An electronic signature system and a method for signing an electronic signature

Abstract

The present application discloses an electronic signature system and a method for signing an electronic signature, which belongs to the technical field of electronic signatures. The system includes a registration and authentication module that provides account registration and enterprise authentication for user enterprises, a test signature generation module that sends a test electronic signature and modified parameters to the user enterprise, a test signature inspection module that performs security testing on the modified test electronic signature and obtains the security testing result of the user enterprise using the signature client, a contract detection module that performs normative testing and forwards an electronic contract that complies with the norm to the signature client of the contract recipient, a contract generation module that generates an electronic contract, a test signature modification module that modifies the test electronic signature, a signature stamping module that stamps the electronic signature on the electronic contract, stamps the modified test electronic signature on the electronic contract template, and sends the stamped electronic contract and the electronic contract template to the signature server, so that the enterprise will not suffer economic losses due to signing contracts with risky enterprise accounts.

Description

Technical Field

[0001] The present application belongs to the technical field of electronic signatures, and specifically, relates to an electronic signature system and a method for signing an electronic signature. Background Art

[0002] An electronic contract, also known as an e-commerce contract, is an agreement between two or more parties reached in electronic form through an electronic information network to establish, change, or terminate property-related civil rights and obligations. It has changed the traditional practice of using paper as the original credential. The electronic signature system is a high-tech technology that has emerged with the construction of informatization. It mainly solves the problem of signing and stamping electronic documents. It is used to identify the identity of the signer of the electronic document, ensure the integrity of the document, and ensure the authenticity, reliability, and non-repudiation of the document.

[0003] Most existing electronic signature systems encrypt the electronic contracts and electronic signatures of the contracting parties during transmission to ensure the security risks of the contracting parties. They can only detect the authenticity of the electronic signatures. However, if the electronic signature of one party has been leaked to a malicious person before the signing of the contract, and the person uses the leaked electronic signature to sign and seal electronic contracts with other companies in the name of the company, when the electronic contract and the electronic signature are both authentic, the existing electronic signature system will determine that the contract initiator is compliant, making the contract signing valid, which will ultimately cause disputes or adverse consequences for the two companies and cause serious economic losses. Summary of the invention

[0004] In order to solve the above problems and technical defects, the embodiment of the present application adopts the following technical solution: an electronic signature system, including: a signature server and a signature client;

[0005] The signature server includes: a registration and authentication module, a contract storage module, a test signature generation module, a test signature verification module and a contract detection module;

[0006] The signature client includes: signature storage module, contract generation module, test signature modification module and signature stamping module;

[0007] The registration and authentication module is used to provide user enterprise account registration and enterprise authentication. After completing the registration and authentication, the user enterprise provides the enterprise's electronic contract template;

[0008] The contract storage module is used to store the user company's account data, electronic contract templates, and test electronic signatures. It also performs data encryption, locking, unlocking, and decryption on electronic contracts and electronic signatures. It also has a contract regulations database.

[0009] The test signature generation module is used to regularly generate test electronic signatures and modification parameters, encrypt the modification parameters, and send the test electronic signatures and modification parameters to the user enterprise that has completed the registration and authentication. Each generated and sent test electronic signature is equipped with an encryption number;

[0010] The test signature verification module is used to perform security detection on the test electronic signature modified by the signature client according to the modified parameters, and obtain the security detection result of the user enterprise using the signature client;

[0011] The contract detection module is used to perform a compliance test on the electronic contract with the electronic signature according to the electronic contract template, determine whether the text content in the electronic contract complies with the specification, and forward the electronic contract that complies with the specification to the signature client of the contract recipient;

[0012] The signature storage module is used to store electronic contract templates and electronic signatures, and to perform data encryption, locking, unlocking and decryption processing on electronic contracts and electronic signatures;

[0013] The contract generation module is used to call the electronic contract template, input the contract text to be signed, and generate the electronic contract;

[0014] The test signature modification module is used to receive the test electronic signature sent by the signature server and modify the test electronic signature according to the modification parameters;

[0015] The signature and stamping module is used to call the electronic signature and the modified test electronic signature, stamp the electronic signature on the electronic contract, stamp the modified test electronic signature on the electronic contract template, and send the stamped electronic contract and electronic contract template to the signature server.

