TWI673626B - Method for verifying electronic files using biometrics, terminal electronic device and computer readable recording medium - Google Patents

Abstract

A method for verifying an electronic file by using biometrics is applied to a terminal electronic device that displays an original electronic file for signature by a user. The terminal electronic device obtains a signature track of the user and at least one biometric, and sends a certificate to the terminal. The server obtains a key pair including a public key and a private key, generates a signature value according to the at least one biological characteristic and the private key, and encapsulates the signature value and the signature track into a first data, And encrypting the at least one biometric with the private key to generate a second data, and combining the first data into the original electronic file to generate a third data, and then combining the first data and the second data And the third data is provided to a verification server.

Description

Method for verifying electronic file using biometrics, terminal electronic device and computer-readable recording medium

The present invention relates to a method for verifying an electronic file, and more particularly to a method for verifying an electronic file using a biological feature.

When the current financial transaction involves a business that requires the customer to personally sign the transaction-related documents, most of the customers need to go to the counter of the financial unit to handle it, or a bank person visits the customer and completes the in-person signing operation to identify the true identity of the customer and Confirm the client's willingness to trade. However, the above approach is limited by the bank's business hours, so that financial services that meet customer needs cannot be provided immediately.

Therefore, in order to provide financial services that meet customer needs in real time, an existing electronic transaction method allows financial units and clients to conduct remote electronic transaction instructions through an agreed mechanism. However, this transaction method can only indirectly identify the identity of the customer, and cannot identify the authenticity of the object of the transaction instruction and its undeniability.

Therefore, an object of the present invention is to provide a method for verifying an electronic file using biometrics, which allows a verification unit to verify Signature value, authenticity and non-repudiation of the identity of the person who signed the electronic file.

Therefore, the method for verifying an electronic file using biometrics of the present invention is applied to a terminal electronic device, and a display unit of the terminal electronic device displays an original electronic file for a user to sign; the method includes: (A) the terminal electronic The device receives a signature track of the user through an input interface, and obtains at least one biometric of the user through a biometric extraction module; (B) the terminal electronic device sends a The certificate server obtains a key pair including a public key and a private key; (C) the terminal electronic device generates a signature value based on the at least one biometric and the private key through a signature generation module, and Encapsulate the signature value and the signature track into a first piece of data; (D) the terminal electronic device encrypts the at least one biometric with the private key through a cryptographic module to generate a second piece of data; (E) the The terminal electronic device merges the first data into the original electronic file through a merge module to generate a third data; and (F) the terminal electronic device uses the communication module to convert the first data, the Two data and the information provided to a third authentication server.

In some embodiments of the present invention, the verification server can obtain the key pair from the certificate server or the terminal electronic device, and has the same signature generation module as the terminal electronic device, and the verification The server decrypts the second data by using the public key in the key pair to obtain the at least one biometric, and uses the signature generation module to obtain the at least one biometric and the key pair according to the decryption. The private key in generates a signature value to be verified, and compares the signature value to be verified with the value in the first data. Whether the signature value is the same to verify the authenticity of the signature track in the first material, and confirm the non-repudiation of the third material according to the authenticity of the signature track.

In some embodiments of the present invention, in step (A), the input interface further receives a video image of the user, and in step (C), the signature generation module changes the value of the signature, The signature track and the video image are packaged into the first data; thereby, the verification server verifies the first data by comparing whether the value of the signature to be verified is the same as the value of the signature in the first data. And the authenticity of the signature track and the video image, and the non-repudiation of the third data is confirmed according to the authenticity of the signature track and the video image.

In some embodiments of the present invention, in step (A), the terminal electronic device also obtains current GPS coordinate information through a GPS module, and the method further includes a step (c) before (c). G): The time stamp request module of the terminal electronic device requests an electronic time stamp from a time stamp server, or the time stamp request module requests the electronic time stamp from the time stamp server with the GPS coordinate information, and returns Transmitting the GPS coordinate information with an electronic time stamp; and in step (C), the signature generating module is based on the at least one biometric feature, the private key and the GPS coordinate information, the electronic time stamp, and an electronic time stamp. One of the three GPS coordinate information stamped generates the signature value. In step (D), the encryption module uses the private key to the at least one biometric and the GPS coordinate information, the electronic time stamp, and has One of the three GPS coordinate information of the electronic time stamp is used for generating the signature value encrypted to generate the second data; thereby, the verification server uses the The public key decrypts the second data to obtain one of the at least one biometric feature and the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with the electronic time stamp, and generates a model through the signature. The group generates the to-be-verified signature value according to one of the private key and the at least one biometric obtained by decryption, the GPS coordinate information, the electronic timestamp, and the GPS coordinate information with an electronic timestamp.

