Electronic signature processing method, system, equipment and medium

Abstract

The invention discloses an electronic signature processing method, system and device and a medium, and relates to the technical field of electronic signatures, and the method comprises the steps: carrying out the first information verification and first signature processing based on a received electronic contract, and obtaining a to-be-signed file; performing AES encryption processing on the to-be-signed file by adjusting AES encryption algorithm parameters to obtain an encrypted to-be-signed file; performing second information verification and second signature processing on the first user information of the encrypted to-be-signed file to obtain a target digital certificate of the encrypted to-be-signed file; and generating a signed file based on the target digital certificate, and storing the target digital certificate to a block chain. The method is suitable for an online electronic contract signature process.

Description

Technical Field

[0001] The present application relates to the field of electronic signature technology, and in particular to electronic signature processing methods, systems, devices and media. Background Art

[0002] With the rapid development of computer and Internet technology, electronic signature processing systems have been widely used in application scenarios such as electronic contract signing and online banking. Users can electronically sign the corresponding documents and save the signed documents after completing the electronic signature processing. However, in terms of signature algorithms and processes, the signature algorithms in the existing electronic signature processing technical solutions have low efficiency problems such as slow signature speed and cumbersome signature process. The online signature process also has low efficiency problems such as cumbersome authentication process. Summary of the invention

[0003] In view of this, the present application provides an electronic signature processing method, system, device and medium, the main purpose of which is to solve the technical problems of low efficiency of signature algorithm and low efficiency of online signature process authentication process in the existing technical solutions for electronic signature processing.

[0004] According to one aspect of the present application, a method for processing an electronic signature is provided, the method comprising:

[0005] Performing first information verification and first signature processing based on the received electronic contract to obtain a document to be signed;

[0006] By adjusting the AES encryption algorithm parameters, the document to be signed is encrypted by AES to obtain an encrypted document to be signed;

[0007] Performing second information verification and second signature processing on the first user information of the encrypted file to be signed, respectively, to obtain a target digital certificate of the encrypted file to be signed;

[0008] A signed document is generated based on the target digital certificate, and the target digital certificate is stored in the blockchain.

[0009] According to another aspect of the present application, there is provided an electronic signature processing system, the system comprising:

[0010] An initialization module, used to perform first information verification and first signature processing based on the received electronic contract to obtain a document to be signed;

[0011] The encryption module is used to perform AES encryption processing on the file to be signed by adjusting the AES encryption algorithm parameters to obtain an encrypted file to be signed;

[0012] A parallel module is used to perform second information verification and second signature processing on the first user information of the encrypted file to be signed, so as to obtain a digital certificate of the target encrypted file to be signed;

[0013] A signature module is used to generate a signed document based on the target digital certificate and store the target digital certificate in the blockchain.

[0014] According to another aspect of the present application, a computer storage medium is provided, on which a computer program is stored, and when the program is executed by a processor, the above-mentioned electronic signature processing method is implemented.

[0015] According to another aspect of the present application, a computer device is provided, including a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein the processor implements the above-mentioned electronic signature processing method when executing the program.

[0016] By means of the above technical scheme, the electronic signature processing method, system, device and medium provided by the present application are compared with the technical scheme of electronic signature processing with low efficiency of signature algorithm in the existing electronic signature processing system and low efficiency of online signature process authentication process. The present application performs first information verification and first signature processing based on the received electronic contract to obtain the file to be signed; performs AES encryption processing on the file to be signed by adjusting the AES encryption algorithm parameters to obtain the encrypted file to be signed; performs second information verification and second signature processing on the first user information of the encrypted file to be signed respectively to obtain the target digital certificate of the encrypted file to be signed; generates a signed file based on the target digital certificate, and stores the target digital certificate in the blockchain. It can be seen that the present application optimizes the signature algorithm by performing information verification and signature processing on the first user information of the encrypted file to be signed in parallel, improves the efficiency of the signature algorithm, and ensures the legal effect and data integrity of the signed file while ensuring the security and reliability of the signature process, effectively improving the signing speed and efficiency.

[0017] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1A schematic diagram of a process for processing an electronic signature provided by an embodiment of the present application is shown;

[0020] Figure 2 A schematic diagram of another electronic signature processing system provided in an embodiment of the present application is shown;

[0021] Figure 3 A schematic diagram of the structure of an electronic signature processing system provided in an embodiment of the present application is shown;

[0022] Figure 4 A schematic diagram of the structure of another electronic signature processing system provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0023] The present application will be described in detail below with reference to the accompanying drawings and in combination with embodiments. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other without conflict.

