Electronic signature system and method for global quantum security

Abstract

The invention discloses a global quantum security electronic signature system and method. The system comprises a signature terminal, a signature server and a signature verification terminal which are connected in pairs, the signature terminal is used for storing a to-be-signed file, acquiring signature handwriting related information of a signer and biological information of the signer, receiving a signature issued by the signature server, and signing the to-be-signed file by using the received signature; the signature server is used for authenticating identity information of a signer, generating a signature and issuing the signature to the signature terminal; and the signature verification terminal is used for carrying out signature verification on the signed file, and after the verification is passed, a receiver of the signed file receives the signed file. The whole process of signature application, signature generation, signature issuing, signature performing and signature verification in the electronic signature process is quantum safe, the cracking threat of the current quantum technology can be resisted, and the safety of the electronic signature is ensured.

Description

Technical Field

[0001] The present application relates to the field of signature technology, and in particular to a global quantum secure electronic signature system and method. Background Art

[0002] With the rapid development of mobile Internet, the signing and confirmation of written contracts are very important links. More and more business scenarios require users to sign and confirm on electronic devices. Especially in e-commerce, the two parties (or multiple parties) of the transaction may be thousands of miles apart and do not know each other, or even do not meet from beginning to end during the entire transaction process. The traditional signing method is difficult to apply to such transactions. Therefore, people try to adopt an electronic signature mechanism to prove each other's identity and express their recognition of the content of the documents involved in the transaction. This is the electronic signature. For legal persons such as enterprises, electronic seals can replace traditional physical seals to express the company's recognition of the content of the document, but for natural persons, they often need to sign in person to express their recognition of the content of the document. Even for some corporate documents, they need to be signed by the corresponding personnel in handwriting before they can be effective.

[0003] In December 2001, the 85th plenary meeting of the 56th session of the United Nations formally adopted the United Nations Commission on International Trade Law Model Law on Electronic Signatures (hereinafter referred to as the "Model Law on Electronic Signatures"), which provides electronic signatures and related concepts: "Electronic signature" refers to data contained in, attached to or logically linked to a data message in electronic form, which can be used to identify the signatory related to the data message and indicate the signatory's approval of the information contained in the data message.

[0004] In view of the wide application scenarios of electronic signatures, electronic signatures should have the properties of identity authentication, data integrity, and non-repudiation. At present, the security of electronic signatures is guaranteed by digital signature technology based on the RSA public key system, but the RSA public key system is based on two mathematical problems: factorization of large integers or calculation of discrete logarithms over finite fields. With the development of quantum technology, the huge computing power of quantum computers can perform integer factorization or discrete logarithm calculations in polynomial time (that is, the cracking time increases at a rate of k as the length of the public key increases, where k is a constant that is independent of the length of the public key), thereby providing the possibility of cracking encryption algorithms such as RSA and discrete logarithms. Therefore, current electronic signatures can be cracked using quantum computers, and existing electronic signatures will no longer be safe in the environment of quantum technology. Summary of the invention

[0005] Purpose of the invention: In order to solve the relevant technical problems raised in the background technology, the present invention provides a global quantum-secure electronic signature system and method, which is quantum-secure in the entire process of electronic signature from applying for signature - generating signature - issuing signature - signing - verifying signature, which can resist the cracking threat of current quantum technology and ensure the security of electronic signature.

[0006] Technical solution: The present invention provides a global quantum-secure electronic signature system, which includes a signature terminal, a signature server, and a signature verification terminal connected in pairs;

[0007] The signing terminal is used to store the document to be signed, obtain the signature handwriting related information and the biometric information of the signatory, receive the signature issued by the signing server, and use the received signature to sign the document to be signed;

[0008] The signing server is used to authenticate the identity information of the signatory, generate a signature, and send the signature to the signing terminal;

[0009] The signature verification terminal is used to verify the signature of the signed document. Only after the verification is passed, the recipient of the signed document can receive the signed document.

[0010] The present invention also includes a global quantum-secure electronic signature method, comprising the following steps:

[0011] (1) The signing terminal applies for registration with the signing server and obtains the device identity information of the signing terminal; then, the signing terminal enters the initial signature handwriting related information and uploads it to the signing server for storage;

[0012] (2) The signing terminal sends the signature data data1 to the signing server, requesting the signing of the document doc;

[0013] (3) The signing server generates a signature based on the signature data data1 and sends the signature to the signing terminal;

[0014] (4) The signing terminal signs the document to be signed doc using the received signature, and sends the signed document to the signature verification terminal for verification;

[0015] (5) The signature verification terminal verifies the signed document and accepts the signed document if the verification is successful; otherwise, the signature verification terminal rejects the signed document.

[0016] Beneficial effects of the present invention:

[0017] (1) With the electronic signature system and method proposed in this application, the entire process of electronic signature from applying for signature - generating signature - issuing signature - signing - verifying signature is quantum secure, which can resist the cracking threat of current quantum technology;

[0018] (2) Even if it is the same signatory, the force and characteristic parameters of the handwriting used in signing on the signature pad will not be completely consistent each time. In the signing method proposed in this application, the signature server uses the first offset of the handwriting characteristic parameters and the second offset of the pressure parameters applied to the signature pad each time as the fingerprint of the handwriting of this signature to generate this signature, thereby ensuring that this signature is unique and thus ensuring the security of this signature. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0020] Figure 1 It is a schematic diagram of the structure of the electronic signature system of the present invention;

[0021] Figure 2 It is a structural schematic diagram of the signing terminal of the present invention;

[0022] Figure 3 It is a structural diagram of the signature server of the present invention;

[0023] Figure 4 This is a schematic diagram of the structure of the signature verification terminal of the present invention;

[0024] Figure 5 Schematic diagram of the electronic signature method of the present invention;

[0025] Figure 6 Schematic diagram of the method for determining the starting position of signature handwriting. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0027] As mentioned in the background technology, the development of quantum technology has posed a threat to encryption algorithms such as RSA and discrete logarithm. How to ensure the security of electronic signatures in the environment of quantum technology has become a technical problem that needs to be solved urgently. In view of this, this application proposes a global quantum-secure electronic signature system and method.

