Electronic signature method and device, electronic equipment and storage medium

Abstract

The application provides an electronic signature method and device, an electronic device and a storage medium. The electronic signature method comprises the following steps: receiving an identification index list from a mobile terminal; obtaining a version electronic file identified by each identification index according to the identification index list; calculating a first hash value of each version electronic file according to each version electronic file, a stamp and an electronic signature index; respectively performing collaborative signature on the first hash value of each version electronic file to obtain a first signature intermediate value of the version electronic file; sending the first signature intermediate value of each version electronic file to the mobile terminal and obtaining a signature value corresponding to the version electronic file generated by the mobile terminal according to the first signature intermediate value of the version electronic file; and performing electronic signature on the version electronic file according to the signature value of each version electronic file to obtain an electronic signature file. The scheme can improve security.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to an electronic signature method, apparatus, electronic device and storage medium. Background Technology

[0002] In existing hospital medical information systems, formatted electronic documents generally refer to fixed-format documents such as electronic medical records and electronic prescriptions.

[0003] As mobile devices become increasingly intelligent, existing methods for signing electronic documents (i.e., affixing electronic signatures) generally include the following approaches: First, the electronic signature is hosted on the server side, with the mobile device only used to collect the signer's intent authentication information, such as a password, to confirm the signer's intention to sign the electronic signature. The server then uses the hosted key to complete the electronic signature. Second, the complete key and certificate are stored on the mobile device, essentially a software implementation of a USB key. However, both of these methods have security issues. Summary of the Invention

[0004] In view of this, embodiments of this application provide an electronic signature method, apparatus, electronic device, and storage medium that can improve security.

[0005] According to a first aspect of the embodiments of this application, an electronic signature method is provided, applied to a server. The method includes: receiving an identifier index list from a mobile terminal, wherein the identifier index list records at least one identifier index, the identifier index being used to identify a formatted electronic document to be signed; obtaining a formatted electronic document identified by each identifier index according to the identifier index list; calculating a first hash value of the formatted electronic document based on each formatted electronic document, an imprint, and an electronic signature index; performing collaborative signing on the first hash value of each formatted electronic document to obtain a first signature intermediate value of the formatted electronic document; sending the first signature intermediate values ​​of each formatted electronic document to the mobile terminal, and obtaining a signature value corresponding to the formatted electronic document generated by the mobile terminal based on the first signature intermediate values ​​of the formatted electronic documents; and electronically signing the formatted electronic document based on the signature value of each formatted electronic document to obtain an electronically signed document.

[0006] In one possible implementation, the method further includes: calculating a second hash value for each of the formatted electronic documents; adding a timestamp to the second hash value to obtain a second hash value timestamp; and saving the second hash value timestamp as an electronic certificate corresponding to the formatted electronic document.

[0007] In one possible implementation, the method further includes: receiving a handwritten signature collected by the mobile terminal; replacing the original imprint in the imprint template with the handwritten signature to obtain the imprint, wherein the original imprint is a signature generated from a preset font.

[0008] In one possible implementation, the method further includes: obtaining the device feature value of the mobile terminal; creating a first collaborative key fragment; binding the first collaborative key fragment with the device feature value to obtain a bound collaborative key fragment; sending intermediate parameters for creating a key to the mobile terminal based on the bound collaborative key fragment, wherein the intermediate parameters are used for the mobile terminal to create a second collaborative key fragment, and the mobile terminal saves the second collaborative key fragment using dynamic white-box encryption; receiving a digital certificate request created by the mobile terminal based on the second collaborative key fragment; creating a digital certificate based on the digital certificate request; creating an imprint; and creating an electronic signature based on the digital certificate and the imprint.

[0009] In one possible implementation, the method further includes: receiving a certificate creation request from the mobile terminal; generating a second intermediate signature value corresponding to the certificate creation request based on the first collaborative key fragment; and sending the second intermediate signature value to the mobile terminal, so that the mobile terminal generates the digital certificate request based on the second intermediate signature value and the second collaborative key fragment.

