A document review and output method based on digital certificate

Abstract

The present invention discloses a file review and output method based on digital certificates. An export device including an internal network area and an external network area is connected between a sending host and a receiving host. The internal network area includes an internal network CPU, an FPGA, a DDR and a commercial cryptographic module, and the external network area includes an external network CPU. One-way optical transmission is used between the internal and external network areas for communication. The file review and output includes an administrator, a reviewer and a user. The user and the reviewer are each equipped with a USB key, in which their respective certificate information is stored. The commercial cryptographic module includes a signature / verification algorithm, a hash algorithm and an asymmetric encryption and decryption algorithm. The commercial cryptographic module is equipped with the same cryptographic algorithm as the USB key. After registering user / reviewer information, applying for an export token, exporting a file identifier, exporting approval and creating an export channel, the file is finally output to the receiving host in a safer and more efficient manner.

Description

Technical Field

[0001] The present invention realizes a file output method based on a confidential information system and realizes one-way file transmission based on a password mechanism. Background Art

[0002] With the continuous growth of demand for network applications, people have higher requirements for the security and real-time performance of business information exchange. In view of the security situation, many important businesses need to be processed on internal computers that are physically isolated from Internet computers. How to realize information exchange between internal computers and Internet computers is a problem that needs to be solved in information construction.

[0003] Traditionally, files are exported from internal computers by burning them to a CD. During the burning process, the operator audits the files, performs virus checks, and performs other operations. The files can be burned to a CD. However, the traditional file method has the following problems: (1) The manual audit workload is large and cannot ensure the security of the files; (2) A large number of CDs are generated during the file export process, which wastes resources; (3) The real-time performance is poor.

[0004] There are already some file export devices on the market, but these devices can only realize one-way file export and cannot perform file security review. Summary of the Invention

[0005] In view of the above-mentioned prior art, the present invention provides a safer and more efficient document review and output method based on digital certificates.

[0006] In order to solve the above technical problems, the present invention proposes a file review and output method based on digital certificates. The hardware architecture involved includes a sending host and a receiving host, an export device is connected between the sending host and the receiving host, and the export device is connected to the sending host and the receiving host using an Ethernet interface; the export device is divided into an intranet area and an extranet area, the intranet area includes an intranet CPU, FPGA, DDR and a commercial cryptographic module, and the extranet area includes an extranet CPU; an optical unidirectional transmission module is used between the intranet area and the extranet area to achieve optical unidirectional transmission communication to ensure physical isolation between the intranet area and the extranet area; the intranet area CPU and the FPGA interface are connected via an SDIO interface, and the FPGA and the commercial cryptographic module are connected via a PCIE interface; the DDR is connected to the FPGA processor, and the DDR is used to cache the exported file data message;

[0007] The document review and output process involves administrators, reviewers, and users; each user and reviewer is equipped with a USB Key personal electronic password key, which stores their respective certificate information; the commercial cryptographic module includes a signature / verification algorithm, a hash algorithm, and an asymmetric encryption and decryption algorithm; the commercial cryptographic module is equipped with the same cryptographic algorithm as the USB Key personal electronic password key;

[0008] Document review and approval output methods include:

[0009] Step 1: Register user / reviewer information to register the user certificate, user certificate ID, reviewer certificate, and reviewer certificate ID to the export device;

[0010] Step 2: Apply for an export token to generate the token validity period TL, obtain the encryption public key and 32-byte random number RK of the export device, user, and reviewer, call the asymmetric encryption and decryption algorithm to obtain the encryption results RSD, Ru, and Rs of the 32-byte random number RK corresponding to the export device, user, and reviewer, and generate the export token Token with the above encryption results and return it to the sending host;

[0011] Step 3: Export the file identifier to verify user information, user file integrity verification, and sign the file identifier;

[0012] Step 4: Export the approval form to verify the reviewer information, verify the integrity of the document, and identify and sign multiple documents;

[0013] Step 5. Create an export channel to export device verification user and reviewer information, verify user and reviewer signatures, and verify token validity;

[0014] Step 6: File output, which is used by the exporting device to perform integrity verification on the file and finally output the file to the receiving host.

