Online enterprise real name authentication method

Abstract

The invention relates to the technical field of authentication, and discloses an online enterprise real-name authentication method, which comprises a tax control information terminal collector, a tax control / digital certificate device connected with the tax control information terminal collector, and a local signature verification processor connected with the tax control information terminal collector. The local signature verification processor is connected with an encryption uplink and downlink communication module, and is connected with a cloud verification electronic identity sharing server through the encryption uplink and downlink communication module. According to the invention, real-name authentication information of remote non-face-to-face real-name authentication of an enterprise can be ensured to be real and reliable, an operator can be determined to have authority authorized by the enterprise, and the method has the advantages of plug and play, high real-time performance, safety, reliability and no need of manual auditing.

Description

Technical Field

[0001] The present invention relates to the technical field of enterprise authentication, and in particular to an online enterprise real-name authentication method. Background Art

[0002] With the rapid development of Internet technology, various new network economies continue to emerge. For example, with the development of global trade, especially since the signing of the RCEP agreement, a large number of corporate businesses need to be completed through online transactions. It is difficult for both parties to the transaction or the transaction platform to verify the true identity of the company in person, and it is necessary to remotely authenticate the identity of the company; however, the inventor found that the traditional method mainly adopts the method of stamping and mailing copies of corporate certificates, and the other party then remotely reviews them by telephone manually. This method not only has a certain error rate and cannot effectively identify the authenticity of the stamped copies, but also has low efficiency and cannot meet the requirements of online network business across time and space. In view of the above technical defects, the inventor has combined the current situation that corporate value-added tax control / digital certificate equipment has been popularized nationwide, and has studied and developed an information system for rapid real-name authentication of enterprises. In response to the above problems, the present invention proposes an online enterprise real-name authentication method based on the above problems. Summary of the invention

[0003] The purpose of the present invention is to provide an online enterprise real-name authentication method, which can ensure that the information of the enterprise's real-name authentication is authentic and reliable when it is remote and not face-to-face, and can determine that the operator has the authority authorized by the enterprise. It has the advantages of plug-and-play, strong real-time performance, safety and reliability, and no need for manual review.

[0004] The present invention is implemented as follows: The present invention provides an online enterprise real-name authentication method; it includes a tax control information terminal collector, a tax control / digital certificate device is connected to the tax control information terminal collector, the tax control information terminal collector is also connected to a local signature verification processor, an encrypted uplink and downlink communication module is connected to the local signature verification processor, and a cloud-based verification electronic identity sharing server is connected through the encrypted uplink and downlink communication module.

[0005] The tax control information terminal collector is used to identify the VID and PID of the USB device, enumerate the digital certificate container information in the tax control / digital certificate device and perform electronic signature operations;

[0006] The local signature verification processor is used to locally verify the validity of the user's digital certificate and operate the tax control device to electronically sign the random number obtained from the cloud;

[0007] The cloud-based electronic identity sharing server is connected to the local signature verification processor through encrypted uplink and downlink communication modules to verify the random number signature data and digital certificate. After the verification, it parses the digital certificate to obtain the real name of the remote enterprise and the enterprise's unified credit code, and generates a new cloud-based private key and digital certificate representing the enterprise's identity, providing online remote identity authentication and signature encryption services for third-party business systems.

[0008] Please follow the steps below:

[0009] S1: Initialize the client operating environment of the enterprise, install the tax control / digital certificate device driver, and install the driver of the tax control information terminal collector. The driver of the tax control information terminal collector is in the form of a client program or a browser control mode;

[0010] S 1.1 : When an enterprise requests remote identity initialization, it first initializes the client operating environment and installs the driver of the tax control / digital certificate device;

[0011] S 1.2 : Install the tax control disk device driver. Enterprises need to have a tax control disk device to issue value-added tax invoices. The device has two models. Model 1 is a white golden tax disk, and model 2 is a black tax control disk. They are collectively called tax control disks. Tax control disks are pre-installed with tax electronic certificates. The tax bureau generates them on-site in the tax control disk after the company's identity is reviewed on-site. The client operating environment is initialized. First, determine whether the client has installed the tax control disk driver. If not, download and install it on the website designated by the tax bureau;