Or, in some embodiments of the present invention, in step (A), the terminal electronic device further obtains current GPS coordinate information through a GPS module, and the method further includes a step before step (C). Step (G): The time stamp request module of the terminal electronic device requests an electronic time stamp from a time stamp server, or the time stamp request module requests the electronic time stamp from the time stamp server with the GPS coordinate information, Enabling the GPS coordinate information with an electronic time stamp to be transmitted back; and in step (C), the signature generating module is based on the at least one biometric feature, the private key and the GPS coordinate information, the electronic time stamp, and having One of the three GPS coordinate information of the electronic time stamp generates the signature value, and encapsulates the signature value, the signature track, and the video image into the first data; in step (D), the encryption mode The group uses the private key to encrypt the at least one biometric and the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with the electronic time stamp to generate the signature value to generate the second Data; by this, the authentication server uses the public key The second data is decrypted to obtain one of the at least one biometric feature and the GPS coordinate information, the electronic timestamp, and the GPS coordinate information with an electronic timestamp, and a module is generated according to the private information through the signature generation module. Key and the at least one creature obtained by decryption One of the characteristics, the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with an electronic time stamp generates the signature value to be verified.

Or, in some embodiments of the present invention, in step (A), the terminal electronic device also generates an electronic time stamp through its time stamp servo module, or the terminal electronic device also obtains it through its GPS module. A current GPS coordinate information, and using the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so that the GPS coordinate information with the electronic time stamp is returned; and in step (C), the signature The generating module generates the signature value according to the at least one biological feature, the electronic time stamp or the GPS coordinate information with the electronic time stamp, and the private key, and in step (D), the encryption module uses the private key One of the at least one biometric feature and the electronic time stamp or the GPS coordinate information with the electronic time stamp is used to generate the signature value to encrypt and generate the second data; thereby, the verification server uses the The public key in the key pair decrypts the second data, and obtains the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and obtains the decrypted information obtained through the signature generation module through the signature generating module. The at least one biological feature, the electron Stamp or the electronic stamp with GPS coordinate information and the secret key to generate the signature value to be validated.

Or, in some embodiments of the present invention, in step (A), the terminal electronic device also generates an electronic time stamp through its time stamp servo module, or the terminal electronic device also obtains it through its GPS module. A current GPS coordinate information, and use the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so that the return has electrical The GPS coordinate information of the sub-time stamp; and in step (C), the signature generation module generates the GPS coordinate information based on the at least one biometric feature, the electronic time stamp or the GPS coordinate information with the electronic time stamp, and the private key; The signature value, and the signature value, the signature track and the video image are encapsulated into the first data; in step (D), the encryption module uses the private key to the at least one biological feature and the electronic time One of the GPS coordinate information with an electronic time stamp or an electronic time stamp is used to generate the second value by encrypting the signature value; thereby, the verification server uses the public key in the key pair to The second data is decrypted to obtain the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and the signature generating module uses the signature generation module to obtain the at least one biometric and the electronic time stamp according to the decryption. Or the GPS coordinate information with the electronic time stamp and the private key generate the signature value to be verified.

In some embodiments of the present invention, the terminal electronic device executes an application program installed therein to complete the steps, and the application program includes the signature generation module, the encryption module, and the merge module. And the timestamp request module.

In some embodiments of the present invention, the terminal electronic device executes an application program installed therein to complete the steps, and the application program includes the signature generation module, the encryption module, and the merge module. And the time stamp servo module.

Furthermore, a terminal electronic device implementing the method of the present invention can communicate with a certificate server and an authentication server, and the terminal electronic device displays an original electronic document for a user to sign; the terminal electronic device includes: a A display unit; a biometric acquisition module; a communication module; an input interface; and a processing unit, It is electrically coupled with the display unit, the biometric extraction module, the communication module and the input interface, so that the display unit displays the original electronic file, and the input interface accepts a signature input by the user. The track is used to sign the original electronic document, and the biometric extraction module obtains at least one biometric of the user, and obtains a public key and a private key from the certificate server through the communication module. A key pair; a signature generation module of the processing unit generates a signature value according to the at least one biological characteristic and the private key, and encapsulates the signature value and the signature track into a first data, the processing unit An encryption module and encrypts the at least one biometric with the private key to generate a second data, and a merge module of the processing unit merges the first data into the original electronic file to generate a third Data, the processing unit then provides the first data, the second data, and the third data to the verification server through the communication module.

