Bidding business enterprise qualification credit information authenticity verification method and device

Abstract

The invention discloses a bidding and tendering business enterprise qualification credit information authenticity verification method and device, and relates to the technical field of information verification, and the method comprises the steps: obtaining a verification webpage, obtaining a website digital certificate chain, checking a digital signature and a validity period step by step, and obtaining website digital certificate authenticity verification result data; obtaining the final modification time, the website updating frequency and the timestamp information, and combining the terminal time to obtain webpage timestamp verification result data; obtaining complete network information at a target moment and network information at a polling moment, and performing hash value comparison to obtain network information carrier integrity verification result data; and determining webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data and the network information carrier integrity verification result data, and uploading the storage content data for storage. The authenticity identification of the webpage is realized, the stored content data cannot be tampered, and disputes or objection can be checked and traced.

Description

Technical Field

[0001] The present application relates to the field of information verification technology, and in particular to a method and device for verifying the authenticity of enterprise qualification credit information in bidding and tendering business. Background Art

[0002] At present, in the bidding business, the qualification and credit status of the bidding unit is one of the necessary conditions for whether the bidding unit can win the bid, such as the China Enterprise Credit Report, the Enterprise Credit Information Publicity System Report, the China Judgment Documents Network Query Report, and the enterprise qualification certificate information, etc. The above information is usually provided by the bidding unit in the bid, and is reviewed and confirmed by the bid evaluation experts after the bid opening. The bid evaluation experts need to verify the information by querying the relevant official website.

[0003] In existing bidding and tendering businesses, the bidding units usually have clear requirements for the qualifications and credit status of the bidding units. However, the qualification and credit information submitted by the bidding units themselves may be untrue, which poses a hidden danger to the fairness of the bidding and tendering business. Currently, bid evaluation experts verify the relevant information of the bidding units through the official website of the Internet to enhance the credibility of the information, but the Internet website is threatened by tampering or counterfeiting, resulting in unreliable verification results.

[0004] However, in this process, there are the following problems: (1) Bidders are motivated by profit and may write untrue qualification information. Bidders use untrue official websites to deceive bid evaluation experts. Existing technologies only verify the authenticity of web pages through a single dimension, which is difficult to deal with complex and changeable web page tampering attacks, resulting in unreliable verification results; (2) At the same time, existing web page evidence technology only records the content displayed on the web page, lacks the source of the web page and verification information, and is difficult to ensure the validity of the evidence. The qualification and credit status information of the bidding units are dynamic, and bidding has a strong timeliness requirement. Failure to record and record the real-time information at the time of bid evaluation will make it difficult to trace and audit in the subsequent review, which is very likely to cause bidding disputes. Summary of the invention

[0005] In view of this, the embodiments of the present application provide a method and device for verifying the authenticity of the credit information of the qualifications of enterprises in bidding and tendering business, which can solve the possibility that the qualifications and credit status related information submitted by the existing bidding units themselves are not true. Currently, the bid evaluation experts verify the relevant information of the bidding units through the official website of the Internet to improve the credibility of the information, but the Internet website is threatened by tampering or counterfeiting. The existing technology only verifies the authenticity of the web page through a single dimension, which is difficult to cope with complex and changeable web page tampering attacks, resulting in unreliable verification results; at the same time, the existing web page evidence technology only stores the content displayed on the web page, lacks the source of the web page and verification information, and it is difficult to ensure the validity of the evidence. It is difficult to trace and audit during subsequent reviews, and it is very easy to cause bidding and tendering disputes.

[0006] To achieve the above-mentioned purpose, according to one aspect of an embodiment of the present application, a method for verifying the authenticity of enterprise qualification credit information in a bidding and tendering business is provided, including: obtaining a verification web page, obtaining a website digital certificate chain, and checking the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data; refreshing the verification web page, obtaining the last modification time of the verification web page, the update frequency of the website, and the timestamp information contained in the content data of the verification web page, and obtaining the web page timestamp verification result data according to the last modification time, update frequency, timestamp information and terminal time; accessing the network information carrier, obtaining the complete network information at the target time, accessing the network information carrier at a set polling frequency to obtain the network information at the polling time, and comparing the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data; determining the web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data and the network information carrier integrity verification result data; determining the stored content data according to the web page authenticity verification result data, and storing the stored content data on the chain.

[0007] Optionally, the digital signatures and validity periods of certificates at each level are checked step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data, including: verifying whether the root certificate in the website digital certificate chain is within the validity period and the digital signature corresponding to the root certificate is correct, if not, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if so, continuing to verify whether the intermediate certificate is within the validity period and the digital signature corresponding to the intermediate certificate is correct, if otherwise, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if so, continuing to verify whether the leaf certificate is within the validity period and the digital signature corresponding to the leaf certificate is correct, if otherwise, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if so, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification passed.

[0008] Optionally, verifying whether the digital signature corresponding to the root certificate is correct, including: extracting the public key, certificate signing algorithm and certificate digital signature of the root certificate from the information corresponding to the root certificate; decrypting the certificate digital signature using the public key to obtain summary information, and recalculating the hash value of the information recorded in the root certificate; verifying whether the summary information and the hash value are equal, if so, the digital signature corresponding to the root certificate is correct, if otherwise, the digital signature corresponding to the root certificate is incorrect; and verifying whether the digital signature corresponding to the i-th level certificate is correct, including: extracting the public key, holder identity information, hash algorithm, certificate signing algorithm and certificate digital signature of the i-th level certificate from the information corresponding to the i-th level certificate, decrypting the certificate digital signature using the public key of the i-1-th level digital certificate to obtain summary information, and recalculating the hash value of the public key and holder identity information; verifying whether the summary information and the hash value are equal, if so, the digital signature corresponding to the i-th level certificate is correct, if otherwise, the digital signature corresponding to the i-th level certificate is incorrect; wherein, i is an integer greater than or equal to 1, and the i-th level certificate includes an intermediate certificate and a leaf certificate.

[0009] Optionally, web page timestamp verification result data is obtained based on the last modification time, update frequency, timestamp information and terminal time, including: determining the update interval duration based on the update frequency; determining the next update time based on the last update time and the update interval duration; if the last modification time is inconsistent with the next update time, it is determined that the website is abnormal; if the last modification time is consistent with the next update time, it is determined that the website is normal; if the timestamp information is consistent with the terminal time, it is determined that the verification web page is normal; if the timestamp information is inconsistent with the terminal time, it is determined that the verification web page is abnormal; if the website is normal and the verification web page is normal, it is determined that the web page timestamp verification result data is passed.

[0010] Optionally, the network information carrier includes web pages and websites, and the network information includes web page content and website content; obtaining the network information carrier integrity verification result data includes: accessing the verification web page to obtain the complete web page content at the target time, accessing the verification web page at a set polling frequency to obtain the web page content at the polling time, and comparing the corresponding hash values ​​based on the complete web page content and each web page content to obtain the web page integrity verification result data; accessing the website to obtain the complete website content at the target time, accessing the website at a set polling frequency to obtain the website content at the polling time, and comparing the corresponding hash values ​​based on the complete website content and each website content to obtain the website integrity verification result data.

[0011] Optionally, determining the webpage authenticity verification result data includes: determining the webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data, the webpage integrity verification result data and the website integrity verification result data.

[0012] Optionally, based on the web page authenticity verification result data, the evidence content data is determined, and the evidence content data is uploaded to the chain for evidence, including: if the web page authenticity verification result data is that the web page authenticity verification is passed, the website digital certificate chain, timestamp information, complete network information and various network information in the verification process are uploaded to the chain for evidence, and the verification page is timestamped and uploaded to the chain for evidence; if the web page authenticity verification result data is that the web page authenticity verification is failed, web page exception information is generated and the web page exception information is uploaded to the chain for evidence.

[0013] In addition, the present application also provides a device for verifying the authenticity of enterprise qualification credit information in bidding and tendering business, including: a website digital certificate authenticity verification module, configured to obtain a verification webpage, obtain a website digital certificate chain, and check the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data; a webpage timestamp verification module, configured to refresh the verification webpage, obtain the last modification time of the verification webpage, the update frequency of the website and the timestamp information contained in the content data of the verification webpage, and obtain the webpage timestamp verification result data according to the last modification time, the update frequency, the timestamp information and the terminal time; The integrity verification module is configured to access the network information carrier to obtain the complete network information at the target time, access the network information carrier at a set polling frequency to obtain the network information at the polling time, and compare the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data; the comprehensive evaluation module is configured to determine the web page authenticity verification result data based on the website digital certificate authenticity verification result data, the web page timestamp verification result data and the network information carrier integrity verification result data; the web page evidence module is configured to determine the evidence content data based on the web page authenticity verification result data, and upload the evidence content data to the chain for evidence.

[0014] Optionally, the website digital certificate authenticity verification module is further configured to: verify whether the root certificate in the website digital certificate chain is within the validity period and the digital signature corresponding to the root certificate is correct, if not, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if yes, continue to verify whether the intermediate certificate is within the validity period and the digital signature corresponding to the intermediate certificate is correct, if otherwise, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if yes, continue to verify whether the leaf certificate is within the validity period and the digital signature corresponding to the leaf certificate is correct, if otherwise, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if yes, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification passed.

[0015] Optionally, the website digital certificate authenticity verification module is further configured to: extract the public key, certificate signature algorithm and certificate digital signature of the root certificate from the information corresponding to the root certificate; use the public key to decrypt the certificate digital signature to obtain summary information, and recalculate the hash value of the information recorded in the root certificate; verify whether the summary information and the hash value are equal, if so, the digital signature corresponding to the root certificate is correct, if not, the digital signature corresponding to the root certificate is incorrect; and the website digital certificate authenticity verification module is further configured to: extract the public key, holder identity information, hash algorithm, certificate signature algorithm and certificate digital signature of the i-th level certificate from the information corresponding to the i-th level certificate, decrypt the certificate digital signature using the public key of the i-1th level digital certificate to obtain summary information, and recalculate the hash value of the public key and holder identity information; verify whether the summary information and the hash value are equal, if so, the digital signature corresponding to the i-th level certificate is correct, if not, the digital signature corresponding to the i-th level certificate is incorrect; wherein, i is an integer greater than or equal to 1, and the i-th level certificate includes an intermediate certificate and a leaf certificate.

