Electronic contract signing method, device, electronic device and storage medium

By using GBA certification and encryption processing technology during the signing process of electronic contracts, combined with electronic signature information and message summary, the problem of electronic contracts being easily tampered with in the prior art is solved, and the security and effectiveness of electronic contracts are improved.

CN117240473BActive Publication Date: 2024-12-17CHINA MOBILE INTERNET CO LTD +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202311244686.4
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2023-09-22
Publication Date
2024-12-17
Estimated Expiration
2043-09-22

AI Technical Summary

Technical Problem

The existing electronic contract signing methods only rely on electronic signature information and signature timestamps, which are prone to attack and tampering by third parties, resulting in insufficient security of electronic contracts.

Method used

During the electronic contract signing process, the session key ks-naf negotiated during GBA authentication of the general boot architecture of the contract signing end and the network side device is obtained, and the mobile phone number is encrypted, and the electronic signature information, signature timestamp and message are combined. Abstract: The target electronic contract is processed and a signed electronic contract is generated.

Benefits of technology

The accurate confirmation certificate of identity authentication and real-name authentication at the contract signing end has been improved, the validity and non-refutability of electronic signatures have been enhanced, and the security and tamper-proof of electronic contracts have been further improved.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN117240473B_ABST
    Figure CN117240473B_ABST
Patent Text Reader

Abstract

The present disclosure provides an electronic contract signing method, device, electronic device and storage medium. It relates to the field of computer technology. The method includes: in the process of generating a signed electronic contract of a target electronic contract to be signed, obtaining the electronic signature information and signature timestamp signed by the contract signing end on the target electronic contract to be signed, and obtaining the session key ks‑naf negotiated by the contract signing end when performing GBA authentication with the network side device, encrypting the mobile phone number information corresponding to the contract signing end according to ks‑naf, and processing the target electronic contract according to the electronic signature information, signature timestamp, message digest of the target electronic contract and encrypted mobile phone number information to obtain a signed electronic contract. As a result, the obtained signed electronic contract is not easily tampered with, the tamper-proof property of the signed electronic contract is guaranteed, and the security of the signed electronic contract is enhanced.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to an electronic contract signing method, device, electronic device and storage medium. Background Art

[0002] At present, with the rapid development of the Internet, the application fields of electronic contracts are becoming more and more extensive, and there are more and more business scenarios for electronic contract signing through terminal devices.

[0003] In the related art, the usual process of electronic contract signing is: the electronic contract signing system sends the corresponding electronic contract to the terminal device, the terminal device signs the corresponding electronic signature information on the electronic contract, and provides the electronic signature information and the corresponding signature timestamp to the electronic contract signing system. Correspondingly, the electronic contract signing system generates a signed electronic contract based on the electronic signature information and the signature timestamp, and saves the generated signed electronic contract. However, this method of obtaining a signed electronic contract based only on the electronic signature information and the signature timestamp makes the signed electronic contract easily attacked and tampered by a third party. Therefore, in the process of signing an electronic contract, how to enable the electronic contract signing system to obtain a signed electronic contract that is not easily tampered with by a third party is very important for ensuring the security of the electronic contract. Summary of the invention

[0004] The present invention provides an electronic contract signing method, device, electronic device and storage medium.

[0005] In a first aspect, the present disclosure provides an electronic contract signing method, the method comprising: sending a target electronic contract to be signed to a contract signing end; obtaining a session key ks-naf negotiated by the contract signing end when performing general bootstrap architecture (GBA) authentication with a network side device; obtaining the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp; encrypting the mobile phone number information corresponding to the contract signing end according to the ks-naf to obtain the encrypted mobile phone number information; performing message digest calculation on the target electronic contract to generate a message digest of the target electronic contract; processing the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract.

[0006] In a second aspect, the present disclosure provides an electronic contract signing device, the device comprising: a first sending module, used to send a target electronic contract to be signed to a contract signing end; a first acquisition module, used to obtain a session key ks-naf negotiated by the contract signing end when performing general bootstrap architecture GBA authentication with a network side device; a second acquisition module, used to obtain the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp; a first encryption processing module, used to encrypt the mobile phone number information corresponding to the contract signing end according to the ks-naf to obtain the encrypted mobile phone number information; a message digest processing module, used to perform message digest calculation on the target electronic contract to generate a message digest of the target electronic contract; a contract processing module, used to process the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract.

[0007] In a third aspect, the present disclosure provides an electronic device, comprising: a processor, and a memory communicatively connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the electronic contract signing method disclosed in an embodiment of the present disclosure.

[0008] In a fourth aspect, the present disclosure provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the electronic contract signing method disclosed in an embodiment of the present disclosure.

[0009] In a fifth aspect, the present disclosure provides a computer program product, including a computer program, which, when executed by a processor, implements the electronic contract signing method disclosed in an embodiment of the present disclosure.

[0010] The technical solution provided by the embodiments of the present disclosure brings at least the following beneficial effects:

[0011] In the process of generating a signed electronic contract based on the target electronic contract to be signed, it is also judged whether the contract signing end and the network side device have completed GBA authentication, and whether the contract signing end has passed the real-name authentication. When it is determined that the contract signing end and the network side device have completed GBA authentication, and the contract signing end has passed the real-name authentication, the target electronic contract is processed based on the electronic signature information, the signature timestamp, the encrypted message digest and the encrypted mobile phone number information to obtain a signed electronic contract. Thus, in the process of signing the electronic contract, the contract signing end is subjected to GBA authentication and real-name authentication, and the validity of the identity of the contract signing end is accurately authenticated, thereby improving the validity and non-repudiation of the electronic signature signed by the contract signing end, and further improving the security and validity of the signed electronic contract. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0013] Figure 1 The present invention is a flowchart of an electronic contract signing method according to an exemplary embodiment;

[0014] Figure 2 is a flow chart of an electronic contract signing method according to another exemplary embodiment;

[0015] Figure 3 is a flow chart of an electronic contract signing method according to another exemplary embodiment;

[0016] Figure 4 This is an example diagram of the interaction between the contract initiator, the GBA authentication platform, the electronic contract management platform and the electronic signature platform;

[0017] Figure 5 This is an example diagram of the interaction between the contract signing end, the GBA authentication platform and the electronic signature platform;

[0018] Figure 6 It is a structural schematic diagram of an electronic contract signing device according to an exemplary embodiment;

[0019] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present disclosure.

