WO2023193585A1

WO2023193585A1 - Authentication apparatus and method for original of and copy of electronic certificate license

Info

Publication number: WO2023193585A1
Application number: PCT/CN2023/081779
Authority: WO
Inventors: 胡金钱; 郭爱; 蔡心怡
Original assignee: 胡金钱
Priority date: 2022-04-06
Filing date: 2023-03-16
Publication date: 2023-10-12
Also published as: CN114840833A

Abstract

Disclosed in the present invention are an authentication apparatus and authentication method for the original of and a copy of an electronic certificate license. The authentication apparatus for the original of and a copy of an electronic certificate license comprises: a first acquisition module, which obtains identity information of a first/second user, enterprise information and corresponding CA certificates; a second acquisition module, which obtains certificate information of the first/second user; an information authentication module, which authenticates the identity information and the enterprise information according to the CA certificates; an electronic personal seal/signature generation module; an electronic company seal generation module; and an electronic certificate license original and copy generation module, which displays the registration place of an enterprise and all downloadable electronic certificate license records at the registration place for the first/second user to choose, and generates a copy of a first/second electronic certificate license on the basis of the original of the first/second electronic certificate license, the state administrative department for market regulation allowing the first/second user to make an application for downloading the original of the first/second electronic certificate license by means of a specific applet after the first/second user chooses an enterprise name.

Description

Device and method for authenticating original and duplicate electronic certificates and licenses

Technical field

The invention relates to the field of information security technology, and specifically relates to an electronic certificate license authentication device and an electronic certificate license authentication method.

Background technique

In modern society, the infrastructure for various digital applications is constantly improving and progressing, and the popularity of digital technology and applications in our country has increased significantly. Therefore, various digital fields led by the government and promoted by enterprises have entered a new level, and digital applications at the community, family and even individual levels will enter a stage of rapid development.

There are no original and duplicate electronic certificates and licenses, and the application of electronic certificates and licenses still has problems such as difficulty in identity authentication, license management, interoperability and mutual recognition, few application scenarios, and data insecurity, especially in the PDF version of the electronic certificate. There are great application and management risks in the transfer of certificates and licenses in daily economic activities, and they cannot be widely used in the real economic field. Therefore, it is necessary to provide a device and method that is more reliable, more convenient, safer and can legally and reasonably authenticate, generate, download and save a copy of the electronic certificate license.

It should be noted that the above introduction to the technical background is only provided to facilitate a clear and complete description of the technical solution of the present invention and to facilitate the understanding of those skilled in the art. It cannot be considered that the above technical solutions are known to those skilled in the art just because these solutions are described in the background technology section of the present invention.

Contents of the invention

In order to overcome the deficiencies in the prior art, embodiments of the present invention provide a device for authenticating original and duplicate electronic certificates and licenses and a method for authenticating original and duplicate electronic certificates and licenses.

The embodiment of the present application discloses: a device for authenticating the original and copy of an electronic certificate, including: a first acquisition module, used to obtain a plurality of first identity information, a plurality of first enterprise information and a corresponding plurality of the first user. a first CA certificate; a second retrieval module, used to obtain a plurality of first certificate information of the first user; an information authentication module, used to obtain a plurality of first identity information, a plurality of third certificates based on the plurality of first CA certificates; An enterprise information is physically or digitally authenticated to generate a plurality of first authenticated identity information and a plurality of first authenticated enterprise information; an electronic private seal/signature generation module is used to generate a plurality of first authenticated identity information. The first electronic private seal/signature of the first user; an electronic official seal generation module configured to generate the first electronic official seal of the first user based on a plurality of first authenticated identity information and a plurality of first authenticated enterprise information; and an electronic official seal. The module for generating original and duplicate certificates and licenses displays the registration place where the enterprise is located and all downloadable documents of the registration place after the first electronic private seal/signature, the first electronic official seal and multiple first certificate information pass the real-name authentication of a specific mini-program. The electronic certificate license record is for the first user to select, and after the first user selects the enterprise name, the state market supervision and administration department allows the first user to apply for downloading the first electronic certificate license through the specific applet. Original photo.

Further, the first retrieval module is also used to obtain a plurality of second identity information, a plurality of second enterprise information and a plurality of corresponding second CA certificates of the second user; the second retrieval module is also used to obtain A plurality of second certificate information of the second user; the information authentication module is also used to perform physical or digital authentication on a plurality of second identity information and a plurality of second enterprise information based on a plurality of second CA certificates to generate a plurality of second Certified identity information and a plurality of second certified corporate information; the electronic private seal/signature generation module is also used to generate a second electronic private seal/signature of the second user based on the plurality of second certified identity information; electronic official seal generation The module is also used to generate a second electronic official seal of the second user based on a plurality of second authenticated identity information and a plurality of second authenticated enterprise information; and the electronic certificate license original and copy generating module is used in the second electronic private seal/signature, After the second electronic official seal and plural second certificate information pass the real-name authentication of the specific applet, the registration place where the enterprise is located and all the downloadable electronic certificate license records of the registration place are displayed for the first user to select, and in the After the first user selects the enterprise name, the state market supervision and administration department allows the second user to apply for downloading the original copy of the second electronic certificate license through the specific applet.

Further, the electronic certificate license original and copy generating module is also used to generate a copy of the first electronic certificate license and a copy of the second electronic certificate license based on the original of the first electronic certificate license and the second electronic certificate license; in the first After the user is authorized, the first user is allowed to call a copy of the first electronic certificate license through the first electronic private seal/signature and the first electronic official seal; after the second user is authorized, the second user is allowed to call the copy through the second electronic private seal /Signature and second electronic official seal to call a copy of the second electronic certificate license.

Furthermore, the original of the first/second electronic certificate license uses a single key and single CA certificate, which is suitable for digital government applications; the copy of the first/second electronic certificate license uses a multi-key, multi-CA certificate, which is suitable for digital government applications. Economic applications.

