TWM578053U - System for generating signing documents sequentially providing the signature for the signing party - Google Patents

Abstract

A system for providing a signature object signature in order to generate a signature document, which defines a signature order according to the category of the original document obtained by the file host and generates an object file including the original file and the signature order, and the signature server According to the signature order, the electronic file containing the target file is sequentially provided to the signature object signature to generate the signature file, and the signature file is transmitted to the user or the owner of the signature object to save the electronic means to ensure the electronic The document will not be replaced and the technical effect of providing an approximate seal in the electronic file will be achieved.

Description

A system for providing a signature of a signature object in order to generate a signature document

A document signing system, in particular, a system for providing a signature object signature in order to generate a signature document.

Since the documents stored on the paper need a suitable environment, the paper is easily stained, and in addition to the environmental factors, the paper documents need space to be saved. Therefore, the preservation of the paper documents needs to be fixed. the cost of.

With the rapid development of information processing technology and communication technology, electronic files are not easily destroyed by environmental factors, and there is almost no need to save space, which causes the trend of paper documents to be gradually converted into electronic files. However, in contrast, electronic documents are easier to steal, falsify, or falsify than paper documents, which means that electronic documents are less secure than paper documents.

Therefore, at present, for the prevention of stealing electronic files, electronic files can be encrypted by encryption and decryption technology to ensure the security of electronic files, and for the prevention of falsification or tampering with electronic files, digital signature technology can be used to ensure electronic files. The correctness.

However, in some cases, the electronic file may have been replaced before it was signed. For example, when the user operates the client to connect to the server provided by the electronic file provider, the user may not be able to confirm with the naked eye. The content of the electronic file of the signature operation, therefore, the interested person can make the content of the file browsed by the user inconsistent with the content of the electronic document being signed, resulting in loss of the user.

In summary, it can be seen that in the prior art, there has been a long-standing problem that electronic documents may be replaced before the signature, and therefore it is necessary to propose an improved technical means to solve this problem.

In view of the problem that prior art electronic documents may be replaced before the signature, the present disclosure discloses a system for providing signature signatures in order to generate signature documents, wherein:

The system disclosed in the present invention provides a signature object signature in order to generate a signature file, and at least includes: a client for providing content parameters; a file host for obtaining the original file, and defining the signature according to the category definition of the original document a sequence of chapters, and a target file for generating a signature sequence and an original file, and generating file identification data corresponding to the target file, wherein the original file includes content parameters; the signature server is configured to receive the file host The target file and the file identification data, and the plurality of signature objects are sequentially provided according to the signature order to sign the electronic file to generate the signature file, and the signature file is transmitted to the client, wherein the signature object includes the client And the signature server, the signature file contains the visualized data of the document identification data generated by the signature object, and the electronic signature is the target file when the first signature object indicated by the signature sequence is for the electronic document signature. When the signature of the signature is not the first signature of the signature object, the electronic signature is the signature of the previous signature. After the job files generated by the signature object; reference purposes server for receiving and storing the transmitted signature the signature file server.

The system disclosed in the present application is as above, and the difference from the prior art is that the author defines the signature order according to the category of the original document obtained by the file host and generates an object file containing the original file and the signature order, the signature server. According to the signature order, the electronic file containing the target file is sequentially provided to the signature object signature to generate the signature file, and the signature file is transmitted to the user or owner of the signature object to save the prior art. The problem, and can achieve the technical effect of providing an approximate seal in an electronic file.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and the embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

The creation of the electronic document to be signed by the signature server can be passed between the signature objects according to the signature order, and the electronic document can only be signed by a specific computing device or application, thereby ensuring that the signature is to be signed. The electronic file of the chapter will not be modified by the user of the computing device or application, and the electronic file to be signed will not be replaced by the file provider. In addition, this creation can also provide the client to confirm whether the contents of the document in the signature file held by the client match the original content.

The signature sequence proposed in this creation can record the order of the signature objects, wherein the signature object is a computing device and/or an application that needs to sign the electronic file, and the signature object is the corresponding object identification data. Said.

The computing devices referred to in this creation include, but are not limited to, one or more processors, one or more memory modules, and components such as bus bars that connect different components, including memory modules and processors. Through the various components included, the computing device can load and execute the operating system to cause the operating system to run on the computing device. For example: personal computers, notebook computers, mobile phones, tablets, smart watches, navigation devices, digital cameras, televisions, projectors, e-book readers, multimedia players, video games, electronic dictionaries, car computers, etc., but This creation is not limited to this.

The bus of the computing device proposed by the present application may include one or more types, for example, including a data bus, an address bus, a control bus, and an expansion bus ( Expansion bus), and / or local bus and other types of bus. Busbars for computing devices include, but are not limited to, side-by-side industry standard architecture (ISA) busses, peripheral component interconnect (PCI) busses, video electronic standards associations (VESA) local busses, and tandem universal sequence busses (USB), Fast Peripheral Component Interconnect (PCI-E) bus, etc.

