CN113282963B - Electronic signature verification method, device and equipment - Google Patents

Abstract

The embodiment of the invention relates to the technical field of electronic signatures, and discloses a method, a device and equipment for verifying an electronic signature, wherein the method comprises the following steps: acquiring a signature stream file of user electronic signature information and picture information of the user electronic signature; converting the signature stream file into a PDF signature file; carrying out validity verification and tamper-proof verification on the PDF signature file; and displaying the picture information of the user electronic signature according to the validity verification result and the anti-tampering verification result. Through the mode, the embodiment of the invention effectively solves the problems that others falsify the labels, the files are tampered and the like in the prior art.

Description

Electronic signature verification method, device and equipment

technical field

The embodiments of the present invention relate to the technical field of electronic signatures, and in particular to an electronic signature verification method, device and equipment.

Background technique

Electronic signature technology can realize the digitization of signature information, change the original paper signature and seal, and change offline paper signature and seal to online signature and seal, which reduces the number of people running away and saves a lot of printing and paper consumption , Green and environmentally friendly, it is of great significance to realize the paperless society.

The electronic signature information is generally put the signer's ID number, name, certificate authority, signer's public key, and personal signature information signed by the private key into the header of the signature file to open the signature It can be used to judge the validity of personal signature information, and has the advantages of non-repudiation of signature and non-tampering of signed documents. It can be widely used in various scenarios such as electronic contracts, electronic orders, meeting minutes, document issuance, and electronic document archiving.

In the prior art, generally by downloading the signed document, the document is downloaded offline to the client or the client installs a viewing plug-in on the computer, and the standard Adobe PDF Reader is installed on the user side for viewing. To check whether the document has been tampered with, the user still needs to click on the signature information, and prompt to check whether the document has been modified through whether the document contained in the signature information has been modified. The user operation is one more step, which is inconvenient and most users will not use it. Adobe PDF Reader is installed on the app side, and it does not support the function of viewing signature information by clicking the signature icon. As a result, users cannot see information such as signer information, whether the document has been tampered with, and users may use tampered documents.

Contents of the invention

In view of the above problems, the embodiments of the present invention provide an electronic signature verification method, device and device, which are used to solve the problems existing in the prior art such as counterfeit signatures and document tampering.

The embodiment of the present invention proposes a method for verifying an electronic signature, the method comprising:

Obtain the signature flow file of the user's electronic signature information and the picture information of the user's electronic signature;

Convert the signature stream file into a PDF signature file;

Perform validity verification and tamper-proof verification on the PDF signature file;

Displaying the picture information of the user's electronic signature according to the result of the validity check and the result of the tamper-proof check.

Further, the acquisition of the signature stream file of the user's electronic signature information and the picture information of the user's electronic signature includes:

Analyze the user's electronic signature information by inserting code, and obtain the signature flow file of the user's electronic signature information;

Extracting the second-layer electronic signature picture of the user's electronic signature information as the picture information of the user's electronic signature.

Further, the verification of the validity of the PDF signature file includes:

Send the PDF signature file to the certificate management server;

The certificate management server verifies the validity of the PDF signature file, and feeds back the verification result.

Further, the tamper-proof verification of the PDF signature file includes:

Calculate the MD5 value, the user's signature public key in the PDF signature file and the user's private key signature MD5 value in the PDF signature file according to the PDF signature file, and perform tamper-proof verification on the PDF signature file.

Further, according to the result of the validity check and the result of the tamper-proof check, the picture information of the user's electronic signature is displayed, including:

Convert the picture information of the user's electronic signature into a picture and a link according to the result of the validity check and the result of the tamper-proof check, the picture is used to display the check result of the electronic signature, and the link is used for Display the electronic signature verification details.

Another embodiment of the present invention also provides an electronic signature verification device, including:

Code insertion module: used to obtain the signature stream file of the user's electronic signature information and the picture information of the user's electronic signature;

Document conversion module: for converting the signature flow file into a PDF signature file;

Verification module: used to perform validity verification and tamper-proof verification on the PDF signature file;

Verification result display module: used to display the picture information of the user's electronic signature according to the result of the validity verification and the result of the tamper-proof verification.

