WO2014086166A1

WO2014086166A1 - Method and system for preventively preserving electronic data

Info

Publication number: WO2014086166A1
Application number: PCT/CN2013/081096
Authority: WO
Inventors: 鄢小征; 陈奋; 毛宪标
Original assignee: 厦门市美亚柏科信息股份有限公司
Priority date: 2012-12-03
Filing date: 2013-08-08
Publication date: 2014-06-12
Also published as: CN103078841A; CN103078841B

Abstract

The present invention relates to a method for preventively preserving electronic data, and a system for realizing preventive electronic data preservation. The steps of the method are as follows: 1) an encryption and uploading step: encrypting client data into a first ciphertext and then uploading same to a service end, and the service end storing the first ciphertext in a user library; the service end encrypting the first ciphertext in the user library into a second ciphertext and then storing same to a notarization library of the service end; and the service end generating a first check code for the first ciphertext in the user library and storing same in a check library of the service end; and 2) a downloading and decryption step: the client downloading the second ciphertext in the notarization library, decrypting same to obtain a third ciphertext, and generating a second check code for the third ciphertext, and if the second check code successfully matches the first check code in the check library, which represents that the third ciphertext is the same as the first ciphertext, decrypting the third ciphertext to obtain a data cleartext. Tampering can be prevented, the storage is secure, it is not easy to leak, the client identity is clear, and in the judicial evidence notarization, time and costs can be saved.

Description

Method and system for preventive electronic data preservation

Technical field

The present invention relates to the field of electronic data preservation, and more particularly to a method of preventive electronic data preservation, and a system for implementing preventive electronic data preservation.

Background technique

In the Internet age, people form a large amount of electronic data through various online behaviors such as online shopping, online chat, and e-mail. Once these electronic data involve legal disputes, their evidence effectiveness (or evidence value, evidence power) is how to reflect The objectivity of electronic data as evidence has become a problem that legal workers and information technology engineers need to solve together.

Chinese invention patent application number 201110168678.7 discloses a third-party authentication security system and method based on electronic evidence online preservation. After the client sends a security request to the server, the client generates a hash value related to the saved electronic data, and transmits it to the server for saving; the client issues a certification security request, and the server saves the client hash value saved by the system. The comparison of the hash values sent by the client to determine whether the client's previous preservation behavior is objective and true; the communication between the client and the server is encrypted by a secure cryptographic algorithm; the server performs all the hash values in the system. Correlation processing to ensure that the hash value associated with the electronic data stored on the server side will not be tampered with; when the used cryptographic algorithm is deciphered, the application update is preserved, and the data to be preserved and the result data of the last application for preservation are re-executed. Security processing.

However, the method disclosed in the above patent application is not a recognized tamper-proof algorithm. Once the process is completely disclosed, it is easy to be forged and the tamper-proof ability is weak. Secondly, the original form of the method is electronic data (electronic documents, electronic files, electronic transactions). On the client side, there is a possibility of being forged. In addition, when the client physical machine changes, data migration is a troublesome process for ordinary users. At the same time, the technical solution disclosed in the invention application is mainly for the field of electronic transaction and instant communication, and is not applicable to other network behaviors, because the implementation manner is closely integrated with the electronic transaction and instant messaging system, and is inseparable.

Summary of the invention

The object of the present invention is to overcome the deficiencies of the prior art, and to provide a method for preventing preventive electronic data preservation that can prevent tampering, storage security, leakage, and client identity, and apply the method to the field of judicial depositary notarization. In conjunction with the preventive electronic data preservation system, based on the preventive electronic data preservation method, the data submitted for preservation is not arbitrarily falsified, and the notary office can directly recognize that it is true and effective, saving a lot of notarization time and cost. The method and system of the present invention are applicable to electronic data formed in everyday network behavior.