[0020] The above drawings show clear embodiments of the present disclosure, which will be described in more detail below. These drawings and text descriptions are not intended to limit the scope of the present disclosure in any way, but to illustrate the concepts of the present disclosure to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0021] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0022] The technical solution of the present invention and how the technical solution of the present invention solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present invention will be described below in conjunction with the accompanying drawings.

[0023] First combine Figure 1 , an electronic contract signing method provided by an embodiment of the present disclosure is exemplarily described.

[0024] Figure 1 The figure is a flow chart of a method for signing an electronic contract according to an exemplary embodiment.

[0025] It should be noted that the electronic contract signing method provided in the embodiments of the present disclosure can be executed by an electronic contract signing device, wherein the electronic contract signing device can be implemented by software and / or hardware. The electronic contract signing device can be an electronic contract signing system, or can be configured in an electronic contract signing system, wherein the electronic contract signing system can be configured in an electronic device.

[0026] The electronic device may be any device having an electronic contract signing system, such as a terminal device, a server, etc. It should be noted that in this embodiment, the electronic contract signing method is described by taking the electronic contract signing system as an example.

[0027] like Figure 1 As shown, the electronic contract signing method includes the following steps:

[0028] Step 101, sending the target electronic contract to be signed to the contract signing end.

[0029] The target electronic contract to be signed in this embodiment may be any electronic contract to be signed specified by the contract initiator.

[0030] Among them, the contract signing end refers to the terminal device used by the signing user to sign the target electronic contract.

[0031] Among them, the contract initiator refers to the terminal device that initiates the signing of the target electronic contract.

[0032] Step 102: Acquire the session key ks-naf negotiated by the contract signing end when performing general bootstrapping architecture (GBA) authentication with the network side device.

[0033] In this embodiment, the network side device refers to the device in the mobile network corresponding to the subscriber identity module (Subscriber Identity Module) SIM card currently used in the contract signing end. The network side device may include a bootstrapping server function (BSF), a home subscriber system (HSS) and an application server (NAF). It should be noted that in this embodiment, the contract signing end and the network side device constitute a generic bootstrapping architecture (GBA).

[0034] It is understandable that when the contract signing end accesses the mobile network, it performs identity authentication with the network side device through the GBA authentication mechanism built into the SIM card and negotiates the session key ks-naf.

[0035] Step 103, obtaining the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp.

[0036] Specifically, after receiving the target electronic contract to be signed, the contract signing end can obtain the electronic signature information signed by the corresponding signing user at the signing position specified in the target electronic contract. Correspondingly, the contract signing end also obtains the timestamp corresponding to the signing user signing the electronic signature information, and uses the obtained timestamp as the signature timestamp corresponding to the electronic signature information.

[0037] Among them, the signature timestamp refers to the timestamp corresponding to when the electronic signature information is signed on the target electronic contract.

[0038] Step 104: encrypt the mobile phone number information corresponding to the contract signing end according to ks-naf to obtain encrypted mobile phone number information.

[0039] In some examples, the mobile phone number information corresponding to the contract signing end can be encrypted using ks-naf based on a preset encryption algorithm to obtain the encrypted mobile phone number information.

[0040] Among them, the preset encryption algorithm is an encryption algorithm that can be set according to actual encryption requirements. For example, the preset encryption algorithm can be an SM4 encryption algorithm, wherein the SM4 encryption algorithm is a symmetric key algorithm.

[0041] Step 105: Calculate the message digest of the target electronic contract to generate a message digest of the target electronic contract.

[0042] In one embodiment, a message digest calculation may be performed on the target electronic contract based on a preset message digest algorithm to generate a message digest of the target electronic contract.

[0043] The preset message digest algorithm may be preset according to actual needs. For example, the preset message digest algorithm may be a secure hash algorithm (Secure Hash Algorithm, SHA), which is not specifically limited in this embodiment.

[0044] In one embodiment of the present disclosure, in order to further increase the security of the subsequently generated signed electronic contract, the message digest of the target electronic contract may be encrypted according to KS-NAF.

[0045] Specifically, the message digest of the target electronic contract may be encrypted using ks-naf according to a preset encryption algorithm.

[0046] Step 106, processing the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract.

[0047] It should be noted that the signed electronic contract in this embodiment is based on many factors, and the session key used to encrypt the mobile phone number information cannot be obtained by a third party. Therefore, the possibility of the signed electronic contract being tampered with can be reduced, thereby enhancing the security of the signed electronic contract.

[0048] The contract signing method provided in this embodiment, in the process of generating a signed electronic contract of a target electronic contract to be signed, obtains the electronic signature information and the corresponding signature timestamp signed by the contract signing end on the target electronic contract to be signed, and obtains the session key ks-naf negotiated by the contract signing end when performing general bootstrap architecture GBA authentication with the network side device, encrypts the mobile phone number information corresponding to the contract signing end according to ks-naf to obtain the encrypted mobile phone number information, and performs message digest calculation on the target electronic contract to generate the message digest of the target electronic contract, and processes the target electronic contract according to the electronic signature information, signature timestamp, message digest and encrypted mobile phone number information to obtain the signed electronic contract. Thus, the target electronic contract is processed through multiple factors, so that the obtained signed electronic contract is not easy to be tampered with, the tamper-proof property of the signed electronic contract is guaranteed, and the security of the signed electronic contract is enhanced.

[0049] Figure 2 FIG. 1 is a flow chart of an electronic contract signing method according to another exemplary embodiment. It should be noted that this embodiment is a further refinement of the previous embodiment.

[0050] like Figure 2 As shown, the method may include:

[0051] Step 201, sending the target electronic contract to be signed to the contract signing end.