The processor of the computing device proposed by the present invention is coupled to the bus bar. The processor includes a register group or a scratchpad space, and the scratchpad group or scratchpad space can be completely disposed on the processing wafer, or all or part of the processor is disposed outside the processing chip and via a dedicated electrical connection. And/or coupled to the processor via a bus. The processor can be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the computing device includes the same or similar processors and is coupled and communicated through the bus.

The processor of the computing device can be coupled to the chip set or electrically connected to the chip set through the bus bar. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and a peripheral input/output (I/O) controller, that is, the memory controller and the peripheral output controller can be included in In an integrated circuit, two or more integrated circuits can also be used. The chipset typically provides input and memory management functions, as well as providing a plurality of general purpose and/or dedicated registers, timers, etc., wherein the general purpose and/or dedicated registers and timers are coupled or One or more processors electrically coupled to the chip set are accessed or used.

The processor of the computing device can also access the data stored in the memory module and the large-capacity storage area of the computing device through the memory controller. The above memory module includes any type of volatile memory and/or non-volatile memory (NVRAM) memory, such as static random access memory (SRAM), dynamic random access. Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The mass storage area described above may include any type of storage device or storage medium, such as a hard disk drive, a compact disc, a tape drive, a flash drive (flash memory), a solid state disk (SSD), or any Other storage devices, etc. That is to say, the memory controller can access data in the static random access memory, the dynamic random access memory, the flash memory, the hard disk drive, and the solid state hard disk.

The processor of the computing device can also communicate with the peripheral device or interface such as the peripheral output device, the peripheral input device, the communication interface, and the GPS receiver through the peripheral output/input bus through the peripheral output/input controller. The peripheral input device can be any type of input device, such as a keyboard, a mouse, a trackball, a trackpad, a rocker, etc., and the peripheral output device can be any type of output device, such as a display, a printer, etc., peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface, and the wireless communication interface can include a wireless communication network such as Wi-Fi, Zigbee, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G, etc. The interface of the road or other wireless data transmission protocol, the wired communication interface can be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL data machine, a cable (data) data machine, and the like. The processor can periodically poll various peripheral devices and interfaces to enable the computing device to perform input and output of data, as well as to communicate with another computing device having the elements described above.

In the following, the system of the signature of the signature document is provided in the order in which the "1st picture" is created in order to produce the system diagram of the signature document. As shown in "FIG. 1", the system of the present creation includes a file host 120, a signature server 130, a client 150, a check server 160, and an attachable notary server 170. The file host 120, the signature server 130, the client 150, the check server 160, and the notary server 170 are all computing devices, and in practice, the file host 120, the signature server 130, and the check server The functionality provided by 160 can be arbitrarily distributed across multiple different computing devices or combined in the same computing device.

The file host 120 can be coupled to the signature server 130. In some embodiments, the file host 120 can also be coupled to the check server 160. The file host 120 can transmit the data or signal to the signature server 130 and the search server 160, and can also receive the data or signals transmitted by the storage server 160. The file host 120 can be connected to the signature server 130 and the check server 160 through a communication interface using a wired network or a wireless network. The creation is not particularly limited.

The file host 120 is responsible for receiving the original file provided by the service server 400, and is responsible for determining the signature object according to the type of the original file obtained, and defining the signature order of each signature object. The signature object proposed by the present invention includes a client 150 and a signature server 130. In some embodiments, the signature object may further include a notary server 170.

The file host 120 is also responsible for generating the target file and the file identification data corresponding to the target file, wherein the object file generated by the file host includes the defined signature sequence and the original file obtained from the service server 400; The file identification data can be randomly arranged by any number of characters, letters, numbers, and symbols. Generally speaking, the file identification data is a unique value, that is, the file identification data corresponding to the target file is usually not repeated.

The file host 120 can receive the access parameters transmitted by the service server 400, and can set the access rights of the generated target files according to the received access parameters, or can transfer the set access rights to the search servo. The device 160 stores. The access authority set by the file host 120 may be the right to access the identity, for example, no one can access the target file or restrict only the specific person to access the target file; or may be the accessable number of times For example, limit the number of times that can be accessed per unit time, such as daily or hourly. However, the access rights provided by this creation are not limited to the above. Any conditions that can be used to restrict access to the target file can be used as access rights in this creation. The possibility of sensitive information being exposed.

In some embodiments, the file host 120 may store the generated object file or store the signature file sent by the server 160. The file host 120 can also transfer the generated access rights to the check server 160 for storage.

The signature server 130 can be coupled to the client 150, the file host 120, the check server 160, and the notary server 170. The signature server 130 can transmit data or signals to the client 150, the file host 120, the check server 160, and the notary server 170, and can also receive the client 150, the file host 120, the check server 160, and the notarized server. 170 transmitted data or signals. The signature server 130 can be connected to the client 150, the file host 120, the check server 160, and the notary server 170 through a communication interface using a wired network or a wireless network. The creation is not particularly limited.

