TW202321957A - Electronic credential authentication method and system thereof including a touch screen, an image capture module, and a processor - Google Patents

Abstract

The present invention provides an electronic credential authentication system for generating a credential data file, which includes a touch screen for displaying a credential image, a signature track set and a real-time image set, an image capture module, and a processor. The touch screen is further configured to acquire at least one signature message for generating the signature track set. The image capture module is configured to acquire at least one set of image information for generating the real-time image set. The processor is configured to combine the signature trace set, the credential image, and the real-time image set with an original data file in order to generate the credential data file. As such, through the signature track set and real-time image set of all authorized persons, an official seal of a representative agency, a school, or an institution is confirmed to be indeed used in the credential data file, thereby improving the reliability and authenticity of the credential data file.

Description

Authentication method and system for electronic credential

The present invention relates to an electronic credential, in particular to an electronic credential authentication method and system thereof.

Taking the invention patent case of the Republic of China Patent No. I493380 "Electronic Signature Method" as an example, it is mainly to simultaneously obtain the user's handwritten signature track and the user's real-time video when the user signs with an electronic device. In this way, by combining the real-time image and signature trace during handwriting, it is confirmed that the aforementioned signature trace is indeed from the expected user, and then the purpose of identity verification and reliability can be improved in a simple way.

With the development of technology, more and more documents use electronic signatures, and the above-mentioned real-time image combined with the signature track method effectively makes up for the lack of individual users' signature tracks that are easy to be copied. However, for agencies, schools, or institutions that need to use the official seal, there are still doubts about its effectiveness because it is impossible to ensure that all authorized persons agree to use the official seal. Therefore, how to establish the relationship between the official seal and all licensors, and how to use the seal presented by the official seal with the consent of all licensors has become a problem that the applicant in this case is struggling to overcome.

Therefore, the object of the present invention is to provide a method and system for authenticating an electronic credential that can improve reliability and authenticity.

Therefore, the electronic credential authentication method of the present invention is used to generate a credential data file in an authentication system. The credential data file includes an original data file, a credential image, and a signature track group. The credential image represents the authority, Or the official seal of a school or institution, the signature trace group is input by handwriting by at least one authorized person, and the authentication system implements the following steps through an application program:

(a): Obtain a credential message for generating the credential image.

(b): Obtaining at least one image message to generate a real-time image group, and the real-time image group is used to present the operation status of the at least one authorized person.

(c): Obtain at least one signature message that generates the signature track group.

(d): According to the credential message, the at least one signature message and the at least one image message, combine the signature trace group, the credential image, and the real-time image group with the original data file to generate the credential data file.

An electronic credential authentication system, used to generate a credential data file, the credential data file includes an original data file, a credential image, and a signature track group, the credential image represents the identity of an institution, school, or institution An official seal, the signature track set comes from at least one authorized person, and the authentication system includes: a touch screen, an image capture module, and a processor.

The touch screen is used to obtain at least one signature message that generates the signature track set, and is used to display the credential image, the signature track set, and a real-time image set, and the real-time image set is used to present the at least one authorized The status of people operating the touch screen.

The image capturing module is used for acquiring at least one image information for generating the real-time image group.

The processor combines the signature track group, the credential image, and the real-time image group with the original data file according to the credential message, the at least one signature message, and the at least one image message to generate the credential data file.

The effect of the present invention is to confirm that the official seal of the representative agency, school, or institution is indeed used in the credential data file through the signature track group and real-time image group of all authorized persons, thereby improving the reliability of the credential data file accuracy and authenticity.

Referring to FIG. 1 , FIG. 2 and FIG. 3 , an embodiment of the electronic credential authentication system of the present invention is used to generate a credential data file 1 (as in FIG. 4 ), including a digital device 2 .

Each of the electronic devices 2 can be a computer, a personal digital assistant, a smart phone, etc., but is not limited thereto. Each of the electronic devices 2 belongs to an authorized person, and includes a touch screen 21 , an image capture module 22 , and a processor 23 .