[0016] Optionally, the web page timestamp verification module is further configured to: determine the update interval duration based on the update frequency; determine the next update time based on the last update time and the update interval duration; if the last modification time is inconsistent with the next update time, determine that the website is abnormal; if the last modification time is consistent with the next update time, determine that the website is normal; if the timestamp information is consistent with the terminal time, determine that the verification web page is normal; if the timestamp information is inconsistent with the terminal time, determine that the verification web page is abnormal; if the website is normal and the verification web page is normal, determine that the web page timestamp verification result data is passed.

[0017] Optionally, the network information carrier includes web pages and websites, and the network information includes web page content and website content; the integrity verification module is further configured to: access the verification web page, obtain the complete web page content at the target time, access the verification web page at a set polling frequency to obtain the web page content at the polling time, and compare the corresponding hash values ​​based on the complete web page content and each web page content to obtain web page integrity verification result data; access the website, obtain the complete website content at the target time, access the website at a set polling frequency to obtain the website content at the polling time, and compare the corresponding hash values ​​based on the complete website content and each website content to obtain the website integrity verification result data.

[0018] Optionally, the comprehensive evaluation module is further configured to determine web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data and the website integrity verification result data.

[0019] Optionally, the web page evidence module is further configured to: if the web page authenticity verification result data is that the web page authenticity verification is passed, the website digital certificate chain, timestamp information, complete network information and various network information in the verification process are uploaded to the chain for evidence, and the verification page is timestamped and uploaded to the chain for evidence; if the web page authenticity verification result data is that the web page authenticity verification is failed, web page exception information is generated and the web page exception information is uploaded to the chain for evidence.

[0020] In addition, the present application also provides an electronic device for verifying the authenticity of credit information of enterprise qualifications in bidding and tendering business, including: one or more processors; a storage device for storing one or more programs, when one or more programs are executed by one or more processors, the one or more processors implement the above-mentioned method for verifying the authenticity of credit information of enterprise qualifications in bidding and tendering business.

[0021] In addition, the present application also provides a computer-readable medium on which a computer program is stored, and when the program is executed by a processor, the above-mentioned method for verifying the authenticity of the credit information of the enterprise qualifications of the bidding business is implemented.

[0022] To achieve the above objective, according to another aspect of the embodiments of the present application, a computer program product is provided.

[0023] A computer program product according to an embodiment of the present application includes a computer program, which, when executed by a processor, implements the method for verifying the authenticity of credit information of enterprise qualifications in bidding and tendering business provided in an embodiment of the present application.

[0024] An embodiment of the above invention has the following advantages or beneficial effects: the present application obtains the website digital certificate chain by obtaining the verification web page, and checks the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data; refreshes the verification web page, obtains the last modification time of the verification web page, the update frequency of the website and the timestamp information contained in the content data of the verification web page, and obtains the web page timestamp verification result data according to the last modification time, update frequency, timestamp information and terminal time; accesses the network information carrier to obtain the complete network information at the target time, accesses the network information carrier at the set polling frequency to obtain the network information at the polling time, compares the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data; determines the web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data and the network information carrier integrity verification result data; determines the stored content data according to the web page authenticity verification result data, and stores the stored content data on the chain. The web page authenticity verification and evidence storage technology are used together. On the one hand, multi-dimensional web page verification is adopted, and comprehensive verification is carried out through dimensions such as website digital certificates, web page timestamps, and network information carrier integrity to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, the displayed content of the web page and the verification process information are solidified synchronously, and blockchain technology is combined to carry out evidence storage, so that the displayed content of the web page and the verification process information cannot be tampered with, ensuring that it can be checked and traced in the event of bidding disputes or objections in the future. By adopting a multi-dimensional web page anti-tampering verification mechanism and a blockchain-based web page evidence storage mechanism, it is ensured that the qualification credit information web page used by the bid evaluation experts is authentic and reliable, and the verification information of the web page stored on the chain is solidified in a timely manner. Based on the evidence content data such as the web page verification information stored on the chain, the qualification credit information of the bidding enterprise can be checked, traced, and audited.

[0025] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The accompanying drawings are used to better understand the present application and do not constitute an improper limitation on the present application. Figure 1 It is a schematic diagram of the main process of a method for verifying the authenticity of enterprise qualification credit information in a bidding business according to an embodiment of the present application; Figure 2 It is a schematic diagram of the main process of a method for verifying the authenticity of enterprise qualification credit information in a bidding business according to an embodiment of the present application; Figure 3It is a schematic diagram of a method and system framework for verifying the authenticity of enterprise qualification credit information in bidding and tendering business according to an embodiment of the present application; Figure 4 It is a schematic diagram of a method and system framework for verifying the authenticity of enterprise qualification credit information in bidding and tendering business according to an embodiment of the present application; Figure 5 This is a schematic diagram of a digital certificate authenticity verification framework for a bidding and tendering business enterprise qualification credit information verification website according to an embodiment of the present application; Figure 6 This is a schematic diagram of a bidding business webpage integrity verification framework according to an embodiment of the present application; Figure 7 This is a schematic diagram of the authenticity verification framework of a bidding business webpage according to an embodiment of the present application; Figure 8 It is a schematic diagram of the main modules of the device for verifying the authenticity of the enterprise qualification credit information of the bidding and tendering business according to the embodiment of the present application; Fig. 9 is an exemplary system architecture diagram to which the embodiments of the present application can be applied; Fig.10 It is a structural diagram of a computer system of a terminal device or server suitable for implementing an embodiment of the present application. DETAILED DESCRIPTION

[0027] The following is an explanation of the exemplary embodiments of the present application in conjunction with the accompanying drawings, including various details of the embodiments of the present application to facilitate understanding, which should be considered as merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present application. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted in the following description. It should be noted that the acquisition, transmission, storage, use, and processing of data in the technical solution of the present application are in compliance with the relevant provisions of laws and regulations. It should be noted that in the embodiments of the present application, certain software, components, models, and other existing solutions in the industry may be mentioned, which should be considered as exemplary, and their purpose is only to illustrate the feasibility of the implementation of the technical solution of the present application, but it does not mean that the applicant has or must have used the solution. In the technical solution of the present application, the collection, collection, update, analysis, processing, use, transmission, storage, etc. of the user personal information involved are in compliance with the provisions of relevant laws and regulations, are used for legal and reasonable purposes, and do not violate public order and good customs, are not shared, leaked or sold outside these legal uses, and are subject to supervision and management by regulatory authorities. Take necessary measures to prevent illegal access to such user personal information data, maintain the security of user personal information and network security, ensure that persons with access to personal information data comply with relevant laws and regulations, and ensure the security of user personal information. Once such user personal information data is no longer needed, the risk should be minimized by limiting or even prohibiting data collection and / or deleting data.

[0028] When used, including in certain related applications, users' personal information is protected by de-identifying data, such as by removing specific identifiers when used, controlling the amount or specificity of data stored, controlling how data is stored, and / or other methods of de-identification.

[0029] Figure 1 : is a schematic diagram of the main process of a method for verifying the authenticity of enterprise qualification credit information in a bidding business according to an embodiment of the present application, such as Figure 1 As shown, the method for verifying the authenticity of the credit information of the enterprise qualifications in the bidding business mainly includes the following steps S101 to S105.

[0030] Step S101, obtain the verification webpage, obtain the website digital certificate chain, and check the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the authenticity verification result data of the website digital certificate.

[0031] In this embodiment, the execution subject (for example, a server) of the method for verifying the authenticity of the credit information of the qualification of the bidding business enterprise can obtain a verification webpage through a wired connection or a wireless connection through an information verification link or an official website of information verification. The verification webpage can be a qualification credit information webpage used by the bid evaluation expert. Website digital certificate chain: a chain list composed of multiple digital certificates, which is used to verify the validity and trust issues of digital certificates, and establishes a hierarchical structure from the bottom certificate to the top certificate. The top level of the website digital certificate chain is usually a root certificate issued by a root certificate authority (Root CA). The root certificate is the highest level certificate, which is the root of the trust chain (unconditional trust). The top CA organization builds its own root certificate into the operating system or browser so that it can be trusted. Below the root certificate is usually an intermediate certificate issued by an intermediate certificate authority (Intermediate CA). These intermediate certificates are issued by the root certificate authority and are used to further issue digital certificates. The end-user certificate is a certificate of an entity issued by an intermediate certificate authority. This can be a certificate for a website, server, individual or organization. The end-user certificate contains the holder's public key, identity information, and other data related to the certificate. According to the hierarchical structure corresponding to the website's digital certificate chain (for example, from the root certificate to the leaf certificate), the digital signature and validity period of each level of certificates are checked step by step. That is, from the top-level certificate, i.e. the root certificate, to the bottom-level certificate, i.e. the leaf certificate, the digital signature of each level of certificates is checked step by step to see if it is correct, and whether the corresponding certificate is within the validity period, so as to obtain the authenticity verification result data of the website's digital certificate.

[0032] In the embodiments of the present application, the relevant terms are explained as follows: Bidding: A purchasing and sales process, usually used for the purchase of large projects or goods. It includes the following key steps: Invitation to Bid: The tendering party (usually the project owner or purchaser) issues a tender notice or invitation letter to invite potential suppliers or contractors to submit their quotations and proposals; Bidding: Interested suppliers or contractors prepare and submit their bidding documents, which usually include technical specifications, commercial terms, prices and other relevant information, according to the bidding requirements; Opening of Bids: At the specified time and place, the tenderer shall open the bids publicly, check and record all bid documents; Evaluation of Bids: The tenderer evaluates all bid documents and selects the most suitable bid based on pre-set criteria and conditions, such as price, quality, technical capabilities, services, etc. Awarding of Contract: The tendering party selects the winning bidder based on the bid evaluation results and signs a contract with it; Contract Execution: The successful bidder performs the work in accordance with the terms of the contract, including providing goods, services or completing the project.

[0033] Objections and doubts: Objections in bidding activities are called doubts in procurement activities. They refer to the act of a bidder or other interested party raising questions to the tenderer or bidding agency to assert their rights when they believe that the prequalification documents, bidding documents, bid opening, bid evaluation results and other bidding activities do not comply with the relevant provisions of bidding laws and regulations, and that their rights and interests are damaged.

