Electronic certificate unified management system, method and device

Abstract

The invention discloses an electronic license unified management system, method and device, and relates to the technical field of electronic license unified management, and the system comprises a basic information maintenance module which is used for maintaining multiple kinds of license basic information used for generating electronic license files and the corresponding relation among the multiple kinds of license basic information; the license data input module is used for acquiring input license data; forwarding the obtained license data to a license process management module; according to the electronic license management system, unified electronic license basic data maintenance can be provided, system resources and labor cost can be saved, the use efficiency and accuracy of the electronic license can be improved, unified electronic license state management can be provided, the effectiveness and legality of the electronic license can be ensured, and the electronic license file management efficiency can be improved. The license face information maintains the sensitivity level, so that the license files with different sensitivity levels are displayed in different scenes, and the security is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of unified management of electronic certificates, and in particular to a unified management system, method and device for electronic certificates. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the invention described in the specification. No description herein is admitted to be prior art by inclusion in this section.

[0003] Since the release of the electronic certificate standard, the electronicization of certificates has undergone some vigorous development. There are already a lot of technologies related to electronic certificate data processing, and there are also many provinces and cities that are particularly good at electronicizing certificates. However, due to the uneven economic development of regions, the progress of electronicization of certificates in various regions is also uneven. The existing technology creates a certificate system for each region at a graded level, and the maintenance of basic certificate information, certificate templates, certificate faces and other information is inconsistent in various regions. The interval from application to normal use of certificate files is long, not real-time, and the certificate access link is long. The application is unified, but the certificate viewing and downloading are all provided by the certificate system at all levels, and the call access time at each level is long. The management of the certificate status is not timely and relatively chaotic. There is no sensitivity level for the certificate information items, and there is no way to display different certificate information based on the scene. Summary of the invention

[0004] The embodiment of the present invention provides a unified electronic certificate management system, which is used to provide unified electronic certificate basic data maintenance, save system resources and labor costs, improve the efficiency and accuracy of electronic certificate use, provide unified electronic certificate status management, ensure the validity and legality of electronic certificates, maintain the sensitivity level of certificate information, realize the display of certificate files of different sensitivity levels in different scenarios, and improve security. The system includes: a basic information maintenance module, a certificate data entry module, a certificate process management module, and a certificate application module;

[0005] The basic information maintenance module is used to maintain the basic information of various certificates used to generate electronic certificate files and the corresponding relationship between the basic information of various certificates; the basic information of certificates includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels;

[0006] The certificate data entry module is used to obtain the entered certificate data; forward the obtained certificate data to the certificate process management module;

[0007] The certificate process management module is used to maintain the management process of electronic certificate files; the management process includes one or any combination of the quality inspection process, generation process, endorsement process, validity period management process, regular review process, and status update process of electronic certificate files; obtain the certificate data sent by the certificate data entry module; obtain the required certificate basic information and the corresponding relationship between the required certificate basic information from the basic information maintenance module according to the certificate data; process the certificate data according to the obtained certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process, generation process, and status update process of the electronic certificate file to generate an electronic certificate file; determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the obtained certificate face information; process the electronic certificate file according to the endorsement process, validity period management process, or status update process;

[0008] The certificate application module is used to receive permission verification requests from users, generate an authorization code based on the permission verification request and return it to the user after verifying the verification information contained in the permission verification request; the authorization code includes the authorization sensitivity level; receive the authorization code and the download request for the specified electronic certificate file from the user, obtain the status of the specified electronic certificate file from the certificate process management module, and if the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, return the specified electronic certificate file to the user.

[0009] The embodiment of the present invention provides a unified management method for electronic certificates, which is used to provide unified maintenance of basic data of electronic certificates, save system resources and labor costs, improve the efficiency and accuracy of using electronic certificates, provide unified management of electronic certificate status, ensure the validity and legality of electronic certificates, maintain the sensitivity level of certificate face information, realize the display of certificate files of different sensitivity levels in different scenarios, and improve security. The method includes:

[0010] Get the entered license data;

[0011] Obtain the required basic information of the certificate and the corresponding relationship between the required basic information of the certificate according to the certificate data; the basic information of the certificate includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels;

[0012] According to the acquired basic information of certificates and licenses, the corresponding relationship between the basic information of certificates and licenses, and the quality inspection process, generation process and status update process of electronic certificate and license files, the certificate and license data are processed to generate electronic certificate and license files;

[0013] Determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the obtained certificate face information;

[0014] Process the electronic certificate documents according to the endorsement process, validity period management process, or status update process;

[0015] Receive the permission verification request from the user, and after verifying the verification information contained in the permission verification request, generate an authorization code based on the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level;

[0016] Receive the authorization code and download request for the specified electronic certificate file sent by the user;

[0017] Get the status of the specified electronic certificate file. If the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, return the specified electronic certificate file to the user.

[0018] The embodiment of the present invention provides a unified electronic certificate management device, which is used to provide unified electronic certificate basic data maintenance, save system resources and labor costs, improve the efficiency and accuracy of electronic certificate use, provide unified electronic certificate status management, ensure the validity and legality of electronic certificates, maintain the sensitivity level of certificate face information, realize the display of certificate files of different sensitivity levels in different scenarios, and improve security. The device includes:

[0019] The certificate data acquisition module is used to obtain the entered certificate data;

[0020] A corresponding relationship acquisition module is used to obtain the required basic information of the certificate and the corresponding relationship between the required basic information of the certificate according to the certificate data; the basic information of the certificate includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels;

[0021] The electronic certificate file generation module is used to process the certificate data and generate an electronic certificate file based on the acquired certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process, generation process and status update process of the electronic certificate file;

[0022] A sensitivity level determination module, used to determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the acquired certificate face information;

[0023] A processing module is used to process the electronic certificate file according to the endorsement process, validity period management process, or status update process;

[0024] The authorization module is used to receive the permission verification request sent by the user, and after verifying the verification information contained in the permission verification request, generate an authorization code according to the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level;

[0025] The download request receiving module is used to receive the authorization code sent by the user and the download request for downloading the specified electronic certificate file;

[0026] The electronic certificate file return module is used to obtain the status of the specified electronic certificate file. If the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, the specified electronic certificate file is returned to the user.

[0027] An embodiment of the present invention further provides a computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned unified management method for electronic certificates when executing the computer program.

[0028] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned electronic certificate unified management method is implemented.

[0029] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the above-mentioned electronic certificate unified management method is implemented.

[0030] An embodiment of the present invention provides a unified management system for electronic certificates. Compared with the electronic certificate management scheme in the prior art, a basic information maintenance module is used to maintain a variety of basic certificate information used to generate electronic certificate files and the corresponding relationship between the various basic certificate information; the basic certificate information includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels; the certificate data entry module is used to obtain the entered certificate data; the obtained certificate data is forwarded to Certificate process management module; the certificate process management module is used to maintain the management process of electronic certificate files; the management process includes one or any combination of the quality inspection process, generation process, endorsement process, validity period management process, regular review process, and status update process of electronic certificate files; obtain the certificate data sent by the certificate data entry module; obtain the required certificate basic information and the corresponding relationship between the required certificate basic information from the basic information maintenance module based on the certificate data; based on the obtained certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process of electronic certificate files, the generation process, the endorsement process, the validity period management process, the regular review process, and the status update process The process and status update process are used to process the certificate data and generate an electronic certificate file; the sensitivity level of the electronic certificate file is determined according to the sensitivity level corresponding to the obtained certificate face information; the electronic certificate file is processed according to the endorsement process, the validity period management process, or the status update process; the certificate application module is used to receive the permission verification request sent by the user, and after the verification information contained in the permission verification request is verified, an authorization code is generated according to the permission verification request and returned to the user; the authorization code includes the authorization sensitivity level; the authorization code and the download request for downloading the specified electronic certificate file sent by the user are received, and the status of the specified electronic certificate file is obtained from the certificate process management module. If the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, the specified electronic certificate file is returned to the user, which can provide unified electronic certificate basic data maintenance, save system resources and labor costs, improve the efficiency and accuracy of electronic certificate use, provide unified electronic certificate status management, ensure the validity and legality of electronic certificates, maintain the sensitivity level of certificate face information, and realize the display of certificate files of different sensitivity levels in different scenarios to improve security. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0032] Figure 1This is a structural block diagram of the unified management system for electronic certificates in an embodiment of the present invention;

[0033] Figure 2 It is a structural block diagram of a specific example of the unified management system for electronic certificates in an embodiment of the present invention;

[0034] Figure 3 It is a structural block diagram of a specific example of the unified management system for electronic certificates in an embodiment of the present invention;

[0035] Figure 4 This is an operation flow chart of the certificate process management module in an embodiment of the present invention;

[0036] Figure 5 It is an operation flow chart of a specific example of the certificate process management module in an embodiment of the present invention;

[0037] Figure 6 Flow chart of the method for unified management of electronic certificates in an embodiment of the present invention;

[0038] Figure 7 This is a structural block diagram of a device for unified management of electronic certificates in an embodiment of the present invention;

[0039] Figure 8 Schematic diagram of a computer device in an embodiment of the present invention. DETAILED DESCRIPTION

[0040] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0041] The acquisition, transmission, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of laws and regulations.