[0015] Furthermore, the document review and output method of the present invention has the following specific steps:

[0016] Step 1. Register user / reviewer information: The administrator uses the user and reviewer's personal electronic password USB key to register. During registration, the registrant's certificate information and certificate serial number are imported into the export device to complete the registration.

[0017] Step 2. Apply for export token: Before exporting a file, the user must first apply for an export token, send the user information, reviewer information and token validity period TL of the export file and send them to the export device via Ethernet. The intranet CPU of the export device detects whether the user and reviewer have been registered. After the detection, the intranet CPU obtains the encryption public key of the export device through FPGA, and obtains the 32-byte random number RK at the same time, calls the asymmetric encryption and decryption algorithm to encrypt the random number RK, and the encryption result is recorded as RSD; the intranet CPU obtains the user's certificate information and certificate ID from the database through the received user information, extracts the user's encryption public key through the user certificate, and calls the asymmetric encryption and decryption algorithm to encrypt the random number RK, and the encryption result is recorded as Ru; the intranet CPU obtains the reviewer's certificate information and certificate ID from the database through the received reviewer information, extracts the reviewer's encryption public key through the reviewer certificate, and calls the asymmetric encryption and decryption algorithm to encrypt the random number RK, and the encryption result is recorded as Rs; finally, the encrypted result generates the export token Token and returns it to the sending host;

[0018] Step 3. Export file identification: The user accesses the USB Key personal electronic password key on the sending host, marks the exported file, identifies the export user name, user certificate ID, file name, file export method information, and generates an export application form TABO; then obtains the private key through the USB Key personal electronic password key, extracts the Ru information in the export token Token, encrypts the private key through the USB Key personal electronic password key and calls the asymmetric decryption algorithm for decryption. After decryption, the correctness of the data is verified. The verification indicates that it is consistent with the user information applied for the token. Finally, the user calls the hash operation interface in the USB Key personal electronic password key to perform a hash operation on the exported file. The operation result is H_FILE. After the operation, the user obtains the current system time factor Time_u, and calls the signature algorithm from the USB Key personal electronic password key to perform a signature operation on the export application form TABO, the hash operation result H_FILE and the current system time factor Time_u to obtain the signature result Sig_u, completing the file identification process;

[0019] Step 4. Export Approval: The reviewer accesses the USB Key personal electronic password key on the sending host, first obtains the private key through the USB Key personal electronic password key, extracts the Rs information in the exported token Token, encrypts the private key through the USB Key personal electronic password key and calls the asymmetric decryption algorithm for decryption. After decryption, the data correctness is verified. The verification is passed, indicating that it is consistent with the reviewer information applied for the token; then the reviewer obtains the user's certificate ID from the file's identification information, queries the user's certificate in the export device through the user's certificate ID, obtains the user's signature public key, and calls the USB Key personal electronic password key to verify the user's signature. After the verification is passed, the USB Key personal electronic password key is called to recalculate the file hash value, and the calculated result is compared with the user's calculated result. After the comparison is successful, the reviewer obtains the current system time factor Time_s, obtains the signature certificate from the USB Key personal electronic password key, performs a signature operation on the signature result Sig_u and the current system time factor Time_s to obtain the signature result Sig_s, and completes the file review process;

