication key is combined and stored in the electronic document as an electronic signature.

The data storage 30 is implemented as a data storage server or a document management database that can store and manage electronic documents for a certain period of time or longer without modification or manipulation. In particular, a blockchain network, one of the distributed data storage technologies, is used.

Therefore, when the server 100 provides the electronic document created by the parties to the first party terminal 10a, the first party who confirms the electronic signature is returned to the server 100, and the server 100 provides the electronic document. 1 Combine and encrypt the party's digital signature.

After that, when the electronic document with the electronic signature of the first party is transmitted to the terminal 10b of the second party, the second party who confirms the electronic signature is returned to the server 100, and the server 100 sends the electronic document. The second party's digital signature is further combined and encrypted.

At this time, the parties may digitally sign an image-type signature file or a seal file, but may download an authentication key after identification from the authentication service server 20 and combine it with an electronic document to perform an electronic signature.

Furthermore, the'signed electronic document' after the electronic signature is stored in the highly reliable data storage 30 to be registered (stored) in a state in which no forgery or alteration is possible.

To this end, a blockchain network 30 configured by linking a plurality of nodes is preferably used as the data storage 30, and the registered signature electronic document constitutes one node in the blockchain network 30.

2A to 2D conceptually illustrate an electronic signature sequence by an electronic signature management server for an electronic document according to the present invention as described above.

As shown, the present invention includes a first party's electronic signature (ES1), a second party's electronic signature (ES2), storage of the signed electronic document, and subsequent verification steps for compliance.

As shown in (a) of FIG. 2, the first party receives a previously prepared electronic document (ED) from the server 100 through the terminal 10a and requests an electronic signature after checking. Upon request, the electronic signature (ES1) of the first party is combined and stored in the electronic document (ED).

In addition to the signature (signed) and stamped (signature) methods, the electronic signature can also be authenticated or biometrically authenticated. As a preferred example, a barcode, QR code, watermark, and stamped image can be added to an electronic document with an electronic signature to confirm the appearance. Let's do it.

Next, as shown in (b) of FIG. 2, an electronic document with an electronic signature (ES1) of the first party is provided to the terminal 10b of the second party. Then, after checking the electronic document (ED), the second party completes the electronic signature by adding its own electronic signature (ES2) in the same manner as above.

However, an electronic signature may be done by the second party first and then by the first party. Although it is impossible from a physical/visual perspective, as a similar concept, electronic signatures (ES1, ES2) of the first party and the second party are performed at the same time. May be.

For example, when an electronic document is a sales contract, the first party, who is a server member (user), performs an electronic signature first as the seller, and the second party, the other party, does the electronic signature as the buyer, but the buyer may do it first or at the same time. have.

Next, as shown in Fig. 2(c), the electronic document with the electronic signature (ES2) of the second party is combined with the electronic signature (ES2) of the second party as well as the electronic signature (ES1) of the first party It is stored in the same data storage as the blockchain network 30 as a state.

Therefore, the contents of the electronic document (ED) itself are encrypted by the electronic signatures (ES1, ES2) of the parties, respectively, combined with the electronic document, and others cannot arbitrarily change it, and furthermore, the unique function of the highly reliable data storage 30 Surveillance is made by

Next, as shown in (d) of FIG. 2, when the electronic signature stored in the data storage 30 is required to be implemented after document creation according to the document content (CT), the electronic signature (ES1, ES2) for each transition state can do.

The digital signature at this stage is to confirm that the content of the electronic document has been transferred to each other, and is applied when the implementation is required after the document is prepared. Electronic signatures for each implementation status include parties, third parties, and expiration of due date, as well as cancellation or termination.

In other words, after signing an electronic document and agreeing on its contents, if the parties need to implement it, both parties certify that the implementation has been faithfully performed according to the contents by signing the electronic document in the same or similar manner as the electronic signature described above.

In addition, if a third party's warranty or authentication is required, the third party also applies an electronic signature (ES3), and the contents of the electronic document that have an effect after a certain period are confirmed that the period has been reached. As one of the means, a time stamp (TS) is added.

In addition, items that have not yet been fulfilled in the document contents remain unauthenticated (NOT), and if cancellation or termination is made after agreement between the parties in an electronic document, it is legal to cancel or terminate with a separate electronic signature. Can be authenticated.