[0010] According to a second aspect of the embodiments of this application, an electronic signature device is provided, comprising: a front-end service module, configured to receive an identifier index list from a mobile terminal, and obtain a format electronic document identified by each identifier index according to the identifier index list, wherein the identifier index list records at least one identifier index, the identifier index being used to identify a format electronic document to be signed; an electronic signature module, configured to calculate a first hash value of the format electronic document according to each format electronic document, an imprint, and an electronic signature index, and electronically sign the format electronic document according to the signature value of each format electronic document to obtain an electronically signed document; and a collaborative signature module, configured to collaboratively sign the first hash value of each format electronic document to obtain a first signature intermediate value of the format electronic document, and send the first signature intermediate values ​​of each format electronic document to the mobile terminal to obtain a signature value corresponding to the format electronic document generated by the mobile terminal based on the first signature intermediate value of the format electronic document.

[0011] According to a third aspect of the embodiments of this application, an electronic signature system is provided, comprising: a mobile terminal and the electronic signature device described in the second aspect of the embodiments of this application; the mobile terminal is configured to send an identifier index list to the electronic signature device, receive a first signature intermediate value from the electronic signature device, and generate a signature value of a corresponding format electronic document based on the first signature intermediate value.

[0012] According to a fourth aspect of the present application, an electronic device is provided, comprising: a processor, a memory, a communication interface, and a communication bus, wherein the processor, the memory, and the communication interface communicate with each other via the communication bus; the memory is used to store at least one executable instruction, wherein the executable instruction causes the processor to perform an operation corresponding to the method described in the first aspect.

[0013] According to a fifth aspect of the embodiments of this application, a computer storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the method described in the first aspect.

[0014] According to a sixth aspect of the present application, a computer program product is provided, the computer program product being tangibly stored on a computer-readable medium and including computer-executable instructions that, when executed, cause at least one processor to perform the method as described in the first aspect.

[0015] Based on the electronic signature method provided by the above scheme, the method involves obtaining formatted electronic documents from the index list in the mobile terminal, calculating the first hash value of each formatted electronic document based on the formatted electronic document, the imprint, and the electronic signature index, then performing collaborative signing on the first hash value of each formatted electronic document to obtain the first intermediate signature value of the formatted electronic document, and sending the first intermediate signature value to the mobile terminal. The method then obtains the signature value of the formatted electronic document generated by the mobile terminal based on the first signature value, and performs electronic signature on the formatted electronic document based on the signature value of each formatted electronic document to obtain an electronically signed document. As can be seen, this scheme calculates a first hash value for each formatted electronic document, then collaboratively signs each formatted electronic document to determine its signature value, and electronically seals it based on the signature value, ultimately obtaining an electronically signed document. Calculating the first hash value for each formatted electronic document ensures the integrity of the document content, while electronically sealing based on the signature value improves the accuracy of the signing. By calculating both the first hash value and the signature value for each formatted electronic document, a double guarantee is provided for the document to be signed, ensuring the uniqueness of the document and thus improving the security of the signing process. Attached Figure Description

[0016] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings.

[0017] Figure 1 A flowchart illustrating an electronic signature method provided in one embodiment of this application;

[0018] Figure 2 A flowchart illustrating yet another electronic signature method provided in one embodiment of this application;

[0019] Figure 3 A flowchart illustrating another electronic signature method provided in one embodiment of this application;

[0020] Figure 4 A flowchart illustrating an electronic signature method for creating an electronic signature, provided as an embodiment of this application;

[0021] Figure 5 This application provides a schematic diagram of an electronic signature device according to one embodiment;

[0022] Figure 6 A schematic diagram of an electronic signature system provided in one embodiment of this application;

[0023] Figure 7 This is a schematic diagram of the structure of an electronic device provided in one embodiment of this application. Detailed Implementation

[0024] To enable those skilled in the art to better understand the technical solutions in the embodiments of this application, the technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art should fall within the protection scope of the embodiments of this application.