The technical solution of the present invention is as follows:

A method of preventive electronic data preservation, the steps are as follows:

1) Encryption uploading step: the client data is encrypted into the first ciphertext and then uploaded to the server, and the server saves the first ciphertext to the user library; the server encrypts the first ciphertext in the user library into the second secret. After the text, save to the notarization library of the server; the server generates a first verification code for the first ciphertext in the user library, and saves it to the verification library of the server;

2) Download and decrypt step: the client downloads the second ciphertext in the notary library, decrypts to obtain the third ciphertext, and generates a second check code for the third ciphertext, if the second check code and the checksum are in the library The first check code is successfully matched, indicating that the third ciphertext is the same as the first ciphertext, and the third ciphertext is decrypted to obtain the data plaintext.

Preferably, the client data encryption step is specifically: first symmetrically encrypting the data with the first key to obtain the first encrypted data, and then asymmetrically encrypting the first encryption key with the first public key.

Preferably, the server re-encrypts the first encrypted data in the user library by first symmetrically encrypting the first encrypted data with the second key to obtain the second encrypted data, and then using the second public key to the second secret. The key is asymmetrically encrypted to obtain a second encryption key.

Preferably, when decrypting, the second encryption key is first decrypted by the second private key to obtain the second key, and then the second secret data is decrypted by the second key to obtain the third encrypted data; The private key decrypts the first encryption key to obtain the first key, and then decrypts the third encrypted data with the first key.

Preferably, the first key is randomly generated by the client; and the second key is randomly generated by the server.

Advantageously, step 1) further comprises: encrypting the check code with a third private key into a cryptographic check code; and step 2) further comprising decrypting the cryptographic check code with the third public key.

Preferably, in the process of step 1) and step 2), the time of the client and the server is kept in real time through the network time protocol.

Preferably, the method further includes: after uploading the first encrypted data and the first encryption key, deleting the first encrypted data and the first encryption key on the client.

Preferably, the method further comprises: deleting the data plaintext, the second encrypted data, the third encrypted data, the first check code, and the second check code after the decryption is completed to obtain the data plaintext.

A system for preventive electronic data security, comprising a user client, a notary office client, and a server, wherein the server includes an application server and a data server; and the data server includes a user library, a notarization library, and a verification library. ;

When the encryption is uploaded, the user client encrypts the data into the first ciphertext and uploads it to the user library; the application server encrypts the first ciphertext in the user library into the second ciphertext, and saves it to the notary library; the application server pairs The first ciphertext in the user library generates a first check code and saves it to the check library;

When downloading and decrypting, the notary office downloads the second ciphertext in the notary library, decrypts to obtain the third ciphertext, and generates a second check code for the third ciphertext, if the second check code and the checksum are in the library The first check code is successfully matched, indicating that the third ciphertext is the same as the first ciphertext, and the third ciphertext is decrypted to obtain the data plaintext.

Preferably, the server further includes a CA/RA server for managing the digital certificate of the user client and the notary client.

Preferably, the server further includes an NTP server, and the time of the user encryption, the client of the notary office, and the server are kept in real time during the data encryption uploading process.

The beneficial effects of the present invention are as follows:

The technical solution of the invention saves the electronic data separately in the user library and the notary library, and the user has his own user library, and no one can view it by any notary office; the notary office also has its own notarization library, but the notary office cannot view the user data at will. Only when the user applies for notarization and authorization, can the public certificate be viewed and issued; the user cannot modify the content and attributes of the electronic data that has been deposited, even if the user maliciously tampers with the electronic data in the user library, they still cannot Tampering with electronic data in the notary library. Both have a unique check to ensure that the electronic data is the same. The verification code in the verification library that the operation organization is responsible for ensures that the electronic data in the user library and the notarization library are consistent, and the modification of any one party will not pass the check code verification. Any library that has been tampered with can be found by comparing the checksums. In addition, there is also the application of CA, so that the data in the user library can only be decrypted by the user, and the notarization library can only be decrypted by the notary office and the user at the same time. It is ensured that the evidence submitted by the user is submitted by the user and cannot be tampered with. The notary office can directly recognize and issue a notarial certificate. In the increasingly common network era, this provides a low-cost solution for the electronic data deposit and notarization formed by people in daily network behavior.

