TWI486808B - System for validating electronic insurance policy with certificate and method thereof - Google Patents

Description

System and method for verifying electronic policy using electronic voucher

An electronic file verification system and method thereof, in particular, a system and method for verifying an electronic policy using an electronic certificate.

Since the paper file requires a suitable environment, the paper document is easily damaged, and in addition to the environmental factors, the paper document requires space to be stored, and therefore, the storage of the paper document requires a certain cost.

With the rapid development of information processing technology and communication technology, electronic files are not easily destroyed by environmental factors, and there is almost no need to save space, which causes the trend of paper documents to be gradually converted into electronic files. However, in contrast, electronic documents are easier to steal, falsify, or falsify than paper documents, that is, the security of electronic documents is lower than that of paper documents. Therefore, both individuals and companies are concerned about the security of electronic documents. The problem.

Therefore, at present, for the prevention of stealing electronic files, the security of electronic files can be ensured by encrypting electronic files, and for counterfeiting or tampering with electronic files, digital signatures can be used to ensure correctness.

However, for some documents, such as documents that require the owner to confirm the content, such as contracts, policies, etc., the use of paper is still much more than the use of electronic forms. This is usually because the owner of an electronic file cannot directly confirm whether the file has been tampered with or falsified over time, and therefore, the paper is still recorded using a conventional paper file that is easily found to be modified.

In summary, it can be seen that the owner of electronic documents in the prior art has not been able to directly confirm whether the electronic file has been tampered with or forged. Therefore, it is necessary to propose an improved technical means to solve this problem.

In view of the prior art, the owner of an electronic document cannot directly confirm whether the electronic document has been tampered with or forged. The present invention discloses a system for verifying an electronic policy using an electronic voucher and a method thereof, wherein: the electronic device disclosed in the present invention is disclosed. The system for verifying the electronic policy of the voucher includes at least: a file providing host for generating a mailing file, the sending document includes a file to be authenticated and a second digital signature for verifying the file to be authenticated; and the verification server is configured to receive the file. The delivery document transmitted by the host, and after successfully verifying the delivery document, generates an electronic policy, the electronic policy includes a delivery document and a third digital signature for providing the verification delivery document, and is used to transmit the electronic policy to the file providing host The client is configured to receive the file to provide an electronic policy transmitted by the host, and to verify the file to be sent and the file to be authenticated, and display the verification result of the file to be authenticated and the file to be sent.

The method for verifying an electronic policy by using an electronic voucher disclosed in the present invention comprises the steps of: providing an original policy; the file providing host generates a first digital signature providing the original verification certificate; and the file providing host generates a file to be authenticated, and the file to be authenticated includes The first digital signature and the encrypted file generated by the original policy are encrypted; the file providing host generates a delivery document, the delivery document includes the to-be-certified file and a second digital signature for verifying the to-be-certified file; the file provides host delivery After signing the file to the verification server; the verification server generates an electronic policy after successfully verifying the file to be authenticated, the electronic policy includes the delivery document and the third digit signature of the verification delivery document; the verification server transmits the electronic policy to the file providing The host provides the host to transmit the electronic policy to the client; after successfully verifying the electronic policy and the file to be authenticated, the client decrypts the encrypted file as a decrypted file; the client transmits the decrypted file and the electronic policy to the verification server; and the verification server verifies the decryption. Document and delivery document; verification server transmission test Results to the client; client displays the authentication result.

Another method for verifying an electronic policy by using an electronic voucher disclosed in the present invention, the method comprising the steps of: providing a file to be authenticated; the file providing host generates a delivery file, the delivery file includes a file to be authenticated, and providing a second verification document to be authenticated Digital signature; the file provides the host to send the delivery file to the verification server; after the verification server successfully verifies the file to be verified, Generate an electronic policy, the electronic policy includes a delivery document and a third digit signature for providing the verification delivery document; the verification server transmits the electronic policy to the file providing host; the file provides the host to transmit the electronic policy to the client; the client verifies the delivery document The verification result is generated with the file to be authenticated; the client displays the verification result.

