Transaction system and method based on digital signature

Abstract

The invention belongs to the technical field of electronic commerce, and discloses a transaction system and method based on a digital signature, and the method comprises the steps: obtaining the transaction information and identity information of a user through an embedded verification terminal after receiving a transaction request of the user, obtaining the digital signature of the user from the transaction information, and carrying out the verification of the digital signature. The embedded verification terminal receives identity information, sends a query request to the certificate management terminal based on a certificate identifier corresponding to the identity information and receives a signature document fed back by the certificate management terminal based on the query request, the embedded verification terminal decrypts the digital signature by using the public key to obtain a first digest value, performs digital digest calculation on the signature document to obtain a second digest value, and sends the second digest value to the certificate management terminal; and comparing the first digest value with the second digest value, if the first digest value is consistent with the second digest value, determining that the digital signature verification of the user is passed, and responding to the transaction request to complete the transaction, so that hidden dangers of information interception and stealing, information tampering, information counterfeiting and the like can be prevented, and the security of the transaction is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of e-commerce, and in particular to a transaction system and method based on digital signature. Background Art

[0002] With the popularization of the Internet and the development of information technology, the e-commerce model based on online transactions has gradually replaced the traditional transaction mode. For both parties of online transactions, how to confirm the authenticity of the other party's identity and how to confirm the authenticity and validity of the electronic contract sent by the other party is a key issue to be solved first. The current e-commerce system faces the following security risks, such as information interception and theft, information tampering and information forgery, which makes the current transaction mode have poor security problems.

[0003] The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art. Summary of the invention

[0004] The main purpose of the present invention is to provide a transaction system and method based on digital signatures, aiming to solve the following security risks faced by current e-commerce systems, such as information interception and theft, information tampering and information forgery, which make the current transaction method have poor security technical problems.

[0005] To achieve the above-mentioned object, the present invention provides a digital signature-based transaction system, which includes an embedded verification terminal and a certificate management terminal;

[0006] The embedded verification terminal is used to obtain the transaction information and identity information of the user upon receiving the transaction request of the user, obtain the digital signature of the user from the transaction information, and send a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information;

[0007] The certificate management terminal is used to receive the query request sent by the embedded verification terminal, and feed back the signature document to the embedded verification terminal based on the query request;

[0008] The embedded verification terminal is used to use the public key to decrypt the digital signature to obtain a first summary value, perform digital summary calculation on the signed document to obtain a second summary value, compare the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the digital signature of the user has been verified, and respond to the transaction request to complete the transaction.

[0009] In some embodiments, the digital signature-based transaction system further includes a digital signature client;

[0010] The digital signature client is used to obtain the digital signature type preset by the user and the operation information input by the user after establishing a connection with the embedded verification terminal;

[0011] The digital signature client is used to determine the curve trajectory according to the operation information to obtain the signature text, calculate the offset angle of each signature text in the signature text based on the signature pattern frame to determine the offset position of the font, translate each signature text based on the offset position, and after the signature text is translated, determine the center pattern corresponding to the signature pattern frame based on the preset digital signature type, and generate the user's digital signature according to the signature text and the center pattern.

[0012] In some embodiments, the embedded verification terminal is used to read the signature image and signature information of the digital signature, determine the number of embedded bits, hide the signature information in each pixel of the signature image based on the number of embedded bits, set the least significant bit of the embedded signature image to 0 to complete preprocessing, read the signature information in a preset encoding form, and store it in the last four bits of each pixel in the preprocessed signature image to obtain a signed document.

[0013] In some embodiments, the digital signature-based transaction system further includes a transmission module, and the digital signature client establishes a connection with the embedded verification terminal through the transmission module;

[0014] The transmission module is used to use the digital signature client as a central device and the embedded verification terminal as a peripheral device during the communication process, detect the wireless connection activation state of the central device, and after the wireless connection is in the activation state, scan all services and features under the embedded verification terminal, select target services and features from all services and features, and establish a connection between the digital signature client and the embedded verification terminal based on the target services and features.

