TWM520159U - Device for generating and identifying electronic document containing electronic authentication and paper authentication - Google Patents

Description

Device for generating and verifying certified electronic documents with electronic and paper certifications

A device for generating and verifying electronic documents, and more particularly to a device for generating and verifying electronic documents having electronic and paper certifications.

With the rapid development of the Internet, many services that previously required me to apply in person to the document issuing unit can gradually apply through the Internet. After the applicant completes the application, the issuing unit of the relevant unit or agency will send the electronic file of the relevant documents to the user via the Internet.

When a user applies for a supporting document on the website, it is usually required to deliver the paper to a third party as proof of use. However, the electronic files received by users through the Internet will not include the stamp of the document issuing unit, or even if there is an electronic signature, the electronic signature in the electronic file cannot be obtained after the electronic file is printed. Verification, therefore, the authenticity of the printed content of the electronic file received by the user cannot be verified, that is, if the user wishes to prove that the content after the electronic file is printed is not forged, the user needs to The contents of the electronic file are printed as a paper file, and the printed paper file is carried to the document issuing unit for stamping. This means that when some organizations (third parties) need users to provide a paper copy that can confirm that the printed content is not forged, the user still needs to apply in person to the document issuing unit or apply for the electronic file through the Internet. The document is issued by the unit stamp.

In addition, when a general user performs a document signing operation on the Internet, the company website will provide a webpage with electronic signature function for the user to sign electronically. After the website verifies that the user has signed the signature, the company will also sign the enterprise (plus sign). After the signing of the two websites, the company's website will be electronically signed (with the electronic signature), and the signed electronic documents will be transmitted to the user and the company's website repository for receipt and retention. However, the corporate website has a high level of information processing capabilities, has a complete electronic signature verification system and access system, but the user side, there is no such equipment, and the general print save, it is even more impossible to verify.

In summary, it can be seen that in the prior art, there has been a long-standing problem that the signed electronic document cannot be verified after printing, and therefore it is necessary to propose an improved technical means to solve this problem.

In view of the fact that the content of electronic documents in the prior art is difficult to verify the authenticity, the present invention discloses a device for generating and verifying electronic documents having electronic authentication and paper certification, wherein:

The device for generating a certified electronic file with electronic authentication and paper certification disclosed in the present invention includes at least: a file providing module for providing a template electronic file; and a data transmission module for receiving a template transmitted by the client. The input data of the electronic file; the data processing module for combining the input data and the sample electronic file as the original electronic file, whereby the data transmission module transmits the original electronic file to the client, and is used to verify the data transmission module receiving The customer signature information from the client; the service signature module is used to generate the corresponding service signature data based on the original electronic file, so that the original electronic file, the customer signature information and the service signature data are transmitted by the data transmission module. To the verification server, and receiving the verification signature data generated by the verification server according to the original electronic file; the data encoding module is used to encode the original electronic file, the customer signature data, the service signature data and the verification signature data. Generate visualized certification data; document consolidation module for merging original electronic documents and certification materials Authentication with the electronic paper authentication and authentication of electronic documents.

Another device for generating a certified electronic file with electronic authentication and paper certification disclosed in the present invention comprises at least: a file providing module for providing a template electronic file; and a data transmission module for receiving the transmission by the client The authentication data; the data processing module is configured to read the customer data corresponding to the template electronic file according to the authentication data, and combine the input data and the template electronic file into the original electronic file; the service signature module is used to use the original electronic file. Corresponding service signature data is generated, whereby the original electronic file and the service signature data are transmitted by the data transmission module to the verification server, and the verification signature data generated by the verification server according to the original electronic file is received; the data encoding module, The original electronic document, the service signature data and the verification signature data are encoded to generate visualized authentication data; the document combining module is used to merge the original electronic document and the certification data into an electronic certificate and electronic authentication certificate. file.

The device for verifying the electronic document having the electronic certificate and the paper certificate authentication disclosed in the present invention comprises at least: a data acquisition module for obtaining the authentication data from the pre-provided certified electronic file; and the file decoding module for Obtain original electronic documents, service signature information, and verification signature data based on the certification data; the customer decryption module is used to decrypt the service signature data to obtain the service signature hash value, and decrypt the verification signature data to obtain the verification signature a hashing value module for generating a file hash value based on the original electronic file; and a file verification module for determining whether the authentication electronic file is verified based on the file hash value, the service signature hash value, and the verification signature hash value .

The device disclosed in the present application is as above, and the difference from the prior art is that the creation combines the service signature server and the original electronic document generated by the service server, the verification server, and the client into an electronic device through the service server. Certification and paper-certified certification electronic documents to solve the problems of the prior art, and to achieve the technical effect of verifying whether the digital content or the paper content of the electronic document is consistent with the original.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and the embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

This creation can combine the original electronic file generated by the user's editing and the visualized authentication data for verification into a certified electronic file with electronic certification and paper certification, so that the printed content of the certified electronic document or the use of digital content can be obtained. The authentication data in the certified electronic file can verify whether the original electronic file matches the original. Among them, the certification materials mentioned in this creation are visualized materials, such as 2D barcodes, QR codes, etc., but this creation is not limited to this. Any specific information or specific information can be recorded (such as decoding of authentication data). After obtaining specific information, and the visualized materials can be used as the certification materials for this creation.

