1313998 九、發明說明： 【發明所屬之技術領域】 種可 本發明係有關-種電子文件數位簽章之方法 於網際網路令使用晶片卡進行卿文件數位簽章之方法/疋 【先前技術】 一種AdGbe公司所創制的可攜式文件格式，是 資ΓΓίΓΓΖ f子職本騎包含有讀、版面的編排 =件式、多平台、維持資訊的完整性等電 重要的_為具有鮮且職的触㈣及驗章方 式，可在各種情況下將PDF格式的電+ 情況，如公文、單據等。㈣電子文件伽在需要數位簽章的 數位簽章為在資訊安全領域中為—使用已久的實 於=的真實性、完整性及不可否認性提供更佳的保證。優_子 立簽早必須持有正確的私密金鑰才可被產生，無法被，田' :驗證數位簽章的正確性來驗證對方身分，以及確認資:是否= 我國於民國九十-年開始施行電子簽章法，透過賦予 章法律效力，建立可信賴的網路交易環境，確保能 ‘ 二訊在網路倾過程中，是否_偽造、竄改或竊取， =完整性’並透過識別交易雙方身分，防止事後否認已完‘= 晶片卡是在塑膠卡片上封裝積體電路（IC)，並 點(或非接觸式)，使讀寫裝置可對它提供二 亚使兩者間可互相通信傳輸龍U卡可料兩類，_為卡， -卜- 1313998 晶片只有記憶體，齡的資料無法更改，使職只有拋棄或是經 別的處理才能再度使m者有IC t話卡。另—麵是在晶片上 丧入了微處理ϋ處理-補單的:#訊，此卡在電子商務上的應用範圍 很廣，可以記雜人的_資料以赠分職，也可存人set電子 交易的個人電子證書，進行網路的線上交易，或被廣泛躺在金 上，也就是現在常見的1C金融卡。 -般在PDF規範中，只規定了 PDF簽章時的文件格式，對於 如何產生簽章後的PDF並未規範。目前運胁咖上的簽章，比 較常見财歧個Adobe公_丨的細細難。其舰是要使 用簽章功能時，每台電腦都要安裝此商業軟體，版權昂貴且不利 體佈署。如隸PDF簽章魏顧在嶋__上時，簽章時 整份卿讀下載至客戶端，簽章完錢錢魏树，也必須把 簽章後的文件上傳服n端，t廣泛在系財细pdf簽驗章， 如要進行財簽署，献鱗大型文聽行簽科，流程 造成網路傳輸的負擔。 宵 於文件控管 除此之外’為免客戶端傳遞修改原文後的簽署文件服器端， :以必須先縣文於魏器端進行簽魏，再傳遞至客戶端做 最後伺服器端必織證客戶端及伺服器端的簽章，十分麻煩，也不利 【發明内容】 為了解決上述問題，本發明目的之—係提供—種電子文 件數位簽章之方法。其傳遞文件_要值與簽章證 :簡化’且來回傳送之資料量減少，可避免因網路_造= 證緩f艾。 1313998 本發明目的之一係提供一種電子文件數位簽章之方法。其利 用飼服器控管文件’在由簽章者透過簽章舰器來進行簽章文件的管 ==:#咖騎咖，™綱紐傳文件產 本發明目的之-係提供一種電子文件數位簽章之方法。盆利 用雜凑函數域演算法處理電子簽章，㈣在最懸生-簽章電子文 件傳送給簽章者，減少電子文件遭說改的機會。 為了達到上述目的，本發明一實施例之電子文件數位簽章 之方法包括·在-網頁程式介面選定要進行鮮之—電子文件， 式介面經由-網際網路傳送一請求訊息至一簽章管理模組，其 電:文件儲存在-龍庫中；簽章f理模組接姆輕息，讀取電 :文件並在電子文件帽增—簽章資料及數個喊資料，最後產生一 理m;簽章管理編靖+繼電打料行—域演算法處 值^ ί伽傳至师賦介面；網·式介面接收摘要 子簽轉m公驗職輕傳送至簽 二二門合理模組接收第—公開金鑰簽章值，並處理成一第 枝人巾㈣子請，最驗生—簽«子文件傳 方法另勺外括本m另實施例提供一種電子文件數位簽章之 簽章之^端計算機上登錄—網頁程式介面並選定要進行 -簽章伺服器群程式介面經由—網際網路傳送—請求訊息至 服51雜Λ* /、，、電子文件儲存在簽章飼服器群組中；簽章飼 資料，最，並在電子文件中新增—簽章資料及數個回應 二/S巾繼電子文件；簽章伺服11群組對*繼電子文件進 仃-加Φ演算法處理’最後產生—摘要伽傳至 算 算機接收摘要值並與—金鑰進行電 、彳算機’、4。十 章值傳送至躲舰公開金錄簽 食早懦辦組，及簽早舰科組接收公開金餘簽章 1313998 電子文件，最後產生 【實施方式】 程圖第發:―實施例電子文件數位簽章之方法流 要進行簽章之一電子文件，網頁==§fL息’在一網頁程式介面選定 ，至-_ ’其再將請求訊息傳送至章管 件儲存在資料庫中，且網站、資其 '、，、子文 器群組執行；步驟SG2產生'在—簽章伺服 讀取電子文件並在此電子文件 +中繼新=jiff組接收請求訊息， 圖片、一攔位位置及資料大小等；步^早:\一聯絡料、一背景 章管理模組對㈣電子文〜 產生並回傳摘要值，簽 值回傳至網密演算法處理，最後產生一摘要 理，：二Γ: 密演算法為-雜湊函數加密演算法處 簽立心ψ 祕法、咖加密演算法等；步驟S04對摘要值 介面接_要值並與—金鑰進行電子簽章後， 卡㈨金鱗簽章值傳送至簽章管理模組，此金鑰係由一電子 91送至網頁程式介面；步驟S05將簽章值喪入中繼文 件中，簽章管理模組接收公開金章值，並處理== 簽章值後嵌入中鰌番工士从 处成弟一a開金鑰 程式介面，m子件；以及步驟S〇6將簽章文件傳送至網頁 電^文件^ ―簽章電子文件傳送至網頁程式介面，亦將簽章 電子文件贿在_料蚊雜管値ϋ。1313998 IX. Description of the invention: [Technical field to which the invention pertains] The present invention relates to a method for digital signature of an electronic document in a method for digitally signing a document using a wafer card in the Internet/疋 [Prior Art] A portable file format created by AdGbe is a resource that has a reading, layout, layout, multi-platform, and maintenance of information integrity. Touch (4) and the method of inspection, in various situations, the PDF format of electricity + conditions, such as official documents, documents, and so on. (4) The electronic document is circulated in a digital signature that requires a digital signature to provide a better guarantee for the authenticity, integrity and non-repudiation of the long-standing actual use in the field of information security. You must have the correct private key before it can be generated and cannot be used. Tian': Verify the correctness of the digital signature to verify the identity of the other party, and confirm the capital: whether = China's 90-year in the Republic of China Begin to implement the electronic signature