A file verification method, device, equipment and medium

Abstract

The present invention relates to the field of information verification, and discloses a file verification method, device, equipment and medium. By responding to a verification request for a certification document, a document certification document is obtained, and a certification message, a certificate to be verified of a declared terminal and terminal identity information are determined according to the document certification document. If the terminal identity information exists in a preset declared terminal whitelist, public key information is called, and first certification information is determined based on the public key information and the certificate to be verified, and the certification message is decoded to obtain second certification information. If the first certification information and the second certification information are consistent, the certification document verification is passed. In the present invention, the identity of the declared terminal is verified based on the whitelist to ensure the adequacy of the certification document qualification provided by the declared terminal, and then a comparative verification is performed based on the certificate and the message to improve the accuracy of the certification document verification and the information integrity of the document information certification process pointed to by the certification document.

Description

Technical Field

[0001] The present invention relates to the field of information verification, and in particular to a file verification method, device, equipment and medium. Background Art

[0002] A document is a written proof obtained or filled out when an economic transaction occurs, which records the actual situation of the transaction or matter. It is the original data and important basis for accounting. The exchange of documents between users or enterprises is an indispensable link as a voucher for commercial transactions. With the continuous development of the economy, fraudulent transactions and other bad behaviors are emerging in an endless stream. In real transactions, the process of proving the transaction of commodity data between buyers and sellers becomes indispensable.

[0003] The existing declaration terminal's proof process in the document transaction process is mainly based on the document information being reviewed and signed before submitting it to the verification terminal. The verification terminal can only verify the signature information during the verification process based on the certification document, and cannot ensure the accuracy of the certification process and the integrity of the information in the certification document. Secondly, the declaration terminal needs to authenticate its identity every time after receiving the certification document, which leads to inefficient verification of the certification document. Summary of the invention

[0004] The present invention provides a file verification method, device, equipment and medium to solve the above-mentioned technical problems.

[0005] In a first aspect, a file verification method is provided, comprising:

[0006] In response to a request for verification of a certification document, a document certification document is obtained; a certification message, a certificate to be verified of a declared terminal, and terminal identity information are determined based on the document certification document; if the terminal identity information exists in a preset whitelist of declared terminals, public key information having a mapping relationship with the terminal identity information is called based on the terminal identity information; first certification information is determined based on the public key information and the certificate to be verified; the certification message is decoded to obtain second certification information, and the first certification information is compared with the second certification information; if the first certification information is consistent with the second certification information, the certification document verification is passed, and certification document verification pass information is generated based on the document certification document and displayed on the verification terminal.

[0007] In one embodiment of the present invention, before calling the public key information having a mapping relationship with the terminal identity information according to the terminal identity information, the file verification method also includes: obtaining a declared terminal authority list and a verification business type of the document certification file; determining a target declared terminal authority business type list in the declared terminal authority list based on the terminal identity information; if the target declared terminal authority business type list includes a verification business type, calling the public key information having a mapping relationship with the terminal identity information according to the terminal identity information.

[0008] In one embodiment of the present invention, determining the first proof information based on the public key information and the certificate to be verified includes: decoding the certificate to be verified based on the public key information to obtain declared public key information and a document summary message; decoding the document summary message based on the declared public key information to obtain document summary information, and determining the document summary information as the first proof information.

[0009] In one embodiment of the present invention, after decoding the certificate to be verified based on the public key information, the file verification method also includes: obtaining proof signature information; performing a first signature verification on the proof signature information based on the declared public key information; if the first signature verification passes, performing a second signature verification in a preset declaration terminal signature database based on the proof signature information; if the proof signature information exists in the preset declaration terminal signature database, decoding the document summary message based on the declared public key information to obtain the document summary information, and determining the document summary information as the first proof information, and the document summary information includes a document hash value.

[0010] In one embodiment of the present invention, decoding the proof message to obtain the second proof information includes: decoding the proof message to obtain document data and target hash operation information; converting the document data into a string to obtain a document string to be processed; performing a hash operation on the document string to be processed according to the target hash operation information to obtain a target hash value, and determining the target hash value as the second proof information.

[0011] In one embodiment of the present invention, after determining the certification message, the certificate to be verified and the terminal identity information of the declared terminal according to the document certification file, the file verification method also includes: if the terminal identity information does not exist in the preset declared terminal whitelist, sending an identity authentication request to the declared terminal; receiving the declared terminal identity authentication information, and initiating a declared terminal qualification review based on the declared terminal identity authentication information, and receiving the declared terminal qualification review result, the declared terminal qualification review result includes the review passed and the review failed; if the declared terminal qualification review result is the review passed, updating the preset declared terminal whitelist based on the identity authentication information.