Furthermore, the device for authenticating original and duplicate electronic certificates also includes a multi-module, which includes: a central control module, a communication module, an identity authentication module, a key module and a storage module connected to the central control module. The communication module is used to realize communication between the first/second user and the external server; the identity authentication module is used to authenticate the biometric identification data input by the first/second user, and after the authentication is passed, authenticate the first/second user The user authorizes; the key module is used to store a plurality of keys, and use the corresponding keys among the plurality of keys to authenticate a plurality of first/second authenticated identity information and a plurality of first/second authenticated information. The enterprise information is encrypted to generate a plurality of encrypted first/second authenticated identity information and a plurality of encrypted first/second authenticated enterprise information; a storage module is used to store the registered biometrics of the first/second user Feature identification data, a plurality of encrypted first/second authenticated identity information, a plurality of encrypted first/second authenticated enterprise information, the first/second electronic private seal/signature and the first/second electronic official seal ; The central control module is used to receive input and control the operations of other modules, and after the first/second user is authorized, allows the first/second user to pass the first/second electronic private seal/signature and the first/ The second electronic official seal is used to call the copy of the first/second electronic certificate license.

Further, the plurality of first/second enterprise information includes the first/second user authorized by the banking system and/or the government system. phone number, bound bank account number, electronic business license, tax control information, official seal number, legal person ID number, social credit code and/or electronic license number.

Further, the plurality of first/second identity information includes the first/second user's ID card information, personal seal information, personal signature information, fingerprints, social security information, phone number, email address, biometric information, blood type, and gene sequencing. Results, personal privacy characteristic information, credit information and/or personal photo information, etc.

Further, the plurality of first/second ID information includes household registration booklet, real estate certificate, ID card, social security, driver's license, passport, professional qualification certificate, etc.

The embodiment of this application discloses a method for authenticating the original and copy of an electronic certificate license, which includes the following steps:

Provides an electronic certificate and license authenticating device, including a first capture module, a second capture module, an information authentication module, an electronic private seal/signature generation module, an electronic official seal generation module, and an electronic certificate and license original and copy generation module; utilizing the first The retrieval module is used to obtain a plurality of first identity information, a plurality of first enterprise information and a corresponding plurality of first CA certificates of the first user; and the second retrieval module is used to obtain a plurality of first certificates of the first user. Information; use the information authentication module to perform physical or digital authentication on a plurality of first identity information and a plurality of first enterprise information based on a plurality of first CA certificates to generate a plurality of first authenticated identity information and a plurality of first authenticated information. Verify enterprise information; use the electronic private seal/signature generation module to generate the first electronic private seal/signature of the first user based on a plurality of first authenticated identity information; use an electronic official seal generation module to generate a first electronic seal/signature based on a plurality of first authenticated identities information and multiple first certified enterprise information to generate the first electronic official seal of the first user; and use the electronic certificate and license original and copy generation module to generate the first electronic private seal/signature, the first electronic official seal and multiple first certificate information. After passing the real-name authentication of a specific mini program, the registration place where the enterprise is located and all the downloadable electronic certificate license records of the registration place are displayed for the first user to select, and after the first user selects the enterprise name, the national market supervision and administration department allows the second A user applies to download the original copy of the First Electronic Certificate license through a specific mini program.

Further, the method also includes the following steps: using the first acquisition module to obtain a plurality of second identity information, a plurality of second enterprise information and a plurality of corresponding second CA certificates of the second user; using the second The retrieval module is used to obtain the plurality of second certificate information of the second user; the information authentication module is used to perform physical or digital authentication on the plurality of second identity information and the plurality of second enterprise information based on the plurality of second CA certificates to generate A plurality of second authenticated identity information and a plurality of second authenticated enterprise information; using an electronic private seal/signature generation module to generate a second electronic private seal/signature of the second user based on the plurality of second authenticated identity information; Using the electronic official seal generation module to generate the second electronic official seal of the second user based on the plurality of second authenticated identity information and the plurality of second authenticated enterprise information; and using the electronic certificate license original and copy generation module to generate the second electronic private seal /After the signature, second electronic official seal and multiple second certificate information pass the real-name authentication of the specific applet, the registration place where the enterprise is located and all the downloadable electronic certificate license records of the registration place are displayed for the second user to select, and in the After the second user selects the company name, the State Administration for Market Regulation The door allows the second user to apply for downloading the original copy of the second electronic certificate license through a specific applet.

Further, the method also includes the following steps: using an electronic certificate license original and copy generating module to generate a copy of the first electronic certificate license and a second electronic certificate license based on the original of the first electronic certificate license and the original of the second electronic certificate license. After the first user is authorized, the first user is allowed to call a copy of the first electronic certificate license through the first electronic private seal/signature and the first electronic official seal; after the second user is authorized, the second user is allowed to The copy of the second electronic certificate license is called through the second electronic private seal/signature and the second electronic official seal.

Further, the method also includes the following steps:

Provide multiple modules, including a central control module, and a communication module, identity authentication module, key module and storage module connected to the central control module;

Use the communication module to realize communication between the first/second user and the external server;

Use the identity authentication module to authenticate the biometric data input by the first/second user, and authorize the first/second user after passing the authentication;

Utilize a key module to store a plurality of keys, and encrypt a plurality of first/second authenticated identity information and a plurality of first/second authenticated enterprise information based on corresponding keys among the plurality of keys. , to generate a plurality of encrypted first/second authenticated identity information and a plurality of encrypted first/second authenticated enterprise information;

The storage module is used to store the registered biometric identification data of the first/second user, a plurality of encrypted first/second authenticated identity information, a plurality of encrypted first/second authenticated enterprise information, the first/second Two electronic private seals/signatures and first/second electronic official seals; and

Use the central control module to receive input and control the operations of other modules, and after the first/second user is authorized, allow the first/second user to pass the first/second electronic private seal/signature and the first/second Electronic official seal to call the first/second electronic certificate copy of the license.

