TWI751746B - Electronic pen with digital signature and method executed by the same - Google Patents

Abstract

Provided are an electronic pen with a digital signature and a method executed by the same. On receipt of a signature request, the electronic pen captures biometric information of a user who is using the electronic pen and compares the captured biometric information with a stored biometric information. When the captured biometric information is consistent with the stored biometric information, a screening condition for certificate in the signature request is compared with a stored certificate. Upon the screening condition for certificate in the signature request is consistent with the stored certificate, the user is allowed to electronically sign an electronic document with the electronic pen. Meanwhile, the electronic pen obtains location information and time information. Afterwards, the electronic pen implements a digital signature for the electronic document, the electronic signature, the location information and the time information. Therefore, an electronic pen with a digital signature and a method using the same according to the present application can prevent fraud, and also has deniability and timeliness.

Description

Electronic pen with digital signature and execution method thereof

The present invention relates to an authorized digital signature mechanism, in detail, to an electronic pen and its execution method.

With the popularity of electronic transactions, signature operations traditionally performed on paper documents have been gradually converted to electronic documents. The authenticity of signatures on paper documents is often resolved through signature identification or seal comparison. However, since the signatures on electronic documents are an electromagnetic record, it is often difficult to identify whether the signer himself did it.

"Digital Signature" is a mechanism for verifying the authenticity of electronic documents and their electronic signatures. Specifically, the signer can first apply for a certificate from the certificate authority to obtain the private key, and the applicant uses the private key to sign and encrypt the electronic document, so as to convert the electronic document into garbled characters and then transmit it to other parties. The other party will apply to the certificate authority to obtain the public key corresponding to the private key, and then use the public key to verify the electronic file to decrypt it. Accordingly, since only the signer can sign the document with its private key, it can be confirmed that the electronic document is indeed issued by the person who signed the digital signature.

In addition, when performing digital signature, the signer will use an electronic pen to sign on the electronic document displayed on the touch screen to form an electronic signature. However, the current digital signature mechanism can only However, it cannot effectively control the operation authority of the electronic pen, resulting in the signature may be counterfeited or tampered with.

Therefore, how to improve the digital signature mechanism of the electronic pen is one of the issues to be solved in the industry at present.

The present invention discloses an electronic pen with digital signature, comprising: a capture module for capturing biometric information of a user using the electronic pen; a comparison module for comparing the captured biometric information with the pre-stored biometric information of the electronic pen; a communication module for receiving a signature request; a processing module for when the captured biometric information is matched with the pre-stored biometric information , compare the certificate filter condition in the signing request with the certificate stored in the electronic pen, and allow the user to use the The electronic pen performs an electronic signature on the electronic document, so as to obtain the position information and time information when the electronic signature is performed; and a digital signature module is used for the electronic document, the electronic signature, the position The information and the time information are digitally signed.

In addition, the electronic pen described in the present invention includes a key generation module and a storage module, wherein, when receiving a request for an application certificate, the capture module captures the biometric information of the user using the electronic pen, for the comparison module to compare the captured biometric information with the pre-stored biometric information of the electronic pen, so as to match the comparison between the captured biometric information and the pre-stored biometric information When the key is generated by the key generation module, a key is generated to be stored in the storage module and a certificate request file corresponding to the key is generated.

In addition, the electronic pen of the present invention includes a certificate writing module, wherein when receiving the certificate corresponding to the certificate request file, the capturing module captures the biometric information of the user who uses the electronic pen , for the comparison module to compare the captured biometric information with the pre-stored biometric information of the electronic pen, so as to compare the captured biometric information with the pre-stored biometric information as When it matches and confirms that the certificate corresponds to the key stored in the electronic pen, the certificate writing module writes the certificate, and the digital signature module uses the key and the certificate to the electronic document , the electronic signature, the location information, and the time information are digitally signed.

In addition, the electronic pen of the present invention includes: a location information module for providing the location information when performing the electronic signature; and a time information module for providing the electronic signature when performing the electronic signature. time information.

In addition, the comparison module, storage module, key generation module, certificate writing module, and digital signature module described in the present invention are integrated in the chip, such as but not limited to smart cards, smart cards, integrated Circuit cards and IC cards, etc.