[0012] S 1.3 : In addition to the tax control disk, the client operating environment also supports digital certificate USB devices issued by authoritative digital certificate certification agencies approved by the Ministry of Industry and Information Technology. According to the region where the enterprise user is located and the model of the digital certificate USB device, the driver can be downloaded and installed on the website of the designated digital certificate certification agency;

[0013] S 1.4 : When an enterprise user logs in to the enterprise's information system for rapid real-name authentication, the tax control information terminal collector access page on the browser side, the tax control information terminal collector client program in the form of a control is automatically downloaded and registered in the browser, and the user can complete further operations in the browser;

[0014] S 1.5 :If the enterprise user's browser does not support control download and registration, the tax control information terminal collector driver is provided for download and installation in the form of a client program, and further operations can be completed in the client program.

[0015] S2: The tax control information terminal collector driver monitors the plug-in and unplugging actions of the tax control / digital certificate device, records the PID / VID of the current device, and enumerates the application name and key container name of the current device, and reads the digital certificate in the device through the container name, and provides the user with a judgment choice by displaying the common name of the digital certificate, and sends the selected PDI / VIP and key container name to the local signature verification processor;

[0016] S 2.1 : When the tax control information terminal collector is working, first start the tax control information terminal collector client program or open the tax control information terminal collector web page through the browser to call the control. The client program or control monitors the changes of the USB port device through the system hook. If the currently plugged in device is in the initialized and defined PID / UID device list, it means that it is the target tax control / digital certificate device, record the PID / VID of the current device, and enumerate the application name and key container name of the specified PID / VID device;

[0017] S 2.2 :The tax control information terminal collector reads the digital certificate in the container of the device according to the specified container name, parses the digital certificate and displays the common name of the digital certificate. The common name is the enterprise name of the digital certificate user. The user provides a judgment based on the displayed enterprise name to select whether it is the enterprise. The tax control information terminal collector sends the selected PDI / VIP and key container name to the local signature verification processor.

[0018] S3: The local signature verification processor first verifies whether the trust chain of the enterprise digital certificate obtained by the tax control information terminal collector 12 is correct. If the verification is successful, the local signature verification processor applies to the cloud-based electronic identity sharing server for a random verification code through the encrypted uplink and downlink communication module 14;

[0019] S4: The local signature verification processor initiates a request to the cloud-based electronic identity verification sharing server to obtain a random verification code, where the verification code is a 32-bit random number generated by the cloud-based electronic identity verification sharing server and is a string encoded by Base64 (a method for representing binary data based on 64 printable characters);

[0020] S5: The encrypted uplink and downlink communication module 14 sends the 32-bit random number generated by the cloud-based electronic identity verification shared server, and the Base64 (a method of representing binary data based on 64 printable characters) encoded string to the local signature verification processor through the downlink communication module;

[0021] S6: After obtaining the random verification code, the local signature verification processor uses the PID / VIP and key container as indexes to call the tax control / digital certificate device 11 to perform a digital signature operation on the random verification code;

[0022] S7: The encrypted uplink and downlink communication module encapsulates the digital signature value obtained by successfully performing a digital signature operation on the random verification code of the local signature verification processor 13, the random verification code, and the digital certificate obtained from the tax control disk / digital certificate USB device into a signed digital envelope in accordance with the PKCS#7 (syntax standard for encrypted messages) format, and sends it to the cloud-based electronic identity verification sharing server by the uplink communication module;

[0023] S8: The cloud-based electronic identity sharing server parses the signed digital envelope and verifies the signature data in the digital envelope. If the signed data has not been tampered with, the signed data is compared with the random verification code stored in the server. If they are consistent, the digital certificate in the signed digital envelope is further verified by verifying the certificate trust chain to see whether it is issued by the designated digital certificate issuing agency and whether it has been revoked when signed. If the verification is successful, it proves that the remote enterprise real-name identity has been verified by the tax department or the authoritative digital certificate issuing agency, and the current remote operating user has the authority to operate the tax control disk and digital certificate device. It can be concluded that the current remote real-name authentication enterprise identity is the real identity, and the current operator is the enterprise authorized operator. After the verification is successful, the enterprise signature certificate is parsed to obtain the real name of the remote enterprise and the enterprise unified credit code.