[0034] Blockchain: A distributed, decentralized database technology that packages data into blocks and links these blocks together through encryption to achieve data transparency, immutability and persistent storage.

[0035] Hash value: HASH value, usually represented by a short string of random letters and digits, is a "data fingerprint" obtained by a set of input information of any length through a hash algorithm. The main purpose of hash value is for file verification or signature. The hash value can be simply understood as the DNA of a piece of data (a file or a string), or an ID card. It has such a characteristic that it is unique. Once the data changes, even a small change, its hash value will also change. On the other hand, no two data hash values ​​are exactly the same.

[0036] Specifically, obtaining the website digital certificate chain includes: obtaining a lock mark on the website, opening the lock mark to obtain certificate information; and obtaining the website digital certificate chain based on the certificate information.

[0037] For example, the executing entity can open the lock mark on the website, click on the certificate information, and then click on the detailed information to obtain the certificate hierarchy information, that is, the website digital certificate chain.

[0038] Specifically, according to the hierarchical structure corresponding to the website digital certificate chain, the digital signatures and validity periods of certificates at each level are checked step by step to obtain the website digital certificate authenticity verification result data, including: verifying whether the root certificate in the website digital certificate chain is within the validity period and the digital signature corresponding to the root certificate is correct, if not, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if so, continuing to verify whether the intermediate certificate is within the validity period and the digital signature corresponding to the intermediate certificate is correct, if otherwise, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if so, continuing to verify whether the leaf certificate is within the validity period and the digital signature corresponding to the leaf certificate is correct, if otherwise, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if so, determining the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification passed.

[0039] Obtain detailed information of the website digital certificate chain through the website lock mark, perform root certificate authenticity verification, verify whether the certificate is within the validity period and whether the digital signature is correct. If the verification result is that the root certificate is not within the validity period or the digital signature is incorrect, the website digital certificate authenticity verification fails. If the verification result is that the root certificate is within the validity period and the digital signature is correct, continue to verify the authenticity of the intermediate certificate, verify whether the certificate is within the validity period and whether the digital signature is correct. If the verification result is that the intermediate certificate is not within the validity period or the digital signature is incorrect, the website digital certificate authenticity verification fails. If the verification result is that the intermediate certificate is within the validity period and the digital signature is correct, continue to verify the authenticity of the leaf certificate, verify whether the certificate is within the validity period and whether the digital signature is correct. If the verification result is that the leaf certificate is not within the validity period or the digital signature is incorrect, it is determined that the website digital certificate authenticity verification fails. If the verification result is that the leaf certificate is within the validity period and the digital signature is correct, it is determined that the website digital certificate authenticity verification passes, that is, when the root certificate, intermediate certificate and leaf certificate are all within the validity period and the digital signatures are correct, it is determined that the corresponding website digital certificate authenticity verification passes.

[0040] Specifically, verify whether the digital signature corresponding to the root certificate is correct, including: extracting the public key, certificate signature algorithm and certificate digital signature of the root certificate from the information corresponding to the root certificate; using the public key to decrypt the certificate digital signature to obtain summary information, and recalculating the hash value of the information recorded in the root certificate; verifying whether the summary information and the hash value are equal, if so, the digital signature corresponding to the root certificate is correct, otherwise the digital signature corresponding to the root certificate is incorrect.

[0041] For example, open the lock mark on the website, click on the certificate information, and then click on the details to obtain the certificate hierarchy information, that is, the website digital certificate chain. Verify the authenticity of each level of digital certificates from top to bottom. First, verify the authenticity of the level 0 certificate, that is, the root certificate. Specifically, there are two factors: First, verify whether the root certificate is currently within the validity period of the certificate. Verify by checking the start and end time of the validity period. If the current time is within the start and end time, the factor verification is passed, otherwise the verification fails. Second, verify whether the digital signature of the root certificate is correct. Extract the root certificate's public key P0, certificate signature algorithm Sign0(), and certificate signature value (that is, certificate digital signature) V0 from the root certificate information, and use the root certificate public key P0 to decrypt the signature value (that is, certificate digital signature) V0 to obtain the summary information A0, A0=Sign0(P0), and recalculate the hash value H0 of the information U0 recorded in the root certificate, H0=Hash0(U0); verify whether the two are equal. If A0=H0, the factor verification is passed, otherwise the verification fails. When both of the above elements are verified, the certificate is valid, otherwise the certificate is invalid.

[0042] Specifically, verifying whether the digital signature corresponding to the i-th level certificate is correct, including: extracting the public key, holder identity information, hash algorithm, certificate signature algorithm and certificate digital signature of the i-th level certificate from the information corresponding to the i-th level certificate, decrypting the certificate digital signature using the public key of the i-1-th level digital certificate to obtain summary information, and recalculating the hash value of the public key and the holder identity information; verifying whether the summary information and the hash value are equal, if so, the digital signature corresponding to the i-th level certificate is correct, otherwise, the digital signature corresponding to the i-th level certificate is incorrect; wherein, i is an integer greater than or equal to 1, and the i-th level certificate includes the intermediate certificate and the leaf certificate.

[0043] For example, the verification of the next-level digital certificate (the next-level certificate includes the intermediate certificate and the leaf certificate) specifically includes two factors: first, verify whether the next-level certificate is currently within the validity period of the certificate, by checking the start and end time of the validity period. If the current time is within the start and end time, the factor verification passes, otherwise the verification fails; second, verify whether the digital signature of the next-level certificate is correct. For example, for the i-th level (i>=1) certificate (where i=1 level certificate is the root certificate), extract the public key P of the certificate from the information of the digital certificate of this level i , holder identity information U i , Hash algorithm i (), certificate signature algorithm Sign i (), certificate signature value (ie certificate digital signature) V i , using the public key P of the previous digital certificate i-1 , decrypt the signature value, using P i-1Decrypt the signature value to obtain summary information A i , A i =Sign i (P i-1 ), and recalculate the hash value H of the public key and identity information of the i-th level certificate holder i , H i =Hash i (P i , U i ); verify whether the two are equal. If A i =H i , then the factor is verified, otherwise the verification fails. When both of the above two factors are verified, it means that the certificate is valid, otherwise the certificate is invalid.

[0044] Step S102, refresh the verification webpage, obtain the last modification time of the verification webpage, the update frequency of the website and the timestamp information contained in the content data of the verification webpage, and obtain the webpage timestamp verification result data according to the last modification time, update frequency, timestamp information and terminal time.

[0045] The update cycle is determined according to the update frequency, and the preset update time corresponding to each update is determined according to the update cycle and the initial update time. The last modification time is compared with the preset update time corresponding to each update. If there is a preset update time that is consistent with the last modification time, it is determined that the website is normal. If there is no preset update time that is consistent with the last modification time, it is determined that the website is abnormal. Then, the execution subject can compare whether the timestamp information contained in the content data of the webpage is consistent with the terminal time of the terminal where the webpage is located. If they are consistent, it is determined that the webpage is normal, and if they are inconsistent, it is determined that the webpage is abnormal.

[0046] Step S103, access the network information carrier to obtain the complete network information at the target time, access the network information carrier at the set polling frequency to obtain the network information at the polling time, compare the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data.

[0047] Specifically, network information carriers include web pages and websites, and network information includes web page content and website content; obtaining network information carrier integrity verification result data includes: accessing the verification web page to obtain the complete web page content at the target time, accessing the verification web page at a set polling frequency to obtain the web page content at the polling time, and comparing the corresponding hash values ​​based on the complete web page content and each web page content to obtain the web page integrity verification result data; accessing the website to obtain the complete website content at the target time, accessing the website at a set polling frequency to obtain the website content at the polling time, and comparing the corresponding hash values ​​based on the complete website content and each website content to obtain the website integrity verification result data.

[0048] For example, the original content W0 of the web page is obtained by accessing the verification web page and saving its HTML source code, that is, obtaining the complete web page content at the target time. The obtained original content of the web page is stored in a database or file system, and a hash algorithm Hash'() such as SM3, SHA256, etc. is used to calculate the hash value H' of the original content W0 of the web page and store it, that is, H'=Hash'(W0). According to the frequency of web page updates and the needs of web page integrity monitoring, set an appropriate web page polling frequency. In the bidding scenario, the frequency of web page updates is usually 24 hours, so the polling frequency can be set to once per hour. Specifically, from the update time, poll once every subsequent hour, for a total of 24 times, so as to identify abnormal modifications to the web page content. Access the web page according to the set polling frequency to obtain the web page content W at the current moment. j , j = 1, 2, 3, ..., 24. Use the same hash algorithm as SM3, SHA256 or other hash algorithms Hash'() to calculate the hash value H' of the current web page content obtained by polling j , that is, H' j =Hash'(W j ), j = 1, 2, 3, ..., 24. The hash value H' of the current web page content obtained by polling j Compare with the hash value H' of the stored original content of the web page. If all hash values ​​are the same, that is, H' j =H', j=1, 2, 3, ..., 24, it means that the webpage content has not been tampered with, and the webpage integrity verification is passed; if the hash value is different, it means that the webpage content has been tampered with, and the webpage integrity verification fails.

[0049] The website integrity is verified through the website integrity verification module. This module verifies the integrity of the website files by obtaining all relevant files in the website and calculating the hash value, and then obtaining all relevant files in the subsequent website in a polling manner at a certain frequency and calculating the hash value. The integrity of the website files is determined by comparing the two. Website integrity verification requires verifying the integrity of all relevant files in the website. Compared with web page integrity verification, the verification scope is larger and more comprehensive. The website integrity verification process is similar to the web page integrity verification process. The specific process is as follows: Determine the scope of website files that need to be monitored, and collect the original content of these files (that is, the complete website content at the target time) k , k=1,2,3,…,K, represents the kth website file, K represents a total of K website files monitored; the original content of the acquired website file is stored in a database or file system, and a hash algorithm such as SM3, SHA256, etc. is used to calculate the hash value H of the original content of the website file k ' and store, that is, H k '=Hash'(D0 k ), k=1, 2, 3, ..., K; according to the frequency of website updates and the needs of website integrity monitoring, set the appropriate website polling frequency. In the bidding scenario, the frequency of website updates is usually 24 hours, so the polling frequency can be set to once per hour. Specifically, from the update time, poll once every hour, a total of 24 times, so as to identify abnormal changes in website content; visit the website according to the set polling frequency to obtain the website file content D at the current time j k , j = 1, 2, 3, ..., 24; k = 1, 2, 3, ..., K. The same hash algorithm as SM3, SHA256 or other hash algorithms Hash'() is used to calculate the hash value H of the current website file content obtained by polling. j k ', that is, H j k '=Hash'(D j k ), j=1, 2, 3, ..., 24; k=1, 2, 3, ..., K; the hash value H of the current website file content obtained by polling j k 'Hash value H of the original content of the stored website file k 'Compare. If all hash values ​​are the same, H j k '=H k ', j=1,2,3,…,24; k=1,2,3,…,K, then the website integrity verification is determined to be passed; if there is a difference in the hash value, it means that the website file content has been tampered with and the website integrity verification fails.

