Electronic document service platform system and method applied to railway freight

Abstract

The invention provides an electronic document business platform system and method applied to railway freight. The method comprises the following steps: acquiring an electronic document template corresponding to a railway freight business demand; determining a target user according to the electronic document template; when it is determined that the current user belongs to the target user, determining a digital certificate corresponding to the current user, and obtaining an electronic seal corresponding to the current user; generating an electronic signature corresponding to the current user in response to a signature operation input by the current user for the digital certificate; generating a target electronic document corresponding to the railway freight business demand according to the electronic seal and the electronic signature in combination with the electronic document template; under the condition that it is determined that the railway freight service requirements are changed, a change requirement book is generated according to the changed railway freight service requirements; and determining a new target electronic document corresponding to the changed railway freight business demand according to the change request and the target electronic document. The signing process of the electronic document is simplified, and the generation efficiency of the electronic document is effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of railway freight transportation, and in particular to an electronic document business middle platform system and method applied to railway freight transportation. Background Art

[0002] There are many types of electronic documents involved in railway freight business. Some electronic documents of railway freight business have the attributes of both bills and railway transportation contracts. The formats and requirements of different electronic documents are different, and the requirements for the signatories are also different. There are multiple signing methods such as unilateral signing, bilateral signing, and multi-party signing.

[0003] Existing methods for generating electronic documents include the following three: one is to scan paper documents into document files, and the customer signs the document files by hand to obtain electronic documents, and upload and store the electronic documents on the business platform. This method uses handwritten signatures, which are easy to be forged or tampered with, and it is difficult to ensure the authenticity and legal effect of electronic documents. There are security risks, and the operation process is relatively complicated, which makes the generation efficiency of electronic documents low; the second is that the business platform generates a layout file, and the customer signs the layout file by hand on a touch screen device to complete the online signing of the electronic document. This method also uses handwritten signatures and also has security risks; the third is to use the electronic signature capability of the business platform to complete the local signing of the document file, upload the document file to the business platform, and then the business platform signs the document file for a second time to obtain the electronic document. The operation process of this method is relatively complicated, which makes the generation efficiency of electronic documents low, and the document file is easy to be forged or tampered with during the local signing and uploading process, which poses a security risk. Summary of the invention

[0004] The present invention provides an electronic document business middle-end system and method applied to railway freight, which are used to solve the defects of security risks and low generation efficiency of electronic documents in existing electronic document generation methods. The electronic document business middle-end system applied to railway freight simplifies the signing process of electronic documents through the interaction between the format file management module, the signature management module, the certificate and seal management module and the electronic document management module, realizes business modularization, standardization and service, and performs security management of electronic document signing throughout the life cycle, effectively improving the generation efficiency of electronic documents while ensuring security.

[0005] In a first aspect, the present invention provides an electronic document business middle-end system applied to railway freight, including the following modules.

[0006] The layout file management module, the signature management module, the certificate and seal management module and the electronic document management module, wherein the layout file management module is used to obtain the electronic document template corresponding to the railway freight business demand; the signature management module is used to determine the target user according to the electronic document template; the certificate and seal management module is used to determine the digital certificate corresponding to the current user and obtain the electronic seal corresponding to the current user when it is determined that the current user belongs to the target user; the signature management module is also used to respond to the signature operation input by the current user for the digital certificate and generate the electronic signature corresponding to the current user; the electronic document management module is used to generate the target electronic document corresponding to the railway freight business demand according to the electronic seal and the electronic signature, combined with the electronic document template; the electronic document management module is also used to generate a change request letter according to the changed railway freight business demand when it is determined that the railway freight business demand has changed; and determine the new target electronic document corresponding to the changed railway freight business demand according to the change request letter and the target electronic document.

[0007] According to an electronic document business middle-end system applied to railway freight provided by the present invention, the electronic document management module is also used to determine the new target electronic document corresponding to the changed railway freight business demand according to the change request and the target electronic document, including: the electronic document management module is specifically used to generate a first target change request according to the electronic seal and the electronic signature, combined with the change request; respond to the acceptance operation input by the internal acceptance personnel for the first target change request, and obtain the acceptance result; when the acceptance result indicates that the acceptance is passed, according to the target electronic seal and the target electronic signature corresponding to the carrier personnel corresponding to the changed railway freight business demand, combined with the first target change request, generate a second target change request; based on the second target change request, update the target electronic document to obtain the new target electronic document; wherein, the target electronic seal is obtained by the seal management module; the target electronic signature is generated by the signature management module in response to the signature operation input by the carrier personnel for the first target change request.

[0008] According to an electronic document business middle-end system applied to railway freight provided by the present invention, the certificate and seal management module includes: a certificate management unit and a seal and stamp management unit. The certificate and seal management module is used to determine the digital certificate corresponding to the current user when it is determined that the current user belongs to the target user, including: the certificate management unit is specifically used to respond to the signing application operation input by the current user, generate a matching result between the current user and the target user, and determine the digital certificate corresponding to the current user when the matching result indicates that the current user belongs to the target user; the certificate and seal management module is used to obtain the electronic seal corresponding to the current user, including: the seal and stamp management unit is specifically used to obtain the electronic seal corresponding to the current user from the seal and stamp library when the matching result indicates that the current user belongs to the target user, and the seal and stamp library is constructed based on historical electronic seals obtained from the customer center.

