TWI690192B - System and method for providing signature objects in order to produce signature documents in order - Google Patents

Abstract

A system for providing signature entities to sign an electronic document in order for generating a signed document and a method thereof are provided. By defining a signature sequence based on a category of an original document and generating a target document included the original document and the signature sequence by a document server, providing signature entities to sign the target document according to the order on the signature sequence for generating a signed document by a signature server, and transmitting the signed document from the signature server to at least one of the signature entities, the system and the method can make sure electronic document will not be replaced, and can achieve the effect of stamping in electronic document.

Description

System and method for providing signature objects in order to produce signature documents in order

A document signature system and method, in particular, a system and method for providing signature objects in order to produce signature documents in sequence.

The preservation of documents printed on paper requires a suitable environment, otherwise the paper is susceptible to contamination, and in addition to environmental factors, paper documents also require space to be saved, so the preservation of paper documents needs certain the cost of.

With the rapid development of information processing technology and communication technology, electronic files are not easy to be damaged due to environmental factors, and almost no storage space is required, which results in the trend of paper files gradually becoming electronic files. However, in contrast, electronic documents are easier to steal, tamper with, or forge than paper documents, which means that electronic documents are also less secure than paper documents.

Therefore, at present, for the prevention of theft of electronic files, encryption and decryption technology can be used to encrypt electronic files to ensure the security of electronic files, and for the prevention of forgery or tampering of electronic files, digital signature technology can be used to ensure electronic files Correctness.

However, in some cases, the electronic document may have been replaced before being signed. For example, when the user operates the client to connect to the server provided by the electronic document provider, the user may not be able to confirm the process with the naked eye. The content of the electronic file of the signature operation, therefore, the intentional person can allow the content of the file viewed by the user to be different from the content of the electronic file being signed, causing loss to the user.

In summary, it can be seen that in the prior art, there has been a long-standing problem that electronic files may be replaced before the signature, so it is necessary to propose improved technical means to solve this problem.

In view of the problem that the electronic file may be replaced before the signature in the prior art, the present invention discloses a system and method for sequentially providing the signature object signature to generate the signature file, in which:

The system disclosed in the present invention for providing signature objects in order to produce signature files in sequence includes at least: a client for providing content parameters; a file host for obtaining original documents and defining signatures according to the category of the original documents Chapter sequence, and used to generate the target document including the signature sequence and the original document, and generate document identification data corresponding to the target document, where the original document contains content parameters; the signature server is used to receive the document host Target document and document identification data, and used to provide multiple signature objects in sequence according to the signature sequence to sign the electronic file to generate a signature file, and send the signature file to the client, where the signature object includes the client And the signing server, the signing document contains the visual data of the document identification data generated by the signing object, and the first signing object indicated in the signing order signs the electronic document, the electronic document is the target document, When the non-first signing object indicated in the signing order signs the electronic document, the electronic file is the operation document generated after the signing order indicates the signing order before the signing object; the checking server is used to receive And save the signature document sent by the signature server.

The method disclosed in the present invention for providing signature object signatures in sequence to generate signature files, the steps at least include: the file host obtains the original file, the original file contains the content parameters provided by the client; the file host depends on the type of the original file Define the signature sequence; the document host generates a target document containing the signature sequence and the original document, and generates document identification data corresponding to the target document, and sends the target document and document identification data to the signature server; the signature server is based on the signature Chapter order provides multiple signature objects to sign electronic documents to generate signature files. The signature object includes at least one client and signature server, and the signature file includes the identification of the document generated by the signature object When data is visualized, and the first signing object indicated in the signing order signs the electronic file, the electronic file is the target file, and the signing order indicates that the non-first signing object signs the electronic file. , The electronic document is the operation document generated after the previous signing object indicates the signature in the order of signature; the signature server sends the signature document to the storage server for storage, and sends the signature document to the client.

The system and method disclosed by the present invention are as above, and the difference between the present technology and the prior art is that the present invention defines the signature order according to the category of the original document obtained by the document host and generates a target document including the original document and the signature order. The server sequentially provides the electronic file containing the target document to the signature object for signature in accordance with the signature sequence to generate the signature document, and then sends the signature document to the user or owner of the signature object for storage to solve the prior art The existing problems can achieve the technical effect of providing approximate seals in electronic files.

The following will describe the features and implementations of the present invention in detail with reference to the drawings and examples. The content is sufficient for any person skilled in the relevant arts to easily fully understand and implement the technical means applied to solve the technical problems of the present invention and implement accordingly, thereby realizing The achievable effect of the invention.

The invention can control the electronic document to be signed to be transferred between the signing objects according to the order of signing by the signing server, and restricts that the electronic document can only be signed by a specific computing device or application to ensure the signing The electronic documents of the chapter will not be modified by users of the computing device or application, and at the same time, the electronic documents to be signed will not be replaced by the document provider. In addition, the present invention can also provide a client to confirm whether the content of the file in the signed signature file matches the original content.

The signing sequence mentioned in the present invention can record the order of signing objects, where the signing objects are computing devices and/or applications that need to sign electronic files, and the signing objects are corresponding object identification data Said.

The computing device mentioned in the present invention includes but is not limited to one or more processors, one or more memory modules, and a bus that connects different components (including memory modules and processors). Through the included multiple components, the computing device can load and execute the operating system, so that the operating system runs on the computing device. For example: personal computers, notebook computers, mobile phones, tablets, smart watches, navigation devices, digital cameras, TVs, projectors, e-book readers, multimedia players, TV games, electronic dictionaries, car computers, etc., but The invention is not limited to this.