[0024] The existing electronic signature processing technology has the technical problems of low efficiency of signature algorithm and low efficiency of online signature process authentication. This embodiment provides an electronic signature processing method, which optimizes the signature algorithm by performing second information verification and second signature processing on the first user information of the encrypted document to be signed in parallel, improves the efficiency of the signature algorithm, and ensures the legal effect and data integrity of the signed document while ensuring the security and reliability of the signature process, effectively improving the signing speed and efficiency. Figure 1 As shown, the above method comprises the following steps:

[0025] Step 101: Perform first information verification and first signature processing based on the received electronic contract to obtain a document to be signed.

[0026] In this embodiment, after the user uploads the electronic contract that needs to be electronically signed by uploading an attachment, an electronic signature request containing the electronic contract is generated. According to the needs of the actual application scenario, the contracting party information (user information, i.e., the company name and the information of the person handling the contract related to the enterprise entity or the name and contact information related to the individual entity) can be entered to generate an electronic signature request containing the electronic contract (and the contracting party information). The business client performs the first information verification and the first signature processing based on the electronic contract (and the contracting party information) in the received signature request to obtain the document to be signed. Among them, the first information verification is the real-name authentication of the user identifier (user account) corresponding to the electronic contract, and the first signature processing is the initialization signature processing of the electronic contract.

[0027] Step 102: Perform AES encryption processing on the file to be signed by adjusting AES encryption algorithm parameters to obtain an encrypted file to be signed.

[0028] In this embodiment, the AES encryption algorithm is used to encrypt and store the signature data such as the document to be signed, the contracting party information, and the digital certificate stored in the database to improve the security of data encryption. According to the needs of the actual application scenario, the AES encryption algorithm parameters are adjusted to encrypt the document to be signed. Specifically, one or more of the encryption mode, key length, and number of iterations of the AES encryption algorithm can be adjusted to obtain the preset target AES encryption algorithm parameters, and then the corresponding current AES encryption algorithm parameters are compared with the target AES encryption algorithm parameters. If they do not match, the current AES encryption algorithm parameters are adjusted to the target AES encryption algorithm parameters. In addition, the encryption structure of AES can realize parallel processing in a multi-core processor or a distributed system, thereby significantly improving the encryption speed.

[0029] Step 103: Perform second information verification and second signature processing on the first user information of the encrypted file to be signed, to obtain a target digital certificate for the encrypted file to be signed.

[0030] In this embodiment, after generating a request for obtaining the first user information of the encrypted file to be signed based on the encrypted file to be signed, the parallel processing mechanism is started, and the second information verification and the second signature processing are performed in parallel by creating a first thread and a second thread to improve the efficiency of generating the digital certificate. The second information verification includes the authenticity verification, validity verification and signing authority verification of the first user information corresponding to the encrypted file to be signed, and binding the target digital certificate obtained by the second signature processing based on the information verification result; the second signature processing includes generating signature request information based on the first user information corresponding to the encrypted file to be signed and sending it to the certificate authority CA, and the certificate authority CA sends the generated initial digital certificate to the signature server, so that the signature server generates a target digital certificate containing a digital signature based on the initial digital certificate from the certificate authority.

[0031] Step 104: Generate a signed document based on the target digital certificate, and store the target digital certificate in the blockchain.

