CN106170006A - A kind of electronic endorsement method for managing security and system - Google Patents
A kind of electronic endorsement method for managing security and system Download PDFInfo
- Publication number
- CN106170006A CN106170006A CN201610867436.XA CN201610867436A CN106170006A CN 106170006 A CN106170006 A CN 106170006A CN 201610867436 A CN201610867436 A CN 201610867436A CN 106170006 A CN106170006 A CN 106170006A
- Authority
- CN
- China
- Prior art keywords
- sign
- file
- electronic endorsement
- encryption
- sponsor
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 34
- 230000005540 biological transmission Effects 0.000 claims abstract description 71
- 230000004044 response Effects 0.000 claims abstract description 13
- 230000037361 pathway Effects 0.000 claims description 12
- 230000000052 comparative effect Effects 0.000 claims description 10
- 230000008569 process Effects 0.000 claims description 7
- 239000000463 material Substances 0.000 description 4
- 238000004891 communication Methods 0.000 description 3
- 230000006835 compression Effects 0.000 description 3
- 238000007906 compression Methods 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000007246 mechanism Effects 0.000 description 3
- 238000012827 research and development Methods 0.000 description 3
- 230000008878 coupling Effects 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000004069 differentiation Effects 0.000 description 2
- 230000000977 initiatory effect Effects 0.000 description 2
- 230000008901 benefit Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000005611 electricity Effects 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 238000007789 sealing Methods 0.000 description 1
- 230000008054 signal transmission Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/06—Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The present invention proposes a kind of electronic endorsement method for managing security, including: the electronic endorsement request of response sponsor, obtain the type of described electronic endorsement and treat sign-off file；Compare type and at least one preset kind of storage of described electronic endorsement；When the type of described electronic endorsement belongs to described preset kind, described in encryption, treat sign-off file.Present invention also offers a kind of electronic endorsement safety management system.This electronic endorsement method for managing security and system identify the type of the electronic endorsement that sponsor initiates automatically, and the importance of this electronic endorsement is judged according at least one preset kind of storage, to the electronic endorsement encrypted transmission belonging to preset kind, thus avoid illegal molecule that important information is stolen, user is caused unnecessary loss.
Description
Technical field
The present invention relates to electronic endorsement technical field, in particular to a kind of electronic endorsement method for managing security and be
System.
Background technology
Flow process is signed for intra-company, it usually needs will file printout be signed out, be then given to each and sign people
Place carries out signing signing and sealing.Such flow process of signing is relatively complicated, and work efficiency is low.Thus, electronic endorsement is arisen at the historic moment.
In recent years, electronic endorsement obtains more coming in the various scenes such as corporate process, sector application, mobile payment and personal information security
The most application.
But existing electronic endorsement signs file by public network transmissions mostly, lack the guarantor that transmission is signed file
Protection mechanism.For enterprise, the financial expense situation of enterprise, project application and research and development document etc. are all the most secret materials
Material, some illegal competitors steal secret frequently by technological means, make victim suffer huge economic loss.
Summary of the invention
The present invention is based on the problems referred to above, it is proposed that a kind of electronic endorsement method to signing file and have protection mechanism
And system.
In view of this, one aspect of the present invention proposes a kind of electronic endorsement method for managing security, including:
The electronic endorsement request of response sponsor, obtains the type of described electronic endorsement and treats sign-off file；
Compare type and at least one preset kind of storage of described electronic endorsement；
When the type of described electronic endorsement belongs to arbitrary described preset kind, described in encryption, treat sign-off file.
Further, also include:
The electronic endorsement request of response sponsor, obtains the sign-off order of at least one approved officer that sponsor is arranged；
According to described sign-off order, generate document conveyance path.
Further, also include:
When the type of described electronic endorsement is not belonging to arbitrary described preset kind, set up according to described document conveyance path
One regular channels；
Treating that sign-off file is to approved officer's end described in the transmission of described regular channels；
When receiving the file of sign-off from approved officer's end, close described regular channels.
Further, described " described in encryption, treating sign-off file " including:
A regular channels is set up according to described document conveyance path；
Described regular channels is encrypted, sets up an encrypted tunnel；
Treating that sign-off file is to approved officer's end described in the transmission of described encrypted tunnel；
When receiving the file of sign-off from approved officer's end, close described encrypted tunnel.
Further, described " described in encryption, treating sign-off file " including:
A regular channels is set up according to described document conveyance path；
Sign-off file encryption is treated to described；
Described regular channels transmit described encryption treat that sign-off file is to approved officer's end；
Receive the file of sign-off of the encryption from approved officer's end, according to association between sponsor and the approved officer of storage
Decruption key, the file decryption of sign-off to described encryption；
Close described regular channels.
