Authentication method based on authenticity and effectiveness of electronic accounting archive source

Abstract

The invention relates to an authentication method based on authenticity and validity of an electronic accounting archive source. The method comprises the following steps: step 1, a manager requests a digital signature certificate from a CA authentication center through an electronic signature system; step 2, taking the U-KEY as a carrier of a digital signature certificate, integrating the transparent seal picture into the digital signature certificate, generating a transparent seal certificate, and obtaining an electronic signature card loaded with the transparent seal certificate; 3, arranging a fingerprint sensor on the electronic signature card, inserting the electronic signature card into an intranet computer, and verifying the identity legality of the manager through the fingerprint sensor; and step 4, carrying out online signature on the electronic accounting document needing to be signed in the office system. The method has the advantages that the graph of the transparent electronic seal and the content of the electronic accounting document are tightly bound, once the bound content changes, the transparent electronic seal is invalid, and the authenticity, reliability and non-repudiation of the content of the electronic accounting document are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic seals, and in particular to a method for authenticating the authenticity and validity of the source of electronic accounting files. Background Art

[0002] In the process of archiving electronic accounting files, it is necessary to ensure the authenticity, integrity, availability and security of the electronic files. However, most of the existing public electronic accounting file archiving solutions only complete the collection of accounting management system data, such as the invention patent "An accounting electronic archiving method, device and related equipment" with publication number CN117708047A. Or further, by encrypting the basic data of the electronic accounting files, the risk of basic data leakage is prevented, thereby ensuring the security of the basic data, such as the invention patent "An encryption processing method and device for electronic accounting files" with publication number CN117614671A. None of these solutions propose a mechanism to ensure the authenticity and effectiveness of the source of electronic accounting files.

[0003] Transparent electronic seals have emerged along with the development of informatization to solve the problem of seal validity of electronic documents. This technology can be used to identify the identity of the signer of the electronic document, that is, the person who stamps the seal, while ensuring the integrity of the stamped document and the authenticity, reliability and non-repudiation of the document content. Transparent electronic seals do not refer to simple graphics of traditional seals. Due to the editability of electronic documents, attaching a transparent seal image to a document and printing it out cannot prove the legitimacy of the electronic document. Summary of the invention

[0004] In order to solve the above problems, the purpose of the present invention is to provide an authentication method based on the authenticity and validity of the source of electronic accounting files, sign the electronic accounting documents through a transparent seal certificate, bind the transparent seal image and the electronic accounting documents, and ensure that the source of the electronic accounting documents is authentic and valid.

[0005] To achieve the above object, the present invention adopts the following technical solutions:

[0006] A method for authenticating the authenticity and validity of the source of electronic accounting files, comprising the following steps:

[0007] Step 1: The administrator requests a digital signature certificate from the CA certification center through the electronic signature system;

[0008] Step 2: Using U-KEY as the carrier of the digital signature certificate, integrate the transparent seal image into the digital signature certificate, generate a transparent seal certificate, and obtain an electronic signature card containing the transparent seal certificate;

[0009] Step 3: A fingerprint sensor is set on the electronic signature card, and the electronic signature card is inserted into the intranet computer to verify the legitimacy of the administrator's identity through the fingerprint sensor;

[0010] Step 4: Sign the electronic accounting documents that need to be signed online in the office system to ensure that the source of the electronic accounting documents is authentic and valid.

[0011] Preferably, the specific process of step 2 is: compress the size and pixels of the transparent seal image to produce a blank seal, then convert the blank seal into PDF format, apply for a mold, approve, and make a seal through the electronic seal system, associate the SN code on the U-KEY with the corresponding manager, and save the blank seal in PDF format in combination with the obtained digital signature certificate into the U-KEY, thereby generating an electronic signature card using a transparent seal certificate.

[0012] Preferably, the specific steps of combining the blank seal in PDF format with the acquired digital signature certificate are: saving the hash value of the sensitive area of ​​the transparent seal image, the format of the transparent seal image, and the transparent seal image in the extension item of the digital signature certificate, thereby obtaining the transparent seal certificate.