[0028] like Figure 1 As shown, the electronic signature system of the present invention comprises a signature terminal 1, a signature server 2 and a signature verification terminal 3 connected in pairs, and also comprises a signature pad 4 and a biometric information input terminal 5 connected to the signature terminal 1;

[0029] The signature terminal 1 is a terminal owned by the signatory, which can be a mobile terminal such as a mobile phone, or a fixed terminal such as a PC, and is used to store the document to be signed, obtain the information related to the signatory's handwriting and the signatory's biometric information, receive the signature issued by the signature server, and use the received signature to sign the document to be signed; the information related to the signatory's handwriting is obtained through an external signature pad 4 device, and the biometric information of the signatory is obtained through an external biometric information input terminal 5. For example, the biometric information of the signatory may include facial feature information and fingerprint feature information, etc. Accordingly, the biometric information input terminal 5 may be a camera, a fingerprint input device, etc.

[0030] like Figure 2 As shown, the signature terminal 1 includes an information acquisition unit 101, a second encryption unit 102, a second decryption unit 103, a second key storage unit 104, a signature receiving unit 105, a second Hash calculation unit 106 and a signature file storage unit 107. The information acquisition unit 101, the second decryption unit 103, the signature receiving unit 105, the second Hash calculation unit 106 and the signature file storage unit 107 are connected in sequence, the second decryption unit 103 is also connected to the second key storage unit 104, the second key storage unit 104 is respectively connected to the second encryption unit 102 and the second Hash calculation unit 106, the second encryption unit 102 is respectively connected to the information acquisition unit 101, the second Hash calculation unit 106 and the signature file storage unit 107, and the signature file storage unit 107 is also connected to the second Hash calculation unit 106;

[0031] The information acquisition unit 101 is used to obtain information from the external signature pad 4 and the biometric information input terminal 5, and to receive a signature from the signature server 2; the second encryption unit 102 is used to encrypt the data content sent from the signature terminal 1; the second decryption unit 103 is used to decrypt the data content received by the information acquisition unit 101; the second key storage unit 104 is used to store keys and provide keys for the second encryption unit 102, the second decryption unit 103 and the second hash calculation unit 106; the signature receiving unit 105 is used to receive the decrypted signature, which is generated and distributed by the signature server 2; the second hash calculation unit 106 is used to perform hash calculation on the document to be signed, and to generate a signed signature file based on the signature and the document to be signed; the signature file storage unit 107 is used to store the document to be signed and the signature file after the signature is completed.

[0032] The signature server 2 in the system of the present invention is used to authenticate the identity information of the signatory, generate a signature, and send the signature to the signing terminal 1; Figure 3 As shown, the specific structure of the signature server 2 includes a first decryption unit 201, a registration unit 202, a signature data receiving unit 203, a signature data authentication unit 204, a true random number generator 205, a first hash calculation unit 206, a first key storage unit 207, a first encryption unit 208, a signature generation unit 209, a signature information storage unit 210 and an output unit 211. The first decryption unit 201 is connected to the registration unit 202, the signature data receiving unit 203 and the first key storage unit 207 respectively. The registration unit 202, the signature data authentication unit 204 and The first hash calculation unit 206 is connected in sequence, the first hash calculation unit 206 is connected to the first key storage unit 207, the true random number generator 205 and the signature generation unit 209 respectively, the signature data receiving unit 203 is also connected to the signature data authentication unit 204 and the signature generation unit 209 respectively, the signature generation unit 209 is also connected to the first encryption unit 208 and the signature information storage unit 210 respectively, the signature information storage unit 210 is also connected to the first encryption unit 208, and the first encryption unit 208 is respectively connected to the first key storage unit 207 and the output unit 211;

[0033] The first decryption unit 201 is used to decrypt the data content received by the signature server 2; the registration unit 202 is used to generate and distribute device identity information for the signature terminal 1, the device identity information corresponds to the identity of the signatory who owns it, and the registration unit 202 is also used to store the initial signature handwriting related information and store the signatory's biometric information; the signature data receiving unit 203 is used to receive the signature data written by the signatory when signing a document to be signed, and the signature data includes the signature handwriting related information and biometric information of the signatory for this signature; the signature data authentication unit 204 is used to authenticate the received signature data to ensure the legitimacy of the signatory's identity; the true random number generator 205 is used to generate a true random number and provide the true random number to the first hash calculation unit 2 06; the first hash calculation unit 206 is used to perform hash calculation; the first key storage unit 207 is used to store keys and provide keys for the first decryption unit 201, the first encryption unit 208 and the first hash calculation unit 206; the first encryption unit 208 is used to encrypt the data content sent from the signature server 2, where the data content includes the generated signature; the signature generation unit 209 is used to generate the signature and is the core unit of the signature server 2; the signature information storage unit 210 is used to store the serial number and signature-related parameters of this signature; the output unit 211 is used to send the data content encrypted by the first encryption unit 208, where the data content includes the ciphertext of the signature sent to the signature terminal 1 and the signature-related parameters sent to the signature verification terminal 3.

[0034] The registration unit 202 includes a user identity generation module 2021, a user identity issuance module 2022, a user identity storage module 2023, a signature handwriting storage module 2024 and a biometric information storage module 2025. The user identity generation module 2021 is connected to the user identity issuance module 2022 and the user identity storage module 2023 respectively; the user identity generation module 2021 is used to generate device identity information recognized by the signature server 2; the user identity issuance module 2022 is used to distribute the device identity information generated by the user identity generation module 2021 to the signature terminal 1; the user identity storage module 2023 is used to store the device identity information generated by the user identity generation module 2021; the signature handwriting storage module 2024 is used to store the initial signature handwriting related information of the signatory; the biometric information storage module 2025 is used to store the biometric information of the signatory;

[0035] The signature data authentication unit 204 includes a signature handwriting comparison module 2041, a biometric information verification module 2042 and a user identity authentication module 2043; the signature handwriting comparison module 2041 is used to compare the signature handwriting related information in the signature data with the initial signature handwriting related information stored in the signature handwriting storage module 2024 to verify whether the signature handwriting is a valid signature handwriting; the biometric information verification module 2042 is used to verify whether the biometric information in the signature data is consistent with the biometric information of the signatory stored in the biometric information storage module 2025; the user identity authentication module 2043 is used to verify whether the device identity information in the signature data is consistent with the device identity information stored in the user identity storage module 2023.