[0015] In some embodiments, the certificate management terminal includes: a key generation module, a key management module, a user registration module, and a data database;

[0016] The user registration module is used to respond to a registration request, obtain the user's identity information, verify the identity information, and after the verification is passed, send the identity identifier corresponding to the identity information to the information database;

[0017] The data database is used to perform conflict verification on the received identity identifiers and feed back the verification results to the user registration module;

[0018] The user registration module is used to send a certificate application to the key management module when the verification result is that the verification is passed;

[0019] The key management module is used to perform validity detection on the certificate application after receiving it, and if it is a valid certificate application, apply for a certificate from the key generation module;

[0020] The key generation module is used to input the certificate information and feed back the input certificate to the user registration module;

[0021] The user registration module is used to send the certificate and the certificate identification to the data database for storage.

[0022] In addition, to achieve the above-mentioned purpose, the present invention further proposes a transaction method based on digital signature, which is applied to the transaction system based on digital signature as described above, and comprises the following steps:

[0023] Upon receiving a transaction request from a user, the embedded verification terminal obtains the transaction information and identity information of the user, obtains the digital signature of the user from the transaction information, and sends a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information;

[0024] The certificate management terminal receives the query request sent by the embedded verification terminal, and feeds back the signature document to the embedded verification terminal based on the query request;

[0025] The embedded verification terminal uses the public key to decrypt the digital signature to obtain a first summary value, performs digital summary calculation on the signed document to obtain a second summary value, compares the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the digital signature of the user has been verified, and responds to the transaction request to complete the transaction.

[0026] In some embodiments, the method further comprises:

[0027] After establishing a connection with the embedded verification terminal, the digital signature client obtains the digital signature type preset by the user and simultaneously obtains the operation information input by the user;

[0028] The digital signature client determines the curve trajectory according to the operation information to obtain the signature text, calculates the offset angle of each signature text in the signature text based on the signature pattern frame to determine the offset position of the font, translates each signature text based on the offset position, and after the signature text is translated, determines the center pattern corresponding to the signature pattern frame based on the preset digital signature type, and generates the user's digital signature according to the signature text and the center pattern.

[0029] In some embodiments, the method further comprises:

[0030] The embedded verification terminal reads the signature image and signature information of the digital signature, determines the number of embedded bits, hides the signature information in each pixel of the signature image based on the number of embedded bits, sets the least significant bit of the embedded signature image to 0 to complete preprocessing, reads the signature information in a preset encoding form, and stores it in the last four bits of each pixel in the preprocessed signature image to obtain a signed document.

[0031] In some embodiments, the digital signature client establishes a connection with the embedded verification terminal through a transmission module, and the method further includes:

[0032] During the communication process, the transmission module uses the digital signature client as a central device and the embedded verification terminal as a peripheral device, detects the wireless connection opening status of the central device, and after the wireless connection is in the opening state, scans all services and features under the embedded verification terminal, selects target services and features from all services and features, and establishes a connection between the digital signature client and the embedded verification terminal based on the target services and features.

[0033] In some embodiments, the method further comprises:

[0034] The user registration module responds to the registration request, obtains the user's identity information, verifies the identity information, and after the verification is passed, sends the identity identifier corresponding to the identity information to the data database;

[0035] The data database performs a conflict check on the received identity identifier and feeds back the check result to the user registration module;

[0036] When the verification result is that the verification is passed, the user registration module sends a certificate application to the key management module;

[0037] After receiving the certificate application, the key management module performs a validity check on the certificate application, and if it is a valid certificate application, applies for a certificate from the key generation module;

[0038] The key generation module enters the certificate information and feeds back the entered certificate to the user registration module;

[0039] The user registration module certificate and certificate identification are sent to the data database for storage.

[0040] The present invention receives a transaction request from a user through an embedded verification terminal, obtains the transaction information and identity information of the user, obtains the digital signature of the user from the transaction information, and sends a query request to a certificate management terminal based on a certificate identifier corresponding to the identity information; the certificate management terminal receives the query request sent by the embedded verification terminal, and feeds back a signature document to the embedded verification terminal based on the query request; the embedded verification terminal decrypts the digital signature using a public key to obtain a first summary value, performs digital summary calculation on the signature document to obtain a second summary value, compares the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, determines that the digital signature of the user has been verified, and responds to the transaction request to complete the transaction, which can prevent hidden dangers such as information interception and theft, information tampering, and information forgery, thereby improving the security of transactions. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a structural block diagram of the first embodiment of the transaction system based on digital signature of the present invention;

[0042] Figure 2 It is a flowchart of the first embodiment of the transaction method based on digital signature of the present invention.

