Electronic seal sharing system based on CA certificate nesting and data synchronization

Abstract

The invention discloses an electronic seal sharing system based on CA certificate nesting and data synchronization, relates to the technical field of information security, and solves the problem that a plurality of sets of electronic seals need to be applied respectively due to the fact that electronic seal data cannot be shared among electronic seal systems, namely user sides, reachable by a plurality of networks of the same user main body. The electronic seal sharing system comprises a user side and a management side, the user side comprises an information acquisition module, an information processing module, a seal construction module and an authorization inspection module; the management end comprises a sharing synchronization module and a storage management module; by adopting a CA certificate and a special data synchronization mechanism, while the confidentiality and the security of electronic seal data are ensured, seal data sharing among different electronic seal systems is realized, and electronic seal services can be used on various business systems only by applying for one time; the use cost and the management complexity of the electronic seal are reduced, the uncompliance of multiple sets of electronic seals is eliminated, and the safety of the electronic seal is improved.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an electronic seal sharing system based on CA certificate nesting and data synchronization. Background Art

[0002] For a long time, the electronic seal system in the field of government services has shown the characteristics of independent construction and independent operation. The competent departments of governments at all levels have taken the lead in building multi-level and multiple sets of electronic seal systems for internal office and social service provision according to different social governance needs and policy requirements. Vertical fields such as transportation, medical care, and market supervision and management generally also have electronic seal systems in their fields. However, the electronic seal data between these different electronic seal systems are independently generated and maintained, which means that when enterprises and natural persons enjoy government services, they need to collect multiple electronic seals on multiple platforms, which brings high usage costs and management inconveniences. For corporate seals, there are also legal risks brought by making multiple sets of electronic seals.

[0003] Patent No. CN2020116397045 discloses an electronic signature method, device and system for individual users. The terminal device reads the document to be signed, packages the electronic seal information and the electronic signer information into electronic signature data, stamps it on the document, and generates electronic signature document information; the electronic signature document information is encrypted using a key shared with a third-party organization, and an identity authentication code is generated using the shared key, and the identity authentication code, encrypted ciphertext, electronic signer information and the shared key serial number involved are sent to request a digital signature; the information verification result from the third-party organization and the encrypted signed document are received, and the signed document is decrypted; the above invention can ensure the security of electronic seal files of individual users on the basis of simple calculation, and prevent illegal users from stealing or forging electronic seal files.

[0004] Patent No. CN201911217035X discloses a quantum computing-resistant electronic seal system based on a secret sharing public key pool. The electronic seal is signed or verified through the user end, including an electronic seal server and a key card. The key cards are issued by the same electronic seal server and bound to the user end. The key card stores the public part of the electronic seal, the private part of the electronic seal and the secret sharing public key pool. The electronic seal public key is secretly shared, and a component obtained by sharing is stored in the secret sharing public key pool. The secret sharing public key pool in the key card is exactly the same. The advantage is that the electronic seal public key is secretly shared, and part of the shared component is made public and part is hidden in the public key pool. At the same time, the key card is an independent hardware isolation device, and the possibility of stealing the key by malware or malicious operation is greatly reduced, so that the seal public key cannot be known to the enemy, and the enemy cannot know the object of the signature. Therefore, quantum computers cannot crack the private key SK through the signature, and the signature does not need to be encrypted to resist quantum computing.

[0005] Although the above patents all encrypt and defend against attacks on the use of electronic seals, there are still many problems in the sharing of electronic seals: due to different CA certificates in different electronic seal systems, data messages stamped with electronic seals cannot be interoperable and mutually recognized across systems; in addition, the security of the sharing technology cannot be ensured when electronic seal data is shared, and there is a high probability that the confidentiality and integrity of the electronic seal will be destroyed. Summary of the invention

[0006] The purpose of the present invention is to provide an electronic seal sharing system based on CA certificate nesting and data synchronization. By adopting CA certificates and special data synchronization mechanisms, the system can realize the sharing of seal data between different electronic seal systems while ensuring the confidentiality and security of electronic seal data. It only needs to apply once on any business system to use the electronic seal service on various business systems at the same time, thereby reducing the cost of users using electronic seals and the complexity of management, eliminating the compliance risks of enterprises applying for multiple sets of electronic seals, and improving the security of data message cross-system processes.