Further, the verification module further includes:

Validity verification unit: for sending the PDF signature file to the certificate management server; enabling the certificate management server to perform validity verification on the PDF signature file.

Further, the verification module further includes:

Anti-tampering verification unit: used to calculate the MD5 value according to the PDF signature file, the user's signature public key in the PDF signature file and the user's private key signature MD5 value in the PDF signature file, and perform a check on the PDF signature file Tamper-proof verification.

An embodiment of the present invention also provides an electronic signature verification device, the computing device includes: a processor, a memory, a communication interface, and a communication bus, and the processor, the memory, and the communication interface pass through the communication bus Complete mutual communication;

The memory is used to store at least one executable instruction, and the executable instruction causes the processor to execute the electronic signature verification method.

An embodiment of the present invention also provides a computer-readable storage medium, wherein at least one executable instruction is stored in the storage medium, and when the executable instruction is run on the computing device, the computing device executes the electronic signature verification method. test method.

It can be seen from the above that the electronic signature verification method, device and equipment provided by the embodiments of the present invention connect to an authoritative third-party certificate issuing authority online to perform validity verification, and at the same time, perform tamper-proof verification through an encryption algorithm, which effectively solves the problem of Problems such as counterfeit signatures and tampered documents exist in the prior art. At the same time, through pictures and links, authoritative and intuitive online verification results for verifying the validity of the user's electronic signature are provided.

The above description is only an overview of the technical solutions of the embodiments of the present invention. In order to better understand the technical means of the embodiments of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and The advantages can be more obvious and understandable, and the specific embodiments of the present invention are enumerated below.

Description of drawings

The drawings are only for illustrating the embodiments and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

FIG. 1 shows a schematic flow diagram of an electronic signature verification method provided by an embodiment of the present invention;

FIG. 2 shows a schematic structural diagram of an electronic signature verification device provided by an embodiment of the present invention;

FIG. 3 shows a schematic structural diagram of a verification module provided by an embodiment of the present invention;

Fig. 4 shows a schematic structural diagram of an electronic signature verification device provided by an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the invention may be embodied in various forms and should not be limited to the embodiments set forth herein.

The electronic signature information contains the signature information of the signer, which converts the traditional method of identification through notes into the method of identification through personal electronic certificates. Signatures to determine whether an individual's signature on a document is valid.

Usually, when viewing a signed document online, the signed document, such as a document in PDF format, is converted into a file stream and sent to the user's front desk. The document is parsed into the browser by means of the original file content. Generally, the content of the original file is the first layer of the layer, and the signed image is the second layer, so that the user can see the image signed by the user on the signed document. If the PDF is parsed through the code insertion component, only the layers in the PDF file can be parsed. Generally, the content of the file is the first layer, and the signature image is the second layer. In this way, the user cannot view the signature information of the document by clicking the image, such as The identity information of the signer, whether the certificate is valid, the signing authority, etc. Therefore, it is impossible to confirm the valid information of the signer’s identity, and it is easy to be counterfeited.

In addition, because the code insertion component cannot perform tamper-proof verification on the file, after the document has been tampered with, the user interface cannot intuitively see the prompt that the document has been tampered with, thus causing the user to use a tampered document.

In the embodiment of the present invention, an electronic signature verification method is proposed. This method can usually be applied to devices such as verification servers. When a user clicks on a signature file through a browser or a document reader, the browser or document reader will go online Connect to the verification server, send verification information to the verification server, and the verification server verifies the electronic signature information by running the method. In order to verify the validity of the electronic signature, the verification server usually also needs to be connected to a server of a third-party authority, such as a server of a certificate authority, a server of a national security management center, or a server of a bank management institution, for verification.

As shown in Figure 1, the electronic signature verification method includes:

Step 101: Obtain the signature flow file of the user's electronic signature information and the picture information of the user's electronic signature;

After the user clicks on the electronic signature information, the user's browser or file reader sends the electronic signature information to the verification server through the network. The verification server receives the electronic signature information, and the electronic signature information usually includes two layers of files, the first layer is the file content, and the second layer is the signature image. The verification server analyzes the user's electronic signature information through code insertion technology, and obtains a signature stream file of the user's electronic signature information. At the same time, the signature picture of the second layer is intercepted through code insertion technology.

