TWI778448B - Verification data processing system and verification data processing method - Google Patents

Abstract

A verification data processing system and method are disclosed. In the verification data processing method, a plurality of electronic signatures are received within a time interval, wherein each of the electronic signatures is generated by encrypting a piece of original data according to a private key of an electronic certificate. In the verification data processing method, after the time interval, a Merkle tree is generated based on the plurality of electronic signatures, and a token for each of the electronic signatures is generated. Each of the tokens records a Merkle root of the Merkle tree, a corresponding electronic signature, an electronic certificate corresponding to the electronic signature, a Merkle proof corresponding to the electronic signature, and a timestamp set.

Description

Proof data processing system and proof data processing method

Embodiments of the present invention relate to a data processing system and a data processing method. More specifically, embodiments of the present invention relate to a certification data processing system and a certification data processing method.

The conventional electronic evidence preservation or electronic deposit service is a service that provides preservation for electronic original data or assists in adding time stamps to the original data for deposit. The original data can be the data that ordinary users need to keep evidence, such as research and development records, the previous version in the process of program development, the original manuscript, etc. The electronic original data can be the original data of paper or objects converted into electronic files, such as Photos, pictures, document files, etc. Proof materials are used to prove the time and owner of the aforementioned original materials when they were produced or preserved, so that the time and owner of the aforementioned original materials can be clearly proved in litigation. Therefore, if a user (such as a self-employed or an enterprise) can store specific certification data in a certification data processing system, it will be very important to prove the time and owner of the corresponding original data in litigation in the future. thing. The existing technology mainly performs evidence preservation operations for each original data in real time, such as uploading the original data to the blockchain and obtaining the timestamp of the blockchain. The operation of the blockchain requires costs, resulting in such a method of operation not only expensive but also inefficient.

In addition, the prior art only records a single time stamp for each piece of raw data, and in the case that a single raw data corresponds to only a single time stamp, the reliability of the raw data may be insufficient. lift For example, in cross-border litigation, once the courts of other countries do not recognize the unique timestamp corresponding to a piece of original data, those countries will not consider the original data to be credible.

To sum up, how to reduce the cost of preserving evidence and increase the credibility of the original data in the technical field of certification data processing will be an urgent problem to be solved in the technical field of the present invention.

In order to solve at least the above-mentioned problems, embodiments of the present invention provide a certification data processing system. The certification data processing system may include a communication interface and a processor that are electrically connected to each other. The communication interface can be used to receive a plurality of electronic signatures within a time interval, wherein each of the electronic signatures is generated by processing and encrypting an original data according to a private key of an electronic certificate. The processor may be configured to: after the time interval, generate a Merkle tree (Merkle tree) according to the plurality of electronic signatures; and generate a token (Token) for each of the electronic signatures. Wherein, each of the tokens records a Merkle root of the Merkle tree, each of the electronic signatures, each of the electronic certificates corresponding to the electronic signatures, and a Merkle certificate corresponding to each of the electronic signatures (Merkle proof), and a timestamp set, and the timestamp set includes more than one timestamp.

In order to solve at least the above problems, an embodiment of the present invention also provides a method for processing certification data, the method for processing certification data may include the following steps: a certification data processing system receives a plurality of electronic signatures within a time interval, wherein Each of the electronic signatures is generated by processing and encrypting an original data according to a private key of an electronic certificate; after the time interval, the certification data processing system generates a Merkle tree according to the plurality of electronic signatures ; and generating a token for each of the electronic signatures by the certification data processing system, wherein each of the tokens records a Merkle root of the Merkle tree, each of the electronic signatures, each of the electronic signatures The corresponding electronic certificate, a Merkle certificate corresponding to each of the electronic signatures, and a time stamp set, and the time stamp set includes more than one time stamp.

Embodiments of the present invention also provide another certification data processing system, the certification data processing system may include a communication interface and a processor that are electrically connected to each other. The communication interface can be used for receiving complex hash data in a time interval, wherein each hash data corresponds to an original data. The processor is configured to: after the time interval, generate a Merkle tree according to the complex hash data; and generate a token for each of the hash data. Wherein, each of the tokens records a Merkle root of the Merkle tree, each of the hash data, a Merkle proof corresponding to each of the hash data, and a time stamp set, and the time stamp set includes more than one time stamp .

