A method for protecting electronic documents based on locked signature

Abstract

The present invention discloses an electronic document protection method based on a locking signature. The present invention proposes a method for verifying whether an electronic document remains authentic, complete and tamper-free after being issued. After receiving the electronic document, the recipient not only needs to verify the seal (or signature) and the locking signature in the document, but also needs to check whether the locking signature and the last seal (or signature) are added by the same operator. Only when the document has both the seal (or signature) and the corresponding locking signature, the last operator (which can be generation, annotation or other operations) bears full responsibility for the document, and the document recipient reflected in the operation is the document owner in accordance with the original intention of the operator. Otherwise, only the signed part of the document is credible, and it cannot be used as a credential to determine whether the document recipient is a reasonable document controller and owner.

Description

Technical Field

[0001] The present invention belongs to the technical field of file processing, and in particular relates to an electronic document protection method based on locking signature. Background Art

[0002] Electronic documents have become an inevitable product of the in-depth development of informatization. Layout documents are a form of electronic documents. Due to their cross-media and cross-platform characteristics, layout documents are increasingly widely used in various scenarios, making their research increasingly important. my country's proprietary "Layout Document for Electronic Document Storage and Exchange Format" encompasses aspects of file structure, basic structure, page descriptions, graphics, images, text, video, composite objects, actions, annotations, custom indexing, extended information, digital signatures, versions, and attachments. Its signature mechanism requires that the signature description file be derived from the signature entry file, which in turn is derived from the main entry file. This provides the foundation for the application of "locked signatures."

[0003] As the reform of electronic certificates and electronic receipts deepens, traditional credentials are digitized and can be stored in centralized, entrusted storage, enabling "one-time generation, multiple uses." This eliminates the numerous hassles of applying for, receiving, keeping, and carrying certificates and receipts. However, this also carries significant risks such as unauthorized use and information leakage. While traditional digital signatures can guarantee the authenticity and integrity of the signed content, they lack effective mechanisms for verifying and safeguarding the integrity of the entire document. This situation arises when, to prevent unauthorized use of electronic certificates, electronic certificates bearing the issuer's seal are annotated with the scope and expiration date and re-signed, mimicking the archiving of paper copies. However, recipients can still use specialized tools to remove these annotations and signatures, returning the original electronic certificate to its original state with only the issuer's seal. Once misuse or leakage occurs, it becomes difficult to determine the responsibilities of all parties involved in document storage and business archiving. Developing a reliable electronic document protection method that effectively prevents and eliminates "technical violations" is an urgent and pressing issue in the promotion of electronic documents. Against this backdrop, this paper proposes an electronic document protection method based on locked signatures, leveraging the "step-by-step addressing" feature of standards such as OFD. Summary of the Invention

[0004] The present invention provides an electronic document protection method based on locking signature.

[0005] The present invention comprises the following steps:

[0006] A obtains relevant information about the document to be signed, and verifies whether the original document contains the seal (or signature) and locking signature of the issuing organization, and whether the verification certificates corresponding to the seal (or signature) and locking signature are the same certificate or can prove that they belong to the same person or organization;

[0007] B verifies the seal (or signature) and the locking signature in the original electronic document, and creates the electronic document generation and annotation method information through the document generation system based on the document-related information;

[0008] C. Remove the locking signature from the original document and add the annotation content and parameter information. The parameter information includes the time the annotation document was produced, the person who produced the annotation document, the reason for production, and the expiration date. The seal (or signature) of the person who produced the annotation document is also added. The person who produced the annotation document then adds the locking signature.

[0009] D. Send the apostille to the recipient, who will check the document's integrity and authenticity according to steps A, B, and C, except that the apostille's producer is the focus of the verification, not the issuing authority. The recipient may, if necessary, make further apostilles or transfers within the permitted scope.

[0010] The recipient of the re-annotated document E may check the integrity and authenticity of the document in accordance with steps A, B, and C, except that the party that produced the second annotated document will be used as the focus of verification instead of the issuing authority. If necessary, further annotations or transfers may be made within the permitted scope.

[0011] And so on.

[0012] Furthermore, the document-related information includes attribute information of the document to be signed and information about a method for generating the document by an issuing authority.

[0013] Furthermore, the electronic document generation method information based on the locked signature by the issuing authority carries the electronic signature information corresponding to the user who has a specified relationship with the document to be signed.

[0014] Furthermore, the electronic document generation and annotation method information based on the locking signature is associated with the corresponding address of the document to be processed.

[0015] Furthermore, during the annotation process, the locking signature records the metadata information of the annotator and simultaneously records the action information of erasing the original annotation information.

[0016] Furthermore, when the annotation operation is performed by the document annotation system, the operation record information corresponding to the annotation operation can be determined as content such as a digital watermark.

[0017] Furthermore, the operation record information includes at least one or more of the following information: transferor information, transferee information, operation time information, and validity period information.

[0018] An electronic device, comprising: one or more processors; a memory; and one or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the one or more processors, and the one or more programs are configured to: execute the electronic document protection method based on a locking signature according to any one of claims 1 to 8.