[0020] Step 5. Create an export channel: The user inserts the USB Key personal electronic password key into the sending host, and transmits the export token, user signature information and reviewer signature information to the export device. The export device's intranet CPU receives the data message, extracts the export token, and verifies the validity of the token. The validity includes the token's validity period, whether the user who applied for the token and the reviewer are legal; after verification, the user's signature and the reviewer's signature are verified. The intranet CPU obtains the reviewer certificate ID and review data from the received data message, searches the reviewer certificate information from the database through the reviewer certificate ID, obtains the signature public key, and verifies the review data through the FPGA calling the commercial cryptographic module to ensure the legitimacy of the reviewer of the exported file; after verification, the intranet CPU obtains the user certificate ID and user signature data from the received data message, searches the user certificate information from the database through the user certificate ID, obtains the signature public key, and verifies the user's signature data through the FPGA calling the commercial cryptographic module to ensure the legitimacy of the user of the exported file; after verification, the export device creates an export channel for the file;

[0021] Step 6. File output: After the export channel is successfully created, the user transfers the file FILE and file hash information H_FILE to the export device. In the intranet area of ​​the export device, the intranet CPU receives the file and forwards it to the FPGA. The FPGA saves the file in the DDR. At the same time, the FPGA calls the commercial cryptographic module hash port to calculate the file hash value. The calculation result is compared with the file hash information H_FILE received by the export device. If the comparison is successful, the file is sent to the external network CPU through the optical unidirectional transmission module, and then the file is output to the receiving host through the Ethernet interface.

[0022] Compared with the prior art, the present invention has the following beneficial effects:

[0023] The digital certificate-based file review and output method proposed in the present invention can perform a security review on files before they are exported, while meeting the real-time requirements of file export. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 A system framework diagram for implementing the document review and output method of the present invention;

[0025] Figure 2 This is a flowchart of the file export in the file review and output method of the present invention;

[0026] Figure 3 This is a flowchart of token export in the document review and output method of the present invention;

[0027] Figure 4 This is a flowchart of the document identification in the document review and output method of the present invention;

[0028] Figure 5 This is a review flow chart for the document review and output method of the present invention;

[0029] Figure 6 A flow chart is created for the channels in the document review and output method of the present invention. DETAILED DESCRIPTION

[0030] The present invention will be further described below with reference to the accompanying drawings and specific embodiments, but the following embodiments are by no means intended to limit the present invention in any way.

[0031] The present invention aims to provide a safer and more efficient file output method. The method is a file review and output method based on digital certificates. The system architecture for implementing the method of the present invention is as follows: Figure 1 As shown, the system includes a sending host and a receiving host, with an export device connected between the sending host and the receiving host. The export device is connected to both the sending host and the receiving host via an Ethernet interface. The export device is divided into an intranet area and an extranet area. The intranet area includes an intranet CPU, FPGA, DDR, and a commercial cryptographic module, while the extranet area includes an extranet CPU. An optical unidirectional transmission module is used to implement optical unidirectional transmission between the intranet and extranet areas to ensure physical isolation between the intranet and extranet areas. The intranet CPU and FPGA interface are connected via an SDIO interface, and the FPGA and commercial cryptographic module are connected via a PCIE interface. The DDR is connected to the FPGA processor and is used to cache exported file data packets. The file export method uses optical unidirectional transmission technology to ensure physical isolation between the intranet and extranet.

[0032] The document review and output method based on digital certificates of the present invention is implemented according to the following technical solution. The method includes three roles: administrator, reviewer and user. The user and reviewer are each equipped with a USB Key personal electronic password key, which stores their respective certificate information, certificate serial number, etc. The commercial cryptographic module includes signature / verification, hash algorithm, and asymmetric encryption and decryption algorithm; at the same time, the commercial cryptographic module in the device is equipped with the same cryptographic algorithm as the USB Key personal electronic password key. Figure 2 As shown, the invention is implemented according to the following steps:

[0033] Step 1: Register user / reviewer information. The administrator uses the user and reviewer's USB Key personal electronic password key to register. During registration, the registrant's certificate information and certificate serial number are imported into the export device to complete the registration.