In some embodiments of the present invention, the input interface includes a handwriting input unit and an image capture unit, the handwriting input unit is used for handwriting to input the signature track, and the image capture unit captures a video of the user Image, and the signature generation module of the processing unit encapsulates the signature value, the signature track, and the video image into the first data; thereby, the verification server compares the signature value to be verified with the first value. Whether the value of the signature in the first data is the same to verify the authenticity of the signature track and the video image in the first data, and confirm the authenticity of the third data based on the authenticity of the signature track and the video image Undeniable.

In some aspects of the invention, the processing unit further includes a time Stamp the servo module, and the processing unit further causes the time stamp servo module to generate an electronic time stamp, or the terminal electronic device further includes a GPS module, and the processing unit also obtains a current GPS through the GPS module Coordinate information, and using the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so that the GPS coordinate information with the electronic time stamp is returned; and the signature generation module of the processing unit is based on the at least one The biometric feature, the electronic time stamp or the GPS coordinate information with the electronic time stamp and the private key generate the signature value, and the signature value, the signature trajectory and the video image are packaged as the first data; and the The encryption module of the processing unit uses the private key to encrypt the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp to generate the signature value to generate the second data. ; Thereby, the verification server decrypts the second data by using the public key in the key pair to obtain the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and Produced through the seal At least one module based on the acquired biometric decrypted, timestamp or time stamps with GPS coordinates of the electronic information and the secret key to generate the signature to be verified when the electronic value.

In some embodiments of the present invention, the processing unit executes an application program installed in the electronic device of the terminal, and the application program includes the time stamp servo module, the signature generation module, the encryption module, and The merged module.

A computer-readable recording medium storing a signature-generating module, an encryption module, a merging module, and a time stamp request module or a time stamp server. After the application program of the server module is loaded and executed by a terminal electronic device having a display unit, a biometric acquisition module, a communication module, an input interface, and a GPS module, the application program is The terminal electronic device can complete the method for verifying an electronic file using a biometric feature as described above.

The effect of the present invention is: generating the signature value according to the at least one biological characteristic (and the GPS coordinate information, the electronic timestamp or the GPS coordinate information with the electronic timestamp) and the private key, and the signature The chapter value and the signature track (and the video image) are encapsulated into the first data, and the at least one biological feature (and the GPS coordinate information, the electronic time stamp, or the GPS coordinate with the electronic time stamp) is sealed with the private key. Information) encryption to generate the second data, merge the first data into the original electronic file to generate the third data, and record the first data, the second data, and the third data in the verification server In this way, the verification server can obtain the at least one biometric (and the GPS coordinate information, the electronic time stamp, or the GPS coordinate information with an electronic time stamp) by decrypting the second data, and according to The at least one biometric (and the GPS coordinate information, the electronic timestamp or the GPS coordinate information with an electronic timestamp) and the private key generate the signature value to be verified, and compare the signature value to be verified with the signature value. Whether the value of the signature in the first document is consistent , And determine the authenticity of the signature track (and the video image) in the first data, and after verifying the authenticity of the signature track (and the video image) in the first data, you can confirm based on the first data The third piece of information (ie, the electronic document that completed the digital signature) is indeed a document that the signatory expressed its consent and undeniable.

S1 ~ S7‧‧‧step

100‧‧‧ terminal electronics

200‧‧‧Internet

1‧‧‧display unit

2‧‧‧Biometric Capture Module

3‧‧‧GPS Module

4‧‧‧Communication Module

5‧‧‧ input interface

51‧‧‧Handwriting input unit

52‧‧‧Image Acquisition Unit

6‧‧‧ processing unit

61‧‧‧Time stamp request module

62‧‧‧Sign generation module

63‧‧‧Encryption Module

64‧‧‧Merge modules

65‧‧‧time stamp servo module

7‧‧‧Certificate server

8‧‧‧time stamp server

9‧‧‧ authentication server

Other features and effects of the present invention will be clearly shown in the embodiments with reference to the drawings, in which: FIG. 1 is a main flowchart of an embodiment of a method for verifying an electronic file by using a biometric feature of the present invention; FIG. 2 is the present invention. A block diagram of the main circuit and module of an embodiment of the terminal electronic device of the invention; and FIG. 3 is a block diagram of the main circuit and module of another embodiment of the terminal electronic device of the invention.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are represented by the same numbers.

Referring to FIG. 1, a main flow of an embodiment of a method for verifying an electronic file by using a biometric feature of the present invention is applied to a terminal electronic device 100 shown in FIG. 2 and implemented by the terminal electronic device 100. The terminal electronic device 100 can be a mobile phone, tablet, personal computer held by the user, or a financial institution that can be directly operated by the user to buy / sell wealth management products, apply for loans, advance cash and withdraw money ... etc. Financial service terminal equipment for various financial services, which mainly includes a display unit 1, a biometric acquisition module 2, a GPS module 3, a communication module 4, an input interface 5 and an electrical coupling with the aforementioned components接 Processing Unit 6.

