TW201528038A - Cloud electronic notary service method and system thereof - Google Patents

Abstract

This invention provides a cloud electronic notary service method and a system thereof, running third party electronic notary service on a cloud platform, offering multi-user sequentially combining electronic documents with time-stamp information and signature information to create electronic receipt information, so as to achieve third-party electronic notary service, and ensure the electronic documents authenticity, integrality and nonrepudiation and security, and the document retrieval unique identification and verifiability.

Description

Cloud electronic notary service method and system thereof

The invention relates to an electronic notarization technology, in particular to a cloud electronic notarization service method and system thereof.

Electronic documents are words and graphics generated by computers and transmitted over the Internet, such as transaction contracts, government documents, etc. Electronic documents can be regarded as the basis of e-government and e-commerce. The electronic signature is a confirmation process for electronic documents with electronic seals. Since electronic documents and electronic signatures are in electronic form, the integrity of electronic documents and the non-repudiation of electronic signatures are electronic signatures. One of the important elements of system security.

However, most of the current electronic signature systems only have the backup function of electronic files and the depositing function using electronic signatures. For the more complicated third-party notarization functions, technical breakthroughs or poor results are often impossible, resulting in failure to ensure electronic The integrity of the documents and the non-repudiation and security of electronic signatures, and the lack of efficient and verifiable access to electronic documents, resulting in the inability to further promote e-government and e-commerce. the reason.

An object of the present invention is to provide a cloud electronic notarization service method and system thereof, which can provide electronic notarization services of third parties and ensure the authenticity of electronic documents. Non-repudiation with integrity and electronic signature, and unique identification and verification of electronic receipts.

The invention provides a cloud electronic notarization service method, which is applied to a cloud electronic notarization service system having a cloud platform and first, second and third user devices, and the cloud electronic notarization service method comprises the following steps: (1) making the first The user device combines the original electronic file with the first time stamp information to perform the signature operation to generate the first signature information, and then combines the original electronic document with the first signature information to generate the first electronic file, and transmits the first electronic file. The file is sent to the cloud platform; (2) the second user device receives the first electronic file from the cloud platform, and combines the first electronic file with the second time stamp information to perform the signature operation to generate the second signature information, and then An electronic file is combined with the second signature information to generate a second electronic file, and the second electronic file is transmitted to the cloud platform; (3) the third user device receives the second electronic file from the cloud platform, and combines the second electronic file The third time stamp information is used to generate the third signature information by performing the signature operation, and then combining the second electronic document with the third signature information to generate the third electronic document. Transmitting the third electronic file to the cloud platform; (4) processing the cloud platform in combination with the computing feature information and the third electronic file to generate the intermediary data; and (5) enabling the cloud platform to encrypt and hash the intermediary data to Generate electronic receipt information.

In addition, the present invention further provides a cloud electronic notarization service system, which comprises: a plurality of user devices; a cloud platform, comprising a storage module and a processing module, wherein the storage module is used for storing and transmitting by a plurality of user devices. a plurality of electronic files, a plurality of signature information, and a plurality of time stamp information, and the processing module is configured to process one of the plurality of electronic files (such as the third electronic file) by combining the operation feature information. To generate mediation data, and then encrypt and hash the mediation data to generate electronic receipt information. After that, the electronic receipt information can be accessed through the mode. After the group is verified, a plurality of electronic files (such as first, second, third electronic files, etc.) are accessed.

Compared with the prior art, the present invention combines signature information and time stamp information and provides electronic receipt information to provide an impartial third party electronic notarization service, and overcomes the problem of the lack of impartiality prevailing in the current electronic signature system. It ensures the authenticity and integrity of electronic documents and the non-repudiation of deposits, as well as the verifiability and uniqueness of accessing original documents through electronic receipts.

1‧‧‧Cloud Electronic Notary Service System

10‧‧‧Cloud Platform

12‧‧‧ Storage Module

14‧‧‧Processing module

16‧‧‧Review module

20‧‧‧First user device

30‧‧‧Second user device

40‧‧‧ third user device

Steps S201 to S213, S401 to S411‧‧

1 is a schematic diagram of the architecture of the cloud electronic notarization service system of the present invention; FIG. 2 is a flow chart of steps for generating electronic receipt information in the cloud electronic notarization service method of the present invention; and FIG. 3 is an intermediary material of the present invention. The composition field; and the fourth figure is a flow chart of the steps of accessing the electronic file in the cloud electronic notarization service method of the present invention.

The other embodiments of the present invention will be readily understood by those skilled in the art from this disclosure. Or application.