[0050] Step S104, determining the webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data and the network information carrier integrity verification result data.

[0051] Specifically, determining the web page authenticity verification result data includes: determining the web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data and the website integrity verification result data.

[0052] If the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data, and the website integrity verification result data all correspond to verification passing, then the web page authenticity verification result data is determined to be web page authenticity verification passing, that is, the web page is authentic and credible. If one of the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data, and the website integrity verification result data fails to pass the verification, then the web page authenticity verification result data is determined to be web page authenticity verification failure, that is, the web page is not credible.

[0053] Step S105, determine the content data of the evidence according to the result data of the webpage authenticity verification, and store the content data of the evidence on the chain.

[0054] When the judgment result corresponding to the web page authenticity verification result data is that the web page is authentic and trustworthy, the digital certificate, web page timestamp, web page integrity and website integrity information involved in the web page authenticity verification process will be uploaded to the chain for evidence, and the bidding company qualification credit information verification page will be timestamped and uploaded to the chain for evidence; otherwise, the abnormal information on the web page will be uploaded to the chain for evidence.

[0055] This embodiment obtains the website digital certificate chain by obtaining a verification web page, and checks the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data; refreshes the verification web page, obtains the last modification time of the verification web page, the update frequency of the website and the timestamp information contained in the content data of the verification web page, and obtains the web page timestamp verification result data according to the last modification time, update frequency, timestamp information and terminal time; accesses the network information carrier to obtain the complete network information at the target time, accesses the network information carrier at a set polling frequency to obtain the network information at the polling time, compares the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data; determines the web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data and the network information carrier integrity verification result data; determines the stored content data according to the web page authenticity verification result data, and stores the stored content data on the chain. The web page authenticity verification and evidence storage technology are used together. On the one hand, multi-dimensional web page verification is adopted, and comprehensive verification is carried out through dimensions such as website digital certificates, web page timestamps, and network information carrier integrity to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, the displayed content of the web page and the verification process information are solidified synchronously, and blockchain technology is combined to carry out evidence storage, so that the displayed content of the web page and the verification process information cannot be tampered with, ensuring that it can be checked and traced in the event of bidding disputes or objections in the future. By adopting a multi-dimensional web page anti-tampering verification mechanism and a blockchain-based web page evidence storage mechanism, it is ensured that the qualification credit information web page used by the bid evaluation experts is authentic and reliable, and the verification information of the web page stored on the chain is solidified in a timely manner. Based on the evidence content data such as the web page verification information stored on the chain, the qualification credit information of the bidding enterprise can be checked, traced, and audited.

[0056] Figure 2 : is a schematic diagram of the main process of a method for verifying the authenticity of enterprise qualification credit information in a bidding business according to an embodiment of the present application, such as Figure 2 As shown, the method for verifying the authenticity of the credit information of the enterprise qualifications in the bidding business mainly includes the following steps S201 to S210.

[0057] Step S201, obtain the verification web page, obtain the website digital certificate chain, and check the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the authenticity verification result data of the website digital certificate.

[0058] Specifically, obtaining the verification web page includes: obtaining configuration information based on the web page in the bidding document received from the bidding enterprise, and obtaining the verification web page, wherein the web page configuration information includes any one of the qualification and credit information verification link and the qualification and credit information official website.

[0059] The executing entity can open the lock mark on the website corresponding to the verification webpage, click on the certificate information, and then click on the detailed information to obtain the certificate hierarchical structure information, that is, the website digital certificate chain.

[0060] The website digital certificate chain is a chain list composed of multiple digital certificates, which is used to verify the validity and trust of digital certificates. It establishes a hierarchical structure from the bottom certificate to the top certificate. According to the hierarchical structure, the digital signatures and validity periods of certificates at each level are checked step by step to obtain the authenticity verification result data of the website digital certificate.

[0061] Step S202, refreshing the verification webpage, obtaining the last modification time of the verification webpage, the update frequency of the website, and the timestamp information contained in the content data of the verification webpage.

[0062] The execution entity can refresh the verification webpage and determine the last modification time of the verification webpage, the update frequency of the website corresponding to the verification webpage and the timestamp information contained in the content data of the verification webpage by checking various timestamp information in the webpage source code.

[0063] Step S203: Determine the update interval duration according to the update frequency.

[0064] The execution entity can determine the update interval, that is, the update cycle, based on the update frequency.

[0065] Step S204, determining the next update time according to the last update time and the update interval.

[0066] The execution entity can determine the most recent update time based on the web page source code, and determine the next update time based on the update interval (ie, update cycle).

[0067] Step S205: if the last modification time is inconsistent with the next update time, it is determined that the website is abnormal; if the last modification time is consistent with the next update time, it is determined that the website is normal.

[0068] It is understandable that if the last modification time is inconsistent with the last update time, the user can tamper with the web page data between the last update time and the next update time, and the execution subject can further determine whether the last modification time is between the last update time and the next update time. If so, it is determined that the last modification time is inconsistent with the next update time, and the user has tampered with the web page data, then it is determined that the website is abnormal, if not, continue to determine whether the last modification time is consistent with the next update time, if the last modification time is consistent with the next update time, then it is determined that the user has not tampered with the web page data, then it is determined that the website is normal. It is understandable that the last update time in the embodiment of the present application refers to the last modification time or the preset update time before the last modification time, and the next update time refers to the preset update time after the last modification time or the modification time. The last update time and the next update time are both the time that has been updated, which is only the last update time and the next update time relative to the last modification time. In order to narrow the comparison range of the last modification time, the speed of determining whether the website is normal is improved.

[0069] Step S206: if the timestamp information is consistent with the terminal time, it is determined that the verification webpage is normal; if the timestamp information is inconsistent with the terminal time, it is determined that the verification webpage is abnormal.

[0070] The timestamp information refers to the timestamp information contained in the content data of the web page, and the terminal time refers to the terminal time of the terminal where the web page is located. By comparing the timestamp information and the terminal time, it is possible to effectively identify the situation where an abnormal website disguises itself by grabbing a barcode graphic on a real web page, thus preventing users from suffering unnecessary losses.

[0071] Step S207: If the website is normal and the verification webpage is normal, then determine that the webpage timestamp verification result data is passed.

[0072] When both the website and the web page are normal, it can be determined that the web page timestamp verification result data is passed to ensure the accuracy of the web page timestamp verification.

[0073] Step S208, access the network information carrier to obtain the complete network information at the target time, access the network information carrier at the set polling frequency to obtain the network information at the polling time, compare the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data.

[0074] The network information carrier may include web pages and websites. The target moment refers to the moment when complete network information is presented. The execution subject may capture the complete network information at the target moment, which may include complete web page content and complete website content.

[0075] Access the verification web page to obtain the complete web page content at the target time, access the verification web page at the set polling frequency to obtain the web page content at the polling time, compare the corresponding hash values ​​based on the complete web page content and the content of each web page to accurately obtain the web page integrity verification result data; access the website to obtain the complete website content at the target time, access the website at the set polling frequency to obtain the website content at the polling time, compare the corresponding hash values ​​based on the complete website content and the content of each website to accurately obtain the website integrity verification result data.

[0076] Step S209, determining the webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data and the network information carrier integrity verification result data.

[0077] If the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data, and the website integrity verification result data all correspond to verification passing, then the web page authenticity verification result data is determined to be web page authenticity verification passing, that is, the web page is authentic and credible. If one of the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data, and the website integrity verification result data fails to pass the verification, then the web page authenticity verification result data is determined to be web page authenticity verification failure, that is, the web page is not credible.

[0078] Step S210, determine the content data of the evidence according to the result data of the webpage authenticity verification, and store the content data of the evidence on the chain.

[0079] Specifically, based on the result data of the web page authenticity verification, the evidence content data is determined, and the evidence content data is uploaded to the chain for evidence, including: if the result data of the web page authenticity verification is that the web page authenticity verification is passed, the website digital certificate chain, timestamp information, complete network information and various network information in the verification process are uploaded to the chain for evidence, and the verification page is timestamped and uploaded to the chain for evidence; if the result data of the web page authenticity verification is that the web page authenticity verification is failed, web page exception information is generated and the web page exception information is uploaded to the chain for evidence.

[0080] The embodiment of the present application combines web page authenticity verification with evidence storage technology. On the one hand, it adopts multi-dimensional web page verification, and comprehensively verifies through dimensions such as website digital certificates, web page timestamps, web page integrity, and website integrity, so as to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, it synchronizes and solidifies the displayed content of the web page with the verification process information, and combines blockchain technology to carry out evidence storage, so that the evidence information cannot be tampered with, and ensures that it can be checked and traced in the future when bidding disputes or objections arise.

[0081] In the embodiment of the present application, in the bidding business, the qualification and credit information of the bidding unit is verified through the web page, which makes it difficult to verify and trace due to the strong timeliness. First, the embodiment of the present application performs multi-dimensional verification on the enterprise qualification credit information verification web page to realize the authenticity identification of the web page, ensuring that the qualification and credit information of the bidding unit obtained by the bid evaluation experts are true and valid; secondly, the web page information is solidified and stored in real time to realize reliable recording of timeliness data, ensuring that the information can be traced and viewed when bidding disputes or audits occur. Among them, the multi-dimensional verification of the web page is specifically divided into four dimensions: website digital certificate authenticity verification, web page timestamp verification, web page integrity verification, and website integrity verification. The bidding business enterprise qualification credit information authenticity verification method of the embodiment of the present application adopts a multi-dimensional web page anti-tampering verification mechanism and a blockchain-based web page evidence storage mechanism to ensure that the qualification credit information web page used by the bid evaluation experts is authentic and reliable and the evidence web page verification information is solidified in time, so that the bidding enterprise qualification credit information can be checked, traced, and audited.

