KR102285888B1 - Method and server for issuing certificate and mandating digital signature - Google Patents

Abstract

The certificate can be used as an electronic signature on the electronically-filed target document. A person who cannot perform electronic signatures can have a legal representative authorized by the law, such as real estate registration business, perform electronic signatures using certificates by delegating electronic signatures. A method for issuing a certificate for electronic signature and a certificate issuing server receive a reference number and authorization code from a terminal, generate a certificate using the reference number and authorization code, and output the generated certificate to the terminal. The electronic signature delegation method and electronic registration server receive a request for an electronic signature for at least one target document from a terminal, provide information of at least one target document to the terminal, and electronically for at least one target document provided to the terminal A signature may be performed.

Description

METHOD AND SERVER FOR ISSUING CERTIFICATE AND MANDATING DIGITAL SIGNATURE

The technical field relates to an electronic registration system, and more particularly, to a method and a server for an electronic registration system requiring an electronic signature.

As the Internet registry of the Supreme Court is built and operated, a system that transmits and receives electronic documents between financial institutions and legal representatives in relation to the Internet registry and supports the work of electronic signatures may be required.

For example, in the case of the establishment of a near-mortgage right, the electronic signature of the collateral provider is required in accordance with the rules for real estate processing by the computerized information processing organization in order to process business by electronic registration. As another example, in the case of registration of transfer of ownership, electronic signatures of the seller and the buyer are required.

Korean Patent Application Laid-Open No. 10-2007-0056270 (published on June 08, 2009) discloses an accredited electronic document repository that can promote the stability of real estate sales and an electronic system for real estate contracts using digital signature accredited certificates. there is.

The public invention promotes ASP (Application Service Provider) management, provides an electronic contract for real estate sales using ASP, activates the seller's authorized certificate electronic signature algorithm according to the contract details of the electronic contract, and is based on the electronic signature to store and register the electronic contract and a certified copy of the register of the real estate as an electronic document, and to transmit the stored and registered real estate sales contract details to the seller's terminal: Interlocking with the public office server, a certificate server for authenticating the signature; and a user terminal for receiving a confirmation of a real estate sales contract, performing a digital signature and writing an electronic contract through a connection log-in with an ASP through a networking connection with the public office server.

An embodiment may provide a method and apparatus for issuing a certificate.

An embodiment may provide a method and apparatus for performing an electronic signature on a document in the form of an electronic file using a certificate.

A method and device for performing electronic signatures can be provided by entrusting the performance of electronic signatures along with the delegation of writing and submission of documents that occur in the registration business to a person qualified for the registration task specified in the Real Estate Registration Act.

According to an aspect, a method for issuing a certificate for electronic signature includes receiving a reference number and an authorization code from a terminal, generating the certificate based on the reference number and the authorization code, and transferring the generated certificate to the terminal output step.

The certificate issuance method includes the steps of: receiving information of a delegator for delegation of the electronic signature from a registration agency server; generating the reference number and the authorization code for generating the certificate based on the information of the delegator; The method may further include outputting information about an electronic signature power of attorney for delegation of the electronic signature including the reference number and the authorization code to the registration agency server.

The information on the electronic signature power of attorney may be transmitted from the registration agency server to the terminal.

Receiving the reference number and the authorization code from the terminal may be performed after the step of outputting to the registration agency server is performed.

The certificate may be used as the electronic signature for the target document used for the establishment, change or cancellation of the root mortgage when establishing, changing or canceling the root mortgage for the delegator.

Receiving the reference number and authorization code from the terminal may further include receiving a password for the certificate from the terminal.

The generated certificate may include information about the password.

The outputting to the terminal may include storing the certificate in a predetermined location in a storage space of the terminal.

The predetermined location may be a location different from a location for storing a standard public certificate.

The stored certificate may be encrypted, and information or an event number of at least one target document for the certificate may be set as a decryption key.

According to another aspect, an electronic signature delegation method includes receiving a request for an electronic signature for at least one target document from a terminal, wherein the at least one target document is used for an electronic registration service, and the at least one target document and providing information of the document to the terminal, wherein the electronic signature is performed on the at least one target document provided to the terminal.

The electronic signature may be performed using a certificate stored in the terminal.

The electronic signature delegation method may further include controlling the terminal so that the certificate is displayed on the terminal.

The providing of the information of the at least one target document to the terminal may include providing the information of the at least one target document to a volatile memory of the terminal.

The information of the at least one target document may be provided to the volatile memory as a byte array stream.

The electronic signature delegation method may further include receiving information on the at least one target document from the terminal and storing the received information on the at least one target document.