[0025] The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. The singular forms “a,” “the,” and “the” used in this application and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any or all possible combinations of one or more of the associated listed items.

[0026] It should be understood that although the terms first, second, third, etc., may be used in this application to describe various information, such information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of this application, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."

[0027] Electronic signature method

[0028] Figure 1 This is a flowchart of an electronic signature method provided in an embodiment of this application. For example... Figure 1 As shown, the electronic signature method includes steps 101 to 106:

[0029] Step 101: Receive the identifier index list from the mobile terminal.

[0030] The identifier index list records at least one identifier index, which is used to identify the formatted electronic document to be signed.

[0031] When you need to sign a formatted electronic document, log in to the mobile app, search for the formatted electronic document to be signed, and either view the content of the formatted electronic document first and then perform the electronic signing process, or directly select the formatted electronic document to be signed and perform the electronic signing process.

[0032] When a signing of a formatted electronic document is initiated, the mobile terminal APP sends a list of identifiers for the formatted electronic document to be signed to the server, and then receives the list of identifiers.

[0033] In one feasible example, the identifier index list contains 100 identifier indices to identify 100 formatted electronic documents to be signed.

[0034] Step 102: Based on the identifier index list, obtain the electronic file of the layout identified by each identifier index.

[0035] Based on each index in the identifier index list, select the corresponding electronic format file from the stored electronic format files that matches the identifier index list to obtain the electronic format file identified by each identifier index, and perform the electronic signature step on each electronic format file.

[0036] Step 103: Calculate the first hash value of each electronic document layout, imprint, and electronic signature index.

[0037] Based on the document, imprint image, and electronic signature index in the formatted electronic file, the first hash value of the formatted electronic file is calculated. The purpose of generating the first hash value is to ensure the integrity of the document content.

[0038] Step 104: Perform collaborative signing on the first hash value of each format electronic document to obtain the first signature intermediate value of that format electronic document.

[0039] The first hash value list is generated by calculating the first hash value of each electronic document to be signed in the identifier index list. The first hash value list is sent to the mobile terminal APP. The mobile terminal APP uses the collaborative signature key to fragment each electronic document corresponding to the first hash value list, and performs collaborative signature on the first hash value of each electronic document to obtain the first signature intermediate value of the electronic document.

[0040] Step 105: Send the first signature intermediate value of each electronic document to the mobile terminal, and obtain the signature value corresponding to the electronic document generated by the mobile terminal based on the first signature intermediate value of the electronic document.

[0041] The mobile terminal APP calculates and generates a signature value by taking the intermediate value of the first signature of each format of electronic document corresponding to each first hash value in the first hash value list.

[0042] Determine whether each hash value in the first hash value list has been used to calculate the signature value of the corresponding electronic document. If so, execute the step of obtaining the signature value of the electronic document generated by the mobile terminal APP based on the first intermediate signature value of the electronic document. If not, execute the step of generating the signature value of the electronic document based on the first intermediate signature value of the electronic document.

[0043] Step 106: Based on the signature value of each electronic document, electronically sign the electronic document to obtain an electronically signed document.

[0044] By receiving the signature value corresponding to each electronic document format generated from the mobile terminal APP, the electronic document format is electronically signed. It is then determined whether each electronic document format in the identifier index list has been electronically signed. If not, the step of electronically signing the electronic document format based on its signature value is executed to obtain an electronically signed document; if so, the step of sending the electronically signed document back to the information collection terminal is executed.

[0045] The execution status of electronically signed documents can be checked through a mobile app.