The embodiment of the present invention also provides another method for processing certification data, the method for processing certification data may include the following steps: a certification data processing system receives complex hash data within a time interval, wherein each of the hash data corresponds to an original data; after the time interval, by the attestation data processing system, a Merkle tree is generated from the complex hash data; and by the attestation data processing system, a token is generated for each of the electronic signatures, wherein each The token records a Merkle root of the Merkle tree, each of the hash data, a Merkle proof corresponding to each of the hash data, and a set of timestamps, and the set of timestamps includes more than one timestamp.

Different from the existing proof data processing system which performs one proof preservation operation for each original data, the embodiment of the present invention processes the proof data in batches of plural raw data in a period of time as proof data. In detail, as described above, the embodiments of the present invention first establish a Merkle tree for plural electronic signatures or hash data derived from plural original data, and then perform batch evidence preservation operations based on the Merkle tree, so as to A complex token is generated (which can be used to prove the evidentiary power or credibility of the complex source material, respectively). Therefore, the embodiment of the present invention can greatly reduce the cost of the traditional single-time evidence preservation operation, and greatly improve the efficiency of the single-time evidence preservation operation.

On the other hand, unlike the existing certification data processing service that only records a single timestamp for each original data, the embodiment of the present invention records a set of timestamps in the corresponding token generated for the same original data, which may include There are more than one time stamp, which can be different types of time stamps. Further, the types and numbers of time stamps can be updated or increased according to time changes, so as to improve the credibility of the original data.

The above contents are not intended to limit the present invention, but merely describe the technical problems that can be solved by the present invention, the technical means that can be adopted and the technical effects that can be achieved, so that those with ordinary knowledge in the technical field to which the present invention belongs can have a preliminary understanding of the present invention. invention. Those with ordinary knowledge in the technical field to which the present invention pertains can further understand the details of various embodiments of the present invention according to the attached drawings and the contents described in the following embodiments.

As follows:

1: Proof of data processing system

11: Processor

13: Storage

15: Communication interface

S1: Electronic Signature

D1: original data

L1: index label

T1: Token

S11, S12, S13, S14: Electronic signature

T11, T12, T13, T14: Tokens

MT1: Merkle Tree

MR1: Merkel root

4: Proof of data processing method

41~43: Steps

5: Proof of data processing method

51~53: Steps

The accompanying drawings may assist in explaining various embodiments of the present invention, in which: [FIG. 1] illustrates the structure of a certification data processing system according to certain embodiments of the present invention; [FIG. 2] illustrates an example in accordance with the present invention [Figure 3] illustrates the Merkle tree shown in Figure 2 according to some embodiments of the present invention; [Figure 4] illustrates the and [FIG. 5] illustrates the flow of a certification data processing method according to some embodiments of the present invention.

The present invention will be described below through various embodiments, but these embodiments are not intended to limit the present invention to only be implemented according to the described operations, environments, applications, structures, processes or steps. For ease of description, content not directly related to the embodiments of the present invention or content that can be understood without special description will be omitted from the text and the drawings. In the drawings, the size of each element and the The ratio between them is only an example, and is not intended to limit the present invention. Unless otherwise specified, in the following content, the same (or similar) element symbols may correspond to the same (or similar) elements. Where possible, the number of each of the elements described below may be one or more, unless otherwise specified.

The terms used in the present disclosure are only used to describe the embodiments, and are not intended to limit the present invention. The singular form "a" is intended to include the plural form as well, unless the context clearly dictates otherwise. The terms "comprising", "comprising" and the like indicate the presence of the stated features, integers, steps, operations, elements and/or elements, but do not exclude one or more other features, integers, steps, operations, elements, elements and/or elements or a combination of the foregoing. The term "and/or" includes any and all combinations of one or more of the associated listed items.

FIG. 1 illustrates the structure of a certification data processing system according to some embodiments of the present invention, but the content shown is only for illustrating the embodiment of the present invention, and not for limiting the protection scope of the present invention. Referring to FIG. 1 , it is proved that the data processing system 1 can at least include a processor 11 and a communication interface 15 that are electrically connected to each other.

The processor 11 may be a Microprocessor or a Microcontroller with a signal processing function. Microprocessor or microcontroller is a programmable special integrated circuit, which has the capabilities of operation, storage, output/input, etc., and can accept and process various coded instructions, so as to perform various logical operations and arithmetic operations, and output corresponding operation result. The processor 11 can be programmed to interpret various instructions and execute various tasks or routines to achieve various corresponding functions described below.