[0052] Step 202: Acquire the session key ks-naf negotiated by the contract signing end when performing general bootstrapping architecture (GBA) authentication with the network side device.

[0053] It should be noted that, for the specific implementation of step 201 to step 202, reference may be made to the relevant description of the embodiment of the present disclosure, which will not be repeated here.

[0054] Step 203, determine that the contract signing end and the network side device complete the GBA authentication, and the contract signing end passes the real-name authentication.

[0055] In one embodiment, the electronic contract signing system determines that the contract signing end and the network side device have completed GBA authentication, and a possible implementation method for the contract signing end to pass the real-name authentication is: the electronic contract signing system can determine whether the contract signing end and the network side device have completed GBA authentication by exchanging information with the network side device; correspondingly, it can be queried whether the corresponding relationship that has passed the real-name authentication contains the identity information corresponding to the terminal identification of the contract signing end. If it does, it is determined that the contract signing end has passed the real-name authentication.

[0056] In one embodiment, another possible implementation method for determining whether the contract signing end has completed GBA authentication with the network side device and the contract signing end has passed the real-name authentication is: receiving a real-name authentication request sent by the contract signing end, wherein the real-name authentication request includes ks-naf, a boot temporary identifier btid, and the identity information of the contract signing end, wherein btid is returned by the network side device when the contract signing end performs general boot architecture GBA authentication with the network side device; determining that the contract signing end has completed GBA authentication with the network side device based on ks-naf and btid; and determining that the contract signing end has passed the real-name authentication based on the identity information. Thus, based on the boot temporary identifier btid and the session key ks-naf returned by the network side device to the contract signing end when performing GBA authentication, the network side device interacts with the network side device to accurately determine whether the contract signing end and the network side device have completed the GBA authentication.

[0057] In some examples, the electronic contract signing system may send a GBA authentication query request for the contract signing end to the network side device, wherein the GBA authentication query request includes ks-naf and btid. Correspondingly, the network side device determines whether the ks-naf corresponding to the contract signing end stored locally is consistent with the received ks-naf, and determines whether the btid corresponding to the contract signing end stored locally is consistent with the received btid. If they are consistent, it is determined that the contract signing end and the network side device have completed the GBA authentication, and sends a query result indicating that the contract signing end and the network side device have completed the GBA authentication to the electronic contract signing system. Correspondingly, based on the query result, the electronic contract signing end can determine that the contract signing end and the network side device have completed the GBA authentication.

[0058] It is understandable that, when it is determined that the contract signing has passed the real-name authentication, the authentication result that has passed the real-name authentication can be sent to the contract signing end.

[0059] In other embodiments, when it is determined that the contract signing end has not passed the real-name authentication, in order to ensure the validity of the electronic signature information of the target electronic contract, an authentication result of failing the real-name authentication may be sent to the contract signing end to prompt the contract signing end to complete the real-name authentication on the electronic contract signing system.

[0060] Step 204, obtaining the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp.

[0061] In this embodiment, when it is determined that the contract signing end has passed the real-name authentication, the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp are obtained.

[0062] Step 205: Acquire the session key ks-naf negotiated by the contract signing end when performing general bootstrapping architecture (GBA) authentication with the network side device.

[0063] Step 206: encrypt the mobile phone number information corresponding to the contract signing end according to ks-naf to obtain encrypted mobile phone number information.

[0064] Step 207: Calculate the message digest of the target electronic contract to generate a message digest of the target electronic contract.

[0065] It should be noted that, for the specific implementation of steps 204 to 207, reference may be made to the relevant description of the embodiments of the present disclosure, which will not be repeated here.

[0066] Step 208: Encrypt the message digest of the target electronic contract according to ks-naf.

[0067] Step 209, processing the target electronic contract according to the electronic signature information, the signature timestamp, the encrypted message digest and the encrypted mobile phone number information to obtain a signed electronic contract.

[0068] In this embodiment, in the process of generating a signed electronic contract based on the target electronic contract to be signed, it is also judged whether the contract signing end and the network side device have completed GBA authentication, and whether the contract signing end has passed the real-name authentication. When it is determined that the contract signing end and the network side device have completed GBA authentication and the contract signing end has passed the real-name authentication, the target electronic contract is processed based on the electronic signature information, signature timestamp, encrypted message digest and encrypted mobile phone number information to obtain a signed electronic contract. Thus, in the process of signing the electronic contract, GBA authentication and real-name authentication are performed on the contract signing end, and the validity of the identity of the contract signing end is accurately authenticated, thereby improving the validity and non-repudiation of the electronic signature signed by the contract signing end, and further improving the security and effectiveness of the signed electronic contract.

[0069] It should be noted that the target electronic contract to be signed in any of the above embodiments may be an electronic contract selected by the contract initiator from multiple candidate electronic contracts obtained by splitting the original electronic contract. Figure 3 The electronic contract signing method of this embodiment is further described in an exemplary manner.

[0070] Figure 3 The present invention is a flow chart of an electronic contract signing method according to another exemplary embodiment.

[0071] like Figure 3 As shown, the method may include:

[0072] Step 301: receiving a contract splitting request from a contract initiator for an original electronic contract, wherein the contract splitting request includes a contract splitting method.

[0073] In this embodiment, after receiving a contract splitting request for the original electronic contract from the contract initiating end, in order to enable the contract initiating end to obtain the original electronic contract, the method may also include: receiving a contract signing request initiated by the contract initiating end, wherein the contract signing request includes: contract identification information of the original electronic contract; obtaining the original electronic contract based on the contract identification information; and sending the original electronic contract to the contract initiating end.

[0074] Correspondingly, after the contract initiating end obtains the original electronic contract, it can also reach a contract consensus on the original electronic contract with each contract signing end corresponding to the original electronic contract to obtain a contract consensus result.

[0075] In addition, when the contract initiator determines that the original electronic contract needs to be split, the contract initiator may send a contract splitting request for the electronic contract to the electronic contract signing system.