[0016] Preferably, the test electronic signature is modified according to the modification parameters in the test signature modification module by using the modification parameters received last time. After the user enterprise completes the registration and authentication, it will receive the first modification parameters. Each modification parameter received will be used for the next modification of the test electronic signature.

[0017] Preferably, the signature and stamping module stamps the modified test electronic signature on the electronic contract template by first receiving multiple sets of encrypted random numbers sent by the server, the encrypted random numbers being the encryption numbers of the test electronic signature, retrieving the corresponding test electronic signature according to the encryption number, and then stamping the retrieved test electronic signature on the electronic contract template.

[0018] Furthermore, the specific process of the safety detection is as follows:

[0019] According to the multiple sets of encrypted random numbers sent by the signature server to the signature client, the corresponding test electronic signature and modification parameters are obtained;

[0020] Locate the test electronic signature modified by the signature client in the electronic contract template sent by the signature client to obtain the signature coordinates;

[0021] Modify each test electronic signature according to the modification parameters, and stamp the modified test electronic signature on the electronic contract template according to the signature coordinates;

[0022] Perform security calculation on the electronic contract template stamped by the signature server and the electronic contract template stamped and sent by the signature client;

[0023] A security threshold is preset. When the security calculation result is higher than the security threshold, the user enterprise using the signature client is judged as a contract security source. Otherwise, the user enterprise using the signature client is judged as a contract suspicious risk source.

[0024] Furthermore, the security calculation is to perform similarity calculation between the signature server in the electronic contract template stamping area and the signature client in the electronic contract template stamping area, and then combine the similarity calculation results of each test electronic signature to obtain a security value through security calculation, and compare the security value with the security threshold to obtain a judgment result. The security calculation formula is as follows:

[0025] Q=Σ(K1+K2+...+K n ) 2

[0026] Among them, Kn is the similarity value of the nth test electronic signature in the stamping area of ​​the two electronic contract templates, and Q is the security value.

[0027] Furthermore, it also includes a risk judgment module, which is used to obtain historical detection results of user companies that are suspicious risk sources of contracts, conduct risk assessment on the signature client of the target user company based on the historical detection results, obtain risk assessment results, and judge whether the target user company is a contract security source or a contract risk source based on the risk assessment results. If it is a contract risk source, the target user company will be blacklisted and warned.

[0028] Furthermore, the risk assessment process is as follows:

[0029] The signature server calls the test signature generation module to generate multiple test electronic signatures and modify parameters, obtains the encryption number of the historical test electronic signatures, and sends the newly generated test electronic signatures and modified parameters as well as the encryption numbers of all test electronic signatures to the target user enterprise;

[0030] The signature client of the target user enterprise calls the test signature modification module and the signature stamping module, modifies the newly received test electronic signature according to the modification parameters, stamps the modified test electronic signature on the electronic contract template, obtains the historically stamped electronic contract template according to the encrypted number, and sends all the stamped electronic contract templates to the signature server;

[0031] The signature server locates, modifies and stamps each test electronic signature according to the stamped electronic contract template sent by the signature client;

[0032] Perform security calculation on the electronic contract template stamped by the signature server and the electronic contract template stamped by the signature client to obtain a standard security value;

[0033] Obtain the historical safety value obtained by the historical safety calculation in the historical detection results;

[0034] The standard safety value and the historical safety value are used for risk calculation to obtain the risk assessment value, and a risk threshold is preset. The risk assessment value is compared with the risk threshold, and the target user enterprise is judged whether it is a contract safety source or a contract risk source based on the comparison result.