The present invention further discloses a method performed by an electronic pen with a digital signature, comprising: receiving a signature request; retrieving biometric information of a user using the electronic pen to compare the acquired biometric information with the electronic pen Pre-stored biometric information; when the retrieved biometric information is matched with the pre-stored biometric information, compare the certificate filtering conditions in the signing request with the stored certificate; when the signing When the certificate filter conditions in the request are matched with the stored certificate, allow the user to use the electronic pen to electronically sign the electronic document; and obtain the location information and time information when the electronic signature is performed, To digitally sign the electronic document, the electronic signature, the location information, and the time information.

In addition, the method performed by the electronic pen of the present invention further includes receiving an application certificate request; capturing biometric information of a user who uses the electronic pen to compare the captured biometric information with the biometric information pre-stored by the electronic pen identification information; when the retrieved biometric information is matched with the pre-stored biometric information, generate a key for storage and generate a certificate request file corresponding to the key; and output the certificate request files.

On the contrary, when the comparison between the captured biometric information and the pre-stored biometric information is inconsistent, the electronic pen cannot be used.

In addition, the method performed by the electronic pen of the present invention further comprises receiving the certificate corresponding to the certificate request file; retrieving the biometric information of the user who uses the electronic pen to compare the acquired biometric information with the electronic pen pre-stored biometric information; and when the retrieved biometric information matches the pre-stored biometric information and the certificate corresponds to the key stored in the electronic pen, store the certificate .

On the contrary, when the certificate filter condition in the signing request does not match the stored certificate, the electronic pen cannot be used.

In addition, the electronic signature described in the present invention is an electronic signature or an electronic seal, and the pre-stored biometric information described in the present invention is pre-set in the electronic pen.

Therefore, the electronic pen with digital signature and the execution method thereof of the present invention can improve the defect that the existing electronic pen signature mechanism cannot effectively control the operation authority of the electronic pen. In terms of identity authentication, the present invention uses certificates and biometric information to achieve dual identity verification, thereby preventing impersonation of the signer himself. In the aspect of electronic signature, in addition to the original electronic signature, the present invention provides an undeniable electronic signature mode, so that the signer can simplify the complicated steps of handwriting signature. Finally, the electronic pen of the present invention can digitally sign electronic documents with electronic signatures, that is, add a global positioning system. system, GPS) location and timestamp (timestamp), and then encrypted with a cryptographic mechanism to make the signed electronic document more non-repudiation and timeliness.

1: electronic pen

11: Communication module

12: Capture module

13: Temporary storage module

14: Wafer

141: Comparison module

142: Storage Module

143: Key Generation Module

144: Credential writing module

145: Digital Signature Module

15: Processing modules

16: Electronic signature module

17: Location information module

18: Time Information Module

19: Power Module

3: touch screen

5: Credentialing Agency

S201~S210: Steps

S301~S317: Steps

1 is a functional block diagram of an electronic pen with digital signature of the present invention; FIG. 2 is a schematic flowchart of a method executed by the electronic pen with digital signature of the present invention; and FIG. 3 is an electronic pen with digital signature of the present invention and A schematic diagram of the interaction process of the touch screen.

The following specific embodiments are used to illustrate the implementation of the present invention, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification.

Please refer to FIG. 1 , which is a functional block diagram of the electronic pen with digital signature of the present invention. The electronic pen 1 includes a communication module 11, a capture module 12, a temporary storage module 13, a comparison module 141, a storage module 142, a key generation module 143, a certificate writing module 144, and a digital signature module Group 145 , processing module 15 , electronic signature module 16 , location information module 17 , time information module 18 , and power module 19 .

The communication module 11 is used for receiving the certificate application request, the certificate writing request, and the signing request from the application programming interface module of the touch screen, and transmits them to the processing module 15, and is used for the processing module 15. The certificate request file, certificate storage result, and digital signature result are transmitted to the application programming interface module of the touch screen.