The following is a description of the system architecture of the electronic document with electronic certification and paper certification certified by the "Picture 1". As shown in "FIG. 1", the system of the present creation includes a service server 100, a verification server 400, and a client 200.

The service server 100 is responsible for generating authentication electronic files with electronic authentication and paper certification. The server 100 further includes a file providing module 110, a service signing module 120, a data transmission module 130, a data processing module 150, a data encoding module 160, and a file combining module 170.

The document providing module 110 is responsible for providing the template electronic file. The file providing module 110 can read the template electronic file library to obtain the template electronic file, but the manner in which the file providing module 110 obtains the template electronic file is not limited thereto.

The template electronic file in the template electronic file library is usually an electronic file pre-established by the administrator of the service server 100, and includes files that can be filled or signed by the user or files that are not required to be filled or signed by the user. A single-page document can also be a multi-page document, such as a contract document or an equity manual. In addition, the template electronic file can be created using HTML, XML, PDF and other file formats, but this creation is not limited to the above.

The data processing module 150 is responsible for generating the original electronic file according to the template electronic file provided by the file providing module 110. The data processing module 150 can combine the input data received by the data transmission module 130 from the client 200 and the template electronic file provided by the file providing module 110 into an original electronic file. For example, the data processing module 150 can transmit the data transmission module. The text data in the input data received by the group 130 is respectively filled in the corresponding text reserved position in the template electronic file provided by the file providing module 110, so as to complete the field in the template electronic file that needs to be filled by the user, and If the received input data further includes one or more image data uploaded by the client 200, for example, an identity card front view, an identity card reverse map, a second ID map, and a bank passbook cover map, the data processing module 150 can fill each picture material into the corresponding picture reserved position, and can also generate a picture list according to all the picture materials filled in the template electronic file, and the generated picture list contains hashes of each picture material (Hash). Values, in general, the hash values in the picture list are represented in hexadecimal. In some embodiments, the data processing module 150 can also directly read the necessary customer data from the database according to the identity authentication data used by the client of the login system, and each of the read customer data. The data is filled in the corresponding position in the template electronic file (if the image data is included in the read data, the picture list can also be generated), and the input data received by the data transmission module 130 is not needed to generate the original electronic file. In addition, the data processing module 150 can also record only the position in the electronic file corresponding to each data item in the input data or the customer data, so that the original electronic file contains two parts, one part is a template electronic file, and the other part is a template electronic file and another part. The input is the input data or customer data. However, the manner in which the data processing module 150 generates the original electronic file according to the template electronic file is not limited to the above.

The service signature module 120 is responsible for generating an electronic signature corresponding to the original electronic file provided by the data processing module 150. In general, the service signature module 120 can perform a specific operation on the original electronic file using the private key in the digital certificate applied by the administrator of the service server 100, thereby generating a corresponding corresponding to the original electronic file after the operation. Electronic signature. In the present creation, the electronic signature generated by the service signature module 120 corresponding to the original electronic document is referred to as "service signature data".

The service signature module 120 can verify the customer signature data according to the original electronic file provided by the data processing module 150, and generate an electronic signature corresponding to the original electronic document when verifying that the customer signature is correct. However, the present invention is not limited thereto. In some embodiments, the client 200 may not need to sign the original electronic file provided by the data processing module 150. At this time, the service signature module 120 may not verify. The customer signature information directly generates an electronic signature corresponding to the original electronic document.

The data transmission module 130 can receive the input data corresponding to the template electronic file returned by the client 200. Among them, the client 200 will be explained later.

The data transmission module 130 is responsible for transmitting the original electronic file generated by the data processing module 150 to the client 200, and receiving the customer signature data generated by the client 200 for the original electronic document signature generated by the data processing module 150. .

The data transmission module 130 is also responsible for transmitting the original electronic file provided by the data processing module 150, the customer signature data received from the client 200, and the service signature data generated by the service signature module 120 to the verification server. 400, and receiving the corresponding verification signature data returned by the verification server 400. In some embodiments, the original electronic file provided by the data processing module 150 does not need to be signed by the client 200. At this time, the data transmission module 130 may transmit the data processing module 150 without transmitting the customer signature data. The original electronic file provided and the service signature data generated by the service signature module 120 are sent to the verification server 400. Among them, the verification server 400 will be described later.

The data encoding module 160 is responsible for the original electronic file generated by the data processing module 150, the service signature data generated by the service signature module 120, the customer signature data received by the data transmission module 130, and the verification server 400. The generated verification signature data is encoded, and after the encoding, the visualized authentication materials corresponding to the original electronic document, the service signature data, the customer signature data, and the verification signature data are generated. Each of the authentication materials generated by the data encoding module 160 can obtain a corresponding original electronic file, service signature data, customer signature data, or verification signature data after being decoded or converted or otherwise processed.