[0007] The present invention utilizes the following technical solutions:

[0008] An electronic seal sharing system based on CA certificate nesting and data synchronization includes a user end and a management end, wherein:

[0009] The user end is used to collect and process the basic information of the seal applicant and construct the corresponding electronic seal structure;

[0010] The management side is used to verify the identity of the seal applicant and manage the constructed electronic seal structure;

[0011] The user end includes an information collection module, an information processing module, a seal construction module and an authorization verification module;

[0012] Information collection module, used to obtain basic information of the seal applicant;

[0013] An information processing module is used to pre-process the collected basic information;

[0014] The seal construction module is used to construct the corresponding electronic seal structure according to the business requirements of the seal application entity;

[0015] Authorization verification module, used for identity verification of seal applicants and authorization of electronic seal structures at different user terminals;

[0016] The management end includes a shared synchronization module and a storage management module;

[0017] The shared synchronization module is used to share and synchronize the electronic seal structure that has been applied for and authorized in different user terminals;

[0018] The storage management module is used to store and manage all constructed electronic seal structures.

[0019] Preferably, the information collection module uses a paper or electronic version of the electronic seal application form to obtain the basic information of the seal applicant; the seal applicant includes but is not limited to enterprises, social organizations and public institutions; the basic information includes but is not limited to the unit name, unit address, seal name, business type, signing years, official seal collection, legal person seal collection, legal person signature collection, business handler and business acceptance column.

[0020] Preferably, the process of preprocessing the collected basic information by the information processing module is as follows:

[0021] A: The basic information is divided into text information and picture information according to the data type; text information includes handwritten and printed information, and picture information includes various seal images and signature images;

[0022] B: Use the corresponding anomaly correction algorithm to detect and correct each type of basic information;

[0023] Use optical character recognition algorithms to identify and correct handwritten text in text information, and use image processing algorithms to segment and optimize pictures or signature pictures;

[0024] C: According to the signature information of the electronic seal, extract the key information and non-key information from the basic information of the completed abnormal correction; the signature information includes the unit name, the years of signature, the seal number and the five-pointed star mark; the key information includes the unit name, the five-pointed star mark and the years of signature; the non-key information includes the unit address, the legal person signature collection, the business handler and the business acceptance column.

[0025] Preferably, the seal construction module first arranges the unit name and the five-pointed star symbol in the key information within the graphic range to generate an initial electronic seal sample; then generates the seal number and the signature period in the initial electronic seal sample according to the purpose type of the seal applicant; finally, the initial electronic seal sample is encrypted and signed with the digital signature of the seal applicant to generate an electronic seal structure; the graphic includes a square or a circle; the purpose type includes an electronic official seal or an electronic private seal.

[0026] Preferably, the authorization verification module uses an identity authentication algorithm to verify the login account, login password and verification code of the seal applicant at different user terminals: if the verification fails, the seal applicant is notified to check or retrieve the password, and the number of failures is accumulated. For every α failures, input is prohibited for β minutes, and γ failures are allowed per day, γ>α times; if the verification is successful, it is verified whether the basic information of the seal applicant has been collected: if the collection is not completed, the seal applicant is reminded to collect the information; if the collection is completed, the chaotic mapping algorithm is used to associate and map the service address and digital certificate of the user terminal with the electronic seal structure to complete the application authorization of the electronic seal structure.

[0027] Preferably, the shared synchronization module will sign and verify the electronic seal structure for which authorization is applied using the digital certificate of the management end, and then share it to different user ends using a secure transmission protocol; and after performing Hadamard operations based on the network addresses and digital certificates of different user ends, nest it with the electronic seal structure to obtain a new electronic seal structure; at the same time, the new electronic seal structure is reversely shared from the user end to the management end using a secure transmission protocol.