[0034] Step 2: Apply for an export token to generate the token validity period TL, obtain the encryption public key and 32-byte random number RK of the export device, user, and reviewer, call the asymmetric encryption and decryption algorithm to obtain the encryption results RSD, Ru, and Rs of the 32-byte random number RK corresponding to the export device, user, and reviewer, and generate the export token Token with the above encryption results and return it to the sending host. The details are as follows:

[0035] Before a user exports a file, he or she must first apply for an export token, send the user information, reviewer information, and token validity period TL of the export file, and send them to the export device via Ethernet. The intranet CPU of the export device detects whether the user and reviewer have been registered. After the detection, the intranet CPU obtains the encryption public key of the export device through FPGA, and at the same time obtains the 32-byte random number RK, calls the asymmetric encryption algorithm to encrypt the random number RK, and the encryption result is recorded as RSD; the intranet CPU obtains the user's certificate information and certificate ID from the database based on the received user information, extracts the user's encryption public key through the user certificate, and calls the asymmetric encryption algorithm to encrypt the random number RK. The encryption result is recorded as Ru; the intranet CPU obtains the reviewer's certificate information and certificate ID from the database based on the received reviewer information, extracts the reviewer's encryption public key through the reviewer certificate, and calls the asymmetric encryption and decryption algorithm to encrypt the random number RK. The encryption result is recorded as Rs; finally, the encrypted result generates the export token Token and returns it to the sending host.

[0036] Step 3: Export the file identifier to verify user information, verify the integrity of the file, and sign the file identifier. The details are as follows:

[0037] The user accesses the USB Key personal electronic password key on the sending host, marks the exported file, identifies the export user name, user certificate ID, file name, file export method and other information, and generates an export application form TABO; then obtains the private key through the USB Key personal electronic password key, extracts the Ru information in the exported token Token, encrypts the private key through the USB Key personal electronic password key and calls the asymmetric decryption algorithm for decryption. After decryption, the correctness of the data is verified. The verification indicates that it is consistent with the user information applied for the token. Finally, the user calls the hash operation interface in the USB Key personal electronic password key to perform a hash operation on the exported file. The operation result is H_FILE. After the operation, the user obtains the current system time factor Time_u, and calls the signature algorithm from the USB Key personal electronic password key to perform a signature operation on the export application form TABO, the hash operation result H_FILE and the current system time factor Time_u to obtain the signature result Sig_u, completing the file identification process.

[0038] Step 4: Export the approval to verify the reviewer information, verify the integrity of the document, and identify and sign multiple documents. The spoiler content is as follows:

[0039] The reviewer accesses the USB Key personal electronic password key on the sending host, first obtains the private key through the USB Key personal electronic password key, extracts the Rs information in the exported token Token, encrypts the private key through the USB Key personal electronic password key and calls the asymmetric decryption algorithm for decryption. After decryption, the correctness of the data is verified. The verification is passed, indicating that it is consistent with the reviewer information applied for the token; then the reviewer obtains the user's certificate ID from the file's identification information, queries the user's certificate in the export device through the user's certificate ID, obtains the user's signature public key, and calls the USB Key personal electronic password key to verify the user's signature. After the verification is passed, the USB Key personal electronic password key is called to recalculate the file hash value, and the calculated result is compared with the user's calculated result. After the comparison is successful, the reviewer obtains the current system time factor Time_s, obtains the signature certificate from the USBKey personal electronic password key, performs a signature operation on the signature result Sig_u and the current system time factor Time_s to obtain the signature result Sig_s, and completes the file review process.