[0043] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0044] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0045] The embodiment of the present invention provides a transaction system based on digital signature. Figure 1 , Figure 1 This is a structural block diagram of a first embodiment of a transaction system based on digital signature of the present invention.

[0046] In this embodiment, the transaction system based on digital signature includes a certificate management terminal 10 and an embedded verification terminal 20. When a user is conducting a transaction, the embedded verification terminal 20 in this embodiment needs to obtain the user's transaction information and identity information after receiving the user's transaction request. The user needs to verify the digital signature when conducting a transaction. Specifically, the user's digital signature can be obtained from the transaction information. At the same time, the certificate identifier corresponding to the identity information can be obtained, and a query request can be sent to the certificate management terminal based on the certificate identifier.

[0047] After receiving the query request sent by the embedded verification terminal, the certificate management terminal 10 can obtain the corresponding signature document according to the certificate identifier contained in the query request, and feed back the obtained signature document to the embedded verification terminal 10. The signature document is bound to the user's identity information. When a user is detected to be conducting a transaction, the signature document corresponding to the user can be obtained. The signature document is bound to the certificate used when the user registered. The user can choose different digital signatures when conducting a transaction. Therefore, the above comparison verification is required to ensure that the digital signature is consistent with the user to improve the security of the transaction.

[0048] It should be noted that, in this embodiment, the digital signature is decrypted by the public key, and the first summary value can be obtained by decryption. For the obtained signed document, the digital summary is calculated in this embodiment to obtain the second summary value. The second summary value can be obtained by hash encryption and decryption. The second summary value is essentially a hash value. Then the two summary values ​​are compared. If the first summary value is consistent with the second summary value, it can be determined that the user's digital signature verification is passed, and finally the transaction request is responded to to complete the transaction.

[0049] In some embodiments, before performing digital signature verification, it is necessary to first create a digital signature for the user. Specifically, the digital signature-based transaction system in this embodiment also includes a digital signature client 30. When generating a digital signature, if the digital signature client 30 and the embedded verification terminal 20 have completed the connection, the user's preset digital signature type is determined, and the operation information entered by the user is obtained. The preset digital signature type can be customized by the user. Each digital signature type corresponds to different signature styles and corresponding functions. The digital signature types include company signatures and personal signatures. Furthermore, the curve trajectory can be determined according to the operation information to obtain the signature text, and the user's signature can be determined through operation recognition. After the user completes the signature, the offset angle of the signature text relative to the signature pattern frame can be determined, and the offset position can be determined through the offset angle. Specifically, a coordinate system can be constructed, and the coordinates of the center point of the signature pattern frame and the coordinates of the center point of each text can be determined based on the coordinate system. The above-mentioned offset angle and offset position are calculated based on the two sets of coordinates and the connecting line between the two points, and then each signature text is translated to ensure that the signature text is in the center of the signature pattern frame. After completing the translation of the signature text, the corresponding center pattern is combined with the signature text according to the above-mentioned preset digital signature type to obtain the user's digital signature.

[0050] In some embodiments, after obtaining a digital signature, a corresponding signed document can be obtained based on the digital signature. Specifically, the signature image and signature information of the digital signature are first read. In this embodiment, the least significant bit (LSB) algorithm is used to determine the number of embedded bits, and the signature information is hidden in each pixel of the signature image based on the number of embedded bits. For example, the signature information can be converted into a binary sequence, and the least significant bit (LSB) of the current color channel is extracted for each color channel (R, G, B) in the signature image, and the next bit is taken from the binary sequence of the information to be embedded, and this bit is replaced with the LSB position of the current color channel, and then the least significant bit of the embedded signature image is set to 0, thereby completing the preprocessing of the signature image. After the signature image is preprocessed, the signature information is read in a preset encoding form, which can be an ASCII encoding form. Finally, the signature information in the preset encoding form read out is stored in the last four bits of each pixel in the signature image, and is stored in a four-bit size, thereby obtaining a signed document.