[0046] In this embodiment, based on the identifier index list, the formatted electronic document identified by each identifier index list is obtained, and then a first hash value of the formatted electronic document is calculated. By collaboratively signing the first hash value of each formatted electronic document, a first signature intermediate value is obtained. The mobile terminal generates a signature value corresponding to the formatted electronic document based on the first signature intermediate value, and electronically signs the formatted electronic document based on the signature value, resulting in an electronically signed document. By calculating the first hash value and the signature value of the formatted electronic document, the integrity of the formatted electronic document is ensured by calculating the first hash value, and the uniqueness of the formatted electronic document is ensured by calculating the signature value, thereby improving the security of the signing process.

[0047] Figure 2 This is a flowchart of another electronic signature method provided in the embodiments of this application. For example... Figure 2 As shown, the electronic signature method further includes steps 201 to 203:

[0048] Step 201: Calculate the second hash value for each format electronic document.

[0049] Upon receiving the electronic documents to be signed, a second hash value is calculated for each document. Specifically, the hash value algorithm used for the second hash value can be SM3, MD5, SHA-1, SHA-256, or SHA-512, etc.

[0050] Step 202: Add a timestamp to the second hash value to obtain the second hash value timestamp.

[0051] In a feasible example, the timestamp can be recorded in the format of year, month, and day, such as 2022.1.1. By overprinting the calculated hash value with a timestamp, a second hash value timestamp is obtained to record the caching time of each format electronic document.

[0052] Step 203: Save the second hash value timestamp as an electronic certificate for the corresponding electronic document format.

[0053] In this embodiment, by calculating a second hash value for each format electronic document and adding a timestamp to the second hash value, the second hash value timestamp is saved as an electronic certificate for the corresponding format electronic document. This allows users to prioritize urgent matters and postpone signing and affixing electronic seals to documents awaiting signature, thereby improving work efficiency, the convenience, reliability, and security of electronic seals, and ultimately enhancing the user experience.

[0054] Figure 3 This is a flowchart of another electronic signature method provided in an embodiment of this application. For example... Figure 3As shown, the electronic signature method further includes steps 301 to 302:

[0055] Step 301: Receive the handwritten signature collected by the mobile terminal.

[0056] Users can sign their names by hand on the mobile app. Different users have different handwriting styles, resulting in different handwritten signatures. The app also receives handwritten signatures collected by the mobile device.

[0057] Step 302: Replace the original imprint in the imprint template with a handwritten signature to obtain the imprint. The original imprint is a signature generated from a preset font.

[0058] The preset font can be, for example, Songti, Kaiti, Microsoft Yahei, etc. The original imprint is formed by the preset font. The original imprint is obtained by replacing the original imprint in the imprint template with the collected handwritten signature.

[0059] In this embodiment of the application, the received handwritten signature replaces the original imprint in the imprint template to obtain an imprint. The uniqueness of the handwritten signature makes the first hash value of the electronic document calculated based on the imprint unique and complete, thereby improving the security of electronically signing the electronic document.

[0060] Figure 4 This is a flowchart illustrating an electronic signature method, including the creation of an electronic signature, provided in an embodiment of this application. For example... Figure 4 As shown, the electronic signature method further includes steps 401 to 408:

[0061] Step 401: Obtain the device characteristic value of the mobile terminal.

[0062] Each mobile terminal has a unique corresponding device characteristic value. Different mobile terminals have different device characteristic values. For example, the device characteristic value corresponding to mobile terminal A is 'a', the device characteristic value corresponding to mobile terminal B is 'b', and so on.

[0063] Step 402: Create the first collaborative key fragment.

[0064] Step 403: Bind the first collaborative key fragment to the device feature value to obtain the bound collaborative key fragment.

[0065] By creating a first collaborative key fragment and binding it to the device characteristic value of the mobile terminal, a unique bound collaborative key fragment is formed, restricting the first collaborative key fragment to be used only on a fixed device, thereby enhancing the security of its use.

[0066] Step 404: Based on the bound collaborative key fragment, send intermediate parameters for key creation to the mobile terminal. These intermediate parameters are used by the mobile terminal to create the second collaborative key fragment and enable the mobile terminal to save the second collaborative key fragment using dynamic white-box encryption.

