An electronic seal signing method and system applied to physically isolated cross-networks

Abstract

The application relates to an electronic seal signing method and system applied to physically isolated cross-networks, including sending a signed document to a corresponding slave service system through a first one-way import device according to cross-network use requirements corresponding to a document signing request, improving an embedded mechanism of electronic seal signing identity certificate storage and import operation, constructing a simulated exchange network for electronic seal signed document exchange between different physically isolated networks, realizing full-process non-ground exchange of the signed document between the different physically isolated networks, effectively improving the efficiency, business volume and safety of signed document cross-network exchange circulation, solving the mutual recognition, mutual trust and safe exchange problem of electronic seals and signed documents between different networks without changing the existing network wiring, and providing electronic seal overall planning and utilization technical effects in a cross-network physically isolated scene.

Description

Technical Field

[0001] This invention relates to the fields of information security and data processing technology, and in particular to an electronic seal signing method and system applied to physically isolated networks. Background Technology

[0002] Electronic signatures are one of the most effective means of ensuring the authenticity, integrity, and non-repudiation of documents, and are widely used for signing electronic contracts. Traditional electronic seal systems store the signatory's digital certificate in a smart key (Ukey), and each smart key stores a unique signatory's digital certificate. Therefore, when signing an electronic seal, the user's corresponding smart key must be inserted. Thus, current electronic seal systems primarily address the creation, management, signing, and verification of electronic seals within the same network.

[0003] However, with the continuous upgrading of information security, in order to meet security requirements such as data classification and grading, user organizations are increasingly demanding complete physical isolation between their internal office networks and the internet. However, physical isolation creates network information silos, leading to a series of business problems. For example, if two independent networks with different purposes and security levels are built within the same organization for business needs, significant operational difficulties arise in how to cross-use and manage electronic seals representing physical seals between the two independent networks, and how to exchange and verify electronic contracts signed on the two networks. In particular, it can easily lead to the cross-use of related smart password keys when signing electronic seals on physically isolated networks. Therefore, how to facilitate convenient and secure electronic seal signing between different networks is receiving increasing attention.

[0004] In traditional solutions, when documents signed with electronic seals are used across physically isolated networks, online data transmission is not supported, especially in scenarios with different levels of security. Typically, this involves offline manual approval and CD-ROM copying from one network to another, requiring significant manual intervention. Furthermore, it lacks support for unified digital certificates for signing the same electronic seal across different isolated networks. When traditional electronic seal systems are used across different levels and networks, multiple complete deployments (i.e., repeated installations) are usually required, with devices needing to be used interchangeably across networks. Between physically isolated networks with inconsistent security levels, the cross-use of cryptographic devices such as smart keys is unavoidable during electronic seal creation and signing. This behavior not only violates management regulations and poses a risk of high-security, low-data-transmission, but further cross-use also carries the risk of virus transmission via smart keys. On the other hand, traditional electronic seal systems do not support user resource management across multiple physically isolated network domains. For example, if each physically isolated network has its own independent user resource objects, and there are overlapping user entities with differing resource information across different network domains, it will create additional problems for electronic seal generation and use. In addition, in actual use, existing electronic seal systems do not support a mechanism for synchronizing electronic seal management information, verification information, and signed documents between physically isolated networks. They rely heavily on manual copying or importing, or using shared folders to synchronize data between different networks. This results in low efficiency and complex processes for document synchronization, and there is a risk that signed documents may be illegally disseminated once they are stored on the network.