The signature server 130 is responsible for receiving the target file transmitted by the file host 120 and the file identification data corresponding to the target file. The signature server 130 is also responsible for sequentially providing the electronic document in each of the signature objects represented by the signature sequence according to the signature sequence recorded in the target file, so that each signature object signs the electronic document to generate a new electronic file. Among them, the new electronic file generated by the signature object contains the electronic document signed by the signature object and the signature information generated by the signature. It is worth mentioning that when the signature object is the signature server 130 itself, the signature server 130 can sign the electronic file to generate a new electronic file.

It should be noted that, in the present creation, if the signature object of the electronic document signature is the first signature object indicated by the signature order, the signed electronic file is provided to the signature server 120 for the document host 120. The target file of the device 130, the new electronic file generated is referred to as a "job file" in the present creation; if the signature object is the last signature object indicated by the signature order, the signed electronic document is a signature The job file generated after the signature of another signature object in front of the signature object in the chapter order, the new electronic file generated is called "signature document" in this creation; and if the signature object Not the first signature object represented by the signature order, nor the last signature object, the signed electronic file is signed for another signature object arranged before the signature object in the signature order. The resulting work file, the resulting new electronic file, is also a new work file. For example, the three signature objects recorded in the signature sequence are the first device, the second device, and the third device, respectively, and the signature server 130 may first provide the target file to the first device signature to generate the first a job file, and then the signature server 130 can provide the first job file to the second device signature to generate a second job file. Finally, the signature server 130 can provide the second job file to the third device. To generate a signature document.

In addition, when the signature object is not the first signature object represented by the signature order, the signature object can also confirm whether the job file has been altered before the signature is signed, and the signature is arranged before the signature order. Whether the signature of the object is indeed completed. For example, when the three signature objects recorded in the signature sequence are the first device, the second device, and the third device, respectively, the second device can confirm whether the received job file has been altered, and confirm the received. Whether the signature of the first device is included in the job file; the third device can confirm whether the received job file has been altered, and confirm whether the received job file includes the sign of the first device and the second device. chapter.

In some embodiments, the signature server 130 can also transmit the file identification data generated by the file host 120 to the signature object, so that the signature object can generate visual data before or after signing the electronic document. The generated visual data can be added to the new electronic file generated by the signature object. The visual data provided in the present creation is a material that can record the document identification data received from the signature server 130, such as a graphic or a bar code, but the present invention is not limited thereto. The visualization data can even embed graphics, symbols, logos, trademarks, etc. corresponding to the signature object, which can represent the signature object.

The signature server 130 is also responsible for transmitting the signature file to the client 150 and to the check server 160.

In some embodiments, the signature server 130 can also encrypt the file identification data generated by the file host 120.

Client 150 may be a particular computing device dedicated to the present authoring, or an application installed in a general computing device that is compatible with the present authoring, or may be a general computing device containing specific circuitry compatible with the present authoring.

The client 150 can be connected to the signature server 130, the storage server 160, and the notary server 170, and can transmit data or signals to the signature server 130, the storage server 160, and the notary server 170, and can also receive the signature. The data or signal transmitted by the server 130, the check server 160, and the notary server 170. The client 150 can be connected to the signature server 130, the check server 160, and the notary server 170 through a communication interface using a wired network or a wireless network. The creation is not particularly limited.

The client 150 can provide content parameters as well as access parameters. In some embodiments, the client 150 can confirm the file content through the service server 400 and transmit the content parameters (and access parameters) to the service server 400, so that the service server 400 generates the content provided by the client 150. The original file of the parameter is passed to the file host 120 for the resulting original file (and access parameters).

The client 150 is also responsible for receiving the electronic file transmitted by the signature server 130 and is responsible for signing the received electronic file to generate a new electronic file. The client 150 is also responsible for transmitting the generated new electronic file back to the signature server 130.

The client 150 may also receive the file identification data corresponding to the received electronic file when receiving the electronic file transmitted by the signature server 130. The client 150 may also generate visual data according to the received document identification data before or after the signature of the received electronic document, and may add the generated visual data to the new one generated after the signature. In the electronic file.

The client 150 is also responsible for receiving the signature file transmitted by the signature server 130.

In some embodiments, the client 150 may also obtain the file identification data recorded by the visualization according to the visualization data included in the signature file, and may transmit the obtained file identification data to the notary server 170. In general, the client 150 can scan or retrieve the visualized data in the signature file to obtain the document identification data recorded in the visualized data.

The client 150 can also receive the tokens transmitted by the notary server 170. The tokens proposed in this creation are time-sensitive materials and can be arbitrarily arranged by any number of letters, numbers, and symbols.

The client 150 can also transmit the file identification data obtained through the visualization data and the token received from the notary server 170 to the storage server 160, and can receive the target corresponding to the acquired file identification data transmitted by the storage server 160. file.

The check server 160 can be connected to the client 150, the file host 120, the signature server 130, and the notary server 170, and can transmit data or signals to the client 150, the file host 120, and the notary server 170, and can also receive clients. The data or signal transmitted by the terminal 150, the file host 120, the signature server 130, and the notary server 170. The search server 160 can be connected to the client 150, the file host 120, the signature server 130, and the notary server 170 through a communication interface using a wired network or a wireless network. The creation is not particularly limited.