On the other hand, as shown in Figure 3, for the management of the digital signature as described above, the electronic signature management server 100 for an electronic document according to the present invention is a document transmission module 110, a signature combination module 120, the first authentication DB (130), a second authentication DB (140) and a document recording module (150).

Further, as another preferred embodiment, the implementation management module 160 and the authentication processing module 121 are further included, wherein the first authentication DB 130 and the second authentication DB 140 are integrated into one DB (DataBase). Can be implemented as In addition, the document transmission module 110, the signature combination module 120, the transition management module 160, and the authentication processing module 121 may be implemented as one processor.

This invention is implemented on a server platform as an example. Specifically, it is implemented as a server capable of Internet service, and a party accesses the server 100 through terminals 10a and 10b to receive the corresponding service. As a server, it may be constructed as a web server, a swap server, and an integrated server integrating them.

In addition, the electronic signature management server 100 of the present invention further includes a CPU (central processing unit), a memory, and a network interface so that it can be operated as a server, the CPU calling and executing a program stored in the memory, and Allows configurations to communicate with external terminals through a network interface.

Specifically, the memory is a computer-readable recording medium and provides an operating system for user login, billing, electronic document call, transmission, and electronic signature, and program code for a service providing routine.

In this case, software components required for the implementation of the present invention may be loaded from a computer-readable recording medium separate from the memory using a drive mechanism (not shown).

In addition, software components may be separately loaded into a memory through a network interface, and these may enable data transmission with various modules of the present invention, which will be described later, through a data bus.

The network interface is a network connection with the party terminal (10a, 10b), the authentication service server 20 and the data storage 30, as well as network interfaces such as an interface card and Ethernet card capable of communication according to the Internet protocol. It may be another type of device capable of transmitting and receiving external information.

Further, another example of the network interface may be a mobile computing device, a wireless device including 4G, 5G, and WiFi, and in some examples, the computing device uses a network interface for wireless communication with a networked external device.

At this time, the document transmission module 110 fetches the original electronic document from the original DB 130a before the digital signature is made, and provides it to the first party through the network interface. Thereafter, the first signed document, which has been digitally signed by the first party, is provided to the second party.

The electronic document stored in the original DB 130a may be either stored by the party by uploading it to the server 100 after creating it in his/her terminal or by using a tool provided on the server after the party logs in to the server.

Therefore, the first party can directly select the electronic document for which the electronic signature is to be signed after logging in to the server 100, or may extract the electronic document created using the corresponding ID by referring to the login ID of the party and provide it to the first party. .

In addition, the first signed document, which has been electronically signed by the first party, may be provided in a push method to a data receiving environment (eg, a phone number or an email address) designated by the first party. For example, it can be pushed with the smartphone of the second party.

Of course, the second party can also access the server 100 and directly request the transmission of the first signature document, and if necessary, the data receiving environment of the second party included in the contents of the electronic document can be extracted and then automatically transmitted. have.

However, the present invention is to clarify the intention of agreement between the parties by combining the electronic signature (ES1) of the first party and the electronic signature (ES2) of the second party to the electronic signature, and to prevent forgery of the agreed electronic document. In addition, the order of transmission to the parties can be changed.

Next, the signature combination module 120 generates a first signature document by combining the electronic signature (ES1) of the first party with the original electronic document. In addition, a second signature document is created by combining the digital signature (ES2) of the second party with the generated primary signature document.

An electronic signature may be displayed on the generated electronic document. That is, the electronic signatures ES1 and ES2 of the first party and the second party combined with the electronic document are displayed overlaid on the electronic document, so that they can be viewed or displayed on the terminal screen.

The electronic signature combined with the electronic document can be displayed on the electronic document by means such as barcode, QR code, watermark, and imprinted image, and there are no special restrictions such as the top/bottom/sign of the electronic document. In particular, the position of the signature field among the items included in the electronic document can be read and displayed by overwriting the electronic signature on the corresponding position.

In this way, since the electronic document includes both the first party's electronic signature (ES1) and the second party's electronic signature (ES2) through data processing or encryption, these three files are ultimately transmitted and stored as a whole. This prevents forgery because the digital signature serves as an authentication key.

That is, in the related art, since the electronic document itself can be forged and altered even after authentication, since the electronic document itself can be forged and altered, regardless of the electronic document, regardless of the corresponding electronic document. To solve.