The authentication data corresponding to the original electronic file generated by the data encoding module 160 may be the data generated by encoding the original electronic file provided by the file providing module 110, or may be a specific one for the original electronic file. The information generated by the page is encoded.

The file merging module 170 is responsible for combining the original electronic file generated by the data processing module 150 and the authentication data generated by the data encoding module 160. The electronic file generated by the file merging module 170 combining the original electronic file and the authentication data is This creation is called "certified electronic documents with electronic certification and paper certification." Each page of the electronic certificate with electronic authentication and paper certification includes the authentication data generated by the data encoding module 160, that is, the content of the original electronic file containing part of the original electronic file. The corresponding certification materials and the certification materials corresponding to the service signature materials, customer signature materials, and verification signature materials.

Please continue to refer to "Figure 2." The client 200 is responsible for verifying the target electronic file in the authentication electronic file according to the authentication data in the electronic file with the electronic certification and the paper certification. The client 200 may be a mobile device such as a smart phone or a tablet computer, or may be an application executed in the mobile device, or may be a subroutine of an application executed in the mobile device. The present creation is not particularly limited. The client 200 further includes a data acquisition module 210, a client signature module 220, a data transmission module 230, a file decoding module 240, a hash computing module 250, a client decryption module 260, and a file verification module 270. And an input module 280 and a display module 290 that can be attached.

The data acquisition module 210 is responsible for acquiring the authentication materials included in the authentication electronic file with electronic certification and paper certification. The data acquisition module 210 can retrieve the authentication data included in the authentication electronic file printed on the certified electronic file or the screen display by the photographic lens of the client 200, or can be read from the electronic file of the certified electronic file. The authentication data is not required to be captured or scanned by the photographic lens, but the manner in which the data acquisition module 210 obtains the authentication data included in the authentication electronic file is not limited to the above.

The customer signature module 220 is responsible for signing the original electronic file received by the data transmission module 230 and generating the customer signature data after signing. That is, the sample electronic file is calculated by using the private key in the digital certificate applied by the user of the client 200, and the data generated after the operation is the customer signature data. The signature pattern of the customer signature module 220 on the original electronic file is an integrated signature, that is, the content of the signature operation directly includes the text data; and the customer signature module 220 pairs the original electronic document. In the signature method of the picture material in the middle, the Detached signatures method is used, that is, the hash value of the picture data is signed.

Generally, when the customer signature module 220 signs the original electronic file, it is signed by page, but the customer signature module 220 can also generate a customer signature data in different formats according to the instructions of the service server 100, for example, It may be a signature material generated by signing the entire original electronic document or a multi-page signature data generated by signing the original electronic document page by page.

The data transmission module 230 is responsible for receiving the original electronic file transmitted by the service server 100, and transmitting the customer signature data generated by the customer signature module 220 to the service server 100.

The file decoding module 240 is responsible for obtaining the original electronic file, the service signature data, the customer signature data, and the verification signature data according to the authentication data in the authentication electronic file acquired by the data acquisition module 210.

If the authentication data corresponding to the original electronic file in the authentication electronic file is generated by the data encoding module 160 encoding the entire original electronic file, the file decoding module 240 can decode only any page of the original electronic file. Obtaining the original electronic file, and if the authentication data corresponding to the original electronic file is the data generated by the data encoding module 160 encoding a specific page of the original electronic file, the file decoding module 240 can only obtain the page after decoding. The content, that is, the file decoding module 240 needs to decode each page in the original electronic file before the original electronic file can be sequentially combined. Similarly, the file decoding module 240 can also decode other authentication materials, so that after completing the decoding of the authentication data, the service signature data, the customer signature data, and the verification signature data are obtained.

The client decryption module 260 is responsible for decrypting the client signature data to obtain the "customer signature hash value", and is responsible for decrypting the service signature data to obtain the "service signature hash value", and is responsible for decrypting the verification signature data to obtain the "verification signature hash". value".

The hash operation module 250 is responsible for generating a file hash value corresponding to the original electronic file according to the original electronic file acquired by the file decoding module 240. In general, the hash operation module 250 performs a hash operation on the original electronic file and generates a hash value after the operation. In the present creation, the hash operation module 250 generates a hash operation on the original electronic file. The hash value corresponding to the original electronic file is referred to as a "file hash value."

The hash operation module 250 may perform a hash operation on the generated file hash value and the client signature data obtained by the file decoding module 240 to generate a “first verification hash value”, and may also generate a file hash value and a file. The verification signature data obtained by the decoding module 240 performs a hash operation to generate a "second verification hash value".

The file verification module 270 is responsible for comparing the file hash value generated by the hash operation module 250 with the client signature hash value obtained by the client decryption module 260. In some embodiments, the client 200 does not need to sign the original electronic file, and thus the client signature data is not generated. Therefore, the client decryption module 260 cannot decode the client signature data and obtain the client signature hash value. The file verification module 270 compares the file hash value with the service signature hash value obtained by the client decryption module 260.

