Data security information processing method and device based on mobile collaborative signature

Abstract

The embodiment of the invention provides a data security information processing method and device based on a mobile collaborative signature, and relates to the technical field of information processing, and the method comprises the steps: generating a first public and private key pair of a first user account in a service platform; acquiring a digital certificate issued to the first user account by the certificate authorization center through the service platform; the digital certificate is generated by the certificate authorization center based on a target public key sent by the service platform; the target public key is obtained according to a first public key in the first public-private key pair and a second public key in the second public-private key pair; performing digital signature on the to-be-processed information according to a first private key in the first public and private key pair to obtain first signature information; the first signature information is used for the service platform to carry out digital signature on the first signature information by using a second private key in the second public and private key pair to obtain second signature information of which the to-be-processed information is signed; and sending the to-be-processed information carrying the first signature information and the digital certificate to a service platform.

Description

Technical Field

[0001] The present disclosure relates to the field of information processing technology, and in particular to a data security information processing method, device, electronic device storage medium and computer program product based on mobile collaborative signature. Background Art

[0002] With the development of science and technology, information processing is increasingly used in various fields. Information can include many types, such as data. By processing information, information that meets user needs can be obtained. Information processing methods can include many methods, such as encryption and verification. Summary of the invention

[0003] The embodiments of the present disclosure provide a data security information processing method, device, electronic device, storage medium and computer program product based on mobile collaborative signature.

[0004] In a first aspect, an embodiment of the present disclosure provides a data security information processing method based on mobile collaborative signature, which is applied to a first device, and the method includes: generating a first public-private key pair for a first user account in a service platform; wherein the first public-private key pair is generated for the first device; obtaining a digital certificate issued by a certificate authority for the first user account through the service platform; wherein the digital certificate is generated by the certificate authority based on a target public key sent by the service platform and information related to the first user account; the target public key is obtained based on the first public key in the first public-private key pair and the second public key in the second public-private key pair, and the second public-private key pair is generated by the service platform for the first user account; digitally signing the information to be processed based on the first private key in the first public-private key pair to obtain first signature information; wherein the first signature information is used for the service platform to digitally sign the first signature information using the second private key in the second public-private key pair to obtain second signature information that completes the signature of the information to be processed; sending the information to be processed carrying the first signature information and the digital certificate to the service platform.

[0005] In one embodiment, obtaining the digital certificate issued by the certificate authority for the first user account through the service platform includes: sending the first public key to the service platform; receiving the digital certificate sent by the service platform; wherein the digital certificate is sent to the service platform by the certificate authority after generating the digital certificate.

[0006] In one embodiment, obtaining the digital certificate issued by the certificate authority for the first user account through the service platform includes: receiving the second public key sent by the service platform; obtaining the target public key based on the first public key and the second public key; sending the target public key to the service platform; receiving the digital certificate sent by the service platform; wherein the digital certificate is sent to the service platform by the certificate authority after generating the digital certificate.

[0007] In one embodiment, before generating the first public-private key pair of the first user account in the service platform, the method further includes: detecting an input operation acting on a login interface; wherein the login interface is a login interface of the service platform; determining login information based on the input operation; and logging in to the first user account based on the login information.

[0008] In one embodiment, the method further includes: detecting a selection operation on a second user account selection interface; determining a second user account based on the selection operation; wherein the second user account serves as an account for signing the information to be processed with the first user account.

[0009] In a second aspect, an embodiment of the present disclosure provides a data security information processing method based on mobile collaborative signature, which is applied to a service platform, and the method includes: determining a target public key; wherein the target public key is obtained based on the first public key in the first public-private key pair of the first user account in the service platform, and the second public key in the second public-private key pair of the first user account; the first public-private key pair is generated by the first device, and the second public-private key pair is generated by the service platform; based on the target public key and information related to the first user account, obtaining a digital certificate issued by a certificate authority for the first user account; wherein the digital certificate is generated by the certificate authority based on the target public key and information related to the first user account; sending the digital certificate to the first device; receiving the information to be processed sent by the first device carrying the first signature information and the digital certificate; wherein the first signature information is obtained by the first device digitally signing the information to be processed by the first private key in the first public-private key pair; digitally signing the first signature information by the second private key in the second public-private key pair to obtain the second signature information, and completing the signing of the information to be processed.

[0010] In one embodiment, determining the target public key includes: receiving the first public key sent by the first device; and obtaining the target public key according to the first public key and the second public key.

[0011] In one embodiment, determining the target public key includes: sending the second public key to the first device; receiving the target public key sent by the first device, wherein the target public key is obtained by the first device based on the first public key and the second public key.

[0012] In one embodiment, obtaining a digital certificate issued by a certificate authority for the first user account based on the target public key and information related to the first user account includes: sending the target public key and information related to the first user account to the certificate authority; and receiving the authorization certificate sent by the authorization center.

[0013] In one embodiment, the method further includes: determining a second user account determined by the first device; and sending a signature notification of the information to be processed to a second device associated with the second user account.

[0014] In one embodiment, the method further includes: performing identity authentication on the login information according to the login information input by the first device; and logging into the first user account if the login information authentication is successful.

[0015] In one embodiment, the method also includes: after verifying that the digital certificate is a digital certificate issued by a preset certificate authority, obtaining a target public key based on the digital certificate; performing signature verification on the second signature information based on the target public key; if the verification is successful, proving that the second signature information is the signature information of the first user account.

[0016] In a third aspect, an embodiment of the present disclosure provides a data security information processing device based on mobile collaborative signature, including: a generation module, used to generate a first public-private key pair for a first user account in a service platform; wherein the first public-private key pair is generated for the first device; a first acquisition module, used to obtain a digital certificate issued by a certificate authority for the first user account through the service platform; wherein the digital certificate is generated by the certificate authority based on a target public key sent by the service platform and information related to the first user account; the target public key is obtained based on the first public key in the first public-private key pair and the second public key in the second public-private key pair, and the second public-private key pair is generated by the service platform for the first user account; a first signature module, used to digitally sign the information to be processed based on the first private key in the first public-private key pair to obtain first signature information; wherein the first signature information is used for the service platform to digitally sign using the second private key pair in the second public-private key pair / the first signature information to obtain the second signature information that completes the signature of the information to be processed; a first sending module, used to send the information to be processed carrying the first signature information and the digital certificate to the service platform.