The electronic signature may be performed using a certificate stored in the terminal.

The electronic signature delegation method may further include associating information on the at least one target document and information on the certificate.

In the associating step, the information on the at least one target document and the information on the certificate may be related based on an Object IDentifier (OID) included in the information on the at least one target document and the information on the certificate, respectively. .

The electronic signature delegation method may further include receiving information on the electronic signature power of attorney for delegation of the electronic signature from a registration agency server and transmitting information on the electronic signature power of attorney to the terminal.

The information on the electronic signature power of attorney may include a reference number and an authorization code used to issue a certificate used for the electronic signature.

The electronic signature delegation method may further include controlling the terminal so that information on at least one target document on which the electronic signature is performed is transmitted to an Internet registry server.

According to another aspect, the certificate issuing server receives a reference number and an authorization code from a terminal, and a communication unit for outputting the generated certificate to the terminal and a processing unit for generating the certificate based on the reference number and the authorization code include

According to another aspect, in an electronic registration server, receiving a request for an electronic signature for at least one target document from a terminal, wherein the at least one target document is used for an electronic registration task, the at least one target and a communication unit providing document information to the terminal and a storage unit storing information of the at least one target document, wherein the electronic signature is performed on the at least one target document provided to the terminal.

According to another aspect, a method for issuing a certificate and delegating an electronic signature includes the steps of, by a certificate issuing server, receiving information of a delegator for delegation of an electronic signature from a registration agency server, wherein the certificate issuing server is based on the information of the delegator Generating a reference number and authorization code for generating the certificate, the certificate issuing server provides information on the electronic signature power of attorney for delegation of the electronic signature including the reference number and the authorization code to the registration agency server step of outputting to, the step of receiving, by the electronic registration server, information on the power of attorney of the electronic signature in which the signature of the delegator is sealed from the registration agency server, transmitting the information on the power of attorney of the electronic signature to the terminal - the step of The terminal is a terminal of an authorized person entrusted with performing the electronic signature - the step of the certificate issuing server receiving the reference number and the authorization code from the terminal, the certificate issuing server based on the reference number and the authorization code generating the certificate, outputting the generated certificate to the terminal by the certificate issuing server, receiving a request for an electronic signature for at least one target document from the terminal - the at least one target document is used for an electronic registration service, and providing information of the at least one target document to the terminal, wherein the electronic signature is obtained by using the certificate for the at least one target document provided to the terminal is carried out

A method and apparatus for performing an electronic signature by entrusting a legal representative with the performance of an electronic signature in relation to electronic registration are provided.

A method and apparatus are provided for a person unable to perform an electronic signature, in which a registrar agency performs an electronic signature on behalf of a legal representative through a legal representative.

1 illustrates a certificate issuance and electronic signature delegation system according to an example.
2 shows a configuration diagram of a server according to an embodiment.
3 is a block diagram of an accredited certification authority server according to an embodiment.
4 shows a configuration diagram of an electronic registration server according to an embodiment.
5 is a flowchart of a method of performing an electronic signature using an issued certificate according to an example.
6 is a flowchart of a method for issuing an electronic signature power of attorney according to an example.
7 is a flowchart of a method for issuing a certificate according to an embodiment.
8 is a flowchart of a method of storing information on a target document according to an example.
9 is a flowchart of a method of performing an electronic signature according to an example.
10 is a flowchart of a method in which a delegator issues a certificate and delegates an electronic signature.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Like reference numerals in each figure indicate like elements.

Various modifications may be made to the embodiments described below. It should be understood that the embodiments described below are not intended to limit the embodiments, and include all modifications, equivalents or substitutes thereto.

Terms used in the examples are only used to describe specific examples, and are not intended to limit the examples. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present specification, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, but one or more other features It should be understood that this does not preclude the existence or addition of numbers, steps, operations, components, parts, or combinations thereof.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the embodiment belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present application. does not

In addition, in the description with reference to the accompanying drawings, the same components are given the same reference numerals regardless of the reference numerals, and the overlapping description thereof will be omitted. In the description of the embodiment, if it is determined that a detailed description of a related known technology may unnecessarily obscure the gist of the embodiment, the detailed description thereof will be omitted.

As the Internet registry of the Supreme Court is built and operated, a system that transmits and receives electronic documents between financial institutions and legal representatives in relation to the Internet registry and supports the work of electronic signatures may be required. The Internet registrar may operate an Internet registrar server.

For example, in the case of the establishment of a near-mortgage right, the electronic signature of the collateral provider is required in accordance with the rules for real estate processing by the computerized information processing organization in order to process business by electronic registration.