method, establish a trustworthy online trading environment by giving legal effect to the chapter, and ensure that it can falsify, falsify or steal, and integrity through the identification process. The identity of both parties prevents the denial after the completion of the '= chip card is to package the integrated circuit (IC) on the plastic card, and point (or non-contact), so that the read and write device can provide it to the two, so that the two can Communication transmission dragon U card can be expected to be two types, _ is the card, - Bu - 1313998 The chip only has memory, the age of the data can not be changed, the job can only be abandoned or other processing can make m have IC t card. On the other hand, the micro-processing ϋ processing-replenishment is lost on the wafer: #讯, this card has a wide range of applications in e-commerce, and can be used to collect miscellaneous information. Set electronic trading of personal e-Cert, online trading on the Internet, or widely lying on the gold, which is now the common 1C financial card. Generally, in the PDF specification, only the file format when the PDF signature is specified is not standardized on how to generate the PDF after the signature. At present, the signature on the threat of the coffee is more difficult than the common one. When the ship is to use the signature function, each computer must be installed with this commercial software, which is expensive and unfavorable. For example, if the PDF signature is in the form of Wei Gu in the __, when the signature is signed, the whole copy is downloaded to the client, and the signature of the money is Wei Shu. The Department of Finance pdf signed the seal, if you want to carry out the financial signing, the scale of large-scale text listening to the signing department, the process causes the burden of network transmission. In addition to the file control in addition to this, in order to avoid the client to pass the modified original text after the signing file server, the: must first county text in the Wei instrument end to sign Wei, and then pass to the client to do the last server must It is very troublesome and unfavorable to certify the signature of the client and the server. [Invention] In order to solve the above problems, the object of the present invention is to provide a method for digital signature of an electronic document. It delivers the file_value and the signature of the signature: Simplified' and the amount of data transmitted back and forth is reduced, so that it can be avoided due to the network. 1313998 One of the objects of the present invention is to provide a method of digitally signing electronic documents. It uses the feeding device to control the file 'in the signing by the signer through the signature ship to carry out the signing of the document ==: #咖骑咖, TM 纲纽传文件 produced the purpose of the invention - provides an electronic file The method of digital signature. The basin uses the hash function domain algorithm to process the electronic signature, and (4) transmits the most suspense-signature electronic file to the signer, reducing the chances of electronic documents being altered. In order to achieve the above object, an electronic document digital signature method according to an embodiment of the present