Please refer to FIG. 1 , which is a schematic diagram of the architecture of the cloud electronic notarization service system 1 of the present invention, including a cloud platform 10 and a plurality of user devices (eg, first user device 20, second user device 30, and third user device 40). The first, second, and third user devices 20, 30, and 40 can be, for example, a personal computer, a tablet computer, or a smart phone, and the like, and can be wired or wireless. The communication mode is logged into the cloud platform 10 to perform related operations, and the cloud of the present invention The platform 10 mainly includes a storage module 12, a processing module 14, and a review module 16, and the cloud platform 10 can be implemented, for example, using a HDFS (Hadoop Distributed File System), wherein due to the characteristics of the distributed system architecture, The above modules can be deployed on different physical devices according to actual needs. However, the above modules can also be deployed on the same physical device. In addition, the number of the first user device 20, the second user device 30, and the third user device 40 is merely an illustration, and the actual number may be one or more.

The storage module 12 is configured to store a plurality of electronic files transmitted by a plurality of user devices, a plurality of time stamp information, a plurality of signature information, and the like.

The processing module 14 is configured to process an electronic file (such as a third electronic file) of the plurality of electronic files by combining the operation feature information to generate the intermediate data, and then encrypt and hash the intermediate data to generate Electronic receipt information. In addition, the processing module 14 further writes the electronic receipt information into the intermediary data to perform the signature operation on the written intermediary data, and generates the receipt signature information to confirm whether the intermediary data has been changed.

The reading module 16 is configured to process the written intermediaries for reading the plurality of electronic files from the storage module, and by using the electronic receipt information, after verifying that the electronic receipt information is correct, The plurality of electronic files (such as the first, second, third electronic files, etc.) corresponding to the electronic receipt information are accessed.

Please refer to FIG. 2 , which is a flow chart of steps for generating electronic receipt information in the cloud electronic notarization service method of the present invention, wherein the cloud electronic notarization service method of the present invention is applied to the cloud platform and the cloud platform as described in FIG. 1 . Cloud electronic notarization service system for first, second and third user devices.

First, step S201 is performed to enable the first user device to combine the original electronic file M. The first timestamp information, wherein the first timestamp information is time information provided by the cloud platform when the first user device confirms that the original electronic file M is correct, and then the time information is provided by the cloud platform, and then proceeds to step S202.

In step S202, the first user device performs a hash operation on the original electronic file M combined with the first time stamp information, and adds a first private key to perform a signature operation (such as PKI technology). A signature information is passed, and then proceeds to step S203.

In step S203, the first user device is caused to combine the original electronic file M with the first signature information to generate a first electronic file M1, and the first time stamp information, the first signature information, the original The electronic file M and the first electronic file M1 are stored in the cloud platform, thereby serving as a backup and deposit certificate, and then proceeding to step S204.

In addition, the plurality of first user devices may repeat the above steps to sequentially generate each electronic file, and finally the first electronic file M1.

In step S204, the second user device receives the first electronic file M1 from the cloud platform, and combines the first electronic file M1 with the second time stamp information, wherein the second time stamp information is the second user. After the second user device confirms that the first electronic file M1 (including the original electronic file M and the first signature information) is correct, the time information provided by the cloud platform at the time of signing is performed, and then proceeds to step S205.

In step S205, the second user device performs a hash operation on the first electronic file M1 combined with the second time stamp information, and adds a second private key to perform a signature operation (such as PKI technology). The second signature information is passed to step S206.

In step S206, the second user device combines the first electronic file M1 with the second signature information to generate a second electronic file M2, and the second time stamp information, the second signature information, the The second electronic file M2 is stored in the cloud platform, and then proceeds to step S207.

In addition, the plurality of second user devices may repeat the above steps to sequentially generate each electronic file, and finally the second electronic file M2.

In step S207, the third user device receives the second electronic file M2 from the cloud platform, and combines the second electronic file M2 with the third timestamp information, wherein the third timestamp information is the third user (notarization) After the third user device confirms that the second electronic file M2 (including the original electronic document M, the first signature information, and the second signature information) is correct, the time information provided by the cloud platform at the time of signing is performed, and then proceeds. Go to step S208.

In step S208, the third user device performs a hash operation on the second electronic file M2 combined with the third time stamp information, and adds a third private key to perform a signature operation (such as PKI technology). The third signature information is passed to step S209.

In step S209, the third user device combines the second electronic file M2 with the third signature information to generate a third electronic file M3, and the third time stamp information, the third signature information, the first The three electronic file M3 is stored in the cloud platform for notarization, and then proceeds to step S210.

In addition, the plurality of third user devices may repeat the above steps to sequentially generate each electronic file, and finally the third electronic file M3.

In step S210, the cloud platform is processed in combination with the operation feature information and the third electronic file M3 to generate mediation data (Metadata), and then proceeds to step S211.

In step S211, the cloud platform encrypts and hashes the mediation data to generate electronic receipt information, and transmits the electronic receipt information to the first, second, and third user devices, and then proceeds to the step. S212.