Through the above technical solution, the beneficial effects of the present invention are as follows: The device/method for authenticating the original and copy of the electronic certificate license of the present invention, after the single key and single CA certificate pass the real-name authentication of the specific applet, the national market supervision and administration department allows Enterprise entities apply to download the original copy of the electronic certificate license through a specific mini program, and use multi-key and multi-CA certificates to authenticate and generate copies of the electronic certificate license. By distinguishing the original and copy of the electronic certificate license, in addition to In addition to being applicable to regional digital government applications (original), it can also be applied to digital economic applications (copies) in various digital economic application environments. There is mutual trust and mutual recognition, making it more convenient and reliable in practical applications.

The device for authenticating original and duplicate electronic certificates and licenses of the present invention stores certificates and keys in the chip instead of on a public platform, and has strong privacy and high security. All information is stored in the form of electronic keys and can be retrieved and used according to actual needs, greatly improving the security of certificates and keys. The chip is installed in a readable medium with chip storage applications. The readable medium includes but is not limited to servers, routers, laptops, mobile phone terminals, smart electronic seals, U-key, 5Gsim card, 4Gsim card.

Compared with the existing technology, the method/device for authenticating the original and copy of the electronic certificate license provided by the present invention distinguishes the original and duplicate copies of the electronic certificate license. The original is managed by the state in a unified database, and the copy is created according to national regulations. In the recognized chip media backup application library of market entities that can be deployed privately, it is left to the users to keep and apply it. It is not only reasonable, legal and compliant, but can also reduce systemic risks and ensure the security of customer data and information. The chip is installed in a readable medium with chip storage applications. The readable medium includes but is not limited to servers, routers, laptops, mobile terminals, smart electronic seals, U-key, 5Gsim cards, and 4Gsim cards.

In addition, the method/device for authenticating the original and copy of the electronic certificate license of the present invention issues the key and CA certificate of the copy of the electronic certificate license to market entities, which can be used together with the electronic seal, and is more suitable for application in various digital economy applications Digital economic applications in the environment trust and recognize each other, making them more convenient and reliable in practical applications.

Description of the drawings

Figure 1 is a framework diagram of an electronic certificate and license authenticating device in the first embodiment of the present invention.

Figure 2 is a frame diagram of an electronic certificate authenticating device in the second embodiment of the present invention.

FIG. 3 is a block diagram of the multiple modules in FIGS. 1 and 2 .

Figure 4 is a schematic diagram of a practical application of the device for authenticating original and duplicate electronic certificate licenses of the present invention.

Figure 5 is a flow chart of a method for authenticating the original and duplicate of an electronic certificate license in the first embodiment of the present invention.

Figure 6 is a flow chart of a method for authenticating the original and duplicate of an electronic certificate license in the second embodiment of the present invention.

Reference signs for the above drawings:
10A, 10B, electronic certificate original and copy authentication device; 110, first capture module; 120, second capture module;
130. Information authentication module; 140. Electronic private seal/signature generation module; 150. Electronic official seal generation module; 160. Electronic certificate and license original and copy generation module; 300. Multi-module; 310. Central control module; 320. Communication module; 330 , identity authentication module; 340, key module; 350, storage module; IDA1-IDAn, first identity information; IDB1-IDBn, second identity information; aIDA1-aIDAn, first authenticated identity information; aIDB1-aIDBn, third Two authenticated identity information; eaIDA1-eaIDAn, encrypted first authenticated identity information; eaIDB1-eaIDBn, encrypted second authenticated identity information; CA_A1-CA_Ap, first CA certificate; CA_B1-CA_Bp, second CA certificate; DIA1-DIAm, first certificate information; DIB1-DIBm, second certificate information; CIA1-CIAm, first company information; CIB1-CIBm, second company information; aCIA1-aCIAm, first certified company information; aCIB1-aCIBm , the second certified company information; eaCIA1-eaCIAm, the encrypted first certified company information; eaCIB1-eaCIBm, the encrypted second certified company information; EPS1, the first electronic private seal/signature; EPS2, the second electronic private seal Seal/Signature; ECS1, the first electronic official seal; ECS2, the second electronic official seal; KEY1-KEYp, key; ECL_A, the original of the first electronic certificate license; ECL_A1, a copy of the first electronic certificate license; ECL_B, the second electronic certificate The original copy of the electronic certificate license; ECL_B1, the second electronic certificate license Copy; ECL_C, original copy of the third electronic certificate license; ECL_C1, copy of the third electronic certificate license; S410-S470, S510-S530, steps.

Detailed ways

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without exerting creative efforts.

In order to make the above and other objects, features and advantages of the present invention more clearly understood, preferred embodiments are enumerated below and described in detail with reference to the accompanying drawings.

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of the present invention.

It should be noted that in the description of the present invention, the terms "first", "second", etc. are only used for descriptive purposes and to distinguish similar objects. There is no order between the two, and they cannot be understood as indicating or implies relative importance. Furthermore, in the description of the present invention, unless otherwise specified, "plurality" means two or more.