[0067] The mobile terminal creates a second collaborative key fragment based on the received intermediate parameters. The second collaborative key fragment generated by the mobile terminal is encrypted and stored using the SM4 dynamic white-box algorithm. This eliminates the need for the complete private key to be present during the creation of the second collaborative key fragment, thus enhancing the security of storage.

[0068] Step 405: Receive the digital certificate request created by the mobile terminal based on the second collaborative key fragment.

[0069] Step 406: Create a digital certificate according to the digital certificate request.

[0070] The mobile terminal creates a digital certificate request based on the created second collaborative key fragment. After receiving the digital certificate request from the mobile terminal and verifying the legality of the digital certificate request, a digital certificate is created for this digital certificate request.

[0071] Step 407: Create an impression.

[0072] Check if the current user's handwritten signature has been collected. If not, create an image of the user's name as the original imprint by calling the user's name. If the user's handwritten signature has been collected, use the collected user's handwritten signature as the imprint.

[0073] Step 408: Create an electronic signature based on the digital certificate and the impression.

[0074] Based on the digital certificate and impression, an instruction to create an electronic signature is generated. Based on the instruction to create an electronic signature, an electronic signature is created. After uniquely associating the user identifier, digital certificate and electronic signature, the digital certificate is returned to the mobile terminal APP, and the mobile terminal saves the digital certificate.

[0075] In this embodiment, a bound collaborative key fragment is obtained by binding a first collaborative key fragment with a device feature value. Then, a second collaborative key fragment generated by the mobile terminal based on intermediate parameters is stored using dynamic white-box encryption. The mobile terminal creates a digital certificate request based on the second collaborative key fragment and creates an electronic signature based on the digital certificate request and the imprint. This ensures that the first collaborative key fragment can only be used on a fixed device, and the use of dynamic white-box encryption to store the second collaborative key fragment guarantees the security of both the first and second collaborative key fragments, thereby improving the security of the generated electronic signature.

[0076] In one possible implementation, the electronic signature method further includes:

[0077] Receive a certificate creation request from the mobile terminal.

[0078] A second signature intermediate value corresponding to the certificate creation request is generated based on the first collaborative key fragment, and the second signature intermediate value is sent to the mobile terminal so that the mobile terminal can generate a digital certificate request based on the second signature intermediate value and the second collaborative key fragment.

[0079] In this embodiment, the mobile terminal creates a certificate request, generates a second signature intermediate value based on the first collaborative key fragment, sends the second signature intermediate value to the mobile terminal, and generates a digital certificate request based on the second signature intermediate value and the second collaborative key fragment, so as to generate a digital certificate according to the digital certificate request.

[0080] Electronic signature device

[0081] Figure 5 This is a schematic diagram of an electronic signature device provided in an embodiment of the application. For example... Figure 5 As shown, the electronic signature device 500 includes:

[0082] The front-end business module 501 is used to receive an identification index list from the mobile terminal and obtain the electronic document format identified by each identification index according to the identification index list. The identification index list records at least one identification index, which is used to identify the electronic document format to be signed.

[0083] The electronic signature module 502 is used to calculate the first hash value of each electronic document format, the imprint and the electronic signature index, and to electronically sign the electronic document format according to the signature value of each electronic document format, so as to obtain an electronic signature file.

[0084] The collaborative signature module 503 is used to collaboratively sign the first hash value of each format electronic document to obtain the first signature intermediate value of the format electronic document, and send the first signature intermediate value of each format electronic document to the mobile terminal to obtain the signature value corresponding to the format electronic document generated by the mobile terminal based on the first signature intermediate value of the format electronic document.