The check server 160 is responsible for receiving the signature file transmitted by the signature server 130 and storing the received signature file. The check server 160 can also receive access rights to the target file transmitted by the file host 120.

It is worth mentioning that the search server 160 can store only the target file related information of the target file included in the signature file, and can store the received signature file to the file host 120. The information related to the target file stored by the check server 160 includes, but is not limited to, the file identification data corresponding to the target file, the date of creation of the target file, the state of the target file, and the access authority of the target file.

In some embodiments, the check server 160 can receive the file identification data transmitted by the notary server 170, and determine whether the target file corresponding to the received file identification data can be accessed immediately, that is, the judgment file. Whether the target file corresponding to the identification data is being stored in the storage server 160 (or the file host 120). The checking server 160 may determine the data according to the date of creation of the target file, the state of the target file, and/or the access authority of the target file in the stored target file related information, or may directly try in the storage medium. The search target file is searched, but the manner in which the check server 160 determines whether the target file can be accessed immediately is not limited to the above.

The check server 160 can also transmit the judgment result when the target file corresponding to the received file identification data can be instantly accessed to the notary server 170. The checking server 160 may also generate an identity verification message when the access authority of the target file in the stored target file related information indicates that the identity verification is required, and transmit the generated identity verification message together with the foregoing judgment result. Notary server 170. The identity verification message includes any information used to enable the user to complete the identity verification. For example, the identity verification message may include the verification method and related information, for example, the verification method may be using certificate verification or using account password verification. The related information may also be a voucher that can be used, or an account password for verification, etc., but the identity verification message is not limited to the above.

The check server 160 can also receive the token transmitted by the notary server 170 and can receive the token transmitted by the client 150. The check server 160 can also determine whether the token transmitted by the notary server 170 is the same as the token transmitted by the client 150, and whether the token transmitted by the client 150 is within the time limit. When the check server 160 determines that the notarization server 170 is the same as the token transmitted by the client 150, and the token transmitted by the client 150 is within the time limit, the check server 160 can identify the file previously transmitted by the notary server 170. The target file corresponding to the data is transmitted to the client 150; and if the check server 160 determines that the notarization server 170 is different from the token transmitted by the client 150, or the token transmitted by the client 150 is not within the time limit, the check server 160 may The target file is not transmitted to the client 150.

The check server 160 can also receive the client identification data transmitted by the notary server 170, and can obtain the target file corresponding to the file identification data previously transmitted by the notary server 170, according to the client identification data. The target file is transmitted directly or indirectly to the client 150. Among them, the indirect transmission method is transmitted by means of e-mail or instant message, but the creation is not limited thereto.

The notifying server 170 can be connected to the client 150, the signature server 130, and the storage server 160, and can transmit data or signals to the client 150, the signature server 130, the storage server 160, and the client 150. The signature server 130 and the data or signal transmitted by the server 160 are stored. The notarization server 170 can be connected to the client 150, the signature server 130, and the check server 160 through a communication interface using a wired network or a wireless network. The creation is not particularly limited.

The notary server 170 is responsible for receiving the electronic file transmitted by the signature server 130 and is responsible for signing the received electronic file to generate a new electronic file. The notary server 170 is also responsible for transmitting the generated new electronic file back to the signature server 130.

The notary server 170 is also responsible for storing the relevant information of the signature file (also referred to as "signature document related information" in this creation), and the information of the signature file stored by the notary server 170 includes but is not limited to the signature file. The digest value, the hash value of the signature file, and the file identification data corresponding to the target file included in the signature file. In some embodiments, the notary server 170 can determine whether the signature file matches the original or original file of the target file according to the stored signature file related information.

The notary server 170 may also receive the file identification data corresponding to the received electronic file when receiving the electronic file transmitted by the signature server 130. The notarization server 170 may also generate visual data according to the received document identification data before or after the signature of the received electronic document, and may add the generated visual data to the new signature. In the electronic file.

In some embodiments, the notary server 170 can receive the file identification data transmitted by the client 150, and can determine whether the target file corresponding to the received file identification data exists according to the stored signature file related information.

The notary server 170 may also transmit the received file identification data to the storage server 160 when it is determined that the target file corresponding to the received document identification data exists. If the notifying server 170 determines that the target file corresponding to the received file identification data does not exist, the notary server 170 may reject the client 150 from accessing the target file.

The notary server 170 can also receive the judgment result transmitted by the check server 160, and can generate a token when the received judgment result indicates that the target file can be accessed immediately, and transmit the generated token back to the client 150. And the check server 160. The notary server 170 may also generate a corresponding notification message when the received judgment result indicates that the target file cannot be accessed immediately, and transmit the generated notification message to the client 150, and the client of the client 150. The end identification data is transmitted to the check server 160.

The notifying server 170 can also receive the identity verification message transmitted by the checking server 160, and can request the client 150 to perform identity verification according to the received identity verification message, and select to allow or deny the client according to the identity verification result of the client 150. End 150 accesses the target file. When the notary server 170 selects to allow the client 150 to access the target file, the notary server 170 can transmit the generated token or notification message to the client 150, and transmit the generated token or client identification data to the storage server. 160.