As another example, in the case of registration of transfer of ownership, electronic signatures of the seller and the buyer are required.

If the security provider, etc. cannot perform the electronic signature even though an electronic signature is required, the financial business that causes the establishment of a root mortgage may not proceed. Alternatively, there may be inconvenience because the business is processed by written registration rather than electronic registration.

In order to solve this inconvenience, it is possible to delegate the task of electronic signature along with the delegation of writing and submission that occurs in the registration task to the person qualified for the registration task specified in the Real Estate Registration Act. A document arising from the registration business may be the subject document.

The electronic signature may be performed on the target document.

For example, the person authorized to delegate the registration work may be a lawyer or a lawyer.

A method of processing a task for a delegated electronic signature using a certificate will be described in detail with reference to FIGS. 1 to 10 below.

1 illustrates a certificate issuance and electronic signature delegation system according to an example.

Delegators wishing to delegate electronic signatures may visit the registrar's office. The delegator may use the registrar's agency for the financial affairs that are the cause of the electronic registration work. For example, the financial business may be a loan, and the electronic registration business may be the establishment, change, or cancellation of a root mortgage.

According to one aspect, the registrar may be a financial institution, such as a bank. The registration agency may be an agency acting on behalf of the registration of the certificate. For example, the certificate may be a public certificate. As another example, the certificate may be a certificate determined by an administrative agency or a judicial authority. The certificate may be used for electronic signatures.

If you intend to establish a mortgage right by using electronic registration, an electronic signature may be required for the target document required for electronic registration. For example, in the case of the establishment of a near-mortgage right, the target documents required for the electronic registration work may be a near-mortgage setting contract and a registration power of attorney.

The certificate can be used as an electronic signature on the target document used for establishing, changing or canceling the root mortgage when establishing, changing or canceling the root mortgage for the delegator.

At present, face-to-face verification for confirming the real face of a delegator is prescribed for a proxy application for certificate registration. The registration agency can confirm the face of the delegator and act on behalf of the application for certificate registration.

The registration agency may issue the certificate and electronic signature using the certificate through a legal representative. The legal representative may be a person who has been delegated authority for certificate issuance and electronic signature by the delegator.

The registration agency may operate the registration agency server 110 .

The server 120 may include an authorized certification authority server and an electronic registration server for issuing certificates. The server 120 is described in detail below with reference to FIGS. 2 to 4 .

Information may be transmitted and received between the server 120 and the registration agency server 110 through software or a web page.

The terminal 130 may be a terminal of a legal representative.

Information may be transmitted/received between the terminal 130 and the server 120 through software or a web page.

The server 120 may provide software to the registration agency server 110 and the terminal 130 . In the following description, it may be understood that the transmission and reception of information between the servers and the terminal is performed through software or a web page.

According to one aspect, the delegator may delegate the issuance of the certificate and the performance of the electronic signature to the registrar. This case will be described in detail below with reference to FIGS. 2 to 9 .

According to another aspect, the delegator may directly issue the certificate and delegate the performance of the electronic signature to a registration agency or a legal representative. When a delegator directly issues a certificate, the user electronic device 140 may be used. This case will be described in detail below with reference to FIG. 10 .

By transmitting the target document on which the electronic signature is performed to the Internet registry server 150, the electronic registration task may be performed. Internet registry server 150 may be operated by the Supreme Court.

2 shows a configuration diagram of a server according to an embodiment.

The server 120 may include an authorized certification authority server 210 and an electronic registration server 220 .

The public certification authority server 210 may be a server of an authority issuing a certificate.

The electronic registration server 220 may be a server of an institution that performs electronic registration.

The authorized certification authority server 210 and the electronic registration server 220 may be physically independent servers, respectively.

In one aspect, the accredited certification authority server 210 and the electronic registration server 220 may be operated by the same operating entity.

In another aspect, the authorized certification authority server 210 and the electronic registration server 220 may be operated by different operating entities.

The public certification authority server 210 is described in detail below with reference to FIG. 3 .

The electronic registration server 220 is described in detail below with reference to FIG. 4 .

3 is a block diagram of an accredited certification authority server according to an embodiment.

The authorized certification authority server 210 may include a communication unit 310 , a processing unit 320 , and a storage unit 330 .

The communication unit 310 may be connected to other servers and terminals.

The processing unit 320 may process information received by the communication unit 310 and information stored in the storage unit 330 .

The storage unit 330 may store information received by the communication unit 310 and information processed by the processing unit 320 .

The communication unit 310 , the processing unit 320 , and the storage unit 330 will be described in detail below with reference to FIGS. 5 to 10 .