The capture module 12 is used to capture the biometric information of the user who is using the electronic pen 1 , and temporarily store the captured biometric information in the temporary storage module 13 . In some embodiments, the biometric information may be a fingerprint, a palm print, a voice print, an iris image, a vein image, or any combination of two or more thereof, but not limited thereto.

The comparison module 141 is used for comparing the captured biometric information with the biometric information pre-stored in the storage module 142 . If the comparison is consistent, it means that the user who is using the electronic pen 1 has the authority to use the electronic pen 1 . If the comparison is inconsistent, it means that the user who is using the electronic pen 1 does not have the authority to use the electronic pen 1 , and therefore cannot use the electronic pen 1 .

The key generation module 143 is used to generate keys. Specifically, the power module 19 is in the activated state, and when the processing module 15 receives the certificate application request from the application programming interface module of the touch screen through the communication module 11 , the capture module 12 captures the data that is in use. The biometric information of the user of the electronic pen 1 is temporarily stored in the temporary storage module 13 , and then the comparison module 141 compares the captured biometric information with the biometric information stored in the storage module 142 match. If the comparison is consistent, the key generation module 143 generates a key and stores it in the storage module 142, and generates a certificate request file corresponding to the key. If the comparison is inconsistent, the key generation module 143 does not generate a key.

The credential writing module 144 is used to store the credential. To be more specific, when the power module 19 is in an activated state, when the processing module 15 receives a certificate writing request from the application programming interface module of the touch screen through the communication module 11 and a certificate corresponding to the certificate writing request When the certificate is issued, the capture module 12 captures the biometric identification information of the user who is using the electronic pen 1 again and temporarily stores it in the temporary storage module 13 , and then the comparison module 141 compares the captured biometric identification information. Whether the information is consistent with the biometric information stored in the storage module 142 . If the comparison is consistent, the certificate writing module 144 confirms that the key stored in the storage module 142 is the same as the After the certificate is corresponding, the certificate writing module 144 stores the certificate in the storage module 142 . If the comparison is inconsistent, the certificate writing module 144 does not store the certificate.

The electronic signature module 16 is used for the user to use the electronic pen 1 to electronically sign the electronic document. The location information module 17 is used to provide location information for electronic signature, such as but not limited to GPS information or location based service (LBS) information. The time information module 18 is used to provide time information, such as but not limited to time stamps, when the electronic signature is performed.

Specifically, the power module 19 is in the activated state, and when the processing module 15 receives the signing request of the application programming interface module of the touch screen through the communication module 11 , the capturing module 12 captures the electronic device in use again. The biometric information of the user of the pen 1 is temporarily stored in the temporary storage module 13 , and then the comparison module 141 compares the biometric information captured with the biometric information stored in the storage module 142 whether it is match. If the comparison is consistent, the processing module 15 compares the certificate filtering conditions in the signature request with the stored certificate. If the comparison is also consistent, the electronic signature module 16 allows the user to use the electronic pen to pair The electronic document is electronically signed, for example, the electronic pen 1 is used to electronically sign the electronic document in the form of a handwritten signature, or the undeniable electronic seal and/or pattern stored in the electronic pen 1 is used to electronically sign. Then, the processing module 15 obtains the location information provided by the location information module 17 and the time information provided by the time information module 18 .

The digital signature module 145 is used for digital signature. Specifically, the digital signature module 145 utilizes the key generated by the key generation module 143 and the certificate stored in the certificate writing module 144, and uses a cryptographic mechanism (such as encryption algorithm or hash algorithm) to perform encryption on electronic documents, Electronic signature, location information, time information for digital signature.

In addition, the comparison module 141, the storage module 142, the key generation module 143, the certificate writing module 144, and the digital signature module 145 can be integrated in the chip 14, such as but not limited to smart cards, smart cards, body circuit card or IC card.

It should be noted that the electronic seal is a unique digital signature to ensure the non-repudiation of the electronic seal. For example, the application programming interface module of the touch screen converts the handwritten signature with the electronic pen into an electronic seal in the form of a file, and uses the signature key through the trust authority of the electronic pen (such as the certificate authority of the in-chip certificate) The electronic seal file is signed and time stamped, so before storing the electronic seal, the electronic pen can use the signature key through the chip to verify the validity and validity of the electronic seal file and the embedded signature In order to ensure the non-repudiation of the electronic seal and no suspicion of tampering, the electronic seal can be used for auditing and certification purposes.