The system and method disclosed in the present invention are as above, and the difference from the prior art is that the present invention provides a digital signature to the authentication file by the host after the file is provided, and the verification server also digitizes the to-be-certified file after the digital signature. Signature, the client can verify the digital signature of the authentication server and the file providing host, and display the verification result, so as to solve the problems existing in the prior art, and can achieve the technical effect of improving the convenience of using the electronic policy.

110‧‧‧ Documents provided host

120‧‧‧Verification server

130‧‧‧Client

Step 200‧‧‧Provide documents to be certified

Step 202‧‧‧ Provide original policy

Step 204‧‧‧ Document Providing Host Generates First Digital Signature Providing Verification Original Policy

Step 206‧‧‧ file provides host encryption original policy to generate encrypted file

Step 208‧‧‧ The file providing host generates a file to be authenticated, and the file to be authenticated includes the first digital signature and the encrypted file

Step 210‧‧‧ The document provides the host to generate a delivery document, the delivery document includes the document to be authenticated and the second digit signature of the document to be verified

Step 222‧‧‧ file provides the host to send the delivery file to the verification server

Step 226‧‧‧Verify that the server successfully verified the file to be authenticated

Step 230‧‧‧Verification server generates an electronic policy, the electronic policy contains the delivery document and the third digit signature of the verification delivery document

Step 242‧‧‧ Verify the server to send the electronic policy to the file providing host

Step 246‧‧‧ file provides the host to transfer the electronic policy to the client

Step 251‧‧‧ Client verification of the delivery document and the document to be certified

Step 253‧‧‧ Whether the client successfully verifies the delivery document and the document to be authenticated

Step 255‧‧‧ The client displays the verification result

Step 260‧‧‧ The client decrypts the encrypted file as a decrypted file

Step 271‧‧‧ The client displays the decrypted file

Step 275‧‧‧ The client transmits the decrypted file and the electronic policy to the authentication server

Step 280‧‧‧Verify the server to verify the decrypted file and the delivery file

Step 291‧‧‧ Verify the server to send the verification result to the client

Step 295‧‧‧ The client displays the verification result

1 is a system architecture diagram of an electronic security certificate verification using an electronic voucher according to the present invention.

2A is a flow chart of a method for verifying an electronic policy using an electronic voucher according to the present invention.

FIG. 2B is a flow chart of an additional method for providing a file to be authenticated according to the present invention.

FIG. 2C is a flow chart of an additional method for verifying an electronic policy using an electronic voucher according to the present invention.

The features and embodiments of the present invention will be described in detail below with reference to the drawings and embodiments, which are sufficient to enable those skilled in the art to fully understand the technical means to which the present invention solves the technical problems, and The achievable effects of the present invention.

The invention can send the electronic insurance policy including the digital signature to the client by the file providing host after the file providing host and the verification server sequentially process the authentication file to generate the electronic insurance certificate, and the client can be based on the electronic policy. Digital signature verification The contents of the original policy in the certification document are correct and the verification results are displayed.

The system operation of the present invention will be described below with reference to the system architecture diagram of the electronic voucher verification electronic policy referred to in the "FIG. 1". As shown in "FIG. 1", the system of the present invention includes a file providing host 110, a verification server 120, and a client 130. Wherein, the document providing host 110 is usually set up in an insurance institution that provides an original policy and/or an electronic policy, such as an insurance company, etc., and the verification server 120 is usually set in a voucher institution, such as a voucher issuing unit, or the like, or may be set in An insurance institution that provides an original policy and/or an electronic policy, but the present invention is not particularly limited to the location where the file providing host 110 and the authentication server 120 are set.

The file providing host 110 is responsible for generating the delivery file. The file providing file generated by the host 110 includes a file to be authenticated and a second digital signature provided to verify the file to be authenticated, that is, the file providing host 110 first uses the file to provide the public key of the host 110 (public) Key) Calculate the document to be certified, and obtain the second digit signature generated by the calculation, and combine the document to be certified with the second digit, or merge the document to be certified, the second digit signature and other materials into the delivery document. .

The file to be authenticated included in the delivery document may be the original policy for recording the content of the policy of the user, or may be an electronic file containing an encrypted file and the first digital signature. The file providing host 110 may encrypt the original policy to obtain the encrypted file, and calculate the original policy using the public key of the file providing host 110, thereby obtaining the first digital signature provided to verify the original policy after the calculation, and The encrypted file is signed with the first digit, or the encrypted file, the first digit signature, and other materials are merged into the file to be authenticated.