The bus of the computing device mentioned in the present invention may include one or more types, for example, including a data bus, an address bus, a control bus, and an extended function bus ( Expansion bus), and/or local bus (local bus) and other types of bus. Computing equipment buses include but are not limited to parallel industrial standard architecture (ISA) buses, peripheral component interconnect (PCI) buses, video electronics standards association (VESA) local buses, and serial universal serial buses (USB), fast peripheral component interconnect (PCI-E) bus, etc.

The processor of the computing device mentioned in the present invention is coupled to the bus. The processor includes a register group or register space. The register group or register space can be completely set on the processing wafer, or all or part of it can be set outside the processing wafer and connected via a dedicated electrical connection. And/or coupled to the processor via a bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through the bus.

The processor of the computing device may be coupled to the chipset or electrically connected to the chipset through the bus. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and peripheral I/O controller, that is, the memory controller and peripheral I/O controller can be included in Within an integrated circuit, two or more integrated circuits can also be used. The chipset usually provides I/O and memory management functions, and provides multiple general-purpose and/or dedicated registers, timers, etc. Among them, the above-mentioned general-purpose and/or dedicated registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above memory module includes any type of volatile memory (volatile memory) and/or non-volatile (non-volatile memory, NVRAM) memory, such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned mass storage area may include any type of storage device or storage medium, for example, hard disk drive, optical disc, tape drive, flash drive (flash memory), solid state drive (Solid State Disk, SSD), or any Other storage devices, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard drives, and solid state drives.

The processor of the computing device can also communicate with peripheral devices such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through peripheral I/O busses through peripheral I/O controllers. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, trackpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, printer, etc., peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface may include a wireless communication interface and/or a wired communication interface. The wireless communication interface may include a wireless communication network supporting Wi-Fi, Zigbee, etc., Bluetooth, infrared, near field communication (NFC), 3G/4G/5G and other mobile communication networks The interface of wireless communication or other wireless data transmission protocol, wired communication interface can be Ethernet equipment, asynchronous transmission mode (ATM) equipment, DSL modem, cable modem, etc. The processor can periodically poll various peripheral devices and interfaces so that the computing device can input and output data, and can also communicate with another computing device having the components described above.

In the following, the system architecture diagram of providing the signature object signature in order to generate the signature file in order according to the invention provided by the "Figure 1" of the present invention will be described first to illustrate the system operation of the present invention. As shown in "Figure 1", the system of the present invention includes a document host 120, a signature server 130, a client 150, an inspection server 160, and a notarization server 170 that can be attached. Among them, the document host 120, the signature server 130, the client 150, the inspection server 160, and the notary server 170 are all computing devices, and in practice, the document host 120, the signature server 130, and the inspection server The functions provided by 160 can be arbitrarily distributed to multiple different computing devices or combined in the same computing device.

The file host 120 may be connected to the signature server 130. In some embodiments, the file host 120 may also be connected to the inventory server 160. The document host 120 can send data or signals to the signature server 130 and the check server 160, and can also receive data or signals sent by the check server 160. The document host 120 can be connected to the signature server 130 and the search server 160 through a communication interface using a wired network or a wireless network, and the invention is not particularly limited.

The document host 120 is responsible for receiving the original documents provided by the service server 400, and is responsible for determining the signature object according to the type of the obtained original document, and defining the signature sequence of each signature object. The signature object mentioned in the present invention includes the client 150 and the signature server 130. In some embodiments, the signature object may further include the notary server 170.

The file host 120 is also responsible for generating the target file and the file identification data corresponding to the target file, wherein the target file generated by the file host contains the defined signature sequence and the original file obtained from the service server 400; The file identification data can be generated by arbitrarily arranging any number of words, letters, numbers, and symbols. Generally speaking, the file identification data is a unique value, which means that the file identification data corresponding to the target file is usually not repeated.

The document host 120 can receive the access parameters sent by the service server 400, and can set the access authority of the generated target document according to the received access parameters, or can send the set access authority to the search server Device 160 stores. The access authority set by the file host 120 may be an accessible identity authority, for example, no one can access the target document or only a specific person can access the target document; , Such as limiting the number of accesses per unit time such as daily or hourly. However, the access rights mentioned in the present invention are not limited to the above, and any conditions that can be used to limit access to the target file can be used as access rights in the present invention. The possibility of sensitive information being exposed.

In some embodiments, the document host 120 may store the generated target document or the signature document transmitted from the search server 160. The file host 120 may also send the generated access authority to the search server 160 for storage.

The signing server 130 may be connected to the client 150, the document host 120, the checking server 160, and the notary server 170. The signature server 130 can send data or signals to the client 150, the document host 120, the search server 160, and the notary server 170, and can also receive the client 150, the document host 120, the search server 160, and the notary server 170 The data or signal transmitted. The signature server 130 can be connected to the client 150, the document host 120, the search server 160, and the notary server 170 through a communication interface using a wired network or a wireless network, and the invention is not particularly limited.