Please refer to FIG. 1 , which is a frame diagram of an electronic certificate authenticating device 10A in the first embodiment of the present invention. As shown in Figure 1, the electronic certificate authenticator 10A includes a first acquisition module 110, a second acquisition module 120, an information authentication module 130, an electronic private seal/signature generation module 140, an electronic official seal generation module 150, and an electronic seal generation module 150. Certificate license original and copy generation module 160 and multi-module 300. In this embodiment, the first acquisition module 110 is used to obtain the plurality of first identity information IDA1-IDAn, the plurality of first enterprise information CIA1-CIAm and the corresponding plurality of first CA certificates CA_A1- of the first user. CA_Ap. The second acquisition module 120 is used to acquire a plurality of first ID information DIA1-DIAm of the first user. The information authentication module 130 is coupled to the first acquisition module 110 and is used to physically or digitally process the plurality of first identity information IDA1-IDAn and the plurality of first enterprise information CIA1-CIAm according to the plurality of first CA certificates CA_A1-CA_Ap. Authentication to generate a plurality of first authenticated identity information aIDA1-aIDAn and a plurality of first authenticated enterprise information aCIA1-aCIAm. The electronic private seal/signature generation module 140 is coupled to the information authentication module 130 and is used to generate the first electronic private seal/signature EPS1 of the first user based on the plurality of first authenticated identity information aIDA1-aIDAn. The electronic official seal generation module 150 is coupled to the information authentication module 130 and is used to generate the first electronic official seal ECS1 of the first user based on the plurality of first authenticated identity information aIDA1-aIDAn and the plurality of first authenticated enterprise information aCIA1-aCIAm. . The electronic certificate license original and copy generating module 160 is coupled to the electronic private seal/signature generating module 140, the electronic official seal generating module 150 and the second acquisition module 120. In the first electronic private seal/signature EPS1, the first electronic official seal ECS1 and the plural Geth After the certificate information DIA1-DIAm passes the real-name authentication of a specific applet (such as WeChat applet, Alipay applet, Baidu applet, etc.), it displays the registration place where the enterprise is located and all the downloadable electronic certificate license records of the registration place. After the first user selects the company name, the State Market Supervision and Administration Department allows the first user to apply for downloading the original ECL_A of the first electronic certificate license through a specific mini program.

Please refer to Figure 2, which is a frame diagram of an electronic certificate original and copy authentication device 10B in the second embodiment of the present invention. The electronic certificate license authenticating device 10B in Figure 2 is similar to the electronic certificate license authenticating device 10A in Figure 1 . In this embodiment, the first retrieval module 110 is also used to obtain a plurality of second data of the second user. Identity information IDB1-IDBn, a plurality of second enterprise information CIB1-CIBm, and a plurality of corresponding second CA certificates CA_B1-CA_Bp. The second acquisition module 120 is also used to obtain a plurality of second ID information DIB1-DIBm of the second user. The information authentication module 130 is also configured to perform physical or digital authentication on the plurality of second identity information IDB1-IDBn and the plurality of second enterprise information CIB1-CIBm according to the plurality of second CA certificates CA_B1-CA_Bp to generate a plurality of second certificates. Authentication identity information aIDB1-aIDBn and plural second authenticated enterprise information aCIB1-aCIBm. The electronic private seal/signature generation module 140 is also configured to generate a second electronic private seal/signature EPS2 of the second user based on the plurality of second authenticated identity information aIDB1-aIDBn. The electronic official seal generation module 150 is also used to generate a second electronic official seal ECS2 of the second user based on the plurality of second authenticated identity information aIDB1-aIDBn and the plurality of second authenticated enterprise information aCIB1-aCIBm. After the second electronic private seal/signature EPS2, the second electronic official seal ECS2 and the plurality of second certificate information DIB1-DIBm pass the real-name authentication of the specific applet, the electronic certificate license generation module 160 displays the registration place where the enterprise is located and the All downloadable electronic certificate license records in the registration place are available for the second user to select. After the second user selects the company name, the State Administration for Market Regulation allows the second user to apply for downloading the original copy of the second electronic certificate license through a specific mini program. ECL_B.

It is worth noting that if the real-name authentication of a specific mini program cannot be passed, the first/second user needs to download the original copy of the electronic certificate license from the local market supervision department.

Please note that the plurality of first/second identity information IDA1-IDAn/IDB1-IDBn mentioned above include the first/second user’s ID card information, personal seal information, personal signature information, fingerprints, social security information, phone number, email address, Biometric information, blood type, gene sequencing results, personal privacy feature information, credit information and/or personal photo information, but this is only an example and is not a limitation of the present invention. Furthermore, the plurality of first/second certificate information DIA1-DIAm/DIB1-DIBm include household registration book, real estate certificate, ID card, social security, driver's license, passport, and professional qualification certificate, but the invention is not limited to this, and other Similar certificate information also falls within the scope of the present invention.

Please note again that the plurality of first/second company information CIA1-CIAm/CIB1-CIBm includes the phone number of the first/second user authorized by the banking system and/or the government system, bound bank account number, electronic business license, tax control Information, official seal number, legal person ID number, social credit code and/or electronic license number, but the present invention is not limited to this, other similar enterprise information Information also belongs to the scope covered by the present invention.

It is worth noting that the first/second electronic private seal/electronic signature EPS1/EPS2 here belongs to a broad concept, any personal electronic name seal in various electronic/digital formats that can identify an individual's identity and has legal effect. Electronic signatures, digital signatures, fingerprints and other electronic signature models are all covered. In addition, the first/second electronic official seal ECS1/ECS2 here belongs to a broad concept, any official seal, legal person seal, special invoice seal, financial seal, contract in various electronic/digital formats that can represent the enterprise and have legal effect. Electronic signature templates such as stamps are included.

In a specific embodiment, the electronic certificate license original and copy generating module 160 is also used to generate copies of the first electronic certificate license ECL_A1 and the second electronic certificate license based on the original ECL_A of the first electronic certificate license and the original ECL_B of the second electronic certificate license. A copy of the first electronic certificate license ECL_B1; in this way, after the first user is authorized, the first user is allowed to call the copy of the first electronic certificate license ECL_A1 through the first electronic private seal/signature EPS1 and the first electronic official seal ECS1; and in After the second user is authorized, the second user is allowed to call the copy ECL_B1 of the second electronic certificate license through the second electronic private seal/signature EPS2 and the second electronic official seal ECS2.