[0076] In addition, in order to enable the electronic contract signing system to know the consensus status of the original electronic contract, the contract initiator can also send the contract consensus result of the original electronic contract to the electronic contract signing system. Correspondingly, the electronic contract signing system receives the contract consensus result sent by the contract initiator and saves the contract consensus result corresponding to the original electronic contract.

[0077] Step 302: split the original electronic contract according to the contract splitting method to obtain multiple candidate electronic contracts.

[0078] In the case where the contract splitting method is the specified content splitting method, the splitting request also includes: the specified content to be split into each candidate electronic contract in the original electronic contract, and the original electronic contract is split according to the contract splitting method to obtain a plurality of candidate electronic contracts. A possible implementation method is: for each candidate electronic contract in the plurality of candidate electronic contracts, the specified content to be split into the candidate electronic contract and the related content having a joint relationship with the specified content are obtained from the original electronic contract; the industry type of the specified content to be split into the candidate electronic contract is determined, and the contract template corresponding to the industry type is obtained from the preset contract template library; the common attribute items in the contract template and the original electronic contract are determined, and the attribute values ​​corresponding to the common attribute items are obtained from the original electronic contract; the candidate electronic contract is generated according to the contract template, the attribute values ​​corresponding to the common attribute items, the obtained specified content and the related content. As a result, the contract initiator can split the original electronic contract according to its own needs, meeting the personalized needs of personalized splitting of the original electronic contract.

[0079] In this embodiment, the attribute values ​​corresponding to the common attribute items, the acquired designated content and related content may be filled into the contract template to obtain the corresponding candidate electronic contract.

[0080] In the case where the contract splitting method is an intelligent method, a possible implementation method of splitting the original electronic contract according to the contract splitting method to obtain multiple candidate electronic contracts is: obtaining an intelligent word library corresponding to the industry type of the original electronic contract; matching the original electronic contract with the terms in the intelligent word library to obtain multiple target terms in the original electronic contract that match the intelligent word library; for each target term in the multiple target terms, obtaining relevant content including the target term from the original electronic contract; generating corresponding candidate electronic contracts according to the contract template and relevant content corresponding to the target term. In this way, the original electronic contract is split intelligently, meeting the demand for intelligent splitting of the original electronic contract.

[0081] In this embodiment, a possible implementation method for generating a corresponding candidate electronic contract based on the contract template and related content corresponding to the target term is: based on the contract template and the original electronic contract corresponding to the target term, determine the common attribute items in the contract template and the original electronic contract, and obtain the attribute values ​​corresponding to the common attribute items from the original electronic contract, and fill the attribute values ​​and related content corresponding to the common attribute items into the contract template corresponding to the target term to obtain the corresponding candidate electronic contract.

[0082] In one embodiment, after the original electronic contract is split into multiple candidate electronic contracts, the corresponding relationship between the original electronic contract and each candidate electronic contract may be saved to facilitate subsequent acquisition of the relationship between the original electronic contract and the candidate electronic contracts.

[0083] Step 303: The candidate electronic contract selected by the contract initiator from the plurality of candidate electronic contracts is used as the target electronic contract.

[0084] In this embodiment, after the electronic contract signing system obtains multiple candidate electronic contracts obtained by splitting the original electronic contract, it can provide the multiple candidate electronic contracts to the contract initiating end, and correspondingly receive the selection result returned by the contract initiating end, and use the candidate electronic contract included in the selection result as the target electronic contract to be signed. The candidate electronic contract included in the selection result is one of the multiple candidate electronic contracts.

[0085] Step 304: Send the target electronic contract to be signed to the contract signing end.

[0086] Step 305: Acquire the session key ks-naf negotiated by the contract signing end when performing the general bootstrapping architecture (GBA) authentication with the network side device.

[0087] Step 306, obtaining the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp.

[0088] Step 307: encrypt the mobile phone number information corresponding to the contract signing end according to ks-naf to obtain encrypted mobile phone number information.

[0089] Step 308: Calculate the message digest of the target electronic contract to generate a message digest of the target electronic contract.

[0090] Step 309, processing the target electronic contract according to the electronic signature information, signature timestamp, message digest and encrypted mobile phone number information to obtain a signed electronic contract.

[0091] It should be noted that, for the specific implementation of steps 304 to 309, reference may be made to the relevant description of the embodiments of the present disclosure, which will not be repeated here.

[0092] In this embodiment, according to the contract splitting method of the contract initiator for the original electronic contract, the original electronic contract is split to obtain multiple candidate electronic contracts, and the candidate electronic contract selected from the multiple candidate electronic contracts is obtained as the target electronic contract to be signed, and based on the signing of the target electronic contract by the contract signing end, the corresponding signed electronic contract is generated. As a result, the electronic signing platform can complete the splitting of the original electronic contract according to the contract initiator, avoiding the trouble of the contract initiator manually splitting the electronic contract, meeting the personalized needs of splitting the electronic contract, and improving the splitting efficiency of the split electronic contract.

[0093] In some examples, the electronic contract signing system may include an electronic contract management platform and an electronic signature platform. In order to clearly understand the present disclosure, the following is combined with Figure 4 The following is an exemplary description of the interaction between the contract initiator, network-side equipment, electronic contract management platform and electronic signature platform during the electronic contract signing process. Figure 4 The description is made by taking the network side device as a GBA authentication platform for performing GBA authentication on the contract initiator as an example.

[0094] like Figure 4 As shown, the method may include:

[0095] Step 401: The contract initiator performs GBA authentication with the GBA authentication platform and negotiates a session key ks-naf with the GBA authentication platform.

[0096] Specifically, the contract initiator initiates a login request to the GBA authentication platform. The GBA authentication platform determines whether the mobile phone number information in the login request is in the login state. If the mobile phone number information is not in the login state, the contract initiator returns the element information required for the GBA authentication platform authentication to the contract initiator. Then, the contract initiator performs the authentication and key agreement (AKA) algorithm on the element information to calculate the response value RES, the encryption key CK and the integrity protection key IK, and sends the RES to the GBA authentication platform. Correspondingly, the GBA authentication platform performs the AKA algorithm on the element information to calculate the RES, and compares the calculated RES with the received RES. If the two are consistent, the user key (ks), session key (ks_naf), and boot temporary identifier btid are generated for the contract initiator. Then, the btid and the corresponding life cycle lifetime are returned to the contract initiator. Correspondingly, the contract initiator calculates ks and ks_naf according to RES, KC, IK, and CK, and saves the btid returned by the GBA authentication platform.

