Electronic contract signing verification method based on trusted timestamp

Abstract

The invention discloses an electronic contract signing verification method based on a trusted timestamp, and relates to the technical field of block chains and electronic contract signing, and the method comprises the steps: receiving a to-be-verified electronic contract signing file, and extracting a timestamp data block and signature data from the electronic contract signing file; sending the timestamp data block to a trusted timestamp service mechanism for verification, obtaining an evidence storage record corresponding to the electronic contract signing file from a block chain node, and extracting block chain evidence storage time and a contract hash value; and judging the signing time information of the timestamp data block and the blockchain evidence storage time of the evidence storage record, and when the time difference between the signing time information and the blockchain evidence storage time is smaller than a preset threshold and the contract hash value is matched with the contract file feature value, outputting a verification passing identifier. According to the invention, a dual verification system of the trusted timestamp service mechanism and the block chain distributed account book is constructed, so that the technical problem of insufficient verification reliability of a traditional single time source is effectively solved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain and electronic contract signing, in particular to an electronic contract signing and verification method based on a trusted time stamp. Background Art

[0002] With the popularization of e-commerce and digital office work, as an important legal document, the authenticity and immutability of the signing process of electronic contracts have become the key to ensuring the legal validity of contracts. Due to its characteristics of decentralization, data immutability and traceability, blockchain technology provides a new technical means for the secure storage of electronic contracts. However, existing blockchain-based electronic contract signing methods mainly focus on the on-chain storage of contract content and signing processes, lacking the trusted verification of time stamp data and multi-dimensional security guarantees. Moreover, the automatic judgment mechanism of smart contracts may have problems such as insufficient trust in verification nodes and limited abnormal detection capabilities in practical applications, making it difficult to meet the needs of signing contracts with high security levels. Therefore, how to achieve trusted and accurate verification of the signing time of electronic contracts and combine multi-node consensus and automatic judgment of smart contracts to improve signing security has become a difficult problem that needs to be solved urgently in the existing technology.

[0003] CN112669176B discloses an electronic contract signing method based on a smart contract, including providing a contract signing interface, completing an electronic signature and uploading a digital fingerprint to the blockchain, constructing and publishing a smart contract, comparing and signing the signing result through a verification node, and finally determining the validity of the contract signing by the smart contract and uploading the digital fingerprint to the chain. This method essentially improves the efficiency and storage security of electronic contract signing, but it overly relies on the signature consensus of verification nodes, there is a risk that the insufficient number of verification nodes or malicious nodes will affect the judgment result, and the credibility of the time stamp is not independently verified, making it difficult to prevent the tampering or forgery of time information.

[0004] CN115619409A discloses a highly reliable electronic contract signing method and system based on autonomous consortium chain technology, which ensures the whole process controllability of the online editing and signing process of electronic contracts and the reliable storage of data through online registration, identity authentication, electronic seal signing and the whole process of signing data on the chain. This method improves the transparency and data security of the signing process, but it relies on a centralized account management and secret key distribution mechanism, there are identity authentication security risks. At the same time, it does not make full use of trusted time stamp technology for multi-dimensional verification of the signing time, lacking the intelligent identification and warning capabilities for abnormal signing behaviors, which limits its application in scenarios with high security requirements. Summary of the Invention

[0005] In view of the problems existing in the existing electronic contract signing methods, such as insufficient trust in verification nodes, lack of credibility of time stamps, and difficulty in effectively identifying abnormal signing behaviors, the present invention is proposed.

[0006] Therefore, the problem to be solved by the present invention is how to achieve multi-dimensional trusted verification of the electronic contract signing process based on the trusted timestamp technology, effectively prevent time information tampering and malicious behavior of nodes, and improve the security, authenticity and legal effect of electronic contract signing.

[0007] To solve the above technical problems, the present invention provides the following technical solutions: In a first aspect, an embodiment of the present invention provides an electronic contract signing verification method based on a trusted timestamp, which includes: Receiving an electronic contract signing file to be verified, and extracting a timestamp data block and signature data from the electronic contract signing file; Sending the timestamp data block to a trusted timestamp service agency for verification, and obtaining an evidence preservation record corresponding to the electronic contract signing file from a blockchain node, and extracting the blockchain evidence preservation time and the contract hash value; Judging the signing time information of the timestamp data block and the blockchain evidence preservation time of the evidence preservation record. When the time difference between the two is less than a preset threshold and the contract hash value matches the contract file feature value, an authentication passed flag is output.