invention includes: selecting a fresh-electronic file in the web-based program interface, and transmitting a request message to a signature management via the Internet. Module, its electricity: the file is stored in the - Longku; the signature of the module is connected to the light, reading the electricity: the file is added in the electronic file cap - signature information and several shouting materials, and finally generate a rationale m; signature management editor Jing + relay row - domain algorithm value ^ ί 伽 传 传 师 师 介 介 介 介 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净 净The group receives the first-public key signature value, and processes it into a first-person person towel (four) child request, the most test-signature_sub-file transfer method, another spoon-external cover, another embodiment provides an electronic document digital signature signature Register on the computer - the web application interface and select the - signing server group interface interface via - Internet transmission - request message to service 51 miscellaneous * /,, electronic file stored in the signature clothing In the group; signature feeding information, most, and in electronics New in the piece - signature data and several responses to the second / S towel followed by electronic files; signature servo 11 group pairs * follow the electronic file into the 仃 - plus Φ algorithm processing 'final generation - summary gamma to the computer Receive the digest value and perform the electric and computer ', 4 with the - key. The ten chapters are transmitted to the escaping public stipends, and the early shipping team receives the public gold seal 1313998 electronic documents, and finally produces [implementation] Chengtu first: ―example electronic file digits The method of signing is to carry out an electronic document of the signature, the webpage ==§fL interest is selected in a webpage programming interface, to -_', and then the request message is transmitted to the chapter tube storage in the database, and the website, The ',,, sub-generator group executes; step SG2 generates 'in-signature servo to read the electronic file and receives the request message, picture, location and data in the electronic file + relay new =jiff group Size, etc.; step ^ early: \ a contact material, a background chapter management module pair (four) electronic text ~ generate and return the abstract value, sign value back to the network secret algorithm processing, and finally produce a summary theory: : The secret algorithm is - the hash function encryption algorithm is signed at the heart of the secret method, the coffee encryption algorithm, etc.; step S04 for the summary value interface _ value and electronic key signature with the key, card (nine) gold scale The signature value is transmitted to the signature management module, which is the key system. The electronic component 91 sends the webpage program interface; in step S05, the signature value is lost in the relay file, the signature management module receives the public gold medal value, and processes the == signature value and then embeds the Zhongyufan. Cheng Diyi a key program interface, m sub-component; and step S〇6 will transfer the signature file to the web page ^^^-------------------- Feed the mosquito tube.