[0097] Among them, the boot temporary identification btid is a temporary identity allocated by the GBA authentication platform to the contract initiator.

[0098] The element information may include a random value RAND and / or an authentication code AUTN.

[0099] It should be noted that the specific process of the contract initiator authenticating with the GBA authentication platform and negotiating the session key ks-naf with the GBA authentication platform can be found in the relevant description in the relevant technology and will not be repeated here.

[0100] Step 402: The contract initiator sends a real-name authentication request to the electronic signature platform, wherein the real-name authentication request includes ks_naf and btid.

[0101] Step 403, the electronic signature platform determines, based on ks_naf and btid, that the contract initiator has completed GBA authentication with the GBA authentication platform, and based on the identity information of the contract initiator, determines whether the contract initiator has completed real-name authentication, and sends a corresponding response result to the contract initiator according to the judgment result.

[0102] In which, when it is known based on the judgment result that the contract initiating end has been authenticated by real name, a response result indicating that the contract initiating end has been authenticated by real name can be sent to the contract initiating end.

[0103] In addition, if it is known based on the judgment result that the contract initiator has not completed real-name authentication, a response result indicating that the contract initiator has not completed real-name authentication can be sent to the contract initiator, so that the contract initiator can complete real-name authentication by exchanging information with the electronic signature platform.

[0104] Step 404: The contract initiator sends a signing request to the electronic signature platform, wherein the signing request includes ks_naf and contract identification information.

[0105] Step 405: The electronic signature platform obtains the original electronic contract corresponding to the contract identification information from the contract management system according to the contract identification information, and sends the original electronic contract to the electronic signature platform.

[0106] In step 406, the electronic signature platform returns the original electronic contract to the contract initiator for contract consensus.

[0107] Step 407, after the contract initiator completes the contract consensus on the original electronic contract and confirms that the original electronic contract is correct, it sends the consensus result of the original electronic contract as well as the contract splitting mark and the contract splitting method to the electronic signature platform.

[0108] Step 408: When the electronic signature platform determines that the original electronic contract needs to be split based on the contract splitting identifier, it sends a splitting request to the electronic contract management platform, wherein the splitting request includes a contract splitting method.

[0109] Step 409: the electronic contract management platform splits the original electronic contract according to the contract splitting method in the splitting request to obtain multiple sub-contracts, and returns the multiple sub-contracts obtained by the splitting to the electronic signature platform.

[0110] In one embodiment, when the contract splitting method is to split by designated content, the contract initiator needs to inform the platform of the number of contract splits and the terms of the original electronic contract to be split. The contract management platform strips the designated terms and other terms that are related to the terms and common content (such as the contract agreement subject, information of Party A and Party B, etc.) from the original electronic contract, and selects a contract template from the contract template library according to the industry type of the designated content, and combines the stripped related information into the selected contract template to form a new sub-contract.

[0111] In one embodiment, when the contract splitting method is an intelligent splitting method, an intelligent vocabulary corresponding to the industry type of the original electronic contract is obtained; the original electronic contract is matched with the entries in the intelligent vocabulary to obtain multiple target entries in the original electronic contract that match the intelligent vocabulary; according to the multiple target entries, the original electronic contract is split to obtain multiple sub-contracts.

[0112] In step 410, the electronic signature platform returns the contract information of the multiple sub-contracts to the contract initiator.

[0113] In step 411, the contract initiating end determines a target electronic contract to be signed from multiple sub-contracts, and sends a contract signing invitation for the target electronic contract to the contract signing end through the electronic signature platform.

[0114] The processing performed by the contract signing end after receiving the contract signing invitation will be described in Figure 5 The illustrated embodiments are described exemplarily.

[0115] It should be noted that in Figure 4 As shown, when the contract initiator also needs to sign the target electronic contract, the contract initiator signs the electronic signature information on the target electronic contract, obtains the signature timestamp corresponding to the signing of the target electronic contract, and sends the electronic signature information and the corresponding signature timestamp to the electronic signature platform. Correspondingly, the electronic signature platform obtains the electronic signature information and the corresponding signature timestamp signed by the contract initiator on the target electronic contract based on the session key ks-naf negotiated by the contract initiator when performing general bootstrap architecture GBA authentication with the network side device; encrypts the mobile phone number information corresponding to the contract initiator according to ks-naf to obtain the encrypted mobile phone number information; performs message digest calculation on the target electronic contract to generate a message digest of the target electronic contract; processes the target electronic contract according to the electronic signature information, signature timestamp, message digest and encrypted mobile phone number information to obtain a signed electronic contract.

[0116] In order to clearly understand the present disclosure, Figure 5The following is an exemplary description of the interaction between the contract signing end, the network side device and the electronic signature platform during the electronic contract signing process. Figure 5 The description is made by taking the network side device as a GBA authentication platform for performing GBA authentication on the contract signing end as an example.

[0117] Step 501: The contract signing end receives the target electronic contract to be signed sent by the electronic signature platform.

[0118] Step 502: The contract signing end performs GBA authentication with the GBA authentication platform and negotiates a session key ks-naf with the GBA authentication platform.

[0119] Specifically, the contract signing end initiates a login request to the GBA authentication platform. The GBA authentication platform determines whether the mobile phone number information in the login request is in the login state. If it is not in the login state, it returns the element information required for the GBA authentication platform authentication to the contract signing end. Then, the contract signing end performs the authentication and key agreement (AKA) algorithm on the element information to calculate the response value RES, the encryption key CK and the integrity protection key IK, and sends the RES to the GBA authentication platform. Correspondingly, the GBA authentication platform performs the AKA algorithm on the element information to calculate the RES, and compares the calculated RES with the received RES. If the two are consistent, the user key (ks), session key (ks_naf), and boot temporary identifier btid are generated for the contract signing end. Finally, the btid and the corresponding life cycle lifetime are returned to the contract signing end. Then, the contract signing end calculates ks and ks_naf based on RES, KC, IK, and CK, and saves the btid returned by the GBA authentication platform.