[0024] S 8.1 : The cloud-based electronic identity verification sharing server receives the signed digital envelope sent by the local signature verification processor;

[0025] S 8.2 : The cloud-based electronic identity verification sharing server parses the signed digital envelope to obtain the signed message, the digital signature value, and the digital certificate obtained from the tax control disk / digital certificate USB device;

[0026] S 8.3 : The cloud-based electronic identity sharing server verifies the non-repudiation of the signed message. If the verification is successful, it means that the signed data has not been tampered with. If the verification fails, it returns that the enterprise real-name authentication has failed;

[0027] S 8.4: After the cloud-based electronic identity sharing server verifies that the signed message has passed, it continues to compare the consistency between the signed message and the random verification code saved by the server. If the random verification code consistency verification passes, it means that the signed data has not been tampered with, and the current remote operation user has the authority to operate the tax control disk and digital certificate device, eliminating replay attacks. If the verification fails, it returns that the enterprise real-name authentication has failed;

[0028] S 8.5 :The cloud-based electronic identity sharing server verifies the signature digital envelope. If the random verification code consistency verification is passed, the certificate validity is verified, and further verifies whether the digital certificate in the signature digital envelope is issued by the designated digital certificate issuing agency, whether it has expired or been revoked when signed. If the verification is passed, it proves that the remote enterprise real-name identity has been verified by the tax department or the authoritative digital certificate issuing agency, and the certificate is valid during the current signing operation;

[0029] S 8.6 : After the cloud-based electronic identity sharing server verifies the validity of the digital certificate of the signed digital envelope, it parses the digital certificate to obtain the common name of the certificate user in the certificate, and the corporate entity identifier, that is, the real name of the remote enterprise real-name authentication enterprise and the enterprise unified social credit code. It can be concluded that the current remote real-name authentication enterprise identity is authentic and the current operator is an authorized operator of the enterprise.

[0030] S9: After the cloud-based electronic identity verification sharing server confirms that the current remote real-name authentication enterprise identity is authentic according to the above steps and that the current operator is an authorized operator of the enterprise, it generates a new non-opposition key of the domestic cryptographic algorithm for the enterprise in the cloud, and applies to the third-party electronic certification agency for the issuance of a new cloud-based enterprise digital certificate;

[0031] S 10 :The cloud-based electronic identity verification sharing server proves the true information of the current corporate identity to the third-party business system according to business needs, and provides corporate digital signature and encryption and decryption services in the cloud.

[0032] Compared with the prior art, the present invention has the following beneficial effects:

[0033] 1. Through the tax control information terminal collector, which is connected to the tax control / digital certificate device, it is used to identify the VID (Vendor ID, vendor identification code) and PID (Product ID, product identification code) of the USB (Universal Serial Bus) device, enumerate the digital certificate container information in the tax control / digital certificate device and perform electronic signature operations; the local signature verification processor is connected to the tax control information terminal collector, which is used to locally verify the validity of the user's digital certificate and operate the tax control device to electronically sign the random number obtained from the cloud; the cloud verifies the electronic identity sharing server, It is connected to the local signature verification processor through the encrypted uplink and downlink communication modules, verifies the random number signature data and digital certificate, parses the digital certificate after the verification to obtain the real name of the remote enterprise and the unified credit code of the enterprise, and generates a new cloud private key and digital certificate representing the enterprise identity, providing online remote identity authentication and signature encryption and decryption services for third-party business systems; the information system for rapid real-name authentication of enterprises according to this embodiment can ensure that the information of real-name authentication of enterprises is authentic and reliable when they are remote and not face-to-face, and can determine that the operator has the authority authorized by the enterprise, and has the advantages of plug-and-play, strong real-time performance, safety and reliability, and no need for manual review. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0035] Figure 1 is a flow chart of the method of the present invention;

[0036] Figure 2 is a system structure diagram of the present invention;

[0037] Among them, there are numerical control / digital certificate equipment 11, tax control information terminal collector 12, local signature verification processor 13, encrypted uplink and downlink communication module 14, and cloud verification electronic identity sharing server 15. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention. Therefore, the following detailed description of the embodiments of the present invention provided in the drawings is not intended to limit the scope of the invention claimed for protection, but merely represents the selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0039] See also Figure 1-2 , an online enterprise real-name authentication method; including a tax control information terminal collector, a tax control / digital certificate device is connected to the tax control information terminal collector, the tax control information terminal collector is also connected to a local signature verification processor, an encrypted uplink and downlink communication module is connected to the local signature verification processor, and a cloud-based verification electronic identity sharing server is connected through the encrypted uplink and downlink communication module.