Another aspect of the present invention additionally provides a kind of electronic endorsement safety management system, including acquiring unit, memorizer, ratio
Relatively unit and processor.
Described acquiring unit, for responding the electronic endorsement request of sponsor, obtains the type of described electronic endorsement and treats
Sign-off file.
Described comparing unit, presets class for the type of relatively described electronic endorsement and at least the one of described memorizer storage
Type, generates comparative result.
Described processor, for when the type of described electronic endorsement belongs to arbitrary described preset kind, treats described in encryption
Sign-off file.
Further, described acquiring unit is additionally operable to respond the electronic endorsement acquisition request sponsor setting of sponsor extremely
The sign-off order of a few approved officer, and it is sequentially generated document conveyance path according to described sign-off.
Further, also include that transmission unit, described transmission unit include Path Setup module, document transmission module and lead to
Module is closed in road.Path Setup module, for setting up a regular channels according to described document conveyance path.Document transmission module,
Treat that sign-off file to approved officer's end, and receives the literary composition of sign-off from approved officer's end described in send at described regular channels
Part.Pathway closure module, is used for closing described regular channels.
Further, also include that transmission unit, described transmission unit include that Path Setup module, encrypting module, file pass
Defeated module and pathway closure module.Path Setup module, for setting up a regular channels according to described document conveyance path.Encryption
Module, for being encrypted described regular channels, sets up an encrypted tunnel.Document transmission module, for leading in described encryption
Road treats that sign-off file to approved officer's end, and receives the file of sign-off from approved officer's end described in sending.Pathway closure module, uses
In closing described encrypted tunnel.
Further, also including that transmission unit, described transmission unit include Path Setup module, encrypting module, file pass
Defeated module, deciphering module and pathway closure module.Path Setup module, conventional for setting up one according to described document conveyance path
Passage.Encrypting module, for treating sign-off file encryption to described.Document transmission module, for sending institute at described regular channels
That states encryption treats that sign-off file to approved officer's end, and receives the file of sign-off of the encryption from approved officer's end.Deciphering module, uses
The decruption key of association, the file solution of sign-off to described encryption between sponsor and the approved officer that described memorizer stores
Close.Pathway closure module, is used for closing described regular channels.
The electronic endorsement method for managing security of embodiment of the present invention offer and system, identify the electronics that sponsor initiates automatically
The type signed, and judge the importance of this electronic endorsement according at least one preset kind of storage, to belonging to preset kind
Electronic endorsement encrypted transmission, thus avoid illegal molecule that important information is stolen, user is caused unnecessary loss.
For making the above-mentioned purpose of the present invention, feature and advantage to become apparent, preferred embodiment cited below particularly, and coordinate
Appended accompanying drawing, is described in detail below.
Accompanying drawing explanation
In order to be illustrated more clearly that the technical scheme of the embodiment of the present invention, below by embodiment required use attached
Figure is briefly described, it will be appreciated that the following drawings illustrate only certain embodiments of the present invention, and it is right to be therefore not construed as
The restriction of scope, for those of ordinary skill in the art, on the premise of not paying creative work, it is also possible to according to this
A little accompanying drawings obtain other relevant accompanying drawings.
Fig. 1 shows the first pass schematic diagram of a kind of electronic endorsement method for managing security that the embodiment of the present invention provides；
Fig. 2 shows the second procedure schematic diagram of a kind of electronic endorsement method for managing security that the embodiment of the present invention provides；
Fig. 3 shows the structural representation of a kind of electronic endorsement safety management system that the embodiment of the present invention provides.
Main element symbol description:
100-electronic endorsement safety management system；10-acquiring unit；20-memorizer；30-comparing unit；40-transmits single
Unit；41-Path Setup module；42-document transmission module；43-pathway closure module；44-channel encryption module；45-file adds
Close module；46-file decryption module；50-processor.
Detailed description of the invention
For the ease of understanding the present invention, below with reference to relevant drawings, electronic endorsement method for managing security and system are carried out
Become apparent from, be fully described by.Accompanying drawing gives the preferred embodiment of electronic endorsement method for managing security and system.Electronic endorsement
Method for managing security and system can be realized by many different forms, however it is not limited to embodiment described herein.Cause
This, be not intended to limit claimed invention to the detailed description of the embodiments of the invention provided in the accompanying drawings below
Scope, but it is merely representative of the selected embodiment of the present invention.Based on embodiments of the invention, those skilled in the art are not doing
The every other embodiment obtained on the premise of going out creative work, broadly falls into the scope of protection of the invention.