[0019] A computer-readable storage medium is used to store computer instructions. When the computer-readable storage medium is run on a computer, the computer can execute the electronic document protection method based on locking signature.

[0020] The beneficial effects of the present invention are:

[0021] This invention proposes a method for verifying that electronic documents remain authentic, complete, and tamper-free after issuance. This technical mechanism overcomes the vulnerability of traditional electronic document signature mechanisms to unauthorized and unauthorized use of annotated documents, providing a reliable technical solution for document security and identification of ownership. This method is particularly suitable for use in scenarios such as archiving and annotating documents for certificates, bills, and other documents. Through improved use of digital signature technology, effective verification of the "original and annotated" electronic document is achieved, preventing the unauthorized use of the annotated documents used for archiving. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 Schematic diagram of the filling process of the present invention;

[0023] Figure 2 Schematic diagram of adding a new electronic signature and locking a signature, and updating annotation information of the present invention;

[0024] Figure 3 A schematic diagram of a locking signature added or updated by the filling process of the present invention; DETAILED DESCRIPTION

[0025] The principles and features of the present invention are described below. The examples given are only used to explain the present invention and are not used to limit the scope of the present invention.

[0026] like Figure 1 As shown, in this implementation example, the following steps are included:

[0027] The present invention comprises the following steps:

[0028] A obtains relevant information about the document to be signed, and verifies whether the original document contains the seal (or signature) and locking signature of the issuing organization, and whether the verification certificates corresponding to the seal (or signature) and locking signature are the same certificate or can prove that they belong to the same person or organization;

[0029] B verifies the seal (or signature) and the locking signature in the original electronic document, and creates the electronic document generation and annotation method information through the document generation system based on the document-related information;

[0030] C. Remove the locking signature from the original document and add the annotation content and parameter information. The parameter information includes the time the annotation document was produced, the person who produced the annotation document, the reason for production, and the expiration date. The seal (or signature) of the person who produced the annotation document is also added. The person who produced the annotation document then adds the locking signature.

[0031] D. Send the apostille to the recipient, who will check the document's integrity and authenticity according to steps A, B, and C, except that the apostille's producer is the focus of the verification, not the issuing authority. The recipient may, if necessary, make further apostilles or transfers within the permitted scope.

[0032] The recipient of the re-annotated document E may check the integrity and authenticity of the document in accordance with steps A, B, and C, except that the party that produced the second annotated document will be used as the focus of verification instead of the issuing authority. If necessary, further annotations or transfers may be made within the permitted scope.

[0033] The process of annotating an electronic document is to preserve the entire content of the original document, and then add additional information such as the authorized user, purpose, and validity period, and generate a new electronic document signed by the producer. The annotation of the electronic document should not destroy the validity of the seal (or signature) in the original electronic document. If the electronic document does not have a special protection mechanism design, the original electronic document before the annotation can be restored after the annotation information and its corresponding seal (or signature) are removed by technical means, which is equivalent to breaking through the use restrictions imposed by the annotating party through the annotation, and obtaining the same document disposal authority as the original right holder. The present invention proposes a method for verifying whether an electronic document remains authentic, complete and untampered after it is issued. In terms of technical mechanism, it overcomes the defect that the annotated document is easily illegally used beyond the authority and beyond the validity period under the traditional electronic document signature mechanism, and provides a reliable technical solution for document security protection and identification of the right holder. It is particularly suitable for scenarios such as the annotation and archiving of certificates, bills, etc. Through the improved use of digital signature technology, the effective verification of the "original and annotated" of electronic documents can be achieved, and the annotated documents used for archiving can be prevented from being illegally used.

[0034] In this implementation example, the document-related information includes attribute information of the document to be signed and information about the issuing authority and generation method of the document to be signed.

[0035] In this embodiment, the electronic document generation method information based on the locked signature by the issuing authority carries the electronic signature information corresponding to the user who has a specified relationship with the document to be signed.

[0036] In this embodiment, the electronic document generation and annotation method information based on the locking signature is associated with the corresponding address of the document to be processed.

[0037] In this embodiment, during the annotation process, the locking signature records the metadata information of the annotator and also records the action information of erasing the original annotation information.

[0038] In this embodiment, when the annotation operation is performed by the document annotation system, the operation record information corresponding to the annotation operation can be determined as content such as a digital watermark.

[0039] In this embodiment, the refilling operation record information includes at least one or more of the following information: transferor information, transferee information, operation time information, and validity period information.

[0040] The process of annotating an electronic document original is carried out in the following order:

[0041] 1. Check whether the original electronic document contains the seal (or signature) and locking signature of the issuing organization, and whether the verification certificates corresponding to the seal (or signature) and locking signature are the same certificate or can be proven to belong to the same person or organization;

[0042] 2. Verify the seal (or signature) and locked signature in the original layout document;

[0043] 3. Remove the locking signature from the original document;

[0044] 4. Add watermark information and metadata (time of creation of the annotated document, creator of the annotated document, reason for creation, and expiration date);

[0045] 5. Add the seal (or signature) of the annotated document maker. The protection scope covers the annotated information and metadata, but does not include the signature entry file;

[0046] 6. Add a locking signature of the annotated document maker to protect all contents and index associations within the document.