In this case, the electronic signature may further include an electronic signature of a third party. The third party is a person other than the first party and the second party, and is applied when an electronic signature other than the party is required. For example, a notary public or a guarantor corresponds to a third party, and such a third party's electronic signature (ES3) is also incorporated into an electronic document to increase public confidence.

The electronic signatures ES1, ES2, and ES3 combined with the electronic document ED include any one or more of a signature image file and a stamp image file. Here, the signature includes the name and the seal includes everything that can be submitted directly by the party.

In the case of using a signature image file and a stamped image file as an electronic signature as described above, the party can provide the corresponding file to the server 100 immediately without authentication by the authentication service server 20 to perform an electronic signature.

Furthermore, the digital signature may use public authentication or biometric authentication. To this end, the present invention includes an authentication processing module 121. The authentication processing module 121 directly binds the authentication key issued after public authentication or biometric authentication to the electronic document or commands the combination.

The authentication key is issued after the party accesses the authentication service server 20, which is an authentication authority, through the terminals 10a and 10b and confirms the identity, and is commonly referred to as a'authorized certificate'. Therefore, this authentication key is combined with an electronic document and used as an electronic signature.

As a method of issuing an authentication key, first, a party connects to the authentication service server 20 through the terminals 10a, 10b, and downloads the authentication key generated through the identity verification procedure directly to his or her terminals 10a, 10b. There is a way to receive it. In this way, the authentication key downloaded by the party is provided to the authentication processing module 121 by accessing the server 100.

Second, under the conditions permitted by law, a party accessing the server 100 accesses the authentication service server 20 through the authentication processing module 121 to generate an authentication key, and authenticates the server 100, not the party. There is a method of downloading from the processing module 121. In this case, the party does not need to separately transmit the authentication key.

That is, when a party requests authentication after accessing the server 100 of the present invention for public authentication or biometric authentication, the server 100 connects the party's terminals 10a and 10b to the authentication service server 20 The authentication process is allowed to proceed, and the authentication key is downloaded directly from the server 100 to proceed with the electronic signature.

This authentication processing module 121 is described separately from the case of using a stamp file, etc. in that it requires the help of an external authentication authority to provide the digital signature, but the authentication key is executed in the signature combination module 120 described above instead. Alternatively, it may be implemented in an integrated structure with the signature combination module 120.

On the other hand, the public authentication is provided with an authentication key by verifying the identity by phone or text. In the biometric authentication, the person's terminal transmits biometric information such as fingerprint, hand shape, iris, and voice to verify the identity and provide an authentication key. Receive.

Therefore, the server of the present invention allows the authentication key generated by the identity verification of the party to be combined with the electronic document as an electronic signature.

Next, the first authentication DB 130 receives and stores the first signature document with the electronic signature (ES1) of the first party in the original electronic document, and similarly, the second authentication DB 140 receives the first signature described above. Receives and stores a second signature document to which a second party's electronic signature (ES2) has been added to the document.

The original electronic document is stored in the original DB 130a by the document transmission module 110 to the terminal 10a of the first party, thereby generating and storing the first signature document. After that, the second signature document to which the electronic signature (ES2) of the second party is additionally combined is stored in the second authentication DB 140.

The first authentication DB 130 and the second authentication DB 140 may each be constructed as an independent DB, but may provide substantially the same effect even if one DB is separated by sector or address, and preferably It is managed by a database management system (DBMS) 130b.

In addition, the first authentication DB 130 and the second authentication DB 140 may be integrally built in the server 100 of the present invention, but are not limited thereto, and may be omitted or all or part of the system implementation method or environment. It is also possible for the'DB' to exist as an external DB built on a separate system.

4 illustrates a second authentication DB 140 in which a second signature document is stored. As shown in the figure, the second authentication DB 140 stores an electronic document with electronic signatures of both parties (or a third party added), and additional information if necessary.

The additional information is to make it easier to search for electronic documents that have been signed electronically, search for document contents, and connect with parties, and may overlap in whole or in part with the contents of the electronic document.

Specifically, the additional information includes the type of electronic document (eg, sale/consumption loan/work contract, etc.), a time stamp notifying the time when the electronic document was created, party information and contact information.

Next, after the signature of the electronic document is completed, the document recording module 150 registers the second signature document stored in the second authentication DB 140 in the reliable data storage 30 to prevent forgery of the electronic document. do. To this end, the document recording module 150 accesses the data storage 30 through a network interface.