[0051] Furthermore, in this embodiment, the certificate management terminal 10 also includes a key generation module, a key management module, a user registration module and a data database. The user needs to register the certificate first. Specifically, the user registration module responds to the registration request, obtains the user's identity information, verifies the identity information, and after the verification is passed, sends the identity identifier corresponding to the identity information to the data database. After receiving the identity identifier, the data database performs a conflict check. The conflict check is to detect whether the data database has already stored the user's identity identifier. If it has been stored, it means that the user has completed the registration, and the subsequent steps can be omitted to improve efficiency. If the user's identity identifier is not stored, the verification result is verification passed. In this case, the user registration module starts to send a certificate application to the key management module. After receiving the certificate application, the key management module will perform a validity check on the certificate request. If it is a valid certificate application, it will apply for a certificate from the key generation module. After receiving the application, the key management module then enters the certificate information into the certificate, and feeds back the completed certificate to the user registration module. The user registration module sends the certificate and the certificate identifier to the data database for storage.

[0052] Furthermore, the digital signature client 30 in this embodiment establishes a connection with the embedded verification terminal 20 through the transmission module 40. During the communication process, the transmission module 40 uses the digital signature client 30 as the central device and the embedded verification terminal 20 as the peripheral device to detect the wireless connection activation status of the central device. After the wireless connection is in the activation state, it scans all services and features under the embedded verification terminal, and selects target services and features from all services and features. Features are attributes of services, contain data and can be read, written, notified or indicated. Each feature also has a unique universally unique identifier (Universally Unique Identifier, UUID). Based on the UUID, the target services and features can be screened out, and the digital signature client and the embedded verification terminal are connected based on the target services and features.

[0053] In this embodiment, the embedded verification terminal receives the user's transaction request, obtains the user's transaction information and identity information, obtains the user's digital signature from the transaction information, and sends a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information; the certificate management terminal receives the query request sent by the embedded verification terminal, and feeds back the signature document to the embedded verification terminal based on the query request; the embedded verification terminal decrypts the digital signature using the public key to obtain a first summary value, performs digital summary calculation on the signature document to obtain a second summary value, compares the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the user's digital signature verification has passed, and responds to the transaction request to complete the transaction, which can prevent hidden dangers such as information interception and theft, information tampering, and information forgery, thereby improving the security of the transaction.

[0054] refer to Figure 2 , Figure 2 The figure is a flow chart of a first embodiment of a transaction method based on digital signature according to the present invention.

[0055] Based on the above first embodiment, the transaction method based on digital signature in this embodiment specifically includes the following steps:

[0056] Step S10: After receiving the transaction request from the user, the embedded verification terminal obtains the transaction information and identity information of the user, obtains the digital signature of the user from the transaction information, and sends a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information.

[0057] Step S20: The certificate management terminal receives the query request sent by the embedded verification terminal, and feeds back a signature document to the embedded verification terminal based on the query request.

[0058] Step S30: The embedded verification terminal uses the public key to decrypt the digital signature to obtain a first summary value, performs digital summary calculation on the signed document to obtain a second summary value, compares the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the digital signature of the user has been verified, and responds to the transaction request to complete the transaction.

[0059] In this embodiment, the embedded verification terminal receives the user's transaction request, obtains the user's transaction information and identity information, obtains the user's digital signature from the transaction information, and sends a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information; the certificate management terminal receives the query request sent by the embedded verification terminal, and feeds back the signature document to the embedded verification terminal based on the query request; the embedded verification terminal decrypts the digital signature using the public key to obtain a first summary value, performs digital summary calculation on the signature document to obtain a second summary value, compares the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the user's digital signature verification has passed, and responds to the transaction request to complete the transaction, which can prevent hidden dangers such as information interception and theft, information tampering, and information forgery, thereby improving the security of the transaction.

[0060] In some embodiments, the method also includes: after the digital signature client establishes a connection with the embedded verification terminal, it obtains the digital signature type preset by the user and the operation information input by the user; the digital signature client determines the curve trajectory according to the operation information to obtain the signature text, calculates the offset angle of each signature text in the signature text based on the signature pattern framework to determine the offset position of the font, translates each signature text based on the offset position, and after the signature text is translated, determines the center pattern corresponding to the signature pattern framework based on the preset digital signature type, and generates the user's digital signature according to the signature text and the center pattern.