[0120] Among them, the boot temporary identification btid is a temporary identity allocated by the GBA authentication platform to the contract signing end.

[0121] The element information may include a random value RAND and / or an authentication code AUTN.

[0122] It should be noted that the specific process of the contract signing end authenticating with the GBA authentication platform and negotiating the session key ks-naf with the GBA authentication platform can be found in the relevant description in the relevant technology and will not be repeated here.

[0123] Step 503: The contract signing end sends a real-name authentication request to the electronic signature platform, wherein the real-name authentication request includes ks_naf and btid.

[0124] Step 504: The electronic signature platform determines, based on ks_naf and btid, that the contract signing end has completed GBA authentication with the GBA authentication platform. Based on the identity information of the contract signing end, the electronic signature platform determines whether the contract signing end has completed real-name authentication, and sends a corresponding response result to the contract signing end according to the judgment result.

[0125] In which, when it is known based on the judgment result that the contract signing end has been authenticated with real name, a response result indicating that the contract signing end has been authenticated with real name can be sent to the contract signing end.

[0126] In addition, if it is known based on the judgment result that the contract signing end has not been authenticated by real name, a response result indicating that the contract signing end has not been authenticated by real name can be sent to the contract signing end, so that the contract signing end can complete the real-name authentication by exchanging information with the electronic signature platform.

[0127] Step 505: The contract signing end signs the electronic signature information on the target electronic contract, obtains the signature timestamp corresponding to the signing of the target electronic contract, and sends the electronic signature information and the corresponding signature timestamp to the electronic signature platform.

[0128] Step 506: The electronic signature platform encrypts the mobile phone number information corresponding to the contract signing end according to KS-NAF to obtain the encrypted mobile phone number information.

[0129] Step 507: The electronic signature platform calculates the message digest of the target electronic contract to generate the message digest of the target electronic contract, and encrypts the message digest of the target electronic contract based on KS-NAF.

[0130] Step 508: The electronic signature platform processes the target electronic contract according to the electronic signature information, the signature timestamp, the encrypted message digest and the encrypted mobile phone number information to obtain a signed electronic contract.

[0131] In this embodiment, the GBA authentication mechanism is used to implement a safe and reliable electronic contract signing process, which can effectively prevent third-party attacks. The mobile phone number information corresponding to the contract signing end is encrypted using ks_naf that is agreed with the GBA authentication platform, and the encrypted mobile phone number information is appended to the signed electronic contract to enhance the security of contract verification. The summary information of the ks_naf electronic contract is encrypted. In addition, since ks_naf is user-unique, a third party cannot obtain ks_naf. In this way, the security problem of preventing third-party attacks can be achieved, the tamper-proof property of the generated signed electronic contract can be improved, and the security of the signed electronic contract can be enhanced.

[0132] Figure 6The figure is a schematic diagram of the structure of an electronic contract signing device according to an exemplary embodiment.

[0133] It should be noted that the electronic contract signing device can be implemented by software and / or hardware. The electronic contract signing device can be an electronic contract signing system, or can be configured in the electronic contract signing system, wherein the electronic contract signing system can be configured in an electronic device.

[0134] The electronic device may be any device having an electronic contract signing system, such as a terminal device, a server, etc.

[0135] like Figure 6 As shown, the electronic contract signing device 600 includes: a first sending module 601, a first obtaining module 602, a second obtaining module 603, a first encryption processing module 604, a message digest processing module 605 and a contract processing module 606, wherein:

[0136] The first sending module 601 is used to send the target electronic contract to be signed to the contract signing end.

[0137] The first acquisition module 602 is used to acquire the session key ks-naf negotiated by the contract signing end when performing general bootstrapping architecture GBA authentication with the network side device.

[0138] The second acquisition module 603 is used to acquire the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp.

[0139] The first encryption processing module 604 is used to encrypt the mobile phone number information corresponding to the contract signing end according to ks-naf to obtain the encrypted mobile phone number information.

[0140] The message digest processing module 605 is used to calculate the message digest of the target electronic contract to generate the message digest of the target electronic contract.

[0141] The contract processing module 606 is used to process the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract.

[0142] In one embodiment of the present disclosure, the device may further include:

[0143] The second encryption processing module is used to encrypt the message digest according to KS-NAF.

[0144] In one embodiment of the present disclosure, the device may further include:

[0145] The first determination module is used to determine whether the contract signing end and the network side device have completed GBA authentication and the contract signing end has passed the real-name authentication.

[0146] In one embodiment of the present disclosure, the first determination module is specifically used to: receive a real-name authentication request sent by the contract signing end, wherein the real-name authentication request includes ks-naf, a boot temporary identifier btid and identity information of the contract signing end, wherein btid is returned by the network side device when the contract signing end performs a general bootstrap architecture GBA authentication with the network side device; determine that the contract signing end completes the GBA authentication with the network side device according to ks-naf and btid; determine that the contract signing end passes the real-name authentication according to the identity information;

[0147] The device may further include:

[0148] The second sending module is used to send the authentication result that has passed the real-name authentication to the contract signing end.

[0149] In one embodiment of the present disclosure, the device may further include:

[0150] A first receiving module is used to receive a contract splitting request from a contract initiator for an original electronic contract, wherein the contract splitting request includes a contract splitting method;

[0151] A contract splitting module is used to split the original electronic contract according to the contract splitting method to obtain multiple candidate electronic contracts;

[0152] The second determination module is used to use the candidate electronic contract selected by the contract initiator from the multiple candidate electronic contracts as the target electronic contract.