Embodiment 1
Fig. 1 shows the schematic flow sheet of a kind of electronic endorsement method for managing security that the embodiment of the present invention provides.Such as Fig. 1
Shown in, the electronic endorsement method for managing security that the embodiment of the present invention provides, including:
Step S10, the electronic endorsement request of response sponsor, obtain the type of described electronic endorsement and treat sign-off file.
Specifically, response sponsor asks in the electronic endorsement of user terminal, obtains the electronic endorsement of sponsor's initiation
Type, and at least one approved officer that sponsor is arranged.Described user terminal can be mobile phone, computer etc..After login account,
User can be completed by the electronic endorsement webpage being arranged in the electronic endorsement software of user terminal or user terminal browser
Electronic endorsement flow process.According to the position etc. of the importance or approved officer treating sign-off item, sponsor can be by user terminal
Electronic endorsement software design patterns described in electronic endorsement be dissimilar, the artificial director of sign-off that the position selected such as sponsor is the highest
Long, then arranging this electronic endorsement is type A；The electronic endorsement that sponsor initiates relates to business secret, then arrange this electronic endorsement
For type B etc..
Further, response sponsor asks in the electronic endorsement of user terminal, obtain sponsor by mobile network or
What wireless network was uploaded treats sign-off file.Described treat that sign-off file refers to that contract, written request for leave, sample request slip etc. need at least one
The file of approved officer's signature.
Further, the electronic endorsement request of response sponsor, obtain the sign-off of at least one approved officer that sponsor is arranged
Sequentially, and according to described sign-off it is sequentially generated document conveyance path.In some cases, the electronic endorsement that sponsor initiates is same
Time need multiple approved officer to sign, then sponsor need to be according to the Work flow of company, or the position of approved officer, department etc. arrange label
The sign-off order of core people.According to the sign-off order obtained, generate corresponding document conveyance path.Described document conveyance path refers to
Treat sign-off file circulation path between different transmission nodes.Such as, the sign-off order of an electronic endorsement is material portion manager, wealth
Business portion manager, research and development department manager, then corresponding document conveyance path is sponsor's end, material portion handles end, quality portion handles end,
Research and development department manager end, sponsor's end.
The type of step S20, relatively described electronic endorsement and at least one preset kind of storage, generate comparative result.
Specifically, at least one preset kind of server end storage is obtained.Described preset kind is that sign-off file is treated in differentiation
The standard of importance.Compare the type of the electronic endorsement that sponsor initiates and described preset kind, generate comparative result.When described
When the type of electronic endorsement is not belonging to arbitrary described preset kind, represents and treat that sign-off file importance is weak, security work is not done
Require；But when the type of described electronic endorsement belongs to preset kind described in, represent and treat that sign-off file importance is strong, need
Secrecy sign-off etc..
Step S30, when the type of described electronic endorsement belongs to arbitrary described preset kind, treats sign-off literary composition described in encryption
Part.
Specifically, it is not belonging to arbitrary described default class when the type that described comparative result is the electronic endorsement that sponsor initiates
During type, described in normal transmissions, treat sign-off file.A regular channels is set up according to described document conveyance path.Described regular channels is
Do not encrypt, the signal transmission passage of the pretreatment such as scrambling.Treat in regular channels transmission according to the sign-off order that sponsor is arranged
Sign-off file is to each approved officer's end.Preferably, when receive complete, from last approved officer, the file of sign-off signed time,
Close described regular channels, thus save Internet resources.
Further, preset kind described in is belonged to when the type that described comparative result is the electronic endorsement that sponsor initiates
Time, treat sign-off file described in encrypted transmission.Specifically, a regular channels is set up according to described document conveyance path.According to HTTPS
(Hyper Text Transfer Protocol over Secure Socket Layer, hypertext based on SSL passes agreement
Transmission protocol), ssl protocol (Secure Sockets Layer, SSL), ca authentication (Certificate
Authority, Certificate Authority), VPN (Virtual Private Network, Virtual Private Network) or RAR compression encryption etc. adds
Described regular channels is encrypted by close mode, thus sets up an encrypted tunnel, it is ensured that the safety of information.Arrange according to sponsor
In encrypted tunnel transmission, sign-off order treats that sign-off file is to each approved officer's end.Preferably, when receiving from last sign-off
When people completes the file of sign-off signed, close described encrypted tunnel, thus save Internet resources.