[0085] Based on the electronic signature device provided by the above scheme, the front-end business module 501 receives an identifier index list from the mobile terminal and obtains the format electronic document identified by each identifier index according to the identifier index list; the electronic signature module 502 calculates the first hash value corresponding to each format electronic document, the imprint, and the electronic signature index; the collaborative signature module 503 performs collaborative signature on the first hash value of each format electronic document to obtain a first signature intermediate value, and sends the first signature intermediate value to the mobile terminal to obtain the signature value generated by the mobile terminal based on the first signature intermediate value; the electronic signature module 502 performs electronic signature on the format electronic document according to the signature value of each format electronic document to obtain an electronic signature document. As can be seen, this scheme calculates a first hash value for each formatted electronic document, then collaboratively signs each formatted electronic document to determine its signature value, and electronically seals it based on the signature value, ultimately obtaining an electronically signed document. Calculating the first hash value for each formatted electronic document ensures the integrity of the document content, while electronically sealing based on the signature value improves the accuracy of the signing. By calculating both the first hash value and the signature value for each formatted electronic document, a double guarantee is provided for the document to be signed, ensuring the uniqueness of the document and thus improving the security of the signing process.

[0086] It should be noted that the above-mentioned electronic signature device and the aforementioned electronic signature method embodiment are based on the same concept. For details, please refer to the description in the aforementioned data processing method embodiment, which will not be repeated here.

[0087] Electronic signature system

[0088] Figure 6 This is a schematic diagram of an electronic signature system provided in the application embodiment, such as... Figure 6 As shown, the electronic signature system includes: a mobile terminal 601 and an electronic signature device 500;

[0089] The mobile terminal 601 is used to send an identifier index list to the electronic signature device 500, receive a first signature intermediate value from the electronic signature device 500, and generate a signature value of a corresponding electronic document based on the first signature intermediate value.

[0090] In one possible implementation, the electronic signature system also includes:

[0091] The front-end business module is used to generate a hash value list, which includes the first hash value of each format electronic document;

[0092] Mobile terminal 601 is used to collaborate with collaborative signature module 503 to sign each first hash value in the hash value list, so that collaborative signature module 503 generates a first signature intermediate value for each format electronic document.

[0093] It should be noted that the above-mentioned electronic signature system and the aforementioned electronic signature method embodiments are based on the same concept. For details, please refer to the description in the aforementioned data processing method embodiments, which will not be repeated here.

[0094] electronic devices

[0095] Reference Figure 7 This document illustrates a schematic diagram of an electronic device according to an embodiment of this application. The specific embodiments of this application do not limit the specific implementation of the electronic device.

[0096] like Figure 7 As shown, the electronic device 700 may include: a processor 702, a communications interface 704, a memory 706, and a communications bus 708.

[0097] in:

[0098] The processor 702, communication interface 704, and memory 706 communicate with each other via communication bus 708.

[0099] Communication interface 704 is used to communicate with other electronic devices or servers.

[0100] The processor 702 is used to execute program 710, which can specifically execute the relevant steps in the above-described electronic signature method embodiment.

[0101] Specifically, program 710 may include program code that includes computer operation instructions.

[0102] The processor 702 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application. The smart device includes one or more processors, which may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0103] Memory 706 is used to store program 710. Memory 706 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0104] Specifically, program 710 can be used to cause processor 702 to execute the electronic signature method in any of the foregoing embodiments.

[0105] The specific implementation of each step in program 710 can be found in the corresponding steps and units described in any of the foregoing electronic signature method embodiments, and will not be repeated here. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working process of the devices and modules described above can be referred to the corresponding process descriptions in the foregoing method embodiments, and will not be repeated here.

