Enterprise verification system, method and equipment based on handwriting identity characteristics and storage medium

Abstract

The invention provides an enterprise verification system, method and device based on handwriting identity features and a storage medium. The method comprises the steps of verifying authenticity of a settled enterprise and an enterprise legal representative, obtaining handwriting biological feature information of the settled enterprise and the enterprise legal representative, generating a handwriting feature ID of the enterprise legal representative, and completing enterprise settlement. Generating authorization book files signed by both the enterprise legal representative and the enterprise authorized person, obtaining handwriting biological characteristic information of the enterprise authorized person, generating a handwriting characteristic ID of the enterprise authorized person, and completing enterprise authorization; and during enterprise verification, acquiring handwriting biological characteristic information of the two parties in the signing process, and comparing the handwriting biological characteristic information with handwriting characteristic IDs of the two parties to complete verification. According to the invention, in the business handling process of each enterprise, the enterprise authentication is completed while signing or sealing is carried out, so that the counterfeiting risk of enterprise personnel can be prevented, the Internet real-name authentication cost of the enterprise is reduced, and it is ensured that a legal representative of the enterprise or an authorized management operator must express the willingness.

Description

Technical Field

[0001] The present application relates to the field of signature verification, and specifically to enterprise verification technology based on handwriting identity features. Background Art

[0002] Nowadays, remote operations via the Internet are becoming increasingly common in the process of corporate business operations. Existing technologies usually use four-factor corporate authentication combined with public account transfers or facial recognition of legal persons to complete corporate authentication. Current corporate real-name authentication includes the following solutions.

[0003] Solution 1: When an enterprise registers an account on the Internet system, the enterprise operator is required to provide the enterprise's business license information and contact information, and upload a copy of the business license with the company's official seal and a scanned copy of the registration letter. Subsequently, the operator is required to mail the original of the same document to the address specified by the system. The system operator will manually check the business license information, copy and registration letter with the official seal to complete the enterprise's real-name authentication process. However, this method has certain security risks. For example, if an illegal element obtains a copy of the enterprise's business license through illegal means and forges the official seal, it may impersonate the enterprise. Since it is difficult for the system operator to distinguish the authenticity of the official seal, even if the review is passed, the validity of the real-name authentication will be questioned. In the event of a dispute, it is difficult to identify the responsible party. In addition, relying on manual review of real-name authentication also increases the labor cost of the Internet system.

[0004] Solution 2: First, the enterprise operator needs to complete the account registration on the Internet system and accurately enter the enterprise's business license information and related contact information. Subsequently, the operator needs to upload a scanned copy of the business license and a scanned copy of the registration letter with the company's official seal. During this process, the company's bank account number must be filled in, and the bank account name must be consistent with the company name. Then, the Internet system will transfer a random amount of money to the company's bank account. When the enterprise operator sees the transferred amount in his bank account, he must promptly fill in the corresponding amount in the Internet system. If the Internet system determines that the transferred amount is consistent with the amount filled in by the enterprise operator, the enterprise's real-name authentication is deemed to be successful. This solution cleverly uses the real-name authentication mechanism that banks use when opening bank accounts for enterprises. However, this process also has certain risks. For example, the company's financial personnel may use the company's bank account information they have without the authorization of the legal representative or general manager of the enterprise to privately register an account on the Internet system. Once a dispute occurs, the clarification of responsibilities will become complicated. Therefore, when using this real-name authentication solution, enterprises should ensure strict internal control and authorization mechanisms to prevent potential risks.

[0005] Solution 3: Based on the above solution, first, the enterprise operator needs to complete the account registration process in the Internet system to ensure that the business license information and related contact information of the enterprise are entered accurately. Subsequently, the operator needs to upload a scanned copy of the business license and the registration letter with the official seal of the enterprise for review. During this process, the legal representative of the enterprise also needs to register a personal account in the Internet system and submit personal identity information. Once the personal account of the corporate legal representative is successfully registered, the system will automatically connect to the public security information database to verify the identity information of the corporate legal representative to ensure its authenticity. Next, the system will collect the live image of the corporate legal representative and carefully compare it with the ID card image. Only when the face scan and liveness detection are successful, the real-name authentication of the corporate legal representative will be considered completed. Subsequently, the system will obtain the CA certificate of the corporate legal representative from the CA center for subsequent confirmation of the authenticity of the enterprise. This solution significantly improves the level of real-name authentication of enterprises by introducing face recognition technology and strengthening the personal real-name authentication of corporate legal accounts. However, although this solution enhances security, it still does not completely eliminate the possibility of corporate managers abusing CA certificates. If managers are not explicitly authorized by the corporate legal representative or general manager, they may still sign relevant documents on behalf of the company, which may lead to disputes and liability risks.

[0006] It can be seen that the problems existing in the enterprise real-name authentication process are mainly reflected in several aspects: the authenticity of the official seal on paper materials is difficult to distinguish, and the labor cost of review is high; the enterprise authentication process using other methods is cumbersome; the authorization path for enterprise staff is unclear.