[0040] Step 5: Create an export channel to export the device verification user and reviewer information, verify the user and reviewer signatures. Verify the validity of the token; the specific contents are as follows:

[0041] The user inserts the USB Key personal electronic password key into the sending host, and transmits the export token, user signature information and reviewer signature information to the export device. The export device's intranet CPU receives the data message, extracts the export token, and verifies the validity of the token, which includes the token's validity period, whether the user who applied for the token and the reviewer are legal; after verification, the user's signature and the reviewer's signature are verified. The intranet CPU obtains the reviewer's certificate ID and review data from the received data message, searches the reviewer's certificate information from the database through the reviewer's certificate ID, obtains the signature public key, and verifies the review data through the FPGA calling the commercial cryptographic module to ensure the legitimacy of the reviewer of the exported file; after verification, the intranet CPU obtains the user certificate ID and user signature data from the received data message, searches the user certificate information from the database through the user certificate ID, obtains the signature public key, and verifies the user's signature data through the FPGA calling the commercial cryptographic module to ensure the legitimacy of the user of the exported file; after verification, the export device creates an export channel for the file.

[0042] Step 6: File output, which is used by the export device to perform integrity verification on the file and finally output the file to the receiving host. The details are as follows:

[0043] After the export channel is successfully created, the user transfers the file FILE and file hash information H_FILE to the export device. In the intranet area of ​​the export device, the intranet CPU receives the file and forwards it to the FPGA. The FPGA saves the file in the DDR and calls the hash port of the commercial cryptographic module to calculate the file hash value. The calculation result is compared with the file hash information H_FILE received by the export device. If the comparison is successful, the file is sent to the external network CPU through the optical unidirectional transmission module, and then output to the receiving host through the Ethernet interface.

[0044] Example

[0045] The administrator uses the USB Key electronic password key of the user and reviewer to register. During registration, the USB Key is inserted into the export device, and the member certificate information and certificate ID are obtained through the USB Key password. The member certificate and certificate ID are sent to the device through the network port; after receiving the member certificate, the CPU of the device intranet calls the commercial cryptographic module through the FPGA to verify the validity of the certificate. After the verification is passed, the information is stored in the database.

[0046] Before exporting files, the user needs to apply for an export token, and the user sends the user name, reviewer name, token validity period TL, etc. to the device. After receiving the user's instructions, the intranet CPU of the exporting device verifies the legitimacy of the request package, and queries the database through the user / reviewer information to see whether the member has completed registration in the device; after the verification is passed, the intranet CPU obtains the 32-byte random number RK and the current time factor IDr of the device. The intranet CPU calls the commercial cryptographic module through FPGA to obtain the encryption public key of the exporting device, and encrypts RK and IDr to obtain the ciphertext RSD, which is returned to the intranet CPU; the intranet CPU obtains the user certificate and the user certificate ID information IDu, extracts the user encryption public key through the user certificate, and encrypts RK and 0x11 through the ECC asymmetric algorithm of the commercial cryptographic module called by FPGA. The encryption result The internal network CPU obtains the reviewer certificate and the ID information IDs of the reviewer certificate, extracts the encryption public key through the reviewer certificate, and encrypts RK, 0x22 through the ECC asymmetric algorithm of the commercial cryptographic module through FPGA. The encryption result is Rs, and Rs is returned to the internal network CPU; the internal network CPU encapsulates the data packet tCon (IDr, RSD, IDu, Ru, IDs, Rs, TL), and calls the hash algorithm of the commercial cryptographic module through FPGA to calculate tCon. The calculation result is tRHZ, and the calculation result is returned to the internal network CPU; the internal network CPU returns Token (tCon, tRHZ) to the sending host through the network interface. The token export process is as follows: Figure 3 shown.

[0047] After the token application is successful, the user identifies the file to be exported through the sending host, connects the USB Key to the sending host, and fills out the export application form TABO. The application form includes user information (user name, user certificate ID, etc.), file information (name, type, size, etc.), file export method (export to disc or export to USB storage device), etc. After filling in the form, submit the application form, obtain the exported token, extract Ru from the token, call the ECC asymmetric decryption module of the user's electronic password key to decrypt Ru, and check whether the result is in the (RK, 0x11) format after decryption. If not, the identification fails and the user information does not match the user information applied for in the token; if the monitoring result is successful, call the hash operation interface in the user's electronic password key to perform a hash operation on the exported file (RK, FILE), and the result is recorded as H_FILE; after the operation is successful, obtain the current time factor of the system, recorded as Time_u, and encapsulate the data message (IDr, TABO, RSD, H_FILE, Time_u) as TABu, obtain the user certificate from the personal electronic password key, extract the user signature public key, and call the ECC signature algorithm to perform a signature operation on TABu Sig_u = Sigu (TABu); finally, the user submits the Token, TABu, Sign_u, Rs, H_FILE and the file to the reviewer. The user identification process is as follows Figure 4 shown.