Next, the operation system of the present creation is explained in the first embodiment, and the flow chart of the method of providing the signature object signature in order to generate the signature document in the order of the creation of the second drawing is described. In this embodiment, it is assumed that the creation application is in the online insurance system, but the creation is not limited thereto.

First, the client 150 can be connected to the service server 400 that provides the online insurance service, and transmits the insurance information (content parameters) requested by the service server 400 to the service server 400. In this embodiment, it is assumed that the client 150 is a browsing program installed on a general computing device, and the service server 400 is a web server, and the client 150 can input the insured materials in the webpage provided by the service server 400.

After the service server 400 receives the insurance information provided by the client 150, the service server 400 may generate an electronic policy (original file) containing the received insurance information, and may provide the generated electronic policy to the file host. 120, causing the file host 120 to retrieve the original file (step 210). In this embodiment, it is assumed that the service server 400 can store the template of the contract of various insurance products, and can fill the received insurance materials one by one into the corresponding column of the template of the insurance product selected by the client 150. In order to generate a complete electronic policy.

After the file host 120 retrieves the original file (step 210), the file host 120 can define the signature order based on the category of the original file obtained (step 220). In this embodiment, since the original file is a policy, the file host 120 can define the signature order to be signed by the client 150 first, and then signed by the signature server 130.

After the file host 120 defines the signature sequence, the file host 120 may generate an object file including the defined signature order and the obtained original file, and may generate file identification data corresponding to the generated target file, and may The generated object file and file identification data are transmitted to the signature server 130 (step 230).

After the signature server 130 receives the target file generated by the file host 120 and the file identification data, the signature server 130 can sequentially provide the electronic file to the signature indicated by the signature sequence according to the signature order in the target file. The chapter object is used to generate a signature file after all signature objects have completed the signature (step 250). In this embodiment, since the signature order is the client 150 and the signature server 130, the signature server 130 can transmit the target file as an electronic file to the client 150, so that the client 150 is in service. The web page provided by the server 400 requires the client 150 to sign the electronic file. The client 150 can sign the electronic file by using the private key corresponding to the digital certificate of the user, generate a new electronic file containing the electronic file and the signature information, and transmit the generated new electronic file to the signature server. 130. Since the client 150 is not the last sign unit indicated by the signature order, the electronic file generated by the client 150 is also referred to as a job file in the present creation.

After the signature server 130 receives the electronic file transmitted by the client 150, the electronic file may be provided to the signature object indicated by the signature sequence after the client 150 according to the signature sequence in the target file. The signature object at this time is the signature server 130 itself. Therefore, the signature server 130 can first confirm whether the received electronic file has not been altered, and whether the signature of the client 150 is included, when the signature servo When the device 130 determines that the received electronic file has been altered, or does not include the signature of the client 150, the signature server 130 may refuse to sign the electronic file, and if the signature server 130 determines the received electronic If the document has not been altered and does contain the signature of the client 150, the signature server 130 can use the private key pair corresponding to the digital certificate of the insurance company providing the service server 400 to receive the electronic file signature from the client 150. Chapter, and after the signature, generates a new electronic file containing the electronic file received from the client 150 and the signature information. Since the signature server 130 is the last signature unit indicated by the signature sequence, the electronic file generated by the signature server 130 is also referred to as a signature file in the present creation, that is, in this implementation. In the example, the signature file includes the target file, the signature data generated by the client 150, and the signature data generated by the signature server 130.

After the signature server 130 generates the signature file, the signature server 130 can transmit the generated signature file to the client 150, so that the user of the client 150 can download the signature generated by the signature server 130. The document, signature server 130 may also transmit the generated signature file to the check server 160, such that the check server 160 stores the signature file generated by the signature server 130 (step 260).

In this way, through the creation, the service server 400 provided by the insurance company and the client 150 used by the user cannot directly access the electronic file in the process of the target file becoming the signature file, ensuring that the signature file is complete and correct, Changed or replaced by insurance companies and users.

Continuing with the second embodiment to explain the operation system of the present creation, please also refer to the flow chart shown in "Fig. 2". In this embodiment, it is also assumed that the authoring application is in the online insured mechanism.

First, the client 150 can be connected to the service server 400 that provides the online insurance service, and transmits the insurance information (content parameters) requested by the service server 400 to the service server 400. In this embodiment, assuming that the client 150 is a specific application installed on a general computing device, the client 150 can browse policy content, select a policy product, and enter insurance materials in the application.

After the service server 400 receives the insurance information provided by the client 150, the service server 400 may generate an electronic policy (original file) containing the received insurance information, and may provide the generated electronic policy to the file host. 120, causing the file host 120 to obtain the original file (step 210), after which the file host 120 can define the signature order according to the obtained category of the original file (step 220). In this embodiment, since the original file is a policy, the file host 120 can define the signature order to be signed by the client 150 first, then signed by the signature server 130, and finally signed by the notary server 170.