[0007] Therefore, there is currently no effective solution to ensure the security of real-name authentication and authorization within the enterprise. Summary of the invention

[0008] In response to the above-mentioned problems existing in the prior art, the purpose of this application is to propose an enterprise verification method, system, equipment and storage medium based on handwriting identity features, to prevent the risk of fraud by enterprise personnel, reduce the cost of enterprise Internet real-name authentication, and ensure that the person expressing the intention must be the legal representative of the enterprise or an authorized management operator.

[0009] The technical solution of this application is as follows: In the first aspect of the present application, a method for enterprise verification based on handwriting identity features is proposed, the method comprising: verifying the authenticity of the settled enterprise and the legal representative of the enterprise, obtaining the handwriting biometric information of the legal representative of the enterprise, generating the handwriting feature ID of the legal representative of the enterprise (i.e., handwriting identity features), and completing the enterprise settlement; generating a power of attorney document signed by both the legal representative of the enterprise and the authorized person of the enterprise, obtaining the handwriting biometric information of the authorized person of the enterprise during the signing, generating the handwriting feature ID of the authorized person of the enterprise, and completing the enterprise authorization; when verifying the enterprise, obtaining the handwriting biometric information of the legal representative of the enterprise or the authorized person of the enterprise during the signing process, and comparing it with the handwriting feature ID of the legal representative of the enterprise or the handwriting feature ID of the authorized person of the enterprise to complete the verification.

[0010] Preferably, in this method, the enterprise settlement includes: Obtain basic information about the enterprise and verify the authenticity of the enterprise information. For example, the authenticity of the enterprise information can be verified by calling the official enterprise information database. Authenticate the real name of the legal representative of the enterprise, collect their handwriting data and extract handwriting biometric information. Create a unified social credit code as the unique code of the enterprise, bind the legal representative's ID card information and handwriting biometric information, and generate the handwriting feature ID of the legal representative of the enterprise.

[0011] Preferably, in this method, the enterprise authorization includes: First, the enterprise authorization information is obtained to generate a letter of authorization to be signed. Then, the handwriting biometric information of the legal representative when signing the letter of authorization is obtained for verification. If the verification is passed, the digital handwriting is signed into the letter of authorization. At the same time, the enterprise electronic seal in the electronic seal system is called to generate a signature for the letter of authorization to obtain the first signed document. At the same time, a link to be signed is generated for the first signed document and sent to the enterprise authorized person.

[0012] Then, the enterprise authorized person is authenticated by real name, and the identity information of the enterprise authorized person is verified; after the verification, the handwriting biometric information of the enterprise authorized person is obtained, and the digital handwriting is signed into the authorization letter based on the first signed document to obtain the second signed document, complete the signing of the authorization letter, and generate the handwriting feature ID of the enterprise authorized person at the same time. The enterprise authorized person is configured as level one or above, and the upper level authorized person authorizes the obtained authority to the lower level authorized person, and each level of authorization generates a first-level signed authorization document. Finally, the enterprise authorization link, as well as metadata information such as validity period and authorization content are recorded to support query and verification through the interface.

[0013] Preferably, in this method, the enterprise verification includes: Collect the handwriting data of the legal representative of the enterprise in the enterprise verification signature, extract the handwriting biometric information, and compare it with the handwriting biometric information in the handwriting feature ID of the legal representative of the enterprise to confirm the enterprise behavior.

[0014] Alternatively, collect the handwriting data of the enterprise authorized person in the enterprise verification signature, extract the handwriting biometric information, and compare it with the handwriting biometric information in the handwriting feature ID of the enterprise authorized person. At the same time, provide the corresponding enterprise authorization link and authorization letter to the third-party business system. The third-party business system completes the verification of the authorization link through metadata information comparison.

[0015] In a second aspect, the present application also provides an enterprise verification system based on handwriting identity features, including a handwriting data collection module, a handwriting data management module and an authorization management module. The handwriting data collection module collects the handwriting data of the legal representative and the authorized person of the enterprise through a mobile terminal or a terminal signature device, processes the data, and submits the personal identity information of the legal representative and the authorized person of the enterprise and the processed handwriting data to the handwriting data management module. The handwriting data management module extracts the handwriting biometric information from the handwriting data, and combines it with the personal identity information to form a verifiable handwriting information ID, and performs subsequent handwriting recognition and comparison. The authorization management module is responsible for enterprise entry and enterprise authorization, creating an enterprise authorization link, performing authorization verification of the legal representative and the authorized person of the enterprise, and supporting the verification of the business handling of the authorized person of the enterprise.

[0016] In a third aspect, the present application further provides an electronic device, wherein the electronic device is equipped with the enterprise verification system based on handwriting identity features as described in the second aspect above.