[0106] Based on the electronic signature method provided by the above scheme, the method involves obtaining formatted electronic documents from the index list in the mobile terminal, calculating the first hash value of each formatted electronic document based on the formatted electronic document, the imprint, and the electronic signature index, then performing collaborative signing on the first hash value of each formatted electronic document to obtain the first intermediate signature value of the formatted electronic document, and sending the first intermediate signature value to the mobile terminal. The method then obtains the signature value of the formatted electronic document generated by the mobile terminal based on the first signature value, and performs electronic signature on the formatted electronic document based on the signature value of each formatted electronic document to obtain an electronically signed document. As can be seen, this scheme calculates a first hash value for each formatted electronic document, then collaboratively signs each formatted electronic document to determine its signature value, and electronically seals it based on the signature value, ultimately obtaining an electronically signed document. Calculating the first hash value for each formatted electronic document ensures the integrity of the document content, while electronically sealing based on the signature value improves the accuracy of the signing. By calculating both the first hash value and the signature value for each formatted electronic document, a double guarantee is provided for the document to be signed, ensuring the uniqueness of the document and thus improving the security of the signing process.

[0107] Computer storage media

[0108] This application also provides a computer-readable storage medium storing instructions for causing a machine to perform the electronic signature method as described herein. Specifically, a system or apparatus equipped with a storage medium storing software program code that implements the functions of any of the embodiments described above, and enabling the computer (or CPU or MPU) of the system or apparatus to read and execute the program code stored in the storage medium.

[0109] In this case, the program code read from the storage medium can itself implement the function of any of the above embodiments, and therefore the program code and the storage medium storing the program code constitute part of this application.

[0110] Examples of storage media used to provide program code include floppy disks, hard disks, magneto-optical disks, optical disks (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), magnetic tapes, non-volatile memory cards, and ROMs. Alternatively, program code can be downloaded from a server computer via a communication network.

[0111] Furthermore, it should be clear that not only can the program code read by the computer be executed, but also the operating system or other components operating on the computer can be instructed based on the program code to perform some or all of the actual operations, thereby realizing the function of any of the embodiments described above.

[0112] Furthermore, it is understood that the program code read from the storage medium is written to the memory set in the expansion board inserted into the computer or to the memory set in the expansion module connected to the computer. Then, based on the instructions of the program code, the CPU or other components installed on the expansion board or expansion module execute some and all of the actual operations, thereby realizing the function of any of the above embodiments.

[0113] Computer program products

[0114] This application also provides a computer program product, including computer instructions that instruct a computing device to perform an operation corresponding to any of the methods in the above-described multiple method embodiments.

[0115] It should be noted that, depending on the implementation needs, the various components / steps described in the embodiments of this application can be broken down into more components / steps, or two or more components / steps or parts of the operation of components / steps can be combined into new components / steps to achieve the purpose of the embodiments of this application.

[0116] The methods described in the embodiments of this application can be implemented in hardware, firmware, or as software or computer code that can be stored in a recording medium (such as a CD-ROM, RAM, floppy disk, hard disk, or magneto-optical disk), or as computer code downloaded over a network that is originally stored in a remote recording medium or a non-transitory machine-readable medium and will be stored in a local recording medium. Thus, the methods described herein can be stored on a recording medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware (such as an ASIC or FPGA) for such software processing. It is understood that the computer, processor, microprocessor controller, or programmable hardware includes storage components (e.g., RAM, ROM, flash memory, etc.) capable of storing or receiving software or computer code that, when accessed and executed by the computer, processor, or hardware, implements the image annotation methods described herein. Furthermore, when a general-purpose computer accesses the code used to implement the image annotation methods shown herein, the execution of the code transforms the general-purpose computer into a dedicated computer for executing the checksum generation method shown herein.

[0117] Those skilled in the art will recognize that the units and method steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the embodiments of this application.

[0118] The above embodiments are only used to illustrate the embodiments of this application, and are not intended to limit the embodiments of this application. Those skilled in the art can make various changes and modifications without departing from the spirit and scope of the embodiments of this application. Therefore, all equivalent technical solutions also fall within the scope of the embodiments of this application, and the patent protection scope of the embodiments of this application should be defined by the claims.