The signature server 130 is responsible for receiving the target file transmitted by the file host 120 and the file identification data corresponding to the target file. The signature server 130 is also responsible for providing the electronic documents in sequence with each signature object represented in the signature sequence according to the signature sequence recorded in the target document, so that each signature object signs the electronic file to generate a new electronic signature file. Among them, the new electronic file generated by the signature object includes the electronic file signed by the signature object and the signature data generated by the signature. It is worth mentioning that when the signing object is the signing server 130 itself, the signing server 130 can sign the electronic document to generate a new electronic document.

It should be noted that, in the present invention, if the signing object for signing an electronic file is the first signing object indicated in the signing order, the signed electronic file is provided by the file host 120 to the signing servo The target file of the device 130, the new electronic file generated is called "operation file" in the present invention; if the signing object is the last signing object indicated in the signing order, the signed electronic file is the signing In the order of chapters, the working document generated after another signing object arranged before the signing object is signed, the new electronic file generated is called "signing document" in the present invention; and if the signing object When it is not the first signing object indicated in the signing order or the last signing object, the electronic file to be signed is another signing object arranged before the signing object in the signing sequence after signing The generated operation file and the new electronic file generated are also new operation files. For example, if the three signature objects recorded in the signature sequence are the first device, the second device, and the third device, respectively, the signature server 130 may first provide the target file to the first device to generate the signature An operation document, and then, the signature server 130 may provide the first operation document to the second device for signature to generate the second operation document, and finally, the signature server 130 may provide the second operation document to the third device To produce a signature document.

In addition, when the signing object is not the first signing object indicated in the signing order, the signing object can also confirm whether the operation file has been altered before signing, and arrange the signing before the signing order Whether the signature of the subject is indeed completed. For example, when the three signature objects recorded in the signature sequence are the first device, the second device, and the third device, the second device can confirm whether the received job file has been altered and confirm the received Whether the received operation file contains the signature of the first device; the third device can confirm whether the received operation file has been altered, and confirm whether the received operation file contains the signature of the first device and the second device chapter.

In some embodiments, the signature server 130 can also send the document identification data generated by the document host 120 to the signature object, so that the signature object can generate visual data before or after the electronic document is signed, And the generated visual data can be added to the new electronic file generated by the signature object. The visualization data mentioned in the present invention is data that can record the document identification data received from the signature server 130, for example, graphics or barcodes, but the present invention is not limited to this. The visual data can even be embedded with graphics, symbols, signs, trademarks, etc. corresponding to the signature object, which can represent the signature object.

The signature server 130 is also responsible for transmitting the signature file to the client 150 and the check server 160.

In some embodiments, the signature server 130 may also encrypt the document identification data generated by the document host 120.

The client 150 may be a specific computing device dedicated to the present invention, may also be an application program installed in a general computing device compatible with the present invention, or may be a general computing device containing a specific circuit compatible with the present invention.

The client 150 can be connected to the signature server 130, the registration server 160, and the notary server 170, and can send data or signals to the signature server 130, the registration server 160, and the notary server 170, and can also receive signatures The data or signals transmitted by the chapter server 130, the search server 160, and the notary server 170. The client 150 can be connected to the signature server 130, the search server 160, and the notary server 170 through a communication interface using a wired network or a wireless network, and the invention is not particularly limited.

The client 150 may provide content parameters, and may also provide access parameters. In some embodiments, the client 150 can confirm the content of the document through the service server 400 and send the content parameters (and access parameters) to the service server 400, so that the service server 400 generates content including the content provided by the client 150 The original file of the parameter, and send the generated original file (and the access parameter) to the file host 120.

The client 150 is also responsible for receiving the electronic file transmitted by the signature server 130, and is responsible for signing the received electronic file, thereby generating a new electronic file. The client 150 is also responsible for returning the new electronic document generated to the signature server 130.

The client 150 may also receive the file identification data corresponding to the received electronic file when receiving the electronic file transmitted by the signature server 130. The client 150 can also generate visual data according to the received document identification data before or after signing the received electronic document, and can add the generated visual data to the new one generated after signing In electronic files.

The client 150 is also responsible for receiving the signature file transmitted by the signature server 130.

In some embodiments, the client 150 can also obtain the document identification data recorded in the visualization data according to the visualization data contained in the signature document, and can transmit the obtained document identification data to the notary server 170. Generally speaking, the client 150 can scan or retrieve the visualization data in the signature document to obtain the document identification data recorded in the visualization data.

The client 150 may also receive the token transmitted by the notary server 170. The tokens mentioned in the present invention are time-sensitive materials and can be formed by arbitrarily arranging any number of letters, numbers, and symbols.

The client 150 can also send the document identification data obtained through the visualization data and the tokens received from the notary server 170 to the inventory server 160, and can receive the target corresponding to the acquired document identification data sent by the inventory server 160 file.

The search server 160 can be connected to the client 150, the document host 120, the signature server 130, and the notary server 170, and can send data or signals to the client 150, the document host 120, and the notary server 170, and can also receive clients The data or signals transmitted by the terminal 150, the document host 120, the signature server 130, and the notary server 170. Among them, the storage server 160 can be connected to the client 150, the document host 120, the signature server 130, and the notary server 170 through a communication interface using a wired network or a wireless network, and the invention is not particularly limited.

The inventory server 160 is responsible for receiving the signature document transmitted by the signature server 130, and may store the received signature document. The search server 160 can also receive the access authority of the target document transmitted by the document host 120.