[0008] As a preferred solution of the electronic contract signing verification method based on a trusted timestamp of the present invention, wherein: the method for outputting the authentication passed flag is as follows: Reading the signing time information of the timestamp data block and the blockchain evidence preservation time of the blockchain evidence preservation record from the verification data buffer, calculating the time difference through a preset time difference calculation module, and judging the time difference with a preset time threshold; When the time difference is less than a first preset time threshold, the corresponding timestamp data block is marked with a green security level, and at the same time, the signature algorithm type of the timestamp data block is detected; if the signature algorithm type is the national secret SM2 algorithm and the contract hash value completely matches the contract file feature value, an authentication passed flag is generated; When the time difference is greater than or equal to the first preset time threshold and less than a second preset time threshold, the corresponding timestamp data block is marked with a yellow warning level, and a supplementary verification mechanism is started; When the time difference is greater than or equal to the second preset time threshold and less than a third preset time threshold, the corresponding timestamp data block is marked with a red warning level, and an exception handling mechanism is started; When the time difference is greater than or equal to the third preset time threshold, or the time difference is negative, the corresponding timestamp data block is marked with a black failure level, and a security warning mechanism is triggered; Writing the judgment result data into the verification log database, and displaying the verification status information on the verification interface.

[0009] As a preferred solution of the electronic contract signing and verification method based on a trusted timestamp according to the present invention, the supplementary verification mechanism includes: extracting the signing geographical location information of the electronic contract signing file, and when the signing geographical location information indicates cross-time zone operation and the contract hash value exactly matches the contract file feature value, a verification passed flag is generated; The exception handling mechanism includes: retrieving the network transmission log of the electronic contract signing file, analyzing the packet timestamp sequence of the network transmission log, and when it is detected that the packet timestamp sequence exceeds the preset network delay record and the contract hash value exactly matches the contract file feature value, a verification passed flag is generated; The security warning mechanism includes: freezing the verification process of the electronic contract signing file, generating a verification failed flag, and pushing an exception notice to a preset security module.

[0010] As a preferred solution of the electronic contract signing and verification method based on a trusted timestamp according to the present invention, sending the timestamp data block to a trusted timestamp service agency for verification, and obtaining the evidence preservation record corresponding to the electronic contract signing file from a blockchain node, and extracting the blockchain evidence preservation time and the contract hash value, including: Constructing a timestamp verification request data packet, and sending the timestamp verification request data packet to the trusted timestamp service agency through a secure communication channel; Sending an evidence preservation query request to a corresponding blockchain node based on the blockchain positioning information of the electronic contract signing file; The blockchain node retrieves the blockchain ledger based on the evidence preservation query request, extracts the evidence preservation record corresponding to the electronic contract signing file, and at the same time returns the evidence preservation record to the contract verification terminal, wherein the blockchain evidence preservation time and the contract file feature value in the evidence preservation record are stored in the verification data buffer.

[0011] As a preferred solution of the electronic contract signing and verification method based on a trusted timestamp according to the present invention, the trusted timestamp service agency receives the timestamp verification request data packet, queries the timestamp record corresponding to the contract hash value from the timestamp database, and judges the timestamp record and the signing time information of the timestamp data block.

[0012] As a preferred solution of the electronic contract signing and verification method based on a trusted timestamp according to the present invention, receiving an electronic contract signing file to be verified, and extracting a timestamp data block and a signature data from the electronic contract signing file, including: Receive the electronic contract signing document to be verified through the contract verification terminal input port, and use a preset file parsing module to parse the data of the electronic contract signing document, separating it into a timestamp data block and a signature data; Read the contract hash value and the signing time information from the timestamp data block, and temporarily store the contract hash value and the signing time information in the verification buffer; Extract the signatory digital certificate information and digital signature from the signature data, and perform a preliminary verification on the format validity of the signatory digital certificate information.