[0028] Preferably, the storage management module will encrypt the electronic seal structure generated by nesting in different user terminals using a data encryption algorithm, and then store or synchronize it to the electronic seal shared directory library in each electronic seal resource library in the data resource layer according to the data synchronization mechanism; and perform regular management of the electronic seal shared directory library to remove redundant data; at the same time, during the data synchronization process, if a synchronization error occurs, the data set of each electronic seal shared directory library will be rolled back to avoid damage or loss of the data set.

[0029] Preferably, the workflow of the data synchronization mechanism is:

[0030] S1: When data synchronization is performed within a user terminal and between multiple user terminals, data synchronization is performed within the user terminal first;

[0031] S2: The current user terminal generates a data map of the electronic seal sharing directory library according to a preset synchronization cycle;

[0032] S3: Compare the data volume of each electronic seal structure in the data map with the electronic seal structure generated in the current user terminal to determine the minimum incremental data;

[0033] S4: Synchronize the electronic seal shared directory library according to the minimum incremental data, and then complete the data synchronization of the current user end;

[0034] S5: Counting the data volume of each electronic seal resource library of several user terminals that have completed data synchronization;

[0035] S6: comparing the electronic seal resource libraries that have completed data volume statistics, and calculating the data volume of each electronic seal shared directory library to obtain minimalist incremental data;

[0036] S7: Synchronize and update different electronic seal sharing directory libraries based on minimalist incremental data, and calculate the synchronization rate, synchronization delay and synchronization efficiency during the synchronization process, so as to optimize the data synchronization mechanism between several user terminals.

[0037] Preferably, the calculation process of the data synchronization mechanism for performing data synchronization on several user terminals is as follows:

[0038] Step 1: When the data volume of each electronic seal resource library of several user terminals increases, the original data set of the electronic seal shared directory library and the incremental data of each electronic seal resource library are combined and calculated;

[0039] Step 2: When the amount of data in the data set of the electronic seal sharing directory library increases, each electronic seal resource library synchronously updates the incremental data and the original data set of the electronic seal sharing directory library to complete the merged data set;

[0040] Step 3: During the synchronization process of the electronic seal shared directory library, the synchronization rate is obtained according to the ratio of the amount of incremental data synchronized to the time required for synchronization; and the synchronization delay is calculated based on the difference between the timestamp of the incremental data synchronized with the electronic seal shared directory library and the timestamp of the updated incremental data; at the same time, within the data synchronization time, the synchronization efficiency is obtained according to the ratio of the amount of successfully synchronized data to the total amount of synchronized data.

[0041] The present invention realizes the sharing of seal data between different electronic seal systems while ensuring the confidentiality and security of electronic seal data by adopting CA certificate and special data synchronization mechanism. Only one application is required to use the electronic seal service on various business systems. The cost of using electronic seals and the complexity of management are reduced, the compliance risk of enterprises applying for multiple sets of electronic seals is eliminated, and the security of cross-system processes of data messages is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0043] Figure 1 This is the principle block diagram of the electronic seal sharing system;

[0044] Figure 2 This is the working sequence diagram of the electronic seal sharing system. DETAILED DESCRIPTION

[0045] The present invention is described in detail below with reference to the accompanying drawings and embodiments:

[0046] like Figure 1-Figure 2 As shown, the electronic seal sharing system based on CA certificate nesting and data synchronization described in the present invention includes a user end and a management end, wherein:

[0047] The user end is used to collect and process the basic information of the seal applicant and construct the corresponding electronic seal structure;

[0048] In the present invention, the user end may be an electronic seal service website;

[0049] The management side is used to verify the identity of the seal applicant and manage the constructed electronic seal structure;

[0050] In the present invention, the management end may be an electronic seal service management system;

[0051] The user end includes an information collection module, an information processing module, a seal construction module and an authorization verification module;

[0052] Information collection module, used to obtain basic information of the seal applicant;

[0053] In the present invention, the information collection module uses a paper or electronic version of the electronic seal application form to obtain the basic information of the seal application subject; the seal application subject includes but is not limited to enterprises, social organizations and public institutions; the basic information includes but is not limited to the unit name, unit address, seal name, business type, signature years, official seal collection, legal person seal collection, legal person signature collection, business handler and business acceptance column;