[0009] According to an electronic document business middle-end system applied to railway freight provided by the present invention, the signing management module includes: a signing policy management unit and a signature authority management unit. The signing management module is used to determine the target user according to the electronic document template, including: the signing policy management unit is specifically used to determine the signing method according to the electronic document template, and the signing method includes one of the following: unilateral signing, bilateral signing and multi-party signing; the signature authority management unit is specifically used to determine the target user according to the signing authority corresponding to the signing method.

[0010] According to an electronic document business middle-office system applied to railway freight provided by the present invention, the certificate management unit is specifically used to respond to the signing application operation input by the current user to generate a matching result between the current user and the target user, including: the certificate management unit is specifically used to respond to the signing application operation input by the current user when the user type of the current user is an internal user, match the real-name information of the current user with the real-name information of the target user, and generate the matching result; respond to the signing application operation input by the current user when the user type of the current user is an external user, match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user, and generate the matching result.

[0011] According to an electronic document business middle-office system applied to railway freight provided by the present invention, the certificate management unit is specifically used to determine the digital certificate corresponding to the current user when the matching result indicates that the current user belongs to the target user, including: the certificate management unit is specifically used to generate a server-side certificate when the user type of the current user is an internal user and when the matching result indicates that the current user belongs to the target user; and determine the server-side certificate as the digital certificate; when the user type of the current user is an external user and when the matching result indicates that the current user belongs to the target user, generate a mobile-side certificate through a certificate authentication center; authorize the person in charge of the enterprise where the target user is located to obtain an authorization result; when the authorization result indicates that the authorization is passed, determine the mobile-side certificate as the digital certificate.

[0012] According to an electronic document business middle-office system applied to railway freight provided by the present invention, the certificate management unit is specifically used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user to generate the matching result, including: the certificate management unit is specifically used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user when the access device of the current user is a mobile terminal to generate the matching result; when the access device of the current user is a personal computer, send a QR code generation instruction to the personal computer of the current user; generate a certificate application QR code through the personal computer of the current user in response to the QR code generation instruction; after determining that the mobile terminal of the current user scans the certificate application QR code, match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user to generate the matching result.

[0013] According to an electronic document business middle-end system applied to railway freight provided by the present invention, the certificate and seal management module is also used to output prompt information when it is determined that the current user belongs to the target user, and the prompt information is used to indicate that the current user has passed the authentication.

[0014] According to the present invention, an electronic document business middle-end system applied to railway freight also includes: a track-leaving module; the track-leaving module is used to perform real-time monitoring of the format file management module, the signature management module, the certificate and seal management module and the electronic document management module to generate a log file.

[0015] In a second aspect, the present invention further provides a method for processing electronic document business applied to railway freight, which is applied to the electronic document business middle-office system applied to railway freight as described in any one of the first aspects, and the electronic document business middle-office system applied to railway freight includes: a format file management module, a signature management module, a certificate and seal management module and an electronic document management module, and the method includes the following steps.

[0016] The electronic document template corresponding to the railway freight business demand is obtained by using the layout file management module; the target user is determined according to the electronic document template by using the signature management module; the digital certificate corresponding to the current user is determined by using the certificate and seal management module, and the electronic seal corresponding to the current user is obtained when the current user is determined to belong to the target user; the electronic signature management module is responded to by the signature operation input by the current user for the digital certificate, and the electronic signature corresponding to the current user is generated; the target electronic document corresponding to the railway freight business demand is generated by using the electronic document management module according to the electronic seal and the electronic signature, in combination with the electronic document template; the change request is generated according to the changed railway freight business demand by using the electronic document management module when it is determined that the railway freight business demand has changed, and the new target electronic document corresponding to the changed railway freight business demand is determined according to the change request and the target electronic document.

[0017] The present invention provides an electronic document business middle-end system and method applied to railway freight. The electronic document business middle-end system applied to railway freight includes: a format file management module, a signature management module, a certificate and seal management module and an electronic document management module, wherein the format file management module is used to obtain an electronic document template corresponding to the railway freight business demand; the signature management module is used to determine the target user according to the electronic document template; the certificate and seal management module is used to determine the digital certificate corresponding to the current user and obtain the electronic seal corresponding to the current user when it is determined that the current user belongs to the target user; the signature management module is also used to respond to the signature operation input by the current user for the digital certificate and generate the electronic signature corresponding to the current user; the electronic document management module is used to generate the target electronic document corresponding to the railway freight business demand according to the electronic seal and the electronic signature, combined with the electronic document template; the electronic document management module is also used to generate a change request letter according to the changed railway freight business demand when it is determined that the railway freight business demand has changed; and determine the new target electronic document corresponding to the changed railway freight business demand according to the change request letter and the target electronic document. The electronic document business middle-office system applied to railway freight simplifies the signing process of electronic documents through the interaction between the format file management module, signature management module, certificate and seal management module and electronic document management module, realizes business modularization, standardization and service-oriented, and conducts security management of electronic document signing throughout the life cycle. While ensuring security, it effectively improves the efficiency of electronic document generation. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the present invention or the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0019] Figure 1 It is one of the structural schematic diagrams of the electronic document business middle-end system applied to railway freight provided by the present invention.

[0020] Figure 2 It is a structural diagram of the signature management module provided by the present invention.