[0013] The present invention has the following beneficial effects:

[0014] 1. The present invention adopts transparent electronic seal technology to tightly bind the transparent seal certificate generated by combining the transparent seal image with the digital certificate and the content of the electronic accounting document. Once the binding content changes, the transparent seal certificate will become invalid. The reliability of the transparent seal certificate and the integrity of its binding content can be verified at any time to ensure the authenticity, reliability and non-repudiation of the content of the electronic accounting document.

[0015] 2. The present invention combines the electronic signature card with the fingerprint sensor, so that the security of the electronic signature card is further improved. When the user uses the electronic signature card, the fingerprint verification must be performed to complete the stamping operation, which basically eliminates the possibility of illegal stamping and ensures the security of the electronic signature. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a schematic diagram of the process of the present invention. DETAILED DESCRIPTION

[0017] The present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0018] like Figure 1 As shown, a method for authenticating the authenticity and validity of the source of electronic accounting files includes the following steps:

[0019] Step 1: The manager requests a digital signature certificate from the CA Certification Center through the electronic signature system. The manager here generally refers to the person in charge of the accounting (financial) department or the chief accountant of accounting and finance. The electronic signature system is integrated with the CA Certification Center of China Electric Power Research Institute.

[0020] Step 2, using U-KEY as the carrier of the digital signature certificate, integrating the transparent seal image into the digital signature certificate, generating a transparent seal certificate, and obtaining an electronic signature card containing the transparent seal certificate. Specifically, the size and pixels of the transparent seal image are compressed to produce a blank seal, and then the blank seal is converted into PDF format, and the stamp application, approval, and seal making are carried out through the electronic seal system, and the SN code on the U-KEY is associated with the corresponding manager, and the blank seal in PDF format is combined with the obtained digital signature certificate and saved in U-KEY, thereby obtaining an electronic signature card using a transparent seal certificate. The steps of combining the blank seal in PDF format with the digital signature certificate are: the hash value of the transparent seal image sensitive area (the blank interval of the transparent seal image is a sensitive area), the format of the transparent seal image, and the transparent seal image are all saved in the extension of the digital signature certificate, thereby obtaining a transparent seal certificate. The electronic signature card can ensure the validity of the data and prevent the electronic file from being tampered with. Once modified, the transparent seal certificate will become invalid.

[0021] Step 3, a fingerprint sensor is set on the electronic signature card, and the electronic signature card is inserted into the intranet computer, and the legitimacy of the manager's identity is verified by the fingerprint sensor; the electronic accounting documents that need to be signed are signed online in the office system, and the corresponding seal type is selected for signing to ensure that the source of the electronic accounting documents is authentic and valid. The manager's fingerprint can be collected during the U-KEY application, authorization and release process, and entered into the electronic signature system. The electronic signature card of the present invention can be identified and communicated through a fingerprint sensor. It adopts an encryption chip and encryption algorithm approved by the National Security Office, a true random number generator, supports high-speed hardware RSA encryption and algorithms such as DES, 3DES, SSF33, and the key is never exported. Using fingerprint recognition technology, and through the combination with hardware layer communication technology, user information, fingerprint information, and digital certificate information can be integrated into the hardware.

[0022] The present invention determines the identity of the holder with fingerprints, improves the security level of key management, and is applied to the identity authentication of personnel who keep electronic accounting files. It completely solves the loopholes in the current technology and methods, and can effectively complete the management of personal certificates. Users open their usernames and passwords by authenticating their fingerprints, and their identities can only be confirmed through fingerprint authentication. It saves users from the trouble of remembering and losing passwords, and truly recognizes people instead of objects, which improves security. The fingerprint U-KEY also stores customers' personal information, transaction records, account books and other information, which can be accessed through fingerprints to facilitate personal management.