[0036] The signature verification terminal 3 in the system of the present invention can be the recipient of the signed document, or it can be a third-party device trusted by the recipient. The signature verification terminal 3 is used to verify the signature of the signed document and verify the legitimacy of the signature. Only after the verification is passed, the recipient of the signed document can accept the signed document. Figure 4 As shown, the specific structure of the signature verification terminal 3 includes a third decryption unit 301, a third key storage unit 302, a document verification unit 303 to be signed, a signature verification unit 304 and a verification result output unit 305. The document verification unit 303 to be signed, the third key storage unit 302 and the signature verification unit 304 are connected in sequence. The third decryption unit 301 is connected to the document verification unit 303 to be signed, the third key storage unit 302 and the signature verification unit 304 respectively. The verification result output unit 305 is connected to the document verification unit 303 to be signed and the signature verification unit 304 respectively. The document verification unit 303 to be signed is also connected to the signature verification unit 304.

[0037] The third decryption unit 301 is used to decrypt the data content received by the signature verification terminal 3; the third key storage unit 302 is used to store keys and provide keys for the third decryption unit 301, the document verification unit 303 to be signed and the signature verification unit 304; the document verification unit 303 to be signed is used to verify whether the document to be signed has been tampered with before and after signing; the signature verification unit 304 is used to verify the legitimacy of the signature; the verification result output unit 305 forms a final verification result based on the verification results of the document verification unit 303 to be signed and the signature verification unit 304 for output.

[0038] like Figure 5 As shown, based on the above electronic signature system, the present invention also includes a global quantum secure electronic signature method, comprising the following steps:

[0039] (1) The signing terminal 1 applies for registration with the signing server 2 and obtains the device identity information of the signing terminal 1; then, the signing terminal 1 enters the initial signature handwriting related information and uploads it to the signing server 2 for storage;

[0040] The specific process of the signing terminal 1 applying for registration with the signing server 2 and obtaining the device identity information of the signing terminal 1 is as follows:

[0041] 1) The information acquisition unit 101 of the signature terminal 1 first acquires the biometric information a of the signatory, such as fingerprint information, facial information, etc., through the external biometric information input terminal 5; the signature terminal 1 uses the device code b at the factory as an identifier, and then the information acquisition unit 101 combines the device code b of the signature terminal 1, the biometric information a of the signatory and the registration request into a first application, and then encrypts the first application through the second encryption unit 102 and sends it to the signature server 2;

[0042] 2) The first decryption unit 201 of the signature server 2 decrypts the ciphertext of the received first application to obtain the first application, and parses the device code b of the signature terminal 1 and the biometric information a of the signatory from the first application; the user identity generation module 2021 of the signature server 2 generates a device identity information c of the signature terminal 1 recognized by the signature server 2 based on the device code b and the biometric information a, stores the device identity information c in the user identity storage module 2023, and distributes the device identity information c to the signature terminal 1 via the user identity issuance module 2022; then, the biometric information a of the signatory is stored in the biometric information storage module 2025, and the device identity information c is to associate the device code b of the signature terminal 1 with the biometric information a of the signatory who owns the signature terminal 1;

[0043] 3) The information acquisition unit 101 of the signing terminal 1 acquires and stores the device identity information c of the signing terminal 1 .

[0044] The signature terminal 1 enters the information related to the initial signature handwriting and uploads it to the signature server 2 for storage, which means that: the information acquisition unit 101 of the signature terminal 1 obtains the signature handwriting of the signer from the external signature board 4 and records it as the initial signature handwriting, and sends the information related to the initial signature handwriting to the signature handwriting storage module 2024 of the signature server 2 for storage; wherein, the information related to the initial signature handwriting includes but is not limited to: the starting position of the signature handwriting, the image generated based on the signature handwriting, the writing order of the handwriting, the handwriting feature parameters, the pressure parameters of the signature board when writing the signature, etc.

[0045] Among them, handwriting feature parameters may be, for example, the bending angle of the bent strokes in the handwriting, the length of each stroke, special marks in the handwriting, etc. Special marks may be, for example, a dot added by some signatories after writing their signatures, etc., which are reflected in the handwriting due to personal writing habits.

[0046] The starting position of the signature is determined as follows: Figure 6As shown, a coordinate axis is established with the lower left corner of the signature pad screen as the origin, the lower edge of the signature pad screen as the X-axis, and the left edge as the Y-axis. The starting position of the initial signature handwriting is confirmed based on the coordinate axis. The starting position refers to the landing point of the signatory's first stroke.

[0047] In some embodiments, in order to ensure the generality of the initial signature handwriting, multiple signature handwritings may be recorded, and based on the multiple signature handwritings, common points of the multiple signature handwritings are obtained as handwriting feature parameters.

[0048] At this point, the initialization operation of the signature system is completed; thereafter, the signature system can perform document signing operations according to actual needs.

[0049] (2) The signing terminal 1 sends the signature data data1 to the signing server 2, requesting to sign the document doc. The specific process is as follows:

[0050] A) The signing terminal 1 calculates the hash value of the document doc to be signed;

[0051] The second hash calculation unit 106 of the signing terminal 1 obtains a set of random numbers u1 from the local computer to generate an irreducible polynomial p1(x). After obtaining the irreducible polynomial p1(x), the character string composed of the coefficients of each term except the highest term in the irreducible polynomial p1(x) is recorded as str1. The signing terminal 1, the signing server 2 and the signature verification terminal 3 share a set of keys (u2, u3, u4, u5) and generate a hash function h based on the irreducible polynomial p1(x) and the key u2. p1,u2 , using the hash function h p1,u2 Calculate the hash value of the document to be signed doc to get the first hash value h p1,u2 (doc); The hash function involved in this application is the Toeplitz hash function;

[0052] B) The signing terminal 1 generates the signature data data1 and sends it to the signing server 2;

[0053] Based on this signature request, the signatory signs on the signature pad 4, and the information acquisition unit 101 of the signature terminal 1 acquires the first relevant information mes-write of this signature handwriting; then, based on this signature request, the signatory enters the signatory's biometric information on the biometric information input terminal 5, and the information acquisition unit 101 acquires the first biometric information mes-people entered this time;

[0054] The information acquisition unit 101 sends the first relevant information of the signature handwriting mes-write, the first biometric information mes-people entered this time, and the device identity information c to the second encryption unit 102; at the same time, the second hash calculation unit 106 converts the first hash value The second encryption unit 102 sends the first relevant information of the signature mes-write, the first biometric information mes-people, the device identity information c and the first hash value Spliced ​​into the signature data data1, that is

[0055] The second encryption unit 102 then uses the key u3 to encrypt the first relevant information mes-write, the first biometric information mes-people and the device identity information c of the signature handwriting, and uses the key u4 to encrypt the first hash value Get the first ciphertext The second encryption unit 102 sends the first ciphertext m1 to the signature server 2. The first decryption unit 201 of the signature server 2 decrypts the received first ciphertext m1 using the shared key (u3, u4) to obtain the decrypted signature data data1′, and sends it to the signature data receiving unit 203.