[0012] In one embodiment of the present invention, after generating proof document verification information based on the document certification document and displaying it on the verification terminal, the file verification method also includes: obtaining verification time information of the proof document verification information; generating historical verification information entries based on the proof document verification information and the verification time information, and updating the historical verification information entries to the historical verification information library.

[0013] In a second aspect, a file verification device is provided, comprising:

[0014] A file acquisition module is used to obtain a document certification document in response to a certification document verification request; an identity authentication module is used to determine a certification message, a certificate to be verified of a declared terminal and terminal identity information based on the document certification document; if the terminal identity information exists in a preset declared terminal whitelist, public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information; a file verification module is used to determine first certification information based on the public key information and the certificate to be verified; the certification message is decoded to obtain second certification information, and the first certification information is compared with the second certification information; if the first certification information is consistent with the second certification information, the certification document verification is passed, and certification document verification pass information is generated according to the document certification document and displayed on the verification terminal.

[0015] Secondly, a computer device is also provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the steps of the file verification method in any one of the above embodiments are implemented.

[0016] A computer-readable storage medium is also provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the file verification method in any one of the above embodiments are implemented.

[0017] By means of the above technical solution, the technical solution provided by the embodiment of the present invention has at least the following advantages:

[0018] In the scheme implemented by the above-mentioned file verification method, device, equipment and medium, in response to a request for proof document verification, a document proof document is obtained, and a proof message, a certificate to be verified of the declared terminal and the terminal identity information are determined according to the document proof document. If the terminal identity information exists in the preset declared terminal whitelist, the public key information is called, and the first proof information is determined based on the public key information and the certificate to be verified, and the proof message is decoded to obtain the second proof information. If the first proof information and the second proof information are consistent, the proof document verification passes; in the present invention, the identity of the declared terminal is verified based on the whitelist to ensure the sufficiency of the qualification of the declared terminal to provide the proof document, and secondly, a comparative verification is performed based on the certificate and the message to improve the accuracy of the proof document verification and the information integrity of the document information proof process pointed to by the proof document.

[0019] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0021] Figure 1 is a schematic diagram of an application environment of a file verification method in one embodiment of the present invention;

[0022] Figure 2 A schematic diagram of a flow chart of a file verification method provided by an embodiment of the present invention;

[0023] Figure 3 is a structural schematic diagram of a file verification device in one embodiment of the present invention;

[0024] Figure 4 is a schematic diagram of a structure of a computer device in one embodiment of the present invention;

[0025] Figure 5 It is another structural schematic diagram of a computer device in one embodiment of the present invention. DETAILED DESCRIPTION

[0026] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. The present invention can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are only for illustrating the present invention, not for limiting the scope of protection of the present invention.

[0027] It should be noted that the illustrations provided in the following embodiments are only used to illustrate the basic concept of the present invention in a schematic manner, and thus the illustrations only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0028] In the following description, numerous details are discussed to provide a more thorough explanation of the embodiments of the present invention. However, it is obvious to those skilled in the art that the embodiments of the present invention can be implemented without these specific details. In other embodiments, well-known structures and devices are shown in the form of block diagrams rather than in detail to avoid making the embodiments of the present invention difficult to understand.

[0029] First of all, it should be explained that a document refers to a document or written voucher that records and proves the exchange of funds, goods, services, etc. in business activities. Documents play an important role in business activities. They not only record and prove various transactions, but also serve as important vouchers for business activities. Documents can be used as a basis for dispute resolution and legal proceedings, or as an internal management tool for enterprises to help them manage finance and logistics. Different documents play different roles in business activities. For example, invoices are vouchers for commodity transactions.

[0030] An invoice is an important commercial document used to record and prove the details of a commercial transaction. It is issued by the seller to prove that the seller has received the payment for goods or service fees. It is an original document for accounting and can help companies and individuals record the details of transactions, such as transaction date, content of goods or services, price, quantity, tax rate, etc. At the same time, invoices are also an important basis for tax authorities to conduct tax management. Depending on the content of the transaction and the tax policy, there are different types of invoices, including: value-added tax invoices, ordinary invoices, business tax invoices, motor vehicle sales invoices, used car sales invoices, etc. Invoices usually include invoice name, invoice number, invoice date, buyer name, seller name, goods or service name, specifications, quantity, unit price, total price, tax rate, tax amount, invoice issuer signature, financial seal, etc.