[0082] Specifically, firstly, the authenticity of the digital certificate information of the enterprise qualification credit information website is verified, and the signature value and validity period of each level of the website digital certificate chain are checked step by step to determine the security and credibility of the website digital certificate; Secondly, we check the modification of the webpage and confirm the last modification time of the webpage by checking various timestamp information in the source code of the webpage to provide evidence for the authenticity of the website. Thirdly, the integrity of the webpage is verified by obtaining the complete content of the webpage at a certain moment and polling the subsequent webpages at a certain frequency. The hash values ​​of the two are compared to determine whether the webpage has been modified. Then, the integrity of the website files is verified by obtaining all relevant files in the website and calculating the hash value. Then, all relevant files in subsequent websites are obtained by polling at a certain frequency and the hash value is calculated. The integrity of the website files is determined by comparing the two. Finally, after judging through the above four dimensions, if all the verifications pass, it means that the webpage is authentic and reliable, and then the above certificate, webpage timestamp, webpage integrity and website integrity information will be uploaded to the chain for evidence, and the bidding company's qualification and credit information verification page will be timestamped and uploaded to the chain for evidence; otherwise, the webpage is judged to be unreliable, and the abnormal information on the webpage will be uploaded to the chain for evidence.

[0083] The embodiment of the present application combines web page authenticity verification with evidence storage technology. On the one hand, it adopts multi-dimensional web page verification, and comprehensively verifies through dimensions such as website digital certificates, web page timestamps, web page integrity, and website integrity, so as to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, it synchronizes and solidifies the displayed content of the web page with the verification process information, and combines blockchain technology to carry out evidence storage, so that the evidence information cannot be tampered with, and ensures that it can be checked and traced in the future when bidding disputes or objections arise.

[0084] Figure 3 It is a schematic diagram of a method and system framework for verifying the authenticity of enterprise qualification credit information in bidding and tendering business according to an embodiment of the present application. Figure 4 It is a schematic diagram of a method and system framework for verifying the authenticity of enterprise qualification credit information in bidding and tendering business according to an embodiment of the present application.

[0085] like Figure 3 As shown in the figure, the authenticity verification of the enterprise qualification credit information of the bidding business can be divided into three parts, namely: web page acquisition, web page authenticity verification and web page evidence storage. Specifically, it includes the bidding enterprise qualification credit information verification web page acquisition module, website digital certificate authenticity verification module, web page timestamp verification module, web page integrity verification module, website integrity verification module, comprehensive evaluation module and web page evidence storage module.

[0086] Among them, Figure 4As shown, the bidding enterprise qualification credit information verification web page acquisition module: obtain the web page according to the qualification credit information verification link in the bidding document of the bidding enterprise or the qualification credit information official website; the website digital certificate authenticity verification module: obtain the website digital certificate chain through the website, check the digital signatures and validity periods of certificates at all levels step by step, and judge the validity of the certificate. Specifically, the authenticity verification is carried out on the website digital certificate information, and the signature values ​​and validity periods of certificates at all levels are checked step by step through the website digital certificate chain to judge the security and credibility of the website digital certificate; the web page timestamp verification module: obtain the relevant timestamp information through the web page source code, and determine the most recent modification time of the web page through the timestamp. Specifically, the web page modification is checked, and the last modification time of the web page is confirmed by checking various timestamp information in the web page source code to provide evidence for the authenticity of the website; the web page integrity verification module: verify the integrity of the web page, by obtaining the complete content of the web page at a certain moment and obtaining subsequent web pages by polling at a certain frequency, and judging whether the web page has been modified by comparing the hash values ​​of the two; the website integrity verification module: obtain all relevant files in the website, and obtain all relevant files in the subsequent website by polling at a certain frequency, and judge whether the web page has been modified by comparing the hash values ​​of the two. , judge the integrity of the website files. Specifically, verify the integrity of the website files by obtaining all relevant files in the website and calculating the hash value, and then obtain all relevant files in the subsequent website in a polling manner at a certain frequency and calculate the hash value. The integrity of the website files is judged by comparing the two; Comprehensive evaluation module: collects the judgment result information of the above four modules and makes a comprehensive judgment. If the verification results of the above four dimensions are all normal or passed, the web page is judged to be authentic and reliable. If the verification results of the above four dimensions are abnormal or fail, the website is judged to be unreliable; Web page evidence module: When receiving the judgment result If the webpage is authentic and reliable, the above-mentioned digital certificate, webpage timestamp, webpage integrity and website integrity information will be uploaded to the chain for evidence, and the bidding enterprise qualification credit information verification page will be timestamped and uploaded to the chain for evidence; otherwise, the abnormal information on the webpage will be uploaded to the chain for evidence. Specifically, based on the above-mentioned webpage judgment result, synchronous evidence storage work will be carried out. When the judgment result is that the webpage is authentic and reliable, the above-mentioned digital certificate, webpage timestamp, webpage integrity and website integrity information will be uploaded to the chain for evidence, and the bidding enterprise qualification credit information verification page will be timestamped and uploaded to the chain for evidence; otherwise, the abnormal information on the webpage will be uploaded to the chain for evidence.

[0087] For example, the module for obtaining the webpage for verification of the qualification and credit information of the bidding enterprise: This module obtains the required verification webpage according to the qualification and credit information verification link in the bidding document of the bidding enterprise or the official website of the qualification and credit information. The specific process can be as follows: 1) Regarding the credit status of the enterprise, you can open the official website of Credit China https: / / www.creditchina.gov.cn / , the official website of the Enterprise Credit Information Publicity System https: / / www.gsxt.gov.cn / index.html, the official website of the China Judgments Online https: / / wenshu.court.gov.cn / , etc., and enter the name of the bidding enterprise or the unified social credit code to obtain the required verification web page.

[0088] 2) For enterprise qualification information, you can also view it by opening the official website of the corresponding qualification certificate and entering the bidding enterprise name or unified social credit code.

[0089] Figure 5 It is a schematic diagram of the authenticity verification framework of the digital certificate of the bidding and tendering business enterprise qualification credit information verification website according to an embodiment of the present application.

[0090] The authenticity of the website digital certificate is verified through the website digital certificate authenticity verification module. This module verifies the authenticity of the website digital certificate information, checks the signature value and validity period of each level of the website digital certificate chain step by step, and determines the security and credibility of the website digital certificate. Figure 5 As shown, the detailed information of the website digital certificate chain is obtained through the website lock mark, and the authenticity of the root certificate is verified to verify whether the certificate is within the validity period and whether the digital signature is correct. If the verification result is that the root certificate is not within the validity period or the digital signature is incorrect, the authenticity verification of the website digital certificate fails. If the verification result is that the root certificate is within the validity period and the digital signature is correct, the authenticity verification of the intermediate certificate is continued to be performed to verify whether the certificate is within the validity period and whether the digital signature is correct. If the verification result is that the intermediate certificate is not within the validity period or the digital signature is incorrect, the authenticity verification of the website digital certificate fails. If the verification result is that the intermediate certificate is within the validity period and the digital signature is correct, the authenticity verification of the leaf certificate is continued to be performed to verify whether the certificate is within the validity period and whether the digital signature is correct. If the verification result is that the leaf certificate is not within the validity period or the digital signature is incorrect, it is determined that the authenticity verification of the website digital certificate fails. If the verification result is that the leaf certificate is within the validity period and the digital signature is correct, it is determined that the authenticity verification of the website digital certificate passes, that is, when the root certificate, the intermediate certificate and the leaf certificate are all within the validity period and the digital signatures are all correct, it is determined that the authenticity verification of the corresponding website digital certificate passes.

[0091] For example, open the lock mark on the website, click on the certificate information, and then click on the details to obtain the certificate hierarchy information, that is, the website digital certificate chain. Verify the authenticity of each level of digital certificates from top to bottom. First, verify the authenticity of the level 0 certificate, that is, the root certificate. Specifically, there are two factors: First, verify whether the root certificate is currently within the validity period of the certificate. Verify by checking the start and end time of the validity period. If the current time is within the start and end time, the factor verification is passed, otherwise the verification fails. Second, verify whether the digital signature of the root certificate is correct. Extract the root certificate's public key P0, certificate signature algorithm Sign0(), and certificate signature value (that is, certificate digital signature) V0 from the root certificate information, and use the root certificate public key P0 to decrypt the signature value (that is, certificate digital signature) V0 to obtain the summary information A0, A0=Sign0(P0), and recalculate the hash value H0 of the information U0 recorded in the root certificate, H0=Hash0(U0); verify whether the two are equal. If A0=H0, the factor verification is passed, otherwise the verification fails. When both of the above elements are verified, the certificate is valid, otherwise the certificate is invalid.

[0092] Verification of the next-level digital certificate includes two specific factors: first, verifying whether the next-level certificate is currently within the validity period of the certificate, by checking the start and end time of the validity period. If the current time is within the start and end time, the factor verification passes, otherwise the verification fails; second, verifying whether the digital signature of the next-level certificate is correct. For example, for the i-th level (i>=1) certificate, extract the public key P of the certificate from the digital certificate information of this level. i , holder identity information U i , Hash algorithm i (), certificate signature algorithm Sign i (), certificate signature value (ie certificate digital signature) V i , using the public key P of the previous digital certificate i-1 , decrypt the signature value, using P i-1 Decrypt the certificate signature value (i.e. the certificate digital signature) to obtain summary information A i , A i =Sign i (P i-1 ), and recalculate the hash value H of the public key and identity information of the i-th level certificate holder i , H i =Hash i (P i , U i ); verify whether the two are equal. If A i =H i, then the factor verification is passed, otherwise the verification fails. When the above two factors are verified, it means that the certificate is valid, otherwise the certificate is invalid. In this way, the verification of each next level of certificates is completed. If all levels of certificates are valid, it means that the website certificate is safe and reliable, and the authenticity verification of the website digital certificate is determined to be passed; if there is a certificate at a certain level that is invalid, it means that the website certificate is not credible, and the authenticity verification of the website digital certificate is determined to be failed.

