Method for enhancing security of electronic signature tool in use for computer

Abstract

Before local computer uses electronic signature tool to carry out security operation for data, the disclosed method executes following steps: (1) local computer sends data in use for security authorization to opposite terminal; (2) carrying out security operation on the said data in use for security authorization, the opposite terminal returns operated data of security authorization back to the local computer; (3) the local computer sends data of security authorization to electronic signature tool; (4) the electronic signature tool checks the data of security authorization; if the check is passed, security operation is carried out by local computer on data; otherwise, security operation is not carried out. When user uses electronic signature tool for long time, the invention prevents other persons from forging electronic signature or doing other operations. Features are: easy of implementation, high generality and practicability, low cost etc.

Description

technical field [0001] The invention relates to a security technology for transmitting signature data between networked computers, in particular to a method for enhancing the security of an electronic signature tool used on a computer. Background technique [0002] At present, many services are provided on the Internet, such as online shopping, online transactions, and online banking. In order to ensure the security of data transmission in these businesses, many electronic signature tools have appeared, such as USBKEY, identity authentication (IC) card, etc., and there are also many corresponding application solutions, such as identity recognition for online transactions, transaction signature calculation for online payment, etc. , improving the security and convenience of network applications. [0003] Electronic signature tools are mainly used to perform security operations such as calculating electronic signatures, encrypting data, and verifying electronic signatures. F...

AI Technical Summary

Problems solved by technology

After the user has finished using the electronic signature tool, he still connects it to the computer for a long time. Since the password verification has been carried out during the original use, the verification status is valid until the electronic signature tool is reset. In this way, if the hacker remotely controls the If you have stolen this computer, you can secretly use this electronic signature tool to perform some data signing, encryption and other operations, and forge the electronic signature of the user of the electronic signature tool without the user noticing it, which may cause losses to the user.

Images