[0040] The tax control information terminal collector is used to identify the VID and PID of the USB device, enumerate the digital certificate container information in the tax control / digital certificate device and perform electronic signature operations;

[0041] The local signature verification processor is used to locally verify the validity of the user's digital certificate and operate the tax control device to electronically sign the random number obtained from the cloud;

[0042] The cloud-based electronic identity sharing server is connected to the local signature verification processor through encrypted uplink and downlink communication modules to verify the random number signature data and digital certificate. After the verification, it parses the digital certificate to obtain the real name of the remote enterprise and the enterprise's unified credit code, and generates a new cloud-based private key and digital certificate representing the enterprise's identity, providing online remote identity authentication and signature encryption services for third-party business systems.

[0043] Please follow the steps below:

[0044] S1: Initialize the client operating environment of the enterprise, install the driver of the tax control / digital certificate device 11, and install the driver of the tax control information terminal collector 12. The driver of the tax control information terminal collector is in the form of a client program or a browser control mode;

[0045] S 1.1: When an enterprise requests remote identity initialization, it first initializes the client operating environment and installs the driver of the tax control / digital certificate device 11;

[0046] S 1.2 : Install the tax control disk device driver. Enterprises need to have a tax control disk device to issue value-added tax invoices. The device has two models. Model 1 is a white golden tax disk, and model 2 is a black tax control disk. They are collectively called tax control disks. Tax control disks are pre-installed with tax electronic certificates. The tax bureau generates them on-site in the tax control disk after the company's identity is reviewed on-site. The client operating environment is initialized. First, determine whether the client has installed the tax control disk driver. If not, download and install it on the website designated by the tax bureau;

[0047] S 1.3 : In addition to the tax control disk, the client operating environment also supports digital certificate USB devices issued by authoritative digital certificate certification agencies approved by the Ministry of Industry and Information Technology. According to the region where the enterprise user is located and the model of the digital certificate USB device, the driver can be downloaded and installed on the website of the designated digital certificate certification agency;

[0048] S 1.4 : When the enterprise user logs in to the enterprise's information system for rapid real-name authentication and accesses the tax control information terminal collector 12 on the browser side, the tax control information terminal collector 12 client program in the form of a control is automatically downloaded and registered in the browser, and the user can complete further operations in the browser;

[0049] S 1.5 :If the enterprise user's browser does not support control download and registration, the tax control information terminal collector 12 driver is provided for download and installation in the form of a client program, and further operations can be completed in the client program.

[0050] S2: The driver of the tax control information terminal collector 12 monitors the plug-in and unplugging actions of the tax control / digital certificate device 11, records the PID / VID of the current device, and enumerates the application name and key container name of the current device, and reads the digital certificate in the device through the container name, and provides the user with a judgment choice by displaying the common name of the digital certificate, and sends the selected PDI / VIP and key container name to the local signature verification processor 13;

[0051] S 2.1: When the tax control information terminal collector 12 is working, first start the tax control information terminal collector 12 client program or open the tax control information terminal collector 12 web page through the browser to call the control. The client program or control monitors the changes of the USB port device through the system hook. If the currently plugged in device is in the initialized and defined PID / UID device list, it means that it is the target tax control / digital certificate device 11, record the PID / VID of the current device, and enumerate the application name and key container name of the specified PID / VID device;

[0052] S 2.2 :The tax control information terminal collector 12 reads the digital certificate in the container of the device according to the specified container name, parses the digital certificate and displays the common name of the digital certificate. The common name is the company name of the digital certificate user. The user provides a judgment based on the displayed company name to determine whether it is the company. The tax control information terminal collector 12 sends the selected PDI / VIP and key container name to the local signature verification processor 13.