The display unit 1 is used in this embodiment to display an original electronic document (not shown) for a user to view and sign; the biometric extraction module 2 is used to obtain at least one biometric of the user, For example, at least one of the user's face, voice, finger veins, fingerprints, etc. is not limited thereto. The GPS module 3 is used to obtain current GPS coordinate information of the terminal electronic device 1. The communication module 4 is used to communicate with a certificate server 7, a time stamp server 8 and a verification server 9 through the Internet 200. The input interface 5 includes a handwriting input unit 51 and an image in this embodiment. Capture unit 52, the handwriting input unit 51 may be, for example, a handwriting tablet, an electronic signature pad, or a touch display panel integrated with the display unit 1, but is not limited thereto; the image capture unit 52 may be a camera or a video camera to obtain a video image of the user.

The processing unit 6 in this embodiment executes an application program pre-installed in the terminal electronic device 100 to complete the method of this embodiment. As shown in FIG. 2, the application program includes a time stamp request module 61, A signature generation module 62, an encryption module 63, and a merge module 64. Of course, these modules 61 to 64 can also be implemented in firmware and burned into the processing unit 6 without being limited to software.

Therefore, when the user wants to sign the original electronic file and enters one of the signature tracks through the handwriting input unit 51, the processing unit 6 will receive the signature track transmitted from the handwriting input unit 51. At this time, as shown in FIG. In step S1 of 1, the processing unit 6 controls the image capturing unit 52 to obtain the video image of the user, such as the use The user's face image, and control the biometric capture module 2 to obtain at least one biometric of the user. Moreover, as shown in step S2 in FIG. 1, the processing unit 6 requests the certificate server 7 through the communication module 4 to provide a key pair (certificate) including a public key and a private key; and as shown in step 1 in FIG. 1. S3. The time stamp request module 61 of the processing unit 6 obtains the current GPS coordinate information from the GPS module 3, and transmits the GPS coordinate information to the time stamp server 8 through the communication module 4, and sends the GPS coordinate information to the time stamp server 8. The timestamp server 8 requests an electronic timestamp. Therefore, the time stamp server 8 will place an electronic time stamp on the GPS coordinate information, record the GPS coordinate information with the electronic time stamp, and return the GPS coordinate information with the electronic time stamp to the communication module 4 through the communication module 4. The processing unit 6. It is worth mentioning that the above steps S1, S2, and S3 are not sequential, and they can also be performed simultaneously or sequentially.

Then, as shown in step S4 of FIG. 1, the signature generation module 62 of the processing unit 6 generates a signature value based on the at least one biological characteristic, the GPS coordinate information with an electronic time stamp, and the private key, and applies the signature value. The signature value, the signature track and the video image are packaged into a first piece of data; specifically, the signature generation module 62 will include the at least one biometric feature, the GPS coordinate information with an electronic time stamp, and the private key to An irreversible hash digest algorithm (or hash function), such as SHA1 or MD5, performs a calculation to generate a hash digest, which is the signature value (or digital fingerprint) in this embodiment. Then, the signature value, the signature track and the video image are encapsulated into a first data with a standard data format, such as PKCS # 7.

Next, as shown in step S5 of FIG. 1, the encryption module 63 of the processing unit 6 uses the private key to asymmetrically encrypt the at least one biological characteristic and the GPS coordinate information with an electronic time stamp to generate a second data. Then, as shown in step S6 in FIG. 1, the merging module 64 of the processing unit 6 merges the first data into the original electronic file to generate a third data, ie, an electronic file that has been digitally signed. Finally, as shown in step S7 in FIG. 1, the processing unit 6 transmits the first data, the second data, and the third data to the verification server 9 through the communication module 4, thereby completing the original electronic file and its Digital signature storage operation.

Moreover, the verification server 9 has the signature generating module 62 which is the same as the terminal electronic device. Therefore, when the verification server 9 (or in the future) wants to verify the authenticity of the digital signature of the original electronic document and the consent and non-repudiation of the signatory of the original electronic document, the verification server 9 can provide the certificate server with 7 (or the terminal electronic device 100) obtains the key pair, and uses the public key in the key pair and a preset decryption algorithm to perform asymmetric decryption on the second data, and obtains the second data therefrom. At least one biometric feature and the GPS coordinate information with an electronic time stamp, and using the signature generation module 62 to obtain the at least one biometric feature, the GPS coordinate information with an electronic time stamp, and the key pair in the key pair obtained by decryption The private key generates a signature value to be verified and compares the signature value to be verified with the signature value in the first data. If yes, it represents the signature track and the video image in the first data. It has not been tampered with during transmission, but has its authenticity.

