A method and system for entrusting the use of electronic signature seals

Abstract

The present invention discloses a method and system for entrusting the use of electronic signature seals, wherein the method comprises: establishing an organization including the user based on the affiliation of the user in the organization; associating the user with the prepared seal; selecting the required entrustment seal, and selecting the entrustment user of the entrustment seal based on the affiliation of the organization; entrusting the entrustment seal to the entrustment user according to the set seal entrustment rules; the seal entrustment rules include the seal authority of the entrustment seal; and initiating the use of the entrustment seal by the entrustment user based on the seal authority. The seal entrustment business function provided by the present invention realizes the function of one seal for multiple uses, can effectively realize the control of the seal, and a seal can be reused within the assigned authority after being entrusted, which greatly improves the work efficiency.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic signature management, and more specifically, to a method and system for entrusting the use of electronic signature seals. Background Art

[0002] As electronic documents are used more and more widely, paperless office efficiency is much higher than paper office efficiency. People pay more and more attention to the security and integrity of transmitted documents, and electronic signature services have emerged. The implementation methods of electronic signature systems on the market generally include the process of making a seal, the process of signing, and the process of verification.

[0003] The seal making process includes: connecting the seal making password and user password key to the seal signing server, providing the required certificate and public and private keys for seal making, and then sending the seal making certificate and user certificate to the certificate verification department for verification through the seal signing server. After the verification is passed, a seal account is established, the seal data is packaged, and finally the seal data is signed and encrypted, and the seal is successfully made.

[0004] The signing process includes: connecting the user password key to the signing client, the client sends the user encryption certificate to the signing server for verification, and the seal data can be obtained after the verification is passed. The client performs a summary operation on the specified electronic data or electronic file to generate the electronic file summary data, and the seal data signed by the seal certificate, the seal certificate and the electronic file summary data are bundled to form the signature data, and then signed and timestamped. Finally, the specified electronic data or electronic file original text, the bound signature data and the signature timestamp are bound to complete the signing process.

[0005] The verification process includes: first, it is necessary to separate the electronic data or electronic file original, the bound signature data, and the signature timestamp from the data bound to the signature to provide verification data. Then, separate the user signature certificate and signature data from the bound signature data, send the certificate to the corresponding certificate management department for identity authentication, and then use the user signature certificate public key to decrypt the signature data signed by the corresponding private key, obtain the signature data for verification, and finally separate the seal data signed by the seal certificate, the seal certificate, and the electronic file summary data from the signature data, and perform the corresponding certificate, data, and timestamp verification.

[0006] The electronic signature business in the market is becoming more and more mature. There are more and more signature tasks between superiors and subordinates. The demand for one seal to be used by multiple people is becoming more and more urgent. The verification of seal authority is becoming more and more accurate. The electronic signature business will also become more and more perfect.

[0007] Prior art 1 (CN103914745B) provides a method for managing an electronic signature system seal revocation list, including: updating the electronic signature system seal revocation list; encapsulating the electronic signature system seal revocation list; extracting digital envelope data from the electronic signature system seal revocation list; and verifying the electronic signature system seal revocation list.

[0008] Prior art 2 (CN10180064B) provides a method and system for implementing electronic signature, including a process of making a signature, a process of signing, and a process of verifying the signature. The electronic signature system includes an electronic key, a signature server, and a signature client.

[0009] However, the existing technologies do not solve the problem of using the same electronic seal for multiple purposes. Summary of the invention

[0010] The technical solution of the present invention provides a method and system for entrusting the use of an electronic signature seal to solve the problem of how to use one seal for multiple purposes by entrusting the use of an electronic signature seal.

[0011] In order to solve the above problems, the present invention provides a method for entrusting the use of an electronic signature seal, the method comprising:

[0012] Based on the user's affiliation in the organization, establish an organization including the user;

[0013] Associating the user with the prepared seal;

[0014] Select the required entrusted seal, and select the entrusted user of the entrusted seal based on the affiliation of the organization;

[0015] Delegating the delegated seal to the delegated user according to the set seal delegation rules; the seal delegation rules include the seal authority of the delegated seal;

[0016] The use of the entrusted seal is initiated by the entrusted user based on the seal authority.

[0017] Preferably, the seal entrustment rule includes seal entrustment data and entrustment period, and the seal entrustment data is used for seal verification when the electronic seal is stamped.

[0018] Preferably, the method further comprises: modifying the seal entrustment data.