[0047] For example, the electronic document of unit A is only annotated by B. Figure 1 As shown:

[0048] As can be seen, Unit A's electronic document includes Unit A's electronic seal and its locking signature. During B's apostille, Unit A's locking signature is deleted, and annotation information and a seal (or signature) specific to the apostille information are added, followed by the annotator's locking signature. The apostille document then includes Unit A's electronic seal, the seal (or signature) of the annotator, B, and the locking signature.

[0049] Similarly, each time you add a note, you release the original locked signature, add new note content, new seal (or signature) and locked signature, and update the note information. Figure 2 shown.

[0050] After adding the annotation content, before adding the annotator's seal (or signature), the following metadata information should be recorded in the electronic document: the time the annotation was made, the maker of the annotation, the reason for making it, and the expiration date. When it is necessary to verify whether the electronic document is the original, the locked signature and the seal (or signature) of the original issuing agency of the document should be verified. If the corresponding verification certificates of the two are consistent, or it can be proved that the two certificates belong to the same person or the same agency, it means that it is the original electronic document. If the electronic original is jointly signed and generated by multiple agencies, the original issuing agency here refers to the last agency in these structures. Specific process Figure 3 As shown:

[0051] The typical features of this invention are: 1. Comparing and verifying the locking signature with the seal (or signature) of the original issuing authority. 2. When generating the original electronic document, the original issuing authority should add the locking signature in addition to the seal (or signature) for the document content.

[0052] An embodiment of the present application provides an electronic device, which may also include a transceiver. It should be noted that in actual applications, there is not limited to one transceiver, and the structure of the electronic device does not constitute a limitation on the embodiments of the present application. The processor, used in the embodiments of the present application, is configured to generate an interface document. The transceiver includes a receiver and a transmitter.

[0053] A processor can be a CPU, a general-purpose processor, a DSP, an ASIC, an FPGA, or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. It can implement or execute the various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. A processor can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and the like.

[0054] The bus may include a path for transmitting information between the above components. The bus 302 may be a PCI bus or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc.

[0055] The memory can be a ROM or other type of static storage device that can store static information and instructions, a RAM or other type of dynamic storage device that can store information and instructions, or an EEPROM, CD-ROM or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to this. The memory is used to store the application code that executes the solution of the present application, and the execution is controlled by the processor. The processor is used to execute the application code stored in the memory to implement the functions of the locked signature-based layout document generation and annotation method provided in the embodiment.

[0056] The above description is only a preferred specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any technician familiar with the technical field, within the technical scope disclosed by the present invention, who makes equivalent replacements or changes based on the technical solution and inventive concept of the present invention, should be covered by the scope of protection of the present invention.

Claims

1. A method for protecting electronic documents based on locking signature, characterized in that: The following steps are involved: A obtains document-related information about the document to be signed. If there is a seal in the document, the operator's seal and locking signature are checked in the electronic document, and whether the public key certificates corresponding to the seal and locking signature are the same certificate. B. If a signature exists in the document, verify the signature and the locking signature in the document, and create annotation information corresponding to the document to be signed through a document generation or annotation system based on the relevant information of the document; C. Remove the locking signature from the original document and add annotation information to the document. The annotation information includes information about the electronic document generation and annotation method based on the locking signature, metadata, the time the annotation document was created, the creator of the annotation document, the reason for creation, and the expiration date. The signature of the creator of the annotation document is also added, and the locking signature is added on this basis. D sends the electronic file with the annotation, the seal of the party who made the annotation and the locked signature to the user. Other users verify it according to B and use it according to the time limit and purpose agreed in the annotation information. If re-annotation is required, repeat the above steps A, B, and C.

2. The electronic document protection method based on locking signature according to claim 1 is characterized in that: The document-related information includes document attribute information of the file to be signed and information on the electronic document generation and annotation method.

3. The electronic document protection method based on locking signature according to claim 1, characterized in that: The party who generates or aposts the document must add a locking signature signed by the same identity as the signatory.

4. The electronic document protection method based on locking signature according to claim 1, characterized in that: The document recipient must verify that the signature or seal formed by the last operation in the document is valid, and that the signature or seal for the added annotation content formed by the last operation is the same certificate as the certificate associated with the locked signature or is certified to belong to the same person or organization.

5. The electronic document protection method based on locking signature according to claim 1 is characterized in that: When the file recipient wants to perform further operations on the document, he or she must follow the permissions and usage period stated or implied in the document.

6. The electronic document protection method based on locking signature according to claim 1, characterized in that: When the recipient of the document wants to perform further operations on the document, he must first remove the lock signature added by the previous operator.

7. An electronic device, characterized in that: include: one or more processors; Memory; One or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the one or more processors, and the one or more programs are configured to: execute the electronic document protection method based on locking signature according to any one of claims 1 to 6.

8. A computer-readable storage medium, characterized in that The computer-readable storage medium is used to store computer instructions, and when the computer-readable storage medium is run on a computer, the computer can execute the electronic document protection method based on locking signature according to any one of claims 1 to 6.

Images