Digital signature method, system, computer-readable storage medium, and electronic device

Abstract

The present application discloses a digital signature method, system, computer-readable storage medium and electronic device. The method includes: obtaining a user's digital signature instruction; based on the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; the mobile terminal receives the first signature file and the signatory information; the mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file. Therefore, the embodiment of the present application can only carry a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server to generate the final signed file, eliminating the inconvenience caused by the need to use a dedicated device to store the digital certificate, and greatly improving the convenience and experience of users using digital signatures.

Description

Technical Field

[0001] The present application relates to the technical field of digital signature methods, and in particular to a digital signature method, system, computer-readable storage medium, and electronic device. Background Art

[0002] With the rapid development of the smart mobile internet, more and more data is being transmitted via mobile terminals. With the rapid development of mobile devices, the data transmitted on mobile terminals has gradually expanded from daily documents to office documents. In particular, when users use mobile terminals to sign electronic contracts or conduct financial transactions, the limited encryption capabilities of smart terminals cannot effectively meet the security requirements for electronic document signing. Therefore, digital signature schemes have been proposed to allow users to sign electronic documents online. These schemes allow users to use their own private keys to encrypt electronic documents sent from their terminals, thereby ensuring the immutability of electronic documents. However, such schemes rely on the security of the user's private key to ensure the immutability of electronic documents. That is, if the user's private key is cracked or leaked, the security of electronic documents signed using this private key cannot be guaranteed. Therefore, a digital signature scheme that can improve the security of private keys is needed. Summary of the Invention

[0003] The embodiments of the present application provide a digital signature method, system, computer-readable storage medium, and electronic device to eliminate the dependence of private keys on physical cryptographic devices in the prior art.

[0004] To achieve the above objectives, the present invention provides a digital signature method, including:

[0005] Obtaining a digital signature instruction from the user, wherein the digital signature instruction includes target signature file information and signatory information;

[0006] According to the signatory information, the cloud server signs the target signature file information using the first part of the digital signature corresponding to the signatory information to generate a first signature file;

[0007] Receiving, by the mobile terminal, the first signature file and the signatory information;

[0008] The mobile terminal signs the first signature file using the second part of the digital signature to generate a second signature file.

[0009] According to the digital signature method of the embodiment of the present application, the target signature file information is summary information obtained by performing summary calculation on the target signature file.

[0010] The digital signature method according to an embodiment of the present application further includes:

[0011] The mobile terminal obtains identity authentication information input by the user;

[0012] The identity verification information is verified to confirm that the user has digital signature authority.

[0013] The digital signature method according to an embodiment of the present application further includes:

[0014] generating an RSA asymmetric key pair by the mobile terminal, wherein the RSA asymmetric key pair includes a public key and a first part of a private key corresponding to the public key as the second part of the digital signature;

[0015] The cloud server generates the second part of the private key as the first part of the digital signature according to the identity information of the user.

[0016] According to the digital signature method of an embodiment of the present application, the cloud server signs the target signature file information using the first part of the digital signature corresponding to the signatory information based on the signatory information, including: the cloud server uses the first part of the digital signature to perform a threshold signature operation on the target signature file.

[0017] According to the digital signature method of an embodiment of the present application, the mobile terminal using the second part of the digital signature to sign the first signature file includes:

[0018] The mobile terminal uses the second part of the digital signature to perform a threshold signature operation on the first signature file.

[0019] The embodiment of the present application also provides a digital signature system, including a cloud server and a mobile terminal, wherein:

[0020] The cloud server is used to obtain a digital signature instruction from the user, wherein the digital signature instruction includes target signature file information and signatory information. Based on the signatory information, the cloud server signs the target signature file information using a first portion of a digital signature corresponding to the signatory information to generate a first signature file.

[0021] The mobile terminal is used for: receiving the first signature file and the signatory information; and signing the first signature file using the second part of the digital signature to generate a second signature file.

[0022] According to the digital signature system of the embodiment of the present application, the target signature file information is summary information obtained by performing summary calculation on the target signature file.

[0023] An embodiment of the present application further provides a computer-readable storage medium storing a computer program executable by a processor, wherein when the program is executed by the processor, the digital signature method in the cluster provided in the embodiment of the present application is implemented.

[0024] An embodiment of the present application further provides an electronic device, including:

[0025] Memory, used to store programs;

[0026] A processor is used to run the program stored in the memory to execute the digital signature method in the cluster provided in the embodiment of the present application.