[0042] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0043] The "certificates" and "electronic certificates" that appear below refer to "electronic certificate documents".

[0044] In order to solve the problems in the prior art that different regions create a certificate system at different levels, the basic information of certificates is maintained in multiple places, the certificate template and the face information of certificates are maintained inconsistently; the interval from application to normal use of certificate files is long and not real-time, and the certificate access link is long; the application is unified but the certificate viewing and downloading are provided by the certificate systems at all levels, and the access time of each level is long; the management of the certificate status is not timely and is relatively chaotic; the certificate information items have no sensitivity level, and there is no way to display different certificate information according to the scene, the embodiment of the present invention proposes a unified management system for electronic certificates. Figure 1 FIG. 1 is a structural block diagram of a unified management system for electronic certificates in an embodiment of the present invention. Figure 1 As shown, the electronic certificate unified management system may include: a basic information maintenance module 101, a certificate data entry module 102, a certificate process management module 103, and a certificate application module 104;

[0045] The basic information maintenance module 101 is used to maintain various basic information of certificates used to generate electronic certificate files and the corresponding relationship between various basic information of certificates; the basic information of certificates includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels;

[0046] The certificate data entry module 102 is used to obtain the entered certificate data; forward the obtained certificate data to the certificate process management module;

[0047] The certificate process management module 103 is used to maintain the management process of electronic certificate files; the management process includes one or any combination of the quality inspection process, generation process, endorsement process, validity period management process, regular review process, and status update process of electronic certificate files; obtain the certificate data sent by the certificate data entry module; obtain the required certificate basic information and the corresponding relationship between the required certificate basic information from the basic information maintenance module according to the certificate data; process the certificate data according to the obtained certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process, generation process, and status update process of the electronic certificate file to generate an electronic certificate file; determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the obtained certificate face information; process the electronic certificate file according to the endorsement process, validity period management process, or status update process;

[0048] The certificate application module 104 is used to receive a permission verification request from a user, and after verifying the verification information contained in the permission verification request, generate an authorization code based on the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level; receive the authorization code and the download request for the specified electronic certificate file from the user, obtain the status of the specified electronic certificate file from the certificate process management module, and if the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, return the specified electronic certificate file to the user.

[0049] Figure 2 FIG. 1 is a structural block diagram of a specific example of a unified management system for electronic certificates in an embodiment of the present invention. Figure 2 As shown, the unified electronic certificate management system can also include: a system operation management module 201, which is used to manage user information, information about the institution that issues electronic certificates, role information, area information, system menu information, and data access system information; the users include institutional users that issue electronic certificates, individual users, and corporate users; the data access system information includes permission information for the data access system.

[0050] In one embodiment, the correspondence between multiple types of certificate basic information includes: each certificate type information corresponds to multiple certificate name information, each certificate name information corresponds to multiple certificate template information, each certificate template information corresponds to multiple certificate face information items, each certificate template information corresponds to multiple electronic certificate files, and each certificate template information corresponds to one or more signature information, one of them or any combination.

[0051] Figure 3 FIG. 1 is a structural block diagram of a specific example of a unified management system for electronic certificates in an embodiment of the present invention. Figure 3 As shown, the electronic certificate (unified management) system can be generally divided into five parts, including certificate basic information maintenance, certificate data entry, certificate management, certificate application, and system operation management.

[0052] The maintenance of basic license and certificate information may include: directory type information maintenance, license and certificate name maintenance, issuing authority configuration, license and certificate template information maintenance, license and certificate face information maintenance, etc.

[0053] Certificate data entry may include: user entry management (ordinary user entry, institutional user review management), manual entry (including OCR (Optical Character Recognition) assisted entry, batch import entry, manual input entry), database synchronization, system docking entry, etc.

[0054] Certificate management may include: certificate generation, certificate signature management, certificate validity period management, certificate printing management, certificate download management, certificate preview management, certificate annual review management (users submit regular application basis, institutional users apply for annual review), certificate error correction management (ordinary users submit error corrections, institutional users review error correction information), etc.

[0055] Certificate applications may include: user personal certificate center, user certificate authorization, certificate usage record, certificate information presentation, agency processing certificate, etc.

[0056] System operation management may include: user management (institutional user management, general user management (general individual user management, enterprise and institution user management)), organization management, area management, role management, system menu management, access system management (certificate management, access system permission management).

[0057] The basic information of the certificate may include certificate type information, certificate name information, certificate template information, certificate information item information, and the certificate name can be used to configure the issuing authority information of the certificate. The relationship between them is that there can be multiple certificate name information under one certificate type, certificate type: certificate name = 1: N; there will be multiple template information under one certificate name, and there can be multiple template information under one name, certificate name: certificate template = 1: N; a certificate template can correspond to multiple certificate files, and there can be multiple face information items on a certificate template. The face information item and the certificate template need to have a corresponding relationship for certificate generation. Certificate template: certificate file = 1: N, the certificate information item includes basic information items and face information items. There can be multiple face information items on a certificate template, certificate template: face information item = 1: N; a template can be configured with 0 or more signature positions. In other words: a saved electronic certificate file belongs to only one template, a template belongs to only one certificate name, a certificate name belongs to only one certificate type, and a signature position belongs to only one certificate template.

[0058] In order to protect the security of sensitive information in the certificate data and improve the efficiency in practical applications, whether there is sensitive information in the electronic certificate file depends on the certificate face information item used. If the certificate face information item contains sensitive information items, the template contains sensitive information and the generated electronic certificate file also contains sensitive information; if there is no sensitive information item in the certificate face information item, the template does not contain sensitive information.

[0059] In one embodiment, the certificate data entry module is specifically used to: obtain certificate data that is manually entered, entered by optical character recognition, entered in batches, entered by service docking, or synchronized with the data access system; when the obtained certificate data is manually entered, based on the certificate data, call the system operation management module to obtain the personal user information or enterprise user information for entering the certificate data, and the institutional user information for reviewing the credentials carried by the certificate data; when it is determined based on the personal user information or enterprise user information that the user has the right to enter the certificate data, and the credential review is passed, save the certificate data; when the obtained certificate data is synchronized with the data access system, based on the certificate data, call the system operation management module to obtain the permission information of the data access system, and the institutional user information for reviewing the credentials carried by the certificate data; when it is determined based on the permission information of the data access system that the data access system has the right to synchronize the certificate data, and the credential review is passed, save the certificate data.

[0060] In this embodiment, the certificate data can be entered manually by the issuing authority personnel, imported in batches, or connected to the issuing authority's document processing system, or entered through data aggregation. Individual users can also enter certificate data through the application end, but the certificate data entered by the user must carry the certificate, and the certificate data can only be entered after automatic approval or approval by the issuing agency personnel. The certificate data may include: certificate catalog type, certificate issuing agency, certificate holder, certificate number, certificate issuance date, certificate identification, etc. After the certificate data is entered, it must first be quality inspected, and only after the quality inspection is successful can it be considered entered successfully.

[0061] Figure 4 FIG. 1 is an operation flow chart of the certificate process management module in an embodiment of the present invention. Figure 4 As shown, the process of managing certificate data and electronic certificate files by the certificate process management module may include: quality inspection process 401, generation process 402, endorsement process 403, validity period management process 404, regular review process 405, and status update process 406.

[0062] The quality inspection process 401 can be as follows: Step 1: Determine whether the certificate data is included in the certificate database; Step 2: Determine whether the certificate holder information is correct; Step 3: Determine whether the issuing authority information is correct; Step 5: Determine whether the validity period information is correct; Step 6: Determine whether the certificate data already exists, and existing ones cannot be entered repeatedly; Step 7: Determine whether the attachment information is passed in (whether the attachment quantity format meets the requirements); Step 8: Quality check of the certificate information items contained in the certificate data to see whether the required information exists.

[0063] The status update process 406 may be: at the start time, after the start time, and at the end time of each process in the processes 401 to 405, the status of the certificate data or the electronic certificate file is adjusted accordingly. The certificate data may be divided into multiple states, namely: stored, certificate being generated, certificate generated, certificate generation failed. The status of the electronic certificate file may be: certificate being generated, certificate generated, certificate generation failed, certificate being endorsed, certificate endorsed, certificate endorsed failed, available, pending review and available, pending review and unavailable, cancelled, expired, error correction, etc.