[0013] As a preferred solution of the electronic contract signing verification method based on a trusted timestamp according to the present invention, wherein: the preliminary verification of the format validity includes: Parse the certificate fields of the signatory digital certificate information, where the certificate fields include the certificate version number, serial number, signature algorithm identifier, certificate issuer information, start and end times of the certificate validity period, and certificate extension item format; Check the start and end times of the certificate validity period to determine whether the current verification time is within the certificate validity period; Read the root certificate issuer identifier of the certificate issuer information and match it with the preset list of trusted certificate issuers; Verify the certificate extension item format, and check whether the signature algorithm identifier is an encryption algorithm type supported by the system. The certificate extension item format includes key usage, certificate policy, and CRL distribution point.

[0014] As a preferred solution of the electronic contract signing verification method based on a trusted timestamp according to the present invention, wherein: the timestamp data block includes a contract hash value and signing time information; the contract hash value is generated by the SHA-256 algorithm; the signing time information is issued by a trusted timestamp service agency; the signature data includes the signatory's digital certificate information and digital signature; the digital signature is generated based on the RSA algorithm.

[0015] In a third aspect, an embodiment of the present invention provides a computer device, including a memory and a processor, where the memory stores a computer program, wherein: when the computer program instructions are executed by the processor, the steps of the electronic contract signing verification method based on a trusted timestamp as described in the first aspect of the present invention are implemented.

[0016] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored, wherein: when the computer program instructions are executed by the processor, the steps of the electronic contract signing verification method based on a trusted timestamp as described in the first aspect of the present invention are implemented.

[0017] Compared with the prior art, the beneficial effects of the present invention are as follows: By constructing a dual verification system of a trusted timestamp service institution and a blockchain distributed ledger, the technical problem of insufficient reliability in the verification of traditional single time sources is effectively solved, and the credibility and tamper-proof ability of the signing time of electronic contracts are significantly improved; The method adopts an intelligent multi-level verification and judgment mechanism, combined with a security level marking system, which can accurately identify various abnormal situations, and provides corresponding supplementary verification and exception handling mechanisms for special scenarios such as cross-time zone operations and network transmission delays, greatly improving the accuracy and adaptability of the verification process; At the same time, through the signature type detection of the national cryptographic SM2 algorithm and the SHA-256 hash value matching verification, the integrity and authenticity of the signature data are ensured, providing efficient, secure and reliable technical support for contract signing verification in fields such as e-commerce and digital office work. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings. Among them: Figure 1 It is a flowchart of an electronic contract signing verification method based on a trusted timestamp. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0019] To make the above objects, features and advantages of the present invention more clearly understandable, the following will give a detailed description of the specific embodiments of the present invention with reference to the drawings in the specification.

[0020] In the following description, many specific details are set forth in order to fully understand the present invention. However, the present invention can also be implemented in other ways different from those described herein. Those skilled in the art can make similar extensions without departing from the connotation of the present invention. Therefore, the present invention is not limited by the specific embodiments disclosed below.

[0021] Secondly, the so-called "one embodiment" or "embodiment" herein refers to a specific feature, structure or characteristic that can be included in at least one implementation manner of the present invention. The "in one embodiment" that appears in different places in this specification does not all refer to the same embodiment, nor is it a separate or selectively exclusive embodiment from other embodiments.

[0022] Refer to Figure 1 , for an embodiment of the present invention, which provides an electronic contract signing verification method based on a trusted timestamp, including, S1: Receive the electronic contract signing file to be verified, and extract the timestamp data block and signature data from the electronic contract signing file.

[0023] S1.1: Receive the electronic contract signing file to be verified through the contract verification terminal input port, and use the preset file parsing module to parse the data of the electronic contract signing file, separating it into a timestamp data block and a signature data.

[0024] It should be noted that the timestamp data block includes the contract hash value and the signing time information; the contract hash value is generated by the SHA-256 algorithm; the signing time information is issued by a trusted timestamp service agency; the signature data includes the digital certificate information and digital signature of the signatory; the digital signature is generated based on the RSA algorithm.

[0025] S1.2: Read the contract hash value and the signing time information from the timestamp data block, and temporarily store the contract hash value and the signing time information in the verification buffer.

[0026] S1.3: Extract the digital certificate information and digital signature of the signatory from the signature data, and conduct a preliminary verification on the format validity of the digital certificate information of the signatory.