[0017] In a fourth aspect, the present application further provides a storage medium storing a program for implementing the enterprise verification method based on handwriting identity features described in the first method above.

[0018] This application has at least the following beneficial effects: The identity of the legal representative and authorized person of the enterprise is recognized through digital handwriting signature. The signature handwriting contains the handwriting biometric data of the signatory, which forms a one-to-one correspondence with the enterprise's authentication and authorization process. The system can verify the authenticity of the enterprise while also verifying the authorization chain of the enterprise's authorized person, ensuring that the operations of the corresponding operators can be traced and relied upon.

[0019] The legal representative of an enterprise proves the authenticity of the enterprise account by completing the handwriting identity verification for enterprise filing. In the process of handling business operations, the enterprise certification is completed at the same time of signing or stamping, which solves the problem of enterprise Internet real-name authentication, reduces the cost of use for the enterprise, and increases the convenience of enterprise certification. At the same time, since those who can pass the handwriting identity verification must be relevant personnel of the enterprise who have completed the filing, the rigor and authenticity of the method are greatly improved, and the possibility of the person expressing the intention is not the authorized person of the enterprise is eliminated. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 This is a schematic diagram of the enterprise entry process for this application.

[0021] Figure 2 This is a schematic diagram of the enterprise authorization process for this application.

[0022] Figure 3 This is a schematic diagram of the enterprise verification process for this application.

[0023] Figure 4 This is a schematic diagram of the system architecture of this application.

[0024] Figure 5 It is a structural block diagram of the electronic device of the present application. DETAILED DESCRIPTION

[0025] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. It is understood that the specific embodiments described herein are only used to explain the related applications, rather than to limit the applications. It should also be noted that, for ease of description, only the parts related to the related applications are shown in the drawings.

[0026] Embodiment 1 This embodiment provides a method for enterprise authorization verification based on handwriting identity features, which includes enterprise entry, enterprise authorization and enterprise verification. The method mainly verifies the authenticity of the settled enterprise and the legal representative of the enterprise, obtains the handwriting biometric information of the legal representative of the enterprise, generates the handwriting feature ID of the legal representative of the enterprise, and completes the enterprise entry; generates a power of attorney document signed by both the legal representative of the enterprise and the authorized person of the enterprise, obtains the handwriting biometric information of the authorized person of the enterprise during the signing, generates the handwriting feature ID of the authorized person of the enterprise, and completes the enterprise authorization; when verifying the enterprise, obtains the handwriting biometric information of the legal representative of the enterprise or the authorized person of the enterprise during the signing process, and compares it with the handwriting feature ID of the legal representative of the enterprise or the handwriting feature ID of the authorized person of the enterprise to complete the verification.

[0027] The specific implementation methods of each part are as follows: 1. Enterprise Settlement Enterprise settlement mainly includes: Obtain basic information of the enterprise and verify the authenticity of the enterprise information; Authenticate the real name of the legal representative of the enterprise, collect their handwriting data and extract handwriting biometric information; Create a unified social credit code as the company's unique code, bind the legal representative's ID card information and handwriting biometric information, and generate a handwriting feature ID for the company's legal representative.

[0028] like Figure 1As shown, the legal representative of the enterprise first needs to submit basic enterprise information in the system, including but not limited to the enterprise name, unified social credit code, name and ID number of the legal representative, photo of the enterprise business license, photo of the legal representative ID card, etc. Enterprise information can also be directly transmitted and submitted through the docking business system.

[0029] After submission, the system will verify the authenticity of the enterprise information by calling the enterprise information database provided by a third party (such as the Market Supervision Bureau). For example, the enterprise information needs to be verified by the four-factor enterprise verification provided by the State Administration for Market Regulation. In addition to the four-factor enterprise authentication method, more other enterprise authentication methods can also be combined according to business scenarios, such as offline authentication, interface authentication, audio and video dual recording authentication, enterprise-to-public payment authentication, etc.

[0030] If the enterprise information is verified, the name and ID number of the legal representative will be extracted from the enterprise information, and the legal representative will be required to complete personal real-name authentication. The real-name authentication methods here include but are not limited to the use of multiple different authentication methods or combinations such as public security face comparison, operator three-factor authentication, bank card four-factor authentication, eID authentication, offline authentication, etc.

[0031] After verifying the enterprise information and legal representative information, the enterprise social credit code is created as the enterprise's unique code and bound to the corresponding legal representative ID information. This information is used to bind the collected handwriting biometric information of the legal representative to generate the handwriting feature ID of the enterprise's legal representative.