The file verification module 270 is also responsible for comparing the service signature hash value obtained by the client decryption module 260 with the hash value (first verification hash value) of the "file hash value and the client signature data". In some embodiments, the client 200 does not need to sign the original electronic file, and thus the client signature data is not generated. Therefore, the client decryption module 260 cannot decode the client signature data and obtain the client signature hash value. The file verification module 270 does not perform this comparison.

The file verification module 270 is also responsible for comparing the verification signature hash value obtained by the client decryption module 260 with the hash value (second verification hash value) of the "file hash value and the verification signature data".

The file verification module 270 is responsible for determining the authentication electronic file when the file hash value is the same as the service signature hash value, the service signature hash value is the same as the first verification hash value, and the verification signature hash value is the same as the second verification hash value. approved. Otherwise, the file verification module 270 will determine that the authentication electronic file verification failed.

The file verification module 270 can also provide the original electronic file acquired by the file decoding module 240 and the target electronic file in the authentication electronic file acquired by the data acquisition module 210 in a visual manner.

The input module 280 can provide input file data, and the input module 280 provides input file data including text data or text data and image data.

The display module 290 can display the original electronic file acquired by the file decoding module 240, and can also display the verification result of the file verification module 270.

The verification server 400 is responsible for receiving the original electronic file, the customer signature information and the service signature data provided by the service server 100, and verifying the received customer signature data and the service signature data, and the customer signature data. After the verification of the service signature data, the signature of the original electronic document and the service signature data are signed to generate the verification signature data, and the verification signature data generated by the signature is transmitted back to the service server 100. That is, the verification server 400 can treat the hash value of the original electronic file and the service signature data as one piece of data, and use the private key of the digital certificate applied by the administrator of the verification server 400 to the original electronic file. The hash value is calculated by the data composed of the service signature data, and the result produced by the operation is the verification signature data. However, if the customer signature information or the service signature data cannot pass the verification of the verification server 400, the verification server 400 will not generate the verification signature data.

Next, the operational system of the present creation will be explained in the first embodiment. First, the process of creating an electronic document with electronic certification and paper certification is created. Please refer to the flowchart of the method for generating electronic documents with electronic certification and paper certification. In this embodiment, it is assumed that the original electronic file is a contract between the financial institution and the user, for example, a trust account opening account, and the format is an HTML file, but the creation is not limited thereto.

The document providing module 110 provided at the financial institution's service server 100 can provide a template electronic file (step 301). In the present embodiment, it is assumed that the template electronic file provided by the file providing module 110 has been previously designed and stored by the employee of the financial institution (usually also the manager of the service server 100) and stored in the service server 100.

After the client operates the client 200 to log in to the service server 100, the client 200 can be operated to select the contract signing service provided by the service server 100. Thus, the data processing module 150 of the service server 100 can transmit data through the service server 100. The module 130 requires the client 200 to input the input data required by the template electronic file provided by the file providing module 110 (step 310).

Then, the data transmission module 130 of the service server 100 can receive the input data transmitted by the client 200 and provide the received input data to the data processing module 150. In this embodiment, the input data input by the client 200 may include text data and image data, wherein the text data may include the name of the user of the client, the identity card number, date of birth, nationality, gender, marital status, Household registration address, mailing address, contact telephone number, emergency contact person, statement delivery method, agreed account information, risk attribute analysis questionnaire data, and signature and date signed by the user of the client; Includes the front view of the ID card, the reverse view of the ID card, the front view of the second ID card (the health insurance card), and the front view of the bank passbook.

After the data processing module 150 of the service server 100 obtains the input data received by the data transmission module 130 of the service server 100, the file providing module 110 can obtain the template electronic file and combine the obtained input data and The template electronic file is used to generate the original electronic file (step 320).

Thereafter, the data transmission module 130 of the service server 100 can transmit the original electronic file generated by the data processing module 150 of the service server 100 to the client 200, and the client can review the service server 100 through the client 200. Whether the content of the original electronic file is correct, if the content of the original electronic file is correct and agrees to the agreed terms listed in the original electronic file, the client can operate the client 200 such that the client signature module 220 of the client 200 pairs the original electronic file. A signature is generated to generate customer signature information (step 330). The data transmission module 230 of the client 200 can upload the generated customer signature data to the service server 100 after the client signature module 220 completes the signature.

After receiving the customer signature data transmitted by the client 200, the data transmission module 130 of the service server 100 can provide the received customer signature data to the service signature module 120. The data processing module 150 of the service server 100 can verify that the customer signature data received by the data transmission module 130 is correct according to the generated original electronic file, and the service signature module 120 can be obtained by the data processing module 150. The original electronic file is generated and the service signature data corresponding to the original electronic file is generated (step 340).

After the service signature module 120 of the service server 100 generates the service signature data, the data transmission module 130 of the service server 100 can use the original electronic file generated by the data processing module 150 and the client received from the client 200. The signature information and the service signature data generated by the service signature module 120 are transmitted to the verification server 400.