[0054] An information processing module is used to pre-process the collected basic information;

[0055] In the present invention, the process of preprocessing the collected basic information by the information processing module is as follows:

[0056] A: The basic information is divided into text information and image information according to the data type; text information includes handwritten and printed information, and image information includes various seals (including the official seal and legal person seal mentioned above) and signature images;

[0057] B: Use the corresponding anomaly correction algorithm to detect and correct each type of basic information;

[0058] For example, optical character recognition algorithms are used to recognize and correct handwritten text in text information, and image processing algorithms are used to segment and optimize images or signature images;

[0059] C: Based on the signature information of the electronic seal, extract key information and non-key information from the basic information of the abnormal correction. The signature information is registered and uploaded by the applicant, including the unit name, signature years, seal number and five-pointed star mark. Key information includes unit name, five-pointed star mark and signature years. Non-key information includes unit address, legal person signature collection, business handler and business acceptance column.

[0060] In this embodiment, the seal number is usually arranged in chronological order or serial number order; the first four digits are the area code, which generally corresponds to the first four digits of the business license, the fifth, sixth and seventh digits are the company number with the seal engraving qualification, and the last six digits are the serial number of the seal engraving company;

[0061] The seal construction module is used to construct the corresponding electronic seal structure according to the business requirements of the seal application entity;

[0062] In the present invention, the seal construction module first arranges the unit name and the five-pointed star symbol in the key information within the graphic range to generate an initial electronic seal sample; then generates a seal number and a signature period in the initial electronic seal sample according to the use type of the seal application subject; finally, the digital signature of the seal application subject, i.e., the digital certificate of the management end, is used to encrypt and sign the initial electronic seal sample to generate an electronic seal structure; the graphic includes a square or a circle; the use type includes an electronic official seal or an electronic private seal;

[0063] In the present invention, the electronic seal structure includes signature information and an electronic seal image; the signature information is verification information generated by the management end or different clients after performing encryption calculation using the network address and the digital signature;

[0064] Authorization verification module, used for identity verification of seal applicants and authorization of electronic seal structures at different user terminals;

[0065] In the present invention, the authorization verification module uses an identity authentication algorithm to verify the login account, login password and verification code of the seal application subject at different user terminals: if the verification fails, the seal application subject is notified to check or retrieve the password, and the number of failures is accumulated. For every α failures, input is prohibited for β minutes, and γ failures are allowed every day, γ>α times; if the verification is successful, it is verified whether the basic information of the seal application subject is collected: if the collection is not completed, the seal application subject is reminded to collect information; if the collection is completed, the chaotic mapping algorithm is used to associate and map the service address and digital certificate of the user terminal with the electronic seal structure to complete the application authorization of the electronic seal structure;

[0066] The management end includes a shared synchronization module and a storage management module;

[0067] The sharing and synchronization module is used to share and synchronize the electronic seal structures that have completed the application and authorization in different user terminals;

[0068] In the present invention, the shared synchronization module completes the electronic seal structure of the application authorization, signs and verifies the signature using the digital certificate of the management end, and then shares it to different user ends using the secure transmission protocol; and after performing Hadamard operation according to the network address and digital certificate of different user ends, nests it with the electronic seal structure to obtain a new electronic seal structure; and at the same time, the new electronic seal structure is reversely shared to the management end using the secure transmission protocol at the user end;

[0069] The storage management module is used to store and manage all constructed electronic seal structures;

[0070] In the present invention, the storage management module performs encryption calculation on the electronic seal structures generated by nesting in different user terminals by using a data encryption algorithm, and then stores or synchronizes the electronic seal shared directory library in each electronic seal resource library in the data resource layer according to the data synchronization mechanism; and performs regular management on the electronic seal shared directory library to remove redundant data; at the same time, during the data synchronization process, if a synchronization error occurs, the data set of each electronic seal shared directory library is rolled back to avoid damage or loss of the data set;