[0056] C) The signature server 2 authenticates the signature data;

[0057] The signature data receiving unit 203 sends the decrypted signature handwriting first related information mes-write′, the first biometric information mes-people′ and the device identity information c′ to the signature data authentication unit 204; the biometric information verification module 2042 of the signature data authentication unit 204 verifies whether the first biometric information mes-people′ is consistent with the signatory biometric information a stored in the biometric information storage module 2025 during registration; the user identity authentication module 2043 of the signature data authentication unit 204 verifies whether the device identity information c′ is consistent with the device identity information c stored in the user identity storage module 2023 during registration; the signature handwriting verification module 2041 of the signature data authentication unit 204 compares the signature handwriting first related information mes-write′ with the initial signature handwriting related information stored in the signature handwriting storage module 2024 to verify whether the signature handwriting is a valid signature handwriting; when all three are verified, the signature data data1 is authenticated successfully and the next step is executed; otherwise, if any item is inconsistent, the signature data is returned to be regenerated;

[0058] The first signature handwriting related information mes-write′ is compared with the initial signature handwriting related information stored in the signature handwriting storage module 2024 to verify whether the signature handwriting is a valid signature handwriting. Specifically:

[0059] Traverse the initial signature handwriting related information stored in the signature handwriting storage module 2024, and verify whether the first signature handwriting related information mes-write′ and the stored initial signature handwriting related information completely overlap in terms of the starting position of the signature handwriting and the image generated based on the signature handwriting. If they completely overlap, it is considered that the signature is very likely to be a complete copy of the overlapped signature handwriting, and it is determined to be an invalid signature handwriting; otherwise, continue to verify the writing order of the handwriting. If the writing order is different, it is determined to be an invalid signature handwriting; otherwise, continue to verify the handwriting feature parameters and the pressure parameters of the signature plate when writing the signature, based on the stored handwriting. The first deviation s1 of the handwriting characteristic parameter is calculated based on the average value of the characteristic parameter, and the second deviation s2 of the pressure parameter is calculated based on the average value of the stored pressure parameter. The calculated first deviation s1 and second deviation s2 are compared with the preset deviation threshold s0. If both the first deviation s1 and the second deviation s2 are less than the preset deviation threshold s0, it is determined to be a valid signature handwriting, otherwise it is determined to be an invalid signature handwriting; for example, the deviation threshold s0 can be preset to 10%, and the threshold value is set according to actual needs. This application does not limit this value, and different deviation thresholds can also be set for the handwriting characteristic parameter and the pressure parameter. In response to the signature handwriting being a valid signature handwriting, the first relevant information mes-write′ of the signature handwriting is returned to the signature handwriting storage module 2024 for storage as a reference for subsequent signature handwriting comparison.

[0060] (3) The specific process of the signature server 2 generating a signature based on the signature data data1 and sending the signature to the signature terminal 1 is as follows:

[0061] S1: The first hash calculation unit 206 of the signature server 2 calculates the second hash value based on the first offset s1 and the second offset s2 obtained in the signature handwriting comparison process: The first hash calculation unit 206 obtains a set of random numbers v1 from the true random number generator 205, uses the random numbers v1 to generate an irreducible polynomial p2(x), and records the string composed of the coefficients of each term except the highest term in the irreducible polynomial p2(x) as str2; The signature server 2 negotiates a set of keys v2 with the signature verification terminal 3, and the first hash calculation unit 206 generates a hash function based on the irreducible polynomial p2(x) and the key v2 Use this hash function Calculate the hash value of the first offset s1 and the second offset s2 to obtain the second hash value

[0062] S2: The first hash calculation unit 206 calculates the second hash value The signature data receiving unit 203 of the signature server 2 sends the first hash value in the decrypted signature data data1′ to the signature generating unit 209; and the first relevant information mes-write′ of the signature handwriting are sent to the signature generation unit 209; the signature generation unit 209 generates a serial number NO of this signature, and the serial number NO, the first relevant information mes-write′ of the signature handwriting, the first hash value and the second hash value Splice for this signed document The serial number NO, the first relevant information of the signature handwriting mes-write′, the first offset s1, the second offset s2 and the string str2 of the signature are sent to the signature information storage unit 210 for storage as the signature information of the signature, and the signature information storage unit 210 associates the serial number NO with the first relevant information of the signature handwriting mes-write′, the first offset s1, the second offset s2 and the string str2, and the serial number NO is used as an index of the first relevant information of the signature handwriting mes-write′, the first offset s1, the second offset s2 and the string str2 for subsequent signature verification;

[0063] S3: The signature generation unit 209 calls the hash calculation capability of the first hash calculation unit 206 to obtain the signature SIGN. Specifically, the first hash calculation unit 206 obtains a set of random numbers w1 from the true random number generator 205, uses the random numbers w1 to generate an irreducible polynomial p3(x), and records the string consisting of the coefficients of each term except the highest term in the irreducible polynomial p3(x) as str3. The signature server 2 negotiates a set of keys w2 with the signature verification terminal 3, and the first hash calculation unit 206 generates a hash function based on the irreducible polynomial p3(x) and the key w2. Use this hash function Calculate the hash value of the signature file sign obtained from the signature generation unit 209 to obtain a third hash value And the third hash value The string str3 is sent to the signature generation unit 209, and the signature generation unit 209 converts the third hash value and serial number NO as the signature SIGN, that is The signature generation unit 209 then sends the string str3 to the signature information storage unit 210 for storage, and the signature information storage unit 210 associates the serial number NO with the string str3, and the serial number NO serves as an index of the string str3;

[0064] S4: The signature server 2 negotiates the transmission key k1 with the signature terminal 1. The first encryption unit 208 of the signature server 2 uses the transmission key k1 to encrypt the signature SIGN obtained from the signature generation unit 209 to obtain the ciphertext SIGN⊕k1, and sends the ciphertext to the signature terminal 1 via the output unit 211.