[0031] The declaration terminal refers to the organization or individual responsible for verifying the authenticity and validity of the document during the document verification process. Depending on the different verification methods, the declaration terminal includes but is not limited to tax authorities, third-party verification platforms, internal verification departments of enterprises, etc.

[0032] The present application may also provide the following beneficial effects: verifying the certification business authority of the declaring terminal to ensure the reliability of the qualifications of the declaring terminal and avoiding the responsibility issues of document verification caused by the certification documents that exceed the authority of the declaring terminal; determining the specific information of the hash operation based on the certification message, and then performing the hash operation of the document string, which can be applied to the verification process of different terminals, without the need to agree on the hash operation information in advance, omitting the certification document verification step, and improving the verification efficiency of the certification document; setting up whitelist verification, and initiating verification requests for declaring terminals that do not exist on the whitelist, which can dynamically update the whitelist list, avoid comparing identity information for each verification, reduce the time investment in the certification document verification process, and improve the efficiency of certification document verification; setting up a historical verification information library to provide operations such as calling and viewing historical verification information to facilitate subsequent re-inspection and verification processes.

[0033] The file verification method provided by the embodiment of the present invention can be applied in Figure 1 In application environments such as Figure 1 As shown, Figure 1It is a schematic diagram of an application environment of a file verification method in an embodiment of the present invention, including a verification terminal 101 and a declaration terminal 102, wherein the verification terminal 101 and the declaration terminal 102 can communicate with each other. The verification terminal 101 responds to the verification request of the certification file, obtains the document certification file at the declaration terminal 102, determines the certification message, the certificate to be verified of the declaration terminal and the terminal identity information according to the document certification file, if the terminal identity information exists in the preset declaration terminal whitelist, calls the public key information with a mapping relationship with the terminal identity information according to the terminal identity information, determines the first certification information based on the public key information and the certificate to be verified, decodes the certification message, obtains the second certification information, and compares the first certification information with the second certification information. If the first certification information and the second certification information are consistent, the certification file verification is passed, and the certification file verification pass information is generated according to the document certification file and displayed on the verification terminal.

[0034] Exemplarily, the verification terminal 101 responds to the certificate verification request, obtains the document certification document at the declaration terminal 102, determines the certification message, the certificate to be verified of the declaration terminal and the terminal identity information based on the document certification document, if the terminal identity information exists in the preset declaration terminal whitelist, then calls the public key information, determines the first certification information based on the public key information and the certificate to be verified, decodes the certification message to obtain the second certification information, if the first certification information and the second certification information are consistent, the certification document verification passes; in the present invention, the identity of the declaration terminal is verified based on the whitelist to ensure the sufficiency of the certification document qualifications provided by the declaration terminal, and then compares and verifies based on the certificate and the message to improve the accuracy of the certification document verification and the information integrity of the document information certification process pointed to by the certification document.

[0035] See also Figure 2 As shown, Figure 2 A flowchart of a file verification method provided by an embodiment of the present invention, which can be applied to Figure 1 It should be understood that the method can also be applied to other exemplary implementation environments and specifically executed by devices in other implementation environments. This embodiment does not limit the implementation environment to which the method is applicable. It at least includes steps S210 to S260, which are described in detail as follows:

[0036] In step S210, in response to the certification document verification request, the document certification document is obtained.

[0037] In one embodiment of the present application, a document refers to a document or written certificate that records and proves the exchange of funds, goods, services, etc. in business activities. In the embodiment of the present application, the above-mentioned document includes an invoice. An invoice is an important business document used to record and prove the detailed information of a business transaction. It is issued by the seller to prove that it has received the payment for goods or service fees. It is an original voucher for accounting and can help companies and individuals record detailed information of transactions. The above-mentioned document certification document is used to prove the authenticity and validity of the document. The document certification document is issued by a declaration terminal. The declaration terminal refers to an institution or individual responsible for verifying the authenticity and validity of a document during the document verification process. According to different verification methods, the declaration terminal includes but is not limited to tax authorities, third-party verification platforms, and internal verification departments of companies.