[0019] Preferably, the method further comprises: entrusting and reclaiming the seal based on the affiliation of users in the organization.

[0020] Preferably, the method for preparing the seal comprises:

[0021] Submit a seal making request through users in the organization;

[0022] Making a seal based on the seal making request through a seal center, and sending the made seal to the user;

[0023] The received seal is stored by the user.

[0024] Preferably, the initiating use of the entrusted seal by the entrusted user based on the seal authority includes:

[0025] Submitting a stamping request for the seal through the entrusted user;

[0026] Receiving the stamping request through the stamping client, and verifying the stamping request based on the stamping delegation rule;

[0027] When the stamping request is verified, the stamping is performed.

[0028] Based on another aspect of the present invention, the present invention provides a system for entrusting the use of an electronic signature seal, the system comprising:

[0029] An initial unit, used to establish an organization including the user based on the affiliation of the user in the organization;

[0030] An association unit, used to associate a user with a prepared seal;

[0031] A selection unit, used for selecting a required entrustment seal, and selecting an entrusting user of the entrustment seal based on the affiliation relationship of the organization;

[0032] A delegation unit, used for delegating a delegated seal to the delegated user according to a set seal delegation rule; the seal delegation rule includes the seal authority of the delegated seal;

[0033] An execution unit is used to initiate the use of the entrusted seal based on the seal authority by the entrusted user.

[0034] Preferably, the seal entrustment rule includes seal entrustment data and entrustment period, and the seal entrustment data is used for seal verification when the electronic seal is stamped.

[0035] Preferably, the entrusting unit is further used for: modifying the seal entrusting data.

[0036] Preferably, the entrusting unit is further used for entrusting and reclaiming the seal based on the affiliation of users in the organization.

[0037] Preferably, it also includes a seal making center for:

[0038] Submit a seal making request through users in the organization;

[0039] Making a seal based on the seal making request through a seal center, and sending the made seal to the user;

[0040] The received seal is stored by the user.

[0041] Preferably, the execution unit is used to: initiate the use of the entrusted seal based on the seal authority by the entrusted user, including: submitting a stamping request for the seal by the entrusted user;

[0042] The stamping client is used to receive the stamping request and verify the stamping request based on the stamping delegation rule; when the stamping request passes the verification, the stamping is performed.

[0043] The technical solution of the present invention provides a method and system for entrusting the use of electronic signature seals, wherein the method includes: establishing an organization including the user based on the affiliation of the user in the organization; associating the user with the prepared seal; selecting the required entrustment seal, and selecting the entrustment user of the entrustment seal based on the affiliation of the organization; entrusting the entrustment seal to the entrustment user according to the set seal entrustment rules; the seal entrustment rules include the seal authority of the entrustment seal; and initiating the use of the entrustment seal by the entrustment user based on the seal authority. The technical solution of the present invention introduces a method of combining user information and organization, integrating user information with organization, solving the affiliation of the user in the organization, and facilitating the retrieval of personnel in lower-level departments of the company / institution. The technical solution of the present invention integrates the seals owned by the user and the seal authority of the seal, proposes the business function of seal entrustment, selects the user for entrustment according to the seal list owned by the user, and realizes the entrustment function. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] A more complete understanding of exemplary embodiments of the present invention may be obtained by referring to the following drawings:

[0045] Figure 1 A flow chart of a method for entrusting the use of an electronic signature seal according to a preferred embodiment of the present invention;

[0046] Figure 2 A flow chart of a seal making process in which a seal user initiates a request for seal making according to a preferred embodiment of the present invention;

[0047] Figure 3 A flow chart of seal making in which a seal is issued by a seal making point according to a preferred embodiment of the present invention;

[0048] Figure 4 A flow chart of seal entrustment according to a preferred embodiment of the present invention;

[0049] Figure 5 A Java client stamping process according to a preferred embodiment of the present invention; and

[0050] Figure 6 The present invention is a structural diagram of a system for entrusting the use of electronic signature seals according to a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0051] Now, exemplary embodiments of the present invention are described with reference to the accompanying drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. These embodiments are provided to disclose the present invention in detail and completely and to fully convey the scope of the present invention to those skilled in the art. The terms used in the exemplary embodiments shown in the accompanying drawings are not intended to limit the present invention. In the accompanying drawings, the same units / elements are marked with the same reference numerals.