Step 102: converting the signature flow file into a PDF signature file;

After the verification server obtains the signature flow file of the user's signature information and the image information of the user's electronic signature, it converts the signature flow file into a PDF signature file. Of course, it can also be converted to files in other formats. Here we take PDF files as an example for illustration.

Step 103: Perform validity verification and tamper-proof verification on the PDF signature file;

After the verification server converts the signature flow file into a PDF signature file, it verifies the PDF signature file. The verification includes validity verification and tamper-proof verification. One is to verify the validity of the signature. verification, and the other is to verify whether the PDF signature file has been tampered with.

Validity check:

The validity verification mainly includes verifying the validity of the ID card, verifying whether the certificate issuing authority in the electronic signature is issued by a national authority, and verifying the name in the signature picture in the electronic signature and the name in the ID card Is it consistent and so on. Validity verification needs to be verified by a certificate authority authorized by the state. Therefore, the verification server needs to send the PDF signature file to the certificate management server, and the certificate management server checks the relevant information in the PDF signature file. Perform a validity check and feed back the check result to the verification server.

Tamper proof verification:

The anti-tampering verification mainly verifies whether the content of the file has been modified. It is necessary to extract the verification information in the PDF signature file, and verify the content of the file through an encryption algorithm. Here, we use the commonly used MD5 algorithm Verify the PDF signature file. The verification server calculates the MD5 value, the user's signature public key in the PDF signature file and the user's private key signature MD5 value in the PDF signature file according to the PDF signature file, and judges whether the above three values have been modified. If yes, it means that the content of the file has been tampered with, if not, it means that the content of the file has not been tampered with.

Step 104: displaying the picture information of the user's electronic signature according to the result of the validity check and the result of the tamper-proof check;

When the verification is completed, the verification server feeds back the verification result to the user browser or file reader, and the verification result is presented in the form of pictures and links, which are used to replace the picture information in the original user's electronic signature .

The verification server converts the electronic signature picture into a picture+link form, and feeds it back to the user's online browsing interface. The logo on the picture can directly view the result of signature verification and the result of file tampering, and the link is used to display all The details of the above-mentioned electronic signature verification.

As can be seen from the above, the electronic signature verification method provided by the embodiment of the present invention connects to an authoritative third-party certificate issuing authority online to perform validity verification, and at the same time, performs tamper-proof verification through an encryption algorithm, which effectively solves the problems in the prior art. There are problems such as counterfeit signatures of others and tampered documents. At the same time, through pictures and links, it provides online authoritative and intuitive online verification results of the validity of the user's electronic signature.

Further, on the basis of the above method embodiments, the embodiment of the present invention proposes an electronic signature verification device 200, as shown in Figure 2, the electronic signature verification device includes:

Code insertion module 201: used to obtain the signature stream file of the user's electronic signature information and the picture information of the user's electronic signature;

Document conversion module 202: for converting the signature flow file into a PDF signature file;

Verification module 203: for performing validity verification and tamper-proof verification on the PDF signature file;

Verification result display module 204: for displaying the picture information of the user's electronic signature according to the result of the validity verification and the result of the tamper-proof verification.

Further, the verification module 203 includes a validity verification unit 2031 and a tamper-resistant verification unit 2032, as shown in Figure 3, the validity verification unit 2031 is used to send the PDF signature file to the certificate management The server; enabling the certificate management server to verify the validity of the PDF signature file. The validity verification mainly includes verifying the validity of the ID card, verifying whether the certificate issuing authority in the electronic signature is issued by a national authority, and verifying the name in the signature picture in the electronic signature and the name in the ID card Is it consistent and so on. Validity verification needs to be verified by a certificate authority authorized by the state. Therefore, the verification server needs to send the PDF signature file to the certificate management server, and the certificate management server checks the relevant information in the PDF signature file. Perform a validity check and feed back the check result to the verification server.