Embodiment 2
Fig. 2 shows the schematic flow sheet of a kind of electronic endorsement method for managing security that the embodiment of the present invention provides.Such as Fig. 2
Shown in, the electronic endorsement method for managing security that the embodiment of the present invention provides, including:
Step S1, the electronic endorsement request of response sponsor, obtain the type of described electronic endorsement and treat sign-off file.
Specifically, response sponsor asks in the electronic endorsement of user terminal, obtains the electronic endorsement of sponsor's initiation
Type, at least one approved officer and sponsor that sponsor is arranged treat sign-off literary composition by what mobile network or wireless network were uploaded
Part.Described user terminal can be mobile phone, computer etc..After login account, user can be by being arranged on the electricity of user terminal
The electronic endorsement webpage that son is signed in software or user terminal browser completes electronic endorsement flow process.
Step S2, the electronic endorsement request of response sponsor, the sign-off obtaining at least one approved officer that sponsor is arranged is suitable
Sequence, and it is sequentially generated document conveyance path according to described sign-off.
It should be noted that the execution of step S1 and step S2 order in no particular order.
Specifically, the electronic endorsement request of response sponsor, the sign-off obtaining at least one approved officer that sponsor is arranged is suitable
Sequence, and it is sequentially generated document conveyance path according to described sign-off.In some cases, the electronic endorsement that sponsor initiates is simultaneously
Need multiple approved officer to sign, then sponsor need to be according to the Work flow of company, or the position of approved officer, department etc. arrange sign-off
The sign-off order of people.According to the sign-off order obtained, generate corresponding document conveyance path.
The type of step S3, relatively described electronic endorsement and at least one preset kind of storage, when described electronic endorsement
When type is not belonging to arbitrary described preset kind, perform step S4；When the type of described electronic endorsement belongs to described preset kind
Time, perform step S5.
Specifically, at least one preset kind of server end storage is obtained.Described preset kind is that sign-off file is treated in differentiation
The standard of importance.Compare the type of the electronic endorsement that sponsor initiates and described preset kind.Class when described electronic endorsement
When type is not belonging to arbitrary described preset kind, represents and treat that sign-off file importance is weak, security work is not done requirement etc., performs step
Rapid S4；When the type of described electronic endorsement belongs to described preset kind, represent and treat that sign-off file importance is strong, need for confidentiality label
Core etc., perform step S5.
Step S4, treats sign-off file described in normal transmissions.
Specifically, when the type of the electronic endorsement that sponsor initiates is not belonging to arbitrary described preset kind, normal transmissions
Described treat sign-off file.A regular channels is set up according to described document conveyance path.Exist according to the sign-off order that sponsor is arranged
Regular channels transmission treats that sign-off file is to each approved officer's end.Preferably, complete to sign from last approved officer when receiving
The file of sign-off time, close described regular channels, thus save Internet resources.
Step S5, treats sign-off file described in encrypted transmission.
Specifically, when the type of the electronic endorsement that sponsor initiates belongs to described preset kind, treat described in encrypted transmission
Sign-off file.In the present embodiment, described in encrypted transmission, treat that sign-off file includes two kinds of embodiments.A kind of embodiment is for setting up
One encrypted tunnel, and treating sign-off file described in the transmission of this encrypted tunnel.Specifically, one is set up according to described document conveyance path
Regular channels.According to cipher modes such as HTTPS agreement, ssl protocol, ca authentication, VPN or RAR compression encryptions, described routine is led to
Road is encrypted, thus sets up an encrypted tunnel.Sign-off file is treated extremely in encrypted tunnel transmission according to the sign-off order that sponsor is arranged
Each approved officer's end.Preferably, when receive complete, from last approved officer, the file of sign-off signed time, add described in closedown
Close passage, thus save Internet resources.
Another embodiment is for setting up a regular channels, to described sign-off file encryption for the treatment of, and at described regular channels
Transmit described encryption treats sign-off file.Specifically, a regular channels is set up according to described document conveyance path.Assist according to SSH
View (SecureShell, safety shell protocol), PGP agreement (Pretty Good Privacy, safety encryption), RSA are (asymmetric
AES) or the cipher mode such as user password encryption treat sign-off file encryption to described.Suitable according to the sign-off that sponsor is arranged
In regular channels transmission, sequence treats that sign-off file is to each approved officer's end.When receiving from adding that last approved officer completes to sign
During the close file of sign-off, according to the decruption key of storage, the file decryption of sign-off to described encryption.Described decruption key can
To be password, the password etc. made an appointment between sponsor and approved officer.Preferably, complete when receiving from last approved officer
When becoming the file of sign-off of the encryption signed, close described regular channels, thus save Internet resources.This mode is logical to transmission
Road requires that ratio is relatively low, and file ciphering technology is compared channel encryption technology and is easier to realize.