Therefore, after verifying the authenticity of the signature track and the video image in the first document, you can confirm that the third document (that is, the electronic document that completed the digital signing) really expresses the consent and undeniability of the signatory based on the first document. The document is undeniable.

It is worth mentioning that in this embodiment, the time stamp request module 61 can also directly request an electronic time stamp from the time stamp server 8, and the signature generation module 62 is based on the at least one biological characteristic and the electronic time. The stamp and the private key generate the signature value, and the encryption module 63 uses the private key to encrypt the at least one biometric and the electronic time stamp to generate the second data; therefore, the verification server 9 uses the After the public key in the key pair decrypts the second data, the at least one biometric and the electronic time stamp will be obtained, and the at least one biometric, the electronic obtained by the decryption through the signature generation module 62 will be obtained through the signature generation module 62. The timestamp and the private key generate the signature value to be verified; in addition, this embodiment can also omit the step of capturing video images and / or the timestamp request module 61 (that is, omitted) according to the requirements of other applications. The above-mentioned step S3) can also achieve the above-mentioned purpose in this case.

In addition, when the above-mentioned time stamp request module 61 is not used in this embodiment, in step S4, the signature generation module 62 generates the signature value according to the at least one biometric feature, the GPS coordinate information, and the private key. And, in step S5, the encryption module encrypts the at least one biometric feature and the GPS coordinate information with the private key to generate the second data; therefore, the verification server 9 uses the key in the key pair. After the public key decrypts the second data, the at least one biometric and the GPS coordinate information will be obtained, and the signature will be obtained through the signature. The chapter generation module 62 generates the to-be-verified signature value based on the at least one biometric, the GPS coordinate information, and the private key obtained by decryption.

Or, in other embodiments, the time stamp request module 61 described above may be omitted (that is, the above-mentioned step S3 is omitted), that is, the time stamp request module 61 is not obtained from the time stamp server 8 through the time stamp request module 61. The electronic time stamp is shown in FIG. 3, so that the processing unit 6 further includes a time stamp servo module 65, which can replace the time stamp server 8 and have a function of generating an electronic time stamp. Therefore, in step S1, the processing unit 6 further causes the time stamp servo module 65 to generate an electronic time stamp, or requests the time stamp servo module 65 for an electronic time stamp with the GPS coordinate information, so that the return has The GPS coordinate information of the electronic time stamp, and in step S4, the signature generation module 62 generates the signature based on the at least one biometric feature, the electronic time stamp, or the GPS coordinate information with the electronic time stamp and the private key. Chapter value, and in step S5, the encryption module 63 uses the private key to encrypt the at least one biological feature and the electronic time stamp or the GPS coordinate information with the electronic time stamp to generate the second data; therefore, the The verification server 9 decrypts the second data by using the public key in the key pair, and obtains the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and passes the signature The generating module 62 generates the to-be-verified signature value according to the at least one biometric obtained by decryption, the electronic time stamp or the GPS coordinate information having the electronic time stamp, and the private key.

To sum up, in the above embodiment, the signature generating module 62 uses the signature generating module 62 according to the at least one biological characteristic (and the GPS coordinate information, the electronic time stamp, or the electronic time stamp). The GPS coordinate information) and the private key generate the signature value, and the signature value and the signature trajectory (and the video image) are encapsulated into the first data, and the encryption module 63 uses the private key pair The at least one biometric feature (and the GPS coordinate information, the electronic timestamp, or the GPS coordinate information with an electronic timestamp) is encrypted to generate the second data, and the first data is merged with the merge module 64 by the merge module 64. The third data is generated in the original electronic file, and the first data, the second data, and the third data are recorded in the verification server 9, whereby the verification server 9 can detect the second data by The data is decrypted to obtain the at least one biological feature (and the GPS coordinate information, the electronic time stamp or the GPS coordinate information with an electronic time stamp), and according to the at least one biological feature (and the GPS coordinate information, the electronic time stamp) Or the GPS coordinate information with an electronic time stamp) and the private key to generate the signature value to be verified, and compare whether the signature value to be verified is consistent with the signature value in the first data, and determine the first The authenticity of the signature track (and the video image) in the data, After verifying the authenticity of the signature trajectory (and the video image) in the first document, you can confirm that the third document (that is, the electronic document that completes the digital signature) truly indicates the signatory ’s consent and cannot be denied based on the first document Document to achieve the efficacy and purpose of the present invention.

However, the above are only examples of the present invention. When the scope of implementation of the present invention cannot be limited in this way, any simple equivalent changes and modifications made in accordance with the scope of the patent application and the content of the patent specification of the present invention are still Within the scope of the invention patent.