[0035] Furthermore, the risk calculation formula is as follows:

[0036] P=Q t *α+((Q1*L1) 2 +(Q2*L2) 2 +...+(Q i *L i ) 2 )*β

[0037] Among them, P is the risk assessment value, Q t is the standard safety value, Q i is the i-th historical safety value, L i is the preset weight of the i-th historical safety value, α is the preset standard weight, and β is the preset total historical weight;

[0038] When the risk assessment value P is higher than the risk threshold, the target user enterprise is judged to be a contract safety source, otherwise it is a contract risk source.

[0039] A method for signing an electronic signature comprises the following steps:

[0040] Step 1: The contract initiator and the contract recipient register and authenticate their companies on the server. The user company uploads the electronic contract template to the server. The server generates the initial modification parameters to the contract initiator and the contract recipient. The server periodically generates the test electronic signature, modification parameters and encryption number of the test electronic signature, and sends them to the contract initiator and the contract recipient.

[0041] Step 2: The contract initiator and the contract receiver both receive the test electronic signature, modification parameters and the encryption number of the test electronic signature sent by the server, and modify the test electronic signature according to the modification parameters;

[0042] Step 3: The contract initiator generates an electronic contract, stamps the electronic signature on the electronic contract, and sends the stamped electronic contract to the server;

[0043] Step 4: When the server receives the sealed electronic contract, it sends multiple sets of encrypted random numbers to the contract initiator. The contract initiator obtains the encryption number of the test electronic signature, retrieves the modified test electronic signature according to the encryption number, and then stamps the modified test electronic signature on the electronic contract template, and then sends the sealed electronic contract template to the server;

[0044] Step 5: The server performs a security check on the electronic contract template with a seal, obtains the security check result of the contract initiator, performs a contract specification check on the electronic contract with a seal, and determines whether the text content in the electronic contract complies with the specification. If the contract initiator is a contract security source, the electronic contract with a seal that complies with the specification is sent to the contract recipient;

[0045] Step 6: The contract recipient electronically stamps the electronic contract that complies with the specification for the second time, and sends the electronic contract with the two stamps to the server;

[0046] Step 7: When the server receives the electronic contract with two seals, it sends multiple sets of encrypted random numbers to the contract recipient. The contract recipient obtains the encryption number of the test electronic signature, retrieves the modified test electronic signature according to the encryption number, and then stamps the modified test electronic signature on the electronic contract template, and then sends the sealed electronic contract template to the server;

[0047] Step 8: The server performs a security check on the sealed electronic contract template and obtains the security check result of the contract recipient. If the contract recipient is the contract security source, the electronic contract with two seals is sent to the contract initiator. The contract initiator and the contract recipient complete the electronic signature processing of the electronic contract.

[0048] A device for signing an electronic signature, the device comprising a service processor and a distributed memory, the service processor being connected to the memory, the distributed memory storing a service self-management program configured to store machine-readable instructions, the service processor executing the service self-management program, and the instructions, when executed by the processor, implementing the method for signing an electronic signature as described above.

[0049] Compared with the prior art, the beneficial effects of the embodiments of the present application are:

[0050] (1) This application allows the signature client used by the user enterprise to modify the test electronic signature by periodically generating a test electronic signature and modifying parameters on the signature server. If the user enterprise account is subsequently stolen and logged in from a different location, the modified test electronic signature cannot pass the security test. Only the signature client that passes the security test will have its electronic contract forwarded by the signature server to the other party to the contract, so that the other party to the contract will not suffer economic losses due to signing a contract with a risky enterprise account.