Embodiment 3
Fig. 3 shows the structural representation of a kind of electronic endorsement safety management system that the embodiment of the present invention provides.Such as Fig. 3
Shown in, a kind of electronic endorsement safety management system 100 that the embodiment of the present invention provides, including acquiring unit 10, memorizer 20, ratio
Relatively unit 30, transmission unit 40 and processor 50.Acquiring unit 10, memorizer 20, comparing unit 30 and transmission unit 40 all with
Processor 50 communicates to connect.
Acquiring unit 10, for responding the electronic endorsement request of sponsor, obtains the type of described electronic endorsement and treats sign-off
File, obtains the sign-off order of at least one approved officer that sponsor is arranged, and is sequentially generated file transmission road according to described sign-off
Footpath.
Specifically, according to the position etc. of the importance or approved officer treating sign-off item, sponsor can pass through user terminal
On electronic endorsement software design patterns described in electronic endorsement be dissimilar.Processor 50 controls acquiring unit 10 and responds sponsor's
Electronic endorsement is asked, and obtains the type of the electronic endorsement that sponsor initiates.Meanwhile, processor 50 controls acquiring unit 10 acquisition
Play people and treat sign-off file by what mobile network or wireless network were uploaded.Described treat that sign-off file refers to contract, written request for leave, sample
Request slips etc. need the file of at least one approved officer's signature.Further, in some cases, the electronics label that sponsor initiates
Batch simultaneously need to multiple approved officer signature, then sponsor need to be according to the Work flow of company, or the position of approved officer, department etc. set
Put the sign-off order of approved officer.The sign-off that processor 50 controls at least one approved officer that acquiring unit 10 obtains sponsor's setting is suitable
Sequence, and it is sequentially generated document conveyance path according to described sign-off.Described document conveyance path refers to treat that sign-off file is in not simultaneous interpretation
Defeated internodal circulation path.
Memorizer 20 is for storage at least one preset kind.Described preset kind is the mark distinguished and treat sign-off file importance
Standard, such as relating to the type treating sign-off file of business secret etc. is a preset kind.
Comparing unit 30, for comparing the type of the electronic endorsement that sponsor initiates and described preset kind, generates and compares knot
Really.
Transmission unit 40 treats sign-off file described in being used for transmitting.
In the present embodiment, transmission unit 40 includes Path Setup module 41, document transmission module 42 and pathway closure module
43.Path Setup module 41 is for setting up a regular channels according to described document conveyance path.Document transmission module 42 is used for
Described regular channels treats that sign-off file to approved officer's end, and receives the file of sign-off from approved officer's end described in sending.Passage
Close module 43 to be used for closing described regular channels.
Further, transmission unit 40 also includes channel encryption module 44.Channel encryption module 44 is for described routine
Passage is encrypted and safety certification, sets up an encrypted tunnel.Document transmission module 42 is additionally operable to send at described encrypted tunnel
Described treat that sign-off file to approved officer's end, and receives the file of sign-off from approved officer's end.Pathway closure module 43 is additionally operable to
Close described encrypted tunnel.
Processor 50 is for controlling to wait to sign described in transmission unit 40 encrypted transmission or normal transmissions according to described comparative result
Core file.
The type that comparative result is the electronic endorsement that sponsor initiates generated when comparing unit 30 is not belonging to memorizer 20
During the arbitrary preset kind stored, processor 50 controls to treat sign-off file described in transmission unit 40 normal transmissions.Specifically, process
Device 50 controls Path Setup module 41 and sets up a regular channels according to described document conveyance path, and controls document transmission module 42
Treat that sign-off file is to each approved officer's end according to the sign-off order that sponsor is arranged in regular channels transmission.Preferably, file is worked as
Transport module 42 receive from last approved officer complete the file of sign-off signed time, processor 50 controls pathway closure mould
Block 43 closes described regular channels, thus saves Internet resources.
Deposit when the type that comparative result is the electronic endorsement that sponsor initiates of comparing unit 30 generation belongs to memorizer 20
During the preset kind stored up, processor 50 controls to treat sign-off file described in transmission unit 40 encrypted transmission.Specifically, processor 50
Control Path Setup module 41 and set up a regular channels according to described document conveyance path, and control channel encryption module 44 basis
Described regular channels is encrypted by the cipher modes such as HTTPS agreement, ssl protocol, ca authentication, VPN or RAR compression encryption, thus builds
A vertical encrypted tunnel.Processor 50 controls the sign-off order that document transmission module 42 arranges according to sponsor to be transmitted at encrypted tunnel
Treat that sign-off file is to each approved officer's end.Preferably, complete to sign from last approved officer when document transmission module 42 receives
During the file of sign-off criticized, processor 50 controls pathway closure module 43 and cuts out described encrypted tunnel, thus saves Internet resources.