[0017] In a fourth aspect, an embodiment of the present disclosure provides a data security information processing device based on mobile collaborative signature, including: a determination module, used to determine a target public key; wherein the target public key is obtained based on a first public key in a first public-private key pair of a first user account in the service platform, and a second public key in a second public-private key pair of the first user account; the first public-private key pair is generated by a first device, and the second public-private key pair is generated by the service platform; a second acquisition module, used to obtain a digital certificate issued by a certificate authority for the first user account based on the target public key and information related to the first user account; wherein the digital certificate The digital certificate is generated by the certificate authority based on the target public key and the information related to the first user account; the second sending module is used to send the digital certificate to the first device; the receiving module is used to receive the information to be processed sent by the first device and carrying the first signature information and the digital certificate; wherein the first signature information is obtained by the first device digitally signing the information to be processed by the first private key in the first public-private key pair; the second signature module is used to digitally sign the first signature information by the second private key in the second public-private key pair, obtain the second signature information, and complete the signing of the information to be processed.

[0018] In a fifth aspect, an embodiment of the present disclosure further provides an electronic device, the electronic device comprising: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions or computer programs that can be executed by the at least one processor, and the instructions or computer programs are executed by the at least one processor so that the at least one processor can execute the information processing method in any implementation of any of the first aspect or the second aspect mentioned above.

[0019] In the sixth aspect, an embodiment of the present disclosure further provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores a computer program or computer instructions, and the computer program or computer instructions are used to enable the computer to execute the information processing method in any implementation of the first aspect or the second aspect.

[0020] In the seventh aspect, the embodiments of the present disclosure further provide a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes the information processing method in any implementation of the first aspect or the second aspect.

[0021] Compared with the prior art, the technical solution provided by the embodiments of the present disclosure has at least the following technical effects: By generating a public-private key pair of the first user account on two different nodes of the first device and the service platform, a target public key is obtained according to the public keys in the two public-private key pairs, and the target public key is used to generate a digital certificate for the first user account. The first device signs with the first private key in the first public-private key pair to obtain first signature information, and the first signature information is used by the service platform to sign again, thereby completing the signature of the information to be processed.

[0022] The scheme of this embodiment combines a part of the private key of the first user account generated by the first device and another part of the private key of the first user account generated by the service platform to sign the information to be processed in the process of signing the information to be processed. When generating a digital certificate for the first user account, a part of the public key of the first user account generated by the first device and another part of the public key of the first user account generated by the service platform are also combined to generate a digital certificate for the first user account. The digital certificate includes information of the first user account, such as the target public key, which can verify the identity of the first user account and ensure the legal identity of the signatory. By signing the information to be processed with two private keys, the security and legality of the signature of the information to be processed can be improved, and the situation where the security of the information to be processed is reduced after the private key is lost when the information to be processed is encrypted by a single private key is reduced, the security of the relevant information in the signing process is improved, and the situation where the information is tampered with is reduced, thereby improving the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0024] Figure 1 A flowchart of an information processing method provided by an embodiment of the present disclosure; Figure 2 A schematic diagram of a process for obtaining a digital certificate provided in an embodiment of the present disclosure; Figure 3 A schematic diagram of another method of obtaining a digital certificate provided in an embodiment of the present disclosure; Figure 4 A schematic diagram of another information processing method provided by an embodiment of the present disclosure; Figure 5 A schematic diagram of another information processing method provided by an embodiment of the present disclosure; Figure 6 A schematic diagram of another information processing method provided by an embodiment of the present disclosure; Figure 7 A schematic diagram of another information processing method provided by an embodiment of the present disclosure; Figure 8 A schematic diagram of the structure of an information processing device provided by an embodiment of the present disclosure; Fig. 9 A schematic diagram of the structure of another information processing device provided by an embodiment of the present disclosure; Fig.10 A schematic diagram of another information processing method provided by an embodiment of the present disclosure; Fig.11 A schematic diagram of an electronic device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0025] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0026] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present disclosure.

[0027] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein may be used to implement this device and / or practice this method.

[0028] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The drawings only show components related to the present disclosure rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0029] Additionally, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects described may be practiced without these specific details.

[0030] The disclosed embodiment provides a method for processing information. The information processing method provided in this embodiment can be executed by a computing device, which can be implemented as software or a combination of software and hardware, and can be integrated in a server, terminal device, etc.

[0031] refer to Figure 1 , is a data security information processing method based on mobile collaborative signature provided by an embodiment of the present disclosure, the method can be applied to a first device, and the method mainly includes the following steps: S101, generating a first public-private key pair for a first user account in a service platform, wherein the first public-private key pair is generated by a first device.

[0032] S102, obtaining a digital certificate issued by a certificate authority for the first user account through the service platform. The digital certificate is generated by the certificate authority based on the target public key sent by the service platform and information related to the first user account; the target public key is obtained based on the first public key in the first public-private key pair and the second public key in the second public-private key pair, and the second public-private key pair is generated by the service platform for the first user account.

[0033] S103, digitally sign the information to be processed using the first private key in the first public-private key pair to obtain first signature information. The first signature information is used for the service platform to digitally sign the information to be processed and / or the first signature information using the second private key in the second public-private key pair to obtain second signature information that completes the signature of the information to be processed.

[0034] S104, sending the information to be processed carrying the first signature information and the digital certificate to the service platform.