It is worth noting that the "original ECL_A/ECL_B of the first/second electronic certificate license" here means that after the CA certificate and key pass the real-name authentication of a specific applet, the national market supervision and management department allows the enterprise entity to pass a specific Mini program to apply for downloaded originals and store them in the certificate and license central library. Enterprise entities cannot privately own the originals of electronic certificates and licenses. They must connect to the certificate and license central library through the front-end server to download and use the original electronic certificates and licenses; The "Copy of the First/Second Electronic Certificate License ECL_A1/ECL_B" can be generated by the enterprise or a third party providing a medium that can issue the electronic certificate license. In this way, it can not only comply with the legal provisions, but also be beneficial to the enterprise. The subject's electronic certificate license and electronic seal applications have been privatized, which not only protects the security of the enterprise's data information, but also greatly reduces the various pressures caused by the application of the national electronic certificate license central database.

Please refer to Figure 1, Figure 2 and Figure 3 together. The device 10A/10B for authenticating original and duplicate electronic certificate licenses also includes a multi-module 300. As shown in Figure 3, the multi-module 300 includes a central control module 310, a communication module 320, an identity authentication module 330, a key module 340 and a storage module 350 connected to the central control module 310. The communication module 320 is used to implement communication between the first/second user and the external server; the identity authentication module 330 is used to authenticate the biometric identification data input by the first/second user, and after the authentication is passed, authenticate the first/second user. The second user authorizes; the key module 340 is used to store a plurality of keys KEY1-KEYp, and to verify a plurality of first/second authenticated identity information aIDA1 according to the corresponding keys in the plurality of keys KEY1-KEYp. -aIDAn/aIDB1-aIDBn and a plurality of first/second authenticated enterprise information aCIA1-aCIAm/aCIB1-aCIBm are encrypted to generate a plurality of encrypted first/second authenticated identity information eaIDA1-eaIDAn/eaIDB1-eaIDBn and a plurality of encrypted first/second authenticated enterprise information eaCIA1-eaCIAm/eaCIB1-eaCIBm; the storage module 350 is used to store the registered biometric data of the first/second user, a plurality of encrypted first/second Authenticated identity information eaIDA1-eaIDAn/eaIDB1-eaIDBn, plural Encrypted first/second certified enterprise information aCIA1-aCIAm/aCIB1-aCIBm, first/second electronic private seal/signature EPS1/EPS2 and first/second electronic official seal ECS1/ECS2. The central control module 310 is used to receive input and control the operations of other modules 320-350, and after the first/second user obtains authorization, allows the first/second user to pass the first/second electronic private seal/signature EPS1/ EPS2 and the first/second electronic official seal ECS1/ECS2 to call the copy ECL_A1/ECL_B1 of the first/second electronic certificate license.

Further, the communication module 320 may include: at least one of a 3G communication module, a 4G communication module, a 5G communication module, a WIFI module, an NBIoT module, a Bluetooth module, an NFC module and an infrared module; the communication module 320 supports IPV4 and IPV6 protocols.

Please note that the above-mentioned biometric data may include fingerprint information data, iris information data and/or facial feature recognition data, or any biometric data that can identify the user. In actual applications, one or a combination of more of them can be used for security identification.

The electronic certificate original and copy authentication device 10A/10B of the present invention can be a trusted authentication server system or a third-party authentication platform system. This device includes authentication of various certificate keys such as electronic private seals/signatures and electronic official seals. , storage, management, and application, which corresponds to any department or platform system of social economic transactions, including individuals, families, small and medium-sized enterprises/individual industrial and commercial households, enterprises, communities, and governments.

Please refer to FIG. 4 , which is a schematic diagram of a practical application of the electronic certificate original and copy authentication device 10A/10B of the present invention. First, in Figure (4A), the electronic certificate license authenticating device 10A/10B will respectively obtain a plurality of identity information, a plurality of enterprise information, a plurality of certificate information and related information of enterprise user A, enterprise user B and enterprise user C. Corresponding plural CA certificates, and after a series of authentication and authorization, the originals ECL_A, ECL_B, and ECL_C of the electronic certificate licenses of enterprise user A, enterprise user B, and enterprise user C are generated respectively. Next, in Figure (4B), the electronic certificate license original and copy authentication device 10A/10B will first generate an electronic certificate license based on the originals ECL_A, ECL_B, and ECL_C of the electronic certificate licenses of enterprise user A, enterprise user B, and enterprise user C. Copies ECL_A1, ECL_B1, ECL_C1. It is worth noting that after the single-key and single-CA certificate passes the real-name authentication of a specific applet, the state market supervision and administration department allows business entities to apply for downloading the originals of the electronic certificate license ECL_A, ECL_B, and ECL_C through the specific applet. Mainly The application scenario is digital government applications in the regional government environment, which cannot be applied to digital economy applications; and the keys and CA certificates of the electronic certificate license copies ECL_A1, ECL_B1, ECL_C1 are issued to market entities, and they can be used together with the electronic seal. It is more suitable for digital economic applications in various digital economic application environments.

For example, since the copies of the electronic certificate licenses ECL_A1 and ECL_B1 are generated based on the originals ECL_A, ECL_B, and ECL_C of the electronic certificate licenses of enterprise user A, enterprise user B, and enterprise user C, when enterprise user A and enterprise user B When there is a contract Con_AB that needs to be signed, enterprise user B will recognize the copy of the electronic certificate license ECL_A1 provided by enterprise user A, and enterprise user A will also recognize the copy ECL_B1 of the electronic certificate license provided by enterprise user B. Mutual recognition of trust. In the same way, enterprise user C will also recognize the copy of the electronic certificate license ECL_A1 provided by enterprise user A and the copy ECL_B1 of the electronic certificate license provided by enterprise user B.