After the file host 120 defines the signature sequence, the file host 120 may generate an object file including the defined signature order and the obtained original file, and may generate file identification data corresponding to the generated target file, and may The generated object file and file identification data are transmitted to the signature server 130 (step 230). In this embodiment, it is assumed that the target file is a file in PDF format.

After the signature server 130 receives the target file generated by the file host 120 and the file identification data, the signature server 130 may encrypt the received file identification data (step 240), and may be based on the signature in the target file. The chapter sequentially provides the electronic file to the signature object represented by the signature order, so that the signature file is generated after all the signature objects have completed the signature (step 250).

In this embodiment, since the signature order is the client 150, the signature server 130, and the notary server 170, the signature server 130 may first transmit the received target file as an electronic file. The client 150 also transmits the encrypted file identification data to the client 150. After receiving the electronic file and the file identification data, the client 150 may use the private key corresponding to the digital certificate of the user to sign the received electronic file, and generate a corresponding signature data after the signature, the client The terminal 150 can also encode the received file identification data by using the QR code encoding method, and use the fault tolerance function in the QR code encoding method to add the icon representing the user to the QR code generated by the encoding, thereby generating a visualization. QR code (visualization data). Afterwards, the client 150 can use the PDF file format to add the received electronic file, the generated signature data, and the generated QR code to the corresponding fields to generate the target file and signature. The data, and a new electronic file of the QR code are visualized, and the generated new electronic file can be transmitted back to the signature server 130, wherein the visualized QR code is added to the field of the Visual Sign. Since the client 150 is not the last sign unit indicated by the signature order, the electronic file generated by the client 150 is the job file in the creation.

After the signature server 130 receives the electronic file transmitted by the client 150, the electronic file received from the client 150 and the encrypted file identification data may be provided to the signature sequence according to the signature sequence in the target file. The signature object indicated after the client 150, since the signature object at this time is the signature server 130 itself, the signature server 130 can confirm that the received electronic file has not been altered, and includes After the signatures of all the signature objects (ie, the client 150) arranged before the signature sequence, the electronic file received from the client 150 is obtained using the private key corresponding to the digital certificate of the insurance company providing the service server 400. The chapter may also generate a QR code (visualized data) containing the trademark of the insurance company and including the encrypted document identification data, and may generate an electronic file containing the received document from the client 150, the generated signature data, and the generated QR. The new electronic file of code (the process by which the signature server 130 signs the electronic file to generate a new electronic file is the same as that of the client 150 and therefore will not be described in detail).

After the signature server 130 completes the signature job, the signature server 130 can again provide the generated electronic file and the encrypted file identification data to the signature sequence according to the signature sequence in the target file. The signature object after the signature server 130, that is, the notary server 170. Therefore, the signature server 130 can transmit the encrypted file identification material and the generated electronic file to the notary server 170. After receiving the document identification data and the electronic file, the notarization server 170 may first confirm whether the received electronic file has been altered, and whether it contains the signatures of all the signature objects arranged before the signature order, if the notarized servo The electronic file received by the device 170 is not modified and includes the signature of the client 150 and the signature server 130 arranged before the signature sequence, and the notary server 170 can use the notary unit that provides the notary server 170. The private key corresponding to the digital certificate may also generate a QR code (visualized data) including the trademark of the notary unit and the encrypted document identification information, and may generate a self-signed signature servo. The electronic file of the device 130, the generated signature data, and the new electronic file of the generated QR code (the process in which the notary server 170 signs the electronic document to generate a new electronic file is the same as the client 150, and therefore is not described in detail) . Since the notary server 170 is the last sign unit indicated by the signature order, the electronic file generated by the notary server 170 is also referred to as a signature file in the present creation, that is, in this embodiment. The signature file includes the target file, the signature data and the visualization data generated by the client 150, the signature data and the visualization data generated by the signature server 130, and the signature data and the visualization data generated by the notary server 170. .

After the notary server 170 completes the signing operation, the notary server 170 can also record the signature information of the new electronic file (signature document) generated by the signature, and can transmit the generated new electronic file back to the signature. Server 130. In this embodiment, it is assumed that the information related to the signature file recorded by the notary server 170 includes the digest value of the signature file, the hash value of the signature file, and the file identification data corresponding to the target file included in the signature file.

After the signature server 130 receives the electronic file (signature file) generated by the last signature unit indicated by the signature sequence, the signature server 130 can transmit the received signature file to the client 150. The user of the client 150 can download the signature file signed by the client 150, the signature server 130, and the notary server 170, and the signature server 130 can also transmit the signature file to the storage server 160. The check server 160 causes the signature server to store the signature file (step 260). In this embodiment, the check server 160 can transfer the signature file to the file host 120 for storage, and write the file identification information, the creation date, the access authority, and the like of the target file included in the signature file. In the database.

In this way, through the creation, the service server 400 provided by the insurance company and the client 150 used by the user cannot directly access the electronic file in the process of the target file becoming the signature file, except that the signature document is complete and correct. In addition, through the signature of the notary server 170, the non-repudiation of the target file can be guaranteed.