Since the technical contents described above with reference to FIGS. 1 to 2 can be applied as they are, a more detailed description will be omitted below.

4 shows a configuration diagram of an electronic registration server according to an embodiment.

The electronic registration server 220 may include a communication unit 410 , a processing unit 420 , and a storage unit 430 .

The communication unit 410 may be connected to other servers and terminals.

The processing unit 420 may process information received by the communication unit 410 and information stored in the storage unit 430 .

The storage unit 430 may store information received by the communication unit 410 and information processed by the processing unit 420 .

The communication unit 410 , the processing unit 420 , and the storage unit 430 will be described in detail below with reference to FIGS. 5 to 10 .

Since the technical contents described above with reference to FIGS. 1 to 2 can be applied as they are, a more detailed description will be omitted below.

5 is a flowchart of a method of performing an electronic signature using an issued certificate according to an example.

The following steps 510 to 530 may be a method in which an electronic signature is performed on a target document required for an electronic registration business.

In step 510 , the accredited certification authority server 210 may issue an electronic signature power of attorney for delegation of the electronic signature at the request of the registration agency server 110 .

Step 510 is described in detail below with reference to FIG. 6 .

In step 520 , the public certification authority server 210 may issue a certificate. For example, the public certification authority server 210 may issue a public certificate. As another example, the authorized certification authority server 210 may issue a certificate determined by an administrative agency or a judicial authority.

Step 520 is described in detail below with reference to FIGS. 7 and 8 .

In step 530, the electronic registration server 220 and the terminal 130 may perform an electronic signature on the target document required for the electronic registration business.

Step 530 is described in detail below with reference to FIG. 9 .

Since the technical contents described above with reference to FIGS. 1 to 4 may be applied as they are, a more detailed description will be omitted below.

6 is a flowchart of a method for issuing an electronic signature power of attorney according to an example.

The above-described step 510 may include the following steps 610 to 690 .

In step 610, the registration agency server 110 may receive the information of the delegator.

For example, the delegator's information may include the delegator's name, address, resident registration number, phone number, and case number. The case number may be an identifier assigned for the delegator's financial business.

In step 620 , the registration agency server 110 may transmit information of the delegator to the authorized certification authority server 210 . For example, the registration agency server 110 may transmit the information of the delegator to the authorized certification authority server 210 by transmitting the information of the certificate application including the information of the delegator to the server 210 .

The communication unit 310 may receive the delegator's information from the registration agency server 110 .

In step 630 , the processing unit 320 may store the received delegator information.

In step 640 , the processing unit 320 may generate a reference number and an authorization code using the information of the delegator. The reference number and authorization code may be information required to obtain or generate a certificate. Reference numbers and authorization codes are disposable information and may not be reused. For example, reference numbers and authorization codes may be discarded if not used within 14 days.

The reference number and the authorization code may include content about restrictions on at least one of the use purpose, use range, and validity period of the certificate to be issued.

The processing unit 320 may generate an electronic signature power of attorney for delegation of an electronic signature including a reference number and an authorization code. For example, the generated electronic signature power of attorney may be an electronic file.

In step 650 , the communication unit 310 may output information about the electronic signature power of attorney to the registration agency server 110 . In other words, the communication unit 310 may transmit information about the electronic signature power of attorney to the registration agency server 110 .

In step 660 , the registrar authority server 110 may receive a delegator signature from the delegator. For example, the method of receiving the delegate's signature may be performed electronically using a touch screen, a touch pen, or the like. As another example, when the signature of the delegator is recorded in writing, the registration agency server 110 may receive information about the electronic signature power of attorney in which the signature of the delegator is recorded. The information of the electronic signature power of attorney in which the signature of the delegate is recorded may be data obtained by scanning the electronic signature power of attorney.

In step 670 , the registrar server 110 may generate an electronic signature power of attorney in which the delegate's signature is sealed by receiving the delegate's signature.

In step 680 , the registration agency server 110 may transmit the generated electronic signature power of attorney to the electronic registration server 220 .

The communication unit 410 may receive the electronic signature power of attorney from the registration agency server 110 .

In step 690 , the processing unit 420 may store the received electronic signature power of attorney in the storage unit 430 .

Through the above steps 610 to 690, the above-described step 510 may be performed. That is, through steps 610 to 690, a power of attorney for the electronic signature may be issued.

Since the technical contents described above with reference to FIGS. 1 to 5 can be applied as they are, a more detailed description will be omitted below.

7 is a flowchart of a method for issuing a certificate according to an embodiment.