It is worth noting that the electronic certificate and license authenticating device 10A/10B of the present invention can be implemented by an intelligent security chip of an integrated physical and electrical intelligent electronic seal. The intelligent security chip of the integrated physical and electrical intelligent electronic seal stores various certificates and keys. , such as: ID card information, personal seal information, personal signature information, fingerprints, social security information, household register, driver's license, passport, professional qualification certificate, phone number, email address, biometric information, blood type, gene sequencing results, personal privacy characteristics Information data, credit information and/or personal photo information, etc. The smart security chip also stores various corporate information, such as: phone number of the first/second user authorized by the banking system and/or government system, bound bank account number, electronic business license, tax control information, official seal number, legal person certificate number, social credit code and/or electronic license number. The device for authenticating original and duplicate electronic certificates and licenses 10A/10B of the present invention can be widely used in multi-certificate intensive scenarios for individuals and enterprises, one-time authentication, all-network processing, one number for multiple uses, multiple certificates in one, centralized licenses, and electronic invoice authentication use contracts. Service scenarios such as key chain accounting integration from signing to invoicing, electronic signatures, and personal credit extension. Realize the concentration, transfer, authentication, and authorization of corporate and personal electronic certificates and other information. On the premise of ensuring data privacy and security, users can use common prosperity and convenient services to make everyone an e-commerce business and every household an enterprise, and realize the comprehensive digitization of their social, political, cultural, and economic activities efficiently and reliably.

The electronic certificate license here is a broad concept, covering all electronic business licenses, electronic licenses, electronic invoices, electronic bill invoicing copies/stub copies/accounting statements, etc. with originals/copies and multiple vouchers, even real estate Certificates, household registers, ID cards, and other electronic certificates and licenses that were originally paper must be converted into electronic ones, and the originals and copies must be separated. In this way, twin applications that can reflect the original copy are better in terms of legality and security.

Please refer to Figures 1, 2 and 5 together. Figure 5 is a flow chart of a method for authenticating the original and copy of an electronic certificate license in the first embodiment of the present invention. The method for authenticating the original and copy of the electronic license in Figure 5 includes the following steps:

Step S410: Provide an electronic certificate and license original and copy authentication device, including a first acquisition module, a second acquisition module, an information authentication module, an electronic private seal/signature generation module, an electronic official seal generation module, and an electronic certificate and license original and copy generation module.

Step S420: Use the first retrieval module to obtain a plurality of first/second identity information, a plurality of first/second enterprise information, and a plurality of corresponding first/second CA certificates of the first/second user .

Step S430: Use the second acquisition module to obtain a plurality of first/second ID information of the first/second user.

Step S440: Use the information authentication module to perform physical or digital authentication on the plurality of first/second identity information and the plurality of first/second enterprise information based on the plurality of first/second CA certificates to generate a plurality of first /Second authenticated identity information and multiple first/second authenticated enterprise information.

Step S450: Use the electronic private seal/signature generation module to generate the first/second electronic private seal/signature of the first/second user based on the plurality of first/second authenticated identity information.

Step S460: Use the electronic official seal generation module to generate the seal based on a plurality of first/second authenticated identity information and a plurality of third The first/second authenticated enterprise information is used to generate the first/second electronic official seal of the first/second user.

Step S470: Use the electronic certificate license original and copy generation module to display the first/second electronic private seal/signature, the first/second electronic official seal and the plurality of first/second certificate information through the real-name authentication of the specific applet. The registration place where the enterprise is located and all the downloadable electronic certificate and license records of the registration place are available for the first/second user to select, and after the first/second user selects the enterprise name, the state market supervision and administration department allows the first/second user to Users can apply to download the original copy of the first/second electronic certificate license through a specific mini program.

Please note that step S420 is executed by the first capture module 110, step S430 is executed by the second capture module 120, step S440 is executed by the information authentication module 130, and step S450 is generated by the electronic private seal/signature. The module 140 executes the step S460 by the electronic official seal generating module 150 and the step S470 by the electronic certificate and license original and copy generating module 160 .

Please refer to FIG. 2 and FIG. 6 together. FIG. 6 is a flow chart of a method for authenticating the original and copy of an electronic certificate in the second embodiment of the present invention. The method for authenticating the original and copy of the electronic license in Figure 6 includes the following steps:

Step S510: Use the electronic certificate license original and copy generating module to generate a copy of the first electronic certificate license and a copy of the second electronic certificate license based on the original of the first electronic certificate license and the original of the second electronic certificate license.

Step S520: After the first user obtains authorization, the first user is allowed to call a copy of the first electronic certificate license through the first electronic private seal/signature and the first electronic official seal.

Step S530: After the second user obtains authorization, the second user is allowed to call a copy of the second electronic certificate license through the second electronic private seal/signature and the second electronic official seal.

Please note that step S510 is executed by the electronic certificate license original and copy generating module 160.

The device for authenticating original and duplicate electronic certificates and licenses of the present invention stores certificates and keys in the chip of an integrated intelligent electronic seal, instead of storing them on a public platform. It has strong privacy and high security. All information is stored in the form of electronic keys and can be retrieved and used according to actual needs, greatly improving the security of certificates and keys. Compared with the existing technology, the method/device for authenticating the original and copy of the electronic certificate license provided by the present invention distinguishes the original and the duplicate of the electronic certificate license. The original is managed by the state in a unified database, and the copy is created according to national regulations and handed over. It is kept and applied by users themselves, which is not only reasonable, legal and compliant, but can also reduce systemic risks and ensure the security of customer data and information. In addition, the method/device for authenticating the original and copy of the electronic certificate license of the present invention uses multi-key and multi-CA certificates to generate copies of the electronic certificate license, which can be applied to digital economic applications in various digital economic application environments and ensure mutual trust and mutual trust. recognition, which is more convenient and reliable in practical applications.