It is worth mentioning that the checking server 160 can only store the target document related information of the target document included in the signature document, and can store the received signature document to the document host 120. The target document related information stored in the search server 160 includes but is not limited to the document identification data corresponding to the target document, the creation date of the target document, the status of the target document, and the access authority of the target document.

In some embodiments, the inventory server 160 can receive the document identification data transmitted by the notary server 170, and determine whether the target document corresponding to the received document identification data can be accessed in real time, that is, to determine the document Whether the target file corresponding to the identification data is being stored in the search server 160 (or the file host 120). Among them, the search server 160 can make judgments based on data such as the creation date of the target document, the status of the target document, and/or the access permission of the target document in the stored information about the target document, or can directly try in the storage medium The target document is searched, but the way that the inventory server 160 determines whether the target document can be accessed in real time is not limited to the above.

The checking server 160 may also send the judgment result when the target document corresponding to the received document identification data can be accessed in real time to the notary server 170. The search server 160 can also generate an identity verification message when the access permission of the target document in the stored target document related information indicates that identity verification is required, and send the generated identity verification message together with the above-mentioned judgment result to the Notary server 170. The identity verification message includes any data used to allow the user to complete the identity verification. For example, the identity verification message may include a verification method and related information. For example, the verification method may be certificate verification or account password verification. The relevant message may also be a certificate that can be used, or an account password for verification, etc., but the identity verification message is not limited to the above.

The checking server 160 can also receive the tokens sent by the notary server 170, and can receive the tokens sent by the client 150. The checking server 160 can also determine whether the token sent by the notary server 170 is the same as the token sent by the client 150, and whether the token sent by the client 150 is within the aging period. When the checking server 160 judges that the notary server 170 is the same as the message sent by the client 150, and the sent message from the client 150 is within the time limit, the checking server 160 can identify the document previously sent by the notary server 170 The target file corresponding to the data is sent to the client 150; and if the check server 160 determines that the notary server 170 and the client 150 send different tokens, or the client 150 sends the token that is not within the aging period, the check server 160 can The target file is not transmitted to the client 150.

The inspection server 160 can also receive the client identification data sent by the notary server 170, and can obtain the target document corresponding to the file identification data previously sent by the notary server 170, and then obtain the target document according to the client identification data. The target file is directly or indirectly transmitted to the client 150. The indirect transmission method is, for example, email or instant message, but the invention is not limited to this.

The notary server 170 can be connected to the client 150, the signature server 130, and the registration server 160, and can send data or signals to the client 150, the signature server 130, the registration server 160, and can also receive the client 150 , The signature server 130, and the data or signal transmitted by the check server 160. The notarization server 170 can be connected to the client 150, the signature server 130, and the search server 160 through a communication interface using a wired network or a wireless network, and the invention is not particularly limited.

The notary server 170 is responsible for receiving the electronic document transmitted by the signature server 130, and is responsible for signing the received electronic document, thereby generating a new electronic document. The notary server 170 is also responsible for returning the new electronic document generated to the signature server 130.

The notary server 170 is also responsible for storing the relevant information of the signature document (in the present invention, it is also represented by "signature document related information"). The relevant information of the signature document stored by the notary server 170 includes but is not limited to the signature document The digest value, the hash value of the signature file, and the file identification information corresponding to the target file included in the signature file, etc. In some embodiments, the notary server 170 may determine whether the signed document is consistent with the original or original document of the target document based on the stored relevant information of the signed document.

The notary server 170 may also receive document identification data corresponding to the received electronic document when receiving the electronic document transmitted by the signature server 130. The notary server 170 can also generate visual data based on the received document identification data before or after signing the received electronic document, and can add the generated visual data to the new In the electronic file.

In some embodiments, the notary server 170 can receive the document identification data transmitted by the client 150, and can determine whether the target document corresponding to the received document identification data exists according to the stored signature document related information.

The notary server 170 may also transmit the received document identification data to the inventory server 160 when determining that the target document corresponding to the received document identification data exists. If the notary server 170 determines that the target document corresponding to the received document identification data does not exist, the notary server 170 may deny the client 150 access to the target document.

The notary server 170 can also receive the judgment result sent by the check server 160, and can generate a token when the received judgment result indicates that the target document can be accessed in real time, and transmit the token generated to the client 150和存查服务160。 And storage server 160. The notary server 170 can also generate a corresponding notification message when the received judgment result indicates that the target document cannot be accessed in real time, and send the generated notification message back to the client 150, and the client 150 client The terminal identification data is sent to the inventory server 160.

The notary server 170 can also receive the identity verification message sent by the check server 160, and can request the client 150 to perform identity verification based on the received identity verification message, and choose to allow or deny the client based on the identity verification result of the client 150 Terminal 150 accesses the target file. When the notary server 170 chooses to allow the client 150 to access the target document, the notary server 170 can send the generated token or notification message to the client 150, and send the generated token or client identification data to the search server 160.

Next, the first embodiment is used to explain the operation system and method of the present invention, and please refer to the "Figure 2" method flow chart of providing the signature object signature in order to generate the signature document according to the present invention. In this embodiment, it is assumed that the present invention is applied to the online insurance mechanism, but the present invention is not limited to this.

First, the client 150 can connect to the service server 400 that provides an online insurance service, and send the insurance data (content parameters) requested by the service server 400 to the service server 400. In this embodiment, it is assumed that the client 150 is a browser installed on a general computing device, and the service server 400 is a web server. The client 150 can input insurance data in a web page provided by the service server 400.