[0032] 2. Enterprise Authorization like Figure 2 As shown, the enterprise authorization includes: Obtain the enterprise authorization information and generate a letter of authorization to be signed. Obtain the handwriting biometric information of the legal representative when signing the letter of authorization for verification. If the verification is passed, sign the digital handwriting into the letter of authorization, and call the enterprise electronic seal to generate a signature for the letter of authorization to obtain the first signed document. Generate a link to be signed for the first signed document and send it to the enterprise authorized person. Perform real-name authentication on the enterprise authorized person and verify the identity information of the enterprise authorized person; after the verification is passed, obtain the handwriting biometric information of the enterprise authorized person, sign the digital handwriting into the letter of authorization based on the first signed document, obtain the second signed document, complete the signing of the letter of authorization, and generate the handwriting feature ID of the enterprise authorized person. Finally, record the enterprise authorization link and metadata information.

[0033] In enterprise authorization, the generation of the authorization document to be signed includes: based on the obtained authorization content, combined with the stream file template technology, the corresponding content is filled into the corresponding document to generate the authorization document to be signed, wherein the content of the stream file is configurable to realize the editing of authorization content including matters, time, scope, etc., and the configured authorization content is stored through structured data.

[0034] In enterprise authorization, the method for obtaining and verifying the handwriting biometric information of the legal representative of the enterprise when signing the authorization letter is: collect the handwriting data of the legal representative when signing the authorization letter, parse the handwriting biometric information in the handwriting, and compare it with the handwriting biometric information of the corresponding legal person of the enterprise. If the comparison is consistent, the verification is passed.

[0035] In enterprise authorization, the digital handwriting is signed into the authorization letter by collecting the handwriting data of the signatory, parsing it to obtain the handwriting biometric information, generating a signature image with a transparent channel through the handwriting data, writing the signature value of the HASH value of the signatory's handwriting biometric information and the signature value of the HASH value of the original telegram into the transparent channel of the signature image, using the signatory's ID number as an identifier, encrypting the handwriting biometric information and the steganographic signature value in the signature image, and calculating the signature value and storing it in the authorization letter; the signatories include the legal representative of the enterprise and the authorized person.

[0036] In a specific application, the enterprise authorized person may be configured as one level or above, and the upper level authorized person authorizes the acquired authority downward to the lower level authorized person, and each level of authorization generates a power of attorney document signed by the first level.

[0037] The metadata information recorded above includes but is not limited to: enterprise name, enterprise social credit code, enterprise legal representative, latest enterprise verification time, enterprise legal representative verification time, enterprise authorized person identity information at all levels, authorization ID at each level, authorization validity period, authorization content. The authorization content includes the enterprise authorized person's name, ID number, position and communication method, authorization time range, event range and third-party business system.

[0038] In specific applications, the legal representative of the enterprise can fill in the corresponding authorized person information in the system, including name, ID number, position, contact information, etc. The authorization content includes time range, event scope, authorization scope, third-party business system, etc.

[0039] In a specific application, the system fills the corresponding information into the corresponding document based on the filled-in field content and combines the flow file template technology to generate a power of attorney file to be signed.

[0040] Subsequently, the legal representative signs the authorization letter using digital handwriting technology. While signing, the biometric information in the handwriting is analyzed and compared with the handwriting biometric information of the corresponding legal person in the handwriting data management module. If the comparison is consistent, the digital handwriting is signed into the authorization letter. At the same time, the verified legal representative's identity can call the company's electronic seal in the electronic seal system to generate and sign the document.

[0041] Next, a link to be signed is generated for the signed document. This link can be provided to the authorized person via SMS, WeChat, QQ, email or other Internet tools or local text.

[0042] After the authorized person opens the link, he needs to perform real-name authentication based on the authorized person's identity information submitted by the legal representative. After the real-name authentication is passed, the system will verify the authorized person's identity information to ensure that it is consistent with the information in the authorization letter. The handwriting can be collected to complete the signing of the authorization letter. Once both parties sign, the enterprise authorization is completed, and the authorized person can perform relevant operations on behalf of the enterprise within the specified authorization scope. The authorized person's handwriting biometric information is combined with the enterprise information and the authorization letter information to generate the enterprise authorized person's handwriting feature ID.

[0043] After the authorization letter is generated, when signing, the handwriting data collection module is called to adopt the handwritten original handwriting electronic signature technology to collect the handwriting data and handwriting biometric data of the signatory, and a signature image with a transparent channel is generated through the handwriting data. The signature value of the signatory's handwriting biometric information HASH value and the signature value of the original telegram HASH value are written into the transparent channel of the signature image. The signatory's ID number is used as an identifier, and the handwriting biometric data and the steganographic signature value in the signature image are encrypted through cryptographic encryption technology, and the signature value is calculated and stored in the signed document.

[0044] Finally, the metadata information such as the authorized link, validity period, and authorized content are recorded. These metadata information can be queried and verified through the interface. The signed authorization document forms a relationship mapping between the enterprise and the authorized person.

[0045] 3. Enterprise Authorization Verification See also Figure 3 ,Enterprise authorization verification includes verification through the legal representative of the enterprise or through the authorized person of the enterprise to confirm whether it is an enterprise behavior.