The file providing host 110 is also responsible for transmitting the generated delivery file to the verification server 120, and receiving the electronic policy returned by the verification server 120 after digitally signing the delivery document, and the received electronic policy. Transfer to client 130. In some embodiments, the file providing host 110 transmits the electronic policy to the client 130 via email, but the invention is not limited thereto.

The verification server 120 is responsible for receiving the delivery file transmitted by the file providing host 110, and verifying the to-be-certified file in the delivery file according to the second digital signature in the delivery file.

The verification server 120 is also responsible for generating an electronic after successfully verifying the file to be authenticated. The policy and the generated electronic policy are returned to the file to be stored by the host 110. The electronic policy generated by the verification server 120 includes the received delivery document and a third digital signature provided to verify the delivery document. That is to say, after receiving the electronic policy, the verification server 120 uses the public key of the verification server 120 to calculate the delivery document to obtain the third digital signature generated by the calculation, and the third file to be sent and the third Digital signature, or the combination of the delivery document, the third digit signature and other materials into an electronic policy. Among other things, the other materials that are merged into the electronic policy include, but are not limited to, version information.

In addition, the authentication server 120 can receive the decrypted file transmitted by the client 130 and the electronic policy. Since the electronic policy includes the delivery document and the third digital signature, the delivery document includes the file to be authenticated, and the first digit signature may be included in the to-be-certified file. Therefore, the verification server 120 may sign according to the first digit. The decrypted file is verified, and the delivery file is verified according to the third digit signature, and the verification result is generated after verification, and the generated verification result is transmitted to the client 130.

The client 130 is responsible for receiving the electronic policy transmitted by the file providing host 110. Generally, the client 130 can be a device used by the user or a software or hardware in the device used by the user, and the client 130 can open the electronic policy and read the delivery document from the electronic policy. The third digit is signed and the signature file in the electronic policy is verified according to the third digit signature in the electronic policy; the delivery document can also be opened, and the document to be authenticated and the second digit signature are read from the delivery document. And verify the file to be authenticated in the delivery document according to the second digit signature in the delivery document. Even when the file to be authenticated includes the encrypted file and the first digital signature, the client 130 can open the file to be authenticated, and the encrypted file and the first digital signature are read from the file to be authenticated. In addition, the client 130 can also display the verification result of the delivery file and the file to be authenticated.

After the client 130 successfully verifies the file to be authenticated and the file to be authenticated, if the file to be authenticated includes the encrypted file and the first digital signature, the client 130 can decrypt the encrypted file in the file to be authenticated to obtain the decrypted file (that is, the file). The original policy provided by the server 110 is provided). The client 130 can also transmit the decrypted decrypted file and the electronic policy to the verification server 120, whereby the verification server 120 verifies the correctness of the decrypted file and the delivery file.

The client 130 can also display the decrypted file generated by the decryption and/or the verification result returned by the verification server 120. Wherein, the client 130 can use the verification result as the illustrated party. The display is displayed at a specific location of the user interface, for example, the verification result is displayed in the status column, etc., but the present invention is not limited thereto, and the client 130 may display the verification result on the client 130 by using a visual electronic stamp. In the decrypted file displayed, wherein the verification result is indicated as passing verification, the electronic seal displayed by the client 130 is also indicated as passing the verification, and when the verification result is indicated as failing the verification, the electronic seal is also indicated as failing. Verification, that is to say, is not the same as the electronic seal that passes the verification and fails verification, so that the user can directly confirm whether the decrypted file passes the verification after viewing.

Next, an operational system and method of the present invention will be described with reference to an embodiment, and reference is made to the flowchart of the method for verifying an electronic policy using an electronic voucher according to the "2A".

First, a file to be authenticated needs to be provided (step 200). If the original electronic policy does not require encryption, for example, without personal data, the document to be certified may be the original electronic policy.