[0005] In summary, using existing technologies to convert physical seals into electronic seals cannot solve the problem of verifying the consistency of signature identity between two physically isolated networks, especially the problem of cross-use of smart password keys (ukey) when signing documents in two physically isolated networks. Applying different independent electronic seal systems in different physically isolated networks will cause additional problems in unifying electronic seal data. It cannot handle the need for end-to-end security when signed documents are exchanged between physically isolated networks, and still requires manual intervention methods such as CD copying, which is costly in terms of both labor and time, and is not suitable for business scenarios with high real-time requirements and large business volumes. Summary of the Invention

[0006] To address the shortcomings of existing technologies, this invention proposes an electronic seal signing method and system for physically isolated cross-network environments. By improving the embedding mechanism of electronic seal signing identity certificate storage and import operations, a simulated exchange network for exchanging electronic seal signed documents is constructed between different physically isolated networks. This enables the seamless, end-to-end exchange of signed documents between different physically isolated networks, effectively improving the efficiency, workload, and security of cross-network document exchange and circulation. Without altering existing network cabling, it solves the problems of mutual recognition, mutual trust, and secure exchange of electronic seals and signed documents between different networks, providing a comprehensive planning and utilization technology for electronic seals in cross-network physically isolated scenarios.

[0007] To achieve the above objectives, the technical solution adopted by the present invention includes:

[0008] A method for signing electronic seals across physically isolated networks, characterized by comprising:

[0009] S1. Obtain the digital certificate of the signer's identity for the electronic seal, and import the digital certificate of the signer's identity into multiple server cryptographic machines according to the scope of use of the electronic seal. The multiple server cryptographic machines include a first server cryptographic machine corresponding to the main service system and at least one second server cryptographic machine corresponding to a slave service system deployed in a different physically isolated network from the main service system.

[0010] S2. Generate the target electronic seal in the main service system and send the target electronic seal to the slave service system through the first one-way import device. The slave service system generates a first receipt and sends it back to the main service system through the second one-way import device.

[0011] S3. Generate seal issuance data in the main service system and send the seal issuance data to the slave service system through the first one-way import device. The slave service system generates a second receipt and feeds it back to the main service system through the second one-way import device. The seal issuance data includes the association information between the target electronic seal and at least one signer's identity digital certificate.

[0012] S4. Obtain the corresponding requester identity digital certificate based on the document signing request, and determine whether the requester identity digital certificate matches the signer identity digital certificate stored in the first server cryptographic machine.

[0013] S5. When it is determined that the requester's digital certificate matches the signer's digital certificate stored in the first server's cryptographic machine, the target electronic seal is obtained based on the seal issuance data.

[0014] S6. Call the first server cryptographic machine to match the corresponding private key based on the signer's identity digital certificate, apply the target electronic seal to the document to be signed, perform the signing operation, and generate the signed document;

[0015] S7. Determine whether the document signing request involves cross-network usage;

[0016] S8. When it is determined that the document signing request involves cross-network use, the signed document is sent to the corresponding slave service system through the first one-way import device. The slave service system generates a usage receipt and sends it back to the master service system through the second one-way import device.

[0017] Furthermore, the method also includes:

[0018] Change the target electronic seal within the main service system;

[0019] Based on the use of the electronic seal, the modified target electronic seal is sent to the slave service system through the first one-way import device.

[0020] Furthermore, step S8 also includes:

[0021] Determine whether the service system stores the target electronic seal that matches the signed document;

[0022] When it is determined that the target electronic seal matching the signed document is stored in the service system, the signed document is sent to the corresponding service system through the first one-way import device, a usage receipt is generated and fed back to the main service system through the second one-way import device;

[0023] When it is determined that the target electronic seal matching the signed document is not stored in the slave service system, the target electronic seal, seal issuance data and signed document are sent to the corresponding slave service system through the first one-way import device, and a first receipt, a second receipt and a usage receipt are generated and fed back to the master service system through the second one-way import device.

[0024] Furthermore, step S4 also includes:

[0025] Determine whether the document signing request matches the target electronic seal usage permissions for the document to be signed.

[0026] When it is determined that the document signing request matches the target electronic seal usage permission for the document to be signed, the corresponding requester's identity digital certificate is obtained based on the document signing request.

[0027] When it is determined that the document signing request does not match the target electronic seal usage permissions, the document signing is suspended and the first error message is returned.

[0028] Furthermore, the modification of the target electronic seal within the main service system includes:

[0029] Add a change status label to the target electronic seal based on the change request;

[0030] Perform a verification operation on the modified target electronic seal;

[0031] Once the modified target electronic seal passes verification, the change status label is deleted.