[0027] The digital signature method, system, computer-readable storage medium, and electronic device provided in the embodiments of the present application obtain a user's digital signature instruction, and based on the signatory information, a cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; and a mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file. Therefore, according to the solution of the embodiment of the present application, the digital signature used to sign the document to be signed is divided into two parts and stored respectively on the mobile terminal and the server side, so that the user does not need to use a dedicated digital signature device to carry the digital signature. Instead, it can only carry a mobile terminal with a part of the digital signature stored to sign the document to be signed together with the other part of the digital signature stored on the server side to generate the final signed document. Therefore, even if the mobile terminal is lost, the user's digital signature will not be leaked. Therefore, while ensuring the security of the digital signature, it eliminates the inconvenience caused by the need to use a dedicated device to store the digital certificate, greatly improving the convenience and experience of the user in using the digital signature.

[0028] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the preferred embodiment below. The accompanying drawings are for illustration purposes only and are not to be considered as limiting the present application. The same reference symbols are used throughout the drawings to represent the same components. In the drawings:

[0030] Figure 1 A schematic diagram of an application scenario of the digital signature method provided in an embodiment of the present application;

[0031] Figure 2 A flowchart of an embodiment of the digital signature method provided by this application;

[0032] Figure 3 A schematic diagram of the structure of an embodiment of the digital signature method system provided by this application;

[0033] Figure 4 This is a schematic structural diagram of an electronic device embodiment provided in this application. DETAILED DESCRIPTION

[0034] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0035] The solution provided in the embodiments of the present application can be applied to any device or system with encryption capabilities, etc. Figure 1 This is a schematic diagram of an application scenario of the digital signature method provided in the embodiment of the present application. Figure 1 The scenario shown is only one example of a scenario to which the technical solution of the present application can be applied.

[0036] When users use mobile devices to sign electronic contracts or conduct financial transactions, the limited encryption capabilities of smart devices cannot fully meet the security requirements of electronic document signing. Therefore, digital signature solutions have been proposed to allow users to sign electronic documents online. These solutions allow users to use their own private keys to encrypt electronic documents sent from their devices, thereby ensuring that electronic documents cannot be tampered with. However, such solutions rely on the security of the user's private key to ensure the tamper-proof nature of electronic documents. In other words, if the user's private key is cracked or leaked, the security of the electronic documents signed using such private key cannot be guaranteed.

[0037] Prior art has proposed the use of specialized cryptographic devices to generate, store, and use private keys. For example, in prior art, users can use cryptographic devices such as smart cryptographic keys or cryptographic machines to generate private keys. The generated private keys can then be stored in the cryptographic devices, allowing users to carry the cryptographic devices and access the stored private keys as needed. Using such physical cryptographic devices to generate and store private keys reduces the risk of private key leakage and improves private key security. However, since such physical cryptographic devices must be carried by the user, they are not only inconvenient but also pose the risk of loss. Furthermore, users must purchase a dedicated cryptographic device for their private keys. This, especially if the user needs to use multiple private keys, may require multiple cryptographic devices, significantly increasing the cost of using the private keys.

[0038] like Figure 1 As shown in Figure 1 Schematic diagram showing an application scenario of the digital signature method according to an embodiment of the present application. Figure 1 In the scenario shown in , a user can use a client such as a mobile terminal to log in to a cloud server that applies the digital signature scheme of an embodiment of the present application, and can issue a digital signature instruction by selecting an electronic document to be digitally signed and, for example, clicking a sign button. After receiving the digital signature instruction issued by the user, the digital signature system according to the present application can generate, for example, signing link information based on the signatory information and the file information to be signed contained in the instruction, so that the user can use the digital signature application on his or her mobile terminal to obtain the signatory information and the file information to be signed in the instruction by, for example, scanning a QR code graphic generated based on the signing link information, and can compare the obtained signatory information with the owner of the digital signature stored in the application to confirm whether the signatory specified in the digital signature instruction is the owner of the digital signature stored in the application. If the signatory information in the instruction is confirmed to be consistent with the owner of the digital signature, it means that the digital signature in the application can be used to sign the file to be signed indicated by the instruction. Otherwise, an inconsistent comparison result can be returned to notify the system that the digital signature instruction cannot be executed using the digital signature stored in the application.

[0039] After confirming that the digital signature stored in the application can be used to sign the digital signature indicated in the instruction received by the system, in an embodiment of the present application, the identity of the user can be further verified. For example, the user can be prompted to enter verification information for using the digital signature in the application, and the application can verify the verification information to confirm whether the user is a user who can use the specified digital signature to sign. For example, a password input window can pop up in the application interface, and the user can be prompted to enter a password in the window. After receiving the password entered by the user, it can be compared with the password stored in the application to confirm whether the password entered by the user is correct. After the password verification is passed, the server can be notified to start signing the document to be signed.