[0065] (4) The signing terminal 1 signs the document to be signed doc using the received signature, and sends the signed document to the signature verification terminal for verification;

[0066] The signing terminal 1 uses the received signature to sign the document doc to be signed, which means that: the signing terminal 1 uses the transmission key k1 to decrypt the received ciphertext SIGN⊕k1 to obtain the decrypted signature SIGN′, associates the signature SIGN′ with the image pic generated based on the signature handwriting, and constitutes signature image information including the signature SIGN′ information. The image pic is the external display form of the signature image information on the document doc to be signed, and the signature SIGN′ is the security guarantee of the signature image information; then the signature image information is added to the document doc to be signed to generate the signed signature file DOC, that is, DOC = (doc, SIGN′, pic); then, the signing terminal 1 encrypts the signature file DOC and sends it to the signature verification terminal 3.

[0067] (5) The signature verification terminal 3 verifies the signed document and accepts the signed document if the verification is successful; otherwise, the signed document is rejected;

[0068] The specific process of the signature verification terminal 3 verifying the signed document after the signature is as follows:

[0069] a) The third decryption unit 301 of the signature verification terminal 3 decrypts the encrypted signature document DOC obtained from the signing terminal 1 to obtain the signature document DOC′;

[0070] b) The signature verification terminal 3 verifies the consistency between the file content d in the signed file DOC′ and the file to be signed doc;

[0071] The third decryption unit 301 of the signature verification terminal 3 forwards the signature file DOC′ to the to-be-signed file verification unit 303 of the signature verification terminal 3. The to-be-signed file verification unit 303 parses the received signature file DOC′ to obtain the file content d except the signature image information;

[0072] The signing terminal 1 uses the negotiated key u4 to encrypt the first hash value h p1,u2 (doc), encrypt string str1 using key u5, and save the file Sent to the signature verification terminal 3; the third decryption unit 301 of the signature verification terminal 3 decrypts and obtains the first hash value The string str1′ is forwarded to the to-be-signed file verification unit 303, which generates an irreducible polynomial p1′(x) based on the string str1′ and generates a hash function using the irreducible polynomial p1′(x) and the shared key u2. And use this hash function Calculate the hash value of the file content d to get The calculated hash value And the decrypted hash value Compare. If the hash values ​​are equal, it means the verification is successful, and the file content d in the signature file DOC′ is consistent with the file to be signed doc, and the next step is executed; if they are inconsistent, it means the verification fails, and the file content d in the signature file DOC′ is tampered with compared with the file to be signed doc, and the verification result output unit of the signature verification terminal outputs the verification result of verification failure;

[0073] c) The signature verification terminal 3 verifies the signature SIGN' in the signature document DOC'.

[0074] The signature verification terminal 3 parses the signature SIGN′ from the signature file DOC′, and based on the serial number NO′ in the signature SIGN′, the signature verification terminal 3 requests the signature information storage unit 210 of the signature server 2 to obtain the signature information; the signature server 2 negotiates the transmission key k2 with the signature verification terminal 3, and the first encryption unit 208 of the signature server 2 encrypts the first related information mes-write′, the first offset s1, the second offset s2, the string str2 and the string str3 of the signature handwriting stored in the signature information storage unit 210 corresponding to the serial number NO′ using the transmission key k2, and sends the second ciphertext m2=(mes-write′,s1,s2,str2,str3)⊕k2 to the signature verification terminal 3;

[0075] The third decryption unit 301 of the signature verification terminal 3 uses the key k2 to decrypt and obtain the first relevant information of the signature handwriting mes-write", the first offset s1′, the second offset s2′, the string str2′ and the string str3′; the signature verification unit 304 of the signature verification terminal 3 then obtains the image pic′ generated based on the signature handwriting from the first relevant information of the signature handwriting mes-write″, and compares the image pic′ with the image pic in the signature file DOC′ to see whether they coincide. If they coincide, the verification continues; if they do not coincide, the signature verification fails, and the verification result output unit of the signature verification terminal outputs the verification result of verification failure;

[0076] The signature verification unit 304 of the signature verification terminal 3 generates an irreducible polynomial p2′(x) based on the string str2′, and uses the irreducible polynomial p2′(x) and the shared key v2 to generate a hash function And use this hash function Calculate the hash value of the first offset s1′ and the second offset s2′ to obtain The signature verification unit 304 obtains the calculated hash value from the to-be-signed file verification unit 303

[0077] The signature verification unit 304 combines the serial number NO′, the first relevant information of the signature handwriting mes-write″, and the hash value and hash value Second signature document The signature verification unit 304 generates an irreducible polynomial p3′(x) based on the string str3′, and generates a hash function using the irreducible polynomial p3′(x) and the shared key w2. And use this hash function Calculate the hash value of the second signature file sign' to get The signature verification unit 304 calculates the hash value The hash value parsed from the signature SIGN′ A comparison is performed. If they are consistent, the signature verification is successful and the recipient of the signed document accepts the signed document; if they are inconsistent, the signature verification fails, the verification result output unit of the signature verification terminal outputs a verification result of failed verification, and the recipient of the signed document rejects the signed document.

[0078] It can be seen that the entire electronic signature process of the present invention, from applying for signature - generating signature - issuing signature - signing - verifying signature, is quantum safe, and can resist the current threat of quantum technology cracking; and even if it is the same signatory, the force and characteristic parameters of the handwriting used to sign on the signature pad each time will not be completely consistent. In the signature method proposed in this application, the signature server uses the first offset of the handwriting characteristic parameters at each signature and the second offset of the pressure parameter applied to the signature pad as the fingerprint of the handwriting of this signature, generates this signature, ensures that this signature is unique, and thereby ensures the security of this signature.

Claims

1. A global quantum-secure electronic signature system, characterized by: The system includes a signature terminal, a signature server and a signature verification terminal connected in pairs; The signing terminal is used to store the document to be signed, obtain the signature handwriting related information and the biometric information of the signatory, receive the signature issued by the signing server, and use the received signature to sign the document to be signed; The signing server is used to authenticate the identity information of the signatory, generate a signature, and send the signature to the signing terminal; The signature verification terminal is used to verify the signature of the signed document. Only after the verification is passed, the recipient of the signed document can receive the signed document.

2. A global quantum-secure electronic signature system according to claim 1, characterized in that: The system also includes a signature pad and a biometric information input terminal connected to the signature terminal; the signature pad is used to obtain the handwriting related information of the signatory; the biometric information input terminal is used to obtain the biometric information of the signatory, and the biometric information of the signatory includes the facial feature information and fingerprint feature information of the signatory.