Not only individuals, but also the technical solutions of the present invention can be applied to enterprise informationization. For example, a hospital can save a patient's electronic medical record to the system provided by the program at the first time of formation, so that when the hospital and the patient have a doctor-patient dispute When the patient suspects that the hospital has falsified the medical record, the hospital legal person may apply to the notary office to directly issue a notarial certificate according to the electronic medical record stored in the system, reduce unnecessary disputes, and reduce waste of resources in the litigation process. Similar corporate applications include insurance company insurance documents, e-commerce company shopping documents, logistics company logistics documents, and so on.

DRAWINGS

Figure 1 is a schematic view showing the connection of the system of the present invention;

Figure 2 is a schematic diagram of the notarization process of deposit certificate;

Figure 3 is a schematic diagram of the process of depositing notarized data;

In the figure: 1 is the user client, 2 is the notary client, 3 is the server, 4 is the Java application server, 5 is the data server, 6 is the CA/RA server, 7 is the WebServer + NTP server, 8 is the user library , 9 is the notary library, and 10 is the verification library.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments.

A method of preventive electronic data preservation, the steps are as follows:

1) Encryption uploading step: the client data is encrypted into the first ciphertext and then uploaded to the server, and the server saves the first ciphertext to the user library; the server encrypts the first ciphertext in the user library into the second secret. After the text, save to the notary library of the server; the server generates the first check code for the first ciphertext in the user library, encrypts the check code with the third private key as the encrypted check code, and saves it to the server of the server. Test library

2) Download and decrypt step: the client downloads the second ciphertext in the notary library, obtains the third ciphertext after decryption, generates a second check code for the third ciphertext, and decrypts the encrypted check code by the third public key. Obtaining a first check code; if the second check code is successfully matched with the first check code in the check library, indicating that the third ciphertext is the same as the first ciphertext, decrypting the third ciphertext to obtain The data is clear.

The client data encryption step is specifically: the client randomly generates the first key, first symmetrically encrypts the data with the first key to obtain the first encrypted data, and then asymmetrically encrypts the first key with the first public key. An encryption key. The first ciphertext described above includes the first encrypted data and the first encryption key.

The server re-encrypts the first encrypted data in the user library: the server randomly generates the second key, first symmetrically encrypts the first encrypted data with the second key to obtain the second encrypted data, and then uses the second The public key asymmetrically encrypts the second key to obtain a second encryption key. The second ciphertext described above includes the second encrypted data and the second encryption key.

When decrypting, first decrypting the second encryption key with the second private key to obtain the second key, and then decrypting the second encrypted data with the second key to obtain the third encrypted data; then using the first private key pair The first encryption key is decrypted to obtain a first key, and the third encrypted data is decrypted by the first key.

In the process of step 1) and step 2), the time of the client and the server is synchronized in real time through the network time protocol. The client includes: a user client and a notary client; the encrypted uploading step is operated by the user client, and the downloading and decrypting step is operated by the notary client.

Example

The core technical solution of the invention is: storing the electronic data encrypted by the user for the first time through the three independent storage spaces - the user library, the notarization library, the verification library - the electronic data in the user library is only The user can view it at the same time; at the same time, the system performs the second encryption and saves it in the notary library. The electronic data in the notary library can only be issued to the designated notary office if the user authorizes it, and the notarization library is independent. Third-party repository; finally, the system also generates a unique check code for the electronic data stored in the verification library. This check code ensures that the data in the user database and the notary library are consistent. If the electronic data in any of the libraries has been tampered with, it can be found by comparing the check codes.