[0032] Furthermore, step S5 also includes:

[0033] Perform a verification operation on the acquired target electronic seal;

[0034] When the target electronic seal is verified, proceed to step S6;

[0035] If the target electronic seal fails verification, the document signing is suspended and a second error message is provided.

[0036] This invention also relates to an electronic seal signing system applied across physically isolated networks, characterized in that it comprises:

[0037] The main service system module is used to generate and manage target electronic seals and generate seal issuance data, as well as to obtain signed documents based on document signing requests;

[0038] The service system module is used to receive and apply the target electronic seal, seal issuance data and signed document feedback document signing request sent by the main service system module;

[0039] The first server cryptographic machine, corresponding to the main service system module, is used to import the signer's identity digital certificate, and match the corresponding private key with the target electronic seal based on the signer's identity digital certificate to perform the signing operation on the document to be signed, and generate the signed document;

[0040] The second server cryptographic machine, corresponding to the service system module, is used to import the signer's identity digital certificate;

[0041] The first unidirectional import device is used to establish a unidirectional data transmission channel from the main service system to the slave service system.

[0042] The second unidirectional import device is used to establish a unidirectional data transmission channel from the service system to the main service system.

[0043] The present invention also relates to a computer-readable storage medium, characterized in that the storage medium stores a computer program, which, when executed by a processor, implements the above-described method.

[0044] The present invention also relates to an electronic device, characterized in that it includes a processor and a memory;

[0045] The memory is used to store the signer's digital certificate, the target electronic seal, and the seal issuance data;

[0046] The processor is used to execute the above method by invoking the signer's identity digital certificate, the target electronic seal, and the seal issuance data.

[0047] The present invention also relates to a computer program product, including a computer program and / or instructions, characterized in that the computer program and / or instructions, when executed by a processor, implement the steps of the above-described method.

[0048] The beneficial effects of this invention are as follows:

[0049] The present invention employs an electronic seal signing method and system applied across physically isolated networks. By improving the embedding mechanism of electronic seal signing identity certificate storage and import operations, it changes the traditional storage of user signing identity certificates in a smart key (Ukey) to storage in a server cryptographic machine. Furthermore, it imports user signing identity certificates issued by Electronic Authentication Facilities (CAs) into server cryptographic machines deployed in different physically isolated networks, solving the consistency problem of digital certificates for electronic seal signer identities across physically isolated networks. The electronic seal system is divided into different modules or subsystems according to its functional purpose. For example, the electronic seal system is divided into a main service system and a slave service system based on its functional positioning. The main service system or slave service system is deployed as needed according to the management requirements of the physically isolated network, and at least one main service system is defined to be deployed within an organization, constructing a unified and complete electronic seal system. A simulated exchange network for exchanging electronic seal signed documents between different physically isolated networks is constructed. A one-way import device (such as a one-way optical shutter) is introduced, and two two-way import devices are combined with the electronic seal system. Software calls the two one-way import devices to simulate a logical network, thereby enabling the signing of documents... This invention enables seamless, end-to-end document exchange between physically isolated networks. It allows for the optional recording of each signed document exchange, facilitating subsequent auditing. The exchange process can be encrypted to ensure confidentiality, thus enhancing security. Both sides of the exchange are online systems, meeting varying real-time requirements. Interface with unidirectional import devices is at the service level, accommodating different workloads. This achieves seamless, end-to-end document exchange between physically isolated networks, effectively improving efficiency, workload, and security in cross-network document exchange. Furthermore, the invention constructs a resource management function for the electronic seal system, providing traditional user resource and authorization management functions with additional cross-network resource association capabilities. This allows for independent management of user resources and authorizations within different physically isolated networks. Users requiring electronic seals across multiple networks can be associated, enabling electronic seals issued to a user in one isolated network to be signed in another isolated network simply by synchronizing the seal issuance information across networks, without requiring re-issuance. Without altering existing network cabling, the method and system of this invention can solve the problems of mutual recognition, mutual trust, and secure exchange of electronic seals and signed documents between different networks, providing a comprehensive planning and utilization technology for electronic seals in cross-network physical isolation scenarios.