Claims (21)

A method for verifying an electronic file by using biometrics is applied to a terminal electronic device, and a display unit of the terminal electronic device displays an original electronic file for a user to sign; the method includes: (A) the terminal electronic device passes through it An input interface receives a signature trajectory of the user, and obtains at least one biometric of the user through a biometric extraction module; (B) the terminal electronic device sends a certificate server to a certificate server through a communication module. Obtain a key pair including a public key and a private key; (C) the terminal electronic device generates a signature value based on the at least one biometric and the private key through a signature generation module, and applies the signature The chapter value and the signature track are encapsulated into a first piece of data; (D) the terminal electronic device encrypts the at least one biometric with the private key through its encryption module to generate a second piece of data; (E) the terminal electronic device Combining the first data into the original electronic file through a merge module to generate a third data; and (F) the terminal electronic device using the communication module to combine the first data and the second data The information provided to a third authentication server. The method for verifying an electronic file using biometrics as described in claim 1, wherein the authentication server can obtain the key pair from the certificate server or the terminal electronic device, and has the same signature as the terminal electronic device. A seal generation module, and the verification server decrypts the second data by using the public key in the key pair to obtain the at least one biometric, and uses the signature generation module to obtain the at least one biometric based on the decryption. A biometric and the key pair The private key generates a signature value to be verified, and compares the signature value to be verified with the signature value in the first data to verify the authenticity of the signature track in the first data, and The non-repudiation of the third material is confirmed according to the authenticity of the signature track. According to the method for verifying an electronic file using biometrics as described in claim 2, in step (A), the input interface further receives a video image of the user, and in step (C), the signature generation module Package the signature value, the signature track and the video image into the first data; thereby, the verification server compares whether the signature value to be verified is the same as the signature value in the first data, The authenticity of the signature track and the video image in the first data is verified, and the non-repudiation of the third data is confirmed according to the authenticity of the signature track and the video image. The method for verifying an electronic file using biometrics as described in claim 2, in step (A), the terminal electronic device also obtains current GPS coordinate information through a GPS module, and the method further includes step ( C) The previous step (G): The time stamp request module of the terminal electronic device requests an electronic time stamp from a time stamp server, or the time stamp request module requests the time stamp server with the GPS coordinate information. The electronic time stamp enables the GPS coordinate information with an electronic time stamp to be transmitted back; and in step (C), the signature generation module is based on the at least one biometric feature, the private key and the GPS coordinate information, the electronic One of the three timestamps and the GPS coordinate information with an electronic timestamp generates the signature value. In step (D), the encryption module uses the private key to the at least one biological feature and the GPS coordinate information, One of the electronic time stamp and the GPS coordinate information with the electronic time stamp is used to generate the The signer is encrypted to generate the second data; thereby, the verification server decrypts the second data by using the public key to obtain the at least one biometric and the GPS coordinate information, the electronic time stamp and the One of the three GPS coordinate information of the electronic time stamp, and the at least one biometric, the GPS coordinate information, the electronic time stamp, and the electronic time stamp obtained by the signature generation module according to the private key and decryption. One of the three GPS coordinate information is to generate the signature value to be verified. The method for verifying an electronic file using biometrics as described in claim 3, in step (A), the terminal electronic device also obtains current GPS coordinate information through a GPS module, and the method further includes step ( C) The previous step (G): The time stamp request module of the terminal electronic device requests an electronic time stamp from a time stamp server, or the time stamp request module requests the time stamp server with the GPS coordinate information. The electronic time stamp enables the GPS coordinate information with an electronic time stamp to be transmitted back; and in step (C), the signature generation module is based on the at least one biometric feature, the private key and the GPS coordinate information, the electronic One of a time stamp and the GPS coordinate information with an electronic time stamp generates the signature value, and encapsulates the signature value, the signature track, and the video image into the first data; in step (D) , The encryption module uses the private key to encrypt the at least one biometric and the GPS coordinate information, the electronic timestamp, and the GPS coordinate information with the electronic timestamp to generate the signature value, and Generating the second data; by this, the verification server The server decrypts the second data by using the public key to obtain one of the at least one biometric feature and the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with an electronic time stamp, and passes the The signature generation module is based on One of the private key and the at least one biometric obtained by decryption, the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with an electronic time stamp generates the to-be-verified signature value. According to the method for verifying an electronic file using biometrics as described in claim 2, in step (A), the terminal electronic device also generates an electronic time stamp through a time stamp servo module, or the terminal electronic device also uses an The GPS module obtains current GPS coordinate information, and uses the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so that the GPS coordinate information with the electronic time stamp is returned; and in step (C) , The signature generation module generates the signature value according to the at least one biometric feature, the electronic timestamp or the GPS coordinate information with the electronic timestamp, and the private key, and in step (D), the encryption module One of the at least one biological feature and the electronic time stamp or the GPS coordinate information with the electronic time stamp is encrypted by the private key to generate the signature value and generate the second data; thereby, the verification server The device decrypts the second data by using the public key in the key pair to obtain the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and generates a module through the signature. The at least one life obtained according to the decryption The object characteristics, the electronic time stamp or the GPS coordinate information with the electronic time stamp and the private key generate the signature value to be verified. According to the method for verifying an electronic file using biometrics as described in claim 3, in step (A), the terminal electronic device also generates an electronic time stamp through a time stamp servo module, or the terminal electronic device also uses an The GPS module obtains current GPS coordinate information, and uses the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so as to return the electronic time stamp with the electronic time stamp. GPS coordinate information; and in step (C), the signature generation module generates the signature value based on the at least one biometric feature, the electronic timestamp, or the GPS coordinate information with the electronic timestamp and the private key, and Encapsulate the signature value, the signature track and the video image into the first data; in step (D), the encryption module uses the private key to the at least one biological feature and the electronic time stamp or has an electronic time stamp One of the GPS coordinate information stamped is used to generate encryption of the signature valuer to generate the second data; thereby, the verification server decrypts the second data by using the public key in the key pair, And obtaining the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and obtaining the at least one biometric, the electronic time stamp, or the electronic time stamp through the signature generation module according to the decryption. The GPS coordinate information and the private key are used to generate the signature value to be verified. The method for verifying an electronic file using biometrics as described in claim 4 or 5, wherein the terminal electronic device executes an application installed therein to complete the steps, and the application includes the signature generation module, The encryption module, the merge module, and the timestamp request module. The method for verifying an electronic file using biometrics as described in claim 6 or 7, wherein the terminal electronic device executes an application installed therein to complete the steps, and the application includes the signature generation module, The encryption module, the merge module, and the time stamp servo module. A terminal electronic device capable of communicating with a certificate server and a verification server, and the terminal electronic device displays an original electronic document for a user to sign; the terminal electronic device includes: a display unit; A biometric acquisition module; a communication module; an input interface; and a processing unit which is electrically coupled with the display unit, the biometric acquisition module, the communication module and the input interface, so that The display unit displays the original electronic file, and causes the input interface to accept a signature track input by the user to sign the original electronic file, and causes the biometric extraction module to obtain at least one biometric of the user. And obtain a key pair including a public key and a private key from the certificate server through the communication module; a signature generation module of the processing unit generates a signature based on the at least one biological characteristic and the private key And the seal value and the signature track are encapsulated into a first piece of data, an encryption module of the processing unit encrypts the at least one biometric with the private key to generate a second piece of data, and the processing unit A merging module of the merging the first data into the original electronic file to generate a third data, and the processing unit extracts the first data, the second data and the third data through the communication module To the authentication server. The terminal electronic device according to claim 10, wherein the authentication server can obtain the key pair from the certificate server or the terminal electronic device, and has the signature with the signature in the processing unit of the terminal electronic device. A signature generating module with the same generating module, and the verification server decrypts the second data by using the public key in the key pair, obtains the at least one biometric, and passes the signature through the signature The generating module generates a signature value to be verified according to the at least one biometric obtained from the decryption and the private key in the key pair, and compares the signature value to be verified with the signature value in the first data. Whether phase Similarly, to verify the authenticity of the signature track in the first material, and to confirm the non-repudiation of the third material according to the authenticity of the signature track. The terminal electronic device according to claim 11, wherein the input interface includes a handwriting input unit and an image capture unit, the handwriting input unit is used for handwriting to input the signature track, and the image capture unit captures the user's A video image, and the processing unit encapsulates the signature value, the signature track, and the video image into the first data; thereby, the verification server compares the signature value to be verified with the first data Whether the value of the signature is the same to verify the authenticity of the signature track and the video image in the first data, and confirm the non-repudiation of the third data based on the authenticity of the signature track and the video image. The terminal electronic device according to claim 11, further comprising a GPS module, and the processing unit also obtains current GPS coordinate information through the GPS module, and a time stamp request module of the processing unit further communicates through the communication. The module requests an electronic time stamp from a time stamp server, or requests an electronic time stamp from the time stamp server with the GPS coordinate information, so as to return the GPS coordinate information with the electronic time stamp; and the processing unit's The signature generation module generates the signature value according to one of the at least one biometric feature, the private key and the GPS coordinate information, the electronic timestamp, and the GPS coordinate information with the electronic timestamp. The encryption module uses the private key to encrypt the at least one biometric and the GPS coordinate information, the electronic timestamp, and the GPS coordinate