[0052] Unless otherwise specified, the terms (including technical terms) used herein have the commonly understood meanings to those skilled in the art. In addition, it is understood that the terms defined in commonly used dictionaries should be understood to have the same meanings as those in the context of the relevant fields, and should not be understood as idealized or overly formal meanings.

[0053] Figure 1 This is a flow chart of a method for entrusting the use of an electronic signature seal according to a preferred embodiment of the present invention. Figure 1 As shown, the present invention provides a method for entrusting the use of an electronic signature seal, the method comprising:

[0054] Step 101: Based on the affiliation of the user in the organization, an organization including the user is established.

[0055] The implementation method of the present invention first creates an organization. The present invention creates a corresponding organization according to the internal personnel structure of the company / institution, confirms whether it is a root organization, and if so, only needs to fill in the organization name, contact person, contact number, contact address, and remarks. If it is not a root organization, in addition to the above items, it is also necessary to select the organization to which it belongs.

[0056] The second step of the present invention is to create a user. The user types are divided into individual users and corporate users. If it is an individual user, you need to fill in your name, phone number, ID type, ID number, zip code, email and contact address; if it is a corporate user, in addition to the above information, you also need to select the organization to which you belong.

[0057] Step 102: Associating the user with the prepared seal.

[0058] Step 103: Select the required entrusted seal, and select the entrusted user of the entrusted seal based on the affiliation of the organization.

[0059] After the organization and the corresponding enterprise user are bound in the present invention, the seal entrustment function business can be carried out. The software architecture involved in the system includes: seal use point, seal making point, and client. Seal use point: used to manage users, organizations, stamp molds, seal entrustment, etc. Seal making point: responsible for seal production. Client: provides an interface for software to make and stamp seals.

[0060] Step 104: entrust the entrusted seal to the entrusted user according to the set seal entrustment rules; the seal entrustment rules include the seal authority of the entrusted seal.

[0061] Step 105: The entrusted user initiates the use of the entrusted seal based on the seal authority.

[0062] Preferably, the seal entrustment rules include seal entrustment data and entrustment period, and the seal entrustment data is used for seal verification when the electronic seal is stamped.

[0063] Preferably, the method further includes: modifying the seal entrustment data.

[0064] Preferably, the method further comprises: entrusting and reclaiming the seal based on the affiliation of users in the organization.

[0065] Since the implementation of the present invention is mainly to solve the entrustment of multiple uses of a seal, that is, after the seal is made and transmitted to the seal-using point, it will be bound to the user, laying the foundation for seal entrustment. The seal-making point in the system architecture is only responsible for seal making, so there is no concept of organizational structure and user. The function of seal entrustment is the function of the seal-using point, but the stamping and verification function of the entrusted seal will involve the client. Therefore, the role of seal entrustment in it is described from the two perspectives of the seal-using point and the Java client. The seal entrustment process is described in detail below:

[0066] 1. Select the seal you want to entrust, click the Add Entrustment button to enter the entrustment interface

[0067] 2. Select the user you want to delegate

[0068] 3. Set the authority of the delegation

[0069] 4. Set the start and end dates of the commission

[0070] 5. After the settings are completed, click the Add Seal Entrustment button to complete the seal entrustment

[0071] The above is the entire process of seal delegation of the present invention, but the seal delegation permissions involved therein are all permissions granted by the delegated seal, that is, the seal permissions obtained by the delegated user are all based on the seal permissions of the parent seal.

[0072] For the electronic signature system without the delegation function, the Java client will query the seal table for seal permissions. After the new seal point adds the delegation function, the Java client will query the seal permissions in the delegated seal table instead of the seal table. Compared with the previous stamping and verification speed, it has no effect. The reason why the seal table is no longer checked after the seal delegation function is added is that every time a seal is made and imported into the seal point, a seal delegation data that the user delegates to himself will be created by default. The purpose of this data is to cooperate with the stamping and verification needs of the Java client. It will not be displayed when the user queries the seal delegation data in the browser.

[0073] Preferably, the method for preparing a seal includes: a user in an organization submits a seal making request; a seal center makes a seal based on the seal making request and sends the made seal to the user; and the user stores the received seal.

[0074] There are two ways to make seals in the implementation of the present invention. One is that the seal-using point applies to the seal-making point for seal making, and the seal-making point returns the seal to the seal-using point after making the seal; the other is that the seal-making point actively sends the seal to the seal-using point, and the seal-using point accepts the seal information. Figure 2 and Figure 3 shown.