The communication interface 15 may include various input/output elements for wired/wireless communication in general computer devices/computers, which can receive data from the outside and output data to the outside, so as to realize various corresponding functions described below . The communication interface 15 may include, for example, but not limited to, an Ethernet interface, an Internet interface, and a telecommunication interface. interface, Universal Serial Bus (USB) interface, etc.

In some embodiments, the certification data processing system 1 may also include a memory 13 electrically connected to the processor 11 . The storage 13 may include various storage units in general computing devices/computers, so as to realize various corresponding functions described below. For example, the storage 13 may include a first-level storage device (also known as main memory or internal memory), commonly referred to simply as memory, which is directly connected to the processor 11 . The processor 11 can read the instruction sets stored in the memory and execute the instruction sets when needed. The storage 13 may also include a secondary storage device (also known as external memory or auxiliary memory), which is connected to the processor 11 through the I/O channel of the memory and uses a data buffer to transfer data to the second storage device. Primary storage device. The secondary memory device may be, for example, various types of hard disks, optical disks, and the like. The storage 13 may also include a tertiary storage device, such as a flash drive that can be directly inserted into or removed from the computer, or a cloud hard drive.

According to some embodiments of the present invention, the communication interface 15 may be used to receive the electronic signature S1 from one or more external devices. According to some embodiments of the present invention, in addition to the electronic signature S1, the communication interface 15 can also be used to receive the original data D1 and/or the index label L1 from one or more external devices. According to some embodiments of the present invention, the storage 13 may be used to store the original data D1 and/or the index label L1 . According to some embodiments of the present invention, the communication interface 15 can be used to transmit various data stored in the storage 13 (eg, but not limited to: the original data D1, the index label L1) to one or more external devices.

Next, a demonstration for certifying the operation of the data processing system 1 will be described with reference to FIGS. 1 to 3 at the same time. Figure 2 illustrates the correspondence between electronic signatures and tokens according to some embodiments of the present invention, and Figure 3 illustrates the Merkle tree shown in Figure 2 according to some embodiments of the present invention. The contents shown in FIG. 2 and FIG. 3 are only for illustrating the embodiments of the present invention, but not for limiting the protection scope of the present invention.

The communication interface 15 can receive a plurality of electronic signatures S1 within a time interval. According to different needs, the above time interval can be a time interval of various lengths, such as but not limited to: half an hour, one hour hours, five hours, twenty-four hours, forty-eight hours. After the time interval, the processor 11 may generate a Merkle tree MT1 according to the plurality of electronic signatures S1, and then the processor 11 may generate a token T1 for each of the electronic signatures S1. Each of the tokens T1 records at least a Merkle root of the Merkle tree MT1, each of the electronic signatures S1, each of the electronic certificates corresponding to the electronic signatures, a Merkle certificate corresponding to each of the electronic signatures, and A timestamp set, and the timestamp set includes more than one timestamp. According to some embodiments of the present invention, the electronic signature S1 and the token T1 may be stored in the storage 13 .

Taking the content shown in FIG. 2 as an example, the communication interface 15 can receive four electronic signatures S11, S12, S13, S14 within a time interval, and then, the processor 11 can receive the four electronic signatures S11, S12, S13 according to the four electronic signatures S11, S12, S13 , S14 generate a Merkle tree MT1, and generate corresponding four tokens T11, T12, T13, T14 for the four electronic signatures S11, S12, S13, S14 respectively.

Each of the electronic signatures S1 is generated by processing and encrypting a respective original data D1 according to a private key of an electronic certificate. In some embodiments, the original data D1 may be an electronic original file to be saved by a user (eg, a self-employed person or an enterprise), such as documents, photos, R&D records, product development processes, and the like. In some embodiments, the communication interface 15 can receive the original data D1 provided by the user, and the storage 13 can store the original data D1, so as to additionally provide a storage service of the user's original data D1. In some embodiments, if the original data D1 is not required to be additionally stored by the certification data processing system 1, the user can save the original data D1 through other storage devices, and only provide the electronic signature S1 to the certification data processing system 1 for certification data security work.

