Electronic file integrity detection system, method, equipment and medium

Abstract

The present application discloses an integrity detection system for electronic archives, wherein an archive data receiving module receives electronic archive file data; a data parsing unit parses the electronic archive file data to be detected, a policy loading unit calls a configuration center integrity rule configuration module to load an integrity detection policy, a detection execution unit traces back the evidence data of the evidence storage center to verify the integrity of the electronic file and the integrity of the process metadata, detects the integrity of the electronic archive evidence data through electronic signatures, signed data, and associated data, detects the integrity of the archive information package, the integrity of the electronic file content, and the integrity of the metadata through the archiving standard configuration; a detection result feedback unit summarizes the results of various integrity detections, and a detection report generation module performs data rendering and structurally embeds the data into the detection report. The present invention detects the integrity of electronic archives from multiple aspects, including content, structure, background information, metadata, and evidence, to ensure the integrity and reliability of archived electronic files.

Description

Technical Field

[0001] The present invention relates to the technical field of automatic detection of electronic archives, and in particular to a method and system for integrity detection of electronic archives. Background Art

[0002] With the rapid development of computer information technology and network technology, office automation systems, information systems, e-government, etc. have been widely used in various fields of management in government departments, enterprises and institutions. Electronic archives have increasingly become the mainstream way of information recording, transmission, exchange, utilization and sharing. Single-set electronic archive archiving management has become an inevitable trend.

[0003] Authenticity, integrity, availability and security are important attributes to ensure the nature of electronic archives. Therefore, using technical means to conduct technical testing of the authenticity, integrity, availability and security of electronic archives is an important step and basic guarantee for the archiving management of single-set electronic archives.

[0004] The "General Requirements for Testing of Document-type Electronic Archives" (DA / T 70-2018) officially released by the National Archives Administration provides technical specifications and guidance for the testing of the four characteristics of electronic archives. Existing electronic archive systems basically provide corresponding four-characteristic testing functions based on this specification, but in practice, the authenticity, reliability, and integrity of archived electronic archives are still far from actual needs.

[0005] Publication number: CN113688300A, titled “A method for implementing four-property detection of electronic archives”, emphasizes “tooling” the four-property detection and embedding it into the archive system, unzipping the electronic archive data package to be detected, using the four-property detection tool for detection, and automatically generating a detection report after the detection is completed.

[0006] Publication number: CN116304263A, name "A four-property detection method and system applied to electronic archive system", emphasizes that four-property detection is carried out according to different target detection schemes for different detection links of electronic archives (i.e. different stages of electronic archives), and finally the four-property detection report is summarized.

[0007] The above technologies and existing electronic archive systems generally conduct "integrity" testing based on trust in the business system. They test whether the data submitted by the business system is consistent with the data described by the business system at the time of submission based on the time when the electronic file is submitted for archiving. They do not trace back from the electronic file formation process, especially in some automatic archiving scenarios of information systems. It is impossible to fundamentally ensure whether the business data submitted for archiving is complete.

[0008] The integrity of electronic archives refers to the integrity of the content, structure, background information and metadata of electronic files. Archive records are a series of events or behaviors. Archives without records are incomplete and unreliable. For example, in the process of sending and receiving official documents, a large amount of background information is recorded, including the instructions of leaders, the handling of opinions, the signatures of the circulators, etc. in the process of receiving and circulating documents, and the drafting, review, countersignature, issuance, and typesetting in the process of issuing documents. Due to the heterogeneity of business systems, decentralized storage, and cross-system data flow, electronic files are often in a state of flow or discreteness. With the continuous accumulation of processing processes, some electronic files or process files may be lost before the final submission and archiving stage, or because the ins and outs of electronic files are not clear, the relevant files may be missing, omitted, or cannot be found when submitting business data for archiving, which may easily cause the loss of process information and fail to ensure the integrity and reliability of the electronic files finally submitted for archiving by the business system.

[0009] More importantly, traditional electronic archive systems are unable to detect the authenticity and integrity of the electronic signature information of signed electronic documents. Due to technical limitations, they have to convert the electronic signature information into image archives when archiving, causing the electronic files to lose their original attributes and lack evidentiary effect, which makes the effectiveness of electronic archive verification certificates flawed. Summary of the invention

[0010] In view of this, based on one aspect of the present application, a system for detecting the integrity of electronic archives is proposed, comprising: an archive data receiving module, an integrity rule configuration module, an integrity detection module, and a detection report generation module, wherein the integrity detection module comprises: a data parsing unit, a policy loading unit, a detection execution unit, and a detection result feedback unit; the archive data receiving module receives electronic archive file data; the data parsing unit parses the electronic archive file data to be detected; the policy loading unit calls the integrity rule configuration module of the configuration center to load the integrity detection policy; the detection execution unit verifies the background integrity of the electronic file and metadata process by tracing back the evidence data of the evidence center; detects the integrity of the electronic archive evidence data through electronic signatures, signed data, and associated data; detects the integrity of the archive information package, the integrity of the electronic file content, and the integrity of the metadata through the archiving standard configuration; the detection result feedback unit summarizes the results of various integrity tests; the detection report generation module renders the data and embeds it into the detection report in a structured manner.

[0011] Further preferably, the integrity rule configuration module configures a full-tree model for archiving standards, establishes archive classification standards based on the entire archive, and the classification supports a multi-level structure to form a full-tree model, wherein different standards are established according to different categories, businesses, and matters of archives to construct a classification architecture to form a trunk; an electronic archive directory is formed according to component rules to construct a file directory to form leaves, and leaf veins are formed according to archive data elements including electronic files, evidence files, and metadata extraction information to construct a full-tree model for archiving standard configuration.

[0012] Further preferably, the integrity rule configuration module includes: an archive classification configuration unit, an archive information package structure standard configuration unit, an electronic file template standard configuration unit, a metadata description standard configuration unit, and an integrity detection strategy configuration unit. The archive classification configuration unit configures the necessity attribute and the signature necessity attribute for each archive file directory, and configures the associated file template ID. After the configuration is completed, an archive material range configuration file in XML format is formed; the electronic file template standard configuration unit configures a fixed-style file through a template to generate an integrity detection standard; the metadata description standard configuration unit configures metadata complete description items and required description items according to the DA / T 46 standard, sets metadata coding, metadata name, necessity, and generates a metadata configuration file in XML format in combination with the detection standard; the integrity detection strategy configuration unit sets different integrity detection execution standards according to different archive classifications and stages.

[0013] Further preferably, the data parsing unit parses the electronic archive data to be detected, including, in the stage of forming and archiving the electronic archive, calculating the hash value of the obtained electronic file and the MD5 value of the metadata json string in sequence, retrieving the corresponding electronic file hash value and json string MD5 value from the evidence storage center, comparing and parsing them one by one, and after the comparison is passed, parsing the json string to obtain the electronic file to be detected and the metadata structure; in each stage after the archive file is formed, obtaining the archive information package through data exchange, calculating the archive total package hash value, retrieving the corresponding evidence data hash value and the total package hash value through the evidence ID for consistency comparison, and decompressing the archive total package to form a single archive information package sequence; retrieving the corresponding archive information package hash value from the evidence storage center through the archive ID and comparing it with the single archive information package hash value one by one, decompressing the single archive information package, calculating the file hash value in sequence and comparing it with the file hash value in the evidence data one by one, decompressing the archive information package step by step, parsing the XML format metadata file, and obtaining the electronic file to be detected and the metadata structure.

[0014] Further preferably, the process background integrity of verifying the electronic file and metadata through the evidence data includes verifying the integrity of the signing process, the business process and the metadata process through the evidence data, tracing back the original text by searching the pre-signed file ID (prevFileId) and the pre-signed file hash value (prevFileHash) through the signed file, searching the corresponding electronic file through the prevFileId, calculating the hash value and comparing it with the corresponding prevFileHash for consistency, calculating the original hash through the signature domain information and comparing it with the prevFileHash of the evidence center for consistency, tracing back the complete signing process to confirm that the electronic file signing process is complete; obtaining all business evidence data from the evidence center through the business ID, parsing to obtain a file list, and filling in the previous file ID (signPlaceFieldId) screens the file IDs of the same electronic file filling change process and retains the last file. PrevFileId is used to screen the file IDs of the same electronic file signing change process and retains the last file. The electronic file serial ID and the corresponding file hash value finally obtained are compared one by one with the electronic file serial ID and the corresponding file hash value to be tested, to detect and confirm the integrity of the business process of the electronic file formation; by parsing the signing process information metadata, the consistency of the business stage information of the evidence center and the business stage information of the electronic file metadata to be tested is compared, and the consistency of the operator or processor information, operation time or processing time information, processing opinions, and processing department information at each stage is compared one by one to detect the integrity of the process metadata.