[0027] In an optional implementation manner, the preliminary verification of format validity includes: parsing the certificate fields of the digital certificate information of the signatory, where the certificate fields include the certificate version number, serial number, signature algorithm identifier, certificate issuer information, start and end times of the certificate validity period, and certificate extension item format; checking the start and end times of the certificate validity period to determine whether the current verification time is within the certificate validity period; reading the root certificate issuer identifier of the certificate issuer information and matching it with the preset list of trusted certificate issuing agencies; verifying the certificate extension item format and checking whether the signature algorithm identifier is an encryption algorithm type supported by the system, and the certificate extension item format includes key usage, certificate policy, and CRL distribution point.

[0028] Exemplarily, if the signatory is Company A, its digital certificate information includes that the issuing agency is the national CA agency, the certificate validity period is from January 1, 2024 to December 31, 2026, the signature algorithm is the national secret SM2 algorithm, it is verified that the current time is within the certificate validity period, and the issuing agency information matches the preset trusted CA list, which is regarded as qualified certificate verification.

[0029] S2: Send the timestamp data block to the trusted timestamp service agency for verification, obtain the deposit record corresponding to the electronic contract signing file from the blockchain node, and extract the blockchain deposit time and the contract hash value.

[0030] S2.1: Construct a timestamp verification request data packet, and send the timestamp verification request data packet to the trusted timestamp service agency through a secure communication channel.

[0031] In an alternative embodiment, the trusted timestamp service institution receives a timestamp verification request data packet, queries the timestamp record corresponding to the contract hash value from the timestamp database, and judges the timestamp record against the signing time information of the timestamp data block.

[0032] Preferably, the specific steps for the trusted timestamp service institution to judge the timestamp record against the signing time information of the timestamp data block include: parsing the timestamp verification request data packet, extracting the signing time information and the contract hash value in the timestamp data block, where the signing time information includes the timestamp issuance time, the timestamp serial number, and the timestamp signature algorithm identifier; retrieving the corresponding original timestamp record in the timestamp database based on the contract hash value, where the original timestamp record includes the original timestamp issuance time, the time source identifier, and the timestamp issuing institution certificate information; judging whether the timestamp serial number of the timestamp data block is consistent with the sequence code of the original timestamp record, and verifying whether the timestamp signature algorithm identifier conforms to the signature algorithm registered in the original timestamp record; comparing the timestamp issuance time with the original timestamp issuance time, with an allowable time error range of ±1 second, and determining that the timestamp record is abnormal if the error range is exceeded; verifying whether the time source identifier of the original timestamp record is the National Time Service Center, where the time source identifier includes the time service server number and the time synchronization status code; checking the status of the timestamp issuing institution certificate information, including the certificate validity period, the certificate revocation status, and the integrity of the certificate trust chain; when all the above judgments pass, generating a timestamp verification success identifier and returning the verification success identifier together with the key fields in the original timestamp record; if any one of the judgments fails, generating a verification failure identifier including the specific abnormal type.

[0033] S2.2: Based on the blockchain positioning information of the electronic contract signing document, send a deposit query request to the corresponding blockchain node.

[0034] S2.3: The blockchain node retrieves the blockchain ledger based on the deposit query request, extracts the deposit record corresponding to the electronic contract signing document, and at the same time returns the deposit record to the contract verification terminal, where the blockchain deposit time and the contract file feature value in the deposit record are stored in the verification data buffer.

[0035] S3: Judge the signing time information of the timestamp data block and the blockchain deposit time of the deposit record. When the time difference between the two is less than the preset threshold and both the contract hash value and the contract file feature value match, output a verification pass identifier.

[0036] S3.1: Read the signing time information of the timestamp data block and the blockchain deposit time of the blockchain deposit record from the verification data buffer, calculate the time difference through a preset time difference calculation module, and judge the time difference against the preset time threshold.

[0037] It should be noted that the preset time thresholds include the first preset time threshold, the second preset time threshold, and the third preset time threshold; the first preset time threshold is set based on the upper limit of network transmission delay between the signing node and the evidence storage node, the device time synchronization error range, and the system clock drift range; the second preset time threshold is set based on possible network transmission fluctuations, time zone conversion errors in cross-region signing scenarios, and a certain system error tolerance; the third preset time threshold is set based on the maximum tolerable time difference in abnormal scenarios. If this threshold is exceeded, it is regarded as a high-risk or failure state, and the security alarm and verification failure handling mechanism need to be triggered immediately.

[0038] In an alternative embodiment, when the time difference is less than the first preset time threshold, the corresponding timestamp data block is marked with a green security level, and the signature algorithm type of the timestamp data block is detected; if the signature algorithm type is the national cryptography SM2 algorithm and the contract hash value exactly matches the contract file feature value, a verification passed flag is generated.