[0040] For example, the server side can calculate the summary information of the document to be signed. For example, the user can generate a preliminary signed document by dragging the displayed seal image corresponding to the digital signature to the specified position of the display page of the document to be signed in the signing interface displayed on the server side, and can start the summary calculation process by clicking, for example, a sign button. For example, the summary of the page of the document to be signed with the seal image corresponding to the digital signature added can be calculated as the summary information of the document to be signed, and the preliminary signed document can be encrypted and signed using the first part of the digital signature stored on the server side, and the generated first signature file can be sent to the user's mobile terminal, so that the digital signature application in the user's mobile terminal can use the second part of the digital signature stored therein to encrypt and sign the first signature file, thereby generating a final signed document, and the mobile terminal can send the signed document to the server side for storage and then send the signed document to the designated terminal or server of other users according to the user's file distribution instruction.

[0041] In addition, in an embodiment of the present application, before using a digital certificate, the user can first use a digital signature application on a mobile terminal to generate, for example, an RSA asymmetric key pair, which includes a public key part and a first private key. The first private key can be the second part of the above-mentioned digital signature, and then the user can send signature information, such as identity information or enterprise information, to the server through the mobile terminal, so that the server can use the signature information to generate a second private key, which can be the first part of the above-mentioned digital signature. Afterwards, the user can use the digital signature application in the mobile terminal to send the first private key and the second private key as two parts of the digital signature to an authentication center, such as a CA, so that the CA can generate an authenticated digital signature for the user after verifying it. Therefore, in an embodiment of the present application, the digital signature used to sign the document to be signed is divided into two parts and stored in the mobile terminal and the server respectively, so that the user does not need to use a special digital signature device to carry the digital signature. Instead, you can carry only a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server to generate the final signed document. Even if the mobile terminal is lost, the user's digital signature will not be leaked. Therefore, while ensuring the security of the digital signature, the inconvenience caused by the need to use special equipment to store the digital certificate is eliminated, which greatly improves the convenience and experience of users in using digital signatures.

[0042] Figure 2 This is a flow chart of an embodiment of the digital signature method provided by this application. Figure 2 As shown, the digital signature method may include the following steps:

[0043] S201, obtaining the user's digital signature instruction.

[0044] In step S201, a user may use, for example, a PC terminal to log in to a cloud server that utilizes the digital signature method according to an embodiment of the present application. The user may then select or edit an electronic document to be signed locally. The user may then select the public key that the user desires to use from digital signature information, such as public key information, that has been pre-stored on the cloud server to issue a digital signature instruction. In an embodiment of the present application, the digital signature instruction includes information about the target document to be signed and information about the signatory.

[0045] For example, link information can be generated on a PC terminal so that the mobile terminal can obtain the information in the digital signature instruction through the link information. For example, a QR code graphic can be generated based on the digital signature information as the link information, and the user can use the mobile terminal to scan the link information to obtain the signatory information in the digital signature instruction, and authorize the signatory by verifying the signatory. In this way, the user can see the permissions they have, that is, the digital signature information they can use, on the PC terminal, and can finally issue the signing instruction through operations such as dragging and dropping.

[0046] S202: Based on the signatory information, the cloud server signs the target signature file information using the first part of the digital signature corresponding to the signatory information to generate a first signature file.

[0047] In step S202, the cloud server may sign the target signature file information based on the signatory information in the digital signature instruction received in step S201 using a digital signature corresponding to the signatory information stored in the cloud server. For example, in an embodiment of the present application, the target signature file may be the digest information calculated from the target signature file selected by the user on the PC client. Furthermore, the first portion of the digital signature stored in the cloud server may be a portion of a key pre-generated by the user using, for example, an RSA encryption algorithm.

[0048] For example, in step S202, the cloud server can calculate the summary information of the signed document specified by the user. For example, the user can generate a pre-signed document by dragging the displayed seal image corresponding to the digital signature to the specified position of the display page of the document to be signed in the signing interface displayed on the server side, and can start the summary calculation process by clicking, for example, a sign button. For example, the summary of the page of the document to be signed with the seal image corresponding to the digital signature can be calculated as the summary information of the document to be signed, and the first part of the digital signature stored on the server side can be used to encrypt and sign the target signature information, thereby generating a first signature file signed with a part of the private key. For example, the server side can use the first part of the digital signature stored on the server side to perform a threshold signature operation on the summary information, thereby generating a signed first signature file.