[0035] The first device may be a mobile terminal device or a fixed terminal device. The mobile terminal device may include but is not limited to: a mobile phone, a tablet computer, a wearable device, and a personal computer (PC).

[0036] The first device can log in to the service platform, and the login method is not limited, including but not limited to: web page form and client form, and the client can include an application. When logging in to the service platform through the client, the first device has the client installed.

[0037] The service platform can be a platform for processing information to be processed, or a platform specifically for processing information to be processed. For example, the service platform can be a signature platform provided by multiple parties who sign the information to be processed. During the signing process, the platform is used as an intermediate node, and the multiple parties who sign the information to be processed sign the relevant information through the service platform.

[0038] Exemplarily, the service platform may include, but is not limited to: a contract signing platform and a transaction platform, etc.

[0039] Exemplarily, the information to be processed may include electronic contracts, transaction information, electronic bidding documents, electronic certification documents, and legal documents, etc.

[0040] The service platform can provide a service system in which users can perform functions such as account registration, account login, information storage, information download, information preview and identity authentication.

[0041] For S101, the first user account is an account registered on the service platform, and the first user account can be any account that has been registered on the service platform. The registration process of the account is not limited, and the registration can be performed through the registration process of the service platform and the relevant information required for registration.

[0042] The first device is a device required to log in to the first user account, that is, the first user account is logged in through the first device. For example, logging in to the first user account through an application of the service platform installed in the first device also realizes logging in to the service platform through the first user account.

[0043] Exemplarily, the first user account is one of the multiple accounts that sign the information to be processed.

[0044] Exemplarily, the first user account may be a personal account or a corporate account.

[0045] The first device may generate a public-private key pair for the first user account in the first device, and record the public-private key pair as a first public-private key pair. The first public-private key pair includes a public key and a private key, and the public key in the first public-private key pair may be recorded as a first public key, and the private key in the first public-private key pair may be recorded as a first private key.

[0046] The manner in which the first device generates the first public-private key pair is not limited, and the first device may generate the first public-private key pair by any manner of generating a public-private key pair, that is, the first device may generate the public-private key pair of the first user account.

[0047] Exemplarily, the service platform can also generate a public-private key pair for the first user account, and record the public-private key pair as a second public-private key pair. The second public-private key pair also includes a public key and a private key. The public key is recorded as a second public key, and the private key is recorded as a second private key.

[0048] Exemplarily, after logging into the first user account in the service platform through the first device, the service platform can detect that the first user account is already logged in. The service platform can generate a second public-private key pair for the first user account when the first user account is in the logged in state.

[0049] Exemplarily, the service platform may also generate a second public-private key pair when the first user account is not logged in.

[0050] The first device and the service platform can respectively generate a public-private key pair of the first user account, so that two public-private key pairs of the first user account can be obtained, and two private keys and two public keys of the first user account can be obtained. The first public-private key pair is located in the first device, and the second public-private key pair is located in the service platform. The first device has the first public-private key pair, and the service platform has the second public-private key pair.

[0051] For S102, after generating the first public-private key pair, the first device can obtain the digital certificate issued by the certificate authority for the first user account through the service platform. As the issuing agency of digital certificates, the certificate authority (CA) is responsible for reviewing and issuing digital certificates to users. The digital certificate issued by the CA can ensure the security of identity authentication and data transmission in network communications.

[0052] The second public-private key pair is generated by the service platform for the first user account. After obtaining the second public-private key pair, the second public key in the second public-private key pair can be obtained. The target public key is obtained based on the first public key in the first public-private key pair and the second public key in the second public-private key pair. The target public key can be obtained by the first device based on the first public key and the second public key, or by the service platform based on the first public key and the second public key.

[0053] Exemplarily, the method of obtaining the target public key according to the first public key and the second public key is not limited, and includes but is not limited to: performing point multiplication or other operations on the first public key and the second public key to obtain the target public key.

[0054] Since the first user account has two public-private key pairs and thus two public keys, after a target public key is obtained according to the first public key and the second public key, the digital certificate of the first user account can be obtained according to the target public key.

[0055] After obtaining the target public key, the service platform may send the target public key to a certificate authority, thereby facilitating the certificate authority to generate a digital certificate for the first user account based on the target public key.

[0056] The certificate authority can also generate a digital certificate for the first user account based on information related to the first user account. Information related to the first user account may include holder information, issuer information, validity period, etc. The holder information is the account information of the first user account, including the account name of the first user account, information about the owner of the first user account, and other information that can identify the first user account. Information about the owner of the first user account may include name, age, gender, contact information, and facial image, etc. Contact information may include an email address and a mobile phone number for real-name authentication.

[0057] Exemplarily, information related to the first user account can be stored on the service platform. When the first user account is registered, the information related to the first user account can be used for registration. After the registration is completed, the information related to the first user account can be stored on the service platform. The service platform can obtain information related to the first user account.

[0058] The service platform may send the target public key and information related to the first user account to a certificate authority.

[0059] Exemplarily, the certificate authority receives the target public key and information related to the first user account sent by the service platform.

[0060] After receiving the target public key and the information related to the first user account sent by the service platform, the certificate authority can generate a digital certificate for the first user account based on the target public key and the information related to the first user account. That is, the digital certificate is generated by the certificate authority based on the target public key and the information related to the first user account sent by the service platform. The digital certificate is issued by the certificate authority for the first user account.

[0061] The process of generating a digital certificate by a certificate authority is not limited. For example, the target public key and information related to the first user account can be encrypted by the private key of the certificate authority to obtain the digital signature of the certificate authority. The digital signature of the certificate authority, the target public key and information related to the first user account are packaged into one piece of information, which is a digital certificate.

[0062] The digital certificate can authenticate the identity of the first user account, that is, authenticate the first user account, thereby facilitating the authentication of the signatory of the information to be processed and ensuring that the signatory has a legal identity.

[0063] Exemplarily, after the certificate authority generates the digital certificate, the certificate authority may send the digital certificate to the service platform.