[0064] Already in the database: the certificate data enters the electronic certificate database, and the logic of certificate file generation will be automatically enabled after entering the database; Generating: during the certificate generation logic, the certificate status is set to Generating first to avoid repeated generation; Generation Failure: when an error or exception occurs in the certificate generation, the certificate status changes to Certificate Generation Failure; Generated: after the certificate file generation is completed, the certificate enters the Certificate Generated. The generated certificate needs to be signed before it can be used; Signing: after the generated certificate is signed, the certificate status is changed to Signing to avoid repeated signing; Signed: for certificates that are waiting for signing or failed to sign, after the signing logic is completed normally, they enter the Signed state; Signing Failure: if there is a failure in signing, it enters the Signing Failure state; Available: the certificate can be used by the certificate application end in the applicable state. Pending review and available: data that needs to be reviewed regularly enters the pending review status during the review period; Pending review and unavailable: certificates need to be reviewed regularly and are unavailable if they are not reviewed; Cancelled: certificates become unavailable for various reasons and are cancelled after the cancellation operation is performed; Expired: certificates enter the expired status when they expire; Correcting: in the process of correcting.

[0065] The generation process 402 can be as follows: Step 1: Obtain the certificate face information items according to the certificate data; Step 2: Obtain the certificate template information according to the certificate data; Step 3: Generate the required original xml file according to the certificate data, the certificate face information items, and the certificate template information; Step 4: Determine whether it is necessary to generate a desensitized document, and generate a desensitized xml file; Step 5: Generate the original file; Step 6: If it is necessary to generate a desensitized file, generate a desensitized certificate file; Step 7: Update the certificate data status according to the generated information; Step 8: Delete the generated xml file, and if the generation fails, delete the partially generated file successfully.

[0066] The endorsement process 403 can be as follows: Step 1: Determine the endorsement information of the certificate; Step 2: If the endorsement type is stamping, determine the signature position; Step 3: Endorsing the original certificate and different levels of desensitized documents; Step 4: After the endorsement is completed, update the endorsement result according to the result.

[0067] The validity period management process 404 or the periodic review process 405 may be as follows: Check whether the license has reached its validity period on a daily basis, and if so, update the license status to expired. Check regularly whether the license has reached the periodic review stage, and whether the license is available in the periodic review state. If a periodic review is required but the license is available, the license enters the pending review and available state. If a periodic review is required but the license is not available, the license enters the pending review and unavailable state.

[0068] The certificate process management module manages the certificate data and electronic certificate files, and the process can also include: certificate cancellation process: Step 1: Determine whether the certificate already exists according to the identification; Step 2: Determine whether the certificate is in the operational stage; Step 3: Update the certificate status to being cancelled; Step 4: Add a certificate number cancellation watermark to the certificate file and add a cancelled watermark to each page. Both desensitized files and ordinary files need to be added; Step 5: Update the certificate status to cancelled.

[0069] The process of managing certificate data and electronic certificate files by the certificate process management module can also include: certificate change process: Step 1: Determine whether the certificate is stored based on the label. If it does not exist, it will prompt that the change failed; Step 2: Whether the old data status of the certificate can be updated. It cannot be changed during generation, signing, etc.; Step 3: Quality inspection of the new certificate data; Step 4: Update the certificate data; the certificate enters the stored status; Step 5: Record the certificate operation history and save the old certificate data.

[0070] Figure 5 FIG. 1 is an operation flow chart of a specific example of the certificate process management module in an embodiment of the present invention. Figure 5As shown, the input certificate data is quality checked, and the certificate data that has passed the quality check is stored in the warehouse. At this time, the status of the certificate data and / or the electronic certificate file is to be generated; after storage, it involves the management of the certificate, and the electronic certificate file needs to be generated. After the generation starts, the status of the certificate data and / or the electronic certificate file is in the generation process. If the generation error occurs, it is regenerated and the status is set to abnormal generation. If the generation is successful, the status of the electronic certificate file is set to waiting for endorsement. The electronic certificate file is signed or annotated as needed. When signing or annotating begins, the status of the electronic certificate file is in the endorsement process. If the signature error occurs, the status is set to abnormal endorsement and re-annotated. After the endorsement is successful, the status is updated to usable. The usable electronic certificate file can be corrected, the validity period of the certificate can be reviewed or cancelled, etc.: the user or the institution personnel can submit the electronic certificate file for error correction, and the status is updated to error correction. After the error correction review is passed, it will be transferred to the electronic certificate file generation process for regeneration. If the error correction review is not outdated, it can still be in the usable state. Actively cancel the usable electronic certificate files and update the status to canceled. You can also manage the validity period of certificates or annual review of certificates, and review the usable electronic certificate files. The status of files that need to be reviewed is updated to pending review and (-) available. The status of files that have exceeded the review period is set to pending review and (-) unavailable; after the review determines that the certificate has expired, the status is updated to expired.

[0071] In one embodiment, the basic information maintenance module is also used to maintain a pre-established certificate database; the certificate process management module is specifically used to: call the basic information maintenance module to obtain the certificate database, determine whether the certificate data meets the following conditions, verify the certificate data, and enter the certificate data into the database: the acquired certificate data is included in the certificate database, the certificate holder information in the certificate data, the information of the institution that issues the electronic certificate, the quality inspection validity period information, the quality inspection attachment information are correct, the required information items in the certificate data exist, and the certificate data has not been entered; after the certificate data is entered into the database, the status of the certificate data is updated to "entered into the database" according to the status update process.

[0072] The process of certificate data quality inspection is as follows:

[0073] Step 1: Determine whether the license data is included in the license database;

[0074] Step 2: Determine whether the certificate holder’s information is correct;

[0075] Step 3: Determine whether the issuing authority information is correct;

[0076] Step 5: Determine whether the validity period information is correct;

[0077] Step 6: Determine whether the license data already exists. If it already exists, do not enter it again;

[0078] Step 7: Determine whether the attachment information is passed in (whether the attachment quantity format meets the requirements);

[0079] Step 8: Quality check of the license information items contained in the license data to see whether the required information exists.

[0080] Certificate data can be divided into multiple states, namely: stored, certificate being generated, certificate generated, certificate generation failed. The status of electronic certificate files can be: certificate being generated, certificate generated, certificate generation failed, certificate endorsement, certificate endorsed, certificate endorsement failed, available, pending review and available, pending review and unavailable, cancelled, expired, error correction, etc.

[0081] Stored: The certificate data is stored in the electronic certificate library, and the logic of generating certificate files will be automatically enabled after storage;

[0082] Generating: When the certificate is generating logic, first set the certificate status to generating to avoid repeated generation;

[0083] Generation failed: When an error or exception occurs during certificate generation, the certificate status changes to Certificate Generation Failed;

[0084] Generated: After the certificate file is generated, the certificate enters the generated state. The certificate is in the generated state and needs to be signed before it can be used;

[0085] Endorsing: After the generated certificate is endorsed, the certificate status will be changed to Endorsing to avoid duplicate endorsement;

[0086] Endorsed: For certificates that are waiting for endorsement or failed to be endorsed, they will enter the endorsed state after the endorsement logic is completed normally;

[0087] Signature failure: If a failure occurs during signing, the signature will enter the signing failure state;

[0088] Available: The certificate is in the applicable state and can be used by the certificate application terminal.

[0089] Pending review and available: Data that needs to be reviewed regularly enters the pending review state during the review period;

[0090] Pending review and unavailable: The certificate needs to be reviewed regularly and will not be available if it is not reviewed;

[0091] Cancelled: The certificate becomes cancelled after the cancellation operation is performed because the certificate is unavailable for various reasons;

[0092] Expired: The certificate will be in expired status when it exceeds the validity period;

[0093] Correcting: In the process of correcting an error.

[0094] The certificate can only be used after it enters the available state. The certificates that can be viewed in the personal center are in the following states: pending review and available, pending review and unavailable, expired, and cancelled.

[0095] In one embodiment, the certificate process management module is specifically used to: automatically call the generation process for processing the certificate data whose status is stored in the warehouse, and after starting the generation process, update the status of the certificate data to the certificate generation; according to the type of certificate data, obtain the certificate face information items, certificate templates and the correspondence between the certificate face information items and the certificate templates corresponding to the certificate data from the basic information maintenance module; according to the correspondence between the certificate data and the certificate face information items, and the correspondence between the certificate face information items and the certificate templates, process the certificate data, generate and store the original XML file; according to the correspondence between the certificate data and the certificate face information items, and the correspondence between the certificate face information items and the certificate templates, According to the sensitivity level, determine whether it is necessary to generate a desensitized document. If necessary, generate and store a desensitized xml file based on the original xml file; generate the original electronic certificate file based on the original xml file, and generate a desensitized electronic certificate file based on the desensitized xml file; package the original electronic certificate file and the desensitized electronic certificate file and store them as an electronic certificate file; after the electronic certificate file is generated, update the status of the certificate data and the electronic certificate file to "the certificate has been generated" according to the status update process; if an error or exception occurs in the generation of the electronic certificate file, update the status of the certificate data to "the certificate generation failed" according to the status update process.