According to some embodiments of the present invention, each of the electronic signatures S1 is that the user first performs a hashing process on the corresponding original data D1 at the local end to obtain a hashed data, and then uses the private key of the corresponding electronic certificate to hash the hashed data. Data is processed and encrypted. In still other embodiments, each of the electronic signatures S1 may also perform other data processing, such as formatting, on the hash data. For example, if the user The original data D1 to be saved is a document file, which can perform a hashing process on the document file on the local end to obtain a hash value, and then use the private key of the corresponding electronic certificate to process and encrypt the hash value to generate The corresponding electronic signature S1.

According to some embodiments of the present invention, the user's electronic certificate may be an x.509 certificate (ie, an SSL certificate). Using the private key of the electronic certificate to generate an electronic signature S1 for the original data D1, and by storing the electronic certificate in the token, in addition to proving the existence of the original data D1, the electronic signature can also be decrypted by using the public key of the electronic certificate Chapter S1, to prove that the ownership of the original data D1 belongs to the user.

The plurality of electronic signatures S1 may come from the same user (eg, the same individual household or the same enterprise), or may be from different users (eg, different individual households or different enterprises). If an electronic signature S1 comes from an enterprise, the electronic signature S1 is generated by processing and encrypting a private key corresponding to an enterprise certificate of the enterprise.

According to some embodiments of the present invention, the communication interface 15 may transmit one or more of the plurality of tokens T1 generated by the processor 11 to one or more external devices. For example, in response to the electronic signature S1 provided by an enterprise, the communication interface 15 can transmit the corresponding token T1 to the enterprise.

After the communication interface 15 receives the four electronic signatures S11 , S12 , S13 and S14 shown in FIG. 2 , the Merkle tree MT1 generated by the processor 11 according to the four electronic signatures S11 , S12 , S13 and S14 can be as follows shown in Figure 3. In detail, the bottom layer of the Merkle tree MT1 includes four hash values obtained by the processor 11 hashing the received four electronic signatures S11, S12, S13, and S14 respectively on the respective original data, that is, Hash( S11), Hash (S12), Hash (S13), Hash (S14). Except for the bottom layer, each layer in the Merkle tree MT1 is the hash value obtained by adding all the hash values of the next layer and then performing a hash process. The highest level of the Merkle tree MT1 is the Merkle root MR1 of the Merkle tree MT1.

Each Merkel root MR1 can transmit to the time stamp service system outside the system to request the time stamp service, and get more than one time stamp. The timestamp service system can be a centralized timestamp service system (eg Chunghwa Telecom timestamp service, WIPO PROOF), or a decentralized timestamp service system (eg blockchain). Therefore, the Merkle root MR1 corresponds to more than one time stamp and is stored in a time stamp set of the token T1, that is, when all electronic signatures S1 under the same Merkle root MR1 correspond to the plurality of time stamps stamp. In addition, each electronic signature S1 corresponds to a Merkel certificate, and the Merkel certificate of each electronic signature S1 can prove that the electronic signature S1 belongs to the Merkel root MR1. For example, the Merkle certificate of electronic signature S11 is "Hash(S12)" and "Hash(Hash(S13)+Hash(S14))", because according to "Hash(S11)" and "Hash(S12)" It will be possible to calculate "Hash(Hash(S11)+Hash(S12))", and according to "Hash(Hash(S11)+Hash(S12))" and "Hash(Hash(S13)+Hash(S14))" It will be possible to calculate "Hash(Hash(Hash(S11)+Hash(S12))+Hash(Hash(S13)+Hash(S14))) which is equal to Merkel root MR1, and such a path will prove that the The electronic signature S11 is indeed under the Merkel root MR1.

After generating the Merkle tree MT1, the processor 11 may generate a corresponding token T1 for each electronic signature S1 in the same time interval. For example, according to some embodiments of the present invention, the processor 11 may convert each of the electronic signatures S1 and the auxiliary data of each of the electronic signatures S1 (ie, the Merkle root MR1 of the Merkle tree MT1 , the electronic The electronic certificate corresponding to the signature S1, the Merkle certificate corresponding to the electronic signature in the Merkle tree MT1, and a time stamp set) are recorded in the corresponding token T1. The timestamp collection contains more than one timestamp.