[0153] In one embodiment of the present disclosure, the device may further include:

[0154] The second receiving module is used to receive a contract signing request initiated by the contract initiating end, wherein the contract signing request includes: contract identification information of the original electronic contract;

[0155] A third acquisition module is used to acquire the original electronic contract according to the contract identification information;

[0156] The third sending module is used to send the original electronic contract to the contract initiating end.

[0157] In one embodiment of the present disclosure, when the contract splitting method is the specified content splitting method, the splitting request also includes: the specified content in the original electronic contract to be split into each candidate electronic contract, and the contract splitting module is specifically used to: for each candidate electronic contract in multiple candidate electronic contracts, obtain the specified content to be split into the candidate electronic contract and the related content that has a joint relationship with the specified content from the original electronic contract; determine the industry type of the specified content to be split into the candidate electronic contract, and obtain the contract template corresponding to the industry type from a preset contract template library; determine the common attribute items in the contract template and the original electronic contract, and obtain the attribute values ​​corresponding to the common attribute items from the original electronic contract; generate the candidate electronic contract according to the contract template, the attribute values ​​corresponding to the common attribute items, the obtained specified content and the related content.

[0158] In one embodiment of the present disclosure, when the contract splitting method is an intelligent method, the contract splitting module is specifically used to: obtain an intelligent vocabulary corresponding to the industry type of the original electronic contract; match the original electronic contract with the entries in the intelligent vocabulary to obtain multiple target entries in the original electronic contract that match the intelligent vocabulary; for each target entry in the multiple target entries, obtain relevant content including the target entry from the original electronic contract; generate a corresponding candidate electronic contract based on the contract template and related content corresponding to the target entry.

[0159] It should be noted that the aforementioned description of the electronic contract signing method embodiment is also applicable to the electronic contract signing device of this embodiment and will not be repeated here.

[0160] The electronic contract signing device provided by the embodiment of the present disclosure, in the process of generating a signed electronic contract based on the target electronic contract to be signed, also judges whether the contract signing end and the network side device have completed GBA authentication, and whether the contract signing end has passed the real-name authentication. When it is determined that the contract signing end and the network side device have completed GBA authentication and the contract signing end has passed the real-name authentication, the target electronic contract is processed based on the electronic signature information, the signature timestamp, the encrypted message digest and the encrypted mobile phone number information to obtain a signed electronic contract. Thus, in the process of signing the electronic contract, the contract signing end is subjected to GBA authentication and real-name authentication, and the validity of the identity of the contract signing end is accurately authenticated, thereby improving the validity and non-repudiation of the electronic signature signed by the contract signing end, and further improving the security and validity of the signed electronic contract.

[0161] According to an embodiment of the present disclosure, an electronic device is also provided, comprising: a processor; and a memory for storing instructions executable by the processor, wherein the processor is configured to: implement the electronic contract signing method disclosed in the embodiment of the present disclosure.

[0162] In order to implement the above embodiment, the embodiment of the present disclosure also proposes a storage medium.

[0163] When the instructions in the storage medium are executed by the processor, the processor is enabled to execute the electronic contract signing method disclosed in the embodiment of the present disclosure.

[0164] In order to implement the above embodiments, the embodiments of the present disclosure also provide a computer program product.

[0165] When the computer program product is executed by a processor of an electronic device, the electronic device is enabled to execute the electronic contract signing method disclosed in the embodiment of the present disclosure.

[0166] Figure 7 The figure is a structural block diagram of an electronic device according to an exemplary embodiment. Figure 7 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0167] like Figure 7 As shown, the electronic device 1000 includes a processor 111, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 112 or a program loaded from a memory 116 to a random access memory (RAM) 113. In the RAM 113, various programs and data required for the operation of the electronic device 1000 are also stored. The processor 111, the ROM 112, and the RAM 113 are connected to each other via a bus 114. An input / output (I / O) interface 115 is also connected to the bus 114.

[0168] The following components are connected to the I / O interface 115: a memory 116 including a hard disk, etc.; and a communication part 117 including a network interface card such as a local area network (LAN) card, a modem, etc., and the communication part 117 performs communication processing via a network such as the Internet; a drive 118 is also connected to the I / O interface 115 as needed.

[0169] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 117. When the computer program is executed by the processor 111, the above-mentioned functions defined in the method of the present disclosure are executed.

[0170] In an exemplary embodiment, a storage medium including instructions is also provided, such as a memory including instructions, and the instructions can be executed by the processor 111 of the electronic device 1000 to complete the above method. Optionally, the storage medium can be a non-transitory computer-readable storage medium, for example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0171] In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, apparatus, or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in combination with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium may be transmitted using any suitable medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0172] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0173] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. An electronic contract signing method, characterized in that: The execution subject of the method is an electronic contract signing system, and the method includes: Send the target electronic contract to be signed to the contract signing end; Obtaining the session key ks-naf negotiated by the contract signing end when performing general bootstrapping architecture (GBA) authentication with the network side device; Obtaining the electronic signature information and the corresponding signature timestamp signed by the contract signing end on the target electronic contract; Based on a preset encryption algorithm, the mobile phone number information corresponding to the contract signing end is encrypted using the ks-naf to obtain the encrypted mobile phone number information; Performing message digest calculation on the target electronic contract to generate a message digest of the target electronic contract; Processing the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract; Before sending the electronic contract to be signed to the contract signing end, the method further includes: receiving a contract splitting request from a contract initiator for an original electronic contract, wherein the contract splitting request includes a contract splitting method; Splitting the original electronic contract according to the contract splitting method to obtain multiple candidate electronic contracts; taking the candidate electronic contract selected by the contract initiator from the plurality of candidate electronic contracts as the target electronic contract; In the case where the contract splitting method is a specified content splitting method, the splitting request further includes: the specified content in the original electronic contract to be split into each candidate electronic contract, and the original electronic contract is split according to the contract splitting method to obtain multiple candidate electronic contracts, including: For each candidate electronic contract among the multiple candidate electronic contracts, obtaining, from the original electronic contract, designated content to be split into the candidate electronic contract and related content having a joint relationship with the designated content; Determine the industry type of the designated content to be split into the candidate electronic contract, and obtain a contract template corresponding to the industry type from a preset contract template library; Determine common attribute items in the contract template and the original electronic contract, and obtain attribute values ​​corresponding to the common attribute items from the original electronic contract; generating the candidate electronic contract according to the contract template, the attribute values ​​corresponding to the common attribute items, the acquired designated content and the related content; In the case where the contract splitting method is an intelligent method, the original electronic contract is split according to the contract splitting method to obtain multiple candidate electronic contracts, including: Acquire an intelligent word library corresponding to the industry type of the original electronic contract; Matching the original electronic contract with the entries in the intelligent word library to obtain a plurality of target entries in the original electronic contract that match the intelligent word library; For each target term among the plurality of target terms, obtaining relevant content including the target term from the original electronic contract; A corresponding candidate electronic contract is generated according to the contract template corresponding to the target term and the related content.