[0032] In this embodiment, based on the timeout time and hierarchical retry mechanism of the cloud authentication server, the business client obtains the cloud authentication result of the target digital certificate by calling the corresponding API interface. The cloud authentication result is verified by the third information of the signature server, and the cloud authentication result is bound to the target digital certificate to obtain a signed file. Among them, the timeout setting of the cloud authentication server includes a dynamic timeout setting based on historical data, that is, the cloud authentication server can automatically adjust the timeout time of each request according to the previous network performance and request response time. For example, during peak hours or when the network is unstable, the timeout time can be appropriately extended to avoid unnecessary retries, and during low traffic periods, the timeout time can be shortened to improve processing efficiency. The hierarchical retry mechanism setting includes exponential backoff strategy, fault isolation and degradation processing, and global retry management. Exponential backoff strategy: When a request fails, the cloud authentication server can adopt the corresponding exponential backoff strategy according to the number of retries and error types. For example, the time interval of the first retry is short, but as the number of retries increases, the time interval will gradually increase until the preset maximum waiting time is reached. Fault isolation and degradation processing: The cloud authentication server can perform fault isolation and degradation processing according to different error types. If the failure is caused by the unavailability of external services, the cloud authentication server can temporarily isolate the fault point and switch to backup services or perform functional degradation. For example, if the signature server is unavailable, the cloud authentication server can temporarily store the request and continue processing after the signature server is restored. Global retry management: The cloud authentication server has a global retry management function, which can record the number of retries and reasons for each request, and trigger an alarm or downgrade operation after multiple retry failures to reduce resource waste and improve the overall robustness of the cloud authentication server.

[0033] For this embodiment, the above scheme can be followed to obtain the document to be signed by performing the first information verification and the first signature processing on the received electronic contract; by adjusting the AES encryption algorithm parameters, the document to be signed is subjected to AES encryption processing to obtain the encrypted document to be signed; the first user information of the encrypted document to be signed is subjected to the second information verification and the second signature processing respectively to obtain the target digital certificate of the encrypted document to be signed; the signed document is generated based on the target digital certificate, and the target digital certificate is stored in the blockchain. Compared with the technical scheme of electronic signature processing with low efficiency of the signature algorithm in the existing electronic signature processing system and low efficiency of the online signature process authentication process, this embodiment optimizes the signature algorithm by performing information verification and signature processing on the first user information of the encrypted document to be signed in parallel, thereby improving the efficiency of the signature algorithm, and while ensuring the security and reliability of the signature process, it ensures the legal effect and data integrity of the signed document, effectively improving the signing speed and efficiency.

[0034] Furthermore, as a refinement and extension of the specific implementation of the above embodiment, in order to fully illustrate the specific implementation process of this embodiment, another electronic signature processing method is provided. This embodiment optimizes the signature algorithm by performing information verification and signature processing on the first user information of the encrypted document to be signed in parallel, thereby improving the efficiency of the signature algorithm, and while ensuring the security and reliability of the signature process, it ensures the legal effect and data integrity of the signed document, effectively improving the signing speed and efficiency. Figure 2 As shown, the method includes:

[0035] Step 201: Obtain a document to be signed by performing a first information verification and a first signature processing on the received electronic contract.

[0036] During implementation, the user uploads an unsigned electronic contract to the business client and initiates an electronic signature request on the business client. When the business client detects the electronic signature request, it performs real-name authentication on the user ID (user account) corresponding to the electronic contract to determine whether the real-name authentication has been completed. If not, the user ID is authenticated. Specifically, the business client calls the face recognition service center to perform real-name authentication, and after the real-name authentication is completed, a user information acquisition request is generated. If the user ID has completed the real-name authentication, a user information acquisition request is generated. Furthermore, based on the acquired user information, the electronic contract is subjected to the first information verification and the first signature processing to obtain the document to be signed.

[0037] Step 202: Obtain corresponding current AES encryption algorithm parameters according to preset target AES encryption algorithm parameters.

[0038] Step 203: If the current AES encryption algorithm parameters do not match the target AES encryption algorithm parameters, adjust the current AES encryption algorithm parameters.

[0039] Step 204: Perform AES encryption processing on the file to be signed by adjusting AES encryption algorithm parameters to obtain an encrypted file to be signed.

[0040] During implementation, in order to illustrate the specific implementation method of step 204, as a preferred embodiment, the target AES encryption algorithm parameters include one or more of the encryption mode, key length, and number of iterations, and the step of adjusting the AES encryption algorithm parameters includes: adjusting the encryption mode in the current AES encryption algorithm parameters to the target mode, adjusting the key length in the current AES encryption algorithm parameters to the target length, and adjusting the number of iterations in the current AES encryption algorithm parameters to one or more of the target numbers.

[0041] During implementation, in order to improve the security of stored data, you can consider adjusting the encryption mode, key length, number of iterations, etc. in the AES encryption algorithm parameters. According to the needs of the actual application scenarios, set the target AES encryption algorithm parameters such as encryption mode, key length, number of iterations. During encryption, if the target AES encryption algorithm parameters include encryption mode, key length, and number of iterations, obtain the encryption mode, key length, and number of iterations in the current AES encryption algorithm parameters, and compare the current AES encryption algorithm parameters with the target AES encryption algorithm parameters. If the current AES encryption algorithm parameters do not match the target AES encryption algorithm parameters, adjust the current AES encryption algorithm parameters to the target AES encryption algorithm parameters.