After the service server 400 receives the insurance data provided by the client 150, the service server 400 can generate an electronic policy (original document) containing the received insurance data, and can provide the generated electronic policy to the file host 120, so that the file host 120 obtains the original file (step 210). In this embodiment, it is assumed that the service server 400 can store contract templates of various insurance products, and can fill in the received insurance data one by one into the corresponding fields of the contract templates of insurance products selected by the client 150 In order to generate a complete electronic insurance policy.

After the file host 120 obtains the original file (step 210), the file host 120 can define the signature sequence according to the category of the obtained original file (step 220). In this embodiment, since the original document is a policy, the document host 120 may define the order of signature to be signed by the client 150 first, and then signed by the signature server 130.

After the file host 120 defines the signature sequence, the file host 120 can generate a target file including the defined signature sequence and the obtained original file, and can generate file identification data corresponding to the generated target file, and can The generated target document and document identification data are sent to the signature server 130 (step 230).

After the signature server 130 receives the target document and the document identification data generated by the document host 120, the signature server 130 can sequentially provide the electronic document to the signature indicated by the signature sequence according to the signature sequence in the target document The seal object is used to generate a seal file after all the seal objects complete the seal (step 250). In this embodiment, since the signature order is the client 150 and the signature server 130 in sequence, the signature server 130 can send the target document as an electronic file to the client 150 so that the client 150 is in service The web page provided by the server 400 requires the client 150 to sign the electronic file. The client 150 can use the private key corresponding to the user's digital certificate to sign the electronic document, generate a new electronic document containing the electronic document and signature data, and return the generated new electronic document to the signature server 130. Since the client 150 is not the last signing unit indicated in the order of signing, the electronic file generated by the client 150 is also called a job file in the present invention.

After the signature server 130 receives the electronic file transmitted by the client 150, the electronic file can be provided to the signature object after the client 150 indicated in the signature sequence according to the signature sequence in the target file, because The signing object at this time is the signing server 130 itself. Therefore, the signing server 130 can first confirm whether the received electronic document has not been altered and contains the signing of the client 150. The server 130 judges that the received electronic document has been altered or does not contain the signature of the client 150, the signature server 130 may refuse to sign the electronic document, and if the signature server 130 judges the received electronic document If the document has not been altered and does contain the signature of the client 150, the signature server 130 can use the private key corresponding to the digital certificate of the insurance company providing the service server 400 to sign the electronic document received from the client 150 After the signature, a new electronic file containing the electronic file received from the client 150 and the signature information is generated. Since the signing server 130 is the last signing unit expressed in the signing order, the electronic document generated by the signing server 130 is also referred to as a signing document in the present invention, that is, in this implementation In the example, the signature file includes the target file, signature data generated by the client 150, and signature data generated by the signature server 130.

After the signature server 130 generates the signature document, the signature server 130 can return the signature document generated to the client 150 so that the user of the client 150 can download the signature generated by the signature server 130 For documents, the signing server 130 may also send the generated signing document to the checking server 160, so that the checking server 160 stores the signing document generated by the signing server 130 (step 260).

In this way, through the present invention, neither the service server 400 provided by the insurance company nor the client 150 used by the user can directly access the electronic document during the process that the target document becomes the signature document, ensuring that the signature document is complete and correct. It was altered or replaced by insurance companies and users.

Continue to use the second embodiment to explain the operating system and method of the present invention. Please also refer to the flowchart shown in "Figure 2". In this embodiment, it is also assumed that the present invention is applied to the online insurance mechanism.

First, the client 150 can connect to the service server 400 that provides an online insurance service, and send the insurance data (content parameters) requested by the service server 400 to the service server 400. In this embodiment, assuming that the client 150 is a specific application installed on a general computing device, the client 150 can browse policy contents, select policy products, and enter insurance data in the application.

After the service server 400 receives the insurance data provided by the client 150, the service server 400 can generate an electronic policy (original document) containing the received insurance data, and can provide the generated electronic policy to the file host 120, so that the file host 120 obtains the original file (step 210), and then, the file host 120 can define the signature sequence according to the category of the obtained original file (step 220). In this embodiment, since the original document is a policy, the document host 120 may define the order of signature to be signed by the client 150 first, then by the signature server 130, and finally by the notary server 170.

After the file host 120 defines the signature sequence, the file host 120 can generate a target file including the defined signature sequence and the obtained original file, and can generate file identification data corresponding to the generated target file, and can The generated target document and document identification data are sent to the signature server 130 (step 230). In this embodiment, it is assumed that the target file is a file in PDF format.

After the signature server 130 receives the target document and the document identification data generated by the document host 120, the signature server 130 may encrypt the received document identification data (step 240), and may base on the signature in the target document The order of chapters provides the electronic files to the signing objects indicated in the order of signing in order to generate the signing files after all signing objects have finished signing (step 250).