As the data storage 30, various external servers or DBs with guaranteed reliability may be used, and the DB built in the server 100 of the present invention may also be used as the data storage 30. However, it is desirable to use an authorized external agency, etc. to ensure more strict reliability.

In particular, it is preferable that the data storage 30 in which the digitally signed secondary signature document is registered by the document recording module 150 as above is a block-chain network (block-chain NT) 30 which is a kind of distributed data method. Do.

Blockchain network 30 is a decentralized data storage technology that stores data in blocks, connects them in a chain, and simultaneously copies and stores them on numerous computers.Because it does not store document records on a centralized server, all participants In contrast, there is an advantage in that data cannot be forged or altered.

Next, the fulfillment management module 160 enables management of the electronic document after the digital signature has been registered in the data storage 30, for example, delivery of goods, payment of goods, even after the sale contract is concluded by electronic signature, Certify liability for defect security, expiration of period, change of contract terms, cancellation and termination.

To this end, the implementation management module 160 extracts and analyzes information segments representing the document content of the electronic document, and authenticates the realization of the document content by combining the electronic signatures with the information segments in the state registered in the data storage 30. .

As shown in FIG. 5, the electronic document includes a document type segment, a segment for each item representing the document content such as a clause or period, a first party segment, a second party segment, and an electronic signature information segment.

Therefore, as described above with reference to Fig. 2(d), the'signature electronic document' stored in the blockchain network, which is the data storage 30, depends on the content of the document, and if it needs to be fulfilled after the agreement, each fulfillment state Electronic signatures can be made.

The electronic signature at this stage refers to a procedure for confirming that each other has been implemented according to the content of the electronic document, and is applied when the implementation after document preparation is necessary. The electronic signature for each implementation status includes the parties, third parties, and expiration of the due date, as well as cancellation or termination.

In other words, after signing an electronic document and agreeing on the contents of the document, if the parties need to implement it, both parties certify that the implementation has been sincere by signing an electronic signature in the same or similar manner as the electronic signature described above.

In addition, if a third party guarantees or authentication is required, the third party also signs an electronic signature, and one of the means of confirming that the period has been reached is the effect that occurs after a certain period of the contents of the electronic document. A time stamp (TS) is added.

In addition, items that have not yet been fulfilled in the document contents are kept in an unauthenticated state (NOT), and if cancellation, termination, or change of contents is made after the agreement of the parties, an electronic signature can be made to certify the legality. do.

Therefore, while it is impossible to manage after signing in the prior art, the present invention is during the signing of the party required for the step-by-step implementation of the document content by the implementation management module 160, the signing of a third party, conditions, deadlines, cancellation, termination, and restoration. It allows you to authenticate that one or more has been successfully executed.

Hereinafter, a method for managing an electronic signature for an electronic document according to a preferred embodiment of the present invention will be described with reference to the accompanying drawings.

However, in the following description, as an example, what is executed in the management server of the present invention described above is described, redundant description is omitted as much as possible.

6, the electronic signature management method for an electronic document according to the present invention includes a first document transmission step (S110), a first signature combination step (S120), a first document storage step (S130), and a second document transmission step. (S140), a second signature combining step (S150), a second document storing step (S160), and a document recording step (S170). Preferably, it further includes a transition management step (S180).

Here, in the first document transmission step (S110), the original electronic document prior to the digital signature is fetched from the original DB 130a and provided to the first party. As an example, the document transmission module 110 of the server identifies the party who requested the electronic document, extracts the corresponding electronic document from the original DB 130a, and transmits it to the terminal 10a of the first party.

Next, in the first signature combining step (S120), the electronic signature (ES1) of the first party is combined with the original electronic document. For electronic signatures, the first party submits a signature or stamped image file directly or submits an authentication key through public authentication or biometric authentication.

As for the authentication key, the party directly accesses the authentication service server 20 to apply for authentication (S120a) or access through the server 100 of the present invention to apply for authentication (S120a), and the authentication key generated through identity authentication is It is bound to an electronic document (ED) as an electronic signature.

For example, the signature combining module 120 of the server 100 is performed by electronically combining the electronic signature submitted by the first party after receiving the electronic document from the original DB 130a. This replaces the signature and makes it impossible to forge electronic documents.

Next, in the first document storage step (S130), the first signature document generated by combining the electronic signature (ES1) of the first party as described above is input and stored. The first signature document is recorded in the first authentication DB 130 of the server, for example.