[0053] S3: The local signature verification processor 13 first verifies whether the trust chain of the enterprise digital certificate obtained by the tax control information terminal collector 12 is correct. If the verification is successful, the local signature verification processor 13 applies to the cloud-based electronic identity verification sharing server 15 for a random verification code through the encrypted uplink and downlink communication module 14;

[0054] S4: The local signature verification processor 13 initiates a request to the cloud-based electronic identity verification sharing server 15 to obtain a random verification code, where the verification code is a 32-bit random number generated by the cloud-based electronic identity verification sharing server 15 and is a string encoded by Base64 (a method for representing binary data based on 64 printable characters);

[0055] S5: The encrypted uplink and downlink communication module 14 sends the 32-bit random number generated by the cloud-based electronic identity verification shared server 15 to the local signature verification processor 13 through the downlink communication module after Base64 encoding (a method of representing binary data based on 64 printable characters).

[0056] S6: After obtaining the random verification code, the local signature verification processor 13 uses the PID / VIP and key container as indexes to call the tax control / digital certificate device 11 to perform a digital signature operation on the random verification code;

[0057] S7: The encrypted uplink and downlink communication module 14 encapsulates the digital signature value obtained by successfully performing a digital signature operation on the random verification code of the local signature verification processor 13, the random verification code, and the digital certificate obtained from the tax control disk / digital certificate USB device into a signed digital envelope in accordance with the PKCS#7 (syntax standard for encrypted messages) format, and sends it to the cloud-based electronic identity verification sharing server 15 through the uplink communication module;

[0058] S8: The cloud-based electronic identity verification sharing server 15 parses the signed digital envelope and verifies the signature data in the digital envelope. If the signed data has not been tampered with, the signed data is compared with the random verification code stored in the server. If they are consistent, the digital certificate in the signed digital envelope is further verified by verifying the certificate trust chain to see whether it is issued by the designated digital certificate issuing agency and whether it has been revoked when signed. If the verification is successful, it proves that the remote enterprise real-name identity has been verified by the tax department or the authoritative digital certificate issuing agency, and the current remote operating user has the authority to operate the tax control disk and digital certificate device. It can be concluded that the current remote real-name authentication enterprise identity is the real identity, and the current operator is the enterprise authorized operator. After the verification is successful, the enterprise signature certificate is parsed to obtain the real name and unified credit code of the remote enterprise.

[0059] S 8.1 : The cloud-based electronic identity verification sharing server 15 receives the signed digital envelope sent by the local signature verification processor;

[0060] S 8.2 : The cloud-based electronic identity verification sharing server 15 parses the signed digital envelope to obtain the signed message, the digital signature value, and the digital certificate obtained from the tax control disk / digital certificate USB device;

[0061] S 8.3 : The cloud-based electronic identity sharing server 15 verifies the non-repudiation of the signed message. If the verification is successful, it means that the signed data has not been tampered with. If the verification fails, it returns that the enterprise real-name authentication has failed;

[0062] S 8.4 : After the cloud-based electronic identity sharing server 15 verifies that the signed message passes, it continues to compare the consistency of the signed message with the random verification code saved by the server. If the random verification code consistency verification passes, it means that the signed data has not been tampered with, and the current remote operation user has the authority to operate the tax control disk and digital certificate device, excluding replay attacks. If the verification fails, it returns that the enterprise real-name authentication fails;

[0063] S 8.5: The cloud-based electronic identity sharing server 15 verifies the signature digital envelope. If the random verification code consistency verification is passed, the certificate validity is verified, and further verifies whether the digital certificate in the signature digital envelope is issued by the designated digital certificate issuing agency, whether it has expired or been revoked when signed. If the verification is passed, it proves that the remote enterprise real-name identity has been verified by the tax department or the authoritative digital certificate issuing agency, and the certificate is valid during the current signing operation;

[0064] S 8.6 : After the cloud-based electronic identity sharing server 15 verifies the validity of the digital certificate of the signed digital envelope, it parses the digital certificate, obtains the common name of the certificate user in the certificate, and the corporate entity identifier, that is, the real name of the remote enterprise real-name authentication enterprise and the enterprise unified social credit code. It can be concluded that the current remote real-name authentication enterprise identity is authentic and the current operator is an authorized operator of the enterprise.