[0049] S203: The mobile terminal receives the first signature file and the signatory information.

[0050] In step S203, the cloud server can send the first signature file signed using the first part of the private key and the signatory information to the mobile terminal, so that the mobile terminal can receive the first signature file and the signatory information in step S203. After receiving the signatory information, the mobile terminal can search for the private key that matches the digital signature stored in it.

[0051] S204: The mobile terminal signs the first signature file using the second part of the digital signature to generate a second signature file.

[0052] In step S204, the mobile terminal can use the second part of the digital signature corresponding to the signatory information received in step S203 stored therein to sign the first signature file received in step S203 and signed by the server. For example, the mobile terminal can use the second part of the digital signature to perform a threshold signature operation on the first signature file, and synthesize the obtained signature result with the target signature file to generate a second signature file. In particular, the signature result can be a threshold signature result that has synthesized the first and second parts of the complete private key. Therefore, in an embodiment of the present application, the signature result of the complete private key obtained in step S204 can be used to sign the target signature file to generate a final signature file.

[0053] The mobile terminal may send the signed file to the server for storage and then send the signed file to other designated users' terminals or servers according to the user's file distribution instruction.

[0054] In addition, in an embodiment of the present application, before using a digital certificate, the user can first use a digital signature application on a mobile terminal to generate, for example, an RSA asymmetric key pair, which includes a public key part and a first private key. The first private key can be the second part of the above-mentioned digital signature, and then the user can send signature information, such as identity information or enterprise information, to the server through the mobile terminal, so that the server can use the signature information to generate a second private key, which can be the first part of the above-mentioned digital signature. Afterwards, the user can use the digital signature application in the mobile terminal to send the first private key and the second private key as two parts of the digital signature to an authentication center, such as a CA, so that the CA can generate an authenticated digital signature for the user after verifying it. Therefore, in an embodiment of the present application, the digital signature used to sign the document to be signed is divided into two parts and stored in the mobile terminal and the server respectively, so that the user does not need to use a special digital signature device to carry the digital signature. Instead, you can carry only a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server to generate the final signed document. Even if the mobile terminal is lost, the user's digital signature will not be leaked. Therefore, while ensuring the security of the digital signature, the inconvenience caused by the need to use special equipment to store the digital certificate is eliminated, which greatly improves the convenience and experience of users in using digital signatures.

[0055] The digital signature method of the embodiment of the present application obtains the user's digital signature instruction, and based on the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; the mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file. Therefore, according to the solution of the embodiment of the present application, the digital signature used to sign the document to be signed is divided into two parts and stored respectively on the mobile terminal and the server side, so that the user does not need to use a dedicated digital signature device to carry the digital signature. Instead, it is possible to carry only the mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server side to generate the final signed document. Therefore, even if the mobile terminal is lost, the user's digital signature will not be leaked. Therefore, while ensuring the security of the digital signature, the inconvenience caused by the need to use a dedicated device to store the digital certificate is eliminated, greatly improving the convenience and experience of the user in using the digital signature.

[0056] Figure 3 This is a schematic diagram of the structure of an embodiment of the digital signature method system provided by this application, which can be used to perform the following Figure 2 The method steps shown are as follows. Figure 3As shown, the digital signature method system may include: a cloud server 31 and a mobile terminal 32.

[0057] The cloud server 31 can be used to obtain the user's digital signature instruction, and according to the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file.

[0058] A user can use, for example, a PC terminal to log in to a cloud server 31 that implements the digital signature method of an embodiment of the present application, and can select or edit an electronic document to be signed locally. The user can then select the public key they wish to use from digital signature information, such as public key information, pre-stored on the cloud server 31 to issue a digital signature instruction. In an embodiment of the present application, the digital signature instruction includes the target signature document information and the signatory information.

[0059] For example, link information can be generated on the PC terminal so that the mobile terminal 32 can obtain the information in the digital signature instruction through the link information. For example, a QR code graphic can be generated based on the digital signature information as the link information, and the user can use the mobile terminal 32 to scan the link information to obtain the signatory information in the digital signature instruction, and authorize the user by verifying the signatory. In this way, the user can see the permissions they have, that is, the digital signature information they can use, on the PC terminal, and finally issue the signing instruction through operations such as dragging and dropping.