According to some embodiments of the present invention, the above-mentioned auxiliary data may further include a certificate validity certificate of the electronic certificate included in each of the electronic signatures S1. Credential validity proof can be from the user. Due to the fact that electronic certificates are usually time-sensitive, for example, they may expire at regular intervals or become invalid. If the electronic certificate becomes invalid, it will not be possible to prove that the electronic certificate is a valid certificate for the user or enterprise in the future. Therefore, when processing the certification data, the electronic certificate can be verified at the same time to obtain the certificate validity certificate. Therefore, the token T1 can also contain the certificate validity certificate of the electronic certificate, which can still be proved to be valid before when the electronic certificate expires.

According to some embodiments of the present invention, the processor 11 records the hash data received by the communication interface 15 within a time interval into the corresponding token T1. In these embodiments, each hash data received by the communication interface 15 may correspond to an original data, for example, an external device (not shown) storing the original data may perform hash processing on each original data to obtain the corresponding Based on the hash data of the original data, each hash data is then sent to the communication interface 15 . The communication interface 15 can receive complex hash data from a plurality of external devices, and after the time interval, the processor 11 generates a Merkle tree according to the complex hash data, and then generates a token for each hash data. In this embodiment, each of the tokens records a Merkle root of the Merkle tree, each of the hash data, a Merkle proof corresponding to each of the hash data, and a timestamp set, and the timestamp set includes a Timestamp above.

According to some embodiments of the present invention, the set of timestamps included in each token T1 is any two or more of a plurality of centralized timestamps and a plurality of decentralized timestamps. In some cases, token T1 may contain a plurality of centralized timestamps. In some cases, token T1 may contain a plurality of decentralized timestamps. In some cases, token T1 may contain at least one centralized timestamp and at least one decentralized timestamp. According to some embodiments of the present invention, the above-mentioned centralized time stamp may be an RFC-3161 time stamp, such as but not limited to: Chunghwa Telecom time stamp, WIPO PROOF; and the above-mentioned decentralized time stamp may be a blockchain time stamp, For example but not limited to: Bitcoin timestamp, Ethereum timestamp.

In some embodiments, since the time required for each time stamp service system to provide time stamps is different, so that the processing time required by the processor 11 to place various time stamps on the token is different, the processing time is different. The processor 11 may first generate an initial token for use by the user or store the initial token in the storage 13 when any timestamp is not recorded in the token timestamp set. The processor 11 may update the token when each time stamp is successfully recorded in the initial token, and when all time stamps are successfully recorded in a certain token, the token T1 is completed. The processor 11 can provide the completed token T1 to the user again, or update the token in the storage 13 .

In some embodiments, the communication interface 15 may also receive an index label L1 corresponding to each of the electronic signatures S1 within the time interval, and the index label L1 may be from the user. The processor 11 can store the received index label L1 in the storage 13, and record the association between the index label L1 and the corresponding token T1, so as to provide indexing services in the future (ie, as a basis for the user to search for the corresponding token T1 ). For example, the index label L1 may contain a user-defined keyword. When the user needs to provide evidence in the future, he can quickly and systematically find the required token T1 according to the keyword of the index label L1.

FIG. 4 illustrates the flow of a method for processing certification data according to some embodiments of the present invention, but the content shown is only for illustrating the embodiment of the present invention, rather than for limiting the protection scope of the present invention.

Referring to FIG. 4, the certification data processing method 4 may include the following steps: a certification data processing system receives a plurality of electronic signatures within a time interval, wherein each of the electronic signatures is based on a private key pair of an electronic certificate. A raw data is processed and encrypted to generate (marked as step 41); by the certification data processing system, after the time interval, a Merkle tree is generated according to the plurality of electronic signatures (marked as step 42); and by the The certification data processing system generates a token for each of the electronic signatures, wherein each of the tokens records a Merkle root of the Merkle tree, each of the electronic signatures, and an electronic certificate corresponding to each of the electronic signatures , a Merkle certificate corresponding to each of the electronic signatures, and a set of timestamps, and the set of timestamps includes more than one timestamp (marked as step 43 ).

The order of steps 41 to 43 shown in FIG. 4 is not limited. The order of steps 41 to 43 shown in FIG. 4 can be arbitrarily adjusted as long as it is still practicable.

According to some embodiments of the present invention, in addition to steps 41 to 43, the certification data processing method 4 may further include the following steps: storing the plurality of tokens by the certification data processing system.