It is worth noting that one of the authorizers is the promoter, the other authorizer is the director or person in charge, and the rest of the authorizers are supervisors. The aforementioned promoters may be directors or persons in charge, or one of the supervisors, or persons in charge in accordance with the powers and responsibilities and procedures of seal granting credits stipulated by government agencies, schools, and business institutions. Or project personnel who follow the financial institution's account opening, credit granting and other business to check the identity and seal verification process to carry out related operations.

In this embodiment, the touch screen 21 is used to display a signature trace group consisting of three signature traces 31 , a real-time image group consisting of three real-time images 32 , and a seal image 33 . The touch screen 21 further obtains a track message M1 according to the corresponding authorizer inputting a respective signature track 31 in a handwriting touch manner.

The image capture module 22 faces the corresponding authorized person, and is used for acquiring an image message M2 for generating the real-time image 32 . The real-time image 32 is used to present the status of the corresponding authorized person operating the touch screen 21 . In this embodiment, the aforementioned states refer to the actions of the corresponding authorized person when operating the touch screen 22 .

In this embodiment, the credential image 33 represents the official seal of a government agency, school, or institution, and is a digital image generated from a credential message M3. The credential image 33 is not limited to a digital image, and in other variations of this embodiment, it can also be a kind of official seal captured by the image capture module 22 to obtain the credential message M3. The resulting image.

The processor 23 combines the signature tracks 31, the real-time images 32, and the credential image 33 into an original data file 1' according to the signature messages M1, the image messages M2, and the credential message M3, and This credential data file 1 is generated.

In this embodiment, each signature track 31 is superimposed on a separate real-time image 32. In other variations of this embodiment, each signature track 31 may be juxtaposed with a separate real-time image 32. show.

Referring to FIGS. 2-4 and 5, the electronic credential authentication method of the present invention is initiated by the initiator using the corresponding electronic device 2, and the processor 23 implements the following steps through an application program installed in the electronic device 2:

Step S01 : Present a verification screen through the touch screen 21 .

Step S02: Verify the identity of the corresponding authorized person through a verification mechanism, and judge whether the identity of the corresponding authorized person is genuine, if yes, proceed to step S03, if not, return to step S01.

It is worth noting that the verification mechanism can confirm the identity of the at least one authorized person by identifying account numbers and passwords, or identifying biometric features, and the physiological features include at least fingerprints, faces, voiceprints, and irises. In this embodiment, the verification mechanism is for each authorized person to use the biometric feature or FIDO security key to identify the identity through the online fast identity verification service (Fast IDentity Online, FIDO). Preferably, the present invention uses FIDO security The key identifies the identity, and the verification mechanism further binds the identity of each authorized person with the corresponding electronic device, so that the identity of each authorized person and the corresponding electronic device have a one-to-one relationship.

Step S03: Create an authorization order list for setting the address and transmission order of each authorized person.

In this embodiment, the aforementioned address may be e-mail.

Step S04: Load the original data file 1' and display it on the touch screen 21.

The original data file 1' can be generated by the electronic device 2, or input through an external device (such as a flash drive), or downloaded from a cloud system through the network, or transmitted by a previous authorized person.

Step S05: Obtain the stamp message M3, and generate the stamp image 33 according to the stamp message M3.

It is worth noting that the printed message M3 can be stored by the electronic device 2, or input through an external device (such as a flash drive), or downloaded from the cloud system through the network, or the image capture module 12 can capture the entity obtained from the official seal.

Step S06: Display the original data file 1' combined with the stamp image 33 through the touch screen 21.

It is worth noting that, if the original data file 1' is sent by the previous authorizer, the original data file 1' is a shared file, and in addition to the credential image 33, it is also combined with the corresponding authorizer's real-time Image 32, signature track 31.

Step S07: Obtain image information M2 for generating the real-time image 32 through the image capture module 22 . The real-time image 32 is used to present the status of the predetermined user operating the touch screen 21 .

In this embodiment, the image message M2 of the real-time image 32 is a streaming media (Streaming media), which may be in formats such as flv, H.263, H.264, f4v, rm, wmv, m4v, and mov.

Step S08 : Generate individual track information M1 according to the signature track 31 input by the corresponding authorizer through the touch screen 11 .

In this embodiment, the signature track 31 is described in a markup language (such as javascript, java, swift, objective C).