Claims

1. An electronic signature method applied to a server, the method comprising: receiving an identification index list from a mobile terminal, wherein the identification index list records at least one identification index, and the identification index is used to identify a layout electronic file to be signed; obtaining a layout electronic file identified by each identification index according to the identification index list; calculating a first hash value of each layout electronic file according to each layout electronic file, a seal, and an electronic signature index; performing collaborative signature on the first hash value of each layout electronic file respectively to obtain a first signature intermediate value of the layout electronic file; sending the first signature intermediate value of each layout electronic file to the mobile terminal, and obtaining a signature value corresponding to the layout electronic file generated by the mobile terminal according to the first signature intermediate value of the layout electronic file; performing electronic signature on the layout electronic file according to the signature value of each layout electronic file to obtain an electronic signature file. 2.The method of claim 1, further comprising: calculating a second hash value of each layout electronic file respectively; stamping a timestamp on the second hash value to obtain a second hash value timestamp; and saving the second hash value timestamp as an electronic voucher of the corresponding layout electronic file. 3.The method of claim 1, further comprising: receiving a handwritten signature collected by the mobile terminal; and obtaining the seal by replacing an original seal in a seal template with the handwritten signature, wherein the original seal is a signature generated by a preset font. 4.The method of any one of claims 1-3, further comprising: obtaining a device characteristic value of the mobile terminal; creating a first collaborative key fragment; binding the first collaborative key fragment with the device characteristic value to obtain a bound collaborative key fragment; sending an intermediate parameter for creating a key to the mobile terminal according to the bound collaborative key fragment, wherein the intermediate parameter is used for the mobile terminal to create a second collaborative key fragment, and the mobile terminal saves the second collaborative key fragment through dynamic white-box encryption; receiving a digital certificate request created by the mobile terminal according to the second collaborative key fragment; creating a digital certificate according to the digital certificate request; creating a seal; creating an electronic signature according to the digital certificate and the seal. 5.The method of claim 4, further comprising: receiving a creation certificate request from the mobile terminal; generating a second signature intermediate value corresponding to the creation certificate request according to the first collaborative key fragment, and sending the second signature intermediate value to the mobile terminal, so that the mobile terminal generates the digital certificate request according to the second signature intermediate value and the second collaborative key fragment. 6.An electronic signature device, comprising: The pre-service module is configured to receive an identification index list from the mobile terminal and acquire each layout electronic file identified by the identification index according to the identification index list, wherein the identification index list records at least one identification index, and the identification index is used to identify a layout electronic file to be signed. The electronic signature module is configured to calculate a first hash value of each layout electronic file according to the layout electronic file, the stamp and an electronic signature index, and perform electronic signature on the layout electronic file according to a signature value of each layout electronic file to obtain an electronic signature file. The collaborative signature module is configured to perform collaborative signature on the first hash value of each layout electronic file to obtain a first signature intermediate value of the layout electronic file, and send the first signature intermediate value of each layout electronic file to the mobile terminal to acquire a signature value corresponding to the layout electronic file generated by the mobile terminal according to the first signature intermediate value of the layout electronic file.

7. An electronic signature system comprising: The mobile terminal and the electronic signature device of claim 6; The mobile terminal is configured to send an identification index list to the electronic signature device and receive a first signature intermediate value from the electronic signature device, and generate a signature value corresponding to the layout electronic file according to the first signature intermediate value.

8. The system of claim 7, wherein, The pre-service module is configured to generate a hash value list, wherein the hash value list includes the first hash value of each layout electronic file. The mobile terminal is configured to perform collaborative signature on each first hash value in the hash value list with the collaborative signature module, so that the collaborative signature module generates the first signature intermediate value of each layout electronic file.

9. An electronic device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the memory and the communication interface complete communication with each other through the communication bus. The memory is configured to store at least one executable instruction, and the executable instruction causes the processor to perform operations corresponding to the method of any one of claims 1-5.

10. A computer storage medium, which stores a computer program, and the computer program is executed by a processor to implement the method of any one of claims 1-5.

Images