In step S212, the cloud platform is caused to write the electronic receipt information into the intermediary. The data proceeds to step S213.

In step S213, the cloud platform causes the written intermediary data to perform a signature operation (such as PKI technology) to generate receipt signature information.

Please refer to FIG. 3, which is a component field of the intermediary material of the present invention, wherein the Doc ID field is a file number generated by the cloud platform; the original file name field is The file name of the original electronic file M; the file block Id list field is the identification code list table of the block in which the third electronic file M3 is sequentially stored, because in a distributed environment The third electronic file M3 can be divided into a plurality of blocks and stored on different servers, so the cloud platform must record the identification code of each block of the third electronic file M3 (that is, the above-mentioned operation feature information). In the future, it can be reorganized back to the third electronic file M3; the selected file content offset byte field is the offset byte value of the selected file content; the file hash value (Doc The Hash Value field is the hash value of the file; the Timestamp Value list field is the first timestamp information (TS1)/second timestamp information (TS2)/third timestamp information. (TS3); Random Number column Value is based disorder; electronic receipt value (Electronic Receipt Value) is a field-based electronic receipt information (described in detail below).

In the above step S211, the cloud platform hashes the content of the file block identifier list field (that is, the above-mentioned operation feature information) in the composition field of the mediation data to generate a hash value and time stamp. The content of the value list field is hashed to generate a hash value, and then the content of the selected file content offset byte field is combined with the content of the random field to generate a combined information, thereby ensuring identification of the intermediary data. Sex and safety.

After that, the combined information is encrypted (such as Base64 Encoding) to The electronic receipt information is generated, and then in step S212, the electronic receipt information is written into the electronic receipt value field in the intermediary data, and finally, in step S213, the written intermediate data is signed (eg, PKI technology). To generate the receipt signature information, and transmit the receipt signature information to the remote server to store the receipt signature information, to ensure the integrity of the intermediary information and will not be changed.

Please refer to FIG. 4 , which is a flow chart of steps for accessing an electronic file in the cloud electronic notarization service method of the present invention, that is, the above-mentioned written intermediate data is processed in the following steps, and is sequentially accessed from the cloud platform. Third, second, first and original electronic documents.

First, in step S401, when the electronic file is to be accessed, the electronic receipt information provided by any of the first, the second, and the third user devices is first decrypted and transmitted to the cloud platform for searching for the intermediary data. If the intermediary information having the electronic receipt information is found, it means that the intermediary information exists, and then proceeds to step S403; if the intermediary information having the electronic receipt information is not found, the electronic receipt information may be forged. Therefore, the following steps are not performed. Since the electronic receipt information component includes user terminal file feature information and platform-side computing feature information and random numbers, the content is quite complicated, so it is difficult to forge the correct electronic receipt information, so it can be used as the flexibility under the authority control of the cloud platform. Security control mechanism.

In step S403, the cloud platform performs a signature operation (such as PKI technology) on the intermediary data to compare with the receipt signature information stored in the remote server to determine whether the intermediary data has been changed. If it has not been changed, it proceeds to step S405, whereas the following steps are not performed.

In step S405, the cloud platform hashes the content of the file block identifier list field in the mediation data to generate a hash value, and the time stamp value list column The content of the bit is hashed to generate a hash value, and then the content of the selected file content offset byte field is combined with the content of the random field to generate a combined information, and then decrypted with the electronic receipt information. The combination information is compared. If the content is correct, the cloud platform provides the third electronic file M3 to the third user, and then proceeds to step S407, otherwise the following steps are not performed.

In step S407, the third electronic file M3 is decrypted by using the third public key, and the second electronic file M2 provided by the third user device is combined with the third time stamp information to perform a hash operation to determine the content after the hash operation. Whether it matches. Since the second electronic file M2 has not been changed and the operation of the third time stamp information is also performed, the integrity and non-repudiation of the second electronic file M2 can be confirmed, and then the process proceeds to step S409.

Further, in the case of having a plurality of third user devices, the above steps may be repeated to sequentially determine related content and electronic files.

In step S409, the second electronic file M2 is decrypted by using the second public key, and the first electronic file M1 provided by the second user device is combined with the second time stamp information to perform a hash operation to determine the content after the hash operation. Whether it matches. Since the first electronic file M1 has not been changed and the operation of the second time stamp information is also performed, the integrity and non-repudiation of the first electronic file M1 can be confirmed, and then the process proceeds to step S411.

Further, in the case of having a plurality of second user devices, the above steps may be repeated to sequentially determine related content and electronic files.

In step S411, the first electronic file M1 is decrypted by using the first public key, and the original electronic file M provided by the first user device is combined with the first time stamp information to perform a hash operation to determine whether the content after the hash operation is performed. Match. Since the original electronic file M has not been changed and the operation of the first time stamp information is also performed, the integrity and non-repudiation of the original electronic file M can be confirmed.