The anti-tampering verification unit 2032 is used to calculate the MD5 value according to the PDF signature file, the user signature public key in the PDF signature file and the user private key signature MD5 value in the PDF signature file, and sign the PDF The file is checked against tampering. The anti-tampering verification mainly verifies whether the content of the file has been modified. It is necessary to extract the verification information in the PDF signature file, and verify the content of the file through an encryption algorithm. Here, we use the commonly used MD5 algorithm Verify the PDF signature file. The verification server calculates the MD5 value, the user's signature public key in the PDF signature file and the user's private key signature MD5 value in the PDF signature file according to the PDF signature file, and judges whether the above three values have been modified. If yes, it means that the content of the file has been tampered with, if not, it means that the content of the file has not been tampered with.

It can be seen from the above that the electronic signature verification device provided by the embodiment of the present invention connects to an authoritative third-party certificate issuing authority online to perform validity verification, and at the same time, performs tamper-proof verification through an encryption algorithm, which effectively solves the problems in the prior art. There are problems such as counterfeit signatures of others and tampered documents. At the same time, through pictures and links, it provides online authoritative and intuitive online verification results of the validity of the user's electronic signature.

Fig. 4 shows a schematic structural diagram of an embodiment of the electronic signature verification device of the present invention, and the specific embodiment of the present invention does not limit the specific implementation of the electronic signature verification device.

As shown in FIG. 4 , the electronic signature verification device may include: a processor (processor) 402 , a communication interface (Communications Interface) 404 , a memory (memory) 406 , and a communication bus 408 .

Wherein: the processor 402 , the communication interface 404 , and the memory 406 communicate with each other through the communication bus 408 . The communication interface 404 is used to communicate with network elements of other devices such as clients or other servers. The processor 402 is configured to execute the program 410, and specifically, may execute relevant steps in the foregoing embodiments of the method for verifying an electronic signature.

Specifically, the program 410 may include program codes including computer-executable instructions.

The processor 402 may be a central processing unit CPU, or an ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement the embodiments of the present invention. One or more processors included in the electronic signature verification device can be the same type of processor, such as one or more CPUs; or different types of processors, such as one or more CPUs and one or more ASICs .

The memory 406 is used to store the program 410 . The memory 406 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

Specifically, the program 410 can be called by the processor 402 to make the electronic signature verification device perform the following operations:

Obtain the signature flow file of the user's electronic signature information and the picture information of the user's electronic signature;

Convert the signature stream file into a PDF signature file;

Perform validity verification and tamper-proof verification on the PDF signature file;

Displaying the picture information of the user's electronic signature according to the result of the validity check and the result of the tamper-proof check.

Further, the acquisition of the signature stream file of the user's electronic signature information and the picture information of the user's electronic signature includes:

Analyze the user's electronic signature information by inserting code, and obtain the signature flow file of the user's electronic signature information;

Extracting the second-layer electronic signature picture of the user's electronic signature information as the picture information of the user's electronic signature.

Further, the verification of the validity of the PDF signature file includes:

Send the PDF signature file to the certificate management server;

The certificate management server verifies the validity of the PDF signature file, and feeds back the verification result.

Further, the tamper-proof verification of the PDF signature file includes:

Calculate the MD5 value, the user's signature public key in the PDF signature file and the user's private key signature MD5 value in the PDF signature file according to the PDF signature file, and perform tamper-proof verification on the PDF signature file.

Further, according to the result of the validity check and the result of the tamper-proof check, the picture information of the user's electronic signature is displayed, including:

Convert the picture information of the user's electronic signature into a picture and a link according to the result of the validity check and the result of the tamper-proof check, the picture is used to display the check result of the electronic signature, and the link is used for Display the electronic signature verification details.

It can be seen from the above that the electronic signature verification device provided by the embodiment of the present invention connects to an authoritative third-party certificate issuing authority online to perform validity verification, and at the same time, performs tamper-proof verification through an encryption algorithm, which effectively solves the problems in the prior art. There are problems such as counterfeit signatures of others and tampered documents. At the same time, through pictures and links, it provides online authoritative and intuitive online verification results of the validity of the user's electronic signature.

An embodiment of the present invention provides a computer-readable storage medium, the storage medium stores at least one executable instruction, and when the executable instruction is run on an electronic signature verification device/device, the electronic signature verification device /The device executes the electronic signature verification method in any of the above method embodiments.

An embodiment of the present invention provides an electronic signature verification device, which is used to implement the above electronic signature verification method.