3. A global quantum-secure electronic signature system according to claim 1, characterized in that: The signature server comprises a first decryption unit, a registration unit, a signature data receiving unit, a signature data authentication unit, a true random number generator, a first Hash calculation unit, a first key storage unit, a first encryption unit, a signature generation unit, a signature information storage unit and an output unit, wherein the first decryption unit is connected to the registration unit, the signature data receiving unit and the first key storage unit respectively, the registration unit, the signature data authentication unit and the first Hash calculation unit are connected in sequence, the first Hash calculation unit is connected to the first key storage unit, the true random number generator and the signature generation unit respectively, the signature data receiving unit is also connected to the signature data authentication unit and the signature generation unit respectively, the signature generation unit is also connected to the first encryption unit and the signature information storage unit respectively, the signature information storage unit is also connected to the first encryption unit, and the first encryption unit is connected to the first key storage unit and the output unit respectively; The first decryption unit is used to decrypt the data content received by the signature server; the registration unit is used to generate and distribute device identity information for the signature terminal, and to store the initial signature handwriting related information and the signatory's biometric information; the signature data receiving unit is used to receive the signature data written by the signatory when signing a document to be signed, and the signature data includes the signature handwriting related information and biometric information of the signatory for this signature; the signature data authentication unit is used to authenticate the received signature data; The true random number generator is used to generate true random numbers and provide the true random numbers to the first hash calculation unit for use; The first hash calculation unit is used to perform hash calculation; The first key storage unit is used to store keys and provide keys for the first decryption unit, the first encryption unit and the first hash calculation unit; the first encryption unit is used to encrypt the data content sent from the signature server; the signature generation unit is used to generate a signature; the signature information storage unit is used to store the serial number and signature-related parameters of this signature; the output unit is used to send out the data content encrypted by the first encryption unit.

4. A global quantum-secure electronic signature system according to claim 1, characterized in that: The signing terminal comprises an information acquisition unit, a second encryption unit, a second decryption unit, a second key storage unit, a signature receiving unit, a second Hash calculation unit and a signature file storage unit, wherein the information acquisition unit, the second decryption unit, the signature receiving unit, the second Hash calculation unit and the signature file storage unit are connected in sequence, the second decryption unit is also connected to the second key storage unit, the second key storage unit is respectively connected to the second encryption unit and the second Hash calculation unit, the second encryption unit is respectively connected to the information acquisition unit, the second Hash calculation unit and the signature file storage unit, and the signature file storage unit is also connected to the second Hash calculation unit; The information acquisition unit is used to acquire information from an external signature pad and a biometric information input terminal, and to receive a signature from a signature server; the second encryption unit is used to encrypt data content sent from the signature terminal; the second decryption unit is used to decrypt data content received by the information acquisition unit; the second key storage unit is used to store a key and provide a key to the second encryption unit, the second decryption unit, and the second hash calculation unit; the signature receiving unit is used to receive a decrypted signature; the second hash calculation unit is used to perform a hash calculation on a document to be signed, and to generate a signed signature document based on the signature and the document to be signed; The signature file storage unit is used to store the file to be signed and the signed file after the signing is completed.

5. The global quantum-secure electronic signature system according to claim 1, characterized in that: The signature verification terminal comprises a third decryption unit, a third key storage unit, a document verification unit to be signed, a signature verification unit and a verification result output unit, wherein the document verification unit to be signed, the third key storage unit and the signature verification unit are connected in sequence, the third decryption unit is connected to the document verification unit to be signed, the third key storage unit and the signature verification unit respectively, the verification result output unit is connected to the document verification unit to be signed and the signature verification unit respectively, and the document verification unit to be signed is also connected to the signature verification unit; The third decryption unit is used to decrypt the data content received by the signature verification terminal; the third key storage unit is used to store keys and provide keys for the third decryption unit, the document verification unit to be signed and the signature verification unit; the document verification unit to be signed is used to verify whether the document to be signed has been tampered with before and after signing; the signature verification unit is used to verify the legality of the signature; the verification result output unit forms a final verification result based on the verification results of the document verification unit to be signed and the signature verification unit for output.

6. A global quantum-secure electronic signature system according to claim 3, characterized in that: The registration unit includes a user identity generation module, a user identity issuance module, a user identity storage module, a signature handwriting storage module and a biometric information storage module. The user identity generation module is connected to the user identity issuance module and the user identity storage module respectively; the user identity generation module is used to generate device identity information recognized by the signature server; the user identity issuance module is used to distribute the device identity information generated by the user identity generation module to the signature terminal; the user identity storage module is used to store the device identity information generated by the user identity generation module; the signature handwriting storage module is used to store the initial signature handwriting related information of the signatory; the biometric information storage module is used to store the biometric information of the signatory; The signature data authentication unit includes a signature handwriting comparison module, a biometric information verification module and a user identity authentication module; the signature handwriting comparison module is used to compare the signature handwriting related information in the signature data with the initial signature handwriting related information stored in the signature handwriting storage module to verify whether the signature handwriting is a valid signature handwriting; the biometric information verification module is used to verify whether the biometric information in the signature data is consistent with the biometric information of the signatory stored in the biometric information storage module; the user identity authentication module is used to verify whether the device identity information in the signature data is consistent with the device identity information stored in the user identity storage module.

7. A global quantum-secure electronic signature method, characterized in that: The following steps are involved: (1) The signing terminal applies for registration with the signing server and obtains the device identity information of the signing terminal; then, the signing terminal enters the initial signature handwriting related information and uploads it to the signing server for storage; (2) The signing terminal sends the signature data data1 to the signing server, requesting the signing of the document doc; (3) The signing server generates a signature based on the signature data data1 and sends the signature to the signing terminal; (4) The signing terminal signs the document to be signed doc using the received signature, and sends the signed document to the signature verification terminal for verification; (5) The signature verification terminal verifies the signed document and accepts the signed document if the verification is successful; otherwise, the signature verification terminal rejects the signed document.

8. A global quantum-secure electronic signature method according to claim 7, characterized in that: The specific process of the signing terminal applying for registration with the signing server and obtaining the device identity information of the signing terminal is as follows: 1) The information acquisition unit of the signing terminal first obtains the biometric information a of the signatory through the external biometric information input terminal, and then the information acquisition unit combines the device code b of the signing terminal, the biometric information a of the signatory and the registration request into a first application, and then encrypts the first application through the second encryption unit and sends it to the signing server; 2) The first decryption unit of the signature server decrypts the ciphertext of the received first application to obtain the first application, and parses the device code b of the signing terminal and the biometric information a of the signatory from the first application; the user identity generation module of the signature server generates the device identity information c of the signing terminal based on the device code b and the biometric information a, stores the device identity information c in the user identity storage module, and distributes the device identity information c to the signing terminal via the user identity issuance module; then, the biometric information a of the signatory is stored in the biometric information storage module; 3) The information acquisition unit of the signing terminal acquires and stores the device identity information c of the signing terminal.