[0048] The reviewer connects the personal USB Key to the sending host and checks the files identified by the user. The reviewer obtains TABu from the information submitted by the user and obtains the ID information of the user certificate. The reviewer sends the ID information of the user certificate to the device. After receiving it, the intranet CPU of the device host queries the database for the user's signature certificate, obtains the user's signature public key, and returns it to the sending host. The sending host calls USB The ECC signature verification algorithm in Key verifies the signature of the data TABu; after the verification is passed, the file hash value H_FILE is extracted from TABu, and the reviewer calls the hash operation interface of the electronic password key to recalculate the file content to check whether the file has been tampered with in the process. The result of the operation H_FILE' is compared with the hash value H_FILE. If the comparison fails, it indicates that the file content has been tampered with in the process and the review fails; if the comparison is successful, the Rs information is obtained and the reviewer's electronic password key is used to decrypt Rs. After decryption, it is checked whether the result is in the format of (RK, 0x22). If not, it indicates that the reviewer and the applicant information applied in the token are inconsistent and the review operation fails; if the detection is successful, the reviewer needs to re-sign the identification information of the file, obtain the current system time factor Time_s, and encapsulate the data packet TABs, including (TABu, Sig_u, Token, IDs (review certificate ID), Time_s). The reviewer calls the reviewer USB The signature public key of the Key cryptographic key signs TABs, which is recorded as Sig_s=Sigs(TABs). After completion, TABs_sig=(TABs, Sig_s) is returned to the user for approval. Figure 5 shown.

[0049] The user sends the approved file, and the device host establishes a sending channel for the exported file. First, the user connects his personal USB Key electronic password key to the sending host, and the user sends the TABs and Sig_s information submitted by the reviewer to the device; the device's intranet CPU receives the TABs and Sig_s information, and the intranet CPU detects whether the token information Token in the TABs is valid, including whether the validity date of the token application is valid; obtains the user certificate serial number IDu and the reviewer certificate serial number IDs from the TABs, and determines whether IDu is the current sending user; whether IDu, IDs are consistent with the user and reviewer information of the token application. If they are inconsistent, the sending channel establishment fails; otherwise, the device verifies the user's signature information and the reviewer's signature information, and the intranet CPU obtains the IDs and Time_s in the TABs information to check whether the review time is valid (whether Time_s is within the validity period of the token application). After verification, the device queries the database according to IDs (reviewer certificate ID) to obtain the reviewer certificate information, and passes The certificate obtains the signature public key, and verifies the signature by calling the commercial cryptographic algorithm through FPGA. After the verification is passed, the user's signature information is verified; the device obtains TABu and Sig_u from TABs, verifies the user's signature time and signature data, obtains IDu and Time_u from TABu, checks whether the user's signature time is valid (whether Time_u is within the validity period of the token application), and after verification, queries the database according to IDu (user certificate ID) to obtain user certificate information, obtains the user's signature public key through the certificate, and verifies the signature by calling the commercial cryptographic algorithm through FPGA. The verification obtains RSD information from the token Token, obtains the device private key through the commercial algorithm module, and calls the ECC asymmetric algorithm to decrypt RSD. Decryption obtains (RK, IDr), compares IDr with the IDr stored in TABs to see if they are consistent. If they are inconsistent, the export channel creation fails, otherwise the creation is successful. After the creation is successful, the device retains RK. Channel creation is as follows Figure 6 shown.