According to some embodiments of the present invention, in addition to steps 41 to 43, the certification data processing method 4 may further include the following steps: the certification data processing system transmits the plurality of tokens to one or more external devices.

According to some embodiments of the present invention, each of the electronic signatures is generated by first hashing the original data to obtain a hash data, and then processing and encrypting the hash data using the private key of the corresponding electronic certificate.

According to some embodiments of the present invention, in addition to steps 41 to 43, the certification data processing method 4 may further include the following steps: the certification data processing system receives the corresponding electronic signatures within the time interval. an index label; and at least one of the plurality of index labels and the original data is stored by the certification data processing system. In other embodiments, the index tags may also be stored in an external storage device.

According to some embodiments of the present invention, each of the electronic certificates is an x.509 certificate.

According to some embodiments of the present invention, the set of timestamps included in each token is any two or more of a plurality of centralized timestamps and a plurality of decentralized timestamps.

According to some embodiments of the present invention, each of the tokens further includes a certificate validity certificate of the electronic certificate contained in each of the electronic signatures.

According to some embodiments of the present invention, each of the electronic signatures is from a different enterprise, and each of the electronic signatures is processed and encrypted according to a private key corresponding to a corresponding enterprise certificate.

Each embodiment of the attestation data processing method 4 essentially corresponds to a certain embodiment of the attestation data processing system 1 . Therefore, even if each embodiment of the certification data processing method 4 is not described in detail above, those with ordinary knowledge in the technical field of the present invention can still directly understand the certification data processing according to the above description of the certification data processing system 1 Non-detailed embodiment of method 4.

FIG. 5 illustrates the flow of the method for processing certification data according to some embodiments of the present invention, but the content shown is only for illustrating the embodiment of the present invention, rather than for limiting the protection scope of the present invention.

Referring to FIG. 5, the certification data processing method 5 may include the following steps: a certification data processing system receives complex hash data within a time interval, wherein each of the hash data corresponds to an original data (marked as step 51); After the time interval, by the certification data processing system, a Merkle tree is generated from the complex hash data (labeled as step 52); and by the certification data processing system, a token is generated for each of the electronic signatures, wherein , each of the tokens records a Merkle root of the Merkle tree, each of the hash data, a Merkle proof corresponding to each of the hash data, and a set of timestamps, and the set of timestamps contains more than one timestamp ( marked as step 53).

The order of step 51 to step 53 shown in FIG. 5 is not limited. The order of steps 51 to 53 shown in FIG. 5 can be arbitrarily adjusted as long as it is still practicable.

Each embodiment of the attestation data processing method 5 essentially corresponds to a certain embodiment of the attestation data processing system 1 . Therefore, even if each embodiment of the certification data processing method 5 is not described in detail above, those with ordinary knowledge in the technical field of the present invention can still directly understand the certification data processing according to the above description of the certification data processing system 1 Non-detailed embodiment of method 5.

The above-mentioned embodiments are only used to illustrate the present invention, but not to limit the present invention. Any other embodiments produced by modifying, changing, adjusting and integrating the above-mentioned embodiments, as long as they are the present invention It is not difficult for a person with ordinary knowledge in the technical field to understand that it is within the protection scope of the present invention. The protection scope of the present invention is subject to the scope of the patent application.

As follows: 4: Proof of data processing method 41~43: Steps

Claims (20)