[0064] Exemplarily, the service platform receives a digital certificate sent by a certificate authority, and sends the received digital certificate to the first device.

[0065] The first device may receive the digital certificate sent by the service platform and save the digital certificate in the first device.

[0066] For example, the service platform may send the digital certificate to the first user account, the first device may obtain the digital certificate, and store the digital certificate in the first device.

[0067] Exemplarily, it may also include: The first device sends an application for a digital certificate to the service platform.

[0068] Exemplarily, it may also include: The service platform receives the application for the digital certificate sent by the first device, and sends the application for the digital certificate to a certificate authority.

[0069] The service platform can send the application for the digital certificate, the target public key, and information related to the first user account to a certificate authority, which can facilitate the certificate authority to issue a digital certificate to the first user account.

[0070] For S103, after the first device receives the digital certificate, the first device digitally signs the information to be processed according to the first private key in the first public-private key pair to obtain first signature information. Since the first device stores the first public-private key pair, the first device can encrypt the information to be processed using the first private key in the first public-private key pair to obtain a digital signature, i.e., the first signature information.

[0071] The first signature information is used by the service platform to digitally sign the information to be processed and / or the first signature information using the second private key in the second public-private key pair to obtain the second signature information that completes the signature of the information to be processed.

[0072] After obtaining the first signature information, the first signature information is not the final signature. The service platform needs to encrypt it again to obtain another digital signature, namely the second signature information.

[0073] For S104, after the information to be processed is encrypted, that is, digitally signed using the first private key, the information to be processed carrying the first signature information and the digital certificate is sent to the service platform.

[0074] This makes it easy for the service platform to use the second private key in the second public-private key pair to digitally sign the first signature information, thereby obtaining the second signature information that completes the signature on the information to be processed.

[0075] After obtaining the second signature information, the digital signature of the information to be processed is completed.

[0076] Exemplarily, after the service platform receives the information to be processed carrying the first signature information and the digital certificate sent by the first device, it can use the second private key in the second public-private key pair to digitally sign the first signature information to obtain the second signature information, thereby completing the signature of the information to be processed.

[0077] The scheme of this embodiment combines a part of the private key of the first user account generated by the first device and another part of the private key of the first user account generated by the service platform to sign the information to be processed in the process of signing the information to be processed. When generating a digital certificate for the first user account, a part of the public key of the first user account generated by the first device and another part of the public key of the first user account generated by the service platform are also combined to generate a digital certificate for the first user account. The digital certificate includes information of the first user account, such as the target public key, which can verify the identity of the first user account and ensure the legal identity of the signatory. By signing the information to be processed with two private keys, the security and legality of the signature of the information to be processed can be improved, and the situation where the security of the information to be processed is reduced after the private key is lost when the information to be processed is encrypted by a single private key is reduced, the security of the relevant information in the signing process is improved, and the situation where the information is tampered with is reduced, thereby improving the user experience.

[0078] In one embodiment, reference Figure 2 , which is a schematic diagram of obtaining a digital certificate. Obtaining a digital certificate issued by a certificate authority for a first user account through a service platform includes:

[0079] S201, sending a first public key to a service platform.

[0080] S202, receiving a digital certificate sent by the service platform; wherein the digital certificate is sent to the service platform by a certificate authority after the certificate is generated.

[0081] For the first device, this embodiment provides an example of obtaining a digital certificate.

[0082] The first device may send the first public key generated by the first device to the service platform, thereby facilitating the service platform to receive the first public key and generate a target public key.

[0083] Normally, the service platform and the certificate authority can exchange information, and there is a trust relationship between the two. The terminal device and the certificate authority need to exchange information through the service platform, and the terminal device and the certificate authority can exchange information with the service platform respectively.

[0084] The target public key in this embodiment is generated by the service platform according to the first public key and the second public key.

[0085] Exemplarily, it may also include: The service platform receives the first public key; The service platform generates a target public key according to the first public key and the second public key; The service platform sends the target public key to the certificate authority; The service platform receives a digital certificate issued by a certificate authority; the digital certificate is generated by the certificate authority based on the target public key and relevant information about the first user account; The service platform sends the digital certificate to the first device.

[0086] In one embodiment, reference Figure 3 , which is another schematic diagram of obtaining a digital certificate. Obtaining a digital certificate issued by a certificate authority for a first user account through a service platform includes:

[0087] S301, receiving a second public key sent by the service platform; S302, obtaining a target public key according to the first public key and the second public key; S303, sending the target public key to the service platform; S304, receiving the digital certificate sent by the service platform; wherein the digital certificate is sent to the service platform by the certificate authority after generating the digital certificate.

[0088] The solution in this embodiment is that the first device generates a target public key, the service platform sends the second public key to the first device, the first device receives the second public key sent by the service platform, and the first device generates a target public key based on the first public key and the second public key. After generating the target public key, the first device sends the target public key to the service platform, so that the service platform can send the target public key to the certificate authority and the certificate authority can generate a digital certificate.

[0089] Exemplarily, the method further includes: The certificate authority receives the target public key and related information about the first user account sent by the service platform; The certificate authority generates a digital certificate for the first user account based on the target public key and relevant information about the first user account.

[0090] The certificate authority sends the digital certificate to the service platform.

[0091] The service platform accepts the digital certificate sent by the certificate authority.

[0092] In one embodiment, reference Figure 4 , which is a schematic diagram of another information processing method. Before generating a first public-private key pair of a first user account in the service platform, the method further includes:

[0093] S401, detecting an input operation on a login interface; wherein the login interface is a login interface of the service platform.

[0094] S402: Determine login information according to the input operation.

[0095] S403: Log in to the first user account according to the login information.

[0096] This embodiment provides an example of authenticating a first user account.

[0097] The first device may display a login interface for logging into the first user account, which may be a login interface of the service platform, and the service platform is logged in through the first user account. The display mode of the login interface and the content, format or other configuration parameters of the login interface are not limited.