Then, referring to the method flowchart shown in FIG. 3, after the client 150 receives the signature file transmitted by the signature server 130, the user of the client 150 wants to confirm the record in the signature file. When the content of the policy is the same as the content of the insurance, the client 150 can obtain the file identification data recorded by the visualization according to the visual data in the signature file, and can transmit the obtained document identification data to the notary server 170 ( Step 310). In this embodiment, the user can print the signature file in the form of a paper, or can display the signature file using other computing devices, and can operate the client 150 to scan and print using the built-in QR code scanning function. The QR code in the signature file displayed on the paper or by other display devices causes the client 150 to obtain the file identification data after decoding the scanned QR code. In this embodiment, since the file identification data is encrypted by the signature server 130, the client 150 can decrypt the obtained file identification data after obtaining the file identification data.

After the notary server 170 receives the file identification data transmitted by the client 150, the notary server 170 can determine whether the target file corresponding to the file identification data exists according to the received file identification data. If the target file exists, the notary server 170 can transmit the received file identification data to the check server 160 (step 320); and if the target file does not exist, the notary server 170 can reject the client 150 to access the target file. . In this embodiment, the notarization server 170 may have the same data as the received document identification data in the stored signature file related information, and if so, indicates that the target file exists, and conversely, indicates that the target file does not exist.

After the check server 160 receives the file identification data transmitted by the notary server 170, the check server 160 can determine whether the target file corresponding to the received file identification data can be accessed immediately and generate a judgment result, and can The generated judgment result is transmitted back to the notary server 170 (step 330). In this embodiment, the search server 160 may read the target file related information of the target file corresponding to the received file identification data from the database, and according to the date of establishment in the related information of the target file read or The status determines whether the target file can be accessed immediately, for example, whether the date of establishment has reached the storage or destruction criteria, or whether the target file still exists according to the status.

After the notarization server 170 receives the determination result transmitted by the check server 160, the notary server 170 may generate a token when the judgment result indicates that the target file can be accessed instantaneously, and may transmit the generated token to the storage servo. The processor 160 and the client 150 that issues the file identification material corresponding to the target file (step 350).

After receiving the token transmitted by the notary server 170, the client 150 may transmit the received token to the checking server 160 (step 360), and the checking server 160 receives the token transmitted by the notary server 170 and After receiving the token transmitted by the client 150, it can be determined whether the token transmitted by the notary server 170 is the same as the token transmitted by the client 150, and can be used when determining that the notarization server 170 and the client 150 transmit the same token. The target file is read and the read target file is transferred to the client 150 (step 370). After the client 150 receives the target file transmitted by the check server 160, the user can use the naked eye or the client 150 or other program to compare the policy content recorded by the signature file with the policy content recorded by the target file.

In addition, after the notarization server 170 receives the determination result transmitted by the check server 160, if the judgment result indicates that the target file cannot be accessed instantaneously, the notary server 170 can transmit the file identification data corresponding to the target file. The object identification data of the terminal 150 is transmitted to the check server 160.

After the check server 160 receives the object identification data transmitted by the notary server 170, the check server 160 can wait for the target file to be obtained, and after obtaining the target file, the target file can be directly or according to the received object identification data. Indirectly transmitted to the client 150.

In this way, the user can also provide the user to perform the volume adjustment operation under the condition of reducing the burden on the storage server 160, and at the same time increase the security of the volume adjustment operation.

In the above embodiment, before the check server 160 returns the generated judgment result to the notary server 170 (step 330), the access authority of the target file may be read from the database, and may be read out. The access authority indicates that the identity verification message is generated when the identity verification is required, and the generated identity verification message is transmitted to the notary server 170 together with the generated judgment result. It is assumed that the authentication message generated by the check server 160 indicates that the credential needs to be used for authentication.

After the notifying server 170 receives the identity verification message sent by the check server 160, the client 150 may be required to use the certificate for identity verification, and determine whether to allow the client 150 to access the target file according to the result of the identity verification (step 340). . If the client 150 passes the authentication, the notary server 170 can allow the client 150 to access the target file, and the notary server 170 can transmit the generated token to the checking server 160 when the judgment result indicates that the target file can be accessed instantly. The client 150 (step 350) or transmits the object identification data of the client 150 to the check server 160 when the result of the judgment indicates that the target file cannot be accessed immediately. If the client 150 does not pass the authentication, the notary server 170 can reject the client 150 to access the target file.

In summary, it can be seen that the difference between the present creation and the prior art is that the file host defines the signature order according to the category of the original file obtained and generates an object file containing the original file and the signature order, and the signature server is based on the signature. The chapter sequentially provides the electronic file containing the target file to the signature object signature to generate the signature file, and then transmits the signature file to the user or the owner of the signature object to save the technical means. The means can solve the problem that the electronic files existing in the prior art may be replaced before the signature, thereby achieving the technical effect of providing the approximate seal in the electronic file.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

120‧‧‧File Host

130‧‧‧Signature Server

150‧‧‧Client

160‧‧‧Check server

170‧‧‧ notary server

400‧‧‧Service Server

Step 210‧‧‧ The file host obtains the original file, and the original file contains the content parameters provided by the client.