[0046] For verification by the legal representative of the enterprise, the handwriting data of the legal representative of the enterprise in the enterprise verification signature is collected, the handwriting biometric information is extracted, and compared with the handwriting biometric information in the handwriting feature ID of the legal representative of the enterprise, thereby confirming the enterprise's behavior.

[0047] The enterprise authorized person verification is achieved by collecting the handwriting data of the enterprise authorized person in the enterprise verification signature, extracting the handwriting biometric information, and comparing it with the handwriting biometric information in the handwriting feature ID of the enterprise authorized person, thereby confirming that the enterprise authorized person is valid, and at the same time providing the corresponding enterprise authorization link and authorization letter to the third-party business system. The third-party business system completes the verification of the authorization link through metadata information comparison.

[0048] In specific applications, when conducting corporate verification, the legal representative can sign, and the system can confirm the corporate behavior by comparing the biometric information in the signature of the legal representative of the company with the biometric information in the handwriting feature ID.

[0049] The authorized person can also sign and provide the corresponding authorization link and authorization letter to the business system while comparing the biometrics for further confirmation by the business system. If the business system has been connected, the verification of the authorization link can be completed directly through metadata comparison.

[0050] Embodiment 2 This embodiment provides an enterprise authorization verification system based on handwriting identity features, which is used to implement the verification method of the above embodiment 1.

[0051] As shown in Figure 4, the system includes handwriting data collection module, handwriting data management module and authorization management module. The system can be deployed in the business system or applied through the Internet. The following are the main functions of each module: 1. The handwriting data collection module is mainly used to collect the handwriting data of the legal representative and the authorized person of the enterprise through a mobile terminal or a terminal signature device, process the data, and submit the personal identity information of the legal representative and the authorized person of the enterprise and the processed handwriting data to the handwriting data management module.

[0052] Specifically, the handwriting data collection module collects the handwriting information of the signatory (referring to the legal representative of the enterprise and the authorized person, the authorized person is also a natural person) and extracts the handwriting point data information. This module supports the connection of the signature board device through a mobile phone, tablet, or PC computer, collects the handwriting information through an SDK application that can collect digital handwriting, and extracts the handwriting point data information according to the handwriting data collection standard. In a specific application, the handwriting data collection module collects the handwritten electronic signatures in the signature column of the transcript file and the evidence list file of the inquiring end and the inquired end, collects the strokes, pen sequence, pen pressure, pen speed, signature image, and signing time information of the signatory during the writing process, and records the entire process from the signatory's pen placement to the completion of the signature and the start of the pen, to form an encrypted signature package. The signed authorization document forms a relationship mapping between the enterprise and the authorized person.

[0053] The handwriting data collection module performs real-name authentication of the legal representative through the handwriting data management module based on the legal person information contained in the enterprise information after third-party enterprise authentication, and collects the handwriting data of the legal representative of the enterprise; for the authorized person, the handwriting data collection module performs real-name authentication of the authorized person through the handwriting data management module based on the authorized person identity information submitted by the legal representative, and collects the handwriting data of the authorized person.

[0054] After the handwriting data collection module collects the handwriting data of the signatory, it needs to perform encryption processing, specifically: first collect the handwriting data of the signatory through the handwritten original handwriting electronic signature technology, and extract the handwriting biometric information, generate a signature image with a transparent channel through the handwriting data, write the signature value of the signatory's handwriting biometric information HASH value and the signature value of the original telegram HASH value into the transparent channel of the signature image, use the signatory's ID number as an identifier, use a symmetric encryption algorithm to encrypt the handwriting biometric information and the steganographic signature value in the signature image, and calculate the signature value.

[0055] 2. The handwriting data management module is used to extract handwriting biometric information from handwriting data and combine it with personal identity information to form a verifiable handwriting information ID. The handwriting data management module provides authentication services and handwriting algorithm services. The handwriting data management module also collects the legal person information contained in the four elements of the enterprise after verification, performs real-name authentication of the legal representative and collects the handwriting of the legal person. The authorized user completes the handwriting collection after real-name authentication. The handwriting data management module has built a legal person handwriting library and a natural person handwriting library. The handwriting algorithm services of the handwriting data management module include handwriting collection, handwriting modeling, handwriting recognition and content verification to process handwriting data and perform handwriting comparison and recognition on handwriting data information submitted with the same personal identity information.

[0056] Preferably, in the authentication service, in addition to the four elements of the enterprise authentication method, more other enterprise authentication methods can be combined according to the business scenario, such as offline authentication, interface verification, audio and video dual recording verification, enterprise-to-public payment and other authentication methods.

[0057] Preferably, in the authentication service, personal real-name authentication supports multiple authentication methods or combinations such as public security face verification, operator three-factor authentication, bank card four-factor, eID authentication, offline authentication, etc. The authentication service also includes a five-factor building module.

[0058] In the handwriting data management module, the company's valid information will be automatically updated regularly or triggered to update based on user usage to ensure the continued validity of the company and the validity of the legal representative's identity.