In this embodiment, since the signature order is the client 150, the signature server 130, and the notary server 170, the signature server 130 can first send the received target document as an electronic file to The client 150 also transmits the encrypted file identification data to the client 150 at the same time. After receiving the electronic document and the document identification data, the client 150 can use the private key corresponding to the user's digital certificate to sign the received electronic document, and generate the corresponding signature data after signing. The terminal 150 can also use the QR code encoding method to encode the received file identification data, and use the fault tolerance function in the QR code encoding method to add the icon representing the user to the QR code generated by the encoding to generate a visual QR code (visual information). After that, the client 150 can use the PDF file format to add the received electronic document, the generated signature data, and the generated visual QR code to the corresponding fields to generate the target document and signature. The new electronic file of the data and the visual QR code, and the new electronic file generated can be returned to the signature server 130, wherein the visual QR code is added to the field of Visual Sign. Since the client 150 is not the last signing unit indicated in the order of signing, the electronic file generated by the client 150 is a working file in the present invention.

After the signature server 130 receives the electronic file transmitted by the client 150, the electronic file received from the client 150 and the encrypted file identification data can be provided to the signature sequence according to the signature sequence in the target file Indicates the signature object after the client 150. Since the signature object at this time is the signature server 130 itself, the signature server 130 can confirm that the received electronic document has not been altered and contains After the signatures of all the signature objects (that is, the client 150) arranged before the signature sequence, use the private key corresponding to the digital certificate of the insurance company providing the service server 400 to sign the electronic document received from the client 150 It can also generate a QR code (visual data) that contains the trademark of the insurance company and records the encrypted document identification data, and can generate an electronic file received from the client 150, the generated signature data, and the generated QR The new electronic file of code (the process of signing the electronic file by the signature server 130 to generate a new electronic file is the same as that of the client 150, so it will not be described in detail).

After the signing server 130 completes the signing operation, the signing server 130 can again provide the generated electronic document and the encrypted document identification data to the signing sequence according to the signing sequence in the target document. The signature object after the signature server 130 is the notary server 170. Therefore, the signature server 130 can send the encrypted document identification data and the generated electronic document to the notary server 170. After receiving the document identification data and the electronic document, the notary server 170 can first confirm whether the received electronic document has been altered and whether it contains the signatures of all the signature objects arranged before the signature sequence. If the electronic document received by the server 170 has not been altered and contains the signatures of the client 150 and the signature server 130 arranged before the signature sequence, the notary server 170 can use and provide the notary unit of the notary server 170 The private key corresponding to the digital certificate of the digital signature of the received electronic document can also generate a QR code (visualized data) that contains the trademark of the notary unit and records the encrypted document identification data, and can generate a server that contains the self-signing servo. The electronic file of the device 130, the signature information generated, and the new electronic file of the generated QR code (the process of signing the electronic file by the notary server 170 to generate a new electronic file is the same as the client 150, so it will not be described in detail) . Since the notary server 170 is the last signing unit expressed in the order of signing, the electronic document generated by the notary server 170 is also referred to as a signing document in the present invention, that is, in this embodiment , The signature file includes the target document, the signature data and visualization data generated by the client 150, the signature data and visualization data generated by the signature server 130, and the signature data and visualization data generated by the notary server 170 .

After the notarization server 170 completes the signature operation, the notarization server 170 can also record the relevant information of the signature document of the new electronic document (signature document) generated by the signature, and can return the generated new electronic document to the signature Chapter Server 130. In this embodiment, it is assumed that the signature document-related information recorded by the notary server 170 includes a summary value of the signature document, a hash value of the signature document, and document identification data corresponding to the target document included in the signature document.

After the signature server 130 receives the electronic document (signature document) generated by the last signature unit indicated in the signature sequence, the signature server 130 can transmit the received signature document to the client 150 , So that the user of the client 150 can download the signature file signed by the client 150, the signature server 130, and the notary server 170, and the signature server 130 can also send the signature file to the check server 160 , So that the check server 160 stores the signature file (step 260). In this embodiment, the search server 160 may send the signature document to the document host 120 for storage, and write the document identification information, creation date, access authority, etc. of the target document contained in the signature document into the relevant information of the target document Database.

In this way, through the present invention, neither the service server 400 provided by the insurance company nor the client 150 used by the user can directly access the electronic document during the process that the target document becomes the signature document, except to ensure the integrity of the signature document In addition, the signature of the notary server 170 can ensure the non-repudiation of the target document.

Then please refer to the flowchart of the method shown in "Figure 3". After the client 150 receives the signature file sent by the signature server 130, when the user of the client 150 wants to confirm the record in the signature file If the content of the policy is the same as the content at the time of insurance, the client 150 can obtain the document identification data recorded in the visualization data according to the visualization data in the signature document, and can send the obtained document identification data to the notary server 170 ( Step 310). In this embodiment, the user can print the signature document in paper form, or can use other computing devices to display the signature document, and can operate the client 150 to scan the printed document using the built-in QR code scanning function The QR code in the signature file on the paper or displayed by other display devices enables the client 150 to obtain the file identification information after decoding the scanned QR code. In this embodiment, since the document identification data is encrypted by the signature server 130, the client 150 can decrypt the acquired document identification data after acquiring the document identification data.

After the notary server 170 receives the document identification data transmitted by the client 150, the notary server 170 can determine whether the target document corresponding to the document identification data exists according to the received document identification data. If the target file exists, the notary server 170 may send the received file identification data to the check server 160 (step 320); and if the target file does not exist, the notary server 170 may deny the client 150 access to the target file . In this embodiment, the notarization server 170 may check whether the same information as the received document identification data exists in the stored signature document related information. If so, it indicates that the target document exists, otherwise, it indicates that the target document does not exist.