When applied to the notarization of deposit certificates, these three separate storage spaces are licensed to three independent organizations or individuals for management. The owner of the user library, the notary library, and the verification library are the user, the notary office, and the electronic data security operation organization (hereinafter referred to as the operation organization). This program must ensure that the evidence submitted by the user is submitted by the user and cannot be tampered with. The notary office can directly recognize and issue a notarial certificate.

A system for preventive electronic data security as shown in FIG. 1 includes a user client 1, a notary office client 2, and a server 3, and the server 3 includes a Java application server 4, a data server 5, and a CA/ The RA server 6, the WebServer+NTP server 7; the data server 5 includes a user library 8, a notary library 9, and a verification library 10; the CA/RA server 6 is used for the number of the user client 1, the notary client 2 Certificate management; NTP is used in data encryption upload process, user client 1, notary client 2, server 3 time is consistent with the time of the national time center; WebServer is used to handle some static resource requests and load balancing .

The user client 1 is responsible for collecting, encrypting, and transmitting the electronic data to the server 3. By providing various electronic data collection methods, electronic data collection of various network behaviors such as online shopping, web chat, and e-mail can be realized without changing the user's usage habits. During the acquisition process, the encryption is performed synchronously and transmitted to the server 3, and the user does not retain any electronic data locally. In the process of depositing the entire electronic data, users or other external factors cannot interfere with the acquisition, encryption, and transmission procedures.

The notary office client 2 is used by the notary public notary. After the user submits a notarization application for an electronic data, carry a valid certificate that can prove his identity, and a digital certificate to the notary office; under the authorization of the notary public, use the notary office client 2 to download and decrypt the electronic data. View and issue a notarized certificate for this electronic data.

The server 3 is composed of a server cluster, and includes a database server 5, an application server 4, a CA/RA server 6, and a time server. The database server 5 provides three independent storage spaces, namely, a user library 8, a notary library 9, a verification library 10, and a matching digital certificate management, encryption and decryption service, and verification service.

The schematic diagram of the notarization process of deposit certificate shown in Figure 2 is mainly divided into two major steps:

1. The process for users to submit electronic data for deposit is as follows:

1.1. Before the user submits the electronic data, the user client 1 randomly generates a first key 11 to perform the first symmetric encryption on the electronic data into the first encrypted data, and simultaneously uses the first public key 12 of the user to the first The key 11 is asymmetrically encrypted into the first encryption key 13, so that the first encrypted data can only be decrypted by its own first private key 14 in the future, that is, only the person can read it, and others cannot read it. tamper;

1.2, the user client 1 uploads the first encrypted data, the first encryption key 13, while deleting all relevant data, including the first encrypted data, the first encryption key 13;

1.3, the server 3 is responsible for saving the first encrypted data and the first encryption key 13 submitted by the user to the user library 8;

1.4, then the second key 31 is randomly generated by the server 3, the second encrypted data is symmetrically encrypted into the second encrypted data, and the first encryption key 13 is used for the second time using the notary public key 32. Encrypted and saved to the notary library 9, so that the electronic data can only be decrypted by the notary office and the user in the future, that is, only the notary office and the user can simultaneously read, and others cannot read it. ,tamper;

1.5. Finally, a hash check code is generated for the first encrypted data in the user library 8, and is signed by the third private key (checking private key) representing the verification mechanism, and then stored in the check library 10, indicating the hash check. The code is secured by the verification mechanism.

During the entire deposit process, the time of the user client 1, the notary office client 2, and the server 3 automatically keeps synchronized with the national time-of-day center, ensuring that the user completes the depositing action in a time that cannot be tampered with.