Step 220‧‧‧ The file host defines the signature order according to the category of the original document

Step 230‧‧‧ The file host generates an object file containing the signature sequence and the original file, and generates file identification data corresponding to the target file, and transmits the target file and the file identification data to the signature server

Step 240‧‧‧Signature Server Encrypted File Identification Data

Step 250‧‧‧ The signature server provides a plurality of signature objects in sequence according to the signature sequence to sign the electronic document to generate a signature document, and the signature document includes visual data of the identification data of the document generated by the signature object.

Step 260‧‧‧ The signature server transmits the signature file to the check server storage and transmits the signature file to the client

Step 310‧‧‧ The client obtains the file identification data according to the visualization data and transmits the file identification data to the notary server

Step 320‧‧‧ The notarization server transmits the file identification data to the storage server when the target file exists according to the file identification data

Step 330‧‧‧ The check server generates a judgment result according to whether the target file corresponding to the file identification data can be accessed immediately, and transmits the judgment result to the notary server

Step 340‧‧‧ The notary server determines whether to allow the client to access the target file based on the identity verification message

Step 350‧‧‧ The notary server transmits the token to the client and the check server when the judgment result is expressed as being instantly accessible

Step 360‧‧‧ The client transmits the token to the check server

Step 370‧‧‧ The check server transmits the target file to the client when the notarization server and the client transmit the same token

The first figure is a system architecture diagram of the signature object signature provided in order to generate the signature document. The second figure is a flow chart of the method for providing the signature of the signature object in order to generate the signature document. Figure 3 is a flow chart of the method for reading the target file according to the visual data in the signature file.

Claims (11)

A system for providing a signature object signature in order to generate a signature file, the system comprising: at least one client for providing a content parameter; and a file host for obtaining an original file and based on the original file The category defines a signature order, and is used to generate an object file including the signature sequence and the original file, and generates a file identification data corresponding to the target file, wherein the original file includes the content parameter; The server is configured to receive the target file and the file identification data transmitted by the file host, and provide a plurality of signature objects in sequence according to the signature sequence to sign an electronic document to generate a signature file. And transmitting the signature file to the client, wherein the signature objects include the client and the signature server, and the signature file includes the document generated by at least one of the signature objects When one of the identification materials visualizes the data, and the first signature object indicated by the signature order in the signature object is signed to the electronic document, the electronic file is the electronic document a document file in which the non-first signature object indicated by the signature order in the signature object is signed by the electronic signature file, and the electronic document is a signature before the signature sequence in the signature object A job file generated after the chapter object is signed; and a check server for receiving and storing the signature file transmitted by the signature server. The system for providing a signature object signature in order to generate a signature document according to the first aspect of the patent application scope, wherein the signature server is further configured to encrypt the document identification data. The system for providing a signature object signature in order to generate a signature document according to the first aspect of the patent application scope, wherein the system further comprises a notary server for receiving the last generated transmission by the signature server. The job file is signed and used to generate the signature file for the last generated job file, and the signature file is transmitted to the signature server. The system for providing a signature object signature in order to generate a signature document according to the third aspect of the patent application scope, wherein the notarization server is further configured to store the relevant information of the signature document of the signature document, and The signature file related information determines whether the signature file matches the original of the target file or the original file. The system for providing a signature object signature in order to generate a signature document according to the third aspect of the patent application scope, wherein the client is further configured to obtain the document identification data according to the visualization data and transmit the file identification data to the a notarization server, the notarization server is further configured to: according to the file identification data, determine that the target file exists to transmit the file identification data to the storage server, and the judgment result sent by the storage server indicates that the target file is Instantly accessing a token to the client and the deposit server, causing the client to transmit the token to the deposit server, and the log server is further configured to determine the token and the token transmitted by the notary server When the token transmitted by the client is the same, the target file is transmitted to the client. The system for providing a signature object signature in order to generate a signature document according to the fifth aspect of the patent application scope, wherein the storage server is further configured to select or allow the client to access the target file according to the identity verification result. . The system for providing a signature object signature in order to generate a signature document according to the fifth aspect of the patent application scope, wherein the storage server is further configured to determine, according to the information about the target file of the target file, whether the target file can be Accessing, and generating the determination result, wherein the target file related information includes an establishment date of the target file, a status of the target file, and/or an access right of the target file. The system for providing a signature object signature in order to generate a signature file according to the first aspect of the patent application scope, wherein the file host is further configured to set an access authority of the target file according to the access parameter. The system for providing a signature object signature in order to generate a signature document according to the first aspect of the patent application scope, wherein the storage server is further configured to store the target file to the file host. The system for providing a signature object signature in order to generate a signature document according to the first aspect of the patent application scope, wherein the signature object is further used to confirm whether the electronic document has been altered, and the confirmation is arranged in the signature. Whether all the signature objects before the order are completed in the electronic file. A system for providing a signature object signature in order to generate a signature document, as described in claim 1, wherein the system further includes a service server for receiving the content parameter transmitted by the client, and Generating the original file containing the content parameter and transmitting the original file to the file host.