[0038] In one embodiment of the present application, the above-mentioned certification document verification request is initiated by the verification terminal, and its initiation method can be triggered based on the document verification task, or the verification terminal can actively request triggering during the review and active inspection of the document.

[0039] In step S220, the certification message, the certificate to be verified of the declared terminal and the terminal identity information are determined according to the document certification file.

[0040] In one embodiment of the present application, after determining the certification message, the certificate to be verified of the declared terminal and the terminal identity information according to the document certification file, if the terminal identity information does not exist in the preset declared terminal whitelist, an identity authentication request is sent to the declared terminal, the declared terminal identity authentication information is received, and a declared terminal qualification review is initiated based on the declared terminal identity authentication information, and the declared terminal qualification review result is received. The declared terminal qualification review result includes a passed review and a failed review. If the declared terminal qualification review result is a passed review, the preset declared terminal whitelist is updated based on the identity authentication information; a whitelist verification is set, and a verification request is initiated for the declared terminal that does not exist in the whitelist. The whitelist list can be dynamically updated to avoid identity information comparison for each verification, reduce the time investment in the certification document verification process, and improve the certification document verification efficiency.

[0041] In one embodiment of the present application, the certificate to be verified includes at least the sender's public key and digital signature, and may also include the public key of the certificate issuing authority, the certificate validity period, the issuer name, etc.

[0042] In step S230, if the terminal identity information exists in the preset declared terminal whitelist, the public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information.

[0043] In one embodiment of the present application, before calling the public key information having a mapping relationship with the terminal identity information according to the terminal identity information, the declared terminal authority list and the verification business type of the document certification document are obtained, and the target declared terminal authority business type list is determined in the declared terminal authority list based on the terminal identity information. If the target declared terminal authority business type list includes the verification business type, the public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information.

[0044] In one embodiment of the present application, the above-mentioned declaration terminal authority list is used to characterize the scope of the certification authority of the existing declaration terminal for the document certification business obtained by the verification terminal. For example, if the business authority of declaration terminal A is the value-added invoice certification, the verification terminal will not verify and accept it after receiving the bill of lading certification sent by declaration terminal A. The certification business authority of the declaration terminal is verified to ensure the reliability of the declaration terminal's qualifications and avoid the responsibility problem of document verification caused by the declaration terminal's certification documents that exceed the authority.

[0045] In step S240, first certification information is determined based on the public key information and the certificate to be verified.

[0046] In one embodiment of the present application, the certificate to be verified is decoded based on the public key information to obtain the declared public key information and the document summary message, the document summary message is decoded based on the declared public key information to obtain the document summary information, and the document summary information is determined as the first certification information.

[0047] In one embodiment of the present application, proof signature information is obtained, and a first signature verification is performed on the proof signature information based on the declared public key information. If the first signature verification passes, a second signature verification is performed in a preset declaration terminal signature database based on the proof signature information. If the proof signature information exists in the preset declaration terminal signature database, the document summary message is decoded based on the declared public key information to obtain the document summary information, and the document summary information is determined as the first proof information, and the document summary information includes a document hash value.

[0048] In step S250, the certification message is decoded to obtain second certification information, and the first certification information and the second certification information are compared.

[0049] In one embodiment of the present application, the certification message is decoded to obtain document data and target hash operation information, the document data is converted into a string to obtain a document string to be processed, a hash operation is performed on the document string to be processed according to the target hash operation information to obtain a target hash value, and the target hash value is determined as the second certification information.

[0050] In one embodiment of the present application, hash operation is an algorithm in computer science, which can convert data of any length into a hash value of fixed length, which can be used to represent the original data, and can verify the integrity and authenticity of the original data through calculation. Its main features include uniqueness, high efficiency, irreversibility, avalanche effect and conflict resistance. Hash operation has a wide range of applications in computer science, such as in cryptography, data integrity verification, digital signature and other fields. In some implementable environments of the present application, the above-mentioned target hash operation information includes the hash calculation formula of the FNV-1 algorithm. The FNV-1 algorithm can generate a hash value of a fixed length, which can be used for data integrity verification, password storage, etc. Its main advantages are its simplicity and efficiency, and the result can be calculated in a short time; based on the proof message, the specific information of the hash operation is determined, and then the hash operation of the document string is performed, which can be applied to the verification process of different terminals, without the need to agree on the hash operation information in advance, omitting the proof document verification step, and improving the verification efficiency of the proof document.