[0096] The logic for generating certificate documents:

[0097] Step 1: Obtain the photo information items of the license according to the license data;

[0098] Step 2: Obtain certificate template information based on certificate data;

[0099] Step 3: Generate the required original xml file based on the certificate data, certificate face information items, and certificate template information;

[0100] Step 4: Determine whether a desensitized document needs to be generated, and generate a desensitized XML file;

[0101] Step 5: Generate original document;

[0102] Step 6: If a desensitized file needs to be generated, generate a desensitized certificate file;

[0103] Step 7: Update the license data status according to the generated information;

[0104] Step 8: Delete the generated XML file. If the generation fails, delete the partially generated file.

[0105] In one embodiment, the certificate application module is further used to: if it is determined that the status of the designated electronic certificate file is available and the sensitivity level corresponding to the designated electronic certificate file is above the designated sensitivity level, return the desensitized designated electronic certificate file to the user.

[0106] In one embodiment, the certificate process management module is specifically used to: automatically call the signing process for processing the electronic certificate file whose status is "generated certificate", and after starting the signing process, update the status of the electronic certificate file to "in the process of certificate signing"; obtain the certificate signing information from the basic information maintenance module according to the certificate data; sign the electronic certificate file according to the certificate signing information; after the electronic certificate file is signed, update the status of the electronic certificate file to "signed and available" according to the status update process; if an error or abnormality occurs in the signing of the electronic certificate file, update the status of the electronic certificate file to "failed to sign" according to the status update process; if it is determined that a signature is required according to the certificate signing information, determine the signature position according to the certificate template corresponding to the electronic certificate file, and the correspondence between the certificate template and the signature information; sign the electronic certificate file according to the signature position.

[0107] The certificate endorsement process may include:

[0108] Step 1: Confirm the information of the certificate and license endorsement;

[0109] Step 2: If the signature type is stamped, determine the signature position;

[0110] Step 3: Endorse the original documents and desensitized documents of different levels;

[0111] Step 4: After the endorsement is completed, update the endorsement result according to the result.

[0112] In one embodiment, the management process also includes a cancellation process and / or a modification process of the electronic certificate file.

[0113] In one embodiment, the certificate process management module is also used to: obtain a cancellation instruction; determine whether the electronic certificate file to be cancelled exists based on the identifier carried in the cancellation instruction; if it exists, and the status of the electronic certificate file is determined to be available, update the status of the electronic certificate file to be cancelled to being cancelled according to the status update process; add a cancellation watermark to each page of the electronic certificate file to be cancelled, mark the certificate number of the electronic certificate file to be cancelled as cancelled, and update the status of the electronic certificate file to be cancelled to cancelled.

[0114] Certificate cancellation process:

[0115] Step 1: Determine whether the certificate already exists based on the logo;

[0116] Step 2: Determine whether the license is in an operational stage;

[0117] Step 3: Update the license status to being cancelled;

[0118] Step 4: Add the certificate number cancellation watermark and a new cancelled watermark to each page of the certificate document. This needs to be added to both desensitized and ordinary documents;

[0119] Step 5: Update the certificate status to cancelled.

[0120] In one embodiment, the modification process includes an active change process and an error correction information management process; the certificate process management module is also used to: obtain an electronic certificate file change request; determine whether the electronic certificate file to be changed exists based on the identifier carried in the electronic certificate file change request, and if not, prompt that the change failed; if it exists, and it is determined that the status of the electronic certificate file to be changed is not being generated or signed, perform a quality inspection on the certificate data carried in the electronic certificate file change request, and send the certificate data that passes the quality inspection to the user terminal of the institution that issued the electronic certificate for review; after the certificate data is reviewed and passed, use the certificate data carried in the electronic certificate file change request to modify the electronic certificate file to be changed, record the modification operation, and save the electronic certificate file before and after the modification.

[0121] Certificate change process:

[0122] Step 1: Determine whether the certificate is stored according to the number. If it does not exist, it will prompt that the change failed;

[0123] Step 2: Whether the old data status of the certificate can be updated. It cannot be changed during the generation and signing process.

[0124] Step 3: Quality inspection of the new license data;

[0125] Step 4: Update the license data; the license enters the stored state;

[0126] Step 5: Record the operation history of the certificate and save the old certificate data.

[0127] In one embodiment, the certificate process management module is also used to: check whether the electronic certificate file has expired according to a preset period, and if so, update the status of the electronic certificate file to expired; check whether the electronic certificate file has reached the periodic review stage according to a preset period, and if so, and the status of the electronic certificate file is determined to be available, update the status of the electronic certificate file to pending review and available; if so, and the status of the electronic certificate file is determined to be unavailable, update the status of the electronic certificate file to pending review and unavailable.

[0128] Certificate validity management:

[0129] Check the validity period of the license regularly every day. If it has, update the license status to expired. Check regularly whether the license has reached the periodic review stage and whether the license is available. If it needs to be reviewed regularly but is available, it will enter the pending review and available state. If it needs to be reviewed regularly but is not available, it will enter the pending review and unavailable state.

[0130] Certificate application can include: personal certificate viewing, certificate expiration data viewing, personal data presentation, personal certificate authorization, certificate authorization download, and certificate authorization preview in the personal certificate center. Certificate data or electronic certificate files can be applied when they are available. In the personal certificate center, you can view the certificates that have been cancelled, expired, pending review, and unavailable. Personal certificate query is not available for certificates in other states. Before entering the personal certificate center, you need to perform real-name authentication. After real-name authentication, you can view the personal certificate type list. Click the certificate type list to enter the certificate data list, and display the certificate list and the certificate availability status at the top of the list. The certificate data that needs to be reviewed shall be submitted by the individual user for review and then submitted to the certificate issuing agency. The person in charge of the issuing agency is responsible for reviewing the certificate data. After the review is passed, the certificate data will enter the available state. If the review fails, the certificate data will not be stored. If there is a problem with the certificate information during the application process, you can submit the certificate correction information. The issuing authority will update the certificate information after reviewing the correction information.

[0131] The basis of electronic certificates is the electronic certificate information. Electronic certificates require filling in certain basic information and then generating certificate files on demand. The way to electronic certificates is electronic data collection. Certificate data collection can be done through manual entry, ORC recognition entry, service docking, database synchronization, etc.

[0132] Since the quality of collected data cannot be guaranteed, the quality inspection of the certificate data is first carried out. After the quality inspection of the certificate data is passed, it is stored in the warehouse. After it is saved in the warehouse, the certificate file is generated. After the certificate file is generated, the certificate file is signed. After the signature, the certificate file can be verified by the system, and the certificate file after the signature enters the available state. Only the certificates in the available state can be applied in the system. Certificate application means that the certificate holder uses the certificate file or certificate data when handling various business matters. The certificate holder declares personal information through the system, and then binds the certificate information after real-person authentication. After the certificate is bound, you can view personal certificate information, preview certificate files, and download certificate files. Before downloading the certificate file, you need to add usage information. The certificate holder can also authorize the certificate to the system or the person in charge according to the needs. The certificate holder authorizes the certificate to the business system for the material basis for handling business matters. If it is authorized to the person in charge, the person in charge can use the certificate to handle the business matters. Before the certificate holder authorizes the certificate data to the system, he needs to first verify the authority (personal real-name verification, institutional authority verification). After the verification is passed, he selects the authorization time range, authorization reason, and sensitivity level, and generates an authorization code for the business system. The business system holds the authorization code to view and download the certificate data and certificate files of the specified sensitivity level. In addition to the sensitivity level, the certificate files downloaded by the business system based on the authorization code will also display the reason, validity period and other information added to the files of the specified sensitivity level.

[0133] Before the certificate holder authorizes the certificate information to the person in charge, he / she needs to verify the authority first. After the verification is passed, the authorization operation is performed. When the authorization operation is performed, the person in charge, the authorized time range, the sensitivity level and other information need to be selected before the certificate is authorized to the person in charge. The use scenarios of authorized persons include: when the institution's person in charge handles the institution's affairs, the certificate can be directly authorized to the person in charge through the institution's user; when the elderly and children need to show the certificate information, they can register the elderly and children's accounts and authorize the certificate information to their children or companions, and the children or companions will provide the certificate display. All authorization information and usage information will be recorded and sealed. In addition to processing the above applications, you can also add a notification application for certificate status changes, and remind the user end through the ordinary user end when the certificate expires, the certificate is cancelled, and the certificate is reviewed annually. It is convenient for users to understand the latest situation of the certificate. Initiate regular audits in a timely manner. If you find a certificate error when using the certificate, you can directly submit the error information. After submitting the error information, the issuing authority user will review and approve it and change the certificate information according to the actual situation. When checking personal certificates, if you find that your existing physical certificates are not digitized, you can fill in the certificate information and enter the certificate data through the physical certificate situation. After the issuing authority user reviews and approves it, the certificate data will be stored in the database, and the subsequent process is the same as normal certificate data processing. For certificates that need to be reviewed regularly, if you need to submit relevant review materials, the certificate holder will be notified to submit the review materials for the annual review of the certificate.