[0060] The cloud server 31 can sign the target signature file information based on the signatory information in the received digital signature instruction using a digital signature corresponding to the signatory information stored in the cloud server 31. For example, in this embodiment of the present application, the target signature file can be the digest information calculated from the target signature file selected by the user on the PC client. The first part of the digital signature stored in the cloud server 31 can be a portion of a key pre-generated by the user using, for example, an RSA encryption algorithm.

[0061] For example, the cloud server 31 can calculate the summary information of the signed document specified by the user. For example, the user can generate a pre-signed document by dragging the displayed seal image corresponding to the digital signature to the specified position of the display page of the document to be signed in the signing interface displayed by the cloud server 31, and can start the summary calculation process by clicking a button such as Sign. For example, the summary of the page of the document to be signed with the seal image corresponding to the digital signature can be calculated as the summary information of the document to be signed, and the first part of the digital signature stored in the cloud server 31 can be used to encrypt and sign the target signature information, thereby generating a first signature file signed with a part of the private key. For example, the cloud server 31 can use the first part of the digital signature stored in it to perform a threshold signature operation on the summary information, thereby generating a signed first signature file.

[0062] The mobile terminal 32 may be configured to receive the first signature file and the signatory information; and to sign the first signature file using the second part of the digital signature to generate a second signature file.

[0063] The cloud server 31 can send the first signature file signed using the first part of the private key and the signatory information to the mobile terminal 32, so that the mobile terminal 32 can receive the first signature file and the signatory information. After receiving the signatory information, the mobile terminal 32 can search for the private key that matches the digital signature stored therein.

[0064] The mobile terminal 32 can use the second part of the digital signature corresponding to the received signatory information stored therein to sign the first signature file received and signed by the cloud server 31. For example, the mobile terminal 32 can use the second part of the digital signature to perform a threshold signature operation on the first signature file, and synthesize the obtained signature result with the target signature file to generate a second signature file. In particular, the signature result can be a threshold signature result that has synthesized the first and second parts of the complete private key. Therefore, in an embodiment of the present application, the signature result of the complete private key obtained by the mobile terminal 32 can be used to sign the target signature file to generate a final signature file.

[0065] The mobile terminal 32 may send the signed file to the cloud server 31 for storage and may then send the signed file to other designated users' terminals or servers according to the user's file distribution instruction.

[0066] In addition, in an embodiment of the present application, before using a digital certificate, a user can first use a digital signature application on a mobile terminal 32 to generate, for example, an RSA asymmetric key pair, which includes a public key portion and a first private key. The first private key can be the second part of the above-mentioned digital signature. Afterwards, the user can send signature information, such as identity information or enterprise information, to the cloud server 31 through the mobile terminal 32, so that the cloud server 31 can use the signature information to generate a second private key, which can be the first part of the above-mentioned digital signature. Afterwards, the user can use the digital signature application in the mobile terminal 32 to send the first private key and the second private key as two parts of the digital signature to an authentication center, such as a CA, so that the CA can generate an authenticated digital signature for the user after verifying it. Therefore, in an embodiment of the present application, the digital signature used to sign the document to be signed is divided into two parts and stored respectively on the mobile terminal 32 and the cloud server 31, so that the user does not need to use a dedicated digital signature device to carry the digital signature. Instead, you can carry only a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server to generate the final signed document. Even if the mobile terminal is lost, the user's digital signature will not be leaked. Therefore, while ensuring the security of the digital signature, the inconvenience caused by the need to use special equipment to store the digital certificate is eliminated, which greatly improves the convenience and experience of users in using digital signatures.

[0067] The digital signature system of the embodiment of the present application obtains the user's digital signature instruction, and based on the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; the mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file. Therefore, according to the solution of the embodiment of the present application, the digital signature used to sign the document to be signed is divided into two parts and stored respectively on the mobile terminal and the server side, so that the user does not need to use a dedicated digital signature device to carry the digital signature. Instead, it can only carry a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server side to generate the final signed document. Therefore, even if the mobile terminal is lost, the user's digital signature will not be leaked. Therefore, while ensuring the security of the digital signature, it eliminates the inconvenience caused by the need to use a dedicated device to store the digital certificate, greatly improving the convenience and experience of the user in using the digital signature.

[0068] The above describes the internal functions and structure of the digital signature system, which can be implemented as an electronic device. Figure 4 This is a schematic diagram of the structure of an electronic device embodiment provided by this application. Figure 4 As shown, the electronic device includes a memory 41 and a processor 42 .