Step S09: Encrypt the credential image 33 and the signature track 31 of the corresponding authorizer with the FIDO security key, and combine the credential image 33, the signature track 31 and the real-time image 32 of the corresponding authorizer with the original Data file 1'.

Step S10: judge whether there is a next authorizer according to the authorization sequence list, if yes, make the original data file 1' the shared file, and proceed to step S11, if not, proceed to step S12.

Step S11: Send the original data file 1' to the next authorized person according to the address in the authorization sequence list, and then return to step S06.

Step S12: According to all the trace information M1, image information M2 and credential information M3, generate a credential data file 1 combining the signature traces 31, the real-time images 32 and the credential image 33.

Step S13: end.

In this way, when verifying the authenticity of the signature track 31 and the credential image 33 in the credential data file 1 in the future, in addition to confirming that the aforementioned signature track 31 is indeed from a predetermined authorized person with the instant image 32, it is also possible to pass each of the The original data file 1' signed by the authorized person confirms that the use of the credential image 33 is based on the original intention of all authorized persons, and is authorized and agreed by all authorized persons with the personal FIDO security key, and confirms that the signed document is True, and the credential image 33 is used for the validity of the original data file 1'.

It should be noted that, through the application program installed on the electronic device 2, the digital information of each real-time image 32 and the coordinate position at the time of generation, or each real-time image 32 in the imprint data file 1 can be further , or the digital information of each track message M1 and the coordinate position when it was generated, or the position of each signature track 31 in the credential data file 1, or the credential image 33 in the credential data file 1 A set of encrypted verification values is generated and merged in the credential data file 1.

In this preferred embodiment, the aforesaid encrypted verification value is an irreversible hash value (Hash Value) calculated by a hash algorithm, whereby as long as each of the real-time images 32, or each of the signature traces 31, or the If the position of the credential image 33 in the credential data file 1 is changed, or the coordinate position of each instant image 32 or each signature track 31 is changed, the encrypted verification value generated will be different.

It is worth noting that the present invention can also combine an electronic time stamp (time stamp) requested by the time stamp service center (TimeStamp Authority, TSA) from the credential data file 1 incorporating the encrypted verification value, and combine the electronic time stamp in the The credential data file 1. In this way, it is proved that the credential data file 1 already existed at a certain point in time. When there is any dispute over the credential data file 1 in the future, it is only necessary to send the credential data file 1 back to the TimeStamp Service Center (TimeStamp Authority, TSA) confirmation, the accuracy and completeness of the creation time of the credential data file 1 can be verified.

Through the above description, the advantages of the aforementioned embodiments can be summarized as follows:

In addition to being accepted by the general public with the signature track 31 similar to the traditional signature in terms of perception, the present invention is important to be able to confirm representative agencies, or schools, or The credential image 33 of the business organization is indeed used in the credential data file 1, thereby improving the reliability and authenticity of the credential data file 1.

But what is described above is only an embodiment of the present invention, and should not limit the scope of the present invention. All simple equivalent changes and modifications made according to the patent scope of the present invention and the content of the patent specification are still within the scope of the present invention. Within the scope covered by the patent of the present invention.

1': Raw data file 1:India data file 11: Page 2: Electronic signature device 21: Touch screen 22: Image capture module 23: Processor 31: Signature track 32: Instant image 33: Inscription M1: track information M2: Video message M3: Inscription message S01-S13: Step process

Other features and effects of the present invention will be clearly presented in the implementation manner with reference to the drawings, wherein: FIG. 1 is a schematic diagram illustrating an embodiment of an authentication system for an electronic letter of the present invention; Fig. 2 is a block diagram of this embodiment; Fig. 3 is the schematic diagram that this embodiment one generates a signature track and an instant video; Fig. 4 is a schematic diagram of generating a stamp data file in the first embodiment; and Fig. 5 is a flowchart of this embodiment.