9. A global quantum-secure electronic signature method according to claim 7, characterized in that: The signing terminal inputs the initial signature handwriting related information and uploads it to the signing server for storage, which means: The information acquisition unit of the signature terminal obtains the signatory's signature handwriting from an external signature pad and records it as the initial signature handwriting, and sends the relevant information of the initial signature handwriting to the signature handwriting storage module of the signature server for storage; wherein the relevant information of the initial signature handwriting includes: the starting position of the signature handwriting, the image generated based on the signature handwriting, the writing order of the handwriting, the handwriting characteristic parameters, and the pressure parameters of the signature plate when writing the signature.

10. A global quantum-secure electronic signature method according to claim 8, characterized in that: The specific process of the signing terminal sending the signature data data1 to the signing server and requesting the signing of the document doc is as follows: A) The signing terminal calculates the hash value of the document doc to be signed; The second hash calculation unit of the signing terminal obtains the random number u1 from the local to generate the irreducible polynomial p1(x). After obtaining the irreducible polynomial p1(x), the character string composed of the coefficients of each term except the highest term in the irreducible polynomial p1(x) is recorded as str1; the signing terminal, the signing server and the signature verification terminal share a set of keys (u2, u3, u4, u5), and generate a hash function h based on the irreducible polynomial p1(x) and the key u2. p1,u2 , using the hash function h p1,u2 Calculate the hash value of the document to be signed doc to get the first hash value h p1,u2 (doc); B) The signing terminal generates the signature data data1 and sends it to the signing server; Based on this signature request, the signatory signs on the signature board, and the information acquisition unit of the signature terminal acquires the first relevant information mes-write of this signature handwriting; then, the signatory enters the signatory's biometric information on the biometric information input terminal, and the information acquisition unit acquires the first biometric information mes-people entered this time; The information acquisition unit sends the first relevant information of the signature handwriting mes-write, the first biometric information mes-people entered this time, and the device identity information c to the second encryption unit; at the same time, the second hash calculation unit converts the first hash value h p1,u2 (doc) is sent to the second encryption unit; the second encryption unit sends the first relevant information mes-write of the signature, the first biometric information mes-people, the device identity information c and the first hash value h p1,u2 (doc) is concatenated into the signature data data1, that is, data1 = [mes-write, mes-people, c, h p1,u2 (doc)]; The second encryption unit then uses the key u3 to encrypt the first relevant information mes-write of the signature, the first biometric information mes-people and the device identity information c, and uses the key u4 to encrypt the first hash value h p1,u2 (doc), and get the first ciphertext m1=[(mes-write,mes-people,c)⊕u3,h p1,u2 (doc)⊕u4]; the second encryption unit sends the first ciphertext m1 to the signature server, and the first decryption unit of the signature server decrypts the received first ciphertext m1 using the shared key (u3, u4) to obtain the decrypted signature data data1′, and sends it to the signature data receiving unit; C) The signature server authenticates the signature data; The signature data receiving unit sends the decrypted signature handwriting first related information mes-write′, the first biometric information mes-people′ and the device identity information c′ to the signature data authentication unit; the biometric information verification module of the signature data authentication unit verifies whether the first biometric information mes-people′ is consistent with the signatory biometric information stored in the biometric information storage module; the user identity authentication module of the signature data authentication unit verifies whether the device identity information c′ is consistent with the device identity information stored in the user identity storage module; the signature handwriting verification module of the signature data authentication unit compares the signature handwriting first related information mes-write′ with the initial signature handwriting related information stored in the signature handwriting storage module to verify whether the signature handwriting is a valid signature handwriting; when all three are verified, the signature data data1 is authenticated successfully, otherwise it returns to regenerate the signature data; The first signature handwriting related information mes-write′ is compared with the initial signature handwriting related information stored in the signature handwriting storage module to verify whether the signature handwriting is a valid signature handwriting. Specifically: Traverse the initial signature handwriting related information stored in the signature handwriting storage module, verify whether the first signature handwriting related information mes-write′ and the stored initial signature handwriting related information have a complete overlap in the starting position of the signature handwriting and the image generated based on the signature handwriting. If they completely overlap, it is determined to be an invalid signature handwriting; otherwise, continue to verify the writing order of the handwriting. If the writing order is different, it is determined to be an invalid signature handwriting; otherwise, continue to verify the handwriting feature parameters and the pressure parameters of the signature plate when writing the signature, and calculate the handwriting based on the average value of the stored handwriting feature parameters. The first deviation s1 of the characteristic parameter is used to calculate the second deviation s2 of the pressure parameter based on the average value of the stored pressure parameters. The calculated first deviation s1 and second deviation s2 are compared with the preset deviation threshold s0. If both the first deviation s1 and the second deviation s2 are smaller than the preset deviation threshold s0, it is determined to be a valid signature, otherwise it is determined to be an invalid signature. In response to the signature being a valid signature, the first relevant information mes-write′ of the signature is transmitted back to the signature storage module for storage as a reference for subsequent signature comparisons.