[0039] Preferably, the supplementary verification mechanism includes: extracting the signing geographical location information of the electronic contract signing file. When the signing geographical location information shows cross-time zone operations and the contract hash value exactly matches the contract file feature value, a verification passed flag is generated.

[0040] In an alternative embodiment, when the time difference is greater than or equal to the first preset time threshold and less than the second preset time threshold, the corresponding timestamp data block is marked with a yellow warning level, and the supplementary verification mechanism is started.

[0041] Preferably, the exception handling mechanism includes: retrieving the network transmission log of the electronic contract signing file, analyzing the packet timestamp sequence of the network transmission log. When it is detected that the packet timestamp sequence exceeds the preset network delay record and the contract hash value exactly matches the contract file feature value, a verification passed flag is generated.

[0042] Exemplarily, in a certain verification, the signing time of the timestamp data block is 14:32:10 on June 15, 2024, while the blockchain evidence storage time is 14:32:50 on June 15, 2024, and the time difference is 40 seconds, exceeding the first preset time threshold (2 seconds) and being lower than the second preset time threshold (60 seconds). Then it is automatically marked with a yellow warning level, and the supplementary verification mechanism is started to retrieve the contract signing geographical location information; after analysis, it is found that the signing geographical location of this contract is in different countries. After re-adjusting the time threshold in combination with the time zone error, it is finally confirmed that the time difference is within the allowable range, and a verification passed flag is output.

[0043] In an alternative embodiment, when the time difference is greater than or equal to a second preset time threshold and less than a third preset time threshold, the corresponding timestamp data block is marked with a red warning level, and an exception handling mechanism is started.

[0044] In an alternative embodiment, when the time difference is greater than or equal to a third preset time threshold or the time difference is negative, the corresponding timestamp data block is marked with a black failure level, and a security warning mechanism is triggered.

[0045] Preferably, the security warning mechanism includes: freezing the verification process of the electronic contract signing document, generating a verification failure flag, and pushing an exception notice to a preset security module.

[0046] Exemplarily, the signing time of a certain contract is 14:32:10 on June 15, 2024, and the blockchain deposit time is 14:34:00 on June 15, 2024. The time difference is 110 seconds, exceeding the third preset time threshold (100 seconds). At the same time, through SHA-256 comparison, it is found that the contract hash value does not match the deposit feature value, generating a double exception flag, starting an emergency response plan, freezing the contract file and transferring it to a special queue, further performing a credit rating on the signatory, and finding that there are multiple failed signing records in its signing history and the credit score is lower than the set threshold of 80 points. Therefore, the subsequent signing authority of the signatory is automatically restricted, and an exception warning is pushed to the contract management platform.

[0047] Specifically, when the time difference is greater than or equal to a preset time threshold, a time anomaly flag is generated, and the following processing is performed: extracting the operation log of the electronic contract signing document, and analyzing the signing behavior sequence recorded in the operation log; when the signing behavior sequence shows that there are multiple failed signing attempts and the number of failures exceeds a preset number threshold N (where N is 3 times), the electronic contract signing document is marked as a high-risk contract, and at the same time, a signing time anomaly warning is pushed to the contract management platform; the signing time anomaly warning includes the time difference data and the operation behavior analysis report.

[0048] Further, when the contract hash value does not match the contract file feature value, an integrity anomaly flag is generated, and the following processing is performed: calling a file comparison module to perform a field-by-field scan on the electronic contract signing document, generating a difference location report; when the difference location report shows that key contract terms (including the contract subject matter, amount, and performance period) have changed, a tamper-proof protection mechanism is triggered, and the mechanism includes: freezing the subsequent operation permissions of the electronic contract signing document, saving the difference location report to the blockchain deposit node, and pushing a contract integrity violation warning to a preset interface.

[0049] Further, when both the time difference exceeds the limit and the eigenvalue does not match, a dual anomaly flag is generated, and the following processing is performed: activate the emergency response plan, which includes: transferring the electronic contract signing document to a special queue, extracting the historical signing records of the signatory for credit assessment, and when the credit assessment result is lower than the preset credit threshold, the subsequent signing permission of the signatory will be automatically restricted, and the relevant parties to the contract will be notified to initiate the manual review process.