[0098] Exemplarily, the login interface includes a login information input control for inputting the login information of the first user account. The login information may include an account name and a password, etc. The login information may also include information related to the first user account, such as information about the owner of the first user account and other information that can identify the first user account. The information about the owner of the first user account may include name, age, gender, contact information, and facial image, etc. The contact information may include an email address and a real-name authenticated mobile phone number.

[0099] After the login information is input, the login information is authenticated, and if the authentication is successful, the first user account is logged in according to the login information.

[0100] After logging into the first user account, a first public-private key pair of the first user account and subsequent various operations can be generated through the first device.

[0101] In one embodiment, reference Figure 5 , is a schematic diagram of another data security information processing method based on mobile collaborative signature. The method also includes:

[0102] S501, detecting a selection operation on a second user account selection interface; S502, determining a second user account according to the selection operation; wherein the second user account is used as an account for signing the information to be processed with the first user account.

[0103] This embodiment provides an example of determining an account that processes the information to be processed together with the first user account.

[0104] The second user account is not limited to one, but may be multiple. Any account other than the first user account that processes the information to be processed together with the first user account may serve as the second user account.

[0105] The first device may also display a second user account selection interface, which may be an interface after logging into the service platform. The display content, display format and other parameters of the second user account selection interface are not limited.

[0106] The second user account selection interface may include a selection control or an input control for the second user account. The second user account may be selected from the reference accounts through the selection control, and the second user account may be input through the input control.

[0107] The first device may detect a selection operation performed on the second user account selection interface, and after detecting the selection operation, may determine the second user account according to the selection operation.

[0108] This makes it easier for the first user account and the second user account to jointly complete the processing of the information to be processed.

[0109] In one embodiment, reference Figure 6 , is a schematic diagram of another data security information processing method based on mobile collaborative signature. The method can be applied to the service platform, and the method includes:

[0110] S601, determine the target public key; wherein the target public key is obtained based on the first public key in the first public-private key pair of the first user account in the service platform and the second public key in the second public-private key pair of the first user account; the first public-private key pair is generated by the first device, and the second public-private key pair is generated by the service platform.

[0111] S602, based on the target public key and information related to the first user account, obtain a digital certificate issued by the certificate authority for the first user account; wherein the digital certificate is generated by the certificate authority based on the target public key and information related to the first user account.

[0112] S603: Send the digital certificate to the first device.

[0113] S604: Receive information to be processed that carries first signature information and a digital certificate from the first device, wherein the first signature information is obtained by the first device digitally signing the information to be processed using the first private key in the first public-private key pair.

[0114] S605: Digitally sign the first signature information using the second private key in the second public-private key pair to obtain second signature information, thereby completing the signature of the information to be processed.

[0115] The description of this embodiment may refer to the description of the corresponding embodiment in S101 to S104.

[0116] In one embodiment, determining a target public key includes: A first public key sent by a first device is received, and a target public key is obtained according to the first public key and the second public key.

[0117] This embodiment is an example of a service platform generating a target public key. The first device sends a first public key generated by the first device to the service platform. The service platform receives the first public key sent by the first device, and the service platform generates a target public key based on the first public key and the second public key.

[0118] In one embodiment, determining a target public key includes: The second public key is sent to the first device, and a target public key sent by the first device is received, wherein the target public key is obtained by the first device according to the first public key and the second public key.

[0119] This embodiment is an example of a first device generating a target public key. The service platform sends the second public key to the first device, the first device receives the second public key sent by the service platform, the first device generates a target public key based on the first public key and the second public key, the first device sends the target public key to the service platform, and the service platform receives the target public key sent by the first device.

[0120] Exemplarily, the process of generating the target public key according to the first public key and the second public key is not limited. For example, the target public key is obtained by multiplying the first public key and the second public key or performing other operations.

[0121] Exemplarily, the forms of the first public key, the second public key and the target public key are not limited, and may be numbers and / or letters, etc.

[0122] In one embodiment, based on the target public key and information related to the first user account, obtaining a digital certificate issued by a certificate authority for the first user account includes: The target public key and information related to the first user account are sent to a certificate authority, and an authorization certificate sent by the authorization authority is received.

[0123] It may include descriptions of the embodiments corresponding to the content in the above embodiments.

[0124] In one embodiment, the method further comprises: A second user account determined by the first device is determined, and a signature notification of the information to be processed is sent to a second device associated with the second user account.

[0125] The second device is a device managed by the second user account, which may be a device currently logged in by the second user account, or a device used by the owner of the second user account, such as a device where a mobile phone number associated with the owner is located.

[0126] The form of the signature notification is not limited and can be determined according to business needs, such as short message or email. A short message can be sent to the mobile phone number associated with the second user account. In this way, the owner of the second user account can be notified in time to perform corresponding operations, thereby improving the processing efficiency of the information to be processed, and being able to complete the processing of the information to be processed more quickly, thereby ensuring the timeliness of processing the information to be processed.

[0127] In one embodiment, the method further comprises: The login information is authenticated based on the login information input by the first device, and when the login information authentication is successful, the first user account is logged in.

[0128] The description of this embodiment can refer to the description of the corresponding embodiment on the first device side mentioned above.

[0129] In one embodiment, reference Figure 7 , is a schematic diagram of another data security information processing method based on mobile collaborative signature. The method also includes:

[0130] S701, after verifying that the digital certificate is a digital certificate issued by a preset certificate authority, obtaining a target public key according to the digital certificate.

[0131] S702: Perform signature verification on the second signature information according to the target public key.

[0132] S703: If the verification is successful, it is proved that the second signature information is the signature information of the first user account.

[0133] This embodiment provides an example of verifying signature information.

[0134] The service platform stores information of a preset certificate authority, such as a public key and a certificate chain, etc. The preset certificate authority may be a certificate authority that sends a digital certificate containing a target public key to the service platform.