In addition, when the electronic pen needs to create preset biometric information, the user stores the captured biometric information in the chip by inputting an authorization code (eg, the PIN code of the chip). Once the preset biometric information is established, it can be verified whether the user holding the pen has the authority to operate the electronic pen by checking the biometric information. In other words, the identification of the biometric information replaces the input of the PIN code, so it can be used to access the data (such as keys, certificates or electronic seals) in the chip, so as to reduce the possibility of leakage of the PIN code and personal information.

Please refer to FIG. 2 , which is a schematic flowchart of the method executed by the electronic pen with digital signature of the present invention.

In step S201, the electronic pen receives the signing request from the application programming interface module of the touch screen. Next, proceed to step S202.

In step S202, the electronic pen captures the biometric information of the user who is using the electronic pen. In some embodiments, the biometric information may be a fingerprint, a palm print, a voice print, an iris image, a vein image, or any combination of two or more thereof, but not limited thereto. Next, proceed to step S203.

In step S203, the electronic pen compares whether the captured biometric information is consistent with the biometric information stored in the electronic pen. It should be noted that the biometric information stored in the electronic pen is preset in the chip. If the comparison is consistent, go to step S204. If the comparison is inconsistent, the process proceeds to step S210, and the electronic pen cannot be operated.

In step S204, the electronic pen is operable, indicating that the user who is using the electronic pen is authorized to perform subsequent operations on the electronic pen. Next, it progresses to step S205.

In step S205, the electronic pen verifies whether the certificate filtering condition in the signing request matches the certificate stored in the electronic pen. It should be noted that the certificate stored in the electronic pen is the one received from the application programming interface module of the touch screen during the period of key generation and certificate acquisition. If the comparison is consistent, go to step S206. If the comparison is inconsistent, the process proceeds to step S210, and the electronic pen cannot be operated, indicating that the user who is using the electronic pen is not the intended user of the signing request.

In step S206, the electronic pen allows the user who is using the electronic pen to use the electronic pen to electronically sign the electronic document (eg, electronic signature or electronic seal). It should be noted that the electronic seal is a file that is generated according to the user's signature, verified by a certificate authority and added with a time stamp, and stored in the electronic pen. Next, it progresses to step S207.

In step S207, the electronic pen obtains the location information and time information for electronic signature, and then proceeds to step S208. For example, the location information may be GPS information or LBS information, and the time information may be time stamps, but not limited thereto.

In step S208, the electronic pen uses the certificate and key in the electronic pen to digitally sign the electronic document, electronic signature, location information, and time information through a cryptographic mechanism (eg, encryption algorithm or hash algorithm). Next, it progresses to step S209.

In step S209, the result of the digital signature is reported.

In addition, in the period of key generation and certificate acquisition, first, when receiving a certificate application request, the electronic pen first captures the biometric information of the user who is using the electronic pen to compare the biometric information stored in the electronic pen. When the comparison is consistent, a key is generated to store and generate a certificate request file corresponding to the key, and then the certificate request file is output. Then, when the certificate corresponding to the certificate request file is received, the electronic pen captures the biometric information of the user who is using the electronic pen again to compare the biometric information stored in the electronic pen. When the comparison is consistent and it is confirmed that the certificate corresponds to the key stored in the electronic pen, the certificate is further written. Accordingly, the electronic pen has a certificate and a key.

Therefore, in the aspect of identity authentication, the electronic pen with digital signature and the execution method thereof of the present invention use biometric information and certificates to perform dual identity verification, thereby preventing counterfeiting of the signer. In the aspect of electronic signature, in addition to using an electronic pen for electronic signature, the present invention can also use the electronic seal in the electronic pen, so that the signer can simplify the complicated handwriting signature steps. Finally, the present invention can encrypt and sign the location information and time information attached to the electronic document through a strict cryptographic mechanism through the chip, so that the signed document is more non-repudiation and time-sensitive.