11. A global quantum-secure electronic signature method according to claim 10, characterized in that: The specific process of the signature server generating a signature based on the signature data data1 and sending the signature to the signing terminal is as follows: S1: The first hash calculation unit of the signature server calculates the second hash value based on the first offset s1 and the second offset s2 obtained in the signature handwriting comparison process: The first hash calculation unit obtains a set of random numbers v1 from the true random number generator, uses the random numbers v1 to generate an irreducible polynomial p2(x), and records the string composed of the coefficients of each term except the highest term in the irreducible polynomial p2(x) as str2; The signature server negotiates a set of keys v2 with the signature verification terminal, and the first hash calculation unit generates a hash function h based on the irreducible polynomial p2(x) and the key v2 p2,v2 , using the hash function h p2,v2 Calculate the hash value of the first offset s1 and the second offset s2 to obtain the second hash value h p2,v2 (s1,s2); S2: The first hash calculation unit calculates the second hash value h p2,v2 (s1, s2) is sent to the signature generation unit; the signature data receiving unit of the signature server decrypts the first hash value h' in the signature data data1' p1,u2 (doc) and the first relevant information mes-write′ of the signature handwriting are sent to the signature generation unit; the signature generation unit generates a serial number NO for this signature, and sends the serial number NO, the first relevant information mes-write′ of the signature handwriting, and the first hash value h′ p1,u2 (doc) and the second hash value h p2,v2 (s1, s2) are concatenated into the signature file sign = [NO, mes-write′, h′ p1,u2 (doc),h p2,v2 (s1, s2)], and send the serial number NO of this signature, the first relevant information of the signature handwriting mes-write′, the first offset s1, the second offset s2 and the string str2 as the signature information of this signature to the signature information storage unit for storage, and associate the serial number NO with the first relevant information of the signature handwriting mes-write′, the first offset s1, the second offset s2 and the string str2, and use the serial number NO as the index of the first relevant information of the signature handwriting mes-write′, the first offset s1, the second offset s2 and the string str2; S3: The first hash calculation unit obtains a set of random numbers w1 from the true random number generator, uses the random numbers w1 to generate an irreducible polynomial p3(x), and records the string consisting of the coefficients of each term except the highest term in the irreducible polynomial p3(x) as str3; the signature server negotiates a set of keys w2 with the signature verification terminal, and the first hash calculation unit generates a hash function h based on the irreducible polynomial p3(x) and the key w2. p3,w2 , using the hash function h p3,w2 Calculate the hash value of the signature file sign obtained from the signature generation unit to obtain a third hash value h p3,w2 (sign), and the third hash value h p3,w2 (sign) and the string str3 are sent to the signature generation unit, and the signature generation unit converts the third hash value h p3,w2 (sign) and the serial number NO as the signature SIGN, that is, SIGN = [h p3,w2 (sign), NO]; the signature generation unit then sends the string str3 to the signature information storage unit for storage, and associates the serial number NO with the string str3, and the serial number NO serves as the index of the string str3; S4: The signing server negotiates the transmission key k1 with the signing terminal. The first encryption unit of the signing server uses the transmission key k1 to encrypt the signature SIGN obtained from the signature generation unit to obtain a ciphertext SIGN⊕k1, and sends the ciphertext to the signing terminal via the output unit.

12. A global quantum-secure electronic signature method according to claim 11, characterized in that: The signing terminal uses the received signature to sign the document doc: The signing terminal uses the transmission key k1 to decrypt the received ciphertext SIGN⊕k1 to obtain the decrypted signature SIGN′, and associates the signature SIGN′ with the image pic generated based on the signature handwriting to form signature image information including the signature SIGN′ information; then the signature image information is added to the document to be signed doc to generate the signed signature file DOC, that is, DOC = (doc, SIGN′, pic); then, the signing terminal encrypts the signature file DOC and sends it to the signature verification terminal.

13. A global quantum-secure electronic signature method according to claim 12, characterized in that: The specific process of the signature document after the signature verification terminal verifies the signature is as follows: a) The third decryption unit of the signature verification terminal decrypts the encrypted signature document DOC obtained from the signing terminal to obtain the signature document DOC′; b) The signature verification terminal verifies the consistency between the file content d in the signature file DOC′ and the file to be signed doc; The third decryption unit of the signature verification terminal forwards the signature file DOC′ to the to-be-signed file verification unit of the signature verification terminal. The to-be-signed file verification unit parses the received signature file DOC′ to obtain the file content d except the signature image information; The signing terminal encrypts the first hash value h using the negotiated key u4 p1,u2 (doc), encrypt the string str1 using key u5, and convert [h p1,u2 (doc)⊕u4,str1⊕u5] is sent to the signature verification terminal; the third decryption unit of the signature verification terminal decrypts and obtains the first hash value h″ p1,u2 (doc) and string str1′ and forward it to the to-be-signed document verification unit, which generates an irreducible polynomial p1′(x) based on string str1′, and uses the irreducible polynomial p1′(x) and shared key u2 to generate a hash function h p′1,u2 , and use this hash function Calculate the hash value of the file content d to get The calculated hash value And the decrypted hash value Compare. If the hash values ​​are equal, it means the verification is successful, and the file content d in the signature file DOC′ is consistent with the file to be signed doc, and the next step is executed; if they are inconsistent, the verification fails, and the verification result output unit of the signature verification terminal outputs the verification result of failed verification; c) The signature verification terminal verifies the signature SIGN' in the signature document DOC'. The signature verification terminal requests the signature information storage unit of the signature server to obtain the signature information based on the serial number NO′ in the signature SIGN′; the signature server negotiates the transmission key k2 with the signature verification terminal, and the first encryption unit of the signature server encrypts the first related information mes-write′, the first offset s1, the second offset s2, the string str2 and the string str3 stored in the signature information storage unit corresponding to the serial number NO′ using the transmission key k2, and converts the second ciphertext Send to the signature verification terminal; The third decryption unit of the signature verification terminal uses the key k2 to decrypt and obtain the first relevant information mes-write″ of the signature handwriting, the first offset s1′, the second offset s2′, the string str2′ and the string str3′; the signature verification unit of the signature verification terminal then obtains the image pic′ generated based on the signature handwriting from the first relevant information mes-write″ of the signature handwriting, and compares the image pic′ with the image pic in the signature file DOC′ to see whether they coincide. If they coincide, the verification continues; if they do not coincide, the signature verification fails, and the verification result output unit of the signature verification terminal outputs the verification result of verification failure; The signature verification unit of the signature verification terminal generates an irreducible polynomial p2′(x) based on the string str2′, and uses the irreducible polynomial p2′(x) and the shared key v2 to generate a hash function And use this hash function Calculate the hash value of the first offset s1′ and the second offset s2′ to obtain The signature verification unit obtains the calculated hash value from the to-be-signed file verification unit The signature verification unit concatenates the serial number NO′, the first relevant information of the signature handwriting mes-write″, and the hash value and hash value Second signature document The signature verification unit generates an irreducible polynomial p3′(x) based on the string str3′, and uses the irreducible polynomial p3′(x) and the shared key w2 to generate a hash function And use this hash function Calculate the hash value of the second signature file sign' to get The signature verification unit calculates the hash value The hash value parsed from the signature SIGN′ A comparison is performed. If they are consistent, the signature verification is passed and the signed document is accepted; if they are inconsistent, the signature verification fails, and the verification result output unit of the signature verification terminal outputs a verification result of verification failure, and the signed document is rejected.

Images