«™：：F 去剌f子文件實絲錢章。或 使用者可由-無線網路對PDF電子文件實施數位簽章，不受有 • 1313998 章制，而緣證PDF電子L帛―公開金鑰簽 瑜簽ΪΠΓ傳輸’係為—PKCS1格式之資料，另外第二公開金 PKCS7格紅請。如此，细_耕的摘要值 =早者驗，使得簽證程序簡化，且來回傳送之資料量減少，可避 免因網路壅塞而造成簽證缓慢。 於上述實施例中，只有摘要值傳遞至客戶端之網頁程式介 ^其餘的部转在簽章管理模組進行，所以有利於文件的管控。又， ’電子文件可另由—伺服器控管，簽章_過簽_ ❻文件的管理完全操控於另—文件控管伺服器， 免簽早者直接上傳文件產生的管理問題。 第二圖所示為本發明另—實_電子文件數 傳f示意圖。於本實施例中，步驟S11指定電子文件並送出;求 此:，簽章者在-終端計算機10上登錄一網頁程式介面（如第三圖 所丁）並選定要進行簽章之PDF電子文件，網頁程式介面經由網際 稱傳送請求訊息、憑證與關t懸簽軸服器群組2G，其中PDF ，子文件儲存在簽章舰器群組20中；步驟S12將憑證及附屬資訊 :入電子文件以產生令繼文件，簽章词服器群組20接收請求訊息（包 含此次簽章使_憑證與欲附加在此次簽章__訊，例如理由、 資訊、背景圖片、欄位位置、大小.·.等等，可視應賴整由飼服 器端或簽章者決定上述資訊）’隨後在PDF電子文件中新增一簽章資 料攔位及_資訊齡，錢人簽章者傳來㈣此次簽章的所有資 訊，最後產生-中繼電子文件；步驟S13產生並傳送電子文件之摘 ，值’簽補服II群組20對中繼電子文件進行—加密演算法處理， 最後產生-摘要值回傳至終端計算機1〇，步驟S14以金鑰對摘要值 簽章並傳回，終端計算機1G接收摘要值，簽章者接受到此摘要值後， 利用數位簽章軟體，配合本身要進行簽章的金鑰對此摘要值進行簽章 後’產生PKCS1的簽章值’再將此簽章值資料回傳到簽章祠服器群 組20 ’步驟S15將簽章值嵌入中繼文件中，簽章祠服器群組2〇接 9 1313998 收簽章值，並處理成—PKCS7 為完整的縣卿轩文件；㈣子文种，合成 者，最後產生-簽章PDF電子文 ^簽早文件傳送至金錄簽章 認（如第四圖所示）。 轉傳送至終端計算機K)給簽章者確 接續上述說明，於本實施例 加密演算法處理，_函數加絲 伽磁為-雜湊函數 加綠算法，_餘息麵加密演算法或«TM::F goes to 剌f sub-files. Or the user can implement a digital signature on the PDF electronic file by the wireless network, and is not subject to the • 1313998 system, and the documentary PDF electronic L帛 “public key signing and signing” is the data of the PKCS1 format. In addition, the second public gold PKCS7 grid red please. In this way, the summary value of the fine _ _ _ = early test, so that the visa process is simplified, and the amount of information transmitted back and forth is reduced, avoiding the slow visa due to network congestion. In the above embodiment, only the digest value is passed to the web page of the client. The remaining parts are transferred to the signature management module, which facilitates the control of the file. In addition, the electronic file can be controlled by the server, and the management of the signature _ signing _ ❻ file is completely controlled by the other file management server, which avoids the management problem caused by the early upload of the file. The second figure shows a schematic diagram of the actual-electronic file transmission f of the present invention. In this embodiment, step S11 specifies an electronic file and sends it out; in this case, the signer registers a webpage programming interface on the terminal computer 10 (as shown in the third figure) and selects the PDF electronic document to be signed. The webpage program interface transmits the request message, the voucher and the t-spinning server group 2G via the Internet, wherein the PDF and the sub-file are stored in the signature ship group 20; and the step S12 includes the voucher and the auxiliary information: The file is used to generate the successor file, and the signature server group 20 receives the request message (including the signature and the voucher to be attached to the signature, such as reason, information, background image, field position) , size, etc., can be determined by the feeding device or the signer to determine the above information) 'Subsequently added a signature data block in the PDF electronic file and _ information age, the money signer (4) All the information of the signature, and finally the generation of the relay electronic file; the step S13 generates and transmits the electronic file, and the value of the 'signed service group II 20 pairs the relay electronic file--encryption algorithm processing, The last generated - summary value is passed back to the terminal meter In step S14, the key is signed and returned by the key, and the terminal computer 1G receives the digest value. After the signer accepts the digest value, the signing software uses the digital signature software to cooperate with the key to be signed. After signing the digest value, 'generate the signature value of PKCS1' and