Please refer to FIG. 3 , which is a schematic diagram of the interaction flow between the electronic pen with digital signature and the touch screen of the present invention. Steps S301 to S310 are key generation and certificate writing periods, and steps S311 to S317 are signing periods.

In step S301 , the application program interface module of the touch screen 3 transmits the certificate application request to the electronic pen 1 .

In step S302 , the electronic pen 1 captures the biometric information of the user who is using the electronic pen 1 and temporarily stores it, so as to compare the captured biometric information with the biometric information stored by the electronic pen 1 .

In step S303, when the comparison is consistent, the electronic pen 1 generates a key and a corresponding certificate request file.

In step S304 , the electronic pen 1 transmits the certificate request file to the application programming interface module of the touch screen 3 .

In step S305 , the application program interface module of the touch screen 3 can apply for a certificate from the certificate authority 5 through itself or its own server according to the certificate request file.

In step S306 , the certificate authority 5 returns the certificate to the application programming interface module of the touch screen 3 .

In step S307 , the application programming interface module of the touch screen 3 returns the certificate and the certificate writing request to the electronic pen 1 .

In step S308 , the electronic pen 1 captures the biometric information of the user who is using the electronic pen 1 and temporarily stores it, so as to compare the captured biometric information with the biometric information stored in the electronic pen 1 .

In step S309 , when the comparison is consistent and the electronic pen 1 confirms that there is a key corresponding to the certificate in the chip, the certificate is written into the chip of the electronic pen 1 .

In step S310 , the electronic pen 1 transmits the certificate writing result to the application programming interface module of the touch screen 3 .

In step S311 , the application programming interface module of the touch screen 3 transmits the signing request to the electronic pen 1 .

In step S312 , the electronic pen 1 captures the biometric information of the user who is using the electronic pen 1 and temporarily stores it, so as to compare the captured biometric information with the biometric information stored by the electronic pen 1 .

In step S313 , when the comparison is consistent, the electronic pen 1 then compares the certificate filtering conditions of the signing request with the certificate stored by the electronic pen 1 .

In step S314, when the comparison is consistent, the electronic pen 1 allows the user who is using the electronic pen 1 to use the electronic pen to electronically sign the electronic document. Electronic signature provides handwritten signature or electronic seal mode. The former means that the user uses the handwritten signature of the electronic pen 1 and temporarily stores the handwritten content and handwriting feature values in the electronic pen 1. seal.

In step S315, the electronic pen 1 obtains the position information (eg GPS position) and time information (eg time stamp) of the electronic signature.

In step S316, the electronic pen 1 uses the key and the certificate to digitally sign the electronic document, electronic signature, location information, and time information.

In step S317 , the electronic pen 1 transmits the digital signature result including the signature content to the application programming interface module of the touch screen 3 .

To sum up, the electronic pen with digital signature and its execution method of the present invention use the certificate and biometric information as the basis for user identity authentication to conduct dual identity verification, thereby effectively preventing impersonation of the signer himself. Secondly, the present invention verifies whether the signer holding the pen has the authority to operate the electronic pen by checking the biometric information, that is, the biometric information replaces the input of the PIN code, thereby accessing the data in the chip, so as to reduce the personal data. possibility of leakage. In the aspect of electronic signature, in addition to providing handwritten signature, the present invention also provides a non-repudiation electronic seal mode, so that the signer can simplify the complicated handwritten signature steps, and the electronic seal is a unique digital signature form document, so available Review certification purposes. In addition, the present invention combines electronic signatures and digital signatures, that is, attaching GPS location and time stamp to electronic documents with electronic signatures, and encrypting and signing through a chip with a cryptographic mechanism, making the electronic documents signed more unreliable. Denial and timeliness.

The above-mentioned embodiments are only used to illustrate the principle and effect of the present invention, but are not intended to limit the present invention. Any person skilled in the art can modify and change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention should be as listed in the patent application scope described later.