[0015] Further preferably, the archive data receiving module receives and obtains detection parameters and obtains data to be detected. The received detection parameters include: archive classification, event or business type, stage of archived file, data filtering conditions, and the acquired data structure to be detected includes: hash file list and metadata json string before archiving is completed, forming a ZIP or EEP format archive information package after archiving, decompressing the single archive information package to obtain the electronic file and metadata description XML format file, parsing the XML file and metadata json string, and obtaining the metadata structure including basic information, process information, archiving configuration information, electronic file component information, and electronic file attribute information.

[0016] Based on the second aspect of the present invention, a method for detecting the integrity of electronic archives is proposed, which obtains and parses electronic archive data, and loads a four-property detection model integrity detection strategy; detects the integrity of the electronic file and metadata archiving process and background information through stored evidence data, and detects the integrity of evidence data through electronic signatures, signed evidence data, and associated evidence data; detects the content structure of the electronic archive data information package, the content of the electronic file, and the metadata integrity through archiving standard configuration; summarizes and returns various integrity detection results and renders the data, and embeds them into the detection report in a structured manner.

[0017] Further preferably, the archive classification configuration unit configures the necessity attribute and the signature necessity attribute for each archive file directory, and configures the associated file template ID. After the configuration is completed, an archive material range configuration file in XML format is formed; the electronic file template standard configuration unit configures a fixed-style file through a template to generate an integrity detection standard; the metadata description standard configuration unit configures metadata complete description items and required description items according to the DA / T 46 standard, sets metadata coding, metadata name, necessity, and generates a metadata configuration file in XML format in combination with the detection standard; the integrity detection strategy configuration unit sets different integrity detection execution standards according to different archive classifications and stages.

[0018] Further preferably, the data parsing unit parses the electronic archive data to be detected, including, in the archiving stage of the electronic archive, calculating the hash value of the electronic file and the MD5 value of the metadata json string in sequence, obtaining the metadata structure, retrieving the file ID of the evidence storage center for comparison and parsing one by one, and after the archive file is formed, obtaining the archive information package through data exchange, calculating the hash value of the archive total package, retrieving the corresponding evidence data hash value through the evidence ID and the total package hash value for consistency comparison, decompressing the archive total package to form a single archive information package sequence; retrieving the corresponding archive information package hash value of the evidence storage center through the archive ID and comparing it with the single archive information package hash value one by one, decompressing the single archive information package, calculating the file hash value in sequence and comparing it with the file hash value in the evidence data one by one, decompressing the archive information package step by step, parsing the XML format metadata file and the json string, and obtaining the electronic file and metadata to be detected.

[0019] Further preferably, the background integrity of the process of verifying the electronic file and metadata through the stored evidence data includes: searching the prevFileId and prevFileHash of the pre-signed file by signing the file to trace back the original text, searching the corresponding electronic file by prevFileId, calculating the hash value and comparing it with the corresponding prevFileHash for consistency, calculating the original text hash by the signature field information and comparing it with the prevFileHash of the storage center for consistency, tracing back the complete signing process to confirm that the signing process of the electronic file is complete; obtaining all business stored evidence data from the storage center by business ID, parsing to obtain a file list, and screening the same electronic file fill in the signPlaceFieldId by Write the file ID of the change process evidence and keep the last file. Screen the file ID of the change process evidence of the same electronic file signing through prevFileId and keep the last file. Use the electronic file serial ID and the corresponding file hash value finally obtained to compare them one by one with the electronic file serial ID and the corresponding file hash value to be tested, and detect and confirm the integrity of the business process of the electronic file formation; parse the signing process information metadata, compare the consistency of the business stage information of the evidence center with the business stage information of the electronic file metadata to be tested, and compare the consistency of the operator or processor information, operation time or processing time information, processing opinions, and processing department information at each stage one by one to detect the integrity of the process metadata.

[0020] Further preferably, detecting the integrity of evidence data through electronic signatures, signed data, and associated data includes obtaining electronic signature information from an evidence storage center according to a file ID, extracting signature type, signature rule, signature time, signer, signature result, certificate, certificate chain, certificate revocation sequence, signature algorithm identifier, and electronic seal related information, performing consistency comparison with the signer, signature time, and certificate information extracted from the signature field of the archived file to verify the integrity of the electronic signature, performing consistency comparison with the electronic signature information structure parsed from a single electronic file and / or archive information package to confirm the integrity of the electronic signature metadata; detecting each signature field of the electronic file, and performing consistency comparison with the electronic signature information structure parsed from the single electronic file and / or archive information package to confirm the integrity of the electronic signature metadata; The evidence file ID and hash value corresponding to each signature field in the description are compared with the archived evidence file ID and hash value one by one, and the integrity of the electronic file associated evidence information is verified by comparing the associated evidence ID and hash value corresponding to each electronic file in the metadata description with the archived evidence file ID and hash value one by one; the metadata description information stored in XML format in the single archive information package is parsed to obtain the associated evidence file ID and hash value corresponding to each signature field, the associated evidence file ID and hash value corresponding to the file to be detected, the associated file ID and hash value corresponding to the single archive, and the evidence file ID and hash value in the evidence folder, and compare them one by one to detect the integrity of the evidence files in the archived information package.

[0021] Further preferably, detecting the content structure of the electronic archive data information package, the content of the electronic file, and the metadata integrity through the archiving standard configuration includes: parsing the "description file.XML" in the information package to obtain the field value of the total number of pieces and the field value of the total number of bytes for archiving and transfer, and comparing them with the number of electronic archives to be detected and the total number of bytes of the electronic files for consistency, obtaining the field value of the total number of pieces and the field value of the total number of bytes recorded in the smart form, and comparing them with the number of electronic archives to be detected and the total number of bytes of the electronic files for consistency, and detecting the integrity of the content structure of the information package; parsing the "basic information.XML" in a single archive information package according to the batch submission data or the single archive information package to obtain the field value of the sub-file number and the field value of the total number of pages, detecting the total number of electronic files and the total number of pages of electronic files for consistency and comparing them with the number of files described in the metadata or records, and detecting whether the total number of bytes is consistent; obtaining the "archiving scope standard configuration file.XML" from the configuration center for parsing, obtaining the directory of files to be archived with the attribute of "required", parsing the directory of electronic file components in the metadata of the electronic archive to be detected, and matching them one by one with the directory of files to be archived, and detecting the archiving scope The system checks the integrity of the archive scope; obtains the "archive scope standard configuration file.XML" from the configuration center and parses it, obtains the archived file directory with the attribute "required" from the configuration center, and traces back the relative path of the archived electronic file storage to obtain the archive directory structure; matches from the root directory step by step until the archived directory is matched, and checks the structural integrity of the archived information package; obtains the metadata description file stored in XML format from the batch transfer information package, and obtains the metadata description file stored in XML format from the single archive information package, and parses the fields containing the basic information structure, process information structure, electronic file attribute information structure, and archived electronic file sub-item description information, checks the consistency between the single archive information package and the batch transfer information package, and the consistency between the archived electronic file and its directory structure and the file and its directory structure in the metadata description, and checks the integrity of the metadata description of the archived information package; through the electronic file template and element configuration, identifies and detects whether the content information, keyword information, graphic image information, electronic signature information, and link attachment information contained in the electronic file are complete to detect the content integrity of the electronic file.

[0022] Further preferably, the integrity of the electronic file content data is detected through the archiving standard configuration, and according to the control coordinates and fill-in attribute configuration configured in the template, the OCR is used to identify whether the content filling of the corresponding control of the electronic file is completed; according to the keywords and necessity configuration configured in the template, the OCR is used to identify whether the corresponding keyword elements of the electronic file are complete; according to the keywords, content recognition coordinate configuration and necessity configuration configured in the template, the OCR is used to identify whether the content information elements corresponding to the keywords of the electronic file are complete; according to the recognition coordinate area and image element configuration configured in the template, the image recognition matching is used to detect whether the corresponding image element is complete; for the full-text search link tag of the electronic file to be detected, its hash value is calculated to match with the electronic file to be detected, and the search is performed. Corresponding to the attachment name, fuzzy matching is performed with the file name of the electronic file to be tested to detect the integrity of the electronic file attachment data; through the metadata recording items, metadata mandatory items, metadata continuity detection items, and electronic signature and digital attribute recording requirements in the archiving standard configuration, the integrity of the metadata parsed in the data to be tested is checked; according to the key wording information configuration in the configured metadata recording standard, the key process information description in the process information structure metadata is checked to detect the integrity of the metadata items; according to the configured electronic file signature element configuration and incomplete archiving configuration, the archived electronic file attributes are checked to see whether they contain metadata descriptions such as electronic signature information or digital attribute information in addition to the basic information metadata to detect the integrity of the sub-file attribute information.