The verification server 400 may generate corresponding verification signature data after verifying that the customer signature data is correct and the service signature data is correct (step 350), and return the generated verification signature data to the service server 100. If the verification server 400 determines that the customer signature data or the service signature data is incorrect, that is, the customer signature data or the service signature data does not pass the verification by the verification server 400, the verification server 400 may not generate the verification signature. The profile information is returned to the service server 100.

After receiving the verification signature data, the data transmission module 130 of the service server 100 may send the original electronic file generated by the data processing module 150, the customer signature data received from the client 200, and the service signature module 120. The generated service signature data and the verification signature data received from the verification server 400 are provided to the data encoding module 160 of the service server 100. The data encoding module 160 may encode the original electronic file, the customer signature data, the service signature data, and the verification signature data to generate corresponding visual authentication data (step 360). In this embodiment, the generated visual authentication material may be in the form of a QR code, but the creation is not limited thereto.

The file merging module 170 of the service server 100 can merge the original electronic file generated by the data processing module 150 of the service server 100 and the visual authentication data generated by the data encoding module 160 of the service server 100. The electronic document and the visual certification material become certified electronic documents with electronic certification and paper certification (step 370). In the present embodiment, the generated authentication electronic file 500 has a plurality of pages as shown in "figure 5", wherein, in addition to the page in which the picture is recorded, the other pages (including the pages of the document and the hash value of the attached file) are The corresponding visual authentication data is included. In addition, the format of the generated certified electronic file may be in PDF format, but the creation is not limited thereto.

After the file merging module 170 of the service server 100 generates the authentication electronic file with the electronic certificate and the paper certificate, the service server 100 can transmit the generated authentication electronic file with the electronic certificate and the paper certificate to the user. . In this embodiment, it is assumed that the service server 100 can return the generated authentication electronic file to the user of the client 200 in time, and can also provide the generated authentication electronic file to the user through email, or The generated authentication electronic file is stored on a specific website, and the user can connect to the website and confirm the identity and generate the authentication electronic file generated by the service server 100. In this way, the user can obtain a visual electronic authentication file.

Then continue to explain the process of verifying the electronic document with electronic certification and paper certification, and please refer to the flowchart of the method for verifying the certification electronic file proposed in the "4A".

In this embodiment, it is assumed that the electronic document obtained by the user with the electronic certificate and the paper certificate is a trust account opening account, and if the user uses the printer to obtain the certified electronic file (that is, the trust account is opened) The contract is printed and it is desirable to use the client 200 to verify that the obtained certified electronic document matches the original. The user can execute the verification program on the smart phone and provide the printed authentication electronic file to the client 200 (step 402). As such, the data acquisition module 210 of the client 200 can obtain the authentication data contained in the authentication electronic file (step 410). In this embodiment, it is assumed that the data acquisition module 210 captures the visualized authentication data contained in the printed authentication electronic file through the photographic lens on the smart phone.

In addition, the user can also execute the verification program directly on the client 200, and operate the verification program to read the electronic file of the obtained authentication electronic file, thereby providing the authentication electronic file (step 402), so that the data acquisition mode of the client 200 is enabled. The group 210 can directly obtain the authentication material contained in the authentication electronic file (step 410).

After the data acquisition module 210 of the client 200 obtains the authentication data in the authentication electronic file (step 410), the file decoding module 240 of the client 200 can obtain the authentication data obtained by the data acquisition module 210 of the client 200. The original electronic document, the service signature information, the customer signature information, and the verification signature data (step 420). In this embodiment, it is assumed that the file decoding module 240 decodes the authentication data, and obtains the original electronic file, the service signature data, the customer signature data, and the verification signature data after decoding.

After the file decoding module 240 of the client 200 obtains the original electronic file, the service signature data, the customer signature data, and the verification signature data according to the authentication data (step 420), the hash computing module 250 of the client 200 can be based on The original electronic file acquired by the file decoding module 240 generates a file hash value corresponding to the original electronic file (step 440).

Similarly, after the file decoding module 240 of the client 200 obtains the original electronic file, the service signature data, the customer signature data, and the verification signature data (step 420), the client decryption module 260 of the client 200 can decode the file decoding. The customer signature data acquired by the module 240 is used to generate a customer signature hash value corresponding to the customer signature data, and the service signature data obtained by the decoding file decoding module 240 is generated to generate a service corresponding to the service signature data. The signature hash value and the verification signature data obtained by the decoded file decoding module 240 are generated to generate a verification signature hash value corresponding to the verification signature data (step 450). In this embodiment, it is assumed that the client decryption module can use the private key in the digital certificate to decode the customer signature data, the service signature data, and the verification signature data acquired by the file decoding module 240 to generate a customer signature hash value. Service signature hash value, verification signature hash value.

