Electronic signature method taking enterprise account as signed identity

Abstract

The invention discloses an electronic signature method taking an enterprise account as a signed identity, which comprises the following steps of: S1, docking an enterprise account system with an electronic signature system, so that an enterprise user can log in the electronic signature system by applying an enterprise internal account; s2, a user logs in the electronic signature system, creates at least one seal style and stores the created seal style to the signature server; s3, opening the signed document, selecting a seal style and placing the seal style in the signed document; s4, the electronic signature system writes signer information into a form domain of the signed document, and generates a hash abstract corresponding to the signed document; s5, the electronic signature system sends the hash abstract to a signature server, and the signature server carries out digital certificate encryption on the hash abstract; and S6, the electronic signature system generates a final signature document according to the encrypted hash abstract and stores the final signature document to the local of the user.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic signatures, and in particular to an electronic signature method using an enterprise account as a signing identity. Background Art

[0002] An electronic signature refers to data contained or attached in electronic form in a data message that is used to identify the signatory and indicate that the signatory approves the content. Conventional electronic signatures have several basic functions: identifying the signatory's identity and the signatory's approval of the content of the signed data and his / her willingness to sign.

[0003] In traditional electronic signature systems, when a user completes an electronic signature in a PDF document, at least the following six steps are required:

[0004] S1: Register an account in the electronic signature system;

[0005] S2: Log in to the electronic signature system;

[0006] S3: Perform personal real-name authentication;

[0007] S4: Upload the PDF document to the electronic signature system;

[0008] S5: Use the signature tool in the electronic signature system to sign and authenticate the intention;

[0009] S6: Download the final signed PDF document.

[0010] In the process of electronic signature, you need to upload the PDF document to the server, and strong identity authentication and willingness authentication are required. In the identity authentication process, individual users need to submit personal identity information. The third-party electronic signature platform will access the personal identity authentication system of the Ministry of Public Security to verify the user's identity information to ensure that the user's identity will not be impersonated. Generally, the platform will provide face recognition, bank card authentication, mobile phone authentication and other methods to help users quickly and completely authenticate their identities.

[0011] From the above steps, we can see that in the traditional electronic signature system, the process steps to complete an electronic signature are relatively cumbersome and complicated, especially the personal real-name process requires a lot of information to be submitted, which is not conducive to quick signing and reduces efficiency. Summary of the invention

[0012] The present invention provides an electronic signature method using a corporate account as a signing identity, so as to solve the technical problems existing in the above-mentioned prior art.

[0013] The enterprise account system involves a technology for single sign-on (SSO) in a web browser, which uses the Security Assertion Markup Language (SAML). By using this technology, the existing account system within the enterprise organization is reused. The present invention completes the correspondence between the account and the enterprise personnel by the enterprise itself, reuses the existing trust system of the enterprise, and performs electronic signature as the signing identity.

[0014] The present invention simplifies the process while ensuring the security of document data and electronic signature data. In terms of corporate accounts, the enterprise already has an account system to identify the user's identity within the enterprise. The enterprise itself completes the correspondence between the account and the enterprise personnel, and reuses the enterprise's existing trust system as the signing identity of the electronic signature.

[0015] To achieve the above object, the present invention provides an electronic signature method using an enterprise account as a signing identity, comprising:

[0016] S1: Connect the enterprise account system with the electronic signature system so that enterprise users can log in to the electronic signature system using their internal enterprise accounts;

[0017] S2: The user logs in to the electronic signature system, creates at least one seal style and stores the created seal style in the signature server;

[0018] S3: Open the document to be signed, select a seal style and place it in the document to be signed;

[0019] S4: The electronic signature system writes the signatory information into the form field of the signed document and generates a hash summary corresponding to the signed document;

[0020] S5: The electronic signature system sends the hash summary to the signature server, and the signature server encrypts the hash summary with a digital certificate;

[0021] S6: The electronic signature system generates the final signature document based on the encrypted hash summary and saves it locally to the user.