[0023] According to another aspect of the present application, an electronic device is provided, comprising: a processor; and a memory storing a program, wherein the program comprises instructions, and when the instructions are executed by the processor, the processor executes the above-mentioned method for detecting the integrity of an electronic archive.

[0024] According to another aspect of the present application, a non-transitory computer-readable storage medium storing computer instructions is provided, wherein the computer instructions are used to enable the computer to execute the electronic archive integrity detection method according to any one of the above items.

[0025] The present invention uses evidence data to trace back the electronic file signing process, uses business evidence to trace back the business file formation and submission process, and confirms the integrity of the electronic file process and background information through consistency detection of evidence data and process metadata and consistency detection of evidence and files, ensuring the integrity of the electronic file content, structure and metadata, solving the problem that the existing electronic file integrity detection can only be based on a single point in time and is not comprehensive, and provides a verifiable process and background information integrity detection method covering the entire life cycle of electronic files. Fundamentally solve the problem of electronic file integrity and reliability detection.

[0026] Through archiving standard configuration detection such as archiving material scope, archiving electronic file elements, metadata recording standards, etc., the integrity detection problem of electronic archive object structure, electronic file content and metadata is solved. The integrity of electronic archives is not only a formal requirement for the complete collection of archive resources, but also a quality requirement for content management. The specific requirements of the archive business attributes themselves for resource integrity and association integrity are realized through archiving standard configuration detection.

[0027] Through evidence file integrity detection, electronic signature metadata integrity detection, etc., technical means are used to reduce the archive's dependence on software and hardware, while making the archived electronic files self-verifying, self-contained and evidentiary, so that the electronic files can retain their original properties, solving the great drawback of traditional electronic archive systems that cannot perform authenticity and integrity detection on electronic signature information and have to convert electronic signature information into image archiving, causing electronic files to lose their original properties.

[0028] Therefore, the integrity detection system and method for electronic archives provided by the present invention do not rely on trust in the business system. They are no longer based solely on the time when the electronic file is submitted for archiving to detect whether the data submitted by the business system is consistent with the data described by the business system at the time of submission. Instead, they trace back from the electronic file formation process, and detect the integrity of electronic archives from multiple aspects such as content, structure, background information, metadata and evidence, thereby ensuring the integrity and reliability of archived electronic files. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 Shown is a relationship diagram of the electronic archive integrity detection system in this exemplary embodiment;

[0030] Figure 2 Shown is a schematic diagram of the overall architecture (full tree model) of the archiving standard configuration in this exemplary embodiment.

[0031] Figure 3 Shown is a schematic diagram of the electronic file integrity detection process in this exemplary embodiment;

[0032] Figure 4 The figure shows a logical diagram of document evidence verification of a business process in this exemplary embodiment;

[0033] Figure 5 Shown is a schematic structural diagram of an electronic device according to an exemplary embodiment of the present application. DETAILED DESCRIPTION

[0034] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solution of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0035] The exemplary embodiment of the present application is aimed at integrity testing, one of the four properties of electronic archives, and is applicable to all stages of electronic archives. It performs integrity testing on electronic archives from all aspects, including electronic file content, structure, background information, metadata, and evidence.

[0036] like Figure 1 As shown, the exemplary embodiment of the present application provides an integrity detection system for electronic archives, including: an archive data receiving module, an integrity rule configuration module, an integrity detection module, and a detection report generation module. Among them, the integrity detection module includes: a data parsing unit, a policy loading unit, a detection execution unit, and a detection result feedback unit. The archive data receiving module obtains the electronic archive file data to be detected and sends it to the integrity monitoring module; the data parsing unit parses the electronic archive file data to be detected, the policy loading unit calls the configuration center integrity rule configuration module to load the integrity detection strategy of the four-property detection model, the detection execution unit verifies the integrity, reliability, and evidence integrity of the electronic file through the evidence data, and detects the integrity of the archive information package, the integrity of the electronic file content, and the integrity of the metadata through the archiving standard configuration; the detection result feedback unit summarizes and returns the integrity detection results of each item.

[0037] Among them, the integrity rule configuration module includes an archive classification configuration unit, an archive information package structure standard configuration unit, an electronic file template standard configuration unit, a metadata cataloging standard configuration unit, and an integrity detection strategy configuration unit, forming an archive standard configuration full-tree model.

[0038] like Figure 2 The figure shows the overall architecture (full tree model) of the archiving standard configuration in this exemplary embodiment. The integrity detection execution standard is provided through rule configuration, thereby completing the specific detection items of the integrity detection required by the "General Requirements for Document-type Electronic Archives Detection" (DA / T 70).

[0039] The archive classification configuration unit establishes archive classification standards based on the whole archive in the configuration center. The classification supports a multi-level structure and forms tree branches. The archive classification standards are established based on the whole archive, and different standards are established according to different archive categories, businesses, and matters to build a classification architecture as the trunk; the electronic archive directory is formed according to the component rules to build a file directory as the leaves, where the file directory includes files (including files and sub-items), files (combinations or single items), and documents as the smallest unit (including application forms, application materials, approval processing sheets, electronic evidence, file texts, attachments, file processing sheets, revised drafts...); the data formed by the archived data elements including electronic files, evidence files, and metadata extraction information are used as leaf veins, where electronic files include: background, content, structure, evidence files include: electronic signature production data, video authentication auxiliary evidence, business evidence records, user authorization agreements, RA user agreements, and metadata extraction information includes: process information, basic information about archives and businesses, basic attributes of electronic files, and electronic signature information.

[0040] Archive classification is usually configured to the granularity of specific business or matters, and specific requirements for archiving resources are proposed on the business side. For example, marriage registration archives need to be subdivided into specific matters such as marriage registration and divorce registration. A classification path such as "Famous Archives / ZW / MS / HYDJ / JH" (Famous Archives / Government Affairs / People's Livelihood / Marriage Registration / Marriage) or "Famous Archives / HYDJ / JH" can be established. The specific classification scheme is customized according to the specific needs of each fonds and business scenarios.

[0041] The archiving information package structure standard configuration unit mainly forms the archiving information package electronic file directory structure standard by configuring the archiving material range directory according to the electronic file component requirements, forming a tree-like branch.

[0042] Under the set archive classification, add the parent archive material directory in sequence, and add the child archive material directory under the parent archive material directory. Multi-level directory structure configuration is supported, and finally an archive material directory tree is formed.

[0043] For each archived material directory, configure the necessity attribute. If it is set to necessary, it means that there must be files in this directory when archiving, otherwise it does not meet the archiving requirements. For each archived material directory, configure the signature necessity attribute. If it is set to necessary, it means that the files in this directory must contain electronic signatures when archiving, otherwise it does not meet the archiving requirements.

[0044] Configure the associated file template ID for each archived material directory. After the associated file is set, it means that when archiving, the files under this directory must contain at least the basic elements of the file template configuration. After the configuration is completed, an archived material scope configuration file in XML format is formed. Taking the marriage registration in the marriage registration archive as an example, the archived material scope configuration file created is as follows:

[0045] <?xml version="1.0" encoding="UTF-8"?>

[0046] <Archiving Scope>

[0047] <Record Group Number>Z109< / Record Group Number>

[0048] <File Classification>Marriage Registration< / File Classification>

[0049] <Matter Type>Marriage Registration< / Matter Type>

[0050] <Matter Code>3D8BA7302D519F2643203E8A56B66CEE< / Matter Code>

[0051] ……

[0052] <Archiving Material Catalog>

[0053] <Archiving Material Catalog Name>Marriage Registration Review and Processing Form< / Archiving Material Catalog Name>

[0054] <Material Necessity>Necessary< / Material Necessity>

[0055] <Signature Necessity>Necessary< / Signature Necessity>

[0056] <Template File ID>169020243595073702< / Template File ID>

[0057] ……

[0058] < / Archiving Material Catalog>

[0059] <Archiving Material Catalog>

[0060] <Archiving Material Catalog Name>Proof Materials< / Archiving Material Catalog Name>

[0061] <Material Necessity>Necessary< / Material Necessity>

[0062] <Archiving Material Catalog>

[0063] <Archiving Material Catalog Name>ID Card (Male)< / Archiving Material Catalog Name>