The hash computing module 250 at the client 200 generates a file hash value (step 440), and the client decryption module 260 at the client 200 generates a client signature hash value, a service signature hash value, and a verification signature hash value (steps). After the 450), the file verification module 270 of the client 200 can be based on the file hash value generated by the hash operation module 250, the client signature hash value generated by the client decryption module 260, the service signature hash value, and the verification signature. The hash value determines whether the authentication electronic file has passed the verification (step 470). In this embodiment, as shown in the flow of FIG. 4B, the file verification module 270 compares the file hash value generated by the hash operation module 250 with the client signature data generated by the client decryption module 260. The signature hash value (step 471), when the comparison result indicates that the file hash value matches the signature hash value, the hash operation module 250 of the client 200 can generate the first verification hash value according to the file hash value and the client signature data. (Step 472), and the file verification module 270 compares whether the first verification hash value is the same as the service signature hash value (step 474), when the comparison result indicates that the first verification hash value is the same as the service signature hash value. The hash operation module 250 can continue to generate a second verification hash value according to the file hash value and the service signature data (step 475), and the file verification module 270 compares the second verification hash value with the verification signature hash value. (Step 477), when the comparison result indicates that the second verification hash value is the same as the verification signature hash value, the file verification module 270 may determine that the authentication electronic file passes the verification (step 478). That is, when the file hash value is the same as the signature hash value, the first verification hash value is the same as the service signature hash value, and the second verification hash value is the same as the verification signature hash value, the file verification module 270 is in three ratios. After verifying that the authentication electronic file passes the verification, if the file hash value is different from the signature hash value, the first verification hash value is different from the service signature hash value, or the second verification hash value is different from the verification signature hash value, the file The verification module 270 can determine that the authentication electronic file has not passed the verification after the comparison (step 479).

In the above embodiment, if the file verification module 270 of the client 200 determines that the authentication electronic file passes the verification, the display module 290 can display the original electronic file and the file verification module acquired by the file decoding module 240 of the client 200. 270 verification results of customer signature information, service signature information and verification signature data. And can provide users with a visual comparison of the original electronic file and the target electronic file.

In this way, through the creation, the original electronic file and the authentication data contained in the authentication electronic file can be made visible, so that the user can directly judge whether the original electronic file in the electronic file is authenticated by the authentication data in the authentication electronic file. In accordance with the original.

The operation system of the present creation will be explained below with reference to the second embodiment. In this embodiment, the original electronic file is also assumed to be a contract between the financial institution and the user, but the present creation is not limited thereto.

The document providing module 110 provided at the financial institution's service server 100 can provide a template electronic file (step 301). After the client operation client 200 inputs the authentication data to log in to the service server 100, the client 200 can be operated to select the contract signing service provided by the service server 100. Thus, the data processing module 150 of the service server 100 can be based on the client 200. The authentication data used by the login service server 100 reads the customer profile corresponding to the template electronic file. Then, the data processing module 150 of the service server 100 can obtain the template electronic file by the file providing module 110, and combine the obtained customer data and the template electronic file into the original electronic file.

Thereafter, the service signature module 120 of the service server 100 can obtain the generated original electronic file from the data processing module 150 of the service server 100, and generate service signature data corresponding to the original electronic file.

After the service signature module 120 of the service server 100 generates the service signature data, the data transmission module 130 of the service server 100 can use the original electronic file generated by the data processing module 150 and the service signature module 120. The generated service signature data is transmitted to the verification server 400.

The verification server 400 may generate corresponding verification signature data after the verification service signature data is correct (step 350), and transmit the generated verification signature data to the service server 100. If the verification server 400 determines that the service signature data is incorrect, that is, the service signature data does not pass the verification by the verification server 400, the verification server 400 may not generate the verification signature data, and return the verification failure message. The service server 100 is given.

After receiving the verification signature data, the data transmission module 130 of the service server 100 can sign the service generated by the original electronic file generated by the data processing module 150 of the service server 100 and the service signature module 120. The data and the verification signature data received from the verification server 400 are provided to the data encoding module 160 of the service server 100. The data encoding module 160 may encode the original electronic file, the service signature data, and the verification signature data to generate corresponding visual authentication materials.

The file merging module 170 of the service server 100 can merge the original electronic file generated by the data processing module 150 of the service server 100 and the visual authentication data generated by the data encoding module 160 of the service server 100. Electronic documents and visualized certification materials become certified electronic documents with electronic certification and paper certification.

After the file merging module 170 of the service server 100 generates the authentication electronic file with the electronic certificate and the paper certificate, the service server 100 can transmit the generated authentication electronic file with the electronic certificate and the paper certificate to the user. .

It is assumed that after obtaining the authentication electronic file transmitted by the service server 100, the user prints the obtained electronic certificate with the electronic certificate and the paper certificate using the printer, and hopes to verify the obtained authentication by using the client 200. Whether the electronic file matches the original. The user can execute the verification program of the client and provide the printed authentication electronic file to the client 200. In this way, the data acquisition module 210 of the client 200 can capture the visualized authentication data contained in the paper content of the authentication electronic file through the photographic lens on the smart phone. The user can directly operate the client 200 to read the electronic file of the obtained authentication electronic file, so that the data acquisition module 210 of the client 200 can directly obtain the authentication data included in the authentication electronic file.