2. The notarization process for users to apply for electronic data is as follows:

2.1, the user goes to the designated notary office, the notary public notary extracts the second encrypted data and the second encryption key 33 in the notary library 9 through the notary office client 2, and passes through the second private key 21 of the notary office to the second encryption key The key 33 is decrypted to obtain the second key 31, and the second encrypted data is decrypted for the first time by the second key 31 to obtain the third encrypted data (decryption for the second encryption, after decryption is still ciphertext, and cannot be viewed yet) );

2.2. Generate a second check code for the third encrypted data, compare and check with the first check code signed by the verification mechanism in the verification library 10, and continue the next step after the verification is passed, otherwise terminate (this kind of Electronic data may have been tampered with)

2.3. Using the first private key 14 of the user client 1 to decrypt the first encryption key 13 to obtain the first key 11, and then decrypting the third encrypted data with the first key 11 for the second time to obtain the data plaintext. . It is confirmed that the electronic data is actually submitted by the user, and is signed by the verification institution to ensure that it has not been tampered with before the public certificate can be issued; the client deletes all the files related to the electronic data and the confidentiality immediately after the user operation ends. The key includes an electronic data plaintext, a second encrypted data, a third encrypted data, a first check code, and a second check code.

Through the above processing steps, the user has his own user library 8, and any person including the notary office can not view; the notary office also has its own notarization library 9. The user cannot modify the content and attributes of the electronic data that has been deposited, even if the user maliciously tampers with the electronic data in the user library 8 (such as the system administrator of the user federated user library 8, or the system administrator itself is the user), but they The electronic data in the notary library 9 cannot be falsified, and the verification code signed by the verification institution in the library 10 cannot be verified. Therefore, this solution can solve the problem of security deposit and notarization of electronic data.

As a secure medium for storing digital certificates UKEY, which can also be applied in the present invention, is also a powerful supplement to the security aspect of the present invention. Of course, the present invention also supports digital certificates stored on a local computer.

As shown in Figure 3, the schematic diagram of the process of depositing notarized data shows the variables defined in the figure as shown in Table 1:

Table 1: Variable Definition Table

变量名称 Variable name	含义 meaning
file File	电子数据明文 Electronic data plaintext
pass1 Pass1	用于第一次对称加密的随机密码 Random password for the first symmetric encryption
sfile1 Sfile1	第一次对称加密后的电子数据 First symmetrically encrypted electronic data
spass1 Spass1	用户公钥加密后的 pass1 Pass1 after user public key encryption
pass2 Pass2	用于第二次对称加密的随机密码 Random password for the second symmetric encryption
sfile2 Sfile2	第二次对称加密后的电子数据 Second symmetrically encrypted electronic data
spass2 Spass2	公证处公钥加密后的 pass2 Pass2 after public key encryption in the notary office
hsfile1 Hsfile1	sfile1 的哈希摘要校验码 Hash digest checksum for sfile1
shsfile1 Shsfile1	校验库私钥签名过的 hsfile1 Check the library private key signed hsfile1

As can be seen from FIG. 3, the content transmitted between the client and the server 3 is encrypted, and even if it is stolen in the network transmission, information leakage does not occur. Of course, in practical applications, data transmission can go SSL (Secure Sockets Layer), which will provide better network transmission security.

In the present invention, the algorithm used for the first and second symmetric encryption may be AES (Advanced Encryption). Standard, Advanced Encryption Standard, or other symmetric encryption algorithms are available. Different strength encryption algorithms can be used for different electronic data storage requirements. The asymmetric encryption algorithm can be RSA, or other asymmetric encryption algorithms are available.

The hash digest check code generation algorithm can be SHAl (Secure Hash) Algorithm), or other digest algorithms, such as MD5. During the transfer process, the data is likely to change, then a different message digest will be generated at this time. The digest algorithm has the following characteristics: It is not possible to recover information from a message digest; two different messages do not produce the same message digest.

The above-described embodiments are merely illustrative of the invention and are not intended to limit the invention. Variations, modifications, etc. of the above-described embodiments are intended to fall within the scope of the claims of the present invention as long as they are in accordance with the technical spirit of the present invention. .

Industrial applicability

The invention provides a preventive electronic data preservation method and a system for implementing preventive electronic data preservation, which can prevent tampering, storage security, easy disclosure, and clear client identity, and save time and cost in judicial deposit certificate notarization.