This first document storage step (S130) is a temporary storage step prior to completing the electronic signature on the electronic document created by both parties, and the signature work is completed only when the electronic signature (ES2) of the second party, the other party of the document, is made.

Next, in the second document transmission step (S140), the first signed document is provided by the first party to the terminal 10b of the second party. To this end, the document transmission module 110 of the server transmits the first signature document recorded in the first authentication DB 130 to the terminal of the second party. Of course, the second party may directly check or receive the primary signature document by accessing the server 100.

Next, in the second signature combining step (S150), a second signature document is generated by combining the electronic signature (ES2) of the second party with the first signature document. To this end, the signature combination module 120 of the server fetches the first signature document from the first authentication DB 130 and then electronically combines the electronic signature submitted by the second party.

In such a second signature combination step (S150), the authentication key of the second party directly connects to the authentication service server 20 to apply for authentication (S150a) or access through the server of the present invention to request authentication (S150a). And, the authentication key generated through identity authentication is combined with the electronic document as an electronic signature.

However, it is desirable to add barcodes, QR codes, watermarks, and stamped images to the electronic documents with the electronic signatures of the parties so that they can be checked on the terminal screen or printed paper documents. This allows both parties to visually verify the signature.

Next, in the second document storage step (S160), the second signature document to which the electronic signature (ES2) of the second party is added to the first signature document is input and stored. The second signature document is recorded in the second authentication DB 140 of the server, for example.

The electronic signature for the electronic document created by both parties is completed by the second document storage step (S160), and if an electronic signature of a third party other than the party, such as a notary or guarantor, is required according to the document content, sign in the same manner as described above. Add (S10).

Next, in the document recording step (S170), after the digital signatures of the parties are completed, the secondary signature document is registered in the reliable data storage 30, thereby preventing forgery of the contents of the electronic document as well as the electronic signature of both parties. .

As an example, the document recording module 150 of the server searches for and extracts the secondary signature document file from the second authentication DB 140 and transmits it to the data storage 30. The data storage 30 is preferably a blockchain network, and the electronic document acts as a node on the blockchain network.

Meanwhile, in the implementation management step (S180), information segments representing the document content of the electronic document are extracted and analyzed from the electronic document, and the electronic signature is combined with the information segments while being registered in the data storage 30 to realize the document content. Authenticate.

Of course, in some cases, instead of authenticating the realization of the document content in the state registered in the data storage 30, the case of acknowledging the realization of the content after downloading from the data storage 30 to the server 100 has substantially the same effect. Will provide.

In this implementation management step (S180), it is authenticated that one or more of the signature of the party required for the step-by-step implementation of the document content, the signature of the third party, the conditions, the deadline, the condition change, cancellation, termination, and restoration of the original state have been successfully executed.

For example, the implementation management module 160 of the server extracts and analyzes information segments representing the document content after the electronic document having completed the digital signature is registered in the data storage 30, and combines the electronic signature to the information segments to The realization of

Therefore, at the request of the party or a third party, the party's signature or the third party's signature is signed for each item constituting the document content, and the cancellation, termination and restoration of the original state due to changes in circumstances after the document is prepared, or as the period expires. You will automatically certify that the requirements have been met.

In the above, specific embodiments of the present invention have been described above. However, the spirit and scope of the present invention are not limited to these specific embodiments, and that various modifications and variations are possible within the scope of not changing the subject matter of the present invention. You will understand when you grow up.

Therefore, the embodiments described above are provided to completely inform the scope of the invention to those of ordinary skill in the technical field to which the present invention belongs, and should be understood as illustrative and non-limiting in all respects, The invention is only defined by the scope of the claims.

10a: first party terminal
10b: Terminal of the second party
20: authentication service server (certification authority)
30: data storage
100: digital signature management server
110: document transmission module
120: signature binding module
121: authentication processing module
130: first authentication DB
140: second authentication DB
150: document recording module
160: implementation management module 160

Claims (11)