After the storage server 160 receives the document identification data transmitted by the notary server 170, the storage server 160 can determine whether the target document corresponding to the received file identification data can be accessed in real time and generate a judgment result, and can The generated judgment result is returned to the notary server 170 (step 330). In this embodiment, the search server 160 can read the target document related information of the target document corresponding to the received document identification data from the database, and based on the creation date or the creation date in the read target document related information The status determines whether the target document can be accessed in real time, for example, whether the creation date has reached the standard for storage or destruction, or whether the target document still exists according to the status.

After the notarization server 170 receives the judgment result sent by the inspection server 160, the notarization server 170 can generate a token when the judgment result indicates that the target document can be accessed in real time, and can send the token generated to the inspection server 160 and the client 150 that sends out the file identification data corresponding to the target file (step 350).

After receiving the tokens transmitted by the notary server 170, the client 150 may transmit the received tokens to the check server 160 (step 360). The check server 160 receives the tokens transmitted by the notary server 170 and After receiving the token sent by the client 150, it can be determined whether the token sent by the notary server 170 is the same as the token sent by the client 150, and when the token sent by the notary server 170 and the client 150 are the same , Read the target file, and transfer the read target file to the client 150 (step 370). After the client 150 receives the target document transmitted by the search server 160, the user can use the naked eye or the client 150 or other programs to compare whether the policy content recorded in the signature document is the same as the policy content recorded in the target document.

In addition, after the notarization server 170 receives the judgment result sent by the check server 160, if the judgment result indicates that the target document cannot be accessed in real time, the notarization server 170 may send the client the document identification data corresponding to the target document The object identification data of the terminal 150 is sent to the inventory server 160.

After the storage server 160 receives the object identification data transmitted by the notary server 170, the storage server 160 can wait to obtain the target document, and can obtain the target file directly according to the received object identification data. Indirect transmission to the client 150.

In this way, according to the present invention, it is also possible to provide the user with a rewinding operation under the condition of reducing the burden on the checking server 160 and increase the safety of the rewinding operation.

In the above embodiment, before the storage server 160 returns the generated judgment result to the notary server 170 (step 330), the access authority of the target file can also be read from the database, and can be read out The access right indicates that when identity verification is required, a corresponding identity verification message is generated, and the generated identity verification message is sent to the notary server 170 together with the generated judgment result. Assume that the authentication message generated by the search server 160 indicates that a certificate is required for authentication.

After the notary server 170 receives the identity verification message sent by the check server 160, it can request the client 150 to use the certificate for identity verification, and determine whether to allow the client 150 to access the target file based on the result of the identity verification (step 340) . If the client 150 passes the authentication, the notary server 170 can allow the client 150 to access the target document, and the notary server 170 can send the generated token to the check server 160 when the judgment result indicates that the target document can be accessed in real time. The client 150 (step 350), or when the judgment result indicates that the target file cannot be accessed in real time, send the object identification data of the client 150 to the search server 160. If the client 150 does not pass the identity verification, the notary server 170 may deny the client 150 access to the target file.

In summary, it can be seen that the difference between the present invention and the prior art is that the document host defines the signature sequence according to the category of the original document obtained and generates a target document containing the original document and the signature sequence, and the signature server is based on the signature Chapter order provides the electronic file containing the target file to the signature object for signature to generate the signature file, and then sends the signature file to the user or owner of the signature object to save the technical means, by this technology The method can solve the problem that the electronic file existing in the prior art may be replaced before the signature, and then achieve the technical effect of providing an approximate seal in the electronic file.

In addition, the method for providing signature objects in order to produce signature documents in the present invention can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner or in a computer system Different components are scattered in several interconnected computer systems in a decentralized manner.

Although the disclosed embodiments of the present invention are as described above, the content described is not intended to directly limit the patent protection scope of the present invention. Anyone who has ordinary knowledge in the technical field to which the present invention belongs, without making any departure from the spirit and scope disclosed by the present invention, makes slight modifications to the form and details of the implementation of the present invention, all belong to the patent protection of the present invention range. The scope of patent protection of the present invention shall still be determined by the scope of the attached patent application.

120: File host 130: signature server 150: client 160: Inventory server 170: Notary server 400: service server Step 210: The file host obtains the original file, which contains the content parameters provided by the client Step 220: The file host defines the signature sequence according to the original file type Step 230: The document host generates a target document including the signature sequence and the original document, and generates document identification data corresponding to the target document, and transmits the target document and the document identification data to the signature server Step 240: Signature server encrypts document identification data Step 250: The signing server provides multiple signing objects to sign the electronic document in sequence according to the signing order to generate a signing document. The signing document contains visual data of the document identification data generated by the signing object Step 260: The signature server sends the signature document to the storage server for storage, and sends the signature document to the client Step 310: The client obtains the document identification data according to the visualization data and sends the document identification data to the notary server Step 320: When the notary server judges that the target document exists according to the document identification data, it sends the document identification data to the search server Step 330: The search server generates a judgment result based on whether the target document corresponding to the document identification data can be accessed in real time, and sends the judgment result to the notary server Step 340: The notary server determines whether to allow the client to access the target document based on the identity verification message Step 350: When the judgment result indicates that it can be accessed in real time, the notary server sends the message to the client and the search server Step 360: The client sends the message to the search server Step 370: The search server sends the target document to the client when the notary server and the client send the same token

FIG. 1 is a system architecture diagram of providing a signature object signature in order to generate a signature file according to the present invention. FIG. 2 is a flow chart of a method for providing a signature object signature in order to generate a signature file according to the present invention. FIG. 3 is a flowchart of the method for retrieving the target document according to the visual data in the signature document according to the present invention.