[0064] <Material Necessity>Necessary< / Material Necessity>

[0065] < / Archiving Material Catalog>

[0066] <Archiving Material Catalog>

[0067] <Archiving Material Catalog Name>ID Card (Female)< / Archiving Material Catalog Name>

[0068] <Necessity of Materials> Necessary [[ / Necessity of Materials]]

[0069] < / Archived Material Catalog>

[0070] ……

[0071] < / Archived Material Catalog>

[0072] ……

[0073] < / Archiving Scope>

[0074] The standard configuration unit of electronic file templates. For specific and fixed-style document materials, the integrity detection standard of electronic file content can be generated through template configuration. For example, a business license must have keyword fields such as name, type, domicile, legal representative, registered capital, incorporation date, business term, and business scope. There must be graphics such as the national emblem in fixed positions, and elements such as recognizable QR codes and official seals. If it is an electronic business license, it must have an electronic official seal that complies with the Electronic Signature Law. For example, the employment agreement in the personnel file of a certain company has content filled in fixed positions and must be signed or sealed in fixed positions. When performing detection, if the corresponding fields and elements are extracted through coordinate information recognition, OCR recognition, and signature field information recognition, and the relevant information is obtained, it is considered that the file content is complete. If the corresponding fields or elements cannot be extracted, it can be considered that the file content is incomplete. Since the detection of electronic file content requires the combination of a large number of machine learning algorithms and there are many uncertainties, the integrity detection of electronic files through electronic file templates is only the minimum integrity detection standard for electronic files.

[0075] The standard configuration unit of metadata description. According to the DA / T 46 standard, configure the complete metadata description items, required description items, etc. to detect whether the metadata obtained from the business system or captured from electronic files meets the archiving requirements, so as to complete the integrity detection of electronic file metadata. When configuring, it is necessary to set the metadata encoding, metadata name, and necessity, and generate an XML-format metadata configuration file in combination with the real and reasonable detection standard of metadata.

[0076] The integrity detection strategy configuration unit sets different integrity detection execution standards according to different file classifications and different stages. For example, at the stage of submitting for archiving in the business system, the electronic file has not been assembled and archived, and the file number has not been generated. Therefore, the requiredness detection of the file number can be removed when configuring the metadata description standard. In addition, when configuring the integrity detection strategy, the specific detection items can be set to be enabled or disabled, and different execution standards can be set for the specific detection items to meet the needs of specific business scenarios.

[0077] The integrity detection module parses the electronic archive file data to be detected, calls the integrity rule configuration module of the configuration center to load the integrity detection strategy of the four-property detection model, verifies the integrity, reliability, and evidence integrity of the electronic file through the stored evidence data, detects the integrity of the archive information package, the integrity of the electronic file content, and the integrity of the metadata through the archiving standard configuration, and performs integrity detection.

[0078] After completing the four-property test of the electronic archive, the test report generation module summarizes the test results, loads and renders according to the test report template to generate a visual display page of the test results, and solidifies and signs the test results through digital signature technology, and finally forms a voucher file to feedback to the electronic archive system to confirm the validity of the test results. The integrity test in the four-property test feedbacks the test results and renders the data, and embeds them in the four-property test report in a structured manner.

[0079] Through the coordinated cooperation of the above-mentioned components and modules, this exemplary embodiment provides an integrity detection system for electronic archives. Through pre-archiving standard configuration and business evidence storage in each link, in the links of electronic file archiving, transfer, management, etc., the integrity detection of the content, structure, background information, metadata and evidence of the electronic file is completed through the evidence data and the configured archiving standards. It is an important and core detection link in the detection of the four properties of electronic archives, which expands the scope of the electronic archive detection stage, improves the accuracy of electronic archive detection, and greatly reduces the work cost of archive staff.

[0080] On the other hand, the present application proposes a method for integrity detection of electronic archives, which detects the integrity of the electronic file from its formation to archiving process and background information through business evidence storage, detects the integrity of the electronic file content, structure and metadata through archiving standard configuration, and confirms the validity of electronic archive evidence through electronic signature, signed evidence, and associated evidence integrity detection, thereby detecting whether the electronic files and metadata obtained from heterogeneous business systems or electronic archive systems are complete and without missing. Including:

[0081] Acquire and parse the electronic archive data to be tested; load the integrity test strategy of the four-property test model; verify the integrity of the electronic file and metadata process background through the stored evidence data; verify the integrity of the electronic file and metadata evidence through the stored evidence data; test the integrity of the information package content structure through the archiving standard configuration; test the integrity of the electronic file content through the archiving standard configuration; test the integrity of the metadata through the archiving standard configuration; summarize and return the results of each integrity test.

[0082] The method of obtaining and parsing the electronic archive data to be detected includes obtaining detection parameters, obtaining the data to be detected, and extracting electronic files and metadata according to the structure of the data to be detected. The detection parameters obtained include archive classification, event or business type, stage, data filtering conditions, etc., which are used to support subsequent data processing, model loading, etc. The data to be detected has two structures, one is the hash file list and metadata json string before archiving is completed, and the other is the ZIP or EEP format archive information package after archiving. After obtaining the data to be detected through the WebService interface, it is parsed according to different data structures, and finally the electronic files and metadata to be detected are obtained.

[0083] Loading the integrity detection strategy of the four-property detection model includes obtaining and loading the corresponding integrity detection strategy of the four-property detection model from the configuration center through the obtained parameters such as archive classification, event or business type, and stage, and performing subsequent tests according to the pre-configured integrity detection rules.

[0084] The verification of the electronic file and metadata process background integrity through stored evidence data includes verifying the signing document process integrity, business process file integrity and process metadata integrity through stored evidence data.

[0085] Specifically, verifying the integrity of the signing process through stored evidence data refers to tracing back and restoring the electronic document signing process through the evidence center and obtaining relevant electronic signature information, and comparing it with the signature field information of the signed document to be tested for consistency, so as to confirm the integrity and reliability of the electronic document signing process; verifying the integrity of business process files through stored evidence data refers to obtaining the file sequence submitted in the electronic document formation process through the evidence center and comparing it with the electronic file sequence to be tested one by one for consistency, so as to detect and confirm whether all files submitted in the electronic document formation business process are archived; verifying the integrity of process metadata through stored evidence data refers to comparing the process metadata obtained through the evidence center with the process information metadata of the electronic file to be tested for consistency, so as to detect whether there are omissions in the information of the electronic file archiving process.

[0086] The verification of the integrity of electronic files and metadata evidence through stored evidence data includes electronic signature metadata integrity detection, electronic file associated evidence integrity detection, and archived information package evidence file integrity detection.

[0087] Specifically, the electronic signature metadata extracted from the signature domain and the electronic signature metadata obtained by the evidence storage center are compared with the electronic signature metadata in the archive information package to confirm that the electronic signature information description of the signed electronic file is complete; the signature data package, RA user agreement, user authorization agreement, etc. generated by the electronic file signing process obtained by the evidence storage center are compared with the evidence files associated with each electronic file in the archive information package to confirm that the evidence of the electronic file signing process is complete; the electronic archive-related evidence files obtained by the evidence storage center are compared with the associated evidence files obtained by the evidence storage center to confirm that the evidence of each link in the electronic archive formation process is complete and a closed loop is formed. The integrity test of archive evidence helps to further confirm the integrity of electronic file signatures and business process files, and enables archived electronic archives to have the self-verification and self-containment required by the "General Requirements for Single Set Management of Electronic Archives" (DA / T 92-2022), and have judicial effect.

[0088] The detection of the integrity of the archive information package content structure through the archiving standard configuration includes the total number of pieces (number of archives) consistency detection, the total number of bytes consistency detection, the total number of files consistency detection, the total number of pages consistency detection, the archive material range integrity detection, the archive information package structure integrity detection, and the archive information package metadata description integrity detection.

[0089] Specifically, the configured range of materials to be archived is used to detect whether the files to be inspected are submitted completely according to the basic requirements of the business for resources; the configured archive material directory structure is used to detect whether the archive information package structure is complete, thereby detecting the complete consistency between the actual archive component data and the data to be archived.

[0090] In addition, the integrity of the data to be tested is confirmed by checking whether the actual number of archived files, bytes, files, pages, etc. are consistent with the corresponding field values ​​described in the metadata description or registration form. This is an integrity detection item proposed in the DA / T 70 specification; the consistency comparison between the metadata description of the archived information package and the actual archived component information is helpful to further confirm the integrity of the electronic file archive component information.