[0042] Specifically, for encryption mode, change the encryption mode of AES. For example, change from ECB mode to CBC mode or GCM mode to prevent the same plaintext block from generating the same ciphertext block after encryption to improve security; for key length, change the key length of the AES encryption algorithm. For example, increase from 128 bits to 256 bits to improve security. Although this will increase the computational overhead, it can significantly improve the anti-cracking ability; for iteration number, increase or decrease the iteration number of the AES encryption algorithm. For example, increasing the iteration number in PBKDF2 can increase the difficulty of password guessing, but it will also increase the computational time.

[0043] For example, the encryption mode in the current AES encryption algorithm parameters is adjusted to the GCM mode, and the key length in the current AES encryption algorithm parameters is adjusted to 256 bits. Assume that the key length of the current service client is AES-128, and in order to improve security, it is adjusted to AES-256, and the encryption mode is changed to GCM.

[0044] Step 205: Create a first thread and a second thread.

[0045] Step 206: Use the first thread to perform second information verification on the first user information of the encrypted file to be signed to obtain a second information verification result, and the second information verification result is used to bind the target digital certificate.

[0046] During implementation, in order to illustrate the specific implementation method of step 206, as a preferred embodiment, step 206 includes: using the first thread to obtain the third user information corresponding to the encrypted file to be signed on the blockchain; performing second information verification on the first user information of the encrypted file to be signed according to the third user information to obtain a second information verification result.

[0047] Step 207: Use the second thread to perform a second signature process on the first user information of the encrypted file to be signed, generate signature request information and send it to a certificate authority, the certificate authority is used to generate an initial digital certificate for the encrypted file to be signed based on the signature request information and send it to a signature server, the signature server is used to receive the initial digital certificate from the certificate authority, and generate a target digital certificate containing a digital signature.

[0048] During implementation, after generating a user information acquisition request, the business client introduces a parallel processing mechanism to execute the second information verification and the second signature processing in parallel to improve the overall processing efficiency. The second information verification process is that after the user agrees to the information acquisition request, the business client obtains the user information from the cloud platform database, and verifies the authenticity and validity of the user information, and / or verifies whether the user has the corresponding signing authority; the second signature processing process is that after the user agrees to the information acquisition request, the business client obtains the user information from the cloud platform database, generates a key pair based on the acquired first user information, including a second private key and a second public key, encrypts the second public key and the first user information based on the first public key, generates a signature request information and sends it to the certificate authority CA to generate a digital certificate, and associates the digital certificate and the second private key with the first user information. Among them, the certificate authority CA stores the first private key and the first public key.

[0049] According to the needs of the actual application scenario, the second information verification process can also include blockchain verification. Specifically, during the second information verification process, the business client can compare the first user information with the third user information corresponding to the encrypted file to be signed recorded on the blockchain to confirm the consistency and integrity of the first user information. It can be seen that during the interaction between the signature server and the blockchain server, when the signature server generates a digital signature, it can compare and verify by calling the third user information corresponding to the encrypted file to be signed on the blockchain server, and record the second signature processing result on the blockchain to ensure that the signature data cannot be tampered with. Furthermore, the second information verification result and the second signature processing result obtained by parallel processing are merged to ensure that the final signed document has legal effect and data integrity.

[0050] Specifically, the digital certificate generation process processed by the certificate authority CA includes: decryption of signature request information. After receiving the signature request information, the certificate authority CA uses the first private key to decrypt the signature request information to obtain the user's second public key and corresponding user information; verification of user information. The certificate authority CA performs multiple verifications on the decrypted first user information, including verifying the integrity and authenticity of the first user information, and the validity of the second public key, so as to ensure that the first user information has not been tampered with during transmission; hash processing and signing. The certificate authority CA hashes the first user information and the second public key (using SHA-256 or a higher-strength hash algorithm) to generate a hash value of a fixed length, and uses the first private key to sign the generated hash value to generate a digital signature. The digital signature associates the second public key and the first user information to form a complete digital certificate. Furthermore, it also includes multiple signatures of digital certificates. To increase the credibility of the digital certificate, the business client allows multiple certificate authorities CA to jointly sign the first user information, that is, the digital certificate can contain multiple digital signature fields, and each field corresponds to a digital signature of a certificate authority CA. This multiple signature mechanism can effectively improve the tamper resistance and verification difficulty of the digital certificate.