[0050] After the channel is successfully established, the sending host begins exporting the file to the external network. It obtains the file hash value H_FILE from TABu and sends both the file FILE and the hash value H_FILE to the device. The device's internal CPU forwards (FILE, H_FILE) to the FPGA. The FPGA saves the file in DDR and simultaneously calls a commercial algorithm module to perform a hash operation on (RK, FILE). The resulting hash value is recorded as H_FILE'. H_FILE' is compared with H_FILE. If the results are the same, the FPGA exports the file to the external network and then sends it to the receiving host via the Ethernet interface. If the results are different, the file content has been tampered with, and the file export is terminated, with an export failure signal returned.

[0051] Although the present invention has been described above in conjunction with the accompanying drawings, the present invention is not limited to the above-mentioned specific embodiments. The above-mentioned specific embodiments are merely illustrative and not restrictive. Under the guidance of the present invention, ordinary technicians in this field can make many variations without departing from the purpose of the present invention, and these are all protected by the present invention.

Claims

1. A document review and output method based on digital certificates, the hardware architecture of which includes a sending host and a receiving host, is characterized in that: An export device is connected between the sending host and the receiving host, and the export device is connected to the sending host and the receiving host using an Ethernet interface; the export device is divided into an intranet area and an extranet area, the intranet area includes an intranet CPU, FPGA, DDR and a commercial cryptographic module, and the extranet area includes an extranet CPU; an optical unidirectional transmission module is used between the intranet area and the extranet area to achieve optical unidirectional transmission communication to ensure physical isolation between the intranet area and the extranet area; the intranet area CPU and the FPGA interface are connected via an SDIO interface, and the FPGA and the commercial cryptographic module are connected via a PCIE interface; the DDR is connected to the FPGA processor, and the DDR is used to cache the exported file data message; The document review and output process involves administrators, reviewers, and users; each user and reviewer is equipped with a USBKey personal electronic password key, which stores their respective certificate information; the commercial cryptographic module includes signature / verification, hash algorithm, and asymmetric encryption and decryption algorithm; the commercial cryptographic module is equipped with the same cryptographic algorithm as the USBKey personal electronic password key; Document review and approval output methods include: Step 1: Register user / reviewer information to register the user certificate, user certificate ID, reviewer certificate, and reviewer certificate ID to the export device; Step 2: Apply for an export token to generate the token validity period TL, obtain the encryption public key and 32-byte random number RK of the export device, user, and reviewer, call the asymmetric encryption and decryption algorithm to obtain the encryption results RSD, Ru, and Rs of the 32-byte random number RK corresponding to the export device, user, and reviewer, and generate the export token Token with the above encryption results and return it to the sending host; Step 3: Export the file identifier to verify user information, user file integrity verification, and sign the file identifier; Step 4: Export the approval form to verify the reviewer information, verify the integrity of the document, and identify and sign multiple documents; Step 5. Create an export channel to export device verification user and reviewer information, verify user and reviewer signatures, and verify token validity; Step 6: File output, which is used by the exporting device to perform integrity verification on the file and finally output the file to the receiving host.