[0050] When applying the method and system of this invention to perform cross-network electronic seal signing services on multiple physically isolated networks within the same organization, there is only one electronic seal creation function within the organization, and each electronic seal only needs to be created once to ensure the uniqueness of the electronic seal across the entire isolated network; it can achieve consistent operation management of the usage status of electronic seals across all isolated networks, such as enabling, disabling, and invalidating; when the same electronic seal is used for electronic seal signing across all isolated networks, a consistent signer identity digital certificate is used to ensure that the signature result is also consistent; for electronic seals and signed documents that need to be used across isolated networks, a consistent cryptographic algorithm (mainly including signing and encryption) is used, thereby shielding the situation where different cryptographic algorithms due to differences in the security levels of each isolated network cannot verify signed documents across networks; under the premise of a unified signer identity digital certificate, further... The system ensures consistent verification results across all isolated networks when verifying signed documents. When a document is signed electronically in one physically isolated network and then used in another, it is not re-signed (a new copy of the same document is signed), but rather the signed document is securely exchanged between physically isolated networks as a file. When signed documents circulate between different physically isolated networks, the system software interfaces with dual unidirectional import devices deployed between the networks to simulate a logical network loop. The document exchange process is not physically logged, improving both efficiency and security. The software modules and hardware devices deployed in each physically isolated network form a logically complete system, employing modular distributed deployment rather than the repetitive installation common in traditional electronic seal systems. Attached Figure Description

[0051] Figure 1 This is a schematic diagram of the electronic seal signing method of the present invention applied to physically isolated cross-network environments.

[0052] Figure 2 This is a schematic diagram of the structure of an electronic seal signing system applied across physically isolated networks according to the present invention.

[0053] Figure 3 This is a schematic diagram of the process for obtaining the digital certificate of the signer's identity according to a preferred embodiment of the present invention.

[0054] Figure 4 This is a schematic diagram of the process for generating a target electronic seal according to a preferred embodiment of the present invention.

[0055] Figure 5 This is a schematic diagram illustrating the process of generating seal issuance data according to a preferred embodiment of the present invention.

[0056] Figure 6 This is a schematic diagram illustrating the signing operation process according to a preferred embodiment of the present invention.

[0057] Figure 7 This is a schematic diagram of the target electronic seal change process in a preferred embodiment of the present invention. Detailed Implementation

[0058] To better understand the content of this invention, a detailed description will be provided in conjunction with the accompanying drawings and embodiments.

[0059] The first aspect of this invention relates to a process flow as follows: Figure 1 The illustrated method for electronic seal signing applied across physically isolated networks includes:

[0060] S1. Obtain the digital certificate of the signer's identity for the electronic seal. Import the digital certificate of the signer's identity into multiple server cryptographic machines according to the scope of use of the electronic seal. The multiple server cryptographic machines include a first server cryptographic machine corresponding to the main service system and at least one second server cryptographic machine corresponding to a slave service system deployed on a different physically isolated network than the main service system. The server cryptographic machines deployed on different physically isolated networks reuse the same digital certificate of the electronic seal signer's identity. The digital certificate representing the identity of the same electronic seal signer is imported and stored in the server cryptographic machines on different physically isolated networks, ensuring that the digital signature certificate of the signed document formed by using the same electronic seal to sign documents across isolated networks is consistent.

[0061] In a preferred embodiment, the process for obtaining a digital certificate for the signer's identity is as follows: Figure 3 As shown, the signer identity digital certificate is first applied for from the CA system of the electronic authentication facility, and then the signer identity digital certificate is imported into the server cryptographic machine deployed in different physically isolated networks as needed, thereby achieving consistency of the signer identity digital certificate across isolated networks.

[0062] S2. Generate the target electronic seal in the main service system and send the target electronic seal to the slave service system through the first one-way import device. The slave service system generates a first receipt and sends it back to the main service system through the second one-way import device.