[0051] It should be noted that the hash operation method of the above-mentioned FNV-1 algorithm is only one feasible operation method of this embodiment, and FNV-1A algorithm, SHA-256 hash operation method, etc. can also be applied. The specific operation formula of the target hash operation information is not limited here.

[0052] In step S260, if the first certification information and the second certification information are consistent, the certification document verification is passed, and certification document verification pass information is generated based on the document certification document and displayed on the verification terminal.

[0053] In one embodiment of the present application, after the certificate verification information is generated based on the document certification document and displayed on the verification terminal, the verification time information of the certificate verification information is obtained, and a historical verification information entry is generated based on the certificate verification information and the verification time information, and the historical verification information entry is updated to the historical verification information library; a historical verification information library is set to provide operations such as calling and viewing the historical verification information to facilitate subsequent re-inspection and verification processes.

[0054] In one embodiment of the present application, the above-mentioned historical verification information library is set in the verification terminal, and can provide functional operations such as viewing, exporting, and deleting in response to the verification terminal user's request.

[0055] It can be seen that the above-mentioned file verification method, device, equipment and medium obtain the document certification document by responding to the certification document verification request, determine the certification message, the certificate to be verified of the declared terminal and the terminal identity information according to the document certification document, if the terminal identity information exists in the preset declared terminal whitelist, then call the public key information, determine the first certification information based on the public key information and the certificate to be verified, decode the certification message to obtain the second certification information, if the first certification information and the second certification information are consistent, the certification document verification is passed; in the present invention, the identity of the declared terminal is verified based on the whitelist to ensure the sufficiency of the certification document qualifications provided by the declared terminal, and secondly, the comparative verification is performed based on the certificate and the message to improve the accuracy of the certification document verification and the information integrity of the document information certification process pointed to by the certification document.

[0056] In addition, the above scheme also includes verifying the certification business authority of the declaring terminal to ensure the reliability of the qualifications of the declaring terminal and avoid the responsibility issues of document verification caused by the certification documents that exceed the authority of the declaring terminal; determining the specific information of the hash operation based on the certification message, and then performing the hash operation of the document string, which can be applied to the verification process of different terminals, without the need to agree on the hash operation information in advance, omitting the certification document verification step, and improving the verification efficiency of the certification document; setting up whitelist verification, and initiating verification requests for declaring terminals that do not exist in the whitelist, and dynamically updating the whitelist list to avoid identity information comparison for each verification, reduce the time investment in the certification document verification process, and improve the certification document verification efficiency; setting up a historical verification information library to provide operations such as calling and viewing historical verification information to facilitate subsequent re-inspection and verification processes.

[0057] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0058] The following describes an embodiment of the device of the present application, which can be used to execute the above embodiments of the present application. For details not disclosed in the embodiment of the device of the present application, please refer to the embodiment of the file verification method of the present application. The device can be applied to Figure 2 The implementation environment shown is that the device can also be applicable to other exemplary implementation environments and specifically configured in other devices. This embodiment does not limit the implementation environment to which the device is applicable.

[0059] In one embodiment, a file verification device is provided, which corresponds one-to-one to the file verification method in the above embodiment. Figure 3 As shown, Figure 330 is a schematic diagram of a file verification device in one embodiment of the present invention, the file verification device includes a file acquisition module 301, an identity authentication module 302, and a file verification module 303. The functional modules are described in detail as follows:

[0060] The document acquisition module 301 is used to obtain the document certification document in response to the certification document verification request;

[0061] The identity authentication module 302 is used to determine the certification message, the certificate to be verified of the declared terminal and the terminal identity information according to the document certification file; if the terminal identity information exists in the preset declared terminal whitelist, the public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information;

[0062] The file verification module 303 is used to determine the first proof information based on the public key information and the certificate to be verified; decode the proof message to obtain the second proof information, and compare the first proof information with the second proof information; if the first proof information and the second proof information are consistent, the proof document verification is passed, and the proof document verification pass information is generated according to the document proof document and displayed on the verification terminal.

[0063] In an apparatus embodiment of the present application, the identity verification module 302 is further used to:

[0064] Obtain a list of declared terminal permissions and the types of verification services for document certification documents;

[0065] Determine a target declared terminal authority service category list in the declared terminal authority list based on the terminal identity information;

[0066] If the target declared terminal authority service category list includes the verification service category, the public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information.