[0021] Figure 3 It is a structural schematic diagram of the certificate and seal management module provided by the present invention.

[0022] Figure 4 This is the second structural schematic diagram of the electronic document business middle-end system applied to railway freight provided by the present invention.

[0023] Figure 5It is a schematic diagram of an application scenario of the electronic document business middle-end system applied to railway freight provided by the present invention.

[0024] Figure 6 It is a flow chart of the electronic document business processing method applied to railway freight provided by the present invention. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0026] The following is a further description of the electronic document business middle-end system applied to railway freight involved in an embodiment of the present invention.

[0027] Figure 1 This is one of the structural diagrams of the electronic document business middle platform system applied to railway freight provided by the present invention, such as Figure 1 As shown, the system may include: a format file management module 10, a signature management module 20, a certificate and seal management module 30 and an electronic document management module 40.

[0028] The format file management module 10 is used to obtain the electronic document template corresponding to the railway freight business needs.

[0029] The signing management module 20 is used to determine the target user according to the electronic document template.

[0030] The certificate and seal management module 30 is used to determine the digital certificate corresponding to the current user and obtain the electronic seal corresponding to the current user when it is determined that the current user belongs to the target user.

[0031] The signature management module 20 is also used to respond to the signature operation input by the current user for the digital certificate and generate an electronic signature corresponding to the current user.

[0032] The electronic document management module 40 is used to generate a target electronic document corresponding to the railway freight business needs based on the electronic seal and electronic signature in combination with the electronic document template.

[0033] The electronic document management module 40 is also used to generate a change request letter based on the changed railway freight business demand when it is determined that the railway freight business demand has changed; and determine a new target electronic document corresponding to the changed railway freight business demand based on the change request letter and the target electronic document.

[0034] Among them, the electronic document template refers to a layout file of an electronic document.

[0035] The target user refers to a user with signing authority. Optionally, the number of target users can be one or more, which is not specifically limited here.

[0036] A digital certificate is an electronic document issued by a certificate authority (CA). The CA issues a digital certificate to each user who uses a public key. The digital certificate proves that the user listed in the certificate legally owns the public key listed in the certificate. The digital signature of the CA prevents attackers from forging and tampering with the certificate.

[0037] A CA organization is also called a certificate authentication center.

[0038] Exemplarily, the above-mentioned CA institution may be the China Railway CA institution.

[0039] It should be noted that the electronic document business middle-end system applied to railway freight involved in the embodiment of the present invention can interact with other centers.

[0040] Optionally, the above-mentioned other centers may include: railway business center, customer center, registration center, configuration center, cache center and monitoring center, etc.

[0041] Optionally, the electronic document business middle-office system applied to railway freight can perform middle-office service discovery based on the registration center. The middle-office service exposes the Representational State Transfer (REST) ​​service port to the outside world, and uses the HyperText Transfer Protocol (HTTP) combined with JavaScript Object Notation (JSON), that is, the HTTP+JSON method, to interact with other centers except the registration center.

[0042] It should be noted that, when the certificate management module 30 determines that the current user does not belong to the target user, it does not perform any operation.

[0043] In an embodiment of the present invention, after obtaining relevant information about railway freight business needs, the format file management module 10 can obtain the electronic document template corresponding to the railway freight business needs from the format file library, and send the electronic document template to the signing management module 20. The format file library is constructed by the format file management module 10 based on the historical format files obtained from the railway business center. It can be understood that when the format file management module 10 obtains a new format file from the railway business center, the format file management module 10 can update the format file library in real time; then, the signing management module 20 determines the user with signing authority based on the received electronic document template. That is, the target user, and sends the user information of the target user (such as real name information and biometric information) to the certificate and seal management module 30; the certificate and seal management module 30 generates a matching result between the current user and the target user based on the acquired user information of the current user and the user information of the target user. When it is determined that the current user belongs to the target user, the certificate and seal management module 30 determines the digital certificate corresponding to the current user, obtains the electronic seal corresponding to the current user, and sends the electronic seal to the electronic document management module 40; then, the signature management module 20 responds to the signature operation input by the current user for the digital certificate, generates the electronic signature corresponding to the current user, and sends the electronic signature to the electronic document management module 40. In this way, the electronic document management module 40 can generate the target electronic document corresponding to the railway freight business needs based on the electronic seal and the electronic signature, combined with the electronic document template.

[0044] After the electronic document management module 40 generates the target electronic document, in actual business scenarios, it may be necessary to change the carrier or unloading location due to emergencies. In other words, the railway freight business demand changes, and the target electronic document needs to be updated. When the electronic document management module 40 determines that the railway freight business demand has changed, it can generate a change request based on the changed railway freight business demand, and then combine the target electronic document to determine the new target electronic document corresponding to the changed railway freight business demand. In the whole process, it can flexibly respond to business scenarios where the railway freight business demand changes, update the target electronic document in real time, and ensure the integrity of the electronic document in the whole process.

[0045] The above-mentioned electronic document business middle-office system applied to railway freight simplifies the signing process of electronic documents through the interaction between the format file management module 10, the signature management module 20, the certificate and seal management module 30 and the electronic document management module 40, realizes business modularization, standardization and service, and performs security management of the electronic document signing throughout the life cycle, effectively improving the efficiency of electronic document generation while ensuring security.