[0023] After the electronic accounting archives are signed and sealed, they are filed in the digital archive system in OFD format. In the digital archive system, files in OFD format can verify the reliability of the transparent electronic seal and the integrity of its bound content. Once the content changes, the corresponding transparent seal certificate will become invalid. OFD (Open Format Document) is an electronic document file format independently developed by China, aiming to achieve high-fidelity presentation and cross-platform interaction of documents. An electronic signature is a signature or seal that exists in electronic form in an electronic document. It has legal effect and can verify the authenticity and integrity of the document. OFD format documents support embedding electronic signatures in documents, thereby ensuring the immutability of document content and the authenticity of authenticated identities.

[0024] OFD format document stamp verification process:

[0025] 1. Obtain a dedicated stamp verification tool: Users need to obtain a dedicated stamp verification tool that supports the OFD format. These tools are usually provided by OFD format developers or professional third-party organizations.

[0026] 2. Open the OFD document: Use the corresponding OFD reader or stamp verification tool to open the OFD document that needs to be verified.

[0027] 3. View signature information: In the OFD document, the electronic signature will be displayed in a visual form, and users can intuitively see the style and location of the signature.

[0028] 4. Verify the validity of the signature: Use a seal verification tool to verify the signature, which usually includes the authenticity and integrity of the signature, as well as the confirmation of the signatory's identity.

[0029] 5. Check the detailed information of the signature: If the signature verification is passed, the user can further check the detailed information of the signature, such as the signing time, the identity information of the signer, etc.

[0030] 6. Check the modification history of the document: A qualified seal verification tool can display all modification records of the document since it was signed, ensuring the authenticity and integrity of the document content.

[0031] Key technical points for OFD format document stamp verification:

[0032] Signature encryption technology: The electronic signature of OFD documents usually adopts digital signature technology to ensure the security and uniqueness of the signature.

[0033] Timestamp service: The timestamp service used in OFD documents can prove the status of the document at a specific point in time and is an important means of verifying the authenticity of the document.

[0034] Signer identity verification: The reliability of the signer's identity is ensured through digital certificates and CA (Certificate Authority) system.

[0035] The present invention adopts transparent electronic seal technology to tightly bind the transparent seal certificate and the electronic accounting document content generated by combining the transparent seal image with the digital certificate. Once the bound content changes, the transparent seal certificate will become invalid. The reliability of the transparent seal certificate and the integrity of its bound content can be verified at any time to ensure the authenticity, reliability and non-repudiation of the electronic accounting document content.

[0036] The above description is only a specific implementation mode of the present invention, and does not limit the patent scope of the present invention. Any equivalent structural transformation made by using the contents of the present invention description and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A method for authenticating the authenticity and validity of the source of electronic accounting files, characterized by: The steps include: Step 1: The administrator requests a digital signature certificate from the CA certification center through the electronic signature system; Step 2: Using U-KEY as the carrier of the digital signature certificate, integrate the transparent seal image into the digital signature certificate, generate a transparent seal certificate, and obtain an electronic signature card containing the transparent seal certificate; Step 3: A fingerprint sensor is set on the electronic signature card, and the electronic signature card is inserted into the intranet computer to verify the legitimacy of the administrator's identity through the fingerprint sensor; Step 4: Sign the electronic accounting documents that need to be signed online in the office system to ensure that the source of the electronic accounting documents is authentic and valid.

2. A method for authenticating the authenticity and validity of the source of electronic accounting files according to claim 1, characterized in that: The specific process of step 2 is: compressing the size and pixels of the transparent seal image to produce a blank seal, then converting the blank seal into PDF format, applying for a mold, approving, and making a seal through the electronic seal system, associating the SN code on the U-KEY with the corresponding manager, and combining the blank seal in PDF format with the obtained digital signature certificate and saving it in U-KEY, thereby generating an electronic signature card using a transparent seal certificate.

3. The method for authenticating the authenticity and validity of the electronic accounting archives according to claim 2, characterized in that: The specific steps of combining the blank seal in PDF format with the acquired digital signature certificate are: the hash value of the transparent seal image sensitive area, the format of the transparent seal image and the transparent seal image are all saved in the extension item of the digital signature certificate, thereby obtaining the transparent seal certificate.

Images