[0134] The present invention also provides a method for unified management of electronic certificates, as described in the following embodiments. Since the principle of solving the problem by this method is similar to that of the unified management system of electronic certificates, the implementation of this method can refer to the implementation of the unified management method system of electronic certificates, and the repeated parts will not be repeated.

[0135] Figure 6 FIG. 1 is a flow chart of a method for unified management of electronic certificates in an embodiment of the present invention. Figure 6 As shown, the method may include:

[0136] Step 601, obtaining the entered certificate data;

[0137] Step 602, obtaining required basic information of the certificate and the corresponding relationship between the required basic information of the certificate according to the certificate data; the basic information of the certificate includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels;

[0138] Step 603, based on the acquired certificate basic information, the correspondence between the certificate basic information, and the quality inspection process, generation process and status update process of the electronic certificate file, the certificate data is processed to generate an electronic certificate file;

[0139] Step 604, determining the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the acquired certificate face information;

[0140] Step 605, processing the electronic certificate file according to the endorsement process, validity period management process, or status update process;

[0141] Step 606, receiving the permission verification request sent by the user, and after verifying the verification information contained in the permission verification request, generating an authorization code according to the permission verification request and returning it to the user; the authorization code includes the authorization sensitivity level;

[0142] Step 607, receiving the authorization code and the download request for the designated electronic certificate file sent by the user;

[0143] Step 608, obtaining the status of the designated electronic certificate file. If the status of the designated electronic certificate file is available and the sensitivity level corresponding to the designated electronic certificate file is below the designated sensitivity level, the designated electronic certificate file is returned to the user.

[0144] In one embodiment, obtaining the entered certificate data may include:

[0145] Obtain license data that is manually entered, entered by optical character recognition, imported in batches, entered by service connection, or synchronized with the data access system;

[0146] When the obtained certificate data is manually entered, the personal user information or enterprise user information of the person who entered the certificate data, and the institutional user information of the institution that reviewed the credentials carried in the certificate data are obtained based on the certificate data; when it is determined based on the personal user information or enterprise user information that the user has the right to enter the certificate data, and the credentials are reviewed and approved, the certificate data is saved;

[0147] When the obtained certificate data is synchronized with the data access system, the permission information of the data access system and the institutional user information of the credentials carried by the certificate data are obtained according to the certificate data; when it is judged that the data access system has the synchronization permission of the certificate data according to the permission information of the data access system, and the credentials are reviewed and approved, the certificate data is saved.

[0148] In one embodiment, the correspondence between multiple types of certificate basic information includes: each certificate type information corresponds to multiple certificate name information, each certificate name information corresponds to multiple certificate template information, each certificate template information corresponds to multiple certificate face information items, each certificate template information corresponds to multiple electronic certificate files, and each certificate template information corresponds to one or more signature information, one of them or any combination.

[0149] In one embodiment, according to the acquired basic certificate information, the corresponding relationship between the basic certificate information, and the quality inspection process, generation process and status update process of the electronic certificate file, the certificate data is processed to generate an electronic certificate file, including:

[0150] Obtain the certificate database, determine whether the certificate data meets the following conditions, verify the certificate data, and store the certificate data: the obtained certificate data is included in the certificate database, the certificate holder information in the certificate data, the information of the institution that issued the electronic certificate, the quality inspection validity period information, the quality inspection attachment information are correct, the required information items in the certificate data exist, and the certificate data has not been entered;

[0151] After the certificate data is stored in the database, the status of the certificate data is updated to stored in the database according to the status update process.

[0152] In one embodiment, according to the acquired basic certificate information, the corresponding relationship between the basic certificate information, and the quality inspection process, generation process and status update process of the electronic certificate file, the certificate data is processed to generate an electronic certificate file, including:

[0153] Automatically call the generation process for the certificate data whose status is "in storage" to process it. After starting the generation process, update the status of the certificate data to "generating certificate";

[0154] According to the type of the certificate data, obtain the certificate face information item, the certificate template and the corresponding relationship between the certificate face information item and the certificate template corresponding to the certificate data;

[0155] According to the correspondence between the certificate data and the certificate face information items, and the correspondence between the certificate face information items and the certificate template, the certificate data is processed to generate and store the original XML file;

[0156] According to the sensitivity level of the obtained ID card information, determine whether it is necessary to generate a desensitized document. If necessary, generate and store a desensitized XML file based on the original XML file;

[0157] Generate the original electronic certificate file according to the original xml file, and generate the desensitized electronic certificate file according to the desensitized xml file;

[0158] The original electronic certificate file and the desensitized electronic certificate file are packaged and stored as an electronic certificate file;

[0159] After the electronic certificate file is generated, the status of the certificate data and the electronic certificate file is updated to "the certificate has been generated" according to the status update process;

[0160] If an error or exception occurs in the generation of the electronic certificate file, the status of the certificate data will be updated to certificate generation failure according to the status update process.

[0161] In one embodiment, the electronic certificate unified management method further includes:

[0162] If it is determined that the status of the designated electronic certificate file is available and the sensitivity level corresponding to the designated electronic certificate file is above the designated sensitivity level, the desensitized designated electronic certificate file is returned to the user.

[0163] In one embodiment, the electronic certificate file is processed according to the endorsement process, the validity period management process, or the status update process, including:

[0164] Automatically call the endorsement process for the electronic certificate file whose status is "generated certificate". After the endorsement process is started, the status of the electronic certificate file is updated to "in the process of endorsement".

[0165] According to the certificate data, obtain the certificate endorsement information;

[0166] Endorse the electronic certificate document according to the certificate endorsement information;

[0167] After the electronic certificate document is signed, the status of the electronic certificate document is updated to signed and available according to the status update process;

[0168] If an error or abnormality occurs in the endorsement of an electronic certificate file, the status of the electronic certificate file will be updated to endorsement failure according to the status update process;

[0169] If it is determined that a signature is required based on the certificate endorsement information, the signature position is determined based on the certificate template corresponding to the electronic certificate file and the correspondence between the certificate template and the signature information;

[0170] Sign the electronic certificate document according to the signature position.

[0171] In one embodiment, the electronic certificate unified management method further includes:

[0172] Get the logout instruction;

[0173] Determine whether the electronic certificate file to be cancelled exists according to the identifier carried in the cancellation instruction;

[0174] If it exists, and the status of the electronic certificate file is determined to be available, the status of the electronic certificate file to be cancelled is updated to being cancelled according to the status update process;

[0175] A cancellation watermark is added to each page of the electronic certificate file to be cancelled, the certificate number of the electronic certificate file to be cancelled is marked as cancelled, and the status of the electronic certificate file to be cancelled is updated to cancelled.

[0176] In one embodiment, the electronic certificate unified management method further includes:

[0177] Obtain electronic certificate file change request;

[0178] Determine whether the electronic certificate file to be changed exists according to the identifier carried in the electronic certificate file change request, and prompt that the change fails if it does not exist;

[0179] If it exists, and it is determined that the status of the electronic certificate file to be changed is not being generated or signed, the certificate data carried in the electronic certificate file change request is quality checked, and the certificate data that passes the quality check is sent to the user terminal of the institution that issued the electronic certificate for review;

[0180] After the certificate data is reviewed and approved, the electronic certificate file to be changed is modified using the certificate data carried in the electronic certificate file change request, the modification operation is recorded, and the electronic certificate file before and after the modification is saved.

[0181] In one embodiment, the electronic certificate unified management method further includes:

[0182] Check whether the electronic certificate file has expired according to the preset period, and if the validity period has expired, update the status of the electronic certificate file to expired;

[0183] Check whether the electronic certificate file has reached the periodic review stage according to the preset cycle. If so, and the status of the electronic certificate file is judged to be available, update the status of the electronic certificate file to pending review and available. If so, and the status of the electronic certificate file is judged to be unavailable, update the status of the electronic certificate file to pending review and unavailable.

[0184] The present invention also provides an electronic certificate unified management device, as described in the following embodiments. Since the principle of the device to solve the problem is similar to that of the electronic certificate unified management method, the implementation of the device can refer to the implementation of the electronic certificate unified management method, and the repeated parts will not be repeated.