2. The method according to claim 1, characterized in that Before processing the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract, the method further includes: The message digest is encrypted according to the ks-naf.

3. The method according to claim 1, characterized in that Before obtaining the electronic signature information and the corresponding signature timestamp signed by the contract signing end on the target electronic contract, the method further includes: Determine that the contract signing end and the network side device complete GBA authentication, and that the contract signing end passes real-name authentication.

4. The method according to claim 3, characterized in that The step of determining that the contract signing end completes GBA authentication with the network side device and the contract signing end passes real-name authentication includes: Receive a real-name authentication request sent by the contract signing end, wherein the real-name authentication request includes the ks-naf, a bootstrap temporary identifier btid and the identity information of the contract signing end, wherein the btid is returned by the network side device when the contract signing end performs a general bootstrap architecture GBA authentication with the network side device; Determine that the contract signing end and the network side device complete GBA authentication according to the ks-naf and the btid; Determining, based on the identity information, that the contract signing end has passed the real-name authentication; Wherein, the method further comprises: Sending the authentication result that has passed the real-name authentication to the contract signing end.

5. The method according to claim 1, characterized in that The method further comprises: Receiving a contract signing request initiated by the contract initiating end, wherein the contract signing request includes: contract identification information of the original electronic contract; Acquire the original electronic contract according to the contract identification information; The original electronic contract is sent to the contract initiating end.

6. An electronic contract signing device, characterized in that: The device is configured in an electronic contract signing system, and the device includes: A first sending module, used to send the target electronic contract to be signed to the contract signing end; The first acquisition module is used to obtain the session key ks-naf negotiated by the contract signing end when performing general bootstrapping architecture GBA authentication with the network side device; A second acquisition module is used to obtain the electronic signature information signed by the contract signing end on the target electronic contract and the corresponding signature timestamp; A first encryption processing module is used to encrypt the mobile phone number information corresponding to the contract signing end using the ks-naf based on a preset encryption algorithm to obtain the encrypted mobile phone number information; A message digest processing module, used for performing message digest calculation on the target electronic contract to generate a message digest of the target electronic contract; A contract processing module, used to process the target electronic contract according to the electronic signature information, the signature timestamp, the message digest and the encrypted mobile phone number information to obtain a signed electronic contract; The device also includes: A first receiving module is used to receive a contract splitting request from a contract initiating end for an original electronic contract, wherein the contract splitting request includes a contract splitting method; A contract splitting module, used to split the original electronic contract according to the contract splitting method to obtain multiple candidate electronic contracts; A second determination module, configured to use the candidate electronic contract selected by the contract initiator from the plurality of candidate electronic contracts as the target electronic contract; In the case where the contract splitting method is a specified content splitting method, the splitting request further includes: the specified content in the original electronic contract to be split into each candidate electronic contract, and the contract splitting module is specifically used to: For each candidate electronic contract among the multiple candidate electronic contracts, obtaining, from the original electronic contract, designated content to be split into the candidate electronic contract and related content having a joint relationship with the designated content; Determine the industry type of the designated content to be split into the candidate electronic contract, and obtain a contract template corresponding to the industry type from a preset contract template library; Determine common attribute items in the contract template and the original electronic contract, and obtain attribute values ​​corresponding to the common attribute items from the original electronic contract; generating the candidate electronic contract according to the contract template, the attribute values ​​corresponding to the common attribute items, the acquired designated content and the related content; When the contract splitting method is an intelligent method, the contract splitting module is specifically used to: Acquire an intelligent word library corresponding to the industry type of the original electronic contract; Matching the original electronic contract with the entries in the intelligent word library to obtain a plurality of target entries in the original electronic contract that match the intelligent word library; For each target term among the plurality of target terms, obtaining relevant content including the target term from the original electronic contract; A corresponding candidate electronic contract is generated according to the contract template corresponding to the target term and the related content.

7. The device according to claim 6, characterized in that The device also includes: The second encryption processing module is used to encrypt the message digest according to the ks-naf.

8. The device according to claim 6, characterized in that The device also includes: The first determination module is used to determine that the contract signing end and the network side device complete GBA authentication and that the contract signing end passes real-name authentication.

9. The device according to claim 8, characterized in that The first determining module is specifically configured to: Receive a real-name authentication request sent by the contract signing end, wherein the real-name authentication request includes the ks-naf, a bootstrap temporary identifier btid and the identity information of the contract signing end, wherein the btid is returned by the network side device when the contract signing end performs a general bootstrap architecture GBA authentication with the network side device; Determine that the contract signing end and the network side device complete GBA authentication according to the ks-naf and the btid; Determining, based on the identity information, that the contract signing end has passed the real-name authentication; Wherein, the device further comprises: The second sending module is used to send the authentication result that has passed the real-name authentication to the contract signing end.

10. The device according to claim 6, characterized in that The device also includes: A second receiving module is used to receive a contract signing request initiated by the contract initiating end, wherein the contract signing request includes: contract identification information of the original electronic contract; A third acquisition module, used to acquire the original electronic contract according to the contract identification information; The third sending module is used to send the original electronic contract to the contract initiating end.

11. An electronic device, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method according to any one of claims 1 to 5 when executing the computer program.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 5 is implemented.