In another embodiment, transmission unit 40 also includes file encryption module 45 and file decryption module 46.File encryption
Module 45 is for treating sign-off file encryption to described.Document transmission module 42 is additionally operable to send described encryption at described regular channels
Treat that sign-off file to approved officer's end, and receives the file of sign-off of the encryption from approved officer's end.File decryption module 46 is used
The decruption key of association, the file solution of sign-off to described encryption between sponsor and the approved officer that described memorizer stores
Close.
Correspondingly, the type that comparative result is the electronic endorsement that sponsor initiates generated when comparing unit 30 belongs to storage
During the preset kind that device 20 stores, processor 50 controls to treat sign-off file described in transmission unit 40 encrypted transmission.Specifically, place
Reason device 50 controls Path Setup module 41 and sets up a regular channels according to described document conveyance path, and controls file encryption module
45 treat sign-off file encryption according to cipher modes such as SSH agreement, PGP mechanism, RSA Algorithm or user password encryptions to described.Place
Reason device 50 controls the sign-off order that document transmission module 42 arranges according to sponsor to be transmitted at regular channels and treats that sign-off file is to often
One approved officer's end.The file of sign-off of the encryption signed is completed from last approved officer when document transmission module 42 receives
Time, processor 50 controls the decruption key that file decryption module 46 stores according to memorizer 20, the literary composition of sign-off to described encryption
Part is deciphered.Described decruption key can be the password of pre-agreement, password etc. between sponsor and approved officer.Preferably, file is worked as
When transport module 42 receives the file of sign-off of the encryption completing to sign from last approved officer, processor 50 controls passage
Close module 43 and close described regular channels, thus save Internet resources.
The electronic endorsement method for managing security of embodiment of the present invention offer and system, identify the electronics that sponsor initiates automatically
The type signed, and judge the importance of this electronic endorsement according at least one preset kind of storage, to belonging to preset kind
Electronic endorsement encrypted transmission, thus avoid illegal molecule that important information is stolen, user is caused unnecessary loss.
The system that the embodiment of the present invention is provided, it realizes principle and the technique effect of generation and preceding method embodiment phase
With, for briefly describing, the not mentioned part of system embodiment part, refer to corresponding contents in preceding method embodiment.
In all examples being illustrated and described herein, any occurrence should be construed as merely exemplary, and not
It is that therefore, other examples of exemplary embodiment can have different values in order to limit.It should also be noted that similar label and word
Female expression similar terms in following accompanying drawing, therefore, is defined in the most a certain Xiang Yi accompanying drawing, then in accompanying drawing subsequently
Need not it be defined further and explains.
In several embodiments provided herein, it should be understood that disclosed device can be by other side
Formula realizes.Device embodiment described above is only that schematically such as, the division of described unit, the most only one are patrolled
Volume function divides, and actual can have other dividing mode when realizing, the most such as, multiple unit or assembly can in conjunction with or can
To be integrated into another system, or some features can be ignored, or does not performs.Another point, shown or discussed each other
Coupling direct-coupling or communication connection can be the INDIRECT COUPLING by some communication interfaces, device or unit or communication link
Connect, can be electrical, machinery or other form.
The described unit illustrated for separating component can be or may not be physically separate, shows for unit
Parts can be or may not be physical location, i.e. may be located at a place, or can also be distributed to multiple network
On unit.Some or all of unit therein can be selected according to the actual needs to realize the purpose of the present embodiment scheme.
It addition, each functional unit in each embodiment of the present invention can be integrated in a processing unit, it is also possible to
It is that unit is individually physically present, it is also possible to two or more unit are integrated in a unit.
The above, the only detailed description of the invention of the present invention, but protection scope of the present invention is not limited thereto, and any
Those familiar with the art, in the technical scope that the invention discloses, can readily occur in change or replace, should contain
Cover within protection scope of the present invention.Therefore, protection scope of the present invention should described be as the criterion with scope of the claims.
Claims (10)
1. an electronic endorsement method for managing security, it is characterised in that including:
The electronic endorsement request of response sponsor, obtains the type of described electronic endorsement and treats sign-off file；
Compare type and at least one preset kind of storage of described electronic endorsement；
When the type of described electronic endorsement belongs to arbitrary described preset kind, described in encryption, treat sign-off file.