After the data acquisition module 210 of the client 200 obtains the authentication data in the authentication electronic file, the file decoding module 240 of the client 200 can obtain the original electronic file according to the authentication data obtained by the data acquisition module 210 of the client 200. Service signature information, and verification signature information. In this embodiment, it is assumed that the file decoding module 240 decodes the authentication data, and obtains the original electronic file, the service signature data, and the verification signature data after decoding.

After the file decoding module 240 of the client 200 obtains the original electronic file, the service signature data, and the verification signature data according to the authentication data, the hash computing module 250 of the client 200 can obtain the original according to the file decoding module 240. The electronic file produces a file hash value corresponding to the original electronic file.

Similarly, after the file decoding module 240 of the client 200 obtains the original electronic file, the service signature data, and the verification signature data, the client decryption module 260 of the client 200 can decode the file decoding module using the private key in the digital certificate. The service signature data obtained by the group 240 is used to generate a service signature hash value corresponding to the service signature data, and the verification signature data obtained by the decoding file decoding module 240 to generate verification corresponding to the verification signature data. Sign the hash value.

After the hash computing module 250 of the client 200 generates a file hash value, and after the client decryption module 260 of the client 200 generates the service signature hash value and the verification signature hash value, the file verification module 270 of the client 200 can The authentication hash file determines whether the authentication electronic file passes the verification according to the file hash value generated by the hash operation module 250, the service signature hash value generated by the client decryption module 260, and the verification signature hash value. In this embodiment, the file verification module 270 can compare the file hash value generated by the hash operation module 250 with the service signature hash value generated by the client decryption module 260, and when the comparison result indicates the file hash value and service. When the signature hash value matches, the hash operation module 250 can generate the second verification hash value according to the file hash value and the service signature data, and the file verification module 270 can compare whether the second verification hash value and the verification signature hash value are the same. When the comparison result indicates that the second verification hash value is the same as the verification signature hash value, the authentication electronic file can be judged to pass the verification. That is, when the file hash value is the same as the service signature hash value, and the second verification hash value is the same as the verification signature hash value, the file verification module 270 determines that the authentication electronic file passes the verification after two comparisons, and if If the file hash value is different from the service signature hash value, or the second verification hash value is different from the verification signature hash value, the file verification module 270 may determine that the authentication electronic file has not passed the verification after the comparison.

In summary, it can be seen that the difference between the present creation and the prior art is that the service server, the verification server, and the visual signature data generated by the client are combined with the original electronic file to be electronically authenticated through the service server. The technical means of authenticating electronic documents for paper certification can solve the problem that the content of electronic documents existing in the prior art is difficult to verify authenticity by means of a technical means, thereby achieving the technical effect of verifying whether the electronic file conforms to the original.

Furthermore, the creation can be implemented in hardware, software or a combination of hardware and software, or in a centralized manner in a computer system or in a distributed manner in which different components are interspersed among several interconnected computer systems.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

100‧‧‧Service Server
110‧‧‧Document providing module
120‧‧‧Service Signature Module
130‧‧‧Data Transmission Module
150‧‧‧Data Processing Module
160‧‧‧Data Encoding Module
170‧‧‧File merge module
200‧‧‧Client
210‧‧‧ Data Acquisition Module
220‧‧‧Customer Signature Module
230‧‧‧Data Transmission Module
240‧‧‧File Decoding Module
250‧‧‧Bus computing module
260‧‧‧Customer Decryption Module
270‧‧‧Document verification module
280‧‧‧ input module
290‧‧‧Display module
500‧‧‧Certified electronic document Step 301‧‧‧Service server provides sample electronic file Step 310‧‧‧Service server requires client to input input data Step 320‧‧‧Service server combination input data and template electronic file to generate Original electronic document step 330‧‧‧ The client signs the original electronic document to generate the customer signature data Step 340‧‧‧ The service server verifies the customer signature according to the original electronic document and generates the service signature information. Step 350‧ ‧Verification server verifies that the customer signature information and service signature information are correct and generates verification signature data. Step 360‧‧‧Service server encodes original electronic documents, customer signature information, service signature information and verification signature data To generate visualized certification data Step 370‧‧‧ Service server merges original electronic documents and visualized certification data into certified electronic documents with electronic and paper certification steps. Steps ‧ ‧ Provide certification for electronic and paper certification Electronic document step 410‧‧‧ Access to certification information Step 420‧‧ Access to original electronic documents, service signature information, customer signature information, and verification signature information. Step 440‧‧ ‧ Generate corresponding document hash values based on the original electronic document. Step 450‧‧ Decrypt customer signature information, service sign Chapter data, and verification signature information, to generate customer signature hash value, service signature hash value, verification signature hash value step 470‧‧ ‧ based on file hash value, customer signature hash value, service signature hash value, And verifying the signature hash value to determine whether the authentication electronic document has passed the verification step 471‧‧ ‧ whether the document hash value is the same as the customer signature hash value. Step 472‧‧‧ Generate the first verification hash value based on the file hash value and the customer signature data Step 474‧‧‧ Determine whether the first verification hash value is the same as the service signature hash value Step 475‧‧‧ Generate a second verification hash value based on the file hash value and the service signature data Step 477‧‧‧ Determine the second verification hash value Whether the hash value of the service signature is the same. Step 478‧‧‧Certification of the electronic document through the verification step 479‧‧ Pieces can not be verified