[0067] In an apparatus embodiment of the present application, the identity verification module 302 is further used to:

[0068] If the terminal identity information does not exist in the preset declared terminal whitelist, an identity authentication request is sent to the declared terminal;

[0069] Receive the identity authentication information of the declared terminal, initiate the qualification review of the declared terminal based on the identity authentication information of the declared terminal, and receive the qualification review result of the declared terminal, where the qualification review result of the declared terminal includes the review passing and the review failing;

[0070] If the declared terminal qualification review result is passed, the preset declared terminal whitelist is updated based on the identity authentication information.

[0071] In an apparatus embodiment of the present application, the file verification module 303 is specifically used to:

[0072] Decode the certificate to be verified based on the public key information to obtain the declared public key information and the document summary message;

[0073] The document summary message is decoded based on the declared public key information to obtain the document summary information, and the document summary information is determined as the first certification information.

[0074] In an apparatus embodiment of the present application, the file verification module 303 is specifically used to:

[0075] Decode the proof message to obtain the document data and target hash operation information;

[0076] Convert the document data into a string to obtain the document string to be processed;

[0077] A hash operation is performed on the document character string to be processed according to the target hash operation information to obtain a target hash value, and the target hash value is determined as the second certification information.

[0078] In an apparatus embodiment of the present application, the file verification module 303 is specifically used to:

[0079] Obtain verification time information of the verification pass information of the certification document;

[0080] A historical verification information entry is generated based on the certification document verification pass information and the verification time information, and the historical verification information entry is updated to the historical verification information library.

[0081] In an apparatus embodiment of the present application, the file verification module 303 is further used to:

[0082] Get the proof signature information;

[0083] Performing a first signature verification on the proof signature information based on the declared public key information;

[0084] If the first signature verification is passed, a second signature verification is performed in a preset declaration terminal signature database based on the proof signature information;

[0085] If the preset declaration terminal signature database contains proof signature information, the document summary message is decoded based on the declaration public key information to obtain the document summary information, and the document summary information is determined as the first proof information, wherein the document summary information includes the document hash value.

[0086] The present invention provides a file verification device, which verifies the identity of a declaring terminal based on a whitelist to ensure the sufficiency of the qualification of the certification document provided by the declaring terminal, and then performs comparative verification based on a certificate and a message to improve the accuracy of the certification document verification and the information integrity of the document information certification process pointed to by the certification document.

[0087] For the specific definition of the file verification device, please refer to the definition of the file verification method above, which will not be repeated here. Each module in the above-mentioned file verification device can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0088] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 4 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile and / or volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external client via a network connection. When the computer program is executed by the processor, it implements the functions or steps of a file verification method server side.

[0089] In one embodiment, a computer device is provided. The computer device may be a client, and its internal structure diagram may be as follows: Figure 5 As shown. The computer device includes a processor, a memory, a network interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external server through a network connection. When the computer program is executed by the processor, it realizes the functions or steps of the client side of a file verification method

[0090] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0091] Responding to the request for verification of the supporting documents, obtaining supporting documents for the document;

[0092] Determine the certification message, the certificate to be verified of the declared terminal and the terminal identity information according to the document certification document;

[0093] If the terminal identity information exists in the preset declared terminal whitelist, the public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information;

[0094] Determine first certification information based on the public key information and the certificate to be verified;

[0095] Decoding the certification message to obtain second certification information, and comparing the first certification information with the second certification information;

[0096] If the first certification information and the second certification information are consistent, the certification document verification is passed, and certification document verification pass information is generated based on the document certification document and displayed on the verification terminal.

[0097] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0098] Responding to the request for verification of the supporting documents, obtaining supporting documents for the document;

[0099] Determine the certification message, the certificate to be verified of the declared terminal and the terminal identity information according to the document certification document;

[0100] If the terminal identity information exists in the preset declared terminal whitelist, the public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information;

[0101] Determine first certification information based on the public key information and the certificate to be verified;

[0102] Decoding the certification message to obtain second certification information, and comparing the first certification information with the second certification information;

[0103] If the first certification information and the second certification information are consistent, the certification document verification is passed, and certification document verification pass information is generated based on the document certification document and displayed on the verification terminal.

[0104] It should be noted that the above functions or steps that can be implemented by the computer-readable storage medium or computer device can refer to the relevant descriptions on the server side and the client side in the aforementioned method embodiment. To avoid repetition, they will not be described one by one here.