[0091] The electronic file content integrity detection through archiving standard configuration includes electronic file signature element integrity detection, electronic file content data integrity detection, and electronic file attachment data integrity detection.

[0092] Specifically, through the configured electronic file template and electronic file archiving elements, it is checked and confirmed whether the electronic file to be signed contains an electronic signature, whether the configured signature position has been signed, whether the configured fill-in item content has been filled in, whether it contains the configured keyword elements, whether it contains the configured key graphic elements, and whether the link information and attachment information contained in the electronic file are complete, etc., so as to confirm whether the content of the archived electronic file is complete and whether it meets the actual business archiving requirements.

[0093] The metadata integrity detection through archiving standard configuration includes metadata item integrity detection, metadata mandatory entry detection, metadata continuity detection, and process information integrity detection.

[0094] Specifically, by obtaining and parsing the metadata information structure such as the basic information, process information, electronic file attribute information of the metadata of the electronic file to be tested; by matching and comparing the metadata catalog items, metadata mandatory items, metadata continuity items, and key process information requirements in the archiving standard configuration obtained from the configuration center one by one, the integrity of the metadata of the file to be tested is confirmed.

[0095] Summarize and return various integrity test results. According to the execution of integrity test strategies at each stage of the archive, obtain the integrity test results in turn. When summarizing the test results, if all the tests pass, the overall integrity test passes, otherwise it fails. According to the feedback type of the incoming test results, the overall integrity test results, various integrity test results and integrity test reports are fed back respectively.

[0096] like Figure 3 The figure shows a schematic diagram of the electronic archive integrity detection process in this exemplary embodiment. The exemplary embodiment of this application provides an integrity detection method for electronic archives based on the integrity detection requirements mentioned in the "General Requirements for Document-type Electronic Archives Detection" (DA / T 70) and combined with actual scenario needs. Specifically, it includes:

[0097] Acquire and parse the electronic archive data to be tested.

[0098] First, the data receiving module obtains detection parameters from various heterogeneous business systems. It is used to support subsequent data processing and model loading of the electronic archive system. The detection parameters include: archive classification, event or business type, electronic archive stage, data filtering conditions and other detection parameters. There are two structures of data to be detected, one is the hash file list and metadata json string before archiving is completed, and the other is the ZIP or EEP format archive information package after archiving. The data receiving module obtains the hash file list and metadata json string from various heterogeneous business systems, and obtains the archive information package after archiving from the electronic archive system. Both data are transmitted through the WebService standard interface. Hash data is transmitted between the sender and the receiver in the form of information exchange by directly establishing an interface and a transmission channel; the archive information package is uploaded, downloaded and tested by FTP or OSS in the form of data exchange.

[0099] During the archiving stage of electronic archives, electronic files and metadata are obtained from the business system through information exchange, the hash value of the electronic file and the key MD5 value of the metadata string json are calculated in turn, the corresponding electronic file IDs of the evidence storage center are retrieved and compared one by one, and the data is parsed after the comparison is passed.

[0100] In the pre-archiving, formal archiving, archive management, and archive utilization stages after the archive file is formed, the archive information package is downloaded and obtained through data exchange, the hash value of the archive total package is calculated, and the hash value in the corresponding evidence data is retrieved through the evidence ID for consistency comparison with the calculated total package hash value; the archive total package is decompressed to form a single archive information package sequence, and the evidence data of the evidence center is retrieved through the archive ID (file number), and the corresponding archive information package hash value is compared one by one with the calculated single archive information package hash value; the archive information package is decompressed, and the electronic file hash values ​​are calculated in turn and compared one by one with the electronic file hash values ​​in the evidence data.

[0101] After the comparison is passed, the data to be tested in the archive information package is parsed. According to the structure of the acquired data to be tested, the archive information package is decompressed step by step, the XML format metadata file is parsed, and the json string is parsed, so as to obtain the electronic file and metadata to be tested.

[0102] In the archiving stage, the metadata string json is parsed to obtain metadata structures such as basic information, process information, archiving configuration information, electronic file component information, and electronic file attribute information, and enter the integrity detection module for detection together with the list of electronic files to be detected; in the pre-archiving, formal archiving, archive management, and archive utilization stages after the archiving is formed, each single archive information package is obtained by decompressing the archive information total package.

[0103] By decompressing a single archive information package, the electronic file and metadata description XML format file are obtained; by parsing the XML file, metadata structures such as basic information, process information, archiving configuration information, electronic file component information, electronic file attribute information, etc. are input into the integrity detection module together with the list of electronic files to be detected for detection.

[0104] Load the integrity detection policy model.

[0105] The integrity detection strategy model retrieves and parses the corresponding archiving standard configuration file XML according to the received file type, business or matter type, and current stage, retrieves the corresponding integrity detection strategy, loads the detection rule items set to be enabled in sequence, and executes the subsequent detection rules in sequence.

[0106] The integrity detection module verifies the integrity and reliability of electronic files and metadata through stored evidence data. Specifically, it includes:

[0107] The integrity of the signing process is verified through stored evidence data to detect whether the signed electronic document is authentic and complete.

[0108] Obtain all evidence data from the evidence storage center through the signed file ID; trace back the original text by searching the pre-signed file ID (prevFileId) and the pre-signed file hash value (prevFileHash) through the signed file; search for the corresponding electronic file through prevFileId, calculate the hash value and compare it with the corresponding prevFileHash for consistency; obtain the calculated original hash through the signature domain information and compare it with the prevFileHash of the evidence storage center for consistency; repeat the above process until the entire signing process is traced back to confirm that the electronic file signing process is complete, authentic, and tamper-free.

[0109] Verify the integrity of business process documents through stored evidence data to detect whether there are any missing or omissions in the business process documents.

[0110] like Figure 4 The figure shows a logical diagram of business process file verification in an exemplary embodiment of the present application. File 1-1, file 3, file 2-1, and file 4 are archived according to the business ID, and the hash of each archived file is calculated respectively; the file list is obtained by parsing the business ID: archived file 1-1...file 3, file 2-1...file 4.

[0111] Specifically, this exemplary embodiment obtains all business evidence data from the evidence center through the business ID, and parses it to obtain a file list; screens the file IDs of the same electronic file filling change process evidence by filling in the signed file ID (signPlaceFieldId), and retains the last file; screens the file IDs of the same electronic file signing change process evidence by prevFileId, and retains the last file; and compares the electronic file sequence ID and the corresponding file hash value finally obtained with the electronic file sequence ID and the corresponding file hash value to be detected one by one to detect and confirm whether all the files submitted in the business process of electronic file formation are archived.

[0112] Verify the integrity of process metadata through evidence data to detect whether there is any missing or omitted background information of the electronic file archiving process. Obtain all business evidence data from the evidence center through business ID, parse and obtain process information metadata; compare the consistency of business stage information obtained by the evidence center with the business stage information of the electronic file metadata to be tested, and compare the consistency of the operator or processor information, operation time or processing time information, processing opinions, processing departments and other information at each stage one by one to detect and confirm whether the background information of the electronic file formation process has been fully recorded and archived.

[0113] Verify the integrity of electronic documents and metadata evidence through stored evidence data, including:

[0114] Verify the integrity of technical metadata such as electronic signatures through stored evidence data.

[0115] The electronic signature metadata (M57) introduced in accordance with the "Metadata Scheme for Electronic Documents" (DA / T 46-2009) is mainly aimed at the readability, comprehensibility and evidentiary description of electronic archives and electronic files, thereby reducing the dependence of electronic archives on software and hardware. It needs to be collected when electronic files are collected and tested and verified when they are archived.

[0116] Obtain electronic signature information from the evidence storage center based on the file ID, extract signature type, signature rule, signature time, signer, signature result, certificate, certificate chain, certificate revocation sequence, signature algorithm identifier and electronic seal related information; extract the signer, signature time, certificate, etc. from the signature field and compare them with the signature information obtained from the evidence storage center for consistency; obtain and parse the electronic signature information structure of a single electronic file or file information package, and compare it with the signature information obtained from the evidence storage center for consistency, so as to confirm the integrity of the electronic signature metadata.

[0117] Verify the integrity of evidence information associated with electronic files through evidence data testing.

[0118] The integrity test of evidence associated with electronic documents refers to the test of whether the evidence documents used to assist in proving the authenticity of the signature of electronic documents and the business process document proof documents are complete, so as to ensure the evidentiary effect of electronic files.