Electronic endorsement method for managing security the most according to claim 1, it is characterised in that also include:
The electronic endorsement request of response sponsor, obtains the sign-off order of at least one approved officer that sponsor is arranged；
According to described sign-off order, generate document conveyance path.
Electronic endorsement method for managing security the most according to claim 2, it is characterised in that also include:
When the type of described electronic endorsement is not belonging to arbitrary described preset kind, set up one according to described document conveyance path normal
Rule passage；
Treating that sign-off file is to approved officer's end described in the transmission of described regular channels；
When receiving the file of sign-off from approved officer's end, close described regular channels.
Electronic endorsement method for managing security the most according to claim 2, it is characterised in that described " treat sign-off described in encryption
File " including:
A regular channels is set up according to described document conveyance path；
Described regular channels is encrypted, sets up an encrypted tunnel；
Treating that sign-off file is to approved officer's end described in the transmission of described encrypted tunnel；
When receiving the file of sign-off from approved officer's end, close described encrypted tunnel.
Electronic endorsement method for managing security the most according to claim 2, it is characterised in that described " treat sign-off described in encryption
File " including:
A regular channels is set up according to described document conveyance path；
Sign-off file encryption is treated to described；
Described regular channels transmit described encryption treat that sign-off file is to approved officer's end；
Receive the file of sign-off of the encryption from approved officer's end, according to the deciphering of association between sponsor and the approved officer of storage
Key, the file decryption of sign-off to described encryption；
Close described regular channels.
6. an electronic endorsement safety management system, it is characterised in that include acquiring unit, memorizer, comparing unit and process
Device,
Described acquiring unit, for responding the electronic endorsement request of sponsor, obtains the type of described electronic endorsement and treats sign-off
File；
Described comparing unit, for type and at least one preset kind of described memorizer storage of relatively described electronic endorsement,
Generate comparative result；
Described processor, for when the type of described electronic endorsement belongs to arbitrary described preset kind, treats sign-off described in encryption
File.
Electronic endorsement safety management system the most according to claim 6, it is characterised in that described acquiring unit is additionally operable to ring
Answer the sign-off order of at least one approved officer that the electronic endorsement acquisition request sponsor of sponsor arranges, and suitable according to described sign-off
Sequence generates document conveyance path.
Electronic endorsement safety management system the most according to claim 7, it is characterised in that also include transmission unit, described
Transmission unit includes:
Path Setup module, for setting up a regular channels according to described document conveyance path；
Document transmission module, for described regular channels send described in treat sign-off file to approved officer's end, and receive from label
The file of sign-off of core people's end；
Pathway closure module, is used for closing described regular channels.
Electronic endorsement safety management system the most according to claim 7, it is characterised in that also include transmission unit, described
Transmission unit includes:
Path Setup module, for setting up a regular channels according to described document conveyance path；
Encrypting module, for being encrypted described regular channels, sets up an encrypted tunnel；
Document transmission module, for described encrypted tunnel send described in treat sign-off file to approved officer's end, and receive from label
The file of sign-off of core people's end；
Pathway closure module, is used for closing described encrypted tunnel.
Electronic endorsement safety management system the most according to claim 7, it is characterised in that also include transmission unit, described
Transmission unit includes
Path Setup module, for setting up a regular channels according to described document conveyance path；
Encrypting module, for treating sign-off file encryption to described；
Document transmission module, for described regular channels send described encryption treat sign-off file to approved officer's end, and receive
The file of sign-off from the encryption of approved officer's end；
Deciphering module, the decruption key of association between the sponsor stored for described memorizer and approved officer, to described encryption
The file decryption of sign-off；
Pathway closure module, is used for closing described regular channels.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610867436.XA CN106170006A (en) | 2016-09-29 | 2016-09-29 | A kind of electronic endorsement method for managing security and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610867436.XA CN106170006A (en) | 2016-09-29 | 2016-09-29 | A kind of electronic endorsement method for managing security and system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106170006A true CN106170006A (en) | 2016-11-30 |