[0063] The preferred embodiment of the process for generating the target electronic seal is as follows: Figure 4 As shown, in a network where the main service system is deployed, the system logs into the production subsystem, registers the seal production information, and generates an electronic seal after production approval. The relevant data of the electronic seal is pushed to the distribution subsystem within the network. According to the scope of use of the electronic seal, it is pushed across the network to the distribution subsystem of other physically isolated networks as needed through the dual one-way import device.

[0064] S3. Generate seal issuance data in the main service system and send the seal issuance data to the slave service system through the first one-way import device. The slave service system generates a second receipt and feeds it back to the main service system through the second one-way import device. The seal issuance data includes the association information between the target electronic seal and at least one signer's identity digital certificate.

[0065] The preferred embodiment of the process for generating seal issuance data is as follows: Figure 5 As shown, in the issuance subsystem, after registering the seal issuance information and approving the issuance, the seal issuance operation is carried out, and the electronic seal stored on the server is associated with the authorized signatory (such as the identity digital certificate in the smart password key); the seal issuance-related data is pushed to the verification subsystem and management subsystem within this network; according to the scope of use of the electronic seal, it is pushed across the network to the verification subsystem of other physically isolated networks as needed through the dual one-way import device.

[0066] S4. Obtain the corresponding requester identity digital certificate based on the document signing request, and determine whether the requester identity digital certificate matches the signer identity digital certificate stored in the first server cryptographic machine.

[0067] Preferably, the process involves determining whether the document signing request matches the target electronic seal usage permission; when the document signing request matches the target electronic seal usage permission, the process obtains the corresponding requester's digital certificate based on the document signing request; when the document signing request does not match the target electronic seal usage permission, the process terminates the document signing and provides the first error message.

[0068] S5. When it is determined that the requester's digital certificate matches the signer's digital certificate stored in the first server's cryptographic machine, the target electronic seal is obtained based on the seal issuance data.

[0069] Preferably, a verification operation is performed on the acquired target electronic seal; when the acquired target electronic seal passes verification, step S6 continues; when the acquired target electronic seal fails verification, document signing is suspended and a second error message is fed back.

[0070] S6. Call the first server cryptographic machine to match the corresponding private key based on the signer's identity digital certificate, apply the target electronic seal to the document to be signed, perform the signing operation, and generate the signed document.

[0071] Specifically, when signing documents with an electronic seal, there is a many-to-one association between the client's smart password key and the signer's identity certificate private key stored in the server's cryptographic machine. That is, when signing documents, the smart password key inserted by the client can indeed use the corresponding signer's identity certificate private key in the server's cryptographic machine.

[0072] The preferred specific embodiment of the signing operation process is as follows: Figure 6 As shown, it includes:

[0073] 1) A third-party business system initiates document signing;

[0074] 2) The client software obtains the current user's identity digital certificate from the smart password key, prepares the data to be signed, and initiates the signing process to trigger the signing subsystem service;

[0075] 3) Verify the signer's permissions. In the signing subsystem, parse the signing data and verify whether the current user's digital certificate has electronic seal signing permissions. If the user has permissions, proceed to the next step; otherwise, exit the signing process.

[0076] 4) Obtain the electronic seal to be signed, and retrieve the electronic seal data from the issuing subsystem based on the current user's identity digital certificate;

[0077] 5) Verify the electronic seal. Check the current electronic seal in the verification subsystem to see if it is valid. If it is valid, proceed to the next step; otherwise, stop signing.

[0078] 6) Document signing: The signing subsystem uses the signer's identity information in the current electronic seal to call the private key of the corresponding signer's identity certificate in the server's cryptographic machine to sign the document to be signed and generate a signed document;

[0079] 7) Sign the document. The signing subsystem will send the generated signed document back to the business system that initiated the document signing.

[0080] 8) Cross-network use of signed documents: If the signed document needs to be used across isolated networks according to the needs of the business initiator, the one-way import device is called to exchange the signed document to the target isolated network as needed, and forward it to the target business system through the signing subsystem.

[0081] S7. Determine whether the document signing request includes cross-network usage.