Step 210: The file host obtains the original file, which contains the content parameters provided by the client

Step 220: The file host defines the signature sequence according to the original file type

Step 230: The document host generates a target document including the signature sequence and the original document, and generates document identification data corresponding to the target document, and transmits the target document and the document identification data to the signature server

Step 240: Signature server encrypts document identification data

Step 250: The signing server provides multiple signing objects to sign the electronic document in sequence according to the signing order to generate a signing document. The signing document contains visual data of the document identification data generated by the signing object

Step 260: The signature server sends the signature document to the storage server for storage, and sends the signature document to the client

Claims (10)

A method for sequentially providing signature object signatures to generate signature files, the method includes at least the following steps: a file host obtains an original file, the original file contains a content parameter provided by a client; the file host is based on The category of the original document defines a signature sequence; the document host generates a target document including the signature sequence and the original document, and generates a document identification data corresponding to the target document, and transmits the target document and the document The identification data is sent to a signature server; the signature server sequentially provides multiple signature objects to an electronic document according to the signature sequence to generate a signature document, wherein the signature objects include the client And the signing server, the signing document contains visual data that records identification information of the document generated by at least one of the signing objects, and the first of the signing objects in the signing order When a signing object signs the electronic file, the electronic file is the target file. When the signing order is not the first signing object among the signing objects, it is not the first signing object. The electronic document is an operation document generated after the previous signing object indicates the signing order among the signing objects; and the signing server sends the signing document to a search server for storage, and Send the signature file to the client. A method for providing signature objects in sequence to produce signature documents as described in item 1 of the scope of patent application, wherein the method provides the signatures in sequence in the signature server according to the signature sequence Before the step of signing the electronic document to generate the signed document, the object further includes the step of encrypting the document identification data by the signing server. A method for providing signature objects in sequence to produce signature documents as described in item 1 of the patent application scope, wherein the signature server provides the signature objects in sequence to the electronic document according to the signature sequence The step of generating the signature document further includes the step of the signature server providing a notary server to sign the operation document finally generated to generate the signature document. As described in item 3 of the scope of patent application, a method of providing signature objects in order to generate signature documents in sequence, in which the method changes after the step of the signature host sending the signature document to the search server for storage Including that the client obtains the document identification data according to the visualization data and sends the document identification data to the notary server, and the notary server sends the document identification data to the search server when the target document exists according to the document identification data , The search server generates and sends a judgment result to the notary server when it judges that the target document can be accessed in real time according to the document identification data, and the notary server when the judgment result indicates that the target document can be accessed in real time Send a token to the client and the search server, so that the client sends the token to the check server, the check server determines the token sent by the notary server and the token sent by the client The step of sending the target file to the client at the same time. As described in item 4 of the scope of patent application, a method of providing signature objects in order to produce signature documents in sequence, wherein the check server further includes the check server before the step of sending the confirmation message to the notary server According to the identity verification result, select the steps to allow or deny the client to access the signature file. A system for providing signature objects in order to produce signature files in sequence, the system includes at least: A client is used to provide a content parameter; a file host is used to obtain an original file and define a signature sequence according to the type of the original file, and to generate one including the signature sequence and the original file Target file, and generates a file identification data corresponding to the target file, wherein the original file contains the content parameters; a signature server for receiving the target file and the file identification data sent by the file host, And used to provide multiple signature objects in sequence according to the signature sequence to sign an electronic file to generate a signature file, and send the signature file to the client, wherein the signature objects include the client End and the signing server, the signing document contains visual data that records at least one of the signing objects and records the document identification data, and among the signing objects, the signing order indicates the first When a signing object signs the electronic file, the electronic file is the target file, and when the signing order is not the first signing object among the signing objects, the electronic file is signed. The electronic file is an operation document generated after the previous signing object indicates the signing order among the signing objects in the signing objects; and a search server for receiving and storing the file sent by the signing server The signature document. As described in item 6 of the scope of patent application, a system for providing signature objects in order to produce signature documents in sequence, wherein the signature server is further used to encrypt the document identification data. As described in item 6 of the scope of patent application, a system for providing signature object signatures in sequence to generate signature documents, wherein the system further includes a notarization server for receiving the final generation transmitted by the signature server The operation document is signed, and the operation document is finally used to generate the signature document, and the signature document is transmitted to the signature server. As described in item 8 of the scope of patent application, a system for providing signature objects in order to produce signature documents in sequence, wherein the client is further used to obtain the document identification data based on the visualization data and send the document identification data to the Notary server, the notary server is further used to send the document identification data to the search server when the target document exists according to the document identification data, and a judgment result sent by the search server indicates that the target document can be Send a token to the client and the search server when it is accessed in real time, so that the client sends the token to the search server. The search server is also used to determine the token and the token sent by the notary server. When the message transmitted by the client is the same, the target file is transmitted to the client. As described in item 9 of the scope of patent application, a system for providing signature objects in order to generate signature documents in sequence, wherein the check server is further used to select whether to allow or deny the client to access the target document based on the identity verification result .

Images