[0135] A digital certificate includes the signature information of the certificate authority, public key, issuer information, validity period, information about the party to which the digital certificate belongs, etc.

[0136] You can first verify whether the digital certificate is a digital certificate issued by a preset certificate authority. For example, you can verify the signature information in the digital certificate using the public key of the preset certificate authority. If the signature is successfully decrypted, it means that the digital certificate is a digital certificate issued by the preset certificate authority.

[0137] The certificate chain of the certificate authority in the digital certificate can also be verified. If the certificate chain of the certificate authority can be verified, it proves that the digital certificate is issued by the preset certificate authority.

[0138] Exemplarily, after the digital certificate is verified by the certificate chain of the certificate authority, or the signature in the digital certificate is verified by the public key of the preset certificate authority, it means that the digital certificate has not been tampered with, and the public key contained in the digital certificate has not been tampered with, indicating that the digital certificate is a digital certificate issued by the certificate authority to the first user account, and the public key contained in the digital certificate is the target public key.

[0139] When the target public key is the target public key of the first user account, the private key corresponding to the target public key is determined based on the target public key. For example, the first user account can be determined by the target public key, and then the first public key of the first user account generated by the first device and the second public key of the first user account generated by the service platform are determined.

[0140] There is an association between each user account and the secret key generated by the first device and the service platform, and the corresponding secret key can be determined based on the account.

[0141] Since the digital signature is signed based on the first private key and the second private key, the signature information is verified by the target public key obtained based on the first public key and the second public key, thereby verifying whether the signature information is the signature of the first account user. If the signature information verification succeeds, it means that the signature information is the signature of the first account user. If the signature information verification fails, it means that the signature information is not the signature of the first account user, which may cause security issues.

[0142] In this way, after the first private key is leaked, it is impossible to make a digital signature using only the first private key. If only the first private key is used for digital signature, the target public key in the digital certificate will fail to verify the signature information. This solution combines the first signature information and the second signature information, and after the first device and the service platform have dual signatures, the target public key is also required to verify the signature when verifying the signature information, thereby improving the security of the information to be processed after the digital signature of the first user account.

[0143] In one embodiment, reference Figure 8 , is a schematic diagram of a data security information processing device based on mobile collaborative signature, the device comprising: A generating module 1, used to generate a first public-private key pair for a first user account in a service platform; wherein the first public-private key pair is generated by the first device; A first acquisition module 2 is used to obtain, through the service platform, a digital certificate issued by a certificate authority for the first user account; wherein the digital certificate is generated by the certificate authority based on a target public key sent by the service platform and information related to the first user account; the target public key is obtained based on a first public key in the first public-private key pair and a second public key in a second public-private key pair, and the second public-private key pair is generated by the service platform for the first user account; A first signature module 3 is used to digitally sign the information to be processed according to the first private key in the first public-private key pair to obtain first signature information; wherein the first signature information is used for the service platform to digitally sign with the second private key pair in the second public-private key pair / the first signature information to obtain second signature information that completes the signature of the information to be processed; The first sending module 4 is used to send the information to be processed carrying the first signature information and the digital certificate to the service platform.

[0144] In one embodiment, reference Fig. 9 , is a schematic diagram of another data security information processing device based on mobile collaborative signature, the device comprising: The determination module 10 is used to determine a target public key; wherein the target public key is obtained according to a first public key in a first public-private key pair of a first user account in the service platform and a second public key in a second public-private key pair of the first user account; the first public-private key pair is generated by the first device, and the second public-private key pair is generated by the service platform; A second acquisition module 20 is used to obtain a digital certificate issued by a certificate authority for the first user account based on the target public key and the information related to the first user account; wherein the digital certificate is generated by the certificate authority based on the target public key and the information related to the first user account; A second sending module 30, configured to send the digital certificate to the first device; The receiving module 40 is used to receive the information to be processed that carries the first signature information and the digital certificate and is sent by the first device; wherein the first signature information is obtained by the first device digitally signing the information to be processed using the first private key in the first public-private key pair; The second signature module 50 is used to digitally sign the first signature information using the second private key in the second public-private key pair to obtain second signature information, thereby completing the signing of the information to be processed.

[0145] In one embodiment, with the popularization of mobile Internet and the development of e-commerce technology, electronic contract data, as the foundation and core of e-commerce, is increasingly used in online business activities.

[0146] Normally, the way to process electronic contract data is: the parties to the contract first jointly determine the final electronic contract content through electronic data exchange or email reply, then use the traditional electronic signature method to complete the signature, and finally pass it to the other party through data exchange or email. This method is cumbersome to operate. Since the electronic contract is not authenticated and encrypted during its confirmation and transmission, the electronic contract data is easily intercepted illegally, posing a threat to the commercial secrets and transaction security of the parties to the contract, and there is a lack of security control over the management of the electronic contract data.

[0147] In addition, although the above-mentioned electronic signature method can ensure the legality and non-repudiation of electronic contract data, it does not guarantee the legal identity of the signatory of the electronic contract data, and the parties to the contract are not timely in operating the electronic contract signing process.

[0148] refer to Fig.10 , which is a schematic diagram of another data security information processing method based on mobile collaborative signature provided by this embodiment. It includes the following processes:

[0149] S1: Registering a first user account and a second user account on the service platform, including: the parties to the contract first register an account on the electronic contract management platform and use a mobile phone number authenticated by the operator as the account username.

[0150] Exemplarily, the service platform may include an electronic contract management platform.

[0151] S2: Logging in to the first user account through the first device, including: after the parties to the contract log in to the electronic contract management platform through the mobile smart terminal, they perform identity authentication of different roles (such as personal identity authentication and corporate real-name authentication).

[0152] S3: After the parties to the contract complete the identity authentication of the corresponding roles, a pair of public and private key factors are generated on the mobile smart terminal and the management platform respectively. After the mobile smart terminal sends the generated public key factor P1 to the management platform, P1 and the management platform's own public key P2 are multiplied by a dot multiplication operation to synthesize the public key P. The first device includes the mobile smart terminal.