Step 520 described above may be performed after step 690 is performed.

Step 520 may include the following steps 710 and 760 .

In step 710 , the terminal 130 may receive an electronic signature power of attorney. For example, the terminal 130 may receive the electronic signature power of attorney from the electronic registration server 220 .

Before step 710 is performed, the terminal 130 may request an inquiry of the generated event to the electronic registration server 220 . The electronic signature power of attorney may be transmitted to the terminal 130 by inquiring the event by the terminal 130 .

When the inquiry is requested, the processing unit 420 may generate a list of generated events. The communication unit 410 may transmit the generated list to the terminal 130 .

The terminal 130 may select an event for which a certificate is to be issued from among the list of events.

According to one aspect, after an event for which a certificate is to be issued is selected, step 720 may be performed.

In step 720, the terminal 130 may receive a reference number and authorization code required for issuing a certificate. For example, the terminal 130 may receive a reference number and an authorization code from a user of the terminal 130 , that is, an authorized person.

In step 730 , the terminal 130 may transmit a reference number and an authorization code to the authorized certification authority server 210 .

The communication unit 310 may receive a reference number and an authorization code from the terminal 130 .

The received reference number and authorization code may be the same as the reference number and authorization code generated in step 640 .

Additionally, the communication unit 310 may receive a password for the certificate to be generated from the terminal 130 .

In step 740 , the processing unit 320 may verify the validity of the reference number and the authorization code. When the validity of the reference number and the authorization code is verified, the processing unit 320 may generate a certificate using the reference number and the authorization code. For example, the certificate may be a public certificate. As another example, the certificate may be a certificate determined by an administrative agency or a judicial authority.

The generated certificate may include information about a password.

The generated certificate may be limited in at least one of usage purpose, usage range, and validity period. For example, the certificate may be limited to use information.

Since the use of the certificate can be restricted by specifying the case, the digital signature can be safely processed by the legal representative within the scope delegated by the delegator.

In step 750 , the communication unit 310 may output the generated certificate to the terminal 130 . For example, the communication unit 310 may output the certificate by storing the certificate in the terminal 130 .

In step 760 , the processing unit 320 may store the certificate in a predetermined location in the storage space of the terminal 130 . A predetermined location in the storage space may be a location different from a location in which the standard public certificate is stored. For example, the location for storing the standard public certificate may be a location designated by PKCS #12. When the location designated by PKCS #12 is a standard location, the predetermined location may be a non-standard location.

The predetermined location may not be known to the user of the terminal 130 . In other words, the certificate may be hidden in the terminal 130 .

The certificate stored in the terminal 130 may be encrypted. Encryption may be performed according to PKCS #1.

For example, the usage information of the certificate may be set as a key for decryption. As another example, information or an event number of at least one target document for the certificate may be set as a key for decryption.

The usage information of the certificate may be an event that causes a digital signature to be required. For example, the usage information may be a near-mortgage right setting.

In step 760, the terminal 130 may store the certificate.

Since the technical contents described above with reference to FIGS. 1 to 6 can be applied as it is, a more detailed description will be omitted below.

8 is a flowchart of a method of storing information on a target document according to an example.

The following steps 810 to 840 may be performed in parallel with steps 510 and 520 described above.

In step 810, according to an aspect, the terminal 130 may generate information on at least one target document required for the electronic registration task. That is, at least one target document may be used for electronic registration work. For example, when the electronic registration task is to establish a near-mortgage right, at least one target document may be a near-mortgage setting contract and a registration power of attorney. The information on the at least one target document may be an electronic file. For example, the electronic file may be in PDF format.

The terminal 130 may assign an identifier to at least one target document for identification of a corresponding electronic registration task. For example, the assigned identifier may be an event number.

In step 820 , the terminal 130 may transmit information on at least one target document to the electronic registration server 220 . For example, step 820 may be a step of requesting the electronic registration server 220 to generate an event for applying for electronic registration.

The communication unit 410 may receive information of at least one target document from the terminal 130 .

In operation 830, the processing unit 420 may encrypt and store information of at least one target document. For example, the processing unit 420 may store information of at least one target document by listing each event using the storage unit 430 . The processing unit 420 may store information of at least one target document by using an identifier assigned to identify the electronic registration business.

The storage unit 430 may be a database.

For example, step 830 may be a step of generating the requested electronic registration event.

After step 830 is performed, steps 710 to 740 described above may be performed.

In operation 840, the processing unit 420 may correlate the certificate and the information of at least one target document with each other.

Before step 840 is performed, the communication unit 410 may receive information about the certificate from the terminal 130 .