[0046] Optionally, the electronic document management module 40 is used to generate a target electronic document corresponding to the railway freight business needs according to the electronic seal and the electronic signature, combined with the electronic document template, and may include: the electronic document management module 40 is specifically used to add the electronic seal to the target seal position in the electronic document template, and add the electronic signature to the target signature position in the electronic document template to obtain a new electronic document template; and determine the new electronic document template as the target electronic document. In the whole process, the degree of automation is high, which effectively improves the efficiency of generating electronic documents.

[0047] In some embodiments, the electronic document management module 40 is also used to determine a new target electronic document corresponding to the changed railway freight business needs based on the change request and the target electronic document, including: the electronic document management module 40 is specifically used to generate a first target change request based on the electronic seal and electronic signature in combination with the change request; respond to the acceptance operation input by the internal acceptance personnel for the first target change request to obtain an acceptance result; when the acceptance result indicates that the acceptance is passed, generate a second target change request based on the target electronic seal and target electronic signature corresponding to the carrier personnel corresponding to the changed railway freight business needs, combined with the first target change request; based on the second target change request, update the target electronic document to obtain a new target electronic document; wherein, the target electronic seal is obtained by the certificate and seal management module 30; the target electronic signature is generated by the signature management module 20 in response to the signature operation input by the carrier personnel for the first target change request.

[0048] Among them, the change request letter is used to explain in detail the specific content, reasons, requirements and possible subsequent operations involved in the change.

[0049] It should be noted that, when the acceptance result indicates that the acceptance is not passed, the electronic document management module 40 does not perform any operation.

[0050] In an embodiment of the present invention, the electronic document management module 40 adds an electronic seal to the first target seal position in the change request, and adds an electronic signature to the first target signature position in the change request to obtain a new change request, namely the first target change request; then, the electronic document management module 40 responds to the acceptance operation input by the internal acceptance personnel for the first target change request, and obtains the acceptance result. When the acceptance result indicates that the acceptance is passed, the electronic document management module 40 receives the target electronic seal sent by the certificate and seal management module 30, and receives the target electronic signature sent by the signature management module 20. It can be understood that the certificate and seal management module 30 can obtain the target electronic seal corresponding to the carrier personnel corresponding to the changed railway freight business needs, and send the target electronic seal to the electronic document management module 40. At the same time, the signature management module 20 responds to the signature operation input by the carrier personnel for the first target change request, generates the target electronic signature corresponding to the carrier personnel, and sends the target electronic signature to the electronic document management module 40. In this way, the electronic document management module 40 can add the target electronic seal to the second target seal position in the first target change request, and add the target electronic signature to the second target signature position in the first target change request, to obtain a new first target change request, that is, a second target change request; then, the electronic document management module 40 can update the target electronic document based on the second target change request to obtain a new target electronic document. The entire process can flexibly respond to business scenarios where the needs of railway freight business change, update the target electronic document in real time, and ensure the integrity of the electronic document throughout the entire process.

[0051] In some embodiments, Figure 2 is a schematic diagram of the structure of the signature management module provided by the present invention, such as Figure 2 As shown, the signing management module 20 may include: a signing policy management unit 201 and a signature authority management unit 202. The signing management module 20 is used to determine the target user according to the electronic document template, including: a signing policy management unit 201, which is specifically used to determine the signing method according to the electronic document template. The signing method includes one of the following: unilateral signing, bilateral signing and multi-party signing; the signature authority management unit 202 is specifically used to determine the target user according to the signing authority corresponding to the signing method.

[0052] The signing authority may be preset by the signature authority management unit 202. The signing authority corresponding to different signing methods may be set based on internal regulations, legal requirements, business needs, etc. of the organization.

[0053] In an embodiment of the present invention, after obtaining the electronic document template corresponding to the railway freight business demand, the signing strategy management unit 201 automatically determines the best signing method for the electronic document template by analyzing the characteristics of the electronic document template, such as the number of participants, the nature of the document, and based on the preset business logic and rules, that is, determining whether the electronic document template is suitable for unilateral signing, bilateral signing, or multi-party signing; then, the signature authority management unit 202 determines the signing authority corresponding to the signing method, and determines the target user based on the signing authority. Throughout the process, based on the signing method and the corresponding signing authority, it can be ensured that only users with the corresponding signing authority can sign the electronic document, thereby ensuring the validity and security of the signature. The setting of signing authority also helps to prevent unauthorized access and tampering, and further ensures the credibility of the electronic document signing.

[0054] In some embodiments, Figure 3 Schematic diagram of the structure of the certificate management module provided by the present invention. Figure 3 As shown, the certificate management module 30 may include: a certificate management unit 301 and a seal management unit 302. The certificate management module 30 is used to determine the digital certificate corresponding to the current user when it is determined that the current user belongs to the target user, including: the certificate management unit 301, which is specifically used to respond to the signing application operation input by the current user, generate a matching result between the current user and the target user, and determine the digital certificate corresponding to the current user when the matching result indicates that the current user belongs to the target user; the certificate management module 30 is used to obtain the electronic seal corresponding to the current user, including: the seal management unit 302, which is specifically used to obtain the electronic seal corresponding to the current user from the seal library when the matching result indicates that the current user belongs to the target user. The seal library is constructed based on historical electronic seals obtained from the customer center.