[0119] Specifically, according to the metadata description, first check whether each signature field of the electronic file corresponds to the associated evidence, including the signature data package, RA user agreement, signature authorization agreement, etc.; secondly, compare the evidence file ID and hash value corresponding to each signature field in the metadata description with the actual archived evidence file ID and hash value one by one for consistency; thirdly, compare the associated evidence ID and hash value corresponding to each electronic file in the metadata description with the actual archived evidence file ID and hash value one by one for consistency, so as to confirm the integrity of the evidence associated with the electronic file.

[0120] Archive information package evidence file integrity check.

[0121] Specifically, metadata description information stored in XML format is obtained from a single archive information package and parsed, the associated evidence file ID and hash value corresponding to each signature field of the electronic file are obtained, the associated evidence file ID and hash value corresponding to the electronic file are obtained, the associated file ID and hash value corresponding to the single archive are obtained, the evidence file ID and hash value in the evidence folder are obtained, and consistency comparisons are performed one by one to ensure that the evidence files associated with the archive information package are complete and without omissions, thereby ensuring the legal effect of the electronic archive.

[0122] Check the integrity of the information package content structure through archiving standard configuration, including:

[0123] Total number of pieces (number of archives) consistency test. For batch submitted data, it is necessary to test whether the number of archives submitted in the archive information package is consistent with the number of archives described in the metadata or submission record. Specifically, it includes: parsing the "Description File.XML" in the information package to obtain the total number of pieces of archive transfer field value, and compare it with the number of electronic archives to be tested obtained by the detection module; obtain the total number of pieces field value recorded in the smart form "Archive Registration Form" or "Transfer and Receipt Registration Form", and compare it with the number of electronic archives obtained by the detection module;

[0124] Total byte count consistency check. For batch submission data or a single archive information package, it is necessary to check whether the total byte count of the electronic file to be tested is consistent with the byte count described in the metadata or submission record. Specifically, it includes: parsing the "Description File.XML" in the information package, obtaining the total byte count field value of the archive transfer, calculating the total byte count of the obtained electronic file for consistency comparison; obtaining the total byte count field value recorded in the smart form "Archive Registration Form" or "Transfer Receipt Registration Form", calculating the total byte count of the obtained electronic file for consistency comparison.

[0125] Total file number consistency check. For a single archive information package, the number of sub-files in the electronic file information package, i.e., the total number of files, can be checked to see if it is consistent with the number of files described in the metadata or submission record. Specifically, the "Basic Information.XML" in a single archive information package is parsed to obtain the value of the sub-file number (number of files) field, and the total number of electronic files obtained is calculated for consistency comparison.

[0126] Total page count consistency check. For a single archive information package, it is possible to check whether the total number of pages in the electronic file is consistent with the number of files described in the metadata or submission record. The total number of pages field value can be obtained by parsing the "Basic Information.XML" in a single archive information package, and the total number of pages of the obtained electronic file can be calculated for consistency comparison.

[0127] Filing scope integrity test. For a single archive information package, check whether all the files that need to be archived in the entire process of electronic file formation specified by archive classification and event or business type have been submitted for archiving, such as the revision process draft of electronic official documents, official document approval draft, law enforcement process documents of administrative service matters, approval process documents, etc. All need to be archived. Filing scope integrity test is to check whether the archived files are submitted completely according to the archiving requirements. Specifically, the "Archiving Scope Standard Configuration File.XML" can be obtained from the configuration center and parsed to obtain the directory of files to be archived with the attribute "required"; parse the electronic file component directory in the metadata of the electronic archive to be tested, and match it one by one with the directory of files to be archived. If the directory of files to be archived with the attribute "required" is matched, and there are files under the electronic file component directory, the archive scope integrity test passes.

[0128] Archiving information package structure integrity check. Check whether the archived electronic files are assembled, sorted, and stored according to the specified requirements. Specifically, obtain the "Archiving Scope Standard Configuration File.XML" from the configuration center and parse it to obtain the archived file directory with the attribute "required"; trace back the relative path of the electronic file storage based on the specific archived electronic file, that is, the actual archive directory structure; start from the root directory and match downward step by step until the archived directory ends. If the actual archive directory structure is consistent with the archived directory structure or does not exceed the configured directory structure range, the archived electronic file meets the component requirements of the archive scope standard configuration file.

[0129] Archive information package metadata description integrity check.

[0130] Obtain the metadata description file stored in XML format from the batch transfer information package and parse it; the batch transfer information package must include descriptive information containing the description of this batch transfer, including at least the transfer batch number or number, the number of files, the size of the information package, the start and end numbers, the transfer time and other fields. The batch transfer information package must also include the list of files submitted in an array structure, including at least the unique item number or file number, the archive number or department name and other information; the consistency between the number of files and the number of item information in the file list must be checked; the item number or file number of the file must not exceed the start and end number range.

[0131] Secondly, obtain the metadata description file stored in XML format from the single archive information package and parse it; the single archive information package can at least parse out the basic information structure containing fields such as file number, archive number, filing unit, archiving date, title, retention period, confidentiality level, etc., the process information structure containing fields such as link, processor, processing time, processing department, etc., and the electronic file attribute information structure containing archiving directory, electronic file component information description, electronic signature information and other descriptive information about the archived electronic file sub-components; it is necessary to detect the consistency of the file number in the single archive information package and the file number in the batch transfer information package; it is necessary to detect the consistency of the actual archived electronic files and their directory structure with the files and their directory structure in the metadata description.

[0132] After completing the above tests, the integrity test of the metadata description of the batch transfer information package and the metadata description of the single archive information package in the archive information package is completed.

[0133] Check the integrity of electronic file content through archiving standard configuration. Through electronic file templates and element configuration, identify and check whether the content information, keyword information, graphic image information, electronic signature information and link attachment information contained in the electronic file are complete, including:

[0134] Check the integrity of electronic document signature elements through archiving standard configuration. According to the configuration of the necessity of signing the archived electronic documents and the signature types such as signature, seal, and seal, confirm whether the electronic document contains electronic signature, electronic seal, electronic seal and other element information through signature field information identification; according to the signature position, signature type and coordinate configuration of the electronic document template, check whether the signature elements of the electronic document are complete through signature field identification and matching, including whether the specified position contains a signature, whether it contains a specified type of signature, etc. The integrity detection of the electronic document signature elements helps to confirm the legal effect of the electronic document.

[0135] Check the integrity of electronic file content data through archiving standard configuration. Identify the template ID of the electronic file, and obtain the template configuration corresponding to the template ID from the configuration center; according to the control coordinates and fill-in attribute configuration of the template configuration, use OCR to identify whether the content of the corresponding control of the electronic file has been filled in; according to the keywords and necessity configuration of the template configuration, use OCR to identify whether the corresponding keyword elements of the electronic file are complete; according to the keywords, content recognition coordinate configuration and necessity configuration of the template configuration, use OCR to identify whether the content information elements corresponding to the keywords of the electronic file are complete; according to the recognition coordinate area and image element configuration of the template configuration, use image recognition matching to detect whether the corresponding image elements are complete.

[0136] Data integrity check of electronic file attachments refers to checking whether the corresponding file has been archived based on the link or attachment information description in the electronic file content.

[0137] Full-text search link tags for the electronic files to be tested, and download the corresponding electronic files. Calculate their hash values ​​to match them with the electronic files to be tested. If there are files that can be matched, it means that the attachment data has been submitted for archiving. Search the attachment keywords set in the electronic files to be tested, and retrieve the corresponding attachment names, and perform fuzzy matching of the file names with the electronic files to be tested. When the fuzzy matching degree exceeds the configured value, it means that the attachment file has been submitted for archiving.

[0138] Testing metadata integrity through archiving standard configuration means testing the integrity of the metadata parsed in the data to be tested through the metadata description items, metadata mandatory items, metadata continuity detection items, and electronic signature and digital attribute description requirements in the archiving standard configuration, including:

[0139] Metadata item integrity check. According to the metadata item configuration in the configured metadata description standard, check whether the obtained metadata items are missing; metadata mandatory description item detection. According to the mandatory item configuration in the configured metadata description standard, check whether the obtained metadata mandatory items have null values; metadata continuity detection. According to the continuity detection item configuration in the configured metadata description standard, check whether the archive number, sequence number within the file, archive serial number and other user-defined metadata items with continuous numbering properties of all the archive metadata to be detected are continuous and whether they start numbering from the specified starting number, etc., to avoid skipping or missing archive data;

[0140] Process information integrity detection: according to the key wording information configuration in the configured metadata cataloging standard, detect whether the acquired process information structure metadata contains key process information description, so as to confirm whether the processing process information or link information contained in the archived electronic file metadata is complete and standardized;

[0141] The sub-file attribute information integrity check is based on the configured electronic file signature element configuration, incomplete archiving configuration, etc., to check whether the obtained electronic file attributes contain metadata descriptions such as electronic signature information or digital attribute information in addition to basic information metadata such as electronic file name, size, format, etc., so as to confirm the metadata integrity of the specific object of the archived electronic file.