However, in practice, since the original policy is an electronic file that records the contents of the user's policy, in order to allow the insurance company to protect the user's personal information from third parties, such as providing a certificate authority, but also allowing the user to The third party verification server 120 verifies the policy content recorded in the electronic policy, and the file providing host 110 can generate the original policy (step 202) after obtaining the provided original policy as shown in the flow of "FIG. 2B". The first digital signature used to verify the original policy (step 204), and the original policy is encrypted to generate an encrypted file (step 206), after which a file to be authenticated containing the encrypted file and the first digital signature is generated (step 208).

Continuing back to "FIG. 2A", after the file to be authenticated is provided, the file providing host 110 can generate a delivery file (step 210). That is, the file providing host 110 generates a second digital signature for verifying the file to be authenticated, and generates a delivery file containing the file to be authenticated and the second digital signature.

After the file providing host 110 generates the delivery file (step 210), the file providing host 110 can transmit the generated delivery file to the verification server 120 (step 222).

After receiving the mailing file transmitted by the file providing host 110, the verification server 120 may verify the file to be authenticated in the mailing file according to the second digit signature in the mailing file (step 226). That is, using the file to provide the host 110's public key to calculate the authentication file, And compare the data generated by the calculation with whether the second digit signature is the same.

If the difference indicates that the file to be authenticated has not passed the verification, that is, the file to be authenticated may have been tampered with, it is not necessary to continue the execution of the present invention; if the same, the file to be authenticated is verified, and the verification server 120 can generate an electronic policy (step 230). ). That is, the verification server 120 generates a third digital signature for verifying the delivery document and generates an electronic policy including at least the delivery document and the third digital signature.

After the verification server 120 generates the electronic policy (step 230), the verification server can transmit the generated electronic policy back to the file providing host 110 (step 242), and the file providing host 110 receives the verification from the verification server 120. After the electronic policy, the received electronic policy can be stored and the stored electronic policy transmitted to the client 130 (step 246). In the present embodiment, it is assumed that the file providing host 110 will send the electronic policy to the user's email address.

After receiving the electronic policy transmitted by the file providing host 110, the client 130 can verify the mailing file included in the electronic policy and the file to be authenticated included in the mailing file (step 251), and display the verification result (step 255). .

In addition, as shown in FIG. 2C, after successfully verifying the delivery file and the file to be authenticated (step 253), the client 130 may decrypt the encrypted file included in the file to be authenticated into a decrypted file (step 260), and The decrypted file is displayed (step 271).

Thereafter, the client 130 can transmit the decrypted file and the electronic policy to the verification server 120 (step 275). After receiving the decrypted file transmitted by the client 130 and the electronic policy, the verification server 120 can verify the received decrypted file. And the electronic policy (step 280), and the verification result can be transmitted back to the client 130 (step 291), and the client 130 can display the verification result after receiving the verification result transmitted by the verification server 120 (step 295). It is assumed that in the present embodiment, the client 130 displays an electronic seal corresponding to the verification result when the decrypted file is displayed.

In summary, it can be seen that the difference between the present invention and the prior art is that after the digital signature of the file to be authenticated by the file providing host, the verification server will digitally sign the document to be authenticated after the signature, the client The terminal can verify the digital signature of the verification server and the file providing host, and display the technical means of the verification result, which can be solved by using a technical means. The owner of the electronic policy in the prior art cannot directly confirm whether the content of the policy recorded in the electronic policy has been tampered with or forged, thereby achieving the technical effect of improving the ease of use of the electronic policy.

Furthermore, the method for verifying an electronic policy using the electronic voucher of the present invention can be implemented in hardware, software or a combination of hardware and software, or can be implemented in a centralized manner in a computer system or spread over several interconnections with different components. The decentralized implementation of the computer system.

While the embodiments of the present invention have been described above, the above description is not intended to limit the scope of the invention. Any modification of the form and details of the practice of the present invention, which is a matter of ordinary skill in the art to which the present invention pertains, is a patent protection of the present invention. range. The scope of the invention is to be determined by the scope of the appended claims.