[0059] 3. The authorization management module is responsible for enterprise entry and enterprise authorization, creating an enterprise authorization link, and supporting the business handling verification of the enterprise's handlers, including legal representative verification, authorized person verification, authorization link verification, and authorization letter verification.

[0060] Preferably, the legal representative in the authorization management module can create a letter of authorization through the file template function, and by configuring the content of the stream file, the editing of authorization content including matters, time, business scope, seal, etc. The configured authorization content can be stored through structured data, which is convenient for docking and application with other systems.

[0061] After the authorization management module generates the authorization letter, it calls the handwriting data collection module to collect the handwriting data of the signer, processes and encrypts it, and then submits it to the handwriting data management module to sign the synthetic authorization letter file, so that the signed authorization letter file forms a relationship mapping between the enterprise and the authorized person, and completes the authorization.

[0062] Preferably, after generating the authorization letter, the legal representative calls the handwriting data collection module to collect the handwriting data and handwriting biometric data of the signatory, generates a signature image with a transparent channel through the handwriting data, writes the signature value of the HASH value of the signatory's handwriting biometric information and the signature value of the HASH value of the original telegram into the transparent channel of the signature image, uses the signatory's ID number as an identifier, encrypts the handwriting biometric data and the steganographic signature value in the signature image through cryptographic encryption technology, and calculates the signature value and stores it in the signed document.

[0063] The authorization link of the authorization management module includes authorization effectiveness and authorization cancellation. The authorization letter is signed by both the legal representative and the authorized person to complete the authorization. It also supports the management of corresponding enterprise authorizations, and authorization can be closed or stopped at any time.

[0064] The authorization chain also includes secondary authorization and hierarchical authorization, that is, the enterprise authorized person can be configured as level one or above, and the upper-level authorized person will delegate the acquired authority to the lower-level authorized person. Each level of authorization generates a authorization document signed by the first level.

[0065] For authorization verification, the authorization management module verifies the authorization of the legal representative of the enterprise through a handwriting recognition algorithm, and compares the handwriting biometric information extracted from the handwriting data collected from the signature of the legal representative of the enterprise with the handwriting biometric information in the handwriting feature ID of the legal representative of the enterprise. If the comparison passes, the enterprise identity is confirmed to be valid, and the corresponding enterprise verification or operation can be performed.

[0066] The authorization management module verifies the authorization of the enterprise authorized person through the handwriting biometric information in the signature of the enterprise authorized person, and submits the enterprise name, enterprise social credit code and the name and ID number of the authorized person to the system. The system confirms the validity of the authorizer based on whether there is a corresponding authorization letter and authorization scope for the authorized person under the enterprise.

[0067] Preferably, the system supports association with various enterprise applications, combines authorization verification with enterprise verification in the business system, and implements calls during business processing, such as electronic seal systems, bidding systems, government affairs systems, etc.

[0068] Embodiment 3 In a third aspect, the present application further provides an electronic device, wherein the electronic device is equipped with the enterprise verification system based on handwriting identity features as described in the second aspect above.

[0069] See also Figure 5 , is a block diagram of an electronic device 500 that can be used as a server or client of the present application, which is an example of a hardware device that can be applied to various aspects of the present application. The electronic device is intended to represent various forms of digital electronic computer equipment, such as desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described and / or required herein.

[0070] The electronic device 500 includes a computing unit 501, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 502 or a computer program loaded from a storage unit 508 into a random access memory (RAM) 503. In the RAM 503, various programs and data required for the operation of the device 500 can also be stored. The computing unit 501, the ROM 502, and the RAM 503 are connected to each other through a bus 504. An input / output (I / O) interface 505 is also connected to the bus 504. Multiple components in the electronic device 500 are connected to the I / O interface 505, including: an input unit 506, an output unit 507, a storage unit 508, and a communication unit 509. The input unit 506 can be any type of device that can input information to the electronic device 500, and the input unit 506 can receive input digital or character information, and generate key signal input related to user settings and / or function control of the electronic device. The output unit 507 may be any type of device capable of presenting information, and may include, but is not limited to, a display, a speaker, a video / audio output terminal, a vibrator, and / or a printer. The storage unit 508 may include, but is not limited to, a magnetic disk, an optical disk. The communication unit 509 allows the electronic device 500 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks, and may include, but is not limited to, a modem, a network card, an infrared communication device, a wireless communication transceiver, and / or a chipset, such as a Bluetooth device, a WiFi device, a WiMax device, a cellular communication device, and / or the like.

[0071] The computing unit 501 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 501 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 501 performs the various methods and processes described above. For example, in some embodiments, methods for verifying various parts of an enterprise based on handwriting identity features, etc. may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 508. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 500 via the ROM 502 and / or the communication unit 509. In some embodiments, the computing unit 501 may be configured to execute in any other appropriate manner (e.g., by means of firmware).