[0153] S4: After the CA center confirms the identities of all parties to the contract, it uses the synthetic public key P and information related to the first user account to generate a mobile digital certificate, and issues their respective mobile signature digital certificates, encryption digital certificates and encryption private keys to all parties to the contract and records them on the mobile smart terminal side.

[0154] S5: After Party A of the contract passes the identity authentication and logs in to the electronic contract management platform, he can create a contract and select Party B or other parties with confirmed identities to issue SMS notifications for electronic contract signing.

[0155] S6: After the parties to the contract have passed identity authentication and logged into the electronic contract management platform using a mobile smart terminal, a mobile collaborative electronic signature calculated using the mobile digital certificates and key factors of each party can be embedded in the electronic contract.

[0156] S7: After the parties to the contract have passed identity authentication and logged into the electronic contract management platform using a mobile smart terminal, they can preview the electronic contract data. If the identity authentication is unauthorized, the electronic contract data will not be previewed.

[0157] S8: After the parties to the contract have passed the identity authentication and logged into the electronic contract management platform, they can download the electronic contract data. If the identity authentication is overstepped, the electronic contract data will not be downloaded.

[0158] S9: The electronic contract management platform provides the verification function of electronic contract data by verifying the mobile collaborative electronic signature implanted in S6. If the verification of the mobile collaborative electronic signature implanted in S6 fails, it means that the electronic contract data has been tampered with or is illegal, and the electronic contract data will be prompted to be invalid.

[0159] On the basis of submitting account data, the parties to the contract can realize role-based identity authentication to ensure the legal identity of the signatory of the electronic contract data. The parties to the contract can quickly and conveniently complete the signing process of the electronic contract to ensure the timeliness of the signing of the electronic contract. Through the identity authentication of the parties to the contract, the security control of the review and download of the electronic contract data is guaranteed.

[0160] By providing an electronic contract data verification platform, the post-verification of the legality of the electronic contract data is guaranteed. In addition to being applicable to electronic contract signing scenarios, the data processing method based on mobile collaborative signatures of the present invention can be applied to electronic documents involving multi-party cooperation and signing, such as: signing of legal documents, customer files of financial institutions such as banks and insurance companies, signing of electronic letters of guarantee, and signing of bids and certification documents for electronic bidding.

[0161] This embodiment adopts CA mobile digital certificate and combines digital signature and identity recognition technology to improve the timeliness of the electronic contract signing process and the security and confidentiality of electronic contract data processing.

[0162] See also Fig.11 The embodiment of the present disclosure further provides an electronic device 60, the electronic device comprising: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the information processing method in the aforementioned method embodiment.

[0163] The embodiment of the present disclosure also provides a non-transitory computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable the computer to execute the aforementioned method embodiment.

[0164] The embodiments of the present disclosure also provide a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium. The computer program includes program instructions, which, when executed by a computer, enable the computer to execute the information processing method in the aforementioned method embodiment.

[0165] refer to Fig.11 , which shows a schematic diagram of the structure of an electronic device 60 suitable for implementing the embodiment of the present disclosure. The electronic device in the embodiment of the present disclosure may include, but is not limited to, mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle terminals (such as vehicle navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Fig.11 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0166] like Fig.11 As shown, the electronic device 60 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage device 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the electronic device 60 are also stored. The processing device 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0167] Typically, the following devices may be connected to the I / O interface 605: input devices 606 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; output devices 607 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 608 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 609. The communication device 609 may allow the electronic device 60 to communicate with other devices wirelessly or by wire to exchange data. Although the electronic device 60 with various devices is shown in the figure, it should be understood that it is not required to implement or have all the devices shown. More or fewer devices may be implemented or have alternatively.

[0168] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device 609, or installed from a storage device 608, or installed from a ROM 602. When the computer program is executed by the processing device 601, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0169] It should be noted that the computer-readable medium mentioned above in the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0170] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0171] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: obtains at least two Internet Protocol addresses; sends a node evaluation request including the at least two Internet Protocol addresses to a node evaluation device, wherein the node evaluation device selects an Internet Protocol address from the at least two Internet Protocol addresses and returns it; receives the Internet Protocol address returned by the node evaluation device; wherein the obtained Internet Protocol address indicates an edge node in a content distribution network.

[0172] Alternatively, the computer-readable medium carries one or more programs, and when the one or more programs are executed by the electronic device, the electronic device: receives a node evaluation request including at least two Internet Protocol addresses; selects an Internet Protocol address from the at least two Internet Protocol addresses; and returns the selected Internet Protocol address; wherein the received Internet Protocol address indicates an edge node in a content distribution network.

[0173] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0174] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0175] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware. The name of a unit does not limit the unit itself in some cases. For example, the first acquisition unit may also be described as a "unit for acquiring at least two Internet Protocol addresses".

[0176] It should be understood that various parts of the present disclosure may be implemented in hardware, software, firmware, or a combination thereof.

[0177] The above is only a specific implementation of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims

1. A data security information processing method based on mobile collaborative signature, It is characterized in that Applied to a first device, the method includes: Generate a first public-private key pair for a first user account in the service platform; wherein the first public-private key pair is generated by the first device; Obtaining, through the service platform, a digital certificate issued by a certificate authority for the first user account; wherein the digital certificate is generated by the certificate authority based on a target public key sent by the service platform and information related to the first user account; the target public key is obtained based on a first public key in the first public-private key pair and a second public-private key pair, and the second public-private key pair is generated by the service platform for the first user account; Digitally signing the information to be processed according to the first private key in the first public-private key pair to obtain first signature information; wherein the first signature information is used for the service platform to digitally sign the first signature information using the second private key in the second public-private key pair to obtain second signature information that completes the signature of the information to be processed; The information to be processed carrying the first signature information and the digital certificate is sent to the service platform.