[0093] The webpage timestamp verification module is used to verify the webpage timestamp. This module verifies the modification of the webpage and confirms the last modification time of the webpage by checking various timestamp information in the webpage source code, thus providing evidence for the authenticity of the website. The specific process is as follows: 1) Press F12 or Ctrl + Shift + I (Windows / Linux system), Cmd +Option + I (Mac system) shortcut keys on the website page to open the browser developer tools; 2) Select the network option, refresh the web page, view the network request, and check the Last-Modified field in the response header. This field indicates the time when the web page was last modified. Compare the modification time with the current time (referring to the preset update time), and determine whether the website is normal based on the website's update frequency; 3) Verify the time information contained in the webpage content. For example, if the credit report includes timestamp information, compare the consistency between the report timestamp and the terminal time. If the two are consistent, the webpage is considered normal. Otherwise, the webpage is considered abnormal. 4) Comprehensively judge the results of steps 2) and 3). If they are all normal, the webpage is considered normal; otherwise, the webpage is considered abnormal.

[0094] Figure 6 This is a schematic diagram of the bidding business web page integrity verification framework according to an embodiment of the present application. The bidding business web page integrity is verified by the web page integrity verification module. This module verifies the integrity of the web page by obtaining the complete content of the web page at a certain moment and obtaining subsequent web pages in a polling manner at a certain frequency. After comparing the hash values ​​of the two, it is determined whether the web page has been modified. Figure 6 As shown, when the executing entity performs web page integrity verification for bidding business, it can first access the web page and save its HTML source code to obtain the original content of the web page, calculate the hash value of the original content of the web page (for example, Hash0) and store it together with the original content of the web page, set the polling frequency, obtain the content of the web page at the polling time, calculate the hash value of the web page content at polling time j (for example, Hashj) and store it together with the web page content, compare whether the hash values ​​Hash0 and Hashj are equal, if so, it is determined that the web page integrity verification has passed, otherwise it is determined that the web page integrity verification has failed.

[0095] For example, the original content W0 of the web page is obtained by accessing the web page and saving its HTML source code. The obtained original content of the web page is stored in a database or file system, and a hash algorithm Hash'() such as SM3, SHA256, etc. is used to calculate the hash value H' of the original content of the web page and store it, that is, H'=Hash'(W0). According to the frequency of web page updates and the needs of web page integrity monitoring, set an appropriate web page polling frequency. In the bidding scenario, the frequency of web page updates is usually 24 hours, so the polling frequency can be set to once per hour. Specifically, from the update time, poll once every subsequent hour, for a total of 24 times, so as to identify abnormal modifications to the web page content. Access the web page according to the set polling frequency to obtain the web page content W at the current moment. j , j = 1, 2, 3, ..., 24. Use the same hash algorithm as SM3, SHA256 or other hash algorithms Hash'() to calculate the hash value H' of the current web page content obtained by polling j , that is, H' j =Hash'(W j ), j = 1, 2, 3, ..., 24. The hash value H' of the current web page content obtained by polling j Compare with the hash value H' of the stored original content of the web page. If all hash values ​​are the same, that is, H' j =H', j=1, 2, 3, ..., 24, it means that the webpage content has not been tampered with, and the webpage integrity verification is passed; if the hash value is different, it means that the webpage content has been tampered with, and the webpage integrity verification fails.

[0096] The website integrity is verified through the website integrity verification module. This module verifies the integrity of the website files by obtaining all relevant files in the website and calculating the hash value, and then obtaining all relevant files in the subsequent website in a polling manner at a certain frequency and calculating the hash value. The integrity of the website files is determined by comparing the two. Website integrity verification requires verifying the integrity of all relevant files in the website. Compared with web page integrity verification, the verification scope is larger and more comprehensive. The website integrity verification process is similar to the web page integrity verification process. The specific process is as follows: Determine the scope of website files that need to be monitored and collect the original content of these files. k , k=1,2,3,…,K, represents the kth website file, K represents a total of K website files monitored; the original content of the acquired website file is stored in a database or file system, and a hash algorithm such as SM3, SHA256, etc. is used to calculate the hash value H of the original content of the website file k ' and store, that is, H k '=Hash'(D0 k), k=1, 2, 3, ..., K; according to the frequency of website updates and the needs of website integrity monitoring, set the appropriate website polling frequency. In the bidding scenario, the frequency of website updates is usually 24 hours, so the polling frequency can be set to once per hour. Specifically, from the update time, poll once every hour, a total of 24 times, so as to identify abnormal changes in website content; visit the website according to the set polling frequency to obtain the website file content D at the current time j k , j = 1, 2, 3, ..., 24; k = 1, 2, 3, ..., K. The same hash algorithm as SM3, SHA256 or other hash algorithms Hash'() is used to calculate the hash value H of the current website file content obtained by polling. j k ', that is, H j k '=Hash'(D j k ), j=1, 2, 3, ..., 24; k=1, 2, 3, ..., K; the hash value H of the current website file content obtained by polling j k 'Hash value H of the original content of the stored website file k 'Compare. If all hash values ​​are the same, H j k '=H k ', j=1,2,3,…,24; k=1,2,3,…,K, then the website integrity verification is determined to be passed; if there is a difference in the hash value, it means that the website file content has been tampered with and the website integrity verification fails.

[0097] Figure 7 Schematic diagram of the authenticity verification framework of a bidding business web page according to an embodiment of the present application. The authenticity of the web page is verified through a comprehensive evaluation module, such as Figure 7 As shown, if the website digital certificate authenticity verification, web page timestamp verification, web page integrity verification, and website integrity verification are all passed, the web page is authentic and trustworthy. If any of the website digital certificate authenticity verification, web page timestamp verification, web page integrity verification, and website integrity verification results are failed or abnormal, the web page is determined to be untrustworthy.

[0098] The webpage judgment result is recorded through the webpage evidence module. This module carries out synchronous evidence work based on the above webpage judgment result. When the judgment result is that the webpage is authentic and reliable, the above digital certificate, webpage timestamp, webpage integrity and website integrity information are uploaded to the chain for evidence, and the bidding enterprise qualification credit information verification page is timestamped and uploaded to the chain for evidence; otherwise, the abnormal webpage information is uploaded to the chain for evidence. The specific process is as follows: 1) When the comprehensive evaluation module determines that the webpage is authentic, the above digital certificate, webpage timestamp, webpage integrity and website integrity information will be uploaded to the chain for evidence storage, and the bidding enterprise qualification credit information verification page will be timestamped and uploaded to the chain for evidence storage; 2) When the comprehensive evaluation module determines that a web page is unreliable, the abnormal information of the web page will be uploaded to the chain for evidence.

[0099] In the bidding enterprise qualification credit information verification web page acquisition module, website digital certificate authenticity verification module, web page timestamp verification module, web page integrity verification module, website integrity verification module, comprehensive evaluation module, and web page evidence module, the basic process includes: bidding enterprise qualification credit information verification web page acquisition module, web page information verification module, and web page evidence module. The core process includes: web page information verification module and web page evidence module. The web page information verification module is divided into five modules, namely, website digital certificate authenticity verification module, web page timestamp verification module, web page integrity verification module, website integrity verification module, and comprehensive evaluation module, so that the verification process is more comprehensive and reliable. The credibility of the web page is verified in depth and comprehensively using four dimensions, namely, website digital certificate authenticity verification, web page timestamp verification, web page integrity verification, and website integrity verification, which can identify various types of untrue web page attacks and ensure that the evaluation experts conduct bidding enterprise qualification and credit information evaluation based on authentic and credible web pages. Combining the credible verification of web pages with solidified evidence storage, on the one hand, ensures that the source web pages of solidified evidence storage are credible, and on the other hand, the web page content and its authenticity verification process information are stored synchronously, and the evidence elements are more comprehensive, ensuring that the detailed web page information can be traced back and restored when the evidence information is used to resolve disputes or objections in the future, thereby enhancing the legal effect of the evidence information. By combining the authenticity verification of the web page for enterprise qualification credit information with evidence storage technology, on the one hand, four-dimensional web page verification is adopted, and comprehensive verification is carried out through dimensions such as website digital certificates, web page timestamps, web page integrity, and website integrity, so as to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, the displayed content of the web page and the verification process information are solidified synchronously, and evidence storage is carried out in combination with blockchain technology, so as to achieve full-factor evidence storage with legal effect and the evidence information cannot be tampered with, so as to ensure that it can be checked and traced in the future when bidding disputes or objections arise.

[0100] Figure 8 Schematic diagram of the main units of the device for verifying the authenticity of the enterprise qualification credit information of the bidding and tendering business according to the embodiment of the present application. Figure 8 As shown, the authenticity verification device 800 for the enterprise qualification credit information of the bidding and tendering business includes a website digital certificate authenticity verification module 801, a web page timestamp verification module 802, an integrity verification module 803, a comprehensive evaluation module 804 and a web page evidence storage module 805.

[0101] The website digital certificate authenticity verification module 801 is configured to obtain a verification web page, obtain a website digital certificate chain, and check the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data.

[0102] The web page timestamp verification module 802 is configured to refresh the verification web page, obtain the last modification time of the verification web page, the update frequency of the website and the timestamp information contained in the content data of the verification web page, and obtain the web page timestamp verification result data based on the last modification time, update frequency, timestamp information and terminal time.

[0103] The integrity verification module 803 is configured to access the network information carrier, obtain the complete network information at the target time, access the network information carrier at a set polling frequency to obtain the network information at the polling time, and compare the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data.

[0104] The comprehensive evaluation module 804 is configured to determine the webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data and the network information carrier integrity verification result data.

[0105] The web page evidence storage module 805 is configured to determine the evidence content data based on the web page authenticity verification result data, and store the evidence content data on the chain.

[0106] In some embodiments, the website digital certificate authenticity verification module 801 is further configured to: obtain a lock mark on the website, open the lock mark to obtain certificate information; and obtain the website digital certificate chain based on the certificate information.

[0107] In some embodiments, the website digital certificate authenticity verification module 801 is further configured to: verify whether the root certificate in the website digital certificate chain is within the validity period and the digital signature corresponding to the root certificate is correct, if not, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if yes, continue to verify whether the intermediate certificate is within the validity period and the digital signature corresponding to the intermediate certificate is correct, if otherwise, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if yes, continue to verify whether the leaf certificate is within the validity period and the digital signature corresponding to the leaf certificate is correct, if otherwise, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification failed; if yes, determine the website digital certificate authenticity verification result data to be the website digital certificate authenticity verification passed.