[0061] In some embodiments, the method also includes: the embedded verification terminal reads the signature image and signature information of the digital signature, determines the number of embedded bits, hides the signature information into each pixel of the signature image based on the number of embedded bits, sets the least significant position of the embedded signature image to 0 to complete preprocessing, reads the signature information in a preset encoding form, and stores it in the last four bits of each pixel in the preprocessed signature image to obtain a signed document.

[0062] In some embodiments, the digital signature client establishes a connection with the embedded verification terminal through a transmission module, and the method also includes: during the communication process, the transmission module uses the digital signature client as a central device and the embedded verification terminal as a peripheral device, detects the wireless connection activation status of the central device, and after the wireless connection is in the activation state, scans all services and features under the embedded verification terminal, selects target services and features from all services and features, and establishes a connection between the digital signature client and the embedded verification terminal based on the target services and features.

[0063] In some embodiments, the method also includes: the user registration module obtains the user's identity information in response to the registration request, verifies the identity information, and after the verification is passed, sends the identity identifier corresponding to the identity information to the information database; the information database performs a conflict check on the received identity identifier, and feeds back the verification result to the user registration module; when the verification result is that the user registration module passes the verification, the user registration module sends a certificate application to the key management module; after receiving the certificate application, the key management module performs a validity check on the certificate application, and if it is a valid certificate application, applies for a certificate from the key generation module; the key generation module enters the certificate information, and feeds back the entered certificate to the user registration module; the user registration module certificate and certificate identifier are sent to the information database for storage.

[0064] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable systems. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integration. The available medium may be a magnetic medium, (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk Solid State Disk (SSD)), etc.

[0065] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0066] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0067] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

[0068] It should be understood that the above is only an example and does not constitute any limitation on the technical solution of the present invention. In specific applications, technicians in this field can make settings as needed, and the present invention does not limit this.

[0069] It should be noted that the workflow described above is merely illustrative and does not limit the scope of protection of the present invention. In practical applications, technicians in this field can select part or all of them according to actual needs to achieve the purpose of the present embodiment, and no limitation is made here.

[0070] In addition, for technical details not fully described in this embodiment, reference can be made to the digital signature-based transaction system and method provided in any embodiment of the present invention, which will not be repeated here.

[0071] In addition, it should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.

[0072] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0073] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as a read-only memory (ROM) / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention.

[0074] The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

[0075] It is understandable that the system provided by the embodiment of the present invention corresponds to the method provided by the embodiment of the present invention, and the explanation, examples and beneficial effects of the relevant contents can refer to the corresponding parts in the above method.

Claims

1. A transaction system based on digital signature, characterized in that: The digital signature-based transaction system includes an embedded verification terminal and a certificate management terminal; The embedded verification terminal is used to obtain the transaction information and identity information of the user upon receiving the transaction request of the user, obtain the digital signature of the user from the transaction information, and send a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information; The certificate management terminal is used to receive the query request sent by the embedded verification terminal, and feed back the signature document to the embedded verification terminal based on the query request; The embedded verification terminal is used to use the public key to decrypt the digital signature to obtain a first summary value, perform digital summary calculation on the signed document to obtain a second summary value, compare the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the digital signature of the user has been verified, and respond to the transaction request to complete the transaction.

2. The digital signature-based transaction system according to claim 1, characterized in that: The digital signature-based transaction system also includes a digital signature client; The digital signature client is used to obtain the digital signature type preset by the user and the operation information input by the user after establishing a connection with the embedded verification terminal; The digital signature client is used to determine the curve trajectory according to the operation information to obtain the signature text, calculate the offset angle of each signature text in the signature text based on the signature pattern frame to determine the offset position of the font, translate each signature text based on the offset position, and after the signature text is translated, determine the center pattern corresponding to the signature pattern frame based on the preset digital signature type, and generate the user's digital signature according to the signature text and the center pattern.

3. The digital signature-based transaction system according to claim 2, characterized in that: The embedded verification terminal is used to read the signature image and signature information of the digital signature, determine the number of embedded bits, hide the signature information in each pixel of the signature image based on the number of embedded bits, set the least significant bit of the embedded signature image to 0 to complete preprocessing, read the signature information in a preset encoding form, and store it in the last four bits of each pixel in the preprocessed signature image to obtain a signed document.