[0071] In the present invention, the data synchronization mechanism monitors the data synchronization process in real time according to the hardware resources (CPU, GPU and storage hard disk) and network status (real-time network speed, bandwidth, packet loss rate and routing efficiency) of each user terminal, and the transmission distance between each user terminal, so as to calculate the synchronization rate, synchronization delay and synchronization efficiency in the data synchronization process respectively; when the synchronization rate decreases, the synchronization efficiency decreases or the synchronization delay increases, the utilization rate of the hardware resources and the transmission channel of the network status are regulated and selected;

[0072] In this embodiment, the workflow of the data synchronization mechanism is as follows:

[0073] S1: When data synchronization is performed within a user terminal and between multiple user terminals, data synchronization is performed within the user terminal first;

[0074] S2: The current user terminal generates a data map of the electronic seal sharing directory library according to a preset synchronization cycle;

[0075] S3: Compare the data volume of each electronic seal structure in the data map with the electronic seal structure generated in the current user terminal to determine the minimum incremental data;

[0076] S4: Synchronize the electronic seal shared directory library according to the minimum incremental data, and then complete the data synchronization of the current user end;

[0077] S5: Counting the data volume of each electronic seal resource library of several user terminals that have completed data synchronization;

[0078] S6: comparing the electronic seal resource libraries that have completed data volume statistics, and calculating the data volume of each electronic seal shared directory library to obtain minimalist incremental data;

[0079] S7: Synchronize and update different electronic seal sharing directory libraries based on minimalist incremental data, and calculate the synchronization rate, synchronization delay and synchronization efficiency during the synchronization process, thereby optimizing the data synchronization mechanism between several user terminals;

[0080] In this embodiment, the calculation process of the data synchronization mechanism for performing data synchronization on a plurality of user terminals is as follows:

[0081] Step 1: Set the data sets in the electronic seal resource library of several user terminals as D_A, D_B and D_C respectively, and set the data set of the electronic seal shared directory library as (D);

[0082] Step 2: When the data volume of each electronic seal resource library of several user terminals increases, the original data set of the electronic seal shared directory library and the incremental data of each electronic seal resource library are merged and calculated according to the set update frequency: (D) = (D_{original})\cup\(Delta D_A)\cup\(Delta D_B)\cup\(Delta D_C), D_{original} represents the original data set of the electronic seal shared directory library, cup represents merged calculation, and Delta represents incremental data;

[0083] Step 3: When the data volume of the data set of the electronic seal sharing directory library increases, each electronic seal resource library synchronously updates the incremental data of the electronic seal sharing directory library according to the set update frequency, and merges and calculates it with the original data set;

[0084] (D_A,D_B,D_C)=(D_{original})\cup\(Delta D);

[0085] Step 4: Calculate the synchronization rate (R_{sync}), synchronization delay (Delta t) and synchronization efficiency of the electronic seal sharing directory library during the synchronization process;

[0086] The synchronization rate is obtained based on the ratio of the amount of incremental data to be synchronized to the time required for synchronization:

[0087] (R_{sync}) = frac[{D_{sync}{T_{sync}}], where frac represents a fraction, D_{sync} represents the amount of incremental data synchronized, sync represents a synchronization command, and T_{sync} represents the synchronization time;

[0088] The difference between the timestamp of the electronic seal sharing directory library synchronization incremental data and the timestamp of the update incremental data is the synchronization delay: (Delta t) = T_{target}-T_{source}, T_{target} represents the synchronization timestamp of the electronic seal sharing directory library, and T_{source} represents the update timestamp of the electronic seal sharing directory library;

[0089] During the data synchronization time, the synchronization efficiency is obtained according to the ratio of the amount of successfully synchronized data to the total amount of synchronized data: Efficiency = frac{N_{success}{N_{total}}\times100%; N_{success} represents the number of successfully synchronized data records, and N_{total} represents the total number of synchronized data records;

[0090] Step 5: Update and optimize the data synchronization mechanism according to the acquired synchronization rate, synchronization delay and synchronization efficiency;

[0091] Example:

[0092] A new user obtains the company's electronic seal in the A user terminal (electronic seal system) (hereinafter referred to as "A system"): after logging in to the A system and completing the real-name authentication, submit the company information to apply for the electronic seal. After the A system verifies that it is correct, it will issue a CA certificate to the user and make an electronic seal, and the user can use it in the A system. At the same time, the A system automatically pushes the user's corporate information and seal structure information to the management terminal of the electronic seal sharing system in real time, and encrypts and stores it in the electronic seal sharing directory library in the electronic seal resource library to complete incremental synchronization;

[0093] The user uses the electronic seal in the B user terminal (electronic seal system) (hereinafter referred to as the "B system"): the B system inquires that the user has not applied for an electronic seal in this system, and then inquires the electronic seal sharing system whether there is relevant information about the user's electronic seal, and obtains a true query result. The B system applies for user authorization, and after obtaining authorization, requests the electronic seal sharing system for the user's electronic seal structure and other information, and issues a new CA certificate to the user based on the above information, and then associates and maps the electronic seal with the new CA certificate, adds the new CA certificate information to the electronic seal's signer certificate list, realizes CA certificate nesting, and completes the electronic seal structure update. At this time, the user can use the new electronic seal in the B electronic system;

[0094] System B pushes the updated electronic seal structure to the electronic seal sharing system, which updates the electronic seal filing information and pushes it to other user terminals (electronic seal systems) simultaneously. At this time, the user has only one set of available electronic seals in all systems connected to the electronic seal sharing system, and can achieve mutual recognition and verification in all systems;

[0095] After the user updates the electronic seal shared directory library on the B user terminal (electronic seal system), he can sign the document. After the user completes the signing with the electronic seal, he will authenticate his personal intention. Once the intention authentication is passed, the document can be signed.

[0096] Documents signed by users can be verified in any level of user terminal (electronic seal system). During the verification, the electronic seal signature certificate list in the electronic seal structure will be verified. If any certificate verification passes, the node will pass and the next node verification will be carried out.

Claims

1. An electronic seal sharing system based on CA certificate nesting and data synchronization, characterized by: It includes the user end and the management end, including: The user end is used to collect and process the basic information of the seal applicant and construct the corresponding electronic seal structure; The management side is used to verify the identity of the seal applicant and manage the constructed electronic seal structure; The user end includes an information collection module, an information processing module, a seal construction module and an authorization verification module; Information collection module, used to obtain basic information of the seal applicant; An information processing module is used to pre-process the collected basic information; The seal construction module is used to construct the corresponding electronic seal structure according to the business requirements of the seal application entity; Authorization verification module, used for identity verification of seal applicants and authorization of electronic seal structures at different user terminals; The management end includes a shared synchronization module and a storage management module; The shared synchronization module is used to share and synchronize the electronic seal structure that has been applied for and authorized in different user terminals; The storage management module is used to store and manage all constructed electronic seal structures.

2. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 1 is characterized in that: The information collection module uses a paper or electronic version of the electronic seal application form to obtain the basic information of the seal applicant; the seal applicant includes but is not limited to enterprises, social organizations and institutions; the basic information includes but is not limited to the unit name, unit address, seal name, business type, signing years, official seal collection, legal person seal collection, legal person signature collection, business handler and business acceptance column.

3. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 1 is characterized in that: The process of preprocessing the collected basic information by the information processing module is as follows: A: The basic information is divided into text information and picture information according to the data type; text information includes handwritten and printed information, and picture information includes various seal images and signature images; B: Use the corresponding anomaly correction algorithm to detect and correct each type of basic information; Use optical character recognition algorithms to identify and correct handwritten text in text information, and use image processing algorithms to segment and optimize pictures or signature pictures; C: According to the signature information of the electronic seal, extract the key information and non-key information from the basic information of the completed abnormal correction; the key information includes the unit name, five-pointed star symbol and the number of years of signature; the signature information includes the unit name, the number of years of signature, the seal number and the five-pointed star symbol; the non-key information includes the unit address, the legal person signature collection, the business handler and the business acceptance column.

4. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 1 is characterized in that: The seal construction module first arranges the unit name and the five-pointed star symbol in the key information within the graphic range to generate an initial electronic seal sample; then generates a seal number and a signature period in the initial electronic seal sample according to the type of use of the seal applicant; finally, the initial electronic seal sample is encrypted and signed using the digital signature of the seal applicant to generate an electronic seal structure; the graphic includes a square or a circle; the use type includes an electronic official seal or an electronic private seal.

5. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 1 is characterized in that: The authorization verification module uses an identity authentication algorithm to verify the login account, login password and verification code of the seal applicant at different user terminals: if the verification fails, the seal applicant is notified to check or retrieve the password, and the number of failures is accumulated. For every α failures, input is prohibited for β minutes, and γ failures are allowed per day, γ>α times; if the verification is successful, it verifies whether the basic information of the seal applicant is collected: if the collection is not completed, the seal applicant is reminded to collect information; If the collection is completed, the chaotic mapping algorithm is used to associate and map the service address and digital certificate of the user end with the electronic seal structure to complete the application authorization of the electronic seal structure.

6. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 1 is characterized in that: The shared synchronization module will sign and verify the electronic seal structure for which authorization is applied using the digital certificate of the management end, and then share it to different user ends using a secure transmission protocol; and after performing Hadamard operations based on the network addresses and digital certificates of different user ends, nest it with the electronic seal structure to obtain a new electronic seal structure; at the same time, the new electronic seal structure is reversely shared from the user end to the management end using a secure transmission protocol.

7. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 1 is characterized in that: The storage management module performs encryption calculation on the electronic seal structures generated by embedding in different user terminals by using a data encryption algorithm, and then stores or synchronizes the electronic seal shared directory library in each electronic seal resource library in the data resource layer according to the data synchronization mechanism; and performs regular management on the electronic seal shared directory library to remove redundant data; At the same time, during the data synchronization process, if a synchronization error occurs, the data collection of each electronic seal shared directory library will be rolled back to avoid damage or loss of the data collection.

8. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 7 is characterized in that: The workflow of the data synchronization mechanism is as follows: S1: When data synchronization is performed within a user terminal and between multiple user terminals, data synchronization is performed within the user terminal first; S2: The current user terminal generates a data map of the electronic seal sharing directory library according to a preset synchronization cycle; S3: Compare the data volume of each electronic seal structure in the data map with the electronic seal structure generated in the current user terminal to determine the minimum incremental data; S4: Synchronize the electronic seal shared directory library according to the minimum incremental data, and then complete the data synchronization of the current user end; S5: Counting the data volume of each electronic seal resource library of several user terminals that have completed data synchronization; S6: comparing the electronic seal resource libraries that have completed data volume statistics, and calculating the data volume of each electronic seal shared directory library to obtain minimalist incremental data; S7: Synchronize and update different electronic seal sharing directory libraries based on minimalist incremental data, and calculate the synchronization rate, synchronization delay and synchronization efficiency during the synchronization process, so as to optimize the data synchronization mechanism between several user terminals.

9. The electronic seal sharing system based on CA certificate nesting and data synchronization according to claim 8 is characterized in that: The calculation process of the data synchronization mechanism for performing data synchronization on several user terminals is as follows: Step 1: When the data volume of each electronic seal resource library of several user terminals increases, the original data set of the electronic seal shared directory library and the incremental data of each electronic seal resource library are combined and calculated according to the set update frequency; Step 2: When the amount of data in the electronic seal shared directory library increases, each electronic seal resource library synchronously updates the incremental data of the electronic seal shared directory library according to the set update frequency, and merges and calculates it with the original data set; Step 3: During the synchronization process of the electronic seal shared directory library, the synchronization rate is obtained according to the ratio of the amount of synchronized incremental data to the time required for synchronization; and the difference between the timestamp of the synchronized incremental data of the electronic seal shared directory library and the timestamp of the updated incremental data is used as the synchronization delay; at the same time, within the data synchronization time, the synchronization efficiency is obtained according to the ratio of the amount of successfully synchronized data to the total amount of synchronized data; Step 4: Update and optimize the data synchronization mechanism based on the acquired synchronization rate, synchronization delay, and synchronization efficiency.

Images