[0051] It can be seen that for the parallel processing mechanism of the second information verification and the second signature processing, the business client can greatly shorten the total time of the electronic signature processing process, especially in a high concurrency environment, and effectively improve time efficiency; it effectively utilizes business customer source resources, and through multi-threaded or multi-process processing mechanisms, it gives full play to hardware performance, ensures processing speed in a multi-tasking environment, and improves resource utilization; when users perform electronic signature processing, they can complete the entire signature process more quickly, thereby improving the user's operating experience.

[0052] Step 208: Generate a signed document based on the target digital certificate, and store the target digital certificate in the blockchain.

[0053] During implementation, in order to illustrate the specific implementation method of step 208, as a preferred embodiment, the step of generating a signed file based on the target digital certificate includes: the cloud authentication server authenticates the second user information corresponding to the target digital certificate from the signature server, obtains the cloud authentication result and returns it to the signature server; after the signature server verifies the cloud authentication result through the third information, it binds the cloud authentication result with the target digital certificate to obtain a signed file.

[0054] In the implementation, in the process of interaction between the cloud authentication server and the signature server, the cloud authentication server specifically authenticates the signature result including: generating cloud authentication data, after completing the verification of the user identity information (second user information), the cloud authentication server generates a cloud authentication data packet containing the user identity information (second user information), and the authentication server signs the cloud authentication data packet using the third private key to obtain the signature result as the cloud authentication result to ensure the integrity and non-tamperability of the authentication data packet. Among them, the cloud authentication data includes the user's second user information, authentication timestamp, authentication level and other information; returning the cloud authentication result, the cloud authentication server sends the signed cloud authentication data packet to the signature server, so that the signature server associates the decrypted cloud authentication data with the signature request information after the signature verification of the received cloud authentication data packet is passed, and associates the cloud authentication data with the target digital certificate when it is determined that the user needs to sign an electronic contract.

[0055] Furthermore, the signature server performs third information verification on the cloud authentication result of the cloud authentication server, specifically including: verifying the cloud authentication result. After receiving the cloud authentication result, the signature server uses the third public key of the authentication server to verify the validity of the signature. After the verification is passed, the signature server records the cloud authentication data and stores it together with the user's target digital certificate (or signature request information) for subsequent generation of the target digital certificate; generating a target digital certificate: when it is determined that the user needs to sign an electronic contract, the signature server will call the previously stored cloud authentication data and associate it with the generated target digital certificate, thereby ensuring that the target digital certificate contains not only the user's signature information, but also the cloud authentication data of the cloud authentication server, thereby achieving the purpose of enhancing the credibility of the target digital certificate.

[0056] During implementation, in order to illustrate the specific implementation method of step 208, as a preferred embodiment, the step of storing the target digital certificate in the blockchain includes: generating a block for the digital certificate according to the hash value and metadata of the digital certificate; wherein the block for the digital certificate includes the storage location information of the digital certificate, and the storage location information is used to characterize the location information of the digital certificate in the distributed file system.

[0057] During the implementation, the cloud authentication server performs real-name authentication on the second user information corresponding to the target digital certificate from the signature server. The cloud authentication server provides identity authentication services and returns the cloud authentication result containing the second user information verification result to the signature server. When the business client determines that the user needs to sign an electronic contract, it can also use the asynchronous processing mechanism and obtain the cloud authentication result through the corresponding API interface to complete the association operation of the cloud authentication data with the target digital certificate, so that the user can view the signed file in the business client and download the PDF file with the digital signature. In addition, the cloud authentication server can also provide services in the process of key management and signing to ensure the authenticity of the user's identity and the security of the information.