[0082] S8. When it is determined that the document signing request involves cross-network use, the signed document is sent to the corresponding slave service system via the first one-way import device. The slave service system generates a usage receipt and sends it back to the master service system via the second one-way import device. Preferably, for slave service system applications, it also includes determining whether the slave service system has a target electronic seal matching the signed document; if it is determined that the slave service system has a target electronic seal matching the signed document, the signed document is sent to the corresponding slave service system via the first one-way import device, a usage receipt is generated, and it is sent back to the master service system via the second one-way import device; if it is determined that the slave service system does not have a target electronic seal matching the signed document, the target electronic seal, seal issuance data, and signed document are sent to the corresponding slave service system via the first one-way import device, a first receipt, a second receipt, and a usage receipt are generated, and it is sent back to the master service system via the second one-way import device. When the signed document crosses a physically isolated network, the entire exchange process is transmitted online through the connection of dual one-way import devices, supporting the signing of documents without being stored on the ground, automatic review, complete logs, and high business volume during the exchange process.

[0083] Preferably, when it is necessary to change the target electronic seal, the process may further include: changing the target electronic seal within the main service system; and sending the changed target electronic seal to the slave service system via the first unidirectional import device based on the electronic seal's usage. Specifically, changing the target electronic seal within the main service system includes: adding a change status tag to the target electronic seal according to the change request; performing a verification operation on the changed target electronic seal; and deleting the change status tag when the changed target electronic seal passes verification.

[0084] The target electronic seal change process in the preferred specific embodiment is as follows: Figure 7 As shown, in the management subsystem, after registering the seal status change information and approving the change, the seal status change operation is performed; the changed backend seal status is pushed to the verification subsystem within this network; according to the scope of use of the electronic seal, it is pushed across the network to the verification subsystem of other physically isolated networks as needed through the dual one-way import device.

[0085] Another aspect of the present invention relates to an electronic seal signing system applied across physically isolated networks, the structure of which is as follows: Figure 2 As shown, it includes:

[0086] The main service system module is used to generate and manage target electronic seals and generate seal issuance data, as well as obtain signed documents based on document signing requests. It is mainly divided into a resource management system, a creation subsystem, an issuance subsystem, a signing subsystem, a verification subsystem, and a management subsystem, based on their functions and deployment methods. Specifically, the resource management system manages user resources and authorizations within the isolated network and manages cross-network user resources; the creation subsystem generates electronic seal data and pushes it to the issuance subsystem within the same network, and as needed, to the issuance subsystems of other physically isolated networks (i.e., the issuance subsystems of the service system); the issuance subsystem issues signing permissions for electronic seals to designated users within the isolated network and pushes the issuance information to the management subsystem after completion; the management subsystem manages the availability status of electronic seals, such as enabling, disabling, and invalidating them; the signing subsystem calls the corresponding signing identity certificate in the server's cryptographic machine to complete the signing of documents with the electronic seal and generate signed document data; and the verification subsystem verifies the source and status of the electronic seal on the signed document.

[0087] The slave service system module receives and applies the target electronic seal, seal issuance data, and signed document feedback document signing requests sent by the main service system module. Specifically, it is a functional module with a different logical division from the main service system module, and its deployment mode does not include the creation subsystem. It preferably consists of an issuance subsystem, a signing subsystem, and a verification subsystem.

[0088] The first server cryptographic machine, corresponding to the main service system module, is used to import the signer's identity digital certificate, and match the corresponding private key based on the signer's identity digital certificate to apply the target electronic seal to the document to be signed and perform signing operations, such as performing cryptographic algorithm operations such as digital signature, symmetric encryption, and asymmetric encryption to generate a signed document.

[0089] The second server cryptographic machine, corresponding to the slave service system module, is used to import the signer's identity digital certificate.

[0090] Preferably, it may also include a smart password key (Ukey) for the terminal, which can be called by the client software to associate and retrieve the electronic seal stored on the server.

[0091] The first unidirectional import device is used to establish a unidirectional data transmission channel from the master service system to the slave service system.