[0022] In one embodiment of the present invention, in step S1, the enterprise account system is connected to the electronic signature system using the SAML protocol.

[0023] In one embodiment of the present invention, the signed document is a PDF document.

[0024] In one embodiment of the present invention, in step S4, a Signer dictionary entry is extended in the standard PDF form field V dictionary to store the signer information.

[0025] In one embodiment of the present invention, the signatory information includes name, email address, enterprise ID in the Foxit system, enterprise name, and SAMLResponse of the signatory to log into the system.

[0026] The electronic signature method provided by the present invention, which uses the enterprise account as the signing identity, does not need to upload the PDF document to any third-party platform, and the document can be circulated between users; the signatory information is stored in the PDF document and can be verified. It can operate according to the internal management rules of the enterprise, reuse the enterprise's existing trust system for user identity verification, and complete the signature simply and quickly, thereby improving efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0028] Figure 1 A flowchart of an electronic signature method using a corporate account as a signing identity provided by the present invention. DETAILED DESCRIPTION

[0029] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0030] The present invention proposes an electronic signature method that uses a corporate account as the signing identity, which simplifies the process while ensuring the security of document data and electronic signature data. In terms of corporate accounts, the enterprise already has an account system to identify the user's identity within the enterprise. The enterprise itself completes the correspondence between the account and the enterprise personnel, and reuses the enterprise's existing trust system as the signing identity of the electronic signature.

[0031] Figure 1 A flow chart of the electronic signature method using a corporate account as a signing identity provided by the present invention, such as Figure 1 As shown, the electronic signature method provided by the present invention using the enterprise account as the signing identity includes:

[0032] S1: Connect the enterprise account system with the electronic signature system so that enterprise users can log in to the electronic signature system using their internal enterprise accounts;

[0033] S2: The user logs in to the electronic signature system, creates at least one seal style and stores the created seal style in the signature server;

[0034] Steps S1 and S2 only need to be performed when using for the first time. When using it again, generally only steps S3-S6 need to be performed. If a new seal style needs to be created, step S2 can be performed again.

[0035] S3: Open the document to be signed, select a seal style and place it in the document to be signed;

[0036] S4: The electronic signature system writes the signatory information into the form field of the signed document and generates a hash summary corresponding to the signed document;

[0037] S5: The electronic signature system sends the hash summary to the signature server, and the signature server encrypts the hash summary with a digital certificate;

[0038] S6: The electronic signature system generates the final signature document based on the encrypted hash summary and saves it locally to the user.

[0039] In one embodiment of the present invention, in step S1, the enterprise account system is connected to the electronic signature system using the SAML protocol.

[0040] Security Assertion Markup Language (SAML) is used to exchange authentication and authorization identities between security domains. The version currently connected to this invention is 2.0. SAML 2.0 is an XML-based protocol that uses security tokens containing assertions to transfer information about subjects (usually end users) between a SAML organization called Identity Provider and a SAML user called Service Provider. SAML 2.0 supports Web-based cross-domain single sign-on (SSO), which helps reduce the management overhead of distributing multiple authentication tokens to users. (See https: / / en.wikipedia.org / wiki / SAML_2.0 for details). SAML is based on the XML Signature specification, that is, it uses XML's grammatical rules to fully and accurately describe the process of generating and verifying digital signatures. This process includes key pair generation, document signing, document transmission and signature verification, and has the characteristics of tamper-proof and irreplaceable.

[0041] The premise of using this invention is that the enterprise has its own account system (which needs to support the SAML protocol). The SAML specification defines three roles: principal (usually a user), identity provider (IdP), and service provider (SP). The principal requests a service from the service provider, and the service provider requests the identity provider and obtains an identity assertion token SAML Response from it. We will provide SAML configuration, including the entity ID of the identity provider, the identity provider SSOURL, and the x509 public key certificate.