[0142] Summarize and return the results of each integrity test. According to the integrity test strategy, each test item is executed to see if it passes, summarize the execution of the test and output the test results. If all the tests pass, the overall integrity test passes, otherwise it fails. The output test results include overall test result feedback, single file test result feedback, single file test result feedback and the reason for failure. According to the input test result feedback type, the overall integrity test result, each integrity test result and integrity test report are fed back respectively. Among them, the integrity test report module is integrated into the four-property test report, which is a visual presentation of the four-property test results. The four-property test report including the integrity test is solidified and stored through digital signature technology, which can be used as a deterministic test result and voucher to the electronic archive system.

[0143] By executing the above-mentioned detection, the present invention realizes the integrity detection of electronic archives, verifies the integrity of the electronic file process and background information based on the backtracking and restoration detection of the stored evidence data, verifies the integrity of the evidence associated with the signing of the electronic file and the archiving process based on the stored evidence data, and ensures the integrity of the content, structure and metadata of the electronic file based on the archiving standard configuration detection combined with the requirements of the "General Requirements for the Detection of Document-type Electronic Archives" (DA / T 70), which solves the problem that the existing integrity detection of electronic archives can only be based on a time point, a single and incomplete basis, and fundamentally solves the problem of integrity and reliability detection of electronic archives.

[0144] The exemplary embodiment of the present application also provides an electronic device, comprising: at least one processor; and a memory connected to the at least one processor in communication. The memory stores a computer program that can be executed by the at least one processor, and the computer program is used to cause the electronic device to perform the method according to the embodiment of the present application when executed by the at least one processor.

[0145] The exemplary embodiment of the present application further provides a non-transitory computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor of a computer, is used to cause the computer to perform a method according to an embodiment of the present application.

[0146] The exemplary embodiments of the present application further provide a computer program product, including a computer program, wherein when the computer program is executed by a processor of a computer, it is used to enable the computer to execute the method according to the embodiment of the present application.

[0147] refer to Figure 5 , the structural block diagram of the electronic device 300 that can be used as the server or client of the present application will now be described, which is an example of a hardware device that can be applied to various aspects of the present application. The electronic device is intended to represent various forms of digital electronic computer equipment, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices and other similar computing devices. The components shown herein, their connections and relationships, and their functions are only examples, and are not intended to limit the implementation of the present application described and / or required herein.

[0148] The electronic device 300 includes a computing unit 301, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 302 or a computer program loaded from a storage unit 308 into a random access memory (RAM) 303. In the RAM 303, various programs and data required for the operation of the device 300 can also be stored. The computing unit 301, the ROM 302, and the RAM 303 are connected to each other via a bus 304. An input / output (I / O) interface 305 is also connected to the bus 304.

[0149] A plurality of components in the electronic device 300 are connected to the I / O interface 305, including: an input unit 306, an output unit 307, a storage unit 308, and a communication unit 309. The input unit 306 may be any type of device capable of inputting information to the electronic device 300, and the input unit 306 may receive input digital or character information, and generate key signal inputs related to user settings and / or function control of the electronic device. The output unit 307 may be any type of device capable of presenting information, and may include, but is not limited to, a display, a speaker, a video / audio output terminal, a vibrator, and / or a printer. The storage unit 308 may include, but is not limited to, a disk, an optical disk. The communication unit 309 allows the electronic device 300 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks, and may include, but is not limited to, a modem, a network card, an infrared communication device, a wireless communication transceiver, and / or a chipset, such as a Bluetooth device, a WiFi device, a WiMax device, a cellular communication device, and / or the like.

[0150] The computing unit 301 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 301 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The computing unit 301 performs the various methods and processes described above.

Claims

1. An electronic file integrity detection system, characterized in that: include: The archive data receiving module, the integrity rule configuration module, the integrity detection module, and the detection report generation module, wherein the integrity detection module includes: a data parsing unit, a policy loading unit, a detection execution unit, and a detection result feedback unit. The archive data receiving module receives the electronic archive file data; the data parsing unit parses the electronic archive file data to be detected, the policy loading unit calls the integrity rule configuration module of the configuration center to load the integrity detection policy, the detection execution unit verifies the integrity of the electronic file and metadata process background through the backtracking evidence data of the evidence storage center, detects the integrity of the electronic archive evidence data through electronic signatures, signed data, and associated data, and detects the integrity of the archive information package, the integrity of the electronic file content, and the integrity of the metadata through the archiving standard configuration; the detection result feedback unit summarizes the results of various integrity tests, and the detection report generation module renders the data and embeds it into the detection report in a structured manner; The integrity rule configuration module includes: an archive classification configuration unit, an archive information package structure standard configuration unit, an electronic file template standard configuration unit, a metadata description standard configuration unit, and an integrity detection strategy configuration unit. The archive classification configuration unit configures the necessity attribute and the signature necessity attribute for each archive file directory, and configures the associated file template ID. After the configuration is completed, an archive material range configuration file in XML format is formed; the electronic file template standard configuration unit configures a fixed-style file through a template to generate an integrity detection standard; the metadata description standard configuration unit configures metadata complete description items and mandatory description items according to the DA / T 46 standard, sets metadata coding, metadata name, necessity, and generates an XML format metadata configuration file in combination with the detection standard; the integrity detection strategy configuration unit sets different integrity detection execution standards according to different archive classifications and stages; The process of verifying the background integrity of the electronic file and metadata by tracing back the evidence data through the evidence center includes: finding the pre-signing file ID through the signed file, tracing back the original text through the signed file hash value, finding the corresponding electronic file through prevFileId, and calculating the hash value and comparing it with the corresponding prevFileHash for consistency; calculating the original text hash through the signature field information and comparing it with the prevFileHash of the evidence center for consistency, tracing back the complete signing process to confirm that the electronic file signing process is complete; obtaining all business evidence data from the evidence center through the business ID, parsing to obtain the file list, screening the file ID of the same electronic file signing change process through prevFileId, and retaining the last file; using the electronic file sequence ID and the corresponding file hash value, one by one comparing with the electronic file sequence ID and the corresponding file hash value to be detected, to detect and confirm the integrity of the business process of electronic file formation.

2. The integrity detection system according to claim 1, characterized in that: The integrity rule configuration module configures a full-tree model for archiving standards, establishes archive classification standards based on the entire archive, and supports a multi-level structure to form a full-tree model. Among them, different standards are established according to different categories, businesses, and matters of archives to construct a classification architecture to form a trunk; electronic archive directories are formed according to component rules to construct file directories to form leaves, and archive data elements including electronic files, evidence files, and metadata extraction information form leaf veins to construct an archiving standard configuration full-tree model.

3. The integrity detection system according to claim 1 or 2, characterized in that: The data parsing unit parses the electronic archive data to be detected, including, in the electronic archive formation and archiving stage, calculating the hash value of the electronic file and the MD5 value of the metadata string in sequence, obtaining the metadata structure, retrieving the hash value and MD5 value of the corresponding electronic file in the evidence storage center, comparing and parsing them one by one, and obtaining the electronic file to be detected and the metadata structure; after the archive file is formed, obtaining the archive information package through data exchange, calculating the hash value of the archive total package, retrieving the corresponding evidence data hash value and the total package hash value through the evidence ID for consistency comparison, and decompressing the archive total package to form a single archive information package sequence; retrieving the corresponding archive information package hash value of the evidence storage center through the archive ID and comparing it with the hash value of the single archive information package one by one, decompressing the single archive information package, calculating the file hash value in sequence and comparing it with the file hash value in the evidence data one by one, decompressing the archive information package step by step, parsing the XML format metadata file and string, and obtaining the electronic file to be detected and the metadata structure.

4. The integrity detection system according to any one of claims 1 to 3, characterized in that: The detection parameters include: archive classification, event or business type, archive file stage, and data filtering conditions; the data structure to be detected includes: a hash file list and metadata json string before archiving is completed, a ZIP or EEP format archive information package after archiving, decompressing a single archive information package to obtain an electronic file and metadata description XML format file, parsing the XML file and metadata json string, and obtaining a metadata structure including basic information, process information, archiving configuration information, electronic file component information, and electronic file attribute information.