[0058] According to the needs of the actual application scenario, the target digital certificate can include multiple digital certificates. The blockchain storage process of digital certificates specifically includes: setting up a blockchain architecture, adopting a consortium chain architecture, and the participating nodes are multiple certificate authority centers CA and related trust institutions. The consortium chain architecture can establish trust between different participants and ensure the consistency and immutability of data through a consensus mechanism; setting up a block data structure, after each digital certificate is generated, the hash value of the digital certificate is calculated, and a block is generated based on the hash value of the digital certificate and the metadata of the digital certificate (such as issuance time, issuing agency ID, etc.), and the block also contains the hash value of the previous block to ensure the integrity of the blockchain; setting up a data storage mechanism, in order to reduce the consumption of blockchain storage space, only the hash value of the digital certificate and a small amount of metadata are stored on the blockchain, and the complete digital certificate file is stored in a distributed file system (such as IPFS). Among them, each block in the blockchain points to a specific location in the distributed file system, so that users can quickly retrieve the complete digital certificate when needed; setting up a consensus mechanism and a data writing mechanism (hybrid consensus mechanism), and adopting a hybrid consensus mechanism combining PoW (proof of work) and PoS (proof of equity). In the process of generating each new block, the node submits the new block based on a certain amount of computing workload, and determines the target node with the right to record accounts based on their respective rights and interests (such as the number of certificates issued). It can be seen that the hybrid consensus mechanism can not only ensure the security of the blockchain, but also effectively avoid the efficiency bottleneck that may be caused by a single consensus mechanism; setting up a cross-chain verification and interoperability mechanism can ensure that certificate information is shared and verified between different blockchains. For example, when connecting with other trust systems (such as the Global CA Alliance), the blockchain can verify the certificate information on different chains through cross-chain technology to achieve global mutual recognition of certificates.

[0059] By applying the technical solution of this embodiment, a first information verification and a first signature process are performed based on the received electronic contract to obtain a file to be signed; by adjusting the AES encryption algorithm parameters, the file to be signed is encrypted by AES to obtain an encrypted file to be signed; a second information verification and a second signature process are performed on the first user information of the encrypted file to be signed to obtain a target digital certificate for the encrypted file to be signed; a signed file is generated based on the target digital certificate, and the target digital certificate is stored in the blockchain. Compared with the technical solutions for electronic signature processing with low signature algorithm efficiency in existing electronic signature processing systems and low efficiency in online signature process authentication process, the present application improves the security of electronic contract content encryption by adjusting the encryption algorithm parameters and utilizing AES-256GCM encryption mode; improves efficiency by performing information verification and signature processing on the first user information of the encrypted document to be signed in parallel; increases the timeout time and retry mechanism for the API interface for calling the cloud authentication result of the cloud authentication server through the timeout time and retry policy mechanism of the cloud authentication server to ensure reliability; eliminates the need to return the target digital certificate result immediately through asynchronous processing, thereby reducing the waiting time of the main process; and improves data security and immutability by storing the target digital certificate in the blockchain.

[0060] Further, as Figure 1 , 2 The specific implementation of the method, the embodiment of the present application provides an electronic signature processing system, such as Figure 3 As shown, the system includes: an initialization module 31, an encryption module 33, a parallel module 34, and a signature module 35.

[0061] The initialization module 31 is used to perform first information verification and first signature processing based on the received electronic contract to obtain a document to be signed.

[0062] The encryption module 33 is used to perform AES encryption processing on the file to be signed by adjusting the AES encryption algorithm parameters to obtain an encrypted file to be signed.

[0063] The parallel module 34 is used to perform second information verification and second signature processing on the first user information of the encrypted file to be signed, so as to obtain a target digital certificate of the encrypted file to be signed.

[0064] The signature module 35 is used to generate a signed document based on the target digital certificate and store the target digital certificate in the blockchain.

[0065] In specific application scenarios, such as Figure 4 As shown, the electronic signature processing system further includes an adjustment module 32 .

[0066] The adjustment module 32 is used to obtain the corresponding current AES encryption algorithm parameters according to the preset target AES encryption algorithm parameters; and if the current AES encryption algorithm parameters do not match the target AES encryption algorithm parameters, adjust the current AES encryption algorithm parameters.

[0067] In a specific application scenario, the target AES encryption algorithm parameters include one or more of an encryption mode, a key length, and a number of iterations. The adjustment module 32 is also used to adjust the encryption mode in the current AES encryption algorithm parameters to the target mode, adjust the key length in the current AES encryption algorithm parameters to the target length, and adjust the number of iterations in the current AES encryption algorithm parameters to one or more of the target numbers.