[0055] It is understandable that, when the seal and stamp management unit 302 obtains a new electronic seal from the customer center, the seal and stamp management unit 302 can update the seal and stamp library in real time.

[0056] In the embodiment of the present invention, the certificate management unit 301 responds to the signing application operation input by the current user. The certificate management unit 301 generates a matching result between the current user and the target user based on the acquired user information of the current user and the user information of the target user. When the matching result indicates that the current user belongs to the target user, the digital certificate corresponding to the current user is determined. At the same time, when the matching result indicates that the current user belongs to the target user, the seal management unit 302 obtains the electronic seal corresponding to the current user from the seal library. In the whole process, by determining the matching result between the current user and the target user, the consistency between the current user and the target user can be strictly verified. This matching process effectively improves the security of the electronic document business middle-end system applied to railway freight.

[0057] In some embodiments, the certificate management unit 301 is specifically used to respond to the signing application operation input by the current user and generate a matching result between the current user and the target user, including: the certificate management unit 301 is specifically used to respond to the signing application operation input by the current user when the user type of the current user is an internal user, match the real-name information of the current user with the real-name information of the target user, and generate a matching result; when the user type of the current user is an external user, respond to the signing application operation input by the current user, match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user, and generate a matching result.

[0058] Among them, real-name information and biometric information can be collectively referred to as user information.

[0059] Optionally, biometric information may include: facial information, fingerprint information, voiceprint information, etc.

[0060] Exemplarily, internal users may be railway staff; external users may be various customers (individuals or enterprises) that have business connections or cooperative relationships with railway freight business.

[0061] In the embodiment of the present invention, the certificate management unit 301 first determines the user type of the current user: when the user type of the current user is an internal user, in response to the signing application operation input by the current user, the real-name information of the current user is matched with the real-name information of the target user, that is, the real-name authentication is performed on the current user, and a matching result between the current user and the target user is generated; when the user type of the current user is an external user, in response to the signing application operation input by the current user, the biometric information of the current user is matched with the biometric information of the target user through the mobile terminal of the current user, that is, the liveness detection is performed on the current user, and a matching result between the current user and the target user is generated. In the whole process, the certificate management unit 301 adopts different identity authentication strategies (matching strategies) according to the user type of the current user, which not only ensures flexibility and security, but also takes into account the user experience. Internal users are usually more familiar with the electronic document business middle-end system applied to railway freight, and the real-name information matching method is simple and fast; matching the biometric information of external users through mobile terminals is also in line with user operation habits, which improves the overall user experience.

[0062] In some embodiments, the certificate management unit 301 is specifically used to determine the digital certificate corresponding to the current user when the matching result indicates that the current user belongs to the target user, including: the certificate management unit 301 is specifically used to generate a server-side certificate when the user type of the current user is an internal user and when the matching result indicates that the current user belongs to the target user; and determine the server-side certificate as a digital certificate; when the user type of the current user is an external user and when the matching result indicates that the current user belongs to the target user, generate a mobile-side certificate through a certificate authentication center; authorize the person in charge of the enterprise where the target user is located to obtain an authorization result; when the authorization result indicates that the authorization is passed, determine the mobile-side certificate as a digital certificate.

[0063] Among them, the certificate authentication center is the CA organization mentioned above.

[0064] The server-side certificate is used by railway staff to complete the railway signature.

[0065] The mobile certificate is used by external users to complete online signing.

[0066] In an embodiment of the present invention, the certificate management unit 301 can directly generate a server-side certificate when the user type of the current user is an internal user and when the matching result indicates that the current user belongs to the target user, authorize the current user to use the server-side certificate, and determine the server-side certificate as the digital certificate corresponding to the current user. When the user type of the current user is an external user and the matching result indicates that the current user belongs to the target user, the certificate management unit 301 initiates a certificate request to the certificate authentication center. The certificate authentication center responds to the certificate request and generates a mobile terminal certificate. The certificate authentication center sends the mobile terminal certificate to the certificate management unit 301, that is, the certificate management unit 301 generates a mobile terminal certificate through the certificate authentication center. Then, the certificate management unit 301 authorizes the handler of the enterprise where the target user is located to obtain an authorization result. Specifically, the certificate management unit 301 authorizes the handler to perform liveness detection. The certificate management unit 301 generates a matching result between the handler and the target handler based on the acquired user information of the handler and the user information of the target handler. When the matching result indicates that the handler belongs to the target handler, the authorization is determined as the authorization result; when the matching result indicates that the handler does not belong to the target handler, the authorization is determined as the authorization result. In this way, when the authorization result indicates that the authorization is passed, the certificate management unit 301 determines the above mobile terminal certificate as the digital certificate corresponding to the current user. During the whole process, the certificate management unit 301 aggregates the server-side certificate capabilities and the mobile-side certificate capabilities to achieve standardization of certificate services.

[0067] In some embodiments, the certificate management unit 301 is specifically used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user to generate a matching result, including: the certificate management unit 301 is specifically used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user when the access device of the current user is a mobile terminal to generate a matching result; when the access device of the current user is a personal computer (PC), send a QR code generation instruction to the personal computer of the current user; respond to the QR code generation instruction through the personal computer of the current user to generate a certificate application QR code; after determining that the mobile terminal of the current user scans the certificate application QR code, match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user to generate a matching result.