[0092] The second unidirectional import device is used to establish a unidirectional data transmission channel from the service system to the main service system.

[0093] Preferably, the first and second unidirectional import devices are used to realize unidirectional data transmission, support at least HTTP, TCP, and Web Service protocols, simulate a closed-loop network logic, and are deployed between two physically isolated networks to achieve cross-network exchange of signed documents without leaving the site.

[0094] By using this system, the aforementioned computational processing methods can be executed and the corresponding technical effects can be achieved.

[0095] Embodiments of the present invention also provide a computer-readable storage medium capable of implementing all the steps of the methods in the above embodiments, wherein the computer-readable storage medium stores a computer program that, when executed by a processor, implements all the steps of the methods in the above embodiments.

[0096] Embodiments of the present invention also provide an electronic device for performing the above-described method. As an implementation device for the method, the electronic device has at least a processor and a memory. In particular, the memory stores data and related computer programs required for performing the method, such as digital certificates of signer identity, target electronic seals, and seal issuance data. The processor calls the data and programs in the memory to execute all steps of the method and obtain the corresponding technical effects.

[0097] Preferably, the electronic device may include a bus architecture, which may include any number of interconnected buses and bridges. The bus will include various circuits linked together by one or more processors and memories. The bus may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface between the bus and the receiver and transmitter. The receiver and transmitter may be the same element, i.e., a transceiver, providing a unit for communicating with various other systems over a transmission medium. The processor is responsible for managing the bus and general processing, while the memory may be used to store data used by the processor during operation.

[0098] Additionally, the electronic device may further include components such as a communication module, an input unit, an audio processor, a display, and a power supply. The processor (or controller, operating control) used may include a microprocessor or other processor device and / or logic device, which receives input and controls the operation of various components of the electronic device; the memory may be one or more of a buffer, flash memory, hard drive, removable media, volatile memory, non-volatile memory, or other suitable devices, which can store the aforementioned data information, and may also store programs for executing the information, and the processor can execute the program stored in the memory to achieve information storage or processing, etc.; the input unit is used to provide input to the processor, for example, it can be a button or touch input device; the power supply is used to provide power to the electronic device; the display is used to display images and text, for example, it can be an LCD display. The communication module is a transmitter / receiver that transmits and receives signals via an antenna. The communication module (transmitter / receiver) is coupled to the processor to provide input signals and receive output signals, which can be the same as in conventional mobile communication terminals. Based on different communication technologies, multiple communication modules can be incorporated into the same electronic device, such as cellular network modules, Bluetooth modules, and / or wireless LAN modules. The communication module (transmitter / receiver) is also coupled to a speaker and microphone via an audio processor to provide audio output through the speaker and receive audio input from the microphone, thereby enabling typical telecommunications functions. The audio processor can include any suitable buffer, decoder, amplifier, etc. Furthermore, the audio processor is coupled to a central processing unit, enabling on-device recording via the microphone and on-device playback of stored sound via the speaker.

[0099] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0100] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A system that specifies functions in one or more boxes.

[0101] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including an instruction set implemented in a process. Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0102] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the functions specified in one or more boxes. Although preferred embodiments of the invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the invention.

[0103] The above description is merely a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for signing electronic seals across physically isolated networks, characterized in that, include: S1. Obtain the digital certificate of the signer's identity for the electronic seal, and import the digital certificate of the signer's identity into multiple server cryptographic machines according to the scope of use of the electronic seal. The multiple server cryptographic machines include a first server cryptographic machine corresponding to the main service system and at least one second server cryptographic machine corresponding to a slave service system deployed in a different physically isolated network from the main service system. S2. Generate the target electronic seal in the main service system and send the target electronic seal to the slave service system through the first one-way import device. The slave service system generates a first receipt and sends it back to the main service system through the second one-way import device. S3. Generate seal issuance data in the main service system and send the seal issuance data to the slave service system through the first one-way import device. The slave service system generates a second receipt and feeds it back to the main service system through the second one-way import device. The seal issuance data includes the association information between the target electronic seal and at least one signer's identity digital certificate. S4. Obtain the corresponding requester identity digital certificate based on the document signing request, and determine whether the requester identity digital certificate matches the signer identity digital certificate stored in the first server cryptographic machine. S5. When it is determined that the requester's digital certificate matches the signer's digital certificate stored in the first server's cryptographic machine, the target electronic seal is obtained based on the seal issuance data. S6. Call the first server cryptographic machine to match the corresponding private key based on the signer's identity digital certificate, apply the target electronic seal to the document to be signed, perform the signing operation, and generate the signed document; S7. Determine whether the document signing request involves cross-network usage; S8. When it is determined that the document signing request involves cross-network use, the signed document is sent to the corresponding slave service system through the first one-way import device. The slave service system generates a usage receipt and sends it back to the master service system through the second one-way import device.