[0185] Figure 7 FIG. 1 is a structural block diagram of a device for unified management of electronic certificates in an embodiment of the present invention. Figure 7 As shown, the device may include:

[0186] The certificate data acquisition module 701 is used to acquire the entered certificate data;

[0187] The corresponding relationship acquisition module 702 is used to acquire the required basic information of the certificate and the corresponding relationship between the required basic information of the certificate according to the certificate data; the basic information of the certificate includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels;

[0188] The electronic certificate file generation module 703 is used to process the certificate data and generate an electronic certificate file according to the acquired certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process, generation process and status update process of the electronic certificate file;

[0189] The sensitivity level determination module 704 is used to determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the acquired certificate face information;

[0190] Processing module 705, used to process the electronic certificate file according to the endorsement process, validity period management process, or status update process;

[0191] The authorization module 706 is used to receive the permission verification request sent by the user, and after verifying the verification information contained in the permission verification request, generate an authorization code according to the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level;

[0192] The download request receiving module 707 is used to receive the authorization code sent by the user and the download request for downloading the specified electronic certificate file;

[0193] The electronic certificate file returning module 708 is used to obtain the status of the specified electronic certificate file. If the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, the specified electronic certificate file is returned to the user.

[0194] In one embodiment, the certificate data acquisition module 701 is specifically used to:

[0195] Obtain license data that is manually entered, entered by optical character recognition, imported in batches, entered by service connection, or synchronized with the data access system;

[0196] When the obtained certificate data is manually entered, the personal user information or enterprise user information of the person who entered the certificate data, and the institutional user information of the institution that reviewed the credentials carried in the certificate data are obtained based on the certificate data; when it is determined based on the personal user information or enterprise user information that the user has the right to enter the certificate data, and the credentials are reviewed and approved, the certificate data is saved;

[0197] When the obtained certificate data is synchronized with the data access system, the permission information of the data access system and the institutional user information of the credentials carried by the certificate data are obtained according to the certificate data; when it is judged that the data access system has the synchronization permission of the certificate data according to the permission information of the data access system, and the credentials are reviewed and approved, the certificate data is saved.

[0198] In one embodiment, the correspondence between multiple types of certificate basic information includes: each certificate type information corresponds to multiple certificate name information, each certificate name information corresponds to multiple certificate template information, each certificate template information corresponds to multiple certificate face information items, each certificate template information corresponds to multiple electronic certificate files, and each certificate template information corresponds to one or more signature information, one of them or any combination.

[0199] In one embodiment, the electronic certificate file generation module 703 is specifically used to:

[0200] Obtain the certificate database, determine whether the certificate data meets the following conditions, verify the certificate data, and store the certificate data: the obtained certificate data is included in the certificate database, the certificate holder information in the certificate data, the information of the institution that issued the electronic certificate, the quality inspection validity period information, the quality inspection attachment information are correct, the required information items in the certificate data exist, and the certificate data has not been entered;

[0201] After the certificate data is stored in the database, the status of the certificate data is updated to stored in the database according to the status update process.

[0202] In one embodiment, the electronic certificate file generation module 703 is specifically used to:

[0203] Automatically call the generation process for the certificate data whose status is "in storage" to process it. After starting the generation process, update the status of the certificate data to "generating certificate";

[0204] According to the type of the certificate data, obtain the certificate face information item, the certificate template and the corresponding relationship between the certificate face information item and the certificate template corresponding to the certificate data;

[0205] According to the correspondence between the certificate data and the certificate face information items, and the correspondence between the certificate face information items and the certificate template, the certificate data is processed to generate and store the original XML file;

[0206] According to the sensitivity level of the obtained ID card information, determine whether it is necessary to generate a desensitized document. If necessary, generate and store a desensitized XML file based on the original XML file;

[0207] Generate the original electronic certificate file according to the original xml file, and generate the desensitized electronic certificate file according to the desensitized xml file;

[0208] The original electronic certificate file and the desensitized electronic certificate file are packaged and stored as an electronic certificate file;

[0209] After the electronic certificate file is generated, the status of the certificate data and the electronic certificate file is updated to "the certificate has been generated" according to the status update process;

[0210] If an error or exception occurs in the generation of the electronic certificate file, the status of the certificate data will be updated to certificate generation failure according to the status update process.

[0211] In one embodiment, the electronic certificate unified management device further includes: a desensitization module, which is used to:

[0212] If it is determined that the status of the designated electronic certificate file is available and the sensitivity level corresponding to the designated electronic certificate file is above the designated sensitivity level, the desensitized designated electronic certificate file is returned to the user.

[0213] In one embodiment, the processing module 705 is specifically configured to:

[0214] Automatically call the endorsement process for the electronic certificate file whose status is "generated certificate". After the endorsement process is started, the status of the electronic certificate file is updated to "in the process of endorsement".

[0215] According to the certificate data, obtain the certificate endorsement information;

[0216] Endorse the electronic certificate document according to the certificate endorsement information;

[0217] After the electronic certificate document is signed, the status of the electronic certificate document is updated to signed and available according to the status update process;

[0218] If an error or abnormality occurs in the endorsement of an electronic certificate file, the status of the electronic certificate file will be updated to endorsement failure according to the status update process;

[0219] If it is determined that a signature is required based on the certificate endorsement information, the signature position is determined based on the certificate template corresponding to the electronic certificate file and the correspondence between the certificate template and the signature information;

[0220] Sign the electronic certificate document according to the signature position.

[0221] In one embodiment, the electronic certificate unified management device further includes: a cancellation module, which is used to:

[0222] Get the logout instruction;

[0223] Determine whether the electronic certificate file to be cancelled exists according to the identifier carried in the cancellation instruction;

[0224] If it exists, and the status of the electronic certificate file is determined to be available, the status of the electronic certificate file to be cancelled is updated to being cancelled according to the status update process;

[0225] A cancellation watermark is added to each page of the electronic certificate file to be cancelled, the certificate number of the electronic certificate file to be cancelled is marked as cancelled, and the status of the electronic certificate file to be cancelled is updated to cancelled.

[0226] In one embodiment, the electronic certificate unified management device further includes: a change module, which is used to:

[0227] Obtain electronic certificate file change request;

[0228] Determine whether the electronic certificate file to be changed exists according to the identifier carried in the electronic certificate file change request, and prompt that the change fails if it does not exist;

[0229] If it exists, and it is determined that the status of the electronic certificate file to be changed is not being generated or signed, the certificate data carried in the electronic certificate file change request is quality checked, and the certificate data that passes the quality check is sent to the user terminal of the institution that issued the electronic certificate for review;

[0230] After the certificate data is reviewed and approved, the electronic certificate file to be changed is modified using the certificate data carried in the electronic certificate file change request, the modification operation is recorded, and the electronic certificate file before and after the modification is saved.

[0231] In one embodiment, the electronic certificate unified management device further includes: an audit module, which is used to:

[0232] Check whether the electronic certificate file has expired according to the preset period, and if the validity period has expired, update the status of the electronic certificate file to expired;

[0233] Check whether the electronic certificate file has reached the periodic review stage according to the preset cycle. If so, and the status of the electronic certificate file is judged to be available, update the status of the electronic certificate file to pending review and available. If so, and the status of the electronic certificate file is judged to be unavailable, update the status of the electronic certificate file to pending review and unavailable.

[0234] Figure 8 Schematic diagram of a computer device in an embodiment of the present invention. Figure 8 As shown, an embodiment of the present invention further provides a computer device 800, including a processor 820, a memory 810, and a computer program 830 stored in the memory 810 and executable on the processor 820, wherein the processor 820 implements the above-mentioned unified management method for electronic certificates when executing the computer program 830.

[0235] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned electronic certificate unified management method is implemented.

[0236] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the above-mentioned electronic certificate unified management method is implemented.

[0237] The embodiment of the present invention provides a unified management system, method and device for electronic certificates. Compared with the electronic certificate management scheme in the prior art, the basic information maintenance module is used to maintain a variety of basic certificate information used to generate electronic certificate files and the corresponding relationship between the various basic certificate information; the basic certificate information includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels; the certificate data entry module is used to obtain the entered certificate data; the obtained certificate data is used to The data is forwarded to the certificate process management module; the certificate process management module is used to maintain the management process of electronic certificate files; the management process includes one or any combination of the quality inspection process, generation process, endorsement process, validity management process, regular review process, and status update process of electronic certificate files; obtain the certificate data sent by the certificate data entry module; obtain the required certificate basic information and the corresponding relationship between the required certificate basic information from the basic information maintenance module based on the certificate data; based on the obtained certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process of electronic certificate files, Generate a process and a status update process, process the certificate data, and generate an electronic certificate file; determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the obtained certificate face information; process the electronic certificate file according to the endorsement process, validity period management process, or status update process; the certificate application module is used to receive the permission verification request sent by the user, and after the verification information contained in the permission verification request is verified, generate an authorization code according to the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level; receive the authorization code sent by the user and the download request for downloading the specified electronic certificate file, obtain the status of the specified electronic certificate file from the certificate process management module, if the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, return the specified electronic certificate file to the user, and provide unified electronic certificate basic data maintenance, save system resources and labor costs, improve the efficiency and accuracy of electronic certificate use, provide unified electronic certificate status management, ensure the validity and legality of electronic certificates, maintain the sensitivity level of certificate face information, and realize the display of certificate files of different sensitivity levels in different scenarios to improve security.