Further, in the case of having a plurality of first user devices, the above steps may be repeated to sequentially determine related content and electronic files.

In summary, the cloud electronic notarization service method and system thereof of the present invention store and manage notarized electronic files by using the cloud platform, so the user does not need to provide storage space. In addition, the notarization mechanism of the present invention adopts multiple parties (both sides of the user) And the third party of notarization) the combination of electronic signature and time stamp information with the contents of notarized electronic documents to provide third party electronic notary services, thus ensuring the authenticity and integrity of electronic documents and the non-repudiation of electronic signatures To solve the problem of the lack of impartiality in the current electronic signature system; in addition, the electronic receipt also provides a unique identification and verifiable access method, and also solves the current lack of efficient and secure access to the depository system. problem.

However, the above-described embodiments are intended to exemplify the principles of the invention and its effects, and are not intended to limit the invention. Any of the above-described embodiments may be modified by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of protection of the present invention should be as set forth in the scope of the patent application.

S201 to S213‧‧‧ steps

Claims (13)

A cloud electronic notarization service method is applied to a cloud electronic notarization service system having a cloud platform and first, second, and third user devices, and the cloud electronic notarization service method includes the following steps: (1) making the first user device Combining the original electronic file with the first time stamp information, performing the signature operation to generate the first signature information, and then combining the original electronic document with the first signature information to generate the first electronic file, and transmitting the first The electronic file is sent to the cloud platform; (2) the second user device receives the first electronic file from the cloud platform, and combines the first electronic file with the second time stamp information to perform a signature operation to generate a second signature Chapter information, combining the first electronic file with the second signature information to generate a second electronic file, and transmitting the second electronic file to the cloud platform; (3) making the third user device from the cloud platform Receiving the second electronic file, combining the second electronic file with the third time stamp information, performing a signature operation to generate a third signature information, and combining the second electronic file with the third signature Information to generate a third electronic file, serve to transmit the electronic document to the third internet cloud; (4) enabling the binding cloud computing platform wherein the third information and the electronic document is processed to generate an intermediary information. (5) causing the cloud platform to encrypt and hash the mediation data to generate electronic receipt information. For example, the cloud electronic notarization service method described in claim 1 includes the following steps: (6) causing the cloud platform to write the electronic receipt information into the intermediary data; (7) causing the cloud platform to perform the signature operation on the written intermediary data to generate the receipt signature information. For example, the cloud electronic notarization service method described in claim 2 includes the following steps: (8) processing the written intermediary data to sequentially access the third and second from the cloud platform. First, the original electronic file. The cloud electronic notarization service method of claim 2, wherein the receipt signature information is transmitted to a remote server to store the receipt signature information. For example, the cloud electronic notarization service method described in claim 1 is characterized in that the signature operation is a PKI technology. The cloud electronic notarization service method as described in claim 1, wherein the composition field of the intermediary data includes a file block identification list field, a selected file content offset byte group field, and a time stamp value list. a field, a random number field, and an electronic receipt value field, and the electronic receipt information includes a hash value of the content of the file block identification list field, a hash value of the content of the time stamp value list field, and the selection The combination of the content of the file content offset byte field and the content of the random number field. The cloud electronic notarization service method according to claim 1, wherein the first user device is a plurality of first user devices, and step (1) is repeated to sequentially generate each electronic file, and finally the first An electronic file. The cloud electronic notarization service method according to claim 1, wherein the second user device is a plurality of second user devices, and step (2) is repeated to sequentially generate each electronic file, and finally the first Two electronic files. For example, the cloud electronic notarization service method described in claim 1 of the patent scope, wherein The third user device is a plurality of third user devices, and step (3) is repeated to sequentially generate each electronic file, and finally the third electronic file. A cloud electronic notarization service system includes: a plurality of user devices; and a cloud platform, comprising: a storage module, configured to store a plurality of electronic files, a plurality of signature information, and plural numbers transmitted by the plurality of user devices; The time stamp information; the processing module is configured to process one of the plurality of electronic files by combining the feature information to generate the intermediary data, and then encrypt and hash the media data to generate the electronic Receipt information. The cloud electronic notarization service system according to claim 10, wherein the processing module writes the electronic receipt information into the intermediary data, and performs the signature operation on the written intermediary data, and generates Receipt signature information. The cloud electronic notarization service system of claim 11, wherein the cloud platform comprises a review module for processing the written intermediate data for reading from the storage module. The plurality of electronic files, or the electronic receipt information, are used to read the plurality of electronic files after verifying that the electronic receipt information is correct. For example, the cloud electronic notarization service system described in claim 10, wherein the cloud platform is implemented using HDFS.