[0068] Among them, mobile terminals refer to mobile devices that can run mobile applications, such as smart phones, tablet computers, etc.

[0069] A personal computer (PC) is a personal computer that can run independently and perform specific functions.

[0070] In the embodiment of the present invention, when the user type of the current user is an external user, the certificate management unit 301 first determines the device type of the current user's access device: when the current user's access device is a mobile terminal, the certificate management unit 301 matches the current user's biometric information with the target user's biometric information through the current user's mobile terminal (i.e., liveness detection), and generates a matching result between the current user and the target user; when the current user's access device is a personal computer, the certificate management unit 301 first sends a QR code generation instruction to the current user's personal computer, and then, the certificate management unit 301 responds to the QR code generation instruction through the current user's personal computer to generate a certificate application QR code; after determining that the current user's mobile terminal scans the certificate application QR code, the certificate management unit 301 matches the current user's biometric information with the target user's biometric information through the current user's mobile terminal (i.e., liveness detection), and generates a matching result between the current user and the target user. In the whole process, the certificate management unit 301 adopts different identity authentication strategies (matching strategies) according to the device type of the current user's access device, which not only ensures flexibility and security, but also takes into account user experience.

[0071] In some embodiments, the certificate management module 30 is further used to output a prompt message when it is determined that the current user belongs to the target user, and the prompt message is used to indicate that the current user authentication is passed.

[0072] Exemplarily, the certificate management module 30 may send the output prompt information to the mobile terminal of the current user in the form of a text message, and may also send the output prompt information to the personal computer of the current user in the form of a message pop-up window.

[0073] In the embodiment of the present invention, when determining that the current user is a target user, the certificate management module 30 outputs prompt information, so that the current user can be reminded in time that the authentication is passed.

[0074] In some embodiments, Figure 4 This is the second structural diagram of the electronic document business middle platform system applied to railway freight provided by the present invention, such as Figure 4 As shown, the system may also include: a track-keeping module 50; the track-keeping module 50 is used to monitor the format file management module 10, the signature management module 20, the certificate management module 30 and the electronic document management module 40 in real time and generate a log file.

[0075] Optionally, the log file may include: user access records, signing event records and timestamp information, etc.

[0076] In the embodiment of the present invention, the tracking module 50 can realize real-time monitoring of the entire system and generate corresponding log files, ensuring that each step of the electronic document signing process can be accurately tracked and traced back, thereby greatly improving the system transparency and system credibility, and providing a strong traceability guarantee for the electronic document signing process.

[0077] The embodiments of the present invention are further described with reference to the following examples: For example, Figure 5 Schematic diagram of the application scenario of the electronic document business middle platform system for railway freight provided by the present invention. Figure 5 It can be seen that the electronic document business middle-office system applied to railway freight can interact with other centers (such as railway business center and customer center). The electronic document business middle-office system applied to railway freight simplifies the signing process of electronic documents through the interaction between the format file management module, signature management module, certificate management module and electronic document management module, realizes business modularization, standardization and service, and conducts security management of electronic document signing throughout the life cycle.

[0078] The following is a description of the electronic document business processing method applied to railway freight provided by the present invention. The electronic document business processing method applied to railway freight described below and the electronic document business middle-end system applied to railway freight described above can be referenced to each other.

[0079] Figure 6 The present invention provides a flowchart of an electronic document processing method for railway freight transportation. Figure 1 The electronic document business middle platform system applied to railway freight shown in the figure includes: a format file management module, a signature management module, a certificate management module and an electronic document management module, such as Figure 6 As shown, the method includes the following steps 601 to 606.

[0080] Step 601: Use the format file management module to obtain the electronic document template corresponding to the railway freight business needs.

[0081] Step 602: Determine the target user according to the electronic document template using the signing management module.

[0082] Optionally, the signing management module includes: a signing policy management unit and a signature authority management unit. The signing management module is used to determine the target user according to the electronic document template, including: using the signing policy management unit to determine the signing method according to the electronic document template, and the signing method includes one of the following: unilateral signing, bilateral signing and multi-party signing; using the signature authority management unit to determine the target user according to the signing authority corresponding to the signing method.

[0083] Step 603: When the current user is determined to be a target user, the certificate and seal management module determines the digital certificate corresponding to the current user and obtains the electronic seal corresponding to the current user.

[0084] Optionally, the certificate management module includes: a certificate management unit and a seal management unit. When the certificate management module determines that the current user belongs to the target user, the digital certificate corresponding to the current user is determined, including: when the certificate management unit responds to the signing application operation input by the current user, generates a matching result between the current user and the target user, and when the matching result indicates that the current user belongs to the target user, the certificate management unit determines the digital certificate corresponding to the current user; when the certificate management module determines that the current user belongs to the target user, the electronic seal corresponding to the current user is obtained, including: when the seal management unit indicates that the matching result indicates that the current user belongs to the target user, the electronic seal corresponding to the current user is obtained from the seal library, and the seal library is constructed based on historical electronic seals obtained from the customer center.

[0085] Optionally, a certificate management unit is utilized to respond to a signing application operation input by the current user to generate a matching result between the current user and the target user, including: utilizing the certificate management unit to respond to the signing application operation input by the current user when the user type of the current user is an internal user, and matching the real-name information of the current user with the real-name information of the target user to generate the matching result; utilizing the certificate management unit to respond to the signing application operation input by the current user when the user type of the current user is an external user, and matching the biometric information of the current user with the biometric information of the target user through the current user's mobile terminal to generate the matching result.