[0075] Preferably, the use of the entrusted seal is initiated by the entrusted user based on the seal authority, including: the entrusted user submits a seal request; the seal request is received by the seal client, and the seal request is verified based on the seal entrustment rule; when the seal request passes the verification, the seal is affixed. Figure 5 shown.

[0076] The present invention increases the binding between the organization and the user, can effectively manage the company seal delegation, and issue the seal authority as needed.

[0077] All seal data of the present invention are recorded in the entrustment table, so that the Java client is prevented from repeatedly querying the seal table and the entrustment table.

[0078] The present invention provides a function of entrusting a seal business with a seal point, which has the following advantages:

[0079] The seal entrustment business function provided by the present invention can avoid repeated production of the same seal, reduce production costs, and reduce processes. The function of providing a seal for multiple uses can effectively realize the control of the seal. After a seal is entrusted, it can be reused within the assigned authority, which greatly improves work efficiency. At the same time, the seal-using point can also monitor the entrustment data at all times, and modify and delete the entrustment data without changing the original seal, thereby ensuring the security of the seal-using data. Finally, between superiors and subordinates of the organization, the decentralization and withdrawal of seal authority can be conveniently managed through seal entrustment, thereby ensuring the reasonable use of authority.

[0080] Figure 6 This is a system structure diagram for entrusting the use of electronic signature seals according to a preferred embodiment of the present invention. Figure 6 As shown, the present invention provides a system for entrusting the use of electronic signature seals, the system comprising:

[0081] The initialization unit 601 is used to establish an organization including the user based on the affiliation of the user in the organization.

[0082] The implementation method of the present invention first creates an organization. The present invention creates a corresponding organization according to the internal personnel structure of the company / institution, confirms whether it is a root organization, and if so, only needs to fill in the organization name, contact person, contact number, contact address, and remarks. If it is not a root organization, in addition to the above items, it is also necessary to select the organization to which it belongs.

[0083] The second step of the present invention is to create a user. The user types are divided into individual users and corporate users. If it is an individual user, you need to fill in your name, phone number, ID type, ID number, zip code, email and contact address; if it is a corporate user, in addition to the above information, you also need to select the organization to which you belong.

[0084] The association unit 602 is used to associate the user with the prepared seal.

[0085] The selection unit 603 is used to select the required entrusted seal and select the entrusted user of the entrusted seal based on the affiliation relationship of the organization.

[0086] After the organization and the corresponding enterprise user are bound in the present invention, the seal entrustment function business can be carried out. The software architecture involved in the system includes: seal use point, seal making point, and client. Seal use point: used to manage users, organizations, stamp molds, seal entrustment, etc. Seal making point: responsible for seal production. Client: provides an interface for software to make and stamp seals.

[0087] The entrusting unit 604 is used to entrust the entrusted seal to the entrusted user according to the set seal entrustment rules; the seal entrustment rules include the seal authority of the entrusted seal.

[0088] The execution unit 605 is used to initiate the use of the entrusted seal based on the seal authority by the entrusted user.

[0089] Preferably, the seal entrustment rules include seal entrustment data and entrustment period, and the seal entrustment data is used for seal verification when the electronic seal is stamped.

[0090] Preferably, the entrusting unit 604 is further used to modify the seal entrusting data.

[0091] Preferably, the entrusting unit 604 is further used to entrust and withdraw the seal based on the affiliation of users in the organization.

[0092] Since the implementation of the present invention is mainly to solve the entrustment of multiple uses of a seal, that is, after the seal is made and transmitted to the seal-using point, it will be bound to the user, laying the foundation for seal entrustment. The seal-making point in the system architecture is only responsible for seal making, so there is no concept of organizational structure and user. The function of seal entrustment is the function of the seal-using point, but the stamping and verification function of the entrusted seal will involve the client. Therefore, the role of seal entrustment in it is described from the two perspectives of the seal-using point and the Java client. The seal entrustment process is described in detail below:

[0093] 1. Select the seal you want to entrust, click the Add Entrustment button to enter the entrustment interface

[0094] 2. Select the user you want to delegate

[0095] 3. Set the authority of the delegation

[0096] 4. Set the start and end dates of the commission

[0097] 5. After the settings are completed, click the Add Seal Entrustment button to complete the seal entrustment

[0098] The above is the entire process of seal delegation of the present invention, but the seal delegation permissions involved therein are all permissions granted by the delegated seal, that is, the seal permissions obtained by the delegated user are all based on the seal permissions of the parent seal.