Since the technical contents described above with reference to FIGS. 1 to 7 can be applied as they are, a more detailed description will be omitted below.

9 is a flowchart of a method of performing an electronic signature according to an example.

The above-described step 530 may include the following steps 910 to 960 .

Step 910 may be performed after step 840 is performed.

In step 910 , the terminal 130 may transmit a request for an electronic signature for at least one target document to the electronic registration server 220 . For example, when the terminal 130 is reading an event generated in the electronic registration server 220, selects at least one target document included in the read event, and electronically sends a request for an electronic signature for the selected target document You can request it to the registration server 220 .

The communication unit 410 may receive a request for an electronic signature for at least one target document from the terminal 130 .

In operation 920 , the communication unit 410 may provide information on at least one target document to the terminal 130 when receiving a request for an electronic signature.

Information on at least one target document provided to the terminal 130 may be provided to the volatile memory of the terminal 130 . Information of at least one target document may not be provided to the non-volatile memory of the terminal 130 . That is, information on at least one target document may be temporarily provided to the terminal 130 to perform an electronic signature.

According to one aspect, the communication unit 410 may provide information on at least one target document to the terminal 130 as a byte array stream.

Information on at least one target document provided to the terminal 130 may be provided as an object of a byte array in the volatile memory of the terminal 130 .

In step 930 , the communication unit 410 may control the terminal 130 to display a certificate output to the terminal 130 , associated with information of at least one target document. For example, the communication unit 410 may control the terminal 130 so that the user of the terminal 130 can select the certificate by displaying the certificate stored in a predetermined location (non-standard location) on the terminal 130 .

According to an aspect, the information and the certificate of the at least one target document may be related based on an Object IDentifier (OID). For example, the OID value set for the task of setting the root mortgage may be related to each other by being equally included in the information and the certificate of at least one target document.

When the certificate is encrypted and stored in the terminal 130 , the certificate may be decrypted and displayed on the terminal 130 . For example, the decryption key may be information and an event number of at least one target document.

In step 940 , the terminal 130 may perform an electronic signature. For example, the terminal 130 may perform an electronic signature on at least one target document by receiving a password for a certificate displayed on the terminal 130 from a user of the terminal 130 .

The terminal 130 may compare the received password with the password included in the certificate.

The terminal 130 may determine whether the received password matches the password of the certificate. If the passwords match, an electronic signature may be performed.

According to one aspect, the terminal 130 may inquire whether the certificate is valid to the public certification authority server 210 .

The communication unit 310 may receive a query of whether the certificate is valid from the terminal 130 . The processing unit 320 may determine whether the certificate stored in the terminal 130 is valid. The communication unit 310 may transmit whether the certificate is valid to the terminal 130 .

The terminal 130 may perform electronic signature when the certificate is valid.

The terminal 130 may generate information on at least one target document on which the electronic signature is performed. Information on at least one target document on which the electronic signature is performed may be an electronic file. For example, the electronic file may be in a format with an extension of SIG.

According to one aspect, the terminal 130 may generate information on at least one target document on which the electronic signature is performed in the volatile memory. For example, the terminal 130 may generate information on at least one target document on which the digital signature is performed as a byte array stream.

In step 950 , the terminal 130 may transmit information on at least one target document on which the electronic signature is performed to the Internet registry server 150 . For example, the terminal 130 may transmit information of at least one document on which the electronic signature is performed to the Internet registry server 150 as a byte array stream.

In steps 920 and 950 , since the information of the at least one target document and the information of the at least one target document on which the electronic signature is performed are processed in the volatile memory, the security of the electronic signature may be increased.

The Internet registry server 150 may receive information of at least one target document on which the electronic signature is performed from the terminal 130 .

In step 960, the Internet registry server 150 may store information of at least one target document on which the electronic signature is performed.

As a result, the electronic registration server 220 may transmit information of at least one target document on which the electronic signature is performed via the terminal 130 to the Internet registry server 150 through steps 910 to 950 .

According to one aspect, the communication unit 410 may execute a web browser of the terminal 130 and transmit information on at least one target document on which an electronic signature is performed through the executed web browser to the Internet registry server 150 . .

After the electronic signature is completed, the processing unit 320 may encrypt the certificate stored in the terminal 130 and store it in the terminal 130 .

After the electronic signature is completed, there may be a case in which the terminal 130 needs to reuse the corresponding certificate due to a change in the loan amount of the delegator or a correction request from the registration authority. In this case, the communication unit 310 may receive an agreement for reusing the certificate from the registration agency server 110 . When the communication unit 310 receives the consent from the registration agency server 110 , the processing unit 320 may change the settings for the certificate so that the terminal 130 can reuse the certificate. For example, the processing unit 320 may release the encryption set in the certificate so that the terminal 130 can reuse the certificate.