Family
ID=57376490
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610867436.XA Pending CN106170006A (en) | 2016-09-29 | 2016-09-29 | A kind of electronic endorsement method for managing security and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106170006A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114710371A (en) * | 2022-06-08 | 2022-07-05 | 深圳市乐凡信息科技有限公司 | Method, device, equipment and storage medium for safely signing electronic data |
| CN115086309A (en) * | 2022-06-08 | 2022-09-20 | 北京点聚信息技术有限公司 | Method and system for multi-terminal hand-written electronic signature |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1334526A (en) * | 2000-07-13 | 2002-02-06 | 珠海传奇网络科技有限公司 | Paperless office system |
| CN101908957A (en) * | 2009-06-04 | 2010-12-08 | 机骏电脑有限公司 | Mobile electronic file safety transmission system |
| CN102781001A (en) * | 2011-05-10 | 2012-11-14 | 中兴通讯股份有限公司 | Method for encrypting built-in file of mobile terminal and mobile terminal |
| CN105227578A (en) * | 2015-10-28 | 2016-01-06 | 广东欧珀移动通信有限公司 | Encryption and decryption method and encryption and decryption device for transmission files |
-
2016
- 2016-09-29 CN CN201610867436.XA patent/CN106170006A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1334526A (en) * | 2000-07-13 | 2002-02-06 | 珠海传奇网络科技有限公司 | Paperless office system |
| CN101908957A (en) * | 2009-06-04 | 2010-12-08 | 机骏电脑有限公司 | Mobile electronic file safety transmission system |
| CN102781001A (en) * | 2011-05-10 | 2012-11-14 | 中兴通讯股份有限公司 | Method for encrypting built-in file of mobile terminal and mobile terminal |
| CN105227578A (en) * | 2015-10-28 | 2016-01-06 | 广东欧珀移动通信有限公司 | Encryption and decryption method and encryption and decryption device for transmission files |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114710371A (en) * | 2022-06-08 | 2022-07-05 | 深圳市乐凡信息科技有限公司 | Method, device, equipment and storage medium for safely signing electronic data |
| CN114710371B (en) * | 2022-06-08 | 2022-09-06 | 深圳市乐凡信息科技有限公司 | Method, device, equipment and storage medium for safely signing electronic data |
| CN115086309A (en) * | 2022-06-08 | 2022-09-20 | 北京点聚信息技术有限公司 | Method and system for multi-terminal hand-written electronic signature |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10601801B2 (en) | Identity authentication method and apparatus | |
| EP3723399A1 (en) | Identity verification method and apparatus | |
| EP2544117A1 (en) | Method and system for sharing or storing personal data without loss of privacy | |
| CA3178204A1 (en) | Secure messaging between cryptographic hardware modules | |
| JP7662241B2 (en) | Cybersecurity method and system based on multi-party and multi-factor dynamic strong cryptographic authentication | |
| CN105553951A (en) | Data transmission method and data transmission device | |
| CN108632250B (en) | Method and equipment for generating command control session master key and transmitting operation command | |
| CN109951513B (en) | Quantum-resistant computing smart home quantum cloud storage method and system based on quantum key card | |
| CN105516157A (en) | Independent encryption based network information safe input system and method | |
| CN104901935A (en) | Bilateral authentication and data interaction security protection method based on CPK (Combined Public Key Cryptosystem) | |
| CN111143474B (en) | A method of one-click exchange and binding of mobile phone numbers based on blockchain technology | |
| CN107483383A (en) | A kind of data processing method, terminal and background server | |
| CN1910531B (en) | Method and system for key control of data resources and related network | |
| CN105282179A (en) | Family Internet of things security control method based on CPK | |
| CN102118385A (en) | Security domain management method and device | |
| CN104901803A (en) | Data interaction safety protection method based on CPK identity authentication technology | |
| CN108134671A (en) | A kind of transparent encryption system and its encipher-decipher method based on quantum true random number | |
| CN104424446A (en) | Safety verification and transmission method and system | |
| CN117081736A (en) | Key distribution method, key distribution device, communication method and communication device | |
| US9419800B2 (en) | Secure network systems and methods | |
| CN112651049B (en) | Privacy data sharing method and system based on block chain | |
| CN106170006A (en) | A kind of electronic endorsement method for managing security and system | |
| CN110650012A (en) | Improved SDN network attack detection method and system | |
| CN106209384B (en) | Use the client terminal of security mechanism and the communication authentication method of charging unit | |
| CN105591748A (en) | Authentication method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20190222 Address after: Room 201, Building A, No. 1 Qianwan Road, Qianhai Shenzhen-Hong Kong Cooperation Zone, Shenzhen, Guangdong 518000 Applicant after: Hengda Wisdom Technology Co., Ltd. Address before: 510000 Room 3601, 78 Huangpu Avenue West, Tianhe District, Guangzhou City, Guangdong Province Applicant before: Guangzhou crane Internet Technology Co., Ltd. |
|
| TA01 | Transfer of patent application right | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20161130 |
|
| RJ01 | Rejection of invention patent application after publication |