[0099] For the electronic signature system without the delegation function, the Java client will query the seal table for seal permissions. After the new seal point adds the delegation function, the Java client will query the seal permissions in the delegated seal table instead of the seal table. Compared with the previous stamping and verification speed, it has no effect. The reason why the seal table is no longer checked after the seal delegation function is added is that every time a seal is made and imported into the seal point, a seal delegation data that the user delegates to himself will be created by default. The purpose of this data is to cooperate with the stamping and verification needs of the Java client. It will not be displayed when the user queries the seal delegation data in the browser.

[0100] Preferably, it also includes a seal making center, which is used to: submit seal making requests through users in the organization; make seals based on the seal making requests through the seal center, and send the made seals to the users; and store the received seals through the users.

[0101] There are two ways to make seals in the implementation of the present invention. One is that the seal-using point applies to the seal-making point for seal making, and the seal-making point returns the seal to the seal-using point after making the seal; the other is that the seal-making point actively sends the seal to the seal-using point, and the seal-using point accepts the seal information. Figure 2 and Figure 3 shown.

[0102] Preferably, the execution unit 605 is used to: initiate the use of the entrusted seal based on the seal authority through the entrusted user, including: submitting a seal request through the entrusted user; the seal client is used to receive the seal request and verify the seal request based on the seal entrustment rule; when the seal request passes the verification, the seal is affixed. Figure 5 shown.

[0103] The invention has been described above with reference to a few embodiments. However, it is readily apparent to a person skilled in the art that other embodiments than the ones disclosed above are equally within the scope of the invention, as defined by the appended patent claims.

[0104] Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a / said / the [means, components, etc.]" are to be openly interpreted as at least one instance of the means, components, etc., unless explicitly stated otherwise. The steps of any method disclosed herein do not necessarily have to be performed in the exact order disclosed, unless explicitly stated otherwise.

Claims

1. A method for entrusting the use of an electronic signature seal, the method comprising: Based on the user's affiliation in the organization, establish an organization including the user; The user is associated with a prepared seal, wherein the method of preparing the seal includes: Submit a seal making request through users in the organization; Making a seal based on the seal making request through a seal center, and sending the made seal to the user; The received seal is stored by the user; Select the required entrusted seal, and select the entrusted user of the entrusted seal based on the affiliation of the organization; Delegating the delegated seal to the delegated user according to the set seal delegation rules; the seal delegation rules include the seal authority of the delegated seal; Initiating the use of the entrusted seal by the entrusted user based on the seal authority includes: Submitting a stamping request for the seal through the entrusted user; Receiving the stamping request through the stamping client, and verifying the stamping request based on the stamping delegation rule; When the stamping request is verified, the stamping is performed; The seal is delegated and reclaimed based on the affiliation of users in the organization.

2. According to the method of claim 1, the seal entrustment rules include seal entrustment data and entrustment period, and the seal entrustment data is used for seal verification when the electronic seal is stamped.

3. The method according to claim 2, further comprising: The seal entrustment data is modified.

4. A system for entrusting the use of electronic signature seals, the system comprising: An initial unit, used to establish an organization including the user based on the affiliation of the user in the organization; It includes a seal making center, which is used to: submit a seal making request through a user in an organization; make a seal based on the seal making request through the seal center, and send the made seal to the user; The received seal is stored by the user; An association unit, used for associating a user with a prepared seal; A selection unit, used for selecting a required entrustment seal, and selecting an entrusting user of the entrustment seal based on the affiliation relationship of the organization; A delegation unit, used for delegating a delegated seal to the delegated user according to a set seal delegation rule; the seal delegation rule includes the seal authority of the delegated seal; An execution unit is used to initiate the use of the delegated seal based on the seal authority through the delegated user, including: submitting a stamp request for the seal through the delegated user; a stamp client is used to receive the stamp request and verify the stamp request based on the seal delegation rule; when the stamp request passes the verification, the seal is stamped; and the seal is delegated and reclaimed based on the user's affiliation in the organization.

5. The system according to claim 4, wherein the seal entrustment rules include seal entrustment data and entrustment period, and the seal entrustment data is used for seal verification when the electronic seal is stamped.

6. The system according to claim 5, wherein the entrusting unit is further used to modify the seal entrusting data.

Images