[0069] Memory 41 is used to store programs. In addition to the aforementioned programs, memory 41 may also be configured to store various other data to support operations on the electronic device. Examples of such data include instructions for any application or method operating on the electronic device, contact data, phone book data, messages, images, videos, etc.

[0070] The memory 41 can be implemented by any type of volatile or non-volatile memory device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0071] Processor 42 is not limited to a central processing unit (CPU) and may also be a processing chip such as a graphics processing unit (GPU), a field programmable gate array (FPGA), an embedded neural network processor (NPU), or an artificial intelligence (AI) chip. Processor 42 is coupled to memory 41 and executes a program stored in memory 41. When the program is executed, the digital signature method of the above embodiment is executed.

[0072] Further, if Figure 4 As shown, the electronic device may further include: a communication component 43, a power component 44, an audio component 45, a display 46 and other components. Figure 4 Only some components are shown schematically, which does not mean that the electronic device only includes Figure 4 Components shown.

[0073] The communication component 43 is configured to facilitate wired or wireless communication between the electronic device and other devices. The electronic device can access a wireless network based on a communication standard, such as WiFi, 3G, 4G or 5G, or a combination thereof. In an exemplary embodiment, the communication component 43 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 43 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0074] The power supply assembly 44 provides power to various components of the electronic device. The power supply assembly 44 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the electronic device.

[0075] The audio component 45 is configured to output and / or input audio signals. For example, the audio component 45 includes a microphone (MIC), which is configured to receive external audio signals when the electronic device is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signal can be further stored in the memory 41 or transmitted via the communication component 43. In some embodiments, the audio component 44 also includes a speaker for outputting audio signals.

[0076] The display 46 includes a screen, which may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, slides, and gestures on the touch panel. The touch sensor may not only sense the boundaries of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation.

[0077] Those skilled in the art will appreciate that all or part of the steps in the above-described method embodiments can be implemented using hardware associated with program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments. The aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0078] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A digital signature method, applied to a cloud server communicating with a mobile terminal, comprising: Obtaining a digital signature instruction from the user, wherein the digital signature instruction includes target signature file information and signatory information; According to the signatory information, the cloud server signs the target signature file information using the first part of the digital signature corresponding to the signatory information to generate a first signature file; the mobile terminal generates an RSA asymmetric key pair, wherein the RSA asymmetric key pair includes a public key and a first private key, and the first private key serves as the second part of the digital signature; the cloud server generates a second private key according to the identity information of the user, and the second private key serves as the first part of the digital signature; wherein, according to the signatory information, the cloud server signs the target signature file information using the first part of the digital signature corresponding to the signatory information includes: the cloud server performs a threshold signature operation on the target signature file using the first part of the digital signature; Receiving, by the mobile terminal, the first signature file and the signatory information; The mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file; wherein, the mobile terminal uses the second part of the digital signature to sign the first signature file includes: the mobile terminal uses the second part of the digital signature to perform a threshold signature operation on the first signature file.

2. The digital signature method according to claim 1, wherein: The target signature file information is summary information obtained by performing summary calculation on the target signature file.

3. The digital signature method according to claim 1, wherein: The method further comprises: The mobile terminal obtains identity authentication information input by the user; The identity verification information is verified to confirm that the user has digital signature authority.

4. A digital signature system, comprising a cloud server and a mobile terminal, wherein: The cloud server is used to obtain a digital signature instruction from a user, wherein the digital signature instruction includes target signature file information and signatory information, and according to the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; the mobile terminal generates an RSA asymmetric key pair, wherein the RSA asymmetric key pair includes a public key and a first private key, and the first private key serves as the second part of the digital signature; the cloud server generates a second private key according to the identity information of the user, and the second private key serves as the first part of the digital signature; wherein, according to the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information, including: the cloud server uses the first part of the digital signature to perform a threshold signature operation on the target signature file; The mobile terminal is used to: receive the first signature file and the signatory information; and sign the first signature file using the second part of the digital signature to generate a second signature file; wherein, signing the first signature file using the second part of the digital signature by the mobile terminal includes: performing a threshold signature operation on the first signature file using the second part of the digital signature by the mobile terminal.

5. The digital signature system according to claim 4, wherein: The target signature file information is summary information obtained by performing summary calculation on the target signature file.

6. A computer-readable storage medium having stored thereon a computer program executable by a processor, wherein: When the program is executed by a processor, the digital signature method according to any one of claims 1 to 3 is implemented.

7. An electronic device comprising: Memory, used to store programs; A processor, configured to run the program stored in the memory to execute the digital signature method according to any one of claims 1 to 3.

Images