[0108] In some embodiments, the website digital certificate authenticity verification module 801 is further configured to: extract the public key, certificate signature algorithm and certificate digital signature of the root certificate from the information corresponding to the root certificate; use the public key to decrypt the certificate digital signature to obtain summary information, and recalculate the hash value of the information recorded in the root certificate; verify whether the summary information is equal to the hash value, if so, the digital signature corresponding to the root certificate is correct, otherwise the digital signature corresponding to the root certificate is incorrect.

[0109] In some embodiments, the website digital certificate authenticity verification module 801 is further configured to: extract the public key, holder identity information, hash algorithm, certificate signature algorithm and certificate digital signature of the i-th level certificate from the information corresponding to the i-th level certificate, use the public key of the i-1-th level digital certificate to decrypt the certificate digital signature to obtain summary information, and recalculate the hash value of the public key and holder identity information; verify whether the summary information and the hash value are equal, if so, the digital signature corresponding to the i-th level certificate is correct, otherwise, the digital signature corresponding to the i-th level certificate is incorrect; where i is an integer greater than or equal to 1.

[0110] In some embodiments, the web page timestamp verification module 802 is further configured to: determine the update interval duration based on the update frequency; determine the next update time based on the last update time and the update interval duration; if the last modification time is inconsistent with the next update time, determine that the website is abnormal; if the last modification time is consistent with the next update time, determine that the website is normal; if the timestamp information is consistent with the terminal time, determine that the verification web page is normal; if the timestamp information is inconsistent with the terminal time, determine that the verification web page is abnormal; if the website is normal and the verification web page is normal, determine that the web page timestamp verification result data is passed.

[0111] In some embodiments, the network information carrier includes web pages and websites, and the network information includes web page content and website content; the integrity verification module 803 is further configured to: access the verification web page, obtain the complete web page content at the target time, access the verification web page at a set polling frequency to obtain the web page content at the polling time, and compare the corresponding hash values ​​based on the complete web page content and each web page content to obtain the web page integrity verification result data; access the website, obtain the complete website content at the target time, access the website at a set polling frequency to obtain the website content at the polling time, and compare the corresponding hash values ​​based on the complete website content and each website content to obtain the website integrity verification result data.

[0112] In some embodiments, the comprehensive evaluation module 804 is further configured to determine web page authenticity verification result data based on the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data and the website integrity verification result data.

[0113] In some embodiments, the bidding and tendering business enterprise qualification credit information authenticity verification device also includes Figure 8 The verification web page acquisition module not shown in the figure is configured to: obtain the verification web page according to the web page acquisition configuration information in the bidding document received from the bidding enterprise, wherein the web page acquisition configuration information includes any one of the qualification and credit information verification link and the qualification and credit information official website.

[0114] In some embodiments, the web page evidence module 805 is further configured to: if the web page authenticity verification result data is that the web page authenticity verification is passed, the website digital certificate chain, timestamp information, complete network information and various network information in the verification process are uploaded to the chain for evidence, and the verification page is timestamped and uploaded to the chain for evidence; if the web page authenticity verification result data is that the web page authenticity verification is failed, web page exception information is generated and the web page exception information is uploaded to the chain for evidence.

[0115] It should be noted that the authenticity verification method of the bidding and tendering business enterprise qualification credit information and the authenticity verification device of the bidding and tendering business enterprise qualification credit information of this application have a corresponding relationship in terms of specific implementation content, so the repeated content will not be explained again.

[0116] Fig. 9 An exemplary system architecture 900 is shown to which the method for verifying the authenticity of credit information of enterprise qualifications in bidding and tendering business or the device for verifying the authenticity of credit information of enterprise qualifications in bidding and tendering business according to the embodiments of the present application can be applied.

[0117] like Fig. 9 As shown, system architecture 900 may include terminal devices 901, 902, 903, network 904 and server 905. Network 904 is used to provide a medium for communication links between terminal devices 901, 902, 903 and server 905. Network 904 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0118] The user can use the terminal devices 901, 902, 903 to interact with the server 905 through the network 904 to receive or send messages, etc. Various communication client applications can be installed on the terminal devices 901, 902, 903, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only for example).

[0119] Terminal devices 901, 902, 903 can be various electronic devices that have a screen for verifying the authenticity of corporate qualifications and credit information of bidding and tendering business and support web browsing, including but not limited to smart phones, tablet computers, laptops, desktop computers, etc.

[0120] The server 905 may be a server that provides various services, such as a background management server that provides support for verification web pages obtained by users using the terminal devices 901 , 902 , and 903 (only as an example). The backend management server can obtain the verification web page, obtain the website digital certificate chain, and check the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data; refresh the verification web page, obtain the last modification time of the verification web page, the update frequency of the website and the timestamp information contained in the content data of the verification web page, and obtain the web page timestamp verification result data according to the last modification time, update frequency, timestamp information and terminal time; access the network information carrier to obtain the complete network information at the target time, access the network information carrier at the set polling frequency to obtain the network information at the polling time, compare the corresponding hash values ​​based on the complete network information and each network information to obtain the network information carrier integrity verification result data; determine the web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data and the network information carrier integrity verification result data; determine the stored content data according to the web page authenticity verification result data, and upload the stored content data to the chain for evidence. The web page authenticity verification and evidence storage technology are used together. On the one hand, multi-dimensional web page verification is adopted, and comprehensive verification is carried out through dimensions such as website digital certificates, web page timestamps, and network information carrier integrity to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, the displayed content of the web page and the verification process information are solidified synchronously, and blockchain technology is combined to carry out evidence storage, so that the displayed content of the web page and the verification process information cannot be tampered with, ensuring that it can be checked and traced in the event of bidding disputes or objections in the future. By adopting a multi-dimensional web page anti-tampering verification mechanism and a blockchain-based web page evidence storage mechanism, it is ensured that the qualification credit information web page used by the bid evaluation experts is authentic and reliable, and the verification information of the web page stored on the chain is solidified in a timely manner. Based on the evidence content data such as the web page verification information stored on the chain, the qualification credit information of the bidding enterprise can be checked, traced, and audited.

[0121] It should be noted that the authenticity verification method of the credit information of the enterprise qualifications of the bidding and tendering business provided in the embodiment of the present application is generally executed by the server 905. Accordingly, the authenticity verification device of the credit information of the enterprise qualifications of the bidding and tendering business is generally set in the server 905.

[0122] It should be understood that Fig. 9The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to the implementation requirements.

[0123] Reference below Fig.10 , which shows a schematic diagram of the structure of a computer system 1000 of a terminal device suitable for implementing an embodiment of the present application. Fig.10 The terminal device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0124] like Fig.10 As shown, the computer system 1000 includes a central processing unit (CPU) 1001, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage part 1008 into a random access memory (RAM) 1003. In the RAM 1003, various programs and data required for the operation of the computer system 1000 are also stored. The CPU 1001, the ROM 1002, and the RAM 1003 are connected to each other through a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0125] The following components are connected to the I / O interface 1005: an input section 1006 including a keyboard, a mouse, etc.; an output section 1007 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 1008 including a hard disk, etc.; and a communication section 1009 including a network interface card such as a LAN card, a modem, etc. The communication section 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to the I / O interface 1005 as needed. A removable medium 1011, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1010 as needed, so that a computer program read therefrom is installed into the storage section 1008 as needed.

[0126] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 1009, and / or installed from the removable medium 1011. When the computer program is executed by the central processing unit (CPU) 1001, the above-mentioned functions defined in the system of the present application are executed.

[0127] It should be noted that the computer-readable medium shown in the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. Computer-readable storage media may include, for example, but are not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0128] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the above-mentioned module, program segment or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0129] The units involved in the embodiments described in the present application may be implemented by software or hardware. The units described may also be set in a processor, for example, it may be described as: a processor includes a website digital certificate authenticity verification module, a web page timestamp verification module, an integrity verification module, a comprehensive evaluation module, and a web page evidence storage module. The names of these units do not, in some cases, constitute limitations on the units themselves.

[0130] As another aspect, the present application further provides a computer-readable medium, which may be included in the device described in the above embodiment; or may exist independently without being assembled into the device. The computer-readable medium carries one or more programs. When the one or more programs are executed by a device, the device obtains a verification web page, obtains a website digital certificate chain, checks the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain, so as to obtain the website digital certificate authenticity verification result data; refreshes the verification web page, obtains the last modification time of the verification web page, the update frequency of the website and the timestamp information contained in the content data of the verification web page, and obtains the web page timestamp verification result data according to the last modification time, update frequency, timestamp information and terminal time; accesses the network information carrier to obtain the complete network information at the target time, accesses the network information carrier at a set polling frequency to obtain the network information at the polling time, compares the corresponding hash values ​​based on the complete network information and each network information, so as to obtain the network information carrier integrity verification result data; determines the web page authenticity verification result data according to the website digital certificate authenticity verification result data, the web page timestamp verification result data and the network information carrier integrity verification result data; determines the stored content data according to the web page authenticity verification result data, and stores the stored content data on the chain.

[0131] The computer program product of the present application includes a computer program, which, when executed by a processor, implements the method for verifying the authenticity of the credit information of the bidding and tendering business enterprise in the embodiment of the present application.

[0132] According to the technical solution of the embodiment of the present application, the web page authenticity verification and evidence storage technology are used together. On the one hand, multi-dimensional web page verification is adopted, and comprehensive verification is carried out through dimensions such as website digital certificates, web page timestamps, and network information carrier integrity to achieve reliable web page authenticity identification and avoid being deceived by malicious bidding units during the bid evaluation process; on the other hand, the displayed content of the web page and the verification process information are solidified synchronously, and blockchain technology is combined to carry out evidence storage, so that the displayed content of the web page and the verification process information and other evidence content data cannot be tampered with, ensuring that they can be checked and traced in the event of bidding disputes or objections in the future. By adopting a multi-dimensional web page anti-tampering verification mechanism and a blockchain-based web page evidence storage mechanism, it is ensured that the qualification credit information web page used by the bid evaluation experts is authentic and reliable, and the on-chain evidence web page verification information is solidified in a timely manner. Based on the on-chain evidence web page verification information and other evidence content data, the qualification credit information of the bidding enterprise can be checked, traced, and audited.