[0238] The embodiments of the present invention also have the following beneficial effects:

[0239] The electronic certificate system is built in a unified way to save resources used by the certificate system and improve the efficiency of certificate use; the unified certificate template standard and complete certificate directory basic information make the certificate documents more standardized, and after maintaining the basic information of the certificate once, it can be used in multiple regions; users participate in the entry of existing certificate data to speed up the process of electronicization of certificates; when the certificate information is wrong, the user can submit the correction information and go to the issuing authority in real time, and the user participates in the maintenance of the correctness of the information to improve the accuracy of the certificate information. Unified certificate status management means that changes in the certificate status will affect the use of the certificate in a timely manner, unify the application of certificates, and increase user participation. Improve the efficiency of certificate application and broaden the scenarios of certificate application. Process the certificate information according to the sensitivity processing to increase the security of the certificate information during transmission and use.

[0240] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0241] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0242] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0243] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0244] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A unified management system for electronic certificates, characterized in that: include: Basic information maintenance module, license data entry module, license process management module, and license application module; The basic information maintenance module is used to maintain the basic information of various certificates used to generate electronic certificate files and the corresponding relationship between the basic information of various certificates; the basic information of certificates includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels; The certificate data entry module is used to obtain the entered certificate data; forward the obtained certificate data to the certificate process management module; The certificate process management module is used to maintain the management process of electronic certificate files; the management process includes one or any combination of the quality inspection process, generation process, endorsement process, validity period management process, regular review process, and status update process of electronic certificate files; obtain the certificate data sent by the certificate data entry module; obtain the required certificate basic information and the corresponding relationship between the required certificate basic information from the basic information maintenance module according to the certificate data; process the certificate data according to the obtained certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process, generation process, and status update process of the electronic certificate file, and generate an electronic certificate file; determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the obtained certificate face information; Process the electronic certificate documents according to the endorsement process, validity period management process, or status update process; The certificate application module is used to receive permission verification requests from users, generate an authorization code based on the permission verification request and return it to the user after verifying the verification information contained in the permission verification request; the authorization code includes the authorization sensitivity level; receive the authorization code and the download request for the specified electronic certificate file from the user, obtain the status of the specified electronic certificate file from the certificate process management module, and if the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, return the specified electronic certificate file to the user.

2. The system according to claim 1, characterized in that Also includes: The system operation management module is used to manage user information, information about the institution that issues electronic certificates, role information, area information, system menu information, and data access system information; the users include institutional users that issue electronic certificates, individual users, and corporate users; the data access system information includes permission information for the data access system.

3. The system according to claim 2, characterized in that The certificate data entry module is specifically used for: Obtain license data that is manually entered, entered by optical character recognition, imported in batches, entered by service connection, or synchronized with the data access system; When the obtained certificate data is manually entered, the system operation management module is called according to the certificate data to obtain the personal user information or enterprise user information of the certificate data entered, and the institutional user information of the certificate data that verifies the credentials carried by the certificate data; when it is determined based on the personal user information or enterprise user information that the user has the right to enter the certificate data, and the credentials are reviewed and approved, the certificate data is saved; When the obtained certificate data is synchronized with the data access system, the system operation management module is called according to the certificate data to obtain the permission information of the data access system and the institutional user information of the credentials carried by the certificate data; when it is judged that the data access system has the synchronization permission of the certificate data according to the permission information of the data access system, and the credentials are reviewed and approved, the certificate data is saved.

4. The system according to claim 1, characterized in that The correspondence between various basic information of certificates includes: each certificate type information corresponds to multiple certificate name information, each certificate name information corresponds to multiple certificate template information, each certificate template information corresponds to multiple certificate face information items, each certificate template information corresponds to multiple electronic certificate files, and each certificate template information corresponds to one or more signature information or any combination thereof.

5. The system according to claim 1, wherein: The basic information maintenance module is also used to maintain the pre-established license database; The certificate process management module is specifically used to: call the basic information maintenance module to obtain the certificate database, determine whether the certificate data meets the following conditions, verify the certificate data, and store the certificate data: the obtained certificate data is included in the certificate database, the certificate holder information in the certificate data, the information of the institution that issued the electronic certificate, the quality inspection validity period information, the quality inspection attachment information are correct, the required information items in the certificate data exist, and the certificate data has not been entered; After the certificate data is stored in the database, the status of the certificate data is updated to stored in the database according to the status update process.

6. The system according to claim 1, wherein: The certificate process management module is specifically used for: Automatically call the generation process for the certificate data whose status is "in storage" to process it. After starting the generation process, update the status of the certificate data to "generating certificate"; According to the type of the certificate data, obtain the certificate face information items, the certificate template and the corresponding relationship between the certificate face information items and the certificate template corresponding to the certificate data from the basic information maintenance module; According to the correspondence between the certificate data and the certificate face information items, and the correspondence between the certificate face information items and the certificate template, the certificate data is processed to generate and store the original XML file; According to the sensitivity level of the obtained ID card information, determine whether it is necessary to generate a desensitized document. If necessary, generate and store a desensitized XML file based on the original XML file; Generate the original electronic certificate file according to the original xml file, and generate the desensitized electronic certificate file according to the desensitized xml file; The original electronic certificate file and the desensitized electronic certificate file are packaged and stored as an electronic certificate file; After the electronic certificate file is generated, the status of the certificate data and the electronic certificate file is updated to "the certificate has been generated" according to the status update process; If an error or exception occurs in the generation of the electronic certificate file, the status of the certificate data will be updated to certificate generation failure according to the status update process.

7. The system according to claim 6, characterized in that The certificate application module is also used for: If it is determined that the status of the designated electronic certificate file is available and the sensitivity level corresponding to the designated electronic certificate file is above the designated sensitivity level, the desensitized designated electronic certificate file is returned to the user.

8. The system of claim 1, wherein: The certificate process management module is specifically used for: Automatically call the endorsement process for the electronic certificate file whose status is "generated certificate". After the endorsement process is started, the status of the electronic certificate file is updated to "in the process of endorsement". According to the certificate data, obtain the certificate endorsement information from the basic information maintenance module; Endorse the electronic certificate document according to the certificate endorsement information; After the electronic certificate document is signed, the status of the electronic certificate document is updated to signed and available according to the status update process; If an error or abnormality occurs in the endorsement of an electronic certificate file, the status of the electronic certificate file will be updated to endorsement failure according to the status update process; If it is determined that a signature is required based on the certificate endorsement information, the signature position is determined based on the certificate template corresponding to the electronic certificate file and the correspondence between the certificate template and the signature information; Sign the electronic certificate document according to the signature position.

9. The system according to claim 1, characterized in that The management process also includes a cancellation process and / or modification process for electronic certificate documents.

10. The system according to claim 9, characterized in that The certificate process management module is also used to: Get the logout instruction; Determine whether the electronic certificate file to be cancelled exists according to the identifier carried in the cancellation instruction; If it exists, and the status of the electronic certificate file is determined to be available, the status of the electronic certificate file to be cancelled is updated to being cancelled according to the status update process; A cancellation watermark is added to each page of the electronic certificate file to be cancelled, the certificate number of the electronic certificate file to be cancelled is marked as cancelled, and the status of the electronic certificate file to be cancelled is updated to cancelled.

11. The system according to claim 9, characterized in that The modification process includes an active change process and an error correction information management process; The certificate process management module is also used to: Obtain electronic certificate file change request; Determine whether the electronic certificate file to be changed exists according to the identifier carried in the electronic certificate file change request, and prompt that the change fails if it does not exist; If it exists, and it is determined that the status of the electronic certificate file to be changed is not being generated or signed, the certificate data carried in the electronic certificate file change request is quality checked, and the certificate data that passes the quality check is sent to the user terminal of the institution that issued the electronic certificate for review; After the certificate data is reviewed and approved, the electronic certificate file to be changed is modified using the certificate data carried in the electronic certificate file change request, the modification operation is recorded, and the electronic certificate file before and after the modification is saved.