A document transmission module 110 that retrieves the original electronic document from the original DB 130a and provides it to the first party, and provides the first signed document for which the first party has completed the electronic signature to the second party. )and;
A signature combination module 120 that combines the electronic signature (ES1) of the first party with the original electronic document, and combines the electronic signature (ES2) of the second party with the first signature document to generate a second signature document. )and;
A first authentication DB (130) for receiving and storing a primary signature document having an electronic signature (ES1) of the first party in the original electronic document;
A second authentication DB 140 for receiving and storing a second signature document to which the electronic signature (ES2) of the second party is added to the first signature document;
After the signature of the electronic document (ED) is completed, a document recording module that prevents forgery and alteration of the electronic document by registering the second signature document stored in the second authentication DB 140 in the reliable data storage 30 ( 150); And
Implementation management that extracts and analyzes information segments representing the document content of the electronic document (ED), and authenticates the realization of the document content by combining electronic signatures with the information segments while registered in the data storage 30 Including module 160,
The electronic signatures (ES1, ES2) of the first party and the second party are respectively superimposed on the electronic document and are configured to be displayed on the terminal screen or displayed when printing,
The electronic signature combined with the electronic document includes an electronic signature (ES3) of a third party other than the first party and the second party,
The electronic signature combined with the electronic document includes accredited authentication or biometric authentication, and an authentication key issued after accredited authentication or biometric authentication from an authentication institution by the authentication processing module 121 is combined with the electronic document,
When requesting authentication after accessing the server 100, the terminal 10a, 10b of the party is connected to the authentication service server 20 so that the authentication process proceeds, and the server 100 downloads the authentication key. Electronic signature,
The second authentication DB 140,
The first party, the second party, or the third party stores electronic documents and additional information for which the digital signature has been completed, and the additional information is used to search for electronic documents that have been digitally signed, search for document contents, and connect with the party. It is stored so that all or part of the contents of the electronic document overlap,
Electronic signature management server for an electronic document, characterized in that it includes a type of electronic document (trade/consumption loan/work contract), a time stamp notifying the time when the electronic document was created, party information and contact information. delete The method of claim 1,
The implementation management module 160 is characterized in that to certify that at least one of the signature of the party required for the step-by-step implementation of the document content, the signature of the third party, the condition, the deadline, the cancellation, termination, and restoration of the original state has been successfully executed. Electronic signature management server for electronic documents. The method of claim 1,
An electronic signature for an electronic document, characterized in that the data storage 30 in which the digitally signed second signature document is registered by the document recording module 150 is a block-chain NT 30 Management server. The method according to any one of claims 1, 3 and 4,
An electronic signature management server for an electronic document, characterized in that the electronic signature combined with the electronic document further includes an electronic signature (ES3) of a third party other than the first party and the second party. The method according to any one of claims 1, 3 and 4,
An electronic signature management server for an electronic document, characterized in that the electronic signature combined with the electronic document includes at least one of a signature image file and a stamp image file. The method according to any one of claims 1, 3 and 4,
The electronic signature combined with the electronic document includes public authentication or biometric authentication,
The authentication processing module 121 is an electronic signature management server for an electronic document, characterized in that the authentication key issued after public authentication or biometric authentication by an authentication authority is combined with the electronic document. A first document transmission step (S110) of fetching the original electronic document from the original DB 130a and providing it to the first party;
A first signature combining step (S120) of combining the electronic signature (ES1) of the first party with the original electronic document;
A first document storage step (S130) of receiving and storing the first signature document generated by combining the electronic signature (ES1) of the first party;
A second document transmission step (S140) in which the first party provides the first signed document to the second party on which the digital signature has been completed;
A second signature combining step (S150) of creating a second signature document by combining the electronic signature (ES2) of the second party with the first signature document;
A second document storing step (S160) of receiving and storing a second signature document to which the electronic signature (ES2) of the second party is added to the first signature document;
After signing the electronic document, a document recording step (S170) of registering the second signed document in a reliable data storage 30 to prevent forgery of the electronic document; And
A transition management step (S180) of extracting and analyzing information segments representing the document content of the electronic document, and combining electronic signatures to the information segments while registered in the data storage 30 to verify the realization of the document content (S180) ); including,
In the implementation management step (S180), at least one of the signature of the party necessary for the step-by-step implementation of the document content, the signature of the third party, the condition, the deadline, the cancellation, termination, and restoration of the original state has been successfully executed
The electronic signature combined with the electronic document includes public authentication or biometric authentication,
Digital signature management method for electronic documents, characterized in that it includes authentication processing steps (S120a, S150a) in which a party combines an authentication key issued by public authentication or biometric authentication by an authentication authority to an electronic document as the electronic signature. . delete delete delete

Images