5. A method for detecting the integrity of an electronic file, characterized in that: Acquire and parse electronic archive data, load the integrity detection strategy of the four-property detection model; detect the integrity of the electronic file and metadata archiving process and background information through the stored evidence data; detect the integrity of the electronic file data through electronic signatures, signed evidence data, and associated evidence data; Detect the content structure of electronic archive data information packages, electronic file content, and metadata integrity through archiving standard configuration; Summarize and return the results of various integrity tests, render the data, and embed them into the test report in a structured manner; The loading four-property detection model integrity detection strategy includes: obtaining and loading the corresponding four-property detection model from the configuration center according to the acquired archive classification, event or business type, and stage, and performing subsequent detection according to the configured integrity detection rules; The method of detecting the integrity of the electronic file and metadata archiving process and background information through the evidence data includes: searching the prevFileId and prevFileHash of the pre-signed file by signing the file to trace back the original text, searching the corresponding electronic file by prevFileId, and calculating the hash value to compare with the corresponding prevFileHash for consistency; calculating the original text hash by the signature field information and comparing it with the prevFileHash of the evidence center for consistency, tracing back the complete signing process to confirm that the signing process of the electronic file is complete; parsing the metadata of the signing process information, comparing the consistency of the business stage information of the evidence center with the business stage information of the metadata of the electronic file to be detected, and comparing the consistency of the operator or processor information, operation time or processing time information, processing opinions, and processing department information at each stage one by one; verifying the integrity of the electronic file includes: obtaining all business evidence data from the evidence center through the business ID, parsing to obtain the file list, screening the file ID of the same electronic file filling change process through signPlaceFieldId, and retaining the last file; comparing the electronic file sequence ID and the corresponding file HASH value finally obtained with the electronic file sequence ID and the corresponding file HASH value to be detected One by one, to detect and confirm that the electronic file forms a business process.

6. The integrity detection method according to claim 5, characterized in that: The archive classification configuration unit configures the necessity attribute and the signature necessity attribute for each archive file directory and configures the associated file template ID. After the configuration is completed, an archive material range configuration file in XML format is formed; The electronic document template standard configuration unit configures fixed-style files through templates and generates integrity detection standards. The metadata description standard configuration unit configures metadata complete description items and mandatory description items according to DA / T 46 standards, sets metadata codes, metadata names, and necessity, and generates metadata configuration files in XML format in combination with detection standards. The integrity detection strategy configuration unit sets different integrity detection execution standards according to different archive classifications and stages.

7. The integrity detection method according to claim 5 or 6, characterized in that: The data parsing unit parses the electronic archive data to be detected, including, in the electronic archive formation archiving stage, calculating the electronic file hash value and the key MD5 value of the metadata json string in sequence, obtaining the metadata structure, retrieving the file ID of the evidence storage center for comparison and parsing one by one, and after the archive file is formed, obtaining the archive information package through data exchange, calculating the archive total package hash value, retrieving the corresponding evidence data hash value through the evidence ID and the total package hash value for consistency comparison, decompressing the archive total package to form a single archive information package sequence; retrieving the corresponding archive information package hash value of the evidence storage center through the archive ID and comparing it with the single archive information package hash value one by one, decompressing the single archive information package, calculating the file hash value in sequence and comparing it with the file hash value in the evidence data one by one, decompressing the archive information package step by step, parsing the XML format metadata file and the json string, and obtaining the electronic file and metadata to be detected.

8. The integrity detection method according to claim 5 or 6, characterized in that: Testing the integrity of evidence data through electronic signatures, signed data, and associated data includes obtaining electronic signature information from the evidence storage center based on the file ID, extracting signature type, signature rule, signature time, signer, signature result, certificate, certificate chain, certificate revocation sequence, signature algorithm identifier, and electronic seal related information, performing consistency comparison with the signer, signature time, and certificate information extracted from the signature field of the archived file to verify the integrity of the electronic signature, and performing consistency comparison with the electronic signature information structure parsed from a single electronic archive and / or archive information package to confirm the integrity of the electronic signature metadata; Check each signature field of the electronic file, compare the evidence file ID and hash value corresponding to each signature field in the metadata description with the archived evidence file ID and hash value one by one, and compare the associated evidence ID and hash value corresponding to each electronic file in the metadata description with the archived evidence file ID and hash value one by one to verify the integrity of the electronic file associated evidence information; parse the metadata description information stored in XML format in a single archive information package, obtain the associated evidence file ID and hash value corresponding to each signature field, the associated evidence file ID and hash value corresponding to the file to be tested, the associated file ID and hash value corresponding to the single archive, and the evidence file ID and hash value in the evidence folder, and compare them one by one to check the integrity of the evidence files in the archived information package.

9. The integrity detection method according to claim 5 or 6, characterized in that: Testing the content structure, electronic file content, and metadata integrity of electronic archive data information packages through archiving standard configuration includes: parsing the "Description File.XML" in the information package to obtain the field values ​​of the total number of pieces and the total number of bytes for archiving and transfer, and comparing them with the number of electronic archives to be tested and the total number of bytes of electronic files for consistency; obtaining the field values ​​of the total number of pieces and the total number of bytes recorded in the smart form, and comparing them with the number of electronic archives to be tested and the total number of bytes of electronic files for consistency, to detect the integrity of the content structure of the information package; parsing the "Basic Information.XML" in a single archive information package based on batch submission data or a single archive information package to obtain the field values ​​of the sub-file number and the total number of pages, and comparing the total number of electronic files and the total number of pages of electronic files with the number of files described in the metadata or records for consistency, and detecting whether the total number of bytes is consistent; obtaining the "Archiving Scope Standard Configuration File.XML" from the configuration center for parsing, obtaining the directory of files to be archived with the attribute of "required", parsing the directory of electronic file components in the metadata of the electronic archive to be tested, and matching them one by one with the directory of files to be archived, to detect the integrity of the archiving scope. property; obtain the "archiving scope standard configuration file.XML" from the configuration center and parse it, obtain the archived file directory with the attribute of "required" from the configuration center, trace back the relative path of the archived electronic file storage to obtain the archived directory structure; match from the root directory step by step until the archived directory is matched, and detect the integrity of the archived information package structure; obtain the metadata description file stored in XML format from the batch transfer information package, obtain the metadata description file stored in XML format from the single archive information package, parse out the fields containing the basic information structure, process information structure, electronic file attribute information structure, and archived electronic file sub-item description information, detect the consistency of the single archive information package and the batch transfer information package, the consistency of the archived electronic file and its directory structure with the file and its directory structure in the metadata description, and detect the integrity of the metadata description of the archived information package; through the electronic file template and element configuration, identify and detect whether the content information, keyword information, graphic image information, electronic signature information and link attachment information contained in the electronic file are complete to detect the content integrity of the electronic file.

10. The integrity detection method according to claim 5 or 6, characterized in that: The integrity of the electronic file content data is detected through the archiving standard configuration. According to the control coordinates and filling attribute configuration configured in the template, the electronic file corresponding control is identified through OCR to see whether the content is filled. According to the keywords and necessity configuration configured in the template, the electronic file corresponding keyword elements are identified through OCR to see whether the content information elements corresponding to the keywords in the electronic file are complete. According to the keywords, content recognition coordinate configuration and necessity configuration configured in the template, the electronic file corresponding keyword corresponding content information elements are identified through OCR to see whether the content information elements are complete. According to the recognition coordinate area and image element configuration configured in the template, the image recognition matching is used to detect whether the corresponding image metadata is complete. The full-text search link label of the electronic file to be detected is matched with the electronic file to be detected, and the file name is fuzzy matched with the electronic file to be detected to detect the integrity of the electronic file attachment data. The metadata parsed in the data to be detected is tested for integrity through the metadata recording items, metadata mandatory items, metadata continuity detection items, and electronic signature and digital attribute recording requirements in the archiving standard configuration. According to the key wording information configuration in the configured metadata cataloging standard, the key process information description in the process information structure metadata is checked to check the integrity of the metadata items; according to the configured electronic file signature element configuration and incomplete archiving configuration, the archived electronic file attributes are checked to see whether they contain electronic signature information or digital attribute information in addition to the basic information metadata to check the integrity of the sub-file attribute information.

11. An electronic device, comprising: processor; and a memory storing a program, wherein the program includes instructions, which, when executed by the processor, cause the processor to execute the electronic archive integrity detection method according to any one of claims 5-10.

12. A non-transitory computer-readable storage medium storing computer instructions, wherein: The computer instructions are used to enable the computer to execute the electronic archive integrity detection method according to any one of claims 5-10.

Images