[0072] Embodiment 4 The present application also provides a storage medium, which stores a program for implementing the enterprise verification method based on handwriting identity features described in the first embodiment above.

[0073] The program code for implementing the method of the present application can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that the program code, when executed by the processor or controller, implements the functions / operations specified in the flow chart and / or block diagram. The program code can be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0074] In the context of the present application, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0075] As used herein, the terms "machine-readable medium" and "computer-readable medium" refer to any computer program product, apparatus, and / or device (e.g., disk, optical disk, memory, programmable logic device (PLD)) for providing machine instructions and / or data to a programmable processor, including a machine-readable medium that receives machine instructions as a machine-readable signal. The term "machine-readable signal" refers to any signal for providing machine instructions and / or data to a programmable processor.

[0076] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the computer. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0077] The systems and techniques described herein may be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), and the Internet.

[0078] A computer system may include clients and servers. Clients and servers are generally remote from each other and usually interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship to each other.

[0079] The above is only an embodiment of the present application and is not intended to limit the protection scope of the present application. Any modifications, equivalent substitutions and improvements made within the spirit and scope of the present application are included in the protection scope of the present application.

Claims

1. A method for enterprise verification based on handwriting identity features, characterized in that: The method includes: verifying the authenticity of the settled enterprise and the legal representative of the enterprise, obtaining the handwriting biometric information of the legal representative of the enterprise, generating the handwriting feature ID of the legal representative of the enterprise, and completing the enterprise settlement; generating a power of attorney document signed by both the legal representative of the enterprise and the authorized person of the enterprise, obtaining the handwriting biometric information of the authorized person of the enterprise during the signing, generating the handwriting feature ID of the authorized person of the enterprise, and completing the enterprise authorization; when verifying the enterprise, obtaining the handwriting biometric information of the legal representative of the enterprise or the authorized person of the enterprise during the signing process, and comparing it with the handwriting feature ID of the legal representative of the enterprise or the handwriting feature ID of the authorized person of the enterprise to complete the verification.

2. The enterprise verification method according to claim 1, characterized in that: The enterprise settlement includes: Obtain basic information of the enterprise and verify the authenticity of the enterprise information; Authenticate the real name of the legal representative of the enterprise, collect their handwriting data and extract handwriting biometric information; Create a unified social credit code as the company's unique code, bind the legal representative's ID card information and handwriting biometric information, and generate a handwriting feature ID for the company's legal representative.

3. The enterprise verification method according to claim 1, characterized in that: The enterprise authorization includes: Obtain enterprise authorization information and generate authorization documents to be signed; Obtain the handwriting biometric information of the legal representative of the enterprise when signing the authorization letter for verification. If the verification is passed, the digital handwriting will be signed into the authorization letter, and the enterprise's electronic seal will be used to generate a signature on the authorization letter to obtain the first signed document; Generate a link to be signed for the first signed document and send it to the authorized person of the enterprise; The enterprise authorized person is authenticated by real name and the identity information of the enterprise authorized person is verified; after the verification, the handwriting biometric information of the enterprise authorized person is obtained, and the digital handwriting is signed into the authorization letter based on the first signed document to obtain the second signed document, complete the signing of the authorization letter, and generate the handwriting feature ID of the enterprise authorized person at the same time; the enterprise authorized person is configured as the first level or above, and the upper level authorized person authorizes the obtained authority to the lower level authorized person downward, and each level of authorization generates a first-level signed authorization document; Record enterprise authorization links and metadata information.

4. The enterprise verification method according to claim 3, characterized in that: In enterprise authorization, the generation of the authorization document to be signed includes: based on the obtained authorization content, combined with the stream file template technology, the corresponding content is filled into the corresponding document to generate the authorization document to be signed, wherein the content of the stream file is configurable to realize the editing of authorization content including matters, time, scope, etc., and the configured authorization content is stored through structured data.

5. The enterprise verification method according to claim 3, characterized in that: In enterprise authorization, the method for obtaining and verifying the handwriting biometric information of the legal representative of the enterprise when signing the authorization letter is: collect the handwriting data of the legal representative when signing the authorization letter, parse the handwriting biometric information in the handwriting, and compare it with the handwriting biometric information of the corresponding legal person of the enterprise. If the comparison is consistent, the verification is passed.

6. The enterprise verification method according to claim 3, characterized in that: In enterprise authorization, the digital handwriting is signed into the authorization letter by collecting the handwriting data of the signatory, parsing it to obtain the handwriting biometric information, generating a signature image with a transparent channel through the handwriting data, writing the signature value of the HASH value of the signatory's handwriting biometric information and the signature value of the HASH value of the original telegram into the transparent channel of the signature image, using the signatory's ID number as an identifier, encrypting the handwriting biometric information and the steganographic signature value in the signature image, and calculating the signature value and storing it in the authorization letter; the signatories include the legal representative of the enterprise and the authorized person.