[0065] S9: After the cloud-based electronic identity verification sharing server 15 confirms that the current remote real-name authentication enterprise identity is authentic according to the above steps and that the current operator is an authorized operator of the enterprise, it generates a new non-opposing key of the domestic cryptographic algorithm for the enterprise in the cloud, and applies to the third-party electronic certification agency for the issuance of a new cloud-based enterprise digital certificate;

[0066] S 10 :The cloud-based electronic identity verification sharing server 15 proves the true information of the current enterprise identity to the third-party business system according to business needs, and provides enterprise digital signature and encryption and decryption services in the cloud.

[0067] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An online enterprise real-name authentication method, characterized by: It includes a tax control information terminal collector, a tax control / digital certificate device is connected to the tax control information terminal collector, the tax control information terminal collector is also connected to a local signature verification processor, an encrypted uplink and downlink communication module is connected to the local signature verification processor, and a cloud verification electronic identity sharing server is connected through the encrypted uplink and downlink communication module; specifically, the following steps are performed: S1: Initialize the client operating environment of the enterprise, install the tax control / digital certificate device driver, and install the driver of the tax control information terminal collector. The driver of the tax control information terminal collector is in the form of a client program or a browser control mode; S2: The tax control information terminal collector driver monitors the plug-in and unplugging actions of the tax control / digital certificate device, records the PID / VID of the current device, and enumerates the application name and key container name of the current device, and reads the digital certificate in the device through the container name, and provides the user with a judgment choice by displaying the common name of the digital certificate, and sends the selected PDI / VIP and key container name to the local signature verification processor; S3: The local signature verification processor first verifies whether the enterprise digital certificate trust chain obtained by the tax control information terminal collector is correct. If the verification is successful, the local signature verification processor applies to the cloud-based electronic identity sharing server for a random verification code through an encrypted uplink and downlink communication module. S4: The local signature verification processor initiates a request to the cloud-based electronic identity verification sharing server to obtain a random verification code, where the verification code is a 32-bit random number generated by the cloud-based electronic identity verification sharing server and is a Base64-encoded string; S5: The encrypted uplink and downlink communication module sends the 32-bit random number generated by the cloud-based electronic identity verification shared server and the Base64-encoded string to the local signature verification processor through the downlink communication module; S6: After obtaining the random verification code, the local signature verification processor uses the PID / VIP and key container as indexes to call the tax control / digital certificate device to perform a digital signature operation on the random verification code; S7: The encrypted uplink and downlink communication module encapsulates the digital signature value obtained by successfully performing a digital signature operation on the random verification code of the local signature verification processor, the random verification code, and the digital certificate obtained from the tax control disk / digital certificate USB device into a signed digital envelope in accordance with the PKCS#7 format, and sends it to the cloud-based electronic identity verification sharing server by the uplink communication module; S8: The cloud-based electronic identity sharing server parses the signed digital envelope and verifies the signature data in the digital envelope. If the signed data has not been tampered with, the signed data is compared with the random verification code stored in the server. If they are consistent, the digital certificate in the signed digital envelope is further verified by verifying the certificate trust chain to see whether it is issued by the designated digital certificate issuing agency and whether it has been revoked when signed. If the verification is successful, it proves that the remote enterprise real-name identity has been verified by the tax department or the authoritative digital certificate issuing agency, and the current remote operating user has the authority to operate the tax control disk and digital certificate device. It can be concluded that the current remote real-name authentication enterprise identity is the real identity, and the current operator is the enterprise authorized operator. After the verification is successful, the enterprise signature certificate is parsed to obtain the real name of the remote enterprise and the enterprise unified credit code. S9: After the cloud-based electronic identity verification sharing server confirms that the current remote real-name authentication enterprise identity is authentic according to the above steps and that the current operator is an authorized operator of the enterprise, it generates a new non-opposition key of the domestic cryptographic algorithm for the enterprise in the cloud, and applies to the third-party electronic certification agency for the issuance of a new cloud-based enterprise digital certificate; S 10 :The cloud-based electronic identity verification sharing server proves the true information of the current corporate identity to the third-party business system according to business needs, and provides corporate digital signature and encryption and decryption services in the cloud.