An embodiment of the present invention provides a computer program, and the computer program can be invoked by a processor to enable an electronic signature verification device to execute the electronic signature verification method in any of the above method embodiments.

An embodiment of the present invention provides a computer program product. The computer program product includes a computer program stored on a computer-readable storage medium. The computer program includes program instructions. The electronic signature verification method in the method embodiment.

To sum up, the electronic signature verification method, device and equipment proposed by the embodiments of the present invention can be placed in the cloud as an independent device, and combined with the PC or app of the user's electronic signature system to provide users with online Authoritative and intuitive online verification of the validity of the user's electronic signature, to prevent users from using electronic documents with invalid signatures or tampered with. Online verification of whether the certificate authority in the signature information is an electronic signature certificate authority authorized by the state, using graphic recognition technology to identify whether the name of the signature and the name of the ID card in the electronic signature information are the same person, to avoid false signatures, and to verify the identity online Validity of the certificate, whether the document has been tampered with, etc., effectively improving the convenience and effectiveness of electronic signatures.

The algorithms or displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, embodiments of the present invention are not directed to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline the present disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the embodiments of the invention are sometimes grouped together into a single implementation examples, figures, or descriptions thereof. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. And form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names. The steps in the above embodiments, unless otherwise specified, should not be construed as limiting the execution order.

Claims (5)

1. An electronic signature verification method, comprising:

the method for acquiring the signature stream file of the user electronic signature information and the picture information of the user electronic signature comprises the following steps: analyzing the user electronic signature information through code insertion to obtain a signature stream file of the user electronic signature information; extracting a second-layer electronic signature picture of the user electronic signature information as picture information of the user electronic signature;

converting the signature stream file into a PDF signature file;

carrying out validity verification and tamper-proof verification on the PDF signature file; the validity check is carried out on the PDF signature file, and the method comprises the following steps: sending the PDF signature file to a certificate management server; the certificate management server performs validity verification on the PDF signature file and feeds back a verification result; the method for carrying out anti-tampering verification on the PDF signature file comprises the following steps: calculating an MD5 value, a user signature public key in the PDF signature file and a user private key signature MD5 value in the PDF signature file according to the PDF signature file, and performing anti-tampering verification on the PDF signature file;

and displaying the picture information of the user electronic signature according to the validity verification result and the anti-tampering verification result.

2. The electronic signature verification method according to claim 1, wherein displaying picture information of the user electronic signature based on the result of the validity verification and the result of the tamper-proof verification includes:

and converting the picture information of the user electronic signature into a picture and a link according to the validity verification result and the anti-tampering verification result, wherein the picture is used for displaying the electronic signature verification result, and the link is used for displaying the electronic signature verification detail.

3. An electronic signature verification apparatus, comprising:

a code insertion module: the method is used for acquiring a signature stream file of user electronic signature information and picture information of the user electronic signature, and comprises the following steps: analyzing the user electronic signature information through code insertion to obtain a signature stream file of the user electronic signature information; extracting a second-layer electronic signature picture of the user electronic signature information as picture information of the user electronic signature;

the document conversion module: the signature stream file is converted into a PDF signature file;

a checking module: the verification system is used for verifying the validity and the anti-tampering of the PDF signature file; the validity check is carried out on the PDF signature file, and the method comprises the following steps: sending the PDF signature file to a certificate management server; the certificate management server carries out validity verification on the PDF signature file and feeds back a verification result; the method for carrying out anti-tampering verification on the PDF signature file comprises the following steps: calculating an MD5 value, a user signature public key in the PDF signature file and a user private key signature MD5 value in the PDF signature file according to the PDF signature file, and performing tamper-proof verification on the PDF signature file;

a verification result display module: and the picture information of the user electronic signature is displayed according to the validity verification result and the anti-tampering verification result.

4. An electronic signature verification apparatus, characterized in that the electronic signature verification apparatus comprises: the system comprises a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface complete mutual communication through the communication bus;

the memory is configured to store at least one executable instruction that causes the processor to perform the electronic signature verification method of any one of claims 1-2.

5. A computer-readable storage medium having stored therein at least one executable instruction that, when executed on a computing device, causes the computing device to perform the electronic signature verification method of any one of claims 1-2.

Images