Figure 1 is a system architecture diagram of the authoritative electronic document for electronic and paper certification. Figure 2 is a schematic diagram of the components of the client of the verification and certification electronic file proposed by the author. Figure 3 is a flow chart of the method for creating an electronic document for electronic authentication and paper certification. Figure 4A is a flow chart of the method for verifying the authentication electronic file proposed by the author. Figure 4B is a flow chart of the detailed method of verifying the authentication electronic file proposed by the author. Figure 5 is a schematic diagram of the authentication electronic file proposed in the creative embodiment.

500‧‧‧Certified electronic documents

Claims (10)

A device for generating an electronic document having electronic authentication and paper certification, the device being connected to a verification server and providing a client connection, the device comprising at least: a file providing module for providing the same electronic file a data transmission module for receiving one of the input data corresponding to the template electronic file transmitted by the client; a data processing module for combining the input data and the template electronic file as an original electronic file And transmitting, by the data transmission module, the original electronic file to the client, and verifying that the data transmission module receives a customer signature data from the client; a service signature module for The original electronic file generates a corresponding service signature data, whereby the original electronic file, the customer signature data and the service signature data are transmitted by the data transmission module to the verification server, and the verification server is received. The original electronic file generates one of the verification signature materials; a data encoding module for the original electronic document, the customer signature data, The service signature information and the verification signature data are encoded to generate a visualized authentication material; and a document combining module for combining the original electronic document and the authentication material is an electronic certificate and a paper authentication certification electronic file. The device for verifying an electronic certificate for electronic certification and paper certification according to the first aspect of the patent application, wherein the data encoding module generates the visualized authentication data according to the entire original electronic file, or according to the Each of the original electronic files produces the visualized authentication material. For example, the device for verifying electronic documents and electronically certified electronic documents according to the first aspect of the patent application, wherein the input data is a text material or a picture material, or a combination of text data and image data. The device for verifying the electronic certificate and the paper-certified authentication electronic file according to the first aspect of the patent application, wherein the data processing module is further configured to configure the content of each page in the original electronic file. A device for generating an electronic document having electronic authentication and paper certification, the device being connected to a verification server and providing a client connection, the device comprising at least: a file providing module for providing the same electronic file a data transmission module for receiving one of the authentication materials transmitted by the client; a data processing module for reading one of the customer data corresponding to the template electronic file according to the authentication data, and combining the customer The data and the template electronic file are an original electronic file; a service signature module is configured to generate a corresponding service signature data according to the original electronic file, so that the original electronic file is transmitted by the data transmission module and the Serving the signature data to the verification server, and receiving the verification server to generate one of the verification signature data according to the original electronic file; a data encoding module for the original electronic file, the service signature data and the Verifying that the signature data is encoded to produce a visualized authentication material; and a document merging module for merging the original electronic document and Certification data for an electronic certification and paper certification of certified electronic documents. An apparatus for verifying an electronic document having electronic certification and paper certification as described in claim 5, wherein the data encoding module generates the visual based on the entire original electronic file. The certification information is generated, or the visualized certification data is generated according to each page in the original electronic document. For example, the device for verifying electronic documents and electronically certified electronic documents according to item 5 of the patent application scope, wherein the customer data is a text material or a picture material, or a combination of text data and image data. For example, the device for verifying the electronic certificate and the paper-certified authentication electronic file described in claim 5, wherein the data processing module is further configured to configure the content of each page in the original electronic file. A device for verifying an electronic file with electronic authentication and paper certification, the device being connected to a verification server, the device comprising at least: a data acquisition module for acquiring one of the electronic files provided in advance by one of the authentication files a document decoding module, configured to obtain an original electronic file, a service signature data, and a verification signature data according to the authentication data; a client decryption module for decrypting the service signature data to obtain a service signature hash value, and decrypting the verification signature data to obtain a verification signature hash value; a hash operation module for generating a file hash value based on the original electronic file; and a file verification module Whether the authentication electronic file passes the verification is determined according to the hash value of the file, the service signature hash value, and the verification signature hash value. For example, the device for verifying electronic documents and electronically certified electronic documents according to claim 9 of the patent application scope, wherein the file decoding module is further configured to obtain a customer signature data according to the authentication data, the customer decryption module More used to decrypt the customer signature information to obtain a customer signature hash value, The hash computing module is further configured to generate a first verification hash value according to the file hash value and the customer signature data, and generate a second verification hash value according to the file hash value and the service signature data, the file verification mode The group is further configured to match the hash value of the file to the customer signature hash value, the first verification hash value is consistent with the service signature hash value, and the second verification hash value matches the verification signature hash value. It is judged that the authentication electronic file passes the verification.