Step 200‧‧‧Provide documents to be certified

Step 210‧‧‧ The document provides the host to generate a delivery document, the delivery document includes the document to be authenticated and the second digit signature of the document to be verified

Step 222‧‧‧ file provides the host to send the delivery file to the verification server

Step 226‧‧‧Verify that the server successfully verified the file to be authenticated

Step 230‧‧‧Verification server generates an electronic policy, the electronic policy contains the delivery document and the third digit signature of the verification delivery document

Step 242‧‧‧ Verify the server to send the electronic policy to the file providing host

Step 246‧‧‧ file provides the host to transfer the electronic policy to the client

Step 251‧‧‧ Client verification of the delivery document and the document to be certified

Step 255‧‧‧ The client displays the verification result

Claims (10)

A method for verifying an electronic policy using an electronic voucher, the method comprising at least the steps of: providing an original policy; a file providing host generating a first digital signature providing verification of the original policy; the file providing a host to generate a file to be authenticated, The to-be-certified file includes the first digital signature and an encrypted file generated by the original policy; the file providing host generates a delivery file, the delivery file includes the to-be-certified file, and provides verification to the authentication a second digit signature of the file; the file provides a host to transmit the delivery file to a verification server; the verification server generates an electronic policy after successfully verifying the to-be-certified file, and the electronic policy includes the delivery document And providing a third digit signature for verifying the delivery document; the verification server transmitting the electronic policy to the file providing host; the file providing the host to transmit the electronic policy to a client; the client successfully verifying the electronic After the policy and the file to be authenticated, decrypt the encrypted file as a decrypted file; the client transmits the decrypted file And the electronic policy to the authentication server; decrypt the authentication server validate the document and send the signed document; the authentication server transmits a verification result to the client; and the client displays the verification result. The method for verifying an electronic policy by using an electronic voucher as described in claim 1, wherein the file provides a host to transmit the electronic policy to the client, and the host for providing the file transmits the electronic policy by email. The method for verifying an electronic policy by using an electronic voucher according to claim 1, wherein the method further comprises displaying the encrypted file after the decrypting the encrypted file. The steps to decrypt the file. A method for verifying an electronic policy by using an electronic voucher, the method comprising at least the following steps: providing a file to be authenticated, the file to be authenticated includes an original policy; and the file providing host generates a delivery file, the method comprising the to-be-certified file And providing a second digital signature for verifying the to-be-certified file; the file provides a host to transmit the delivery file to a verification server; the verification server generates an electronic policy after successfully verifying the to-be-certified file, The electronic policy includes the delivery document and a third digit signature for verifying the delivery document; the verification server transmits the electronic policy to the file providing host; the file provides a host to transmit the electronic policy to a client; The client verifies the delivery file and the to-be-certified file and generates a verification result; and the client displays the verification result. A system for verifying an electronic policy by using an electronic voucher, the system comprising: a file providing host for generating a delivery file, the delivery file comprising a file to be authenticated and providing a verification of the second digit of the document to be authenticated a verification server for receiving the file to provide the delivery document transmitted by the host, and after successfully verifying the delivery document, generating an electronic policy, the electronic policy including the delivery document and providing verification Signing a third digit signature of the document, and transmitting the electronic policy to the file to provide host storage; and a client for receiving the file to provide the electronic policy transmitted by the host, and for verifying the delivery The file and the file to be authenticated, and the verification result of the file to be authenticated and the file to be sent is displayed. The system for verifying an electronic policy using an electronic voucher as described in claim 5, wherein the file to be authenticated includes an encrypted file generated by the original policy and the file is encrypted. Provide the first digital signature of the original policy provided by the host to provide verification. The system for verifying an electronic policy by using an electronic voucher as described in claim 5, wherein the client is further configured to decrypt the encrypted file as a decrypted file after successfully verifying the delivery file and the to-be-certified file, and Transmitting the decrypted file and the electronic policy to the verification server, the verification server is further configured to verify the decrypted file and the delivery file, and transmit a verification result to the client display. A system for verifying an electronic policy using an electronic voucher as described in claim 5, wherein the file providing host transmits the electronic policy by email. The system for verifying an electronic policy using an electronic voucher as described in claim 5, wherein the electronic policy further includes version information. A system for verifying an electronic policy using an electronic voucher as described in claim 5, wherein the verification server is configurable to the voucher authority or an insurance institution that provides an original policy or the electronic policy.