A certification data processing system, comprising: a communication interface for receiving a plurality of electronic signatures within a time interval, wherein each of the electronic signatures respectively processes and encrypts an original data according to a private key of an electronic certificate. generating; and a processor electrically connected to the communication interface and used for: after the time interval, using the plurality of electronic signatures as a plurality of nodes of a Merkle tree to generate the Merkle tree, and respectively generating a corresponding Merkle certificate for each of the electronic signatures; and generating a token for each of the electronic signatures and its corresponding Merkle certificate, wherein each of the tokens records a Merkle of the Merkle tree The root, each of the electronic signatures, the electronic certificate corresponding to each of the electronic signatures, the Merkel certificate corresponding to each of the electronic signatures, and a timestamp set, and the timestamp set includes more than one timestamp. The certification data processing system according to claim 1, further comprising: a storage, electrically connected to the communication interface and the processor, for storing each of the tokens. The certification data processing system of claim 1, wherein: the communication interface is further configured to transmit each of the tokens to one or more external devices. The certification data processing system according to claim 1, wherein each of the electronic signatures first performs a hashing process on the original data to obtain a hashed data, and then uses the private key of the corresponding electronic certificate to perform a hashing process on the hashed data. generated by processing and encryption. The certification data processing system according to claim 1, wherein the communication interface is further used to receive an index tag corresponding to each of the electronic signatures within the time interval, and the system further comprises: a storage, electrically is connected to the communication interface and the processor, and is used for storing at least one of the plurality of index labels and the original data. The certification data processing system as claimed in claim 1, wherein each of the electronic certificates is an x.509 certificate. The certification data processing system according to claim 1, wherein the time stamp set included in each token is any two or more of a plurality of centralized time stamps and a plurality of decentralized time stamps. The certification data processing system according to claim 1, wherein each of the tokens further includes a certificate validity certificate of the electronic certificate corresponding to each of the electronic signatures. The certification data processing system according to claim 1, wherein each of the electronic signatures is from different enterprises, and each of the electronic signatures is processed and encrypted according to a private key corresponding to a corresponding enterprise certificate. A certification data processing system, comprising: a communication interface for receiving complex hash data within a time interval, wherein each of the hash data respectively corresponds to an original data; and a processor electrically connected to the communication interface, and After the time interval, the complex hash data is used as a complex node of a Merkle tree to generate the Merkle tree, and a corresponding Merkle proof is generated for each of the hash data; and for each of the hashes The data and its corresponding Merkle proof yield a token, wherein each token records a Merkle root of the Merkle tree, each hash, the Merkle proof corresponding to each hash, and a time A set of timestamps, and the set of timestamps contains more than one timestamp. A certification data processing method, comprising: receiving a plurality of electronic signatures within a time interval by a certification data processing system, wherein each of the electronic signatures respectively processes and encrypts an original data according to a private key of an electronic certificate generated; By the certification data processing system, after the time interval, the plural electronic signatures are used as plural nodes of a Merkle tree to generate the Merkle tree, and a corresponding Merkle is generated for each of the electronic signatures respectively and a token is generated by the certification data processing system for each of the electronic signatures and its corresponding Merkle certificate, wherein each of the tokens records a Merkle root of the Merkle tree, each of the electronic signatures The signature, the electronic certificate corresponding to each of the electronic signatures, the Merkel certificate corresponding to each of the electronic signatures, and a time stamp set, and the time stamp set includes more than one time stamp. The certification data processing method according to claim 11, further comprising: storing each of the tokens by the certification data processing system. The certification data processing method according to claim 11, further comprising: transmitting, by the certification data processing system, each of the tokens to one or more external devices. The method for processing certification data as described in claim 11, wherein each of the electronic signatures first performs a hashing process on the original data to obtain a hashed data, and then uses the private key of the corresponding electronic certificate to process the hashed data and encrypted. The certification data processing method according to claim 11, further comprising: receiving, by the certification data processing system, an index label corresponding to each of the electronic signatures within the time interval; and storing the certification data processing system by the certification data processing system at least one of a plurality of index tags and the raw material. The certification data processing method according to claim 11, wherein each of the electronic certificates is an x.509 certificate. The method for processing certification data according to claim 11, wherein the set of timestamps included in each token is any two or more of a plurality of centralized timestamps and a plurality of decentralized timestamps. The certification data processing method according to claim 11, wherein each of the tokens further includes a certificate validity certificate of the electronic certificate corresponding to each of the electronic signatures. The certification data processing method as claimed in claim 11, wherein each of the electronic signatures is from different enterprises, and each of the electronic signatures is processed and encrypted according to a private key corresponding to a corresponding enterprise certificate. A certification data processing method, comprising: receiving complex hash data within a time interval by a certification data processing system, wherein each of the hash data corresponds to an original data; the certification data processing system, after the time interval, Using the complex hash data as a complex node of a Merkle tree to generate the Merkle tree, and respectively generating a corresponding Merkle proof for each of the hash data; and, by the proof data processing system, for each of the hash data and its corresponding Merkle proof produce a token, wherein each token records a Merkle root of the Merkle tree, each hash, the Merkle proof corresponding to each hash, and a timestamp set, and the timestamp set contains more than one timestamp.

Images