[0068] In a specific application scenario, the parallel module 34 includes: a creation submodule 341 , a first processing submodule 342 , and a second processing submodule 343 .

[0069] The creation submodule 341 is used to create a first thread and a second thread.

[0070] The first processing submodule 342 is used to use the first thread to perform second information verification on the first user information of the encrypted file to be signed to obtain a second information verification result, and the second information verification result is used to bind the target digital certificate.

[0071] The second processing submodule 343 is used to use the second thread to perform a second signature processing on the first user information of the encrypted file to be signed, generate signature request information and send it to the certificate authority center, the certificate authority center is used to generate the initial digital certificate of the encrypted file to be signed based on the signature request information and send it to the signature server, the signature server is used to receive the initial digital certificate from the certificate authority center, and generate a target digital certificate containing a digital signature.

[0072] In a specific application scenario, the first processing submodule 342 is specifically used to use the first thread to obtain the third user information corresponding to the encrypted file to be signed on the blockchain; and perform second information verification on the first user information of the encrypted file to be signed according to the third user information to obtain a second information verification result.

[0073] In a specific application scenario, the signature module 35 includes a generation submodule 351 and a storage submodule 352 .

[0074] The generation submodule 351 is used for the cloud authentication server to authenticate the second user information corresponding to the target digital certificate from the signature server, obtain the cloud authentication result and return it to the signature server; and after the signature server verifies the third information of the cloud authentication result and passes it, the cloud authentication result is bound to the target digital certificate to obtain a signed file.

[0075] The storage submodule 352 is used to generate a block for the target digital certificate based on the hash value and metadata of the target digital certificate; wherein the block for the target digital certificate includes storage location information of the target digital certificate, and the storage location information is used to represent the location information of the target digital certificate in the distributed file system.

[0076] It should be noted that for other corresponding descriptions of the functional units involved in the electronic signature processing system provided in the embodiment of the present application, reference can be made to Figure 1 and Figure 2 The corresponding description in will not be repeated here.

[0077] Based on the above Figure 1 and Figure 2 The method shown in the embodiment of the present application accordingly provides a computer storage medium on which a computer program is stored, and when the program is executed by a processor, the above-mentioned Figure 1 and Figure 2 The electronic signature processing method shown.

[0078] Based on this understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each implementation scenario of the present application.

[0079] Based on the above Figure 1 , Figure 2 The method shown, and Figure 3 , Figure 4 In order to achieve the above-mentioned purpose, the embodiment of the present application further provides a computer device, which can be a personal computer, a server, a network device, etc. The physical device includes a storage medium and a processor; the storage medium is used to store a computer program; the processor is used to execute the computer program to achieve the above-mentioned Figure 1 and Figure 2 The electronic signature processing method shown.

[0080] Optionally, the computer device may further include a user interface, a network interface, a camera, a radio frequency (RF) circuit, a sensor, an audio circuit, a WI-FI module, etc. The user interface may include a display, an input unit such as a keyboard, etc., and the optional user interface may also include a USB interface, a card reader interface, etc. The network interface may optionally include a standard wired interface, a wireless interface (such as a Bluetooth interface, a WI-FI interface), etc.

[0081] Those skilled in the art will appreciate that the computer device structure provided in this embodiment does not constitute a limitation on the physical device, and may include more or fewer components, or a combination of certain components, or different component arrangements.

[0082] The storage medium may also include an operating system and a network communication module. The operating system is a program that manages the hardware and software resources of a computer device and supports the operation of information processing programs and other software and / or programs. The network communication module is used to achieve communication between components within the storage medium and with other hardware and software in the physical device.

[0083] Through the description of the above implementation methods, those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general hardware platform, or by hardware. By applying the technical solution of the present application, compared with the low efficiency of the signature algorithm in the existing electronic signature processing system and the low efficiency of the electronic signature processing in the online signature process authentication process, the present application optimizes the signature algorithm by performing information verification and signature processing in parallel on the first user information of the encrypted document to be signed, thereby improving the efficiency of the signature algorithm, and while ensuring the security and reliability of the signature process, it ensures the legal effect and data integrity of the signed document, effectively improving the signing speed and efficiency.

[0084] Those skilled in the art will appreciate that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily necessary for implementing the present application. Those skilled in the art will appreciate that the modules in the system in the implementation scenario can be distributed in the system of the implementation scenario according to the implementation scenario description, or can be changed accordingly and located in one or more systems different from the present implementation scenario. The modules of the above-mentioned implementation scenario can be combined into one module, or can be further split into multiple submodules.