2. The method according to claim 1, It is characterized in that The step of obtaining, through the service platform, a digital certificate issued by a certificate authority for the first user account includes: Sending the first public key to the service platform; Receive the digital certificate sent by the service platform; wherein the digital certificate is sent to the service platform by the certificate authority after generating the digital certificate.

3. The method according to claim 1, It is characterized in that The step of obtaining, through the service platform, a digital certificate issued by a certificate authority for the first user account includes: Receiving the second public key sent by the service platform; Obtain the target public key according to the first public key and the second public key; Sending the target public key to the service platform; Receive the digital certificate sent by the service platform; wherein the digital certificate is sent to the service platform by the certificate authority after generating the digital certificate.

4. The method according to claim 1, It is characterized in that Before generating a first public-private key pair for a first user account in the service platform, the method further includes: Detecting an input operation on a login interface; wherein the login interface is a login interface of the service platform; Determine login information according to the input operation; Log in to the first user account according to the login information.

5. The method according to claim 1, It is characterized in that The method further comprises: Detecting a selection operation on a second user account selection interface; According to the selection operation, a second user account is determined; wherein the second user account is used as an account for signing the information to be processed with the first user account.

6. A data security information processing method based on mobile collaborative signature, It is characterized in that Applied to a service platform, the method comprises: Determine a target public key; wherein the target public key is obtained according to a first public key in a first public-private key pair of a first user account in the service platform and a second public key in a second public-private key pair of the first user account; the first public-private key pair is generated by the first device, and the second public-private key pair is generated by the service platform; Based on the target public key and the information related to the first user account, obtain a digital certificate issued by a certificate authority for the first user account; wherein the digital certificate is generated by the certificate authority based on the target public key and the information related to the first user account; Sending the digital certificate to the first device; Receiving information to be processed that carries first signature information and the digital certificate and is sent by the first device; wherein the first signature information is obtained by the first device digitally signing the information to be processed using the first private key in the first public-private key pair; The first signature information is digitally signed using the second private key in the second public-private key pair to obtain second signature information, thereby completing the signing of the information to be processed.

7. The method according to claim 6, It is characterized in that The determining of the target public key comprises: receiving the first public key sent by the first device; The target public key is obtained according to the first public key and the second public key.

8. The method according to claim 6, It is characterized in that The determining of the target public key comprises: sending the second public key to the first device; Receive the target public key sent by the first device, wherein the target public key is obtained by the first device according to the first public key and the second public key.

9. The method according to claim 6, It is characterized in that The obtaining, based on the target public key and the information related to the first user account, a digital certificate issued by a certificate authority for the first user account, comprises: Sending the target public key and information related to the first user account to the certificate authority; Receive the authorization digital certificate sent by the authorization center.

10. The method according to claim 6, It is characterized in that The method further comprises: Determine a second user account determined by the first device; Send a signature notification of the information to be processed to a second device associated with the second user account.

11. The method according to claim 6, It is characterized in that The method further comprises: Performing identity authentication on the login information according to the login information input by the first device; When the login information is successfully authenticated, log in to the first user account.

12. The method according to claim 6, It is characterized in that The method further comprises: After verifying that the digital certificate is a digital certificate issued by a preset certificate authority, obtaining the target public key according to the digital certificate; Performing signature verification on the second signature information according to the target public key; If the verification is successful, it proves that the second signature information is the signature information of the first user account.

13. A data security information processing device based on mobile collaborative signature, It is characterized in that include: A generation module, configured to generate a first public-private key pair for a first user account in a service platform; wherein the first public-private key pair is generated by the first device; A first acquisition module, configured to acquire, through the service platform, a digital certificate issued by a certificate authority for the first user account; wherein the digital certificate is generated by the certificate authority based on a target public key sent by the service platform and information related to the first user account; the target public key is obtained based on a first public key in the first public-private key pair and a second public key in a second public-private key pair, and the second public-private key pair is generated by the service platform for the first user account; A first signature module, configured to digitally sign the information to be processed according to the first private key in the first public-private key pair to obtain first signature information; wherein the first signature information is used by the service platform to digitally sign the first signature information using the second private key in the second public-private key pair to obtain second signature information that completes the signature of the information to be processed; The first sending module is used to send the information to be processed carrying the first signature information and the digital certificate to the service platform.

14. A data security information processing device based on mobile collaborative signature, It is characterized in that include: A determination module, used to determine a target public key; wherein the target public key is obtained according to a first public key in a first public-private key pair of a first user account in the service platform and a second public key in a second public-private key pair of the first user account; the first public-private key pair is generated by the first device, and the second public-private key pair is generated by the service platform; A second acquisition module is used to obtain a digital certificate issued by a certificate authority for the first user account based on the target public key and the information related to the first user account; wherein the digital certificate is generated by the certificate authority based on the target public key and the information related to the first user account; A second sending module, configured to send the digital certificate to the first device; a receiving module, configured to receive information to be processed and sent by the first device, the information carrying the first signature information and the digital certificate; wherein the first signature information is obtained by the first device digitally signing the information to be processed using the first private key in the first public-private key pair; The second signature module is used to digitally sign the first signature information using the second private key in the second public-private key pair to obtain second signature information, thereby completing the signing of the information to be processed.

15. An electronic device, It is characterized in that The electronic device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions or computer programs executable by the at least one processor, wherein the instructions or computer programs are executed by the at least one processor so as to enable the at least one processor to perform the method of any one of claims 1 to 5 or 6 to 12.

16. A non-transitory computer-readable storage medium storing a computer program or computer instructions, wherein the computer program or computer instructions are used to cause the computer to execute the method of any one of claims 1 to 5 or 6 to 12.

17. A computer program product comprising a computer program or executable instructions, It is characterized in that When the computer program or executable instructions are executed by a processor, the method according to any one of claims 1 to 5 or 6 to 12 is implemented.

Images