7. The enterprise verification method according to claim 3, characterized in that: The metadata information includes but is not limited to: enterprise name, enterprise social credit code, enterprise legal representative, latest enterprise verification time, enterprise legal representative verification time, identity information of authorized persons at all levels of the enterprise, authorization letter ID at each level, authorization validity period, and authorization content.

8. The enterprise verification method according to any one of claims 3 to 7, characterized in that: The authorization content includes the name, ID number, position and contact information of the enterprise authorized person, the authorized time range, event scope and third-party business system.

9. The enterprise verification method according to any one of claims 3 to 7, characterized in that: The handwriting feature ID of the authorized person is generated based on the handwriting biometric information of the authorized person, combined with the enterprise information and the authorization letter information.

10. The enterprise verification method according to claim 1, characterized in that: The enterprise verification includes: Collect the handwriting data of the legal representative of the enterprise in the enterprise verification signature, extract the handwriting biometric information, and compare it with the handwriting biometric information in the handwriting feature ID of the legal representative of the enterprise to confirm the enterprise behavior; Alternatively, collect the handwriting data of the enterprise authorized person in the enterprise verification signature, extract the handwriting biometric information, and compare it with the handwriting biometric information in the handwriting feature ID of the enterprise authorized person, thereby confirming that the enterprise authorized person is valid, and at the same time provide the corresponding enterprise authorization link and authorization letter to the third-party business system. The third-party business system completes the verification of the authorization link and authorization letter through metadata information comparison.

11. An enterprise verification system based on handwriting identity features, characterized in that: It includes a handwriting data collection module, a handwriting data management module and an authorization management module; The handwriting data collection module collects the handwriting data of the legal representative of the enterprise and the authorized person through a mobile terminal or a terminal signature device, processes the data, and submits the personal identity information of the legal representative of the enterprise and the authorized person and the processed handwriting data to the handwriting data management module; The handwriting data management module extracts handwriting biometric information from the handwriting data and combines it with personal identity information to form a verifiable handwriting information ID for subsequent handwriting recognition and comparison; The authorization management module is responsible for enterprise entry and enterprise authorization, creating an enterprise authorization link, and performing authorization verification of the enterprise legal representative and the enterprise authorized person.

12. The enterprise authentication system according to claim 11, characterized in that: For the legal representative, the handwriting data collection module performs real-name authentication of the legal representative through the handwriting data management module based on the legal person information contained in the enterprise information after third-party enterprise authentication, and collects the handwriting data of the legal representative of the enterprise; for the authorized person, the handwriting data collection module performs real-name authentication of the authorized person through the handwriting data management module based on the authorized person's identity information submitted by the legal representative, and collects the authorized person's handwriting data.

13. The enterprise authentication system according to claim 11, characterized in that: The authorization management module creates an authorization letter file to be signed through the file template function. After the authorization letter is generated, the handwriting data collection module is called to collect the handwriting data of the signer, process and encrypt it, and then submit it to the handwriting data management module to sign the synthetic authorization letter file, so that the signed authorization letter file forms a relationship mapping between the enterprise and the authorized person, and the authorization is completed.

14. The enterprise authentication system according to claim 13, characterized in that: The handwriting data collection module collects the handwriting data of the signatory, processes and encrypts it, specifically including: collecting the handwriting data of the signatory through the digital handwriting writing SDK, and extracting the handwriting biometric information, generating a signature image with a transparent channel through the handwriting data, writing the signature value of the HASH value of the signatory's handwriting biometric information and the signature value of the HASH value of the original telegram into the transparent channel of the signature image, using the signatory's ID number as an identifier, using a symmetric encryption algorithm to encrypt the handwriting biometric information and the steganographic signature trajectory data in the signature image, and calculating the signature value, and storing it in the signed document; the signatory includes the legal representative of the enterprise and the authorized person.

15. The enterprise authentication system according to claim 13, characterized in that: The authorization management module verifies the authorization of the legal representative of the enterprise through a handwriting recognition algorithm, and compares the handwriting biometric information extracted from the handwriting data collected from the signature of the legal representative of the enterprise with the handwriting biometric information in the handwriting feature ID of the legal representative of the enterprise. If the comparison is passed, the enterprise identity is confirmed to be valid; The authorization management module verifies the authorization of the enterprise authorized person through the handwriting biometric information in the signature of the enterprise authorized person, and confirms the validity of the authorized person based on the enterprise name, enterprise social credit code, and the name and ID number of the authorized person, depending on whether there is a corresponding authorization letter and authorization scope under the enterprise.

16. The enterprise authentication system according to claim 13, characterized in that: The handwriting data management module automatically updates the effective information of the enterprise regularly or triggers the update according to the user's use.

17. An electronic device, characterized in that: The electronic device is deployed with the enterprise verification system based on handwriting identity features as described in any one of claims 11-16.

18. A storage medium, characterized in that: The storage medium stores a program for implementing any one of claims 1-10 of the enterprise verification method based on handwriting identity features.

Images