then pass the signature value data back to the signature server group 20'. Step S15 embed the signature value in the relay file, and sign the signature. The server group 2 connects 9 1313998 to receive the chapter value, and processes it into -PKCS7 as the complete county Qingxuan file; (4) sub-text, synthesizer, and finally produces - signature PDF electronic text ^ sign early file transfer to gold Record the signature (as shown in the fourth picture). Transfer to the terminal computer K) to the signer to confirm the above description, in the embodiment of the encryption algorithm processing, _ function plus gamma magnetic - hash function plus green algorithm, _ coplanar encryption algorithm or
上型電在腦際麟可為—躲，贿鱗，制者可以由桌 子女株。士致、 早又有線網際網路限制，驗證PDF電 日力發明利用傳遞文件的摘要值與簽章者憑證，使得簽證程序 ，來回傳送之倾量減少，可避免_路壅塞而造絲證緩慢。 翻施Γ，電子文件可另由1服器控管，簽章者透過簽 Ϊ 已簽文件的管理完全操控於另一文件控管伺服 ° °避免簽早者直接上傳文件產生的管理問題。The type of electricity in the brain can be - hiding, bribe scales, the system can be made by the children of the table. Shizhi, early wired Internet restrictions, verification PDF electricity, the use of the abstract value of the delivery document and the signature of the signature of the certificate, so that the visa process, the amount of back and forth transmission is reduced, can avoid _ road congestion and the silk card is slow . After the application, the electronic file can be controlled by another server. The signature holder can completely control the management of the document by the management of the signed document. ° ° Avoid the management problems caused by the early upload of the file.
綜合上述，本發明提供—種電子文件數位簽章之方法。其利 =雜湊函數加錢算法處理電子縣，使簽章者可透際網路使用 晶片卡之金鑰進行PDF文件触簽章之方法，伺㈣只需在最後產 生一簽章f子文件傳送給縣者，齡電子文件錢改的機會。 以上所述之實施例僅係為說明本發明之技術思想及特 點，其目的在使熟習此項技藝之人士能夠瞭解本發明之内容 並據以實施，當不能以之限定本發明之專利範圍，即大凡依 本發明所揭示之精神所作之均等變化或修飾，仍應涵蓋在本 發明之專利範圍内。 10 1313998 【圖式簡單說明】 第一圖所示為本發明之一實施例電子文件數位簽章之方法流 程圖。 第二圖所示為本發明另一實施例電子文件數位簽章之資訊傳遞 示意圖。 第三圖所示為本發明一實施例終端計算機上登錄之網頁程式介 面。 第四圖所示為本發明一實施例終端計算機給簽章者確認之顯示 【主要元件符號說明】In summary, the present invention provides a method for digitally signing electronic documents. Its profit = hash function plus money algorithm handles the electronic county, so that the signer can use the key of the wafer card to transparently use the method of the PDF file to sign the signature, and wait for (4) to generate a signature f subfile at the end. Give the prefecture, the opportunity to change the age of electronic documents. The embodiments described above are merely illustrative of the technical spirit and the features of the present invention, and the objects of the present invention can be understood by those skilled in the art, and the scope of the present invention cannot be limited thereto. That is, the equivalent variations or modifications made by the spirit of the present invention should still be included in the scope of the present invention. 10 1313998 [Simple Description of the Drawings] The first figure shows a flow chart of a method for digital signature of an electronic document according to an embodiment of the present invention. The second figure shows a schematic diagram of information transmission of an electronic document digital signature according to another embodiment of the present invention. The third figure shows a webpage program interface registered on a terminal computer according to an embodiment of the present invention. The fourth figure shows the display of the confirmation of the signing machine by the terminal computer according to an embodiment of the present invention.
10 終端計算機 20 簽章伺服器群組 S01 步驟 S02 步驟 S03 步驟 S04 步驟 S05 步驟 S06 步驟 S11 步驟 S12 步驟 S13 步驟 S14 步驟 S15 步驟 S16 步驟 1110 Terminal Computer 20 Signature Server Group S01 Step S02 Step S03 Step S04 Step S05 Step S06 Step S11 Step S12 Step S13 Step S14 Step S15 Step S16 Step 11