2. The document review and output method according to claim 1, characterized in that: The specific steps for the document review and output method are as follows: Step 1. Register user / reviewer information: The administrator uses the user and reviewer's personal electronic password USB key to register. During registration, the registrant's certificate information and certificate serial number are imported into the export device to complete the registration. Step 2. Apply for export token: Before exporting a file, the user must first apply for an export token, send the user information, reviewer information and token validity period TL of the export file and send them to the export device via Ethernet. The intranet CPU of the export device detects whether the user and reviewer have been registered. After the detection, the intranet CPU obtains the encryption public key of the export device through FPGA, and obtains the 32-byte random number RK at the same time, calls the asymmetric encryption and decryption algorithm to encrypt the random number RK, and the encryption result is recorded as RSD; the intranet CPU obtains the user's certificate information and certificate ID from the database through the received user information, extracts the user's encryption public key through the user certificate, and calls the asymmetric encryption and decryption algorithm to encrypt the random number RK, and the encryption result is recorded as Ru; the intranet CPU obtains the reviewer's certificate information and certificate ID from the database through the received reviewer information, extracts the reviewer's encryption public key through the reviewer certificate, and calls the asymmetric encryption and decryption algorithm to encrypt the random number RK, and the encryption result is recorded as Rs; finally, the encrypted result generates the export token Token and returns it to the sending host; Step 3: Export file identification: The user connects the USB Key personal electronic password key to the sending host, marks the exported file, identifies the export user name, user certificate ID, file name, file export method information, and generates the export application form TABO; Then, the private key is obtained through the USB Key personal electronic password key, and the Ru information in the exported token Token is extracted. The asymmetric decryption algorithm is called to decrypt the private key encrypted by the USB Key personal electronic password key. After decryption, the correctness of the data is verified. Passing the verification indicates that it is consistent with the user information applied for the token. Finally, the user calls the hash operation interface in the USB Key personal electronic password key to perform a hash operation on the exported file. The operation result is H_FILE. After the operation, the user obtains the current system time factor Time_u, and calls the signature algorithm from the USB Key personal electronic password key to perform a signature operation on the exported application form TABO, the hash operation result H_FILE and the current system time factor Time_u to obtain the signature result Sig_u, completing the file identification process; Step 4. Export Approval: The reviewer accesses the USB Key personal electronic password key on the sending host, first obtains the private key through the USB Key personal electronic password key, extracts the Rs information in the exported token Token, encrypts the private key through the USB Key personal electronic password key and calls the asymmetric decryption algorithm for decryption. After decryption, the correctness of the data is verified. The verification is passed, indicating that it is consistent with the reviewer information applied for the token; then the reviewer obtains the user's certificate ID from the file's identification information, queries the user's certificate in the export device through the user's certificate ID, obtains the user's signature public key, and calls the USB Key personal electronic password key to verify the user's signature. After the verification is passed, the USB Key personal electronic password key is called to recalculate the file hash value, and the calculated result is compared with the user's calculated result. After the comparison is successful, the reviewer obtains the current system time factor Time_s, obtains the signature certificate from the USB Key personal electronic password key, performs a signature operation on the signature result Sig_u and the current system time factor Time_s to obtain the signature result Sig_s, and completes the file review process; Step 5. Create an export channel: The user inserts the USB Key personal electronic password key into the sending host, and transmits the export token, user signature information and reviewer signature information to the export device. The export device's intranet CPU receives the data message, extracts the export token, and verifies the validity of the token. The validity includes the token's validity period, whether the user who applied for the token and the reviewer are legal; after verification, the user's signature and the reviewer's signature are verified. The intranet CPU obtains the reviewer certificate ID and review data from the received data message, searches the reviewer certificate information from the database through the reviewer certificate ID, obtains the signature public key, and verifies the review data through the FPGA calling the commercial cryptographic module to ensure the legitimacy of the reviewer of the exported file; after verification, the intranet CPU obtains the user certificate ID and user signature data from the received data message, searches the user certificate information from the database through the user certificate ID, obtains the signature public key, and verifies the user's signature data through the FPGA calling the commercial cryptographic module to ensure the legitimacy of the user of the exported file; after verification, the export device creates an export channel for the file; Step 6. File output: After the export channel is successfully created, the user transfers the file FILE and file hash information H_FILE to the export device. In the intranet area of ​​the export device, the intranet CPU receives the file and forwards it to the FPGA. The FPGA saves the file in the DDR. At the same time, the FPGA calls the commercial cryptographic module hash port to calculate the file hash value. The calculation result is compared with the file hash information H_FILE received by the export device. If the comparison is successful, the file is sent to the external network CPU through the optical unidirectional transmission module, and then the file is output to the receiving host through the Ethernet interface.

Images