4. The digital signature-based transaction system according to claim 2, characterized in that: The digital signature-based transaction system further includes a transmission module, through which the digital signature client establishes a connection with the embedded verification terminal; The transmission module is used to use the digital signature client as a central device and the embedded verification terminal as a peripheral device during the communication process, detect the wireless connection activation state of the central device, and after the wireless connection is in the activation state, scan all services and features under the embedded verification terminal, select target services and features from all services and features, and establish a connection between the digital signature client and the embedded verification terminal based on the target services and features.

5. The digital signature-based transaction system according to claim 1, characterized in that: The certificate management terminal includes: a key generation module, a key management module, a user registration module and a data database; The user registration module is used to respond to a registration request, obtain the user's identity information, verify the identity information, and after the verification is passed, send the identity identifier corresponding to the identity information to the information database; The data database is used to perform conflict verification on the received identity identifiers and feed back the verification results to the user registration module; The user registration module is used to send a certificate application to the key management module when the verification result is that the verification is passed; The key management module is used to perform validity detection on the certificate application after receiving it, and if it is a valid certificate application, apply for a certificate from the key generation module; The key generation module is used to input the certificate information and feed back the input certificate to the user registration module; The user registration module is used to send the certificate and the certificate identification to the data database for storage.

6. A transaction method based on digital signature, characterized in that: The digital signature-based transaction method is applied to the digital signature-based transaction system as described in any one of claims 1 to 5, and the digital signature-based transaction method includes: Upon receiving a transaction request from a user, the embedded verification terminal obtains the transaction information and identity information of the user, obtains the digital signature of the user from the transaction information, and sends a query request to the certificate management terminal based on the certificate identifier corresponding to the identity information; The certificate management terminal receives the query request sent by the embedded verification terminal, and feeds back the signature document to the embedded verification terminal based on the query request; The embedded verification terminal uses the public key to decrypt the digital signature to obtain a first summary value, performs digital summary calculation on the signed document to obtain a second summary value, compares the first summary value with the second summary value, and if the first summary value is consistent with the second summary value, it is determined that the digital signature of the user has been verified, and responds to the transaction request to complete the transaction.

7. The digital signature-based transaction method according to claim 6, characterized in that: The method further comprises: After establishing a connection with the embedded verification terminal, the digital signature client obtains the digital signature type preset by the user and simultaneously obtains the operation information input by the user; The digital signature client determines the curve trajectory according to the operation information to obtain the signature text, calculates the offset angle of each signature text in the signature text based on the signature pattern frame to determine the offset position of the font, translates each signature text based on the offset position, and after the signature text is translated, determines the center pattern corresponding to the signature pattern frame based on the preset digital signature type, and generates the user's digital signature according to the signature text and the center pattern.

8. The digital signature-based transaction method according to claim 7, characterized in that: The method further comprises: The embedded verification terminal reads the signature image and signature information of the digital signature, determines the number of embedded bits, hides the signature information in each pixel of the signature image based on the number of embedded bits, sets the least significant bit of the embedded signature image to 0 to complete preprocessing, reads the signature information in a preset encoding form, and stores it in the last four bits of each pixel in the preprocessed signature image to obtain a signed document.

9. The digital signature-based transaction method according to claim 7, characterized in that: The digital signature client establishes a connection with the embedded verification terminal through a transmission module, and the method further includes: During the communication process, the transmission module uses the digital signature client as a central device and the embedded verification terminal as a peripheral device, detects the wireless connection opening status of the central device, and after the wireless connection is in the opening state, scans all services and features under the embedded verification terminal, selects target services and features from all services and features, and establishes a connection between the digital signature client and the embedded verification terminal based on the target services and features.

10. The transaction method based on digital signature as claimed in claim 6, characterized in that: The method further comprises: The user registration module responds to the registration request, obtains the user's identity information, verifies the identity information, and after the verification is passed, sends the identity identifier corresponding to the identity information to the data database; The data database performs a conflict check on the received identity identifier and feeds back the check result to the user registration module; When the verification result is that the verification is passed, the user registration module sends a certificate application to the key management module; After receiving the certificate application, the key management module performs a validity check on the certificate application, and if it is a valid certificate application, applies for a certificate from the key generation module; The key generation module enters the certificate information and feeds back the entered certificate to the user registration module; The user registration module certificate and certificate identification are sent to the data database for storage.

Images