The above-described embodiments of the present invention can be implemented in various hardware, software coding, or a combination of both. For example, the embodiment of the present invention may also be a program code for executing the above method in a digital signal processor (Digital Signal Processor, DSP). The invention may also relate to a computer processor, digital signal processor, microprocessor or field programmable gate array (Field Programmable Gate Array, FPGA) performs various functions. The processors described above may be configured in accordance with the present invention to perform specific tasks by executing machine-readable software code or firmware code that defines specific methods disclosed herein. Software code or firmware code can be developed into different programming languages and different formats or forms. Software code can also be compiled for different target platforms. However, different code styles, types, and languages of software code and other types of configuration code that perform tasks according to the invention do not depart from the spirit and scope of the invention.

Through the above technical solution, the beneficial effects of the present invention are as follows: The device/method for authenticating the original and copy of the electronic certificate license of the present invention, after the single key and single CA certificate pass the real-name authentication of the specific applet, the national market supervision and administration department allows The enterprise entity applies to download the original copy of the electronic certificate license through a specific mini program, and issues the key and CA certificate of the copy of the electronic certificate license to the market entity, which can be used together with the electronic seal. By downloading the original copy of the electronic certificate license and the CA certificate To distinguish, in addition to being applicable to regional digital government applications (original), it can also be applied to digital economic applications (copies) in various digital economic application environments. There is mutual trust and mutual recognition, which is more convenient in practical applications. reliable.

The present invention uses specific embodiments to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those of ordinary skill in the art, based on this The idea of the invention will be subject to change in the specific implementation and scope of application. In summary, the contents of this description should not be understood as limiting the invention.

Claims

A device for authenticating original and duplicate electronic certificates and licenses, including:

A first retrieval module, used to obtain a plurality of first identity information, a plurality of first enterprise information, and a plurality of corresponding first CA certificates of a first user;

a second retrieval module, used to obtain a plurality of first certificate information of the first user;

An information authentication module, coupled to the first acquisition module, used to perform physical or digital authentication on the plurality of first identity information and the plurality of first enterprise information according to the plurality of first CA certificates , to generate a plurality of first authenticated identity information and a plurality of first authenticated enterprise information;

An electronic private seal/signature generation module, coupled to the information authentication module, used to generate a first electronic private seal/signature of the first user based on the plurality of first authenticated identity information;

An electronic official seal generation module, coupled to the information authentication module, used to generate a first user's first identity information based on the plurality of first authenticated identity information and the plurality of first authenticated enterprise information. Electronic official seal; and

An electronic certificate license original and copy generating module, coupled to the electronic private seal/signature generating module, the electronic official seal generating module and the second acquisition module, in the first electronic private seal/signature, the After the first electronic official seal and the plurality of first certificate information pass the real-name authentication of the specific applet, the registration place where the enterprise is located and all the downloadable electronic certificate license records of the registration place are displayed for the first user to select, and in After the first user selects a company name, the state market supervision and administration department allows the first user to apply for downloading the original copy of the first electronic certificate license through the specific applet.
The device for authenticating original and duplicate electronic certificates and licenses as claimed in claim 1, characterized in that:

The first retrieval module is also used to obtain a plurality of second identity information, a plurality of second enterprise information, and a plurality of corresponding second CA certificates of a second user;

The second retrieval module is also used to obtain a plurality of second certificate information of the second user;

The information authentication module is also configured to perform physical or digital authentication on the plurality of second identity information and the plurality of second enterprise information according to the plurality of second CA certificates to generate a plurality of second authenticated identities. Information and plural second certified enterprise information;

The electronic private seal/signature generation module is also configured to generate a second electronic private seal/signature of the second user based on the plurality of second authenticated identity information;

The electronic official seal generation module is also configured to generate a second electronic official seal of the second user based on the plurality of second authenticated identity information and the plurality of second authenticated enterprise information; and

The electronic certificate license original and copy generating module displays the registration place of the enterprise after the second electronic private seal/signature, the second electronic official seal and the plurality of second certificate information pass the real-name authentication of the specific applet. All downloadable electronic certificate license records related to the registration place are available for the second user to select, and after the second user selects the enterprise name, the State Market Supervision and Administration Department allows the second user to use the specific applet to select Apply to download the original copy of the second electronic certificate.
The device for authenticating original and duplicate electronic certificates and licenses as claimed in claim 2, characterized in that:

The electronic certificate license original and copy generating module is also configured to generate a copy of the first electronic certificate license and the second electronic certificate based on the original of the first electronic certificate license and the original of the second electronic certificate license. A copy of the license;

Wherein, after the first user is authorized, the first user is allowed to call a copy of the first electronic certificate license through the first electronic private seal/signature and the first electronic official seal;

Wherein, after the second user is authorized, the second user is allowed to call a copy of the second electronic certificate license through the second electronic private seal/signature and the second electronic official seal.
The device for authenticating original and duplicate electronic certificate licenses according to claim 2, wherein the plurality of first/second enterprise information includes phone numbers of the first/second users authorized by a banking system and/or a government system. , bind bank account number, electronic business license, tax control information, official seal number, legal person ID number, social credit code and/or electronic license number.
The device for authenticating original and duplicate electronic certificate licenses according to claim 2, wherein the plurality of first/second identity information includes the first/second user's ID card information, personal seal information, personal seal information, and personal seal information. Signature information, fingerprints, social security information, phone number, email address, biometric information, blood type, gene sequencing results, personal privacy feature information, credit information and/or personal photo information.
The device for authenticating original and duplicate electronic certificates and licenses according to claim 2, wherein the plurality of first/second certificate information includes household register, real estate certificate, ID card, social security, driver's license, passport, and professional qualification certificate. .
The device for authenticating original and duplicate electronic certificates and licenses as claimed in claim 3, characterized in that:

The original of the first/second electronic certificate license adopts a single key and single CA certificate;

The copies of the first/second electronic certificate license adopt multi-key and multi-CA certificates.
The device for authenticating original and duplicate electronic certificates as claimed in claim 3, further comprising a multi-module, and the multi-module includes:

A central control module, and a communication module, an identity authentication module, a key module and a storage module connected to the central control module;

The communication module is used to implement communication between the first/second user and the external server;

The identity authentication module is used to authenticate the biometric identification data input by the first/second user, and authorize the first/second user after passing the authentication;

The key module is used to store a plurality of keys, and to compare the plurality of first/second authenticated identity information and the plurality of first keys according to the corresponding keys among the plurality of keys. /Second authenticated enterprise information is encrypted to generate a plurality of encrypted first/second authenticated identity information and a plurality of encrypted first/second authenticated enterprise information;

The storage module is used to store the registered biometric identification data of the first/second user, the plurality of encrypted first/second authenticated identity information, and the plurality of encrypted first/second authenticated identity information. Certified enterprise information, the first/second electronic private seal/signature and the first/second electronic official seal; and

The central control module is used to receive input and control the operations of other modules, and after the first/second user obtains authorization, allows the first/second user to pass the first/second electronic private seal/signature and the first/second electronic official seal to call a copy of the first/second electronic certificate license.
A method for authenticating original and duplicate electronic certificates and licenses, including the following steps:

An electronic certificate and license authenticating device is provided, including a first acquisition module, a second acquisition module, an information authentication module, an electronic private seal/signature generation module, an electronic official seal generation module, and an electronic certificate and license authenticator. Replica generation module;

Utilize the first retrieval module to obtain a plurality of first identity information, a plurality of first enterprise information, and a plurality of corresponding first CA certificates of a first user;

Utilize the second acquisition module to obtain a plurality of first certificate information of the first user;

Utilize the information authentication module to perform physical or digital authentication on the plurality of first identity information and the plurality of first enterprise information based on the plurality of first CA certificates to generate a plurality of first authenticated identity information. and multiple first certified enterprise information;

Utilize the electronic private seal/signature generation module to generate a first electronic private seal/signature of the first user based on the plurality of first authenticated identity information;

Utilize the electronic official seal generation module to generate a first electronic official seal of the first user based on the plurality of first authenticated identity information and the plurality of first authenticated enterprise information; and

Use the electronic certificate license original and copy generating module to display the registration of the enterprise after the first electronic private seal/signature, the first electronic official seal and the plurality of first certificate information pass the real-name authentication of the specific applet. All downloadable electronic certificate license records in the registration place are available for the first user to select, and after the first user selects the company name, the national market supervision and administration department allows the first user to pass the specific applet. Come and apply to download the original copy of the First Electronic Certificate.
The method for authenticating the original and duplicate of an electronic certificate license as claimed in claim 9, further comprising the following steps:

Utilize the first retrieval module to obtain a plurality of second identity information, a plurality of second enterprise information, and a plurality of corresponding second CA certificates of a second user;

Utilize the second retrieval module to obtain a plurality of second certificate information of the second user;

Utilize the information authentication module to perform physical or digital authentication on the plurality of second identity information and the plurality of second enterprise information based on the plurality of second CA certificates to generate a plurality of second authenticated identity information. and multiple second certified enterprise information;

Utilize the electronic private seal/signature generation module to generate a second electronic private seal/signature of the second user based on the plurality of second authenticated identity information;

Utilize the electronic official seal generation module to generate a second electronic official seal of the second user based on the plurality of second authenticated identity information and the plurality of second authenticated enterprise information; and

The electronic certificate license original and copy generating module is used to display the registration of the enterprise after the second electronic private seal/signature, the second electronic official seal and the plurality of second certificate information pass the real-name authentication of the specific applet. All downloadable electronic certificate license records in the registration place are available for the second user to select, and after the second user selects the company name, the national market supervision and administration department allows the second user to pass the specific applet. Come and apply to download the original copy of the second electronic certificate.
The method for authenticating the original and duplicate of an electronic certificate license as claimed in claim 10, which further includes the following steps:

Utilize the electronic certificate license original and copy generating module to generate a copy of the first electronic certificate license and the second electronic certificate license based on the original of the first electronic certificate license and the original of the second electronic certificate license. a copy of;

After the first user is authorized, the first user is allowed to call a copy of the first electronic certificate license through the first electronic private seal/signature and the first electronic official seal;

After the second user is authorized, the second user is allowed to call a copy of the second electronic certificate license through the second electronic private seal/signature and the second electronic official seal.
The method for authenticating the original and duplicate of an electronic license as claimed in claim 11, characterized in that the method further includes the following steps:

Provide a multi-module, the multi-module includes a central control module, and a communication module, an identity authentication module, a key module and a storage module connected to the central control module;

Utilize the communication module to implement communication between the first/second user and the external server;

Use the identity authentication module to authenticate the biometric identification data input by the first/second user, and authorize the first/second user after passing the authentication;

The key module is used to store a plurality of keys, and the plurality of first/second authenticated identity information and the plurality of first/second authenticated identity information are stored according to corresponding keys among the plurality of keys. The second authenticated enterprise information is encrypted to generate a plurality of encrypted first/second authenticated identity information and a plurality of encrypted first/second authenticated enterprise information;

The storage module is used to store the registered biometric identification data of the first/second user, the plurality of added The encrypted first/second authenticated identity information, the plurality of encrypted first/second authenticated enterprise information, the first/second electronic private seal/signature and the first/second electronic official seal ;as well as

The central control module is used to receive input and control the operations of other modules, and after the first/second user is authorized, the first/second user is allowed to pass the first/second electronic private seal /Signature and the first/second electronic official seal to call a copy of the first/second electronic certificate license.