[0042] https: / / kb.foxit.com / hc / en-us / sections / 360010295471-Foxit-Admin-Console, here are the steps of SAML connection, currently supports connection with Azure Active Directory, ADFS, Okta, OneLogin, PingIdentity (PingOne), Google Workspace, Workforce Identity (formerly Idaptive), provides single sign-on (SSO) to obtain SAML Response for authentication, and use it as the signing identity for electronic signature.

[0043] In one embodiment of the present invention, the signed document is a PDF document.

[0044] In one embodiment of the present invention, in step S4, a Signer dictionary entry is extended in the standard PDF form field V dictionary to store the signer information, so that the electronic files and information signed by the user can be permanently stored in the form of PDF.

[0045] In one embodiment of the present invention, the signatory information includes name, email address, enterprise ID in Foxit system, enterprise name and SAMLResponse of the signatory to log in to the system. In addition, by effectively utilizing the tamper-proof feature of SAMLResponse, users can read the signatory-related information for self-certification. The user's identity when signing comes from the enterprise account system logged in at the time of signing. SAMLResponse is an important credential for identifying the signatory's identity.

[0046] How can users verify themselves? You can use the identity verification tool https: / / online.foxitsoftware.cn / internal_identity_verify provided by Foxit Software. Users can fill in the corresponding options with the entity ID of the identity provider set by the enterprise account system, the identity provider SSO URL, the x509 public key certificate, and the SAMLResponse in the PDF document for verification. The SAML Response contains organizational information, user information, and a digital signature to ensure the authenticity and integrity of the metadata. You can also put this data in other third-party tools for verification, such as https: / / www.samltool.com / validate_response.php.

[0047] The electronic signature method provided by the present invention, which uses the enterprise account as the signing identity, does not need to upload the PDF document to any third-party platform, and the document can be circulated between users; the signatory information is stored in the PDF document and can be verified. It can operate according to the internal management rules of the enterprise, reuse the enterprise's existing trust system for user identity verification, and complete the signature simply and quickly, thereby improving efficiency.

[0048] Those skilled in the art can understand that the accompanying drawings are only schematic diagrams of an embodiment, and the modules or processes in the accompanying drawings are not necessarily required to implement the present invention.

[0049] Those skilled in the art can understand that the modules in the device in the embodiment can be distributed in the device in the embodiment according to the description of the embodiment, or can be changed accordingly and located in one or more devices different from the embodiment. The modules in the above embodiment can be combined into one module, or can be further divided into multiple sub-modules.

[0050] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An electronic signature method using a corporate account as a signing identity, characterized in that: include: S1: Connect the enterprise account system with the electronic signature system so that enterprise users can log in to the electronic signature system using their internal enterprise accounts; S2: The user logs in to the electronic signature system, creates at least one seal style and stores the created seal style in the signature server; S3: Open the document to be signed, select a seal style and place it in the document to be signed; S4: The electronic signature system writes the signatory information into the form field of the signed document and generates a hash summary corresponding to the signed document; S5: The electronic signature system sends the hash summary to the signature server, and the signature server encrypts the hash summary with a digital certificate; S6: The electronic signature system generates the final signature document based on the encrypted hash summary and saves it locally to the user.

2. The electronic signature method using a corporate account as a signing identity according to claim 1, characterized in that: In step S1, the SAML protocol is used to connect the enterprise account system with the electronic signature system.

3. The electronic signature method using a corporate account as a signing identity according to claim 1, characterized in that: The signed document is a PDF document.

4. The electronic signature method using a corporate account as a signing identity according to claim 3, characterized in that: In step S4, a Signer dictionary entry is extended in the standard PDF form field V dictionary to store the signer information.

5. The electronic signature method using a corporate account as a signing identity according to claim 1, characterized in that: The signatory information includes name, email address, company ID in the Foxit system, company name, and the SAMLResponse used by the signatory to log into the system.

Images