[0086] Optionally, when the matching result indicates that the current user belongs to the target user, the certificate management unit is used to determine the digital certificate corresponding to the current user, including: when the user type of the current user is an internal user and the matching result indicates that the current user belongs to the target user, a server-side certificate is generated by the certificate management unit; and the server-side certificate is determined as the digital certificate by the certificate management unit; when the user type of the current user is an external user and the matching result indicates that the current user belongs to the target user, the certificate management unit is used to generate a mobile-side certificate through a certificate authentication center; when the certificate management unit is used to authorize the person in charge of the enterprise where the target user is located to obtain an authorization result; when the authorization result indicates that the authorization is passed, the mobile-side certificate is determined as the digital certificate by the certificate management unit.

[0087] Optionally, the certificate management unit is used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user to generate the matching result, including: using the certificate management unit to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user when the access device of the current user is a mobile terminal to generate the matching result; using the certificate management unit to send a QR code generation instruction to the personal computer of the current user when the access device of the current user is a personal computer; using the certificate management unit to respond to the QR code generation instruction and generate a certificate application QR code through the personal computer of the current user; using the certificate management unit to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user after determining that the mobile terminal of the current user scans the certificate application QR code to generate the matching result.

[0088] Step 604: Utilize the signature management module to respond to the signature operation input by the current user for the digital certificate, and generate an electronic signature corresponding to the current user.

[0089] Step 605: Generate a target electronic document corresponding to the railway freight business needs by using the electronic document management module according to the electronic seal and electronic signature and in combination with the electronic document template.

[0090] Optionally, the method further includes: utilizing the certificate management module to output prompt information when it is determined that the current user belongs to the target user, wherein the prompt information is used to indicate that the current user has passed the authentication.

[0091] Optionally, the electronic document business middle-office system applied to railway freight also includes: a track-leaving module; the method also includes: utilizing the track-leaving module to perform real-time monitoring of the format file management module, the signature management module, the certificate management module and the electronic document management module to generate a log file.

[0092] Step 606: When it is determined that the railway freight business demand has changed, the electronic document management module generates a change request based on the changed railway freight business demand, and determines a new target electronic document corresponding to the changed railway freight business demand based on the change request and the target electronic document.

[0093] Optionally, the electronic document management module is used to determine a new target electronic document corresponding to the changed railway freight business demand based on the change request and the target electronic document, including: using the electronic document management module to generate a first target change request based on the electronic seal and electronic signature in combination with the change request; using the electronic document management module to respond to the acceptance operation input by the internal acceptance personnel for the first target change request to obtain an acceptance result; using the electronic document management module to generate a second target change request based on the target electronic seal and target electronic signature corresponding to the carrier personnel corresponding to the changed railway freight business demand in combination with the first target change request when the acceptance result indicates that the acceptance is passed; using the electronic document management module to update the target electronic document based on the second target change request to obtain a new target electronic document; wherein the target electronic seal is obtained using the seal management module; and the target electronic signature is generated using the signature management module in response to the signature operation input by the carrier personnel for the first target change request.

[0094] In the embodiment of the present invention, the electronic document template corresponding to the railway freight business demand is obtained by using the format file management module; the target user is determined according to the electronic document template by using the signature management module; the digital certificate corresponding to the current user is determined by using the certificate and seal management module when the current user belongs to the target user, and the electronic seal corresponding to the current user is obtained; the electronic signature corresponding to the current user is generated by the signature management module in response to the signature operation input by the current user for the digital certificate; the target electronic document corresponding to the railway freight business demand is generated by using the electronic document management module according to the electronic seal and the electronic signature, combined with the electronic document template; the change request is generated according to the changed railway freight business demand by using the electronic document management module when it is determined that the railway freight business demand has changed, and the new target electronic document corresponding to the changed railway freight business demand is determined according to the change request and the target electronic document. In the whole process, the signing process of the electronic document is simplified, the business modularization, standardization and service are realized, the security management of the electronic document signing is carried out throughout the life cycle, and the efficiency of generating the electronic document is effectively improved while ensuring the security.

[0095] The system embodiment described above is merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art may understand and implement it without creative work.

[0096] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0097] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An electronic document business middle platform system applied to railway freight, characterized in that: include: Format file management module, signature management module, certificate management module and electronic document management module, among which, The format file management module is used to obtain the electronic document template corresponding to the railway freight business needs; The signing management module is used to determine the target user according to the electronic document template; The certificate and seal management module is used to determine the digital certificate corresponding to the current user and obtain the electronic seal corresponding to the current user when it is determined that the current user belongs to the target user; The signing management module is further used to respond to the signing operation input by the current user for the digital certificate and generate an electronic signature corresponding to the current user; The electronic document management module is used to generate a target electronic document corresponding to the railway freight business requirements based on the electronic seal and the electronic signature in combination with the electronic document template; The electronic document management module is also used to generate a change request based on the changed railway freight business needs when it is determined that the railway freight business needs have changed; and determine a new target electronic document corresponding to the changed railway freight business needs based on the change request and the target electronic document.