2. The method as described in claim 1, characterized in that, The method further includes: Change the target electronic seal within the main service system; Based on the use of the electronic seal, the modified target electronic seal is sent to the slave service system through the first one-way import device.

3. The method as described in claim 2, characterized in that, Step S8 further includes: Determine whether the service system stores the target electronic seal that matches the signed document; When it is determined that the target electronic seal matching the signed document is stored in the service system, the signed document is sent to the corresponding service system through the first one-way import device, a usage receipt is generated and fed back to the main service system through the second one-way import device; When it is determined that the target electronic seal matching the signed document is not stored in the slave service system, the target electronic seal, seal issuance data and signed document are sent to the corresponding slave service system through the first one-way import device, and a first receipt, a second receipt and a usage receipt are generated and fed back to the master service system through the second one-way import device.

4. The method as described in claim 1, characterized in that, Step S4 further includes: Determine whether the document signing request matches the target electronic seal usage permissions for the document to be signed. When it is determined that the document signing request matches the target electronic seal usage permission for the document to be signed, the corresponding requester's identity digital certificate is obtained based on the document signing request. When it is determined that the document signing request does not match the target electronic seal usage permissions, the document signing is suspended and the first error message is returned.

5. The method as described in claim 2, characterized in that, The modification of the target electronic seal within the main service system includes: Add a change status label to the target electronic seal based on the change request; Perform a verification operation on the modified target electronic seal; Once the modified target electronic seal passes verification, the change status label is deleted.

6. The method as described in claim 1, characterized in that, Step S5 further includes: Perform a verification operation on the acquired target electronic seal; When the target electronic seal is verified, proceed to step S6; If the target electronic seal fails verification, the document signing is suspended and a second error message is provided.

7. An electronic seal signing system applied across physically isolated networks, characterized in that, A method for performing any of the methods described in claims 1-6, comprising: The main service system module is used to generate and manage target electronic seals and generate seal issuance data, as well as to obtain signed documents based on document signing requests; The service system module is used to receive and apply the target electronic seal, seal issuance data and signed document feedback document signing request sent by the main service system module; The first server cryptographic machine, corresponding to the main service system module, is used to import the signer's identity digital certificate, and match the corresponding private key with the target electronic seal based on the signer's identity digital certificate to perform the signing operation on the document to be signed, and generate the signed document; The second server cryptographic machine, corresponding to the service system module, is used to import the signer's identity digital certificate; The first unidirectional import device is used to establish a unidirectional data transmission channel from the main service system to the slave service system. The second unidirectional import device is used to establish a unidirectional data transmission channel from the service system to the main service system.

8. A computer-readable storage medium, characterized in that, The storage medium stores a computer program, which, when executed by a processor, implements the method of any one of claims 1 to 6.

9. An electronic device, characterized in that, Including processor and memory; The memory is used to store the signer's digital certificate, the target electronic seal, and the seal issuance data; The processor is configured to execute the method of any one of claims 1 to 6 by invoking the signer's identity digital certificate, the target electronic seal, and the seal issuance data.

10. A computer program product comprising a computer program and / or instructions, characterized in that, When the computer program and / or instructions are executed by a processor, they implement the steps of the method according to any one of claims 1 to 6.

Images