A method of realizing bank counter electronic signature based on national secret algorithm

Abstract

The present invention provides a method for realizing electronic signature at the bank counter based on the national secret algorithm, which needs to provide a device end, a terminal and a server end. Transfer it to the server through the terminal; after the server receives the public key, it obtains the national secret certificate through the public key and saves it and forwards it to the device; If they are consistent, report the matching result to the terminal; when the terminal receives the matching result, it will send the PDF document to the device for display; after the customer submits the handwritten signature, the device will synthesize the handwritten signature into the current PDF document and use the national secret certificate And the SM2 private key digitally signs the synthesized PDF document, and the terminal forwards it to the server; the server uses the national secret certificate and public key to confirm the legality of the PDF document and then files it. The invention prevents documents and signatures from being tampered with while ensuring the transmission safety of the three-party communication.

Description

technical field [0001] The invention relates to the field of banking, in particular to a method for realizing electronic signatures at bank counters based on a national secret algorithm. Background technique [0002] At present, Geda Bank has expanded the electronic handwritten signature business for traditional over-the-counter clearing and other counter equipment to reduce the cost of paper documents. At present, the conventional electronic signature business process at the bank counter is as follows: the background sends the PDF document to the terminal, and the terminal sends it to the device for display through HID (Human Body Input Device) or Bluetooth. After the customer signs, the device sends the signature data ( Including pictures and trajectory data) uploaded to the terminal, and the terminal synthesizes the signature data into PDF and uploads it to the background server for storage. The formation and synthesis of signature tracks in this business process are car...

AI Technical Summary

Problems solved by technology

[0003] (1) Although the end-to-end transmission security of the device is guaranteed through key encryption, there is no guarantee that the PDF before synthesis will match the PDF displayed on the device, that is, there may be inconsistencies between the document viewed by the customer and the final document that participates in the synthesis Happening;

[0004] (2) The terminal cannot guarantee that the source of the signature data is legal, that is, the signature data involved in the synthesis may not come from the correct device;

[0005] (3) The server passively receives the final PDF document uploaded by the terminal, and cannot ensure whether the document itself is legal or not, and cannot confirm whether the document has been tampered with

Images