2. The electronic document business middle platform system for railway freight according to claim 1 is characterized in that: The electronic document management module is further used to determine a new target electronic document corresponding to the changed railway freight business demand according to the change request and the target electronic document, including: The electronic document management module is specifically used to generate a first target change request based on the electronic seal and the electronic signature in combination with the change request; respond to the acceptance operation input by the internal acceptance personnel for the first target change request to obtain an acceptance result; if the acceptance result indicates that the acceptance is passed, generate a second target change request based on the target electronic seal and the target electronic signature corresponding to the carrier personnel corresponding to the changed railway freight business demand in combination with the first target change request; based on the second target change request, update the target electronic document to obtain the new target electronic document; Among them, the target electronic seal is acquired by the certificate and seal management module; the target electronic signature is generated by the signature management module in response to the signature operation input by the carrier personnel for the first target change request.

3. The electronic document business middle platform system for railway freight according to claim 1 is characterized in that: The certificate management module includes: a certificate management unit and a seal management unit. The certificate management module is used to determine the digital certificate corresponding to the current user when it is determined that the current user belongs to the target user, including: The certificate management unit is specifically used to respond to the signing application operation input by the current user, generate a matching result between the current user and the target user, and determine the digital certificate corresponding to the current user when the matching result indicates that the current user belongs to the target user; The certificate and seal management module is used to obtain the electronic seal corresponding to the current user, including: The seal and stamp management unit is specifically used to obtain the electronic seal corresponding to the current user from the seal and stamp library when the matching result indicates that the current user belongs to the target user. The seal and stamp library is constructed based on historical electronic seals obtained from the customer center.

4. The electronic document business middle platform system for railway freight according to claim 1 is characterized in that: The signing management module includes: a signing policy management unit and a signature authority management unit. The signing management module is used to determine the target user according to the electronic document template, including: The signing strategy management unit is specifically used to determine a signing method according to the electronic document template, and the signing method includes one of the following: unilateral signing, bilateral signing, and multi-party signing; The signature authority management unit is specifically used to determine the target user according to the signature authority corresponding to the signing method.

5. The electronic document business middle platform system for railway freight according to claim 3 is characterized in that: The certificate management unit is specifically used to respond to the signing application operation input by the current user and generate a matching result between the current user and the target user, including: The certificate management unit is specifically used to, when the user type of the current user is an internal user, respond to the signing application operation input by the current user, match the real-name information of the current user with the real-name information of the target user, and generate the matching result; when the user type of the current user is an external user, respond to the signing application operation input by the current user, match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user, and generate the matching result.

6. The electronic document business middle platform system for railway freight according to claim 3 is characterized in that: The certificate management unit is specifically configured to determine the digital certificate corresponding to the current user when the matching result indicates that the current user belongs to the target user, including: The certificate management unit is specifically used to generate a server-side certificate when the user type of the current user is an internal user and when the matching result indicates that the current user belongs to the target user; and determine the server-side certificate as the digital certificate; generate a mobile-side certificate through a certificate authentication center when the user type of the current user is an external user and when the matching result indicates that the current user belongs to the target user; authorize the person in charge of the enterprise where the target user is located to obtain an authorization result; and determine the mobile-side certificate as the digital certificate when the authorization result indicates that the authorization is passed.

7. The electronic document business middle platform system for railway freight according to claim 5 is characterized in that: The certificate management unit is specifically used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user to generate the matching result, including: The certificate management unit is specifically used to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user when the access device of the current user is a mobile terminal, and generate the matching result; to send a QR code generation instruction to the personal computer of the current user when the access device of the current user is a personal computer; to generate a certificate application QR code through the personal computer of the current user in response to the QR code generation instruction; and after determining that the mobile terminal of the current user scans the certificate application QR code, to match the biometric information of the current user with the biometric information of the target user through the mobile terminal of the current user, and generate the matching result.

8. The electronic document business middle platform system for railway freight according to any one of claims 1 to 7, characterized in that: The certificate management module is further used to output prompt information when it is determined that the current user belongs to the target user, and the prompt information is used to indicate that the current user has passed the authentication.

9. The electronic document business middle platform system for railway freight according to any one of claims 1 to 7, characterized in that: Also includes: Track leaving module; The track leaving module is used to monitor the format file management module, the signature management module, the certificate management module and the electronic document management module in real time and generate a log file.

10. A method for processing electronic documents for railway freight, characterized in that: The electronic document business middle platform system for railway freight transport as described in any one of claims 1 to 9 comprises: a format file management module, a signature management module, a certificate management module and an electronic document management module, and the method comprises: The electronic document template corresponding to the railway freight business needs is obtained by using the format file management module; Determine the target user according to the electronic document template by using the signing management module; Using the certificate and seal management module to determine the digital certificate corresponding to the current user and obtain the electronic seal corresponding to the current user when it is determined that the current user belongs to the target user; Using the signature management module to respond to the signature operation input by the current user for the digital certificate, generating an electronic signature corresponding to the current user; Using the electronic document management module to generate a target electronic document corresponding to the railway freight business needs according to the electronic seal and the electronic signature in combination with the electronic document template; When it is determined that the railway freight business demand has changed by using the electronic document management module, a change request is generated according to the changed railway freight business demand, and a new target electronic document corresponding to the changed railway freight business demand is determined based on the change request and the target electronic document.

Images