12. The system of claim 1, wherein: The certificate process management module is also used to: Check whether the electronic certificate file has expired according to the preset period, and if the validity period has expired, update the status of the electronic certificate file to expired; Check whether the electronic certificate file has reached the periodic review stage according to the preset cycle. If so, and the status of the electronic certificate file is judged to be available, update the status of the electronic certificate file to pending review and available. If so, and the status of the electronic certificate file is judged to be unavailable, update the status of the electronic certificate file to pending review and unavailable.

13. A method for unified management of electronic certificates, characterized in that: include: Get the entered license data; Obtain the required basic information of the license and the corresponding relationship between the required basic information of the license according to the license data; The basic information of the certificate includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels; According to the acquired basic information of certificates and licenses, the corresponding relationship between the basic information of certificates and licenses, and the quality inspection process, generation process and status update process of electronic certificate and license files, the certificate and license data are processed to generate electronic certificate and license files; Determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the obtained certificate face information; Process the electronic certificate documents according to the endorsement process, validity period management process, or status update process; Receive the permission verification request from the user, and after verifying the verification information contained in the permission verification request, generate an authorization code based on the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level; Receive the authorization code and download request for the specified electronic certificate file sent by the user; Get the status of the specified electronic certificate file. If the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, return the specified electronic certificate file to the user.

14. The method according to claim 13, characterized in that Get the entered certificate data, including: Obtain license data that is manually entered, entered by optical character recognition, imported in batches, entered by service connection, or synchronized with the data access system; When the obtained certificate data is manually entered, the personal user information or enterprise user information of the person who entered the certificate data, and the institutional user information of the institution that reviewed the credentials carried in the certificate data are obtained based on the certificate data; when it is determined based on the personal user information or enterprise user information that the user has the right to enter the certificate data, and the credentials are reviewed and approved, the certificate data is saved; When the obtained certificate data is synchronized with the data access system, the permission information of the data access system and the institutional user information of the credentials carried by the certificate data are obtained according to the certificate data; when it is judged that the data access system has the synchronization permission of the certificate data according to the permission information of the data access system, and the credentials are reviewed and approved, the certificate data is saved.

15. The method according to claim 13, characterized in that The correspondence between various basic information of certificates includes: each certificate type information corresponds to multiple certificate name information, each certificate name information corresponds to multiple certificate template information, each certificate template information corresponds to multiple certificate face information items, each certificate template information corresponds to multiple electronic certificate files, and each certificate template information corresponds to one or more signature information or any combination thereof.

16. The method according to claim 13, characterized in that Based on the acquired basic information of certificates and licenses, the corresponding relationship between the basic information of certificates and licenses, and the quality inspection process, generation process and status update process of electronic certificate and license files, the certificate and license data are processed to generate electronic certificate and license files, including: Obtain the certificate database, determine whether the certificate data meets the following conditions, verify the certificate data, and store the certificate data: the obtained certificate data is included in the certificate database, the certificate holder information in the certificate data, the information of the institution that issued the electronic certificate, the quality inspection validity period information, the quality inspection attachment information are correct, the required information items in the certificate data exist, and the certificate data has not been entered; After the certificate data is stored in the database, the status of the certificate data is updated to stored in the database according to the status update process.

17. The method according to claim 13, characterized in that Based on the acquired basic information of certificates and licenses, the corresponding relationship between the basic information of certificates and licenses, and the quality inspection process, generation process and status update process of electronic certificate and license files, the certificate and license data are processed to generate electronic certificate and license files, including: Automatically call the generation process for the certificate data whose status is "in storage" to process it. After starting the generation process, update the status of the certificate data to "generating certificate"; According to the type of the certificate data, obtain the certificate face information item, the certificate template and the corresponding relationship between the certificate face information item and the certificate template corresponding to the certificate data; According to the correspondence between the certificate data and the certificate face information items, and the correspondence between the certificate face information items and the certificate template, the certificate data is processed to generate and store the original XML file; According to the sensitivity level of the obtained ID card information, determine whether it is necessary to generate a desensitized document. If necessary, generate and store a desensitized XML file based on the original XML file; Generate the original electronic certificate file according to the original xml file, and generate the desensitized electronic certificate file according to the desensitized xml file; The original electronic certificate file and the desensitized electronic certificate file are packaged and stored as an electronic certificate file; After the electronic certificate file is generated, the status of the certificate data and the electronic certificate file is updated to "the certificate has been generated" according to the status update process; If an error or exception occurs in the generation of the electronic certificate file, the status of the certificate data will be updated to certificate generation failure according to the status update process.

18. The method according to claim 17, characterized in that Also includes: If it is determined that the status of the designated electronic certificate file is available and the sensitivity level corresponding to the designated electronic certificate file is above the designated sensitivity level, the desensitized designated electronic certificate file is returned to the user.

19. The method of claim 13, wherein: Process the electronic certificate documents according to the endorsement process, validity period management process, or status update process, including: Automatically call the endorsement process for the electronic certificate file whose status is "generated certificate". After the endorsement process is started, the status of the electronic certificate file is updated to "in the process of endorsement". According to the certificate data, obtain the certificate endorsement information; Endorse the electronic certificate document according to the certificate endorsement information; After the electronic certificate document is signed, the status of the electronic certificate document is updated to signed and available according to the status update process; If an error or abnormality occurs in the endorsement of an electronic certificate file, the status of the electronic certificate file will be updated to endorsement failure according to the status update process; If it is determined that a signature is required based on the certificate endorsement information, the signature position is determined based on the certificate template corresponding to the electronic certificate file and the correspondence between the certificate template and the signature information; Sign the electronic certificate document according to the signature position.

20. The method of claim 13, wherein: Also includes: Get the logout instruction; Determine whether the electronic certificate file to be cancelled exists according to the identifier carried in the cancellation instruction; If it exists, and the status of the electronic certificate file is determined to be available, the status of the electronic certificate file to be cancelled is updated to being cancelled according to the status update process; A cancellation watermark is added to each page of the electronic certificate file to be cancelled, the certificate number of the electronic certificate file to be cancelled is marked as cancelled, and the status of the electronic certificate file to be cancelled is updated to cancelled.

21. The method of claim 13, wherein: Also includes: Obtain electronic certificate file change request; Determine whether the electronic certificate file to be changed exists according to the identifier carried in the electronic certificate file change request, and prompt that the change fails if it does not exist; If it exists, and it is determined that the status of the electronic certificate file to be changed is not being generated or signed, the certificate data carried in the electronic certificate file change request is quality checked, and the certificate data that passes the quality check is sent to the user terminal of the institution that issued the electronic certificate for review; After the certificate data is reviewed and approved, the electronic certificate file to be changed is modified using the certificate data carried in the electronic certificate file change request, the modification operation is recorded, and the electronic certificate file before and after the modification is saved.

22. The method of claim 13, wherein: Also includes: Check whether the electronic certificate file has expired according to the preset period, and if the validity period has expired, update the status of the electronic certificate file to expired; Check whether the electronic certificate file has reached the periodic review stage according to the preset cycle. If so, and the status of the electronic certificate file is judged to be available, update the status of the electronic certificate file to pending review and available. If so, and the status of the electronic certificate file is judged to be unavailable, update the status of the electronic certificate file to pending review and unavailable.

23. An electronic certificate unified management device, characterized in that: include: The certificate data acquisition module is used to obtain the entered certificate data; A corresponding relationship acquisition module is used to obtain the required basic information of the certificate and the corresponding relationship between the required basic information of the certificate according to the certificate data; the basic information of the certificate includes one or any combination of certificate type information, certificate name information, certificate template information, certificate face information items, endorsement information, and signature information; different certificate face information items correspond to different sensitivity levels; The electronic certificate file generation module is used to process the certificate data and generate an electronic certificate file based on the acquired certificate basic information, the corresponding relationship between the certificate basic information, and the quality inspection process, generation process and status update process of the electronic certificate file; A sensitivity level determination module, used to determine the sensitivity level of the electronic certificate file according to the sensitivity level corresponding to the acquired certificate face information; A processing module is used to process the electronic certificate file according to the endorsement process, validity period management process, or status update process; The authorization module is used to receive the permission verification request sent by the user, and after verifying the verification information contained in the permission verification request, generate an authorization code according to the permission verification request and return it to the user; the authorization code includes the authorization sensitivity level; The download request receiving module is used to receive the authorization code sent by the user and the download request for downloading the specified electronic certificate file; The electronic certificate file return module is used to obtain the status of the specified electronic certificate file. If the status of the specified electronic certificate file is available and the sensitivity level corresponding to the specified electronic certificate file is below the specified sensitivity level, the specified electronic certificate file is returned to the user.

24. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 13 to 22 is implemented.

25. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 13 to 22 is implemented.

26. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to any one of claims 13 to 22 is implemented.

Images