[0050] S3.2: Write the judgment result data into the verification log database and display the verification status information on the verification interface.

[0051] In summary, the present invention effectively solves the technical problem of insufficient reliability of traditional single time source verification by constructing a dual verification system of a trusted timestamp service institution and a blockchain distributed ledger, and significantly improves the credibility and anti-tampering ability of the electronic contract signing time; the method adopts an intelligent multi-level verification and judgment mechanism, combined with a security level marking system, which can accurately identify various abnormal situations, and provides corresponding supplementary verification and abnormal handling mechanisms for special scenarios such as cross-time zone operations and network transmission delays, greatly improving the accuracy and adaptability of the verification process; at the same time, through the signature type detection of the national secret SM2 algorithm and the SHA-256 hash value matching verification, the integrity and authenticity of the signature data are ensured, providing efficient, secure and reliable contract signing verification technical support for fields such as e-commerce and digital office.

[0052] This embodiment also provides an electronic device, which includes a processor, a memory, a communication interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a carrier network, NFC (Near Field Communication) or other technologies. The display screen of the computer device can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covered on the display screen, or a button, a trackball or a touchpad provided on the shell of the computer device, or an external keyboard, touchpad or mouse, etc.

[0053] The storage medium proposed in this embodiment and the method proposed in the above embodiment belong to the same inventive concept. The technical details not described in detail in this embodiment can be referred to the above embodiment, and this embodiment has the same beneficial effects as the above embodiment.

[0054] Through the above description of the embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software and necessary general-purpose hardware. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as a floppy disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk, or optical disc of a computer, etc., including several instructions for causing a computer device (which can be a personal computer, server, or network device, etc.) to execute the method of the embodiments of the present invention.

[0055] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present invention, and they should all be covered within the scope of the claims of the present invention.

[0056] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, system, or computer program product. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The solutions in the embodiments of the present application can be implemented in various computer languages.

[0057] The present application is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each flow and / or block in the flowchart and / or block diagram can be implemented by computer program instructions, and the combination of the flows and / or blocks in the flowchart and / or block diagram can also be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate means for implementing the functions specified in Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0058] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to work in a particular manner, such that the instructions stored in the computer-readable memory produce a manufacture including an instruction device that implements the functions specified in one or more of the processes and / or blocks Figure 1 in one or more of the processes and / or blocks Figure 1 specified in the function.

[0059] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus, such that a series of operational steps are performed on the computer or other programmable apparatus to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable apparatus provide steps for implementing the functions specified in one or more of the processes and / or blocks Figure 1 in one or more of the processes and / or blocks Figure 1 specified in the function.

[0060] Although the preferred embodiments of the present application have been described, those skilled in the art can make additional changes and modifications once they learn of the basic creative concept. Therefore, the appended claims are intended to be construed to include the preferred embodiments as well as all changes and modifications that fall within the scope of the present application.

[0061] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application is also intended to include these modifications and variations.

Claims

1. An electronic contract signing and verification method based on a trusted time stamp, characterized in that: including receiving an electronic contract signing document to be verified, and extracting a timestamp data block and signature data from the electronic contract signing document; sending the timestamp data block to a trusted timestamp service agency for verification, obtaining an evidentiary record corresponding to the electronic contract signing document from a blockchain node, and extracting the blockchain evidentiary time and contract hash value; judging the signing time information of the timestamp data block and the blockchain evidentiary time of the evidentiary record, and when the time difference between the two is less than a preset threshold and both the contract hash value and the contract file feature value match, outputting a verification passed flag.

2. The method for verifying the signing of an electronic contract based on a trusted time stamp according to claim 1, wherein: The method for outputting the verification passed flag is as follows: reading the signing time information of the timestamp data block and the blockchain evidentiary time of the blockchain evidentiary record from a verification data buffer, calculating the time difference through a preset time difference calculation module, and judging the time difference with a preset time threshold; when the time difference is less than a first preset time threshold, marking the corresponding timestamp data block with a green security level, and simultaneously detecting the signature algorithm type of the timestamp data block; if the signature algorithm type is the national secret SM2 algorithm and the contract hash value completely matches the contract file feature value, generating a verification passed flag; when the time difference is greater than or equal to the first preset time threshold and less than a second preset time threshold, marking the corresponding timestamp data block with a yellow warning level, and starting a supplementary verification mechanism; when the time difference is greater than or equal to the second preset time threshold and less than a third preset time threshold, marking the corresponding timestamp data block with a red warning level, and starting an exception handling mechanism; when the time difference is greater than or equal to the third preset time threshold, or the time difference is negative, marking the corresponding timestamp data block with a black failure level, and triggering a security warning mechanism; writing the judgment result data into a verification log database, and displaying verification status information on a verification interface.