2. According to claim 1, an online enterprise real-name authentication method is characterized in that: In step S1, the following steps are specifically performed: S 1.1 : When an enterprise requests remote identity initialization, it first initializes the client operating environment and installs the driver of the tax control / digital certificate device; S 1.2 : Install the tax control disk device driver. Enterprises need to have a tax control disk device to issue value-added tax invoices. The device has two models. Model 1 is a white golden tax disk, and model 2 is a black tax control disk. They are collectively called tax control disks. Tax control disks are pre-installed with tax electronic certificates. The tax bureau generates them on-site in the tax control disk after the company's identity is reviewed on-site. The client operating environment is initialized. First, determine whether the client has installed the tax control disk driver. If not, download and install it on the website designated by the tax bureau; S 1.3 : In addition to the tax control disk, the client operating environment also supports digital certificate USB devices issued by authoritative digital certificate certification agencies approved by the Ministry of Industry and Information Technology. According to the region where the enterprise user is located and the model of the digital certificate USB device, the driver can be downloaded and installed on the website of the designated digital certificate certification agency; S 1.4 : When an enterprise user logs in to the enterprise's information system for rapid real-name authentication, the tax control information terminal collector access page on the browser side, the tax control information terminal collector client program in the form of a control is automatically downloaded and registered in the browser, and the user can complete further operations in the browser; S 1.5 :If the enterprise user's browser does not support control download and registration, the tax control information terminal collector driver is provided for download and installation in the form of a client program, and further operations can be completed in the client program.

3. According to the method for online enterprise real-name authentication of claim 1, it is characterized in that in step S2, the following steps are specifically performed: S 2.1 : When the tax control information terminal collector is working, first start the tax control information terminal collector client program or open the tax control information terminal collector web page through the browser to call the control. The client program or control monitors the changes of the USB port device through the system hook. If the currently plugged in device is in the initialized and defined PID / UID device list, it means that it is the target tax control / digital certificate device, record the PID / VID of the current device, and enumerate the application name and key container name of the specified PID / VID device; S 2.2 :The tax control information terminal collector reads the digital certificate in the container of the device according to the specified container name, parses the digital certificate and displays the common name of the digital certificate. The common name is the enterprise name of the digital certificate user. The user provides a judgment based on the displayed enterprise name to select whether it is the enterprise. The tax control information terminal collector sends the selected PDI / VIP and key container name to the local signature verification processor.

4. The online enterprise real-name authentication method according to claim 1, wherein step S8 is specifically performed according to the following steps: S 8。1 : The cloud-based electronic identity verification sharing server receives the signed digital envelope sent by the local signature verification processor; S 8。2 : The cloud-based electronic identity verification sharing server parses the signed digital envelope to obtain the signed message, the digital signature value, and the digital certificate obtained from the tax control disk / digital certificate USB device; S 8。 3: The cloud-based electronic identity verification sharing server 15 verifies the non-repudiation of the signed message. If the verification is successful, it means that the signed data has not been tampered with. If the verification fails, it returns that the enterprise real-name authentication has failed; S 8。 4: After the cloud-based electronic identity sharing server verifies that the signed message has passed, it continues to compare the consistency between the signed message and the random verification code saved by the server. If the random verification code consistency verification passes, it means that the signed data has not been tampered with, and the current remote operation user has the authority to operate the tax control disk and digital certificate device, eliminating replay attacks. If the verification fails, it returns that the enterprise real-name authentication has failed; S 8。 5: The cloud-based electronic identity sharing server verifies the signature digital envelope. If the random verification code consistency verification is passed, the certificate validity is verified, and further verifies whether the digital certificate in the signature digital envelope is issued by the designated digital certificate issuing agency, whether it has expired or been revoked at the time of signing. If the verification is passed, it proves that the remote enterprise real-name identity has been verified by the tax department or the authoritative digital certificate issuing agency, and the certificate is valid during the current signing operation; S 8。 6: After the cloud-based electronic identity sharing server verifies the validity of the digital certificate of the signed digital envelope, it parses the digital certificate to obtain the common name of the certificate user in the certificate, and the corporate entity identifier, that is, the real name of the remote enterprise real-name authentication enterprise and the enterprise unified social credit code. It can be concluded that the current remote real-name authentication enterprise identity is authentic and the current operator is an authorized operator of the enterprise.

Images