information with the electronic timestamp to generate the signature value. Generate the second data; thereby, the verification server decrypts the second data by using the public key to obtain the at least one biometric and the GPS socket One of three of the tag information, the electronic timestamp, and the GPS coordinate information with the electronic timestamp, and the at least one biological characteristic, the GPS coordinate information, One of the electronic time stamp and the GPS coordinate information with the electronic time stamp generates the signature value to be verified. The terminal electronic device according to claim 12, further comprising a GPS module, and the processing unit also obtains current GPS coordinate information through the GPS module, and a time stamp request module of the processing unit further communicates through the communication. The module requests an electronic time stamp from a time stamp server, or requests an electronic time stamp from the time stamp server with the GPS coordinate information, so as to return the GPS coordinate information with the electronic time stamp; and the processing unit's The signature generation module generates the signature value according to one of the at least one biometric feature, the private key and the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with the electronic time stamp, and applies the signature The chapter value, the signature track and the video image are packaged into the first data, and the encryption module of the processing unit uses the private key to the at least one biological feature and the GPS coordinate information, the electronic time stamp, and the electronic time One of the three GPS coordinate information stamped is used to generate the encrypted value of the signature valuer to generate the second data; thereby, the verification server decrypts the second data by using the public key to obtain the at least A creature Retrieve one of the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with an electronic time stamp, and use the signature generation module to obtain the at least one biometric, the One of the GPS coordinate information, the electronic time stamp, and the GPS coordinate information with an electronic time stamp generates the signature value to be verified. The terminal electronic device according to claim 11, wherein the processing unit further includes a time stamp servo module, and the processing unit further causes the time stamp servo module to generate an electronic time stamp, or the terminal electronic device further includes a GPS Module, and the processing unit also obtains current GPS coordinate information through the GPS module, and uses the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so that the GPS with the electronic time stamp is returned. Coordinate information; and the signature generation module of the processing unit generates the signature value based on the at least one biological characteristic, the electronic timestamp or the GPS coordinate information with the electronic timestamp, and the private key, and the signature The value and the signature track are encapsulated into the first data, and the encryption module of the processing unit uses the private key for one of the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp. The second data is generated by encrypting the signature generating person; thereby, the verification server decrypts the second data by using the public key in the key pair to obtain the at least one biometric and the electronic Timestamp or The GPS coordinate information with an electronic time stamp is generated by the signature generation module according to the at least one biometric, the electronic time stamp, or the GPS coordinate information with the electronic time stamp and the private key, and the private key is generated to be verified. Signature value. The terminal electronic device according to claim 12, wherein the processing unit further includes a time stamp servo module, and the processing unit further causes the time stamp servo module to generate an electronic time stamp, or the terminal electronic device further includes a GPS Module, and the processing unit also obtains current GPS coordinate information through the GPS module, and uses the GPS coordinate information to request an electronic time stamp from the time stamp servo module, so that the GPS with the electronic time stamp is returned. Coordinate information; and the signature generation module of the processing unit is based on the at least one biological characteristic, the electronic time The GPS coordinate information and the private key with an electronic time stamp generate the signature value, and the signature value, the signature track and the video image are encapsulated into the first data; and the encryption module of the processing unit The group uses the private key to encrypt the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp to generate the signature value to generate the second data; thereby, the verification The server decrypts the second data by using the public key in the key pair to obtain the at least one biometric and the electronic time stamp or the GPS coordinate information with the electronic time stamp, and generates a model through the signature. The group generates the to-be-verified signature value based on the at least one biometric obtained by decryption, the electronic time stamp or the GPS coordinate information with the electronic time stamp, and the private key. The terminal electronic device according to claim 13 or 14, wherein the processing unit executes an application program installed in the terminal electronic device, the application program including the time stamp request module, the signature generation module, the Encryption module and the combined module. The terminal electronic device according to claim 15 or 16, wherein the processing unit executes an application program installed in the terminal electronic device, the application program including the time stamp servo module, the signature generation module, the Encryption module and the combined module. The terminal electronic device according to claim 13 or 14, wherein the time stamp requesting module, the signature generating module, the encryption module, and the merging module are firmware burned into the processing unit. The terminal electronic device according to claim 15 or 16, wherein the time stamp servo module, the signature generation module, the encryption module and the merge module are firmware burned into the processing unit. A computer-readable recording medium storing an application program including a signature generation module, an encryption module, a merge module, and a time stamp request module or a time stamp servo module, and the application program is After a terminal electronic device having a display unit, a biometric acquisition module, a communication module, an input interface, and a GPS module is loaded and executed, the terminal electronic device can be completed as requested in items 1 to 7 A method for verifying an electronic file using biometrics according to any one of the foregoing.