[0133] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A method for verifying the authenticity of enterprise qualification credit information in bidding business, characterized in that: include: Obtain a verification webpage, obtain a website digital certificate chain, and check the digital signature and validity period of each level of certificates step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the authenticity verification result data of the website digital certificate; Refresh the verification webpage, obtain the last modification time of the verification webpage, the update frequency of the website and the timestamp information contained in the content data of the verification webpage, and obtain the webpage timestamp verification result data according to the last modification time, the update frequency, the timestamp information and the terminal time; Accessing the network information carrier to obtain the complete network information at the target time, accessing the network information carrier at a set polling frequency to obtain the network information at the polling time, and comparing the corresponding hash values ​​based on the complete network information and each of the network information to obtain the network information carrier integrity verification result data; Determine the webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data and the network information carrier integrity verification result data; According to the authenticity verification result data of the webpage, the evidence content data is determined, and the evidence content data is uploaded to the chain for evidence storage.

2. The method according to claim 1, characterized in that The step of checking the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the authenticity verification result data of the website digital certificate includes: Verify whether the root certificate in the website digital certificate chain is within the validity period and the digital signature corresponding to the root certificate is correct, if not, determine that the website digital certificate authenticity verification result data is that the website digital certificate authenticity verification fails; If yes, continue to verify whether the intermediate certificate is within the validity period and the digital signature corresponding to the intermediate certificate is correct; if no, determine that the authenticity verification result data of the website digital certificate is that the authenticity verification of the website digital certificate fails; If so, continue to verify whether the leaf certificate is within the validity period and the digital signature corresponding to the leaf certificate is correct; if not, determine that the authenticity verification result data of the website digital certificate is that the authenticity verification of the website digital certificate fails; If so, it is determined that the website digital certificate authenticity verification result data is that the website digital certificate authenticity verification has passed.

3. The method according to claim 2, characterized in that Verify whether the digital signature corresponding to the root certificate is correct, including: Extract the public key, certificate signature algorithm and certificate digital signature of the root certificate from the information corresponding to the root certificate; Decrypting the digital signature of the certificate using the public key to obtain summary information, and recalculating the hash value of the information recorded in the root certificate; Verify whether the summary information is equal to the hash value, if so, the digital signature corresponding to the root certificate is correct, otherwise, the digital signature corresponding to the root certificate is incorrect; and Verify whether the digital signature corresponding to the level i certificate is correct, including: Extract the public key, holder identity information, hash algorithm, certificate signature algorithm and certificate digital signature of the i-th level certificate from the information corresponding to the i-th level certificate, decrypt the certificate digital signature using the public key of the i-th level digital certificate to obtain summary information, and recalculate the hash value of the public key and the holder identity information; Verify whether the summary information and the hash value are equal, if so, the digital signature corresponding to the i-th level certificate is correct, otherwise, the digital signature corresponding to the i-th level certificate is incorrect; Wherein, i is an integer greater than or equal to 1, and the i-th level certificate includes the intermediate certificate and the leaf certificate.

4. The method according to claim 1, characterized in that: The obtaining of webpage timestamp verification result data according to the last modification time, the update frequency, the timestamp information and the terminal time includes: Determine the update interval duration according to the update frequency; Determine the next update time based on the last update time and the update interval duration; If the last modification time is inconsistent with the next update time, it is determined that the website is abnormal; if the last modification time is consistent with the next update time, it is determined that the website is normal; If the timestamp information is consistent with the terminal time, it is determined that the verification webpage is normal; if the timestamp information is inconsistent with the terminal time, it is determined that the verification webpage is abnormal; If the website is normal and the verification webpage is normal, it is determined that the webpage timestamp verification result data is that the webpage timestamp verification is passed.

5. The method according to claim 1, characterized in that The network information carrier includes web pages and websites, and the network information includes web page content and website content; the network information carrier integrity verification result data obtained includes: Accessing the verification webpage to obtain the complete webpage content at the target time, accessing the verification webpage at a set polling frequency to obtain the webpage content at the polling time, and comparing the corresponding hash values ​​based on the complete webpage content and each of the webpage contents to obtain webpage integrity verification result data; Access the website to obtain the complete website content at the target time, access the website at a set polling frequency to obtain the website content at the polling time, and compare the corresponding hash values ​​based on the complete website content and each of the website contents to obtain website integrity verification result data.

6. The method according to claim 5, characterized in that The determining of the webpage authenticity verification result data includes: The web page authenticity verification result data is determined according to the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data and the website integrity verification result data.

7. The method according to claim 1, characterized in that The step of determining the stored content data according to the webpage authenticity verification result data, and storing the stored content data on a chain includes: If the webpage authenticity verification result data indicates that the webpage authenticity verification has been passed, the website digital certificate chain, the timestamp information, the complete network information and each of the network information in the verification process are stored on the chain, and the verification page is timestamped and stored on the chain; If the web page authenticity verification result data indicates that the web page authenticity verification fails, web page exception information is generated and the web page exception information is uploaded to the chain for evidence.

8. A device for verifying the authenticity of enterprise qualification credit information in bidding business, characterized in that: include: The website digital certificate authenticity verification module is configured to obtain a verification webpage, obtain a website digital certificate chain, and check the digital signature and validity period of each level certificate step by step according to the hierarchical structure corresponding to the website digital certificate chain to obtain the website digital certificate authenticity verification result data; A webpage timestamp verification module is configured to refresh the verification webpage, obtain the last modification time of the verification webpage, the update frequency of the website and the timestamp information contained in the content data of the verification webpage, and obtain webpage timestamp verification result data according to the last modification time, the update frequency, the timestamp information and the terminal time; an integrity verification module, configured to access the network information carrier, obtain the complete network information at the target time, access the network information carrier at a set polling frequency to obtain the network information at the polling time, and compare the corresponding hash values ​​based on the complete network information and each of the network information to obtain the network information carrier integrity verification result data; A comprehensive evaluation module is configured to determine the webpage authenticity verification result data according to the website digital certificate authenticity verification result data, the webpage timestamp verification result data and the network information carrier integrity verification result data; The web page evidence storage module is configured to determine the evidence content data based on the authenticity verification result data of the web page, and store the evidence content data on the chain.

9. The device according to claim 8, characterized in that The website digital certificate authenticity verification module is further configured to: Verify whether the root certificate in the website digital certificate chain is within the validity period and the digital signature corresponding to the root certificate is correct, if not, determine that the website digital certificate authenticity verification result data is that the website digital certificate authenticity verification fails; If yes, continue to verify whether the intermediate certificate is within the validity period and the digital signature corresponding to the intermediate certificate is correct; if no, determine that the authenticity verification result data of the website digital certificate is that the authenticity verification of the website digital certificate fails; If so, continue to verify whether the leaf certificate is within the validity period and the digital signature corresponding to the leaf certificate is correct; if not, determine that the authenticity verification result data of the website digital certificate is that the authenticity verification of the website digital certificate fails; If so, it is determined that the website digital certificate authenticity verification result data is that the website digital certificate authenticity verification has passed.

10. The device according to claim 9, characterized in that The website digital certificate authenticity verification module is further configured to: Extract the public key, certificate signature algorithm and certificate digital signature of the root certificate from the information corresponding to the root certificate; Decrypting the digital signature of the certificate using the public key to obtain summary information, and recalculating the hash value of the information recorded in the root certificate; Verify whether the summary information is equal to the hash value, if so, the digital signature corresponding to the root certificate is correct, otherwise, the digital signature corresponding to the root certificate is incorrect; as well as Verify that the digital signature corresponding to the level i certificate is correct and is configured as: Extract the public key, holder identity information, hash algorithm, certificate signature algorithm and certificate digital signature of the i-th level certificate from the information corresponding to the i-th level certificate, decrypt the certificate digital signature using the public key of the i-th level digital certificate to obtain summary information, and recalculate the hash value of the public key and the holder identity information; Verify whether the summary information and the hash value are equal, if so, the digital signature corresponding to the i-th level certificate is correct, otherwise, the digital signature corresponding to the i-th level certificate is incorrect; Wherein, i is an integer greater than or equal to 1, and the i-th level certificate is configured as the intermediate certificate and the leaf certificate.

11. The device according to claim 8, characterized in that The webpage timestamp verification module is further configured to: Determine the update interval duration according to the update frequency; Determine the next update time based on the last update time and the update interval duration; If the last modification time is inconsistent with the next update time, it is determined that the website is abnormal; if the last modification time is consistent with the next update time, it is determined that the website is normal; If the timestamp information is consistent with the terminal time, it is determined that the verification webpage is normal; If the timestamp information is inconsistent with the terminal time, it is determined that the verification webpage is abnormal; If the website is normal and the verification webpage is normal, it is determined that the webpage timestamp verification result data is that the webpage timestamp verification is passed.

12. The device according to claim 8, characterized in that The network information carrier includes web pages and websites, and the network information includes web page content and website content; the integrity verification module is further configured to: Accessing the verification webpage to obtain the complete webpage content at the target time, accessing the verification webpage at a set polling frequency to obtain the webpage content at the polling time, and comparing the corresponding hash values ​​based on the complete webpage content and each of the webpage contents to obtain webpage integrity verification result data; Access the website to obtain the complete website content at the target time, access the website at a set polling frequency to obtain the website content at the polling time, and compare the corresponding hash values ​​based on the complete website content and each of the website contents to obtain website integrity verification result data.

13. The device according to claim 12, characterized in that The comprehensive evaluation module is further configured to: The web page authenticity verification result data is determined according to the website digital certificate authenticity verification result data, the web page timestamp verification result data, the web page integrity verification result data and the website integrity verification result data.

14. The device according to claim 8, characterized in that The webpage evidence storage module is further configured to: If the webpage authenticity verification result data indicates that the webpage authenticity verification has been passed, the website digital certificate chain, the timestamp information, the complete network information and each of the network information in the verification process are stored on the chain, and the verification page is timestamped and stored on the chain; If the web page authenticity verification result data indicates that the web page authenticity verification fails, web page exception information is generated and the web page exception information is uploaded to the chain for evidence.

15. An electronic device for verifying the authenticity of enterprise qualification and credit information in bidding and tendering business, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 7.

16. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images