3. The method for verifying the signing of an electronic contract based on a trusted timestamp according to claim 2, wherein: The supplementary verification mechanism includes: extracting the signing geographical location information of the electronic contract signing document, and when the signing geographical location information shows cross-time zone operation and the contract hash value completely matches the contract file feature value, generating a verification passed flag; The exception handling mechanism includes: retrieving the network transmission log of the electronic contract signing document, analyzing the packet timestamp sequence of the network transmission log, and when it is detected that the packet timestamp sequence exceeds a preset network delay record and the contract hash value completely matches the contract file feature value, generating a verification passed flag; The security warning mechanism includes: freezing the verification process of the electronic contract signing document, generating a verification failed flag, and pushing an exception notice to a preset security module.

4. The method for verifying the signing of an electronic contract based on a trusted timestamp according to claim 3, wherein: Sending the timestamp data block to a trusted timestamp service agency for verification, and obtaining an evidentiary record corresponding to the electronic contract signing document from a blockchain node, and extracting the blockchain evidentiary time and contract hash value, includes: constructing a timestamp verification request data packet, and sending the timestamp verification request data packet to the trusted timestamp service agency through a secure communication channel; Send a deposit inquiry request to the corresponding blockchain node based on the blockchain location information of the electronic contract signing document; The blockchain node retrieves the blockchain ledger based on the deposit inquiry request, extracts the deposit record corresponding to the electronic contract signing document, and at the same time returns the deposit record to the contract verification terminal, where the blockchain deposit time in the deposit record and the contract file feature value are stored in the verification data buffer.

5. The method for verifying the signing of an electronic contract based on a trusted time stamp according to claim 4, wherein: The trusted time stamp service institution receives the time stamp verification request data packet, queries the time stamp record corresponding to the contract hash value from the time stamp database, and judges the time stamp record and the signing time information of the time stamp data block.

6. The method for verifying the signing of an electronic contract based on a trusted time stamp according to claim 5, wherein: Receive the electronic contract signing document to be verified, and extract the time stamp data block and signature data from the electronic contract signing document, including: Receive the electronic contract signing document to be verified through the input port of the contract verification terminal, and use a preset file parsing module to parse the data of the electronic contract signing document, separating it into a time stamp data block and signature data; Read the contract hash value and the signing time information from the time stamp data block, and temporarily store the contract hash value and the signing time information in the verification buffer; Extract the signatory digital certificate information and digital signature from the signature data, and conduct a preliminary verification of the format validity of the signatory digital certificate information.

7. The method for verifying the signing of an electronic contract based on a trusted time stamp according to claim 6, wherein: The preliminary verification of the format validity includes: Parse the certificate fields of the signatory digital certificate information, where the certificate fields include the certificate version number, serial number, signature algorithm identifier, certificate issuer information, certificate validity period start and end times, and certificate extension item format; Check the certificate validity period start and end times, and judge whether the current verification time is within the certificate validity period; Read the root certificate issuer identifier of the certificate issuer information and match it with the list of preset trusted certificate issuers; Verify the certificate extension item format, and check whether the signature algorithm identifier is an encryption algorithm type supported by the system. The certificate extension item format includes key usage, certificate policy, and CRL distribution point.

8. The method for verifying the signing of an electronic contract based on a trusted timestamp as claimed in claim 6, characterized in that: The time stamp data block includes a contract hash value and signing time information; the contract hash value is generated by the SHA-256 algorithm; the signing time information is issued by a trusted time stamp service institution; the signature data includes the signatory's digital certificate information and digital signature; the digital signature is generated based on the RSA algorithm.

9. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that: When the processor executes the computer program, it implements the steps of the method for verifying the signing of an electronic contract based on a trusted time stamp according to any one of claims 1 to 8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the processor, it implements the steps of the method for verifying the signing of an electronic contract based on a trusted time stamp according to any one of claims 1 to 8.

Images