[0085] The above serial numbers of this application are only for description and do not represent the advantages and disadvantages of the implementation scenarios. The above disclosure is only a few specific implementation scenarios of this application, but this application is not limited to them, and any changes that can be thought of by technicians in this field should fall within the scope of protection of this application.

Claims

1. An electronic signature processing method, characterized in that: include: Performing first information verification and first signature processing based on the received electronic contract to obtain a document to be signed; By adjusting the AES encryption algorithm parameters, the document to be signed is encrypted by AES to obtain an encrypted document to be signed; Performing second information verification and second signature processing on the first user information of the encrypted file to be signed, respectively, to obtain a target digital certificate of the encrypted file to be signed; A signed document is generated based on the target digital certificate, and the target digital certificate is stored in the blockchain.

2. The method according to claim 1, characterized in that The step of adjusting the AES encryption algorithm parameters also includes: According to the preset target AES encryption algorithm parameters, obtain the corresponding current AES encryption algorithm parameters; If the current AES encryption algorithm parameters do not match the target AES encryption algorithm parameters, the current AES encryption algorithm parameters are adjusted.

3. The method according to claim 1 or 2, characterized in that: The target AES encryption algorithm parameters include one or more of an encryption mode, a key length, and a number of iterations. The step of adjusting the AES encryption algorithm parameters includes: The encryption mode in the current AES encryption algorithm parameters is adjusted to the target mode, the key length in the current AES encryption algorithm parameters is adjusted to the target length, and the number of iterations in the current AES encryption algorithm parameters is adjusted to one or more of the target numbers.

4. The method according to claim 1, characterized in that: The step of performing second information verification and second signature processing on the first user information of the encrypted file to be signed to obtain the target digital certificate of the encrypted file to be signed comprises: Create a first thread and a second thread; Using the first thread to perform second information verification on the first user information of the encrypted file to be signed, to obtain a second information verification result, wherein the second information verification result is used to bind the target digital certificate; The second thread is used to perform a second signature process on the first user information of the encrypted file to be signed, generate signature request information and send it to a certificate authority, the certificate authority is used to generate an initial digital certificate for the encrypted file to be signed based on the signature request information and send it to a signature server, the signature server is used to receive the initial digital certificate from the certificate authority, and generate a target digital certificate containing a digital signature.

5. The method according to claim 4, characterized in that The step of using the first thread to perform second information verification on the first user information of the encrypted file to be signed to obtain a second information verification result includes: Using the first thread, obtaining third user information corresponding to the encrypted file to be signed on the blockchain; The first user information of the encrypted file to be signed is subjected to second information verification according to the third user information to obtain a second information verification result.

6. The method according to claim 4, characterized in that The step of generating a signed document based on the target digital certificate comprises: The cloud authentication server authenticates the second user information corresponding to the target digital certificate from the signature server, obtains a cloud authentication result and returns it to the signature server; After the signature server verifies the cloud authentication result through the third information, the cloud authentication result is bound to the target digital certificate to obtain a signed document.

7. The method according to claim 1, characterized in that The step of storing the target digital certificate in the blockchain comprises: Generate a block for the target digital certificate according to the hash value and metadata of the target digital certificate; The block for the target digital certificate includes storage location information of the target digital certificate, and the storage location information is used to represent location information of the target digital certificate in a distributed file system.

8. An electronic signature processing system, characterized in that: include: An initialization module, used to perform first information verification and first signature processing based on the received electronic contract to obtain a document to be signed; The encryption module is used to perform AES encryption processing on the file to be signed by adjusting the AES encryption algorithm parameters to obtain an encrypted file to be signed; A parallel module is used to perform second information verification and second signature processing on the first user information of the encrypted file to be signed, so as to obtain a target digital certificate of the encrypted file to be signed; A signature module is used to generate a signed document based on the target digital certificate and store the target digital certificate in the blockchain.

9. A computer storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the electronic signature processing method described in any one of claims 1 to 7 is implemented.

10. A computer device comprising a storage medium, a processor, and a computer program stored in the storage medium and executable on the processor, characterized in that: When the processor executes the program, the electronic signature processing method according to any one of claims 1 to 7 is implemented.

Images