S201~S210: Steps

Claims (12)

An electronic pen with digital signature, comprising: a capture module for capturing biometric information of a user using the electronic pen; a comparison module for comparing the captured biometric information with the The biometric information pre-stored by the electronic pen; the key generation module is used to generate a certificate request file for the electronic pen to use the certificate request file to apply for a certificate; the certificate writing module, the certificate corresponding to the certificate request file writing to the electronic pen; a communication module for receiving a signature request from the touch screen and transmitting a message; a processing module for comparing the captured biometric information with the pre-stored biometric information When matching, compare the certificate filter conditions in the signing request with the certificate stored in the electronic pen, and allow the certificate filter conditions in the signing request to match the certificate stored in the electronic pen. The user uses the electronic pen to electronically sign the electronic document to obtain location information and time information when the electronic signature is performed; and a digital signature module for the electronic document, the electronic signature, the electronic signature The location information and the time information are digitally signed, wherein the comparison module, the storage module, the key generation module, the certificate writing module and the digital signature module included in the electronic pen are integrated in the chip. The electronic pen according to claim 1, wherein when a certificate application request is received, the capture module captures the biometric identification information of the user for the comparison module to compare the captured biometric identification information and the biometric information pre-stored by the electronic pen, so that the captured biometric information and the When the pre-stored biometric identification information is matched, the key generation module generates a key to store in the storage module and generates the certificate request file corresponding to the key. The electronic pen according to claim 2, wherein when the certificate corresponding to the certificate request file is received, the capture module captures the biometric information of the user for the comparison module to compare the certificate The captured biometric information is matched with the biometric information pre-stored by the electronic pen, so as to match the captured biometric information with the pre-stored biometric information and confirm that the certificate is consistent with that stored in the electronic pen When corresponding to the key of the electronic document, the certificate writing module writes the certificate, and the digital signature module uses the key and the certificate for the electronic document, the electronic signature, the location information and the time information Digitally sign. The electronic pen according to claim 1, further comprising: a location information module for providing the location information when performing the electronic signature; and a time information module for providing the electronic signature when performing the electronic signature The time information. The electronic pen of claim 1, wherein the electronic signature is an electronic signature or an electronic seal, and wherein the electronic seal is a time-stamped file generated according to the user's signature. The electronic pen of claim 1, wherein the chip is a smart card, a smart card, an integrated circuit card, or an IC card. A method performed by an electronic pen with digital signature, comprising: applying for a certificate using a certificate request file; writing the certificate corresponding to the certificate request file into the electronic pen; receiving a signing request from a touch screen; The biometric information of the user of the electronic pen to compare the captured biometric information with the biometric information pre-stored by the electronic pen; When the comparison between the captured biometric information and the pre-stored biometric information is consistent, compare the certificate filter conditions in the signing request with the stored certificate; when the certificate filter conditions in the signing request match the stored certificate When the comparison of the stored certificates is consistent, the user is allowed to use the electronic pen to electronically sign the electronic document; The electronic signature, the location information, and the time information are digitally signed. The method of claim 7, wherein the applying for a certificate using the certificate request file comprises: receiving a certificate application request; retrieving the biometric information of the user to compare the acquired biometric information with the The biometric information pre-stored by the electronic pen; when the captured biometric information is matched with the pre-stored biometric information, a key is generated to be stored and the certificate request corresponding to the key is generated file; and output the voucher request file. The method according to claim 8, wherein the writing the certificate corresponding to the certificate request file to the electronic pen comprises: receiving the certificate corresponding to the certificate request file; retrieving the biometric information of the user, by comparing the captured biometric information with the biometric information pre-stored by the electronic pen; and when the comparison between the captured biometric information and the pre-stored biometric information is consistent and the certificate matches the pre-stored biometric information When the key stored in the electronic pen corresponds to the key, the certificate is stored. The method of claim 9, wherein digitally signing the electronic document, the electronic signature, the location information, and the time information comprises using the key and the certificate to digitally sign the electronic document, the electronic signature , the location information and the time information are digitally signed. The method of claim 7, wherein when the retrieved biometric information does not match the pre-stored biometric information, or when the credential filter in the signing request does not match the stored biometric information When the comparison of the certificates is inconsistent, the electronic pen cannot be used. The method of claim 7, further comprising: presetting the biometric information in the electronic pen to become the pre-stored biometric information.

Images