S01-S13: Step process

Claims (12)

An authentication method for electronic credential, which is used to generate a credential data file in an authentication system, the credential data file includes an original data file, a credential image, and a signature track group, the credential image represents an institution, or a school, Or the official seal of the business organization, the signature track group is input by handwriting by at least one authorized person, and the authentication system implements the following steps through an application program: (a): Obtain a credential message that generates the credential image; (b): Obtaining at least one image message to generate a real-time image group, and the real-time image group is used to present the operation status of the at least one authorized person; (c): Obtain at least one signature message that generates the signature trace group; and (d): According to the credential message, the at least one signature message and the at least one image message, combine the signature trace group, the credential image, and the real-time image group with the original data file to generate the credential data file. The electronic credential authentication method as described in Claim 1, wherein the credential information comes from an image captured by the authentication system by photographing an entity's official seal, or from a digital image. The method for authenticating an electronic credential as described in Claim 1, further comprising step (e) before step (b): verifying the identity of the at least one authorized person through a verification mechanism, when confirming the identity of the at least one authorized person When the identity is true, proceed to the next step. The verification mechanism can confirm the identity of the at least one authorized person by identifying the account number and password, or identifying biometric features. The physiological features include at least fingerprints, faces, and voiceprints. , iris. The electronic credential authentication method as described in claim item 3, wherein the authentication mechanism uses the FIDO security key to identify the identity by the at least one authorized person through the online fast identity authentication service (Fast IDentity Online, FIDO), and in the step In step (e), the identity of the at least one authorized person is confirmed through the FIDO security key, and in step (d), the credential image and the signature trace group are encrypted with the FIDO security key. The method for authenticating an electronic credential as described in Claim 1, the signature trace group includes digital signature traces, the real-time image group includes several real-time images, and in step (b), each real-time image is used to present a separate authorizer The operating state, in step (c), each signature track is input by a separate authorized person, and the authentication method also includes: Step (f) before step (a): establish an authorization sequence list, which is used to set the address of each authorized person and the transmission sequence; Step (g) after step (c): combine the credential image with the signature track and real-time image of the corresponding authorizer to the original data file; Step (h): Determine whether there is a next authorizer according to the authorization order list, if yes, make the original data file a shared file, and proceed to step (i), if not, proceed to step (d); and Step (i): Send the original data file to the next authorized person according to the address in the authorization order list, and then return to step (b). An electronic credential authentication system, used to generate a credential data file, the credential data file includes an original data file, a credential image, and a signature track group, the credential image represents the identity of an institution, school, or institution Official seal, the signature trace group comes from at least one authorized person, the authentication system includes: A touch screen, used to acquire at least one signature message that generates the signature track set, and used to display the credential image, the signature track set, and a real-time image set, the real-time image set is used to present the at least one signed The status of the touch screen operated by the authorized person; An image capture module, used to acquire at least one image information for generating the real-time image group; and A processor, according to the credential message, the at least one signature message and the at least one image message, combines the signature trace group, the credential image, and the real-time image group with the original data file to generate the credential data file. The electronic signature authentication system as claimed in claim 6, wherein the touch screen generates the at least one signature message according to a set of signature traces input by touch. The electronic stamp authentication system as claimed in claim 6, wherein the image capture module is also used to capture an image of a physical stamp to obtain the stamp information. The electronic credential authentication system as described in Claim 6, wherein, the signature trace group includes several signature traces, and is input by multiple authorized persons, and each signature trace is handwritten by a separate authorized person through the Touch screen input. The electronic letter authentication system as described in Claim 6, wherein, the real-time image group includes several real-time images, and is input by a plurality of authorized persons, and each of the real-time images is used to present that a respective authorized person operates the touch Control the status of the screen. The electronic credential authentication system as described in Claim 9 or 10 includes several electronic devices, each of which belongs to an authorized person, and includes the touch screen, the image capture module, and the processor, The verification mechanism further binds the identity of each authorized person with the corresponding electronic device, so that the identity of each authorized person and the corresponding electronic device have a one-to-one relationship. The electronic credential authentication system as described in Claim 6, wherein, the processor also verifies the identity of the at least one authorized person through a verification mechanism, and the verification mechanism can be through identifying account numbers and passwords, or identifying biometric features, To confirm the identity of the at least one authorized person, the physiological characteristics include at least fingerprints, faces, voiceprints, and irises.

Images