Claims

A method of preventive electronic data preservation, characterized in that the steps are as follows:

1) Encryption uploading step: the client data is encrypted into the first ciphertext and then uploaded to the server, and the server saves the first ciphertext to the user library; the server encrypts the first ciphertext in the user library into the second secret. After the text, save to the notarization library of the server; the server generates a first verification code for the first ciphertext in the user library, and saves it to the verification library of the server;

2) Download and decrypt step: the client downloads the second ciphertext in the notary library, decrypts to obtain the third ciphertext, and generates a second check code for the third ciphertext, if the second check code and the checksum are in the library The first check code is successfully matched, indicating that the third ciphertext is the same as the first ciphertext, and the third ciphertext is decrypted to obtain the data plaintext.
The method for preventing electronic data security according to claim 1, wherein the client comprises: a user client and a notary client; the encrypted uploading step is operated by the user client, and the downloading and decrypting steps are performed by a notary office. Client operation.
The method for preventing electronic data preservation according to claim 1 or 2, wherein the step of encrypting the client data is specifically: first symmetrically encrypting the data with the first key to obtain the first encrypted data, and then using the first The public key asymmetrically encrypts the first key with the first encryption key.
The method for preventing electronic data preservation according to claim 3, wherein the step of the server re-encrypting the first encrypted data in the user library is: first symmetrically encrypting the first encrypted data with the second key Obtaining the second encrypted data, and then asymmetrically encrypting the second key with the second public key to obtain a second encryption key.
The method for preventing electronic data preservation according to claim 4, characterized in that, in decryption, the second encryption key is first decrypted by the second private key to obtain the second key, and then the second key pair is added. The second secret data is decrypted to obtain the third encrypted data; then the first encryption key is decrypted by the first private key to obtain the first key, and the third encrypted data is decrypted by the first key to obtain the data plaintext.
The method for preventing electronic data preservation according to claim 4, wherein the first key is randomly generated by a client; and the second key is randomly generated by a server.
The method of preventive electronic data preservation according to claim 1 or 2, wherein the step 1) further comprises: encrypting the check code into a cryptographic check code with the third private key; and step 2) further This includes decrypting the encrypted check code with the third public key.
The method for preventing electronic data preservation according to claim 1 or 2, wherein in the process of step 1) and step 2), the time of the client and the server is maintained in real time by the network time protocol.
The method for preventing electronic data security according to claim 3, further comprising: after uploading the first encrypted data and the first encryption key, deleting the first encrypted data and the first encryption key on the client. .
The method for preventing electronic data preservation according to claim 5, further comprising: deleting the data plaintext, the second encrypted data, the third encrypted data, the first check code, and the first Second check code.
A system for preventive electronic data security, comprising: a user client, a notary office client, and a server, wherein the server includes an application server and a data server; and the data server includes a user library and a notarization library. , check library;

When the encryption is uploaded, the user client encrypts the data into the first ciphertext and uploads it to the user library; the application server encrypts the first ciphertext in the user library into the second ciphertext, and saves it to the notary library; the application server pairs The first ciphertext in the user library generates a first check code and saves it to the check library;

When downloading and decrypting, the notary office downloads the second ciphertext in the notary library, decrypts to obtain the third ciphertext, and generates a second check code for the third ciphertext, if the second check code and the checksum are in the library The first check code is successfully matched, indicating that the third ciphertext is the same as the first ciphertext, and the third ciphertext is decrypted to obtain the data plaintext.
The system for preventing electronic data security according to claim 11, wherein the server further comprises a CA/RA server for managing the digital certificate of the user client and the notary client.
The system for preventing electronic data security according to claim 11, wherein the server further includes an NTP server, and the time of the user client, the notary office client, and the server is synchronized in real time during the data encryption uploading process.
The system for preventing electronic data security according to claim 11, wherein the user database, the notarization library, and the verification library of the data server are three independent storage spaces.