[0105] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0106] Through the description of the above implementation methods, it is easy for those skilled in the art to understand that the example implementation methods described here can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the implementation methods of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a touch terminal, or a network device, etc.) to execute the method according to the implementation methods of the present application.

[0107] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0108] It should be noted that, although several modules or units of the equipment for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0109] The embodiments described above are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included in the protection scope of the present invention.

Claims

1. A file verification method, characterized in that: The file verification method comprises: Responding to the request for verification of the supporting documents, obtaining supporting documents for the document; Determine the certification message, the certificate to be verified of the declaring terminal and the terminal identity information of the declaring terminal according to the document certification document; If the terminal identity information exists in the preset declared terminal whitelist, calling the public key information having a mapping relationship with the terminal identity information according to the terminal identity information; Determine first certification information based on the public key information and the certificate to be verified; Decoding the certification message to obtain second certification information, and comparing the first certification information with the second certification information; If the first certification information is consistent with the second certification information, the certification document verification is passed, and certification document verification pass information is generated based on the document certification document and displayed on the verification terminal.

2. The file verification method according to claim 1, characterized in that: Before calling the public key information having a mapping relationship with the terminal identity information according to the terminal identity information, the file verification method further includes: Obtain a list of declared terminal permissions and the types of verification services for document certification documents; Determining a target declared terminal authority service category list in the declared terminal authority list based on the terminal identity information; If the target declared terminal authority service category list includes the verification service category, public key information having a mapping relationship with the terminal identity information is called according to the terminal identity information.

3. The file verification method according to claim 1, characterized in that: Determining the first certification information based on the public key information and the certificate to be verified includes: Decoding the certificate to be verified based on the public key information to obtain declared public key information and a document summary message; The document summary message is decoded based on the declared public key information to obtain the document summary information, and the document summary information is determined as the first certification information.

4. The file verification method according to claim 3, characterized in that: After decoding the certificate to be verified based on the public key information, the file verification method further includes: Get the proof signature information; Performing a first signature verification on the certification signature information based on the declared public key information; If the first signature verification is passed, a second signature verification is performed in a preset declaration terminal signature database based on the certification signature information; If the proof signature information exists in the preset declaration terminal signature database, the document summary message is decoded based on the declaration public key information to obtain the document summary information, and the document summary information is determined as the first proof information, and the document summary information includes a document hash value.

5. The file verification method according to claim 1, characterized in that: Decoding the certification message to obtain the second certification information includes: Decoding the certification message to obtain document data and target hash operation information; Convert the document data into a character string to obtain a character string of the document to be processed; A hash operation is performed on the document string to be processed according to the target hash operation information to obtain a target hash value, and the target hash value is determined as the second certification information.

6. The file verification method according to any one of claims 1 to 5, characterized in that: After determining the certification message, the certificate to be verified of the declaration terminal and the terminal identity information according to the document certification file, the file verification method further includes: If the terminal identity information does not exist in the preset declared terminal whitelist, sending an identity authentication request to the declared terminal; Receive the identity authentication information of the declared terminal, initiate a qualification review of the declared terminal based on the identity authentication information of the declared terminal, and receive a result of the qualification review of the declared terminal, wherein the result of the qualification review of the declared terminal includes a passing review and a failing review; If the qualification review result of the declared terminal is passed, the preset declared terminal whitelist is updated based on the identity authentication information.

7. The file verification method according to any one of claims 1 to 5, characterized in that: After generating the certificate verification pass information according to the document certificate and displaying it on the verification terminal, the document verification method further includes: Obtain verification time information of the verification pass information of the certification document; A historical verification information entry is generated based on the certification document verification pass information and the verification time information, and the historical verification information entry is updated to a historical verification information library.

8. A file verification device, characterized in that: The file verification device comprises: A document acquisition module, for acquiring a document certification document in response to a certification document verification request; An identity authentication module, used to determine the certification message, the certificate to be verified of the declared terminal and the terminal identity information of the declared terminal according to the document certification file; if the terminal identity information exists in the preset declared terminal whitelist, call the public key information having a mapping relationship with the terminal identity information according to the terminal identity information; The file verification module is used to determine the first proof information based on the public key information and the certificate to be verified; decode the proof message to obtain the second proof information, and compare the first proof information with the second proof information; if the first proof information is consistent with the second proof information, the proof document verification is passed, and the proof document verification pass information is generated according to the document proof document and displayed on the verification terminal.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the file verification method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the file verification method according to any one of claims 1 to 7 are implemented.

Images