Since the technical contents described above with reference to FIGS. 1 to 8 can be applied as they are, a more detailed description will be omitted below.

10 is a flowchart of a method in which a delegator issues a certificate and delegates an electronic signature.

The following steps 1010 to 1050 may correspond to the above-described step 520 . Steps 1010 to 1050 may be a method in which a delegator directly issues a certificate, not a method in which a registration agency issues a certificate on behalf of the registration agency.

Step 1010 may be performed after the aforementioned step 660 is performed.

In step 1010 , the user electronic device 140 may receive a reference number and an authorization code. The user electronic device 140 may be a terminal used by a delegator.

According to an aspect, the user electronic device 140 may receive a reference number and an authorization code from the registration agency server 110 .

According to another aspect, the user electronic device 140 may receive a reference number and an authorization code from a delegator.

The user electronic device 140 may transmit the received reference number and authorization code to the authorized certification authority server 210 .

Additionally, the user electronic device 140 may transmit information or an event number of an authorized person to whom the electronic signature is delegated to the authorized certification authority server 210 for the purpose of delegated the electronic signature.

The communication unit 310 may receive a reference number and an authorization code from the user electronic device 140 .

Additionally, the communication unit 310 may receive information of an authorized person or an event number from the user electronic device 140 .

When receiving the information or the case number of the authorized person, the processing unit 420 may set that the electronic signature for at least one target document is delegated to the authorized person.

In step 1020 , the processing unit 320 may generate a certificate using a reference number and an authorization code.

Step 1020 may correspond to step 740 described above. That is, the description of step 740 may be replaced with the description of step 1020 .

In operation 1030 , the communication unit 310 may output the certificate to the user electronic device 140 .

The user electronic device 140 may receive the certificate from the public certification authority server 210 .

In operation 1040 , the user electronic device 140 may encrypt the certificate.

In operation 1050 , the user electronic device 140 may transmit the encrypted certificate to the electronic registration server 220 . The communication unit 410 may receive an encrypted certificate from the user electronic device 140 .

In operation 1060 , the processing unit 420 may store the encrypted certificate in the storage unit 430 .

After step 1060 is performed, step 710 described above may be performed.

As steps 710 to 750 are performed, a certificate may be output to the terminal 130 .

Since the technical contents described above with reference to FIGS. 1 to 9 may be applied as they are, a more detailed description will be omitted below.

The device described above may be implemented as a hardware component, a software component, and/or a combination of the hardware component and the software component. For example, devices and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA), It may be implemented using one or more general purpose or special purpose computers, such as a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that can include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

As described above, although the embodiments have been described with reference to the limited embodiments and drawings, various modifications and variations are possible from the above description by those skilled in the art. For example, the described techniques are performed in a different order than the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

110: registrar server
120: server
130: terminal
140: user electronic device
150: Internet registry server
210: Authorized Certificate Authority Server
220: electronic registration server

Claims (21)

In the certificate issuance method performed by a server that issues a certificate for electronic signature,
Receiving information of a delegator for delegation of electronic signatures from a registrar server;
Generating a reference number and an authorization code for issuance of a certificate based on the information of the delegator - The reference number and the authorization code are disposable information and cannot be reused, and the reference number and the authorization code are set within a preset period Discarded if not used -;
outputting information about an electronic signature power of attorney for delegation of the electronic signature including the reference number and the authorization code to the registration agency server;
receiving the electronic signature power of attorney signed by the delegator from the registration agency server;
transmitting the electronic signature power of attorney to the terminal by requesting an inquiry of an event related to the issuance of the certificate from a terminal different from the registration agency server;
requesting information necessary for issuance of the certificate to the terminal when the event is selected by the terminal;
receiving the reference number and the authorization code as information necessary for issuance of the certificate from the terminal;
issuing the certificate based on the reference number and the authorization code received from the terminal, wherein the certificate is set to be usable only for the electronic signature of the event; and
outputting the certificate to the terminal by storing the issued certificate in a predetermined location in the storage space of the terminal
including,
The predetermined location is a location different from the location for storing the standard public certificate,
The stored certificate is encrypted, and the number of events for the certificate is set as a key of decryption for the certificate,
How to issue a certificate.
delete According to claim 1,
The certificate is used as the electronic signature for the target document used for establishing, changing or canceling the root mortgage when establishing, changing or canceling the root mortgage for the delegator,
How to issue a certificate.
According to claim 1,
Receiving the reference number and authorization code from the terminal comprises:
Receiving a password for the certificate from the terminal
further comprising,
The issued certificate includes information about the password,
How to issue a certificate.
delete delete delete Receiving information of at least one target document from a terminal of an agent of the delegation, wherein the at least one target document is used for electronic registration;
storing information on the received at least one target document;
Receiving information on the electronic signature power of attorney for delegation of the electronic signature from the registrar server, wherein the information on the electronic signature power of attorney includes a reference number and an authorization code used to issue a certificate used for electronic signature, The reference number and the authorization code are disposable information and cannot be reused, and are discarded when the reference number and the authorization code are not used within a preset period;
transmitting information on the electronic signature power of attorney to the terminal;
associating information on the at least one target document and information on the certificate issued to the terminal;
receiving a request for an electronic signature for the at least one target document from the terminal; and
providing information on the at least one target document to the terminal
including,
The electronic signature is performed using the certificate stored in the terminal for the at least one target document provided to the terminal,
The certificate is set to be usable only for the electronic signature of the target document,
How to delegate electronic signatures.
delete 9. The method of claim 8,
controlling the terminal so that the certificate associated with the information of the target document is displayed on the terminal
further comprising,
How to delegate electronic signatures.
9. The method of claim 8,
The step of providing the information of the at least one target document to the terminal comprises:
providing information on the at least one target document to a volatile memory of the terminal
containing,
How to delegate electronic signatures.
12. The method of claim 11,
the information of the at least one target document is provided to the volatile memory as a byte array stream;
How to delegate electronic signatures.
delete delete 9. The method of claim 8,
The associating step is
Associating the information on the at least one target document and the information on the certificate based on an Object IDentifier (OID) included in the information on the at least one target document and the information on the certificate, respectively
containing,
How to delegate electronic signatures.
delete 9. The method of claim 8,
controlling the terminal so that information on at least one target document on which the electronic signature is performed is transmitted to an Internet registry server
further comprising,
How to delegate electronic signatures.
Claims 1, 3, 4, 8, Claim 10, Claim 11, Claim 12, Claim 15, and Claim 17, a computer-readable program containing any one of the method possible recording medium.
The server that issues the certificate,
a memory in which a program for issuing a certificate is recorded; and
a processor that executes the program
including,
The program is
Receiving information of a delegator for delegation of electronic signatures from a registrar server;
generating a reference number and an authorization code for issuance of a certificate based on the information of the delegator;
outputting information about an electronic signature power of attorney for delegation of the electronic signature including the reference number and the authorization code to the registration agency server;
receiving the electronic signature power of attorney signed by the delegator from the registration agency server;
transmitting the electronic signature power of attorney to the terminal by requesting an inquiry of an event related to the issuance of the certificate from a terminal different from the registration agency server;
requesting information necessary for issuance of the certificate to the terminal when the event is selected by the terminal;
Receiving the reference number and the authorization code as information necessary for issuance of the certificate from the terminal - The reference number and the authorization code are disposable information and cannot be reused, and the reference number and the authorization code are preset Discarded if not used within the period -;
issuing the certificate based on the reference number and the authorization code received from the terminal, wherein the certificate is set to be usable only for the electronic signature of the event; and
outputting the certificate to the terminal by storing the issued certificate in a predetermined location in the storage space of the terminal
do,
The predetermined location is a location different from the location for storing the standard public certificate,
The stored certificate is encrypted, and the number of events for the certificate is set as a key of decryption for the certificate,
Certificate issuing server.
Electronic registration server,
a memory in which a program for performing an electronic signature is recorded; and
a processor that executes the program
including,
The program is
Receiving information of at least one target document from a terminal of an agent of the delegation, wherein the at least one target document is used for electronic registration;
storing information on the received at least one target document;
Receiving information on the electronic signature power of attorney for delegation of the electronic signature from the registrar server, wherein the information on the electronic signature power of attorney includes a reference number and an authorization code used to issue a certificate used for electronic signature, The reference number and the authorization code are disposable information and cannot be reused, and are discarded when the reference number and the authorization code are not used within a preset period;
transmitting information on the electronic signature power of attorney to the terminal;
associating information on the at least one target document and information on the certificate issued to the terminal;
receiving a request for an electronic signature for the at least one target document from the terminal; and
providing information on the at least one target document to the terminal
do,
The electronic signature is performed using the certificate stored in the terminal for the at least one target document provided to the terminal,
The certificate is set to be usable only for the electronic signature of the target document,
Electronic Register Server. delete

Images