[0051] (2) This application allows both the signature client and the signature server to modify multiple test electronic signatures according to the modified parameters, and then stamps the modified test electronic signatures on the electronic contract template, and allows the signature server to perform security checks on the multiple stamped electronic contract templates, by calculating the similarity of each electronic contract template between the signature client and the signature server, and then securely calculating to obtain a security value, and comparing the security value with the security threshold, so as to determine whether the signature client is a contract security source or a contract suspicious risk source, thereby preventing the risk source from transmitting the electronic contract to other enterprises, and preventing the enterprise from signing a contract with the risk source;

[0052] (3) This application obtains historical detection results of user companies that are suspicious sources of contract risk, conducts risk assessment on the signature client of the target user company, obtains risk assessment results, and determines whether the target user company is a contract safety source or a contract risk source. If it is a contract risk source, the target user company is blacklisted and warned. By further judging and ultimately processing the suspicious contract risk source, security and accuracy are improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In the attached picture:

[0054] Figure 1 A schematic diagram of the system structure of an embodiment of the present application;

[0055] Figure 2 A schematic diagram of a method flow of an embodiment of the present application;

[0056] Figure 3 This is a schematic diagram of the device structure of an embodiment of the present application. DETAILED DESCRIPTION

[0057] In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Generally, the components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various different configurations.

[0058] Example 1: Figure 1 As shown, an electronic signature system includes: a signature server and a signature client;

[0059] The signing server includes:

[0060] The registration and authentication module is used to provide user enterprise account registration and enterprise authentication. After completing the registration and authentication, the user enterprise provides the enterprise's electronic contract template;

[0061] The contract storage module is used to store the user company's account data, electronic contract templates, and test electronic signatures. It also performs data encryption, locking, unlocking, and decryption on electronic contracts and electronic signatures. It also has a contract regulations database.

[0062] After the enterprise completes the certification and registration, the latest electronic contract template will be uploaded regularly.

[0063] The test signature generation module is used to regularly generate test electronic signatures and modification parameters, encrypt the modification parameters, and send the test electronic signatures and modification parameters to the user enterprise that has completed the registration and authentication. Each generated and sent test electronic signature is equipped with an encryption number;

[0064] The test electronic signature can be a picture, and the modification parameters are pixel modification coordinates and pixel modification values. The pixel modification values ​​are transparency, pigment value, contrast and brightness. The coordinates are modified according to multiple pixels, and the coordinates are positioned on the picture of the test electronic signature. Modifications are made on the positioned pixels according to the pixel modification values.

[0065] The test signature verification module is used to perform security detection on the test electronic signature modified by the signature client according to the modified parameters, and obtain the security detection result of the user enterprise using the signature client;

[0066] The specific process of safety testing is as follows:

[0067] According to the multiple sets of encrypted random numbers sent by the signature server to the signature client, the corresponding test electronic signature and modification parameters are obtained;

[0068] Locate the test electronic signature modified by the signature client in the electronic contract template sent by the signature client to obtain the signature coordinates;

[0069] Modify each test electronic signature according to the modification parameters, and stamp the modified test electronic signature on the electronic contract template according to the signature coordinates;

[0070] Perform security calculation on the electronic contract template stamped by the signature server and the electronic contract template stamped and sent by the signature client;

[0071] A security threshold is preset. When the security calculation result is higher than the security threshold, the user enterprise using the signature client is judged as a contract security source. Otherwise, the user enterprise using the signature client is judged as a contract suspicious risk source.

[0072] Whether it is the electronic contract template stamping area of ​​the signature server or the electronic contract template stamping area of ​​the signature client, there is more than just the modified test electronic signature. The signature may be stamped on text, such as "Stamping Area", "Date", "Company Name", and these words will overlap with the signature. At the same time, the electronic signature will not have human errors like manual stamping. The coordinate position in the entire page of the contract is accurate and stable. Therefore, it is necessary to locate the stamping area first, and then crop the stamping area, and perform similarity calculations and security calculations on the two cropped images.

[0073] The security calculation is to calculate the similarity between the signature server in the electronic contract template stamping area and the signature client in the electronic contract template stamping area, and then combine the similarity calculation results of each test electronic signature to obtain the security value through security calculation. The security value is compared with the security threshold to obtain the judgment result. The security calculation formula is as follows:

[0074] Q=Σ(K1+K2+...+K n ) 2

[0075] Among them, Kn is the similarity value of the nth test electronic signature in the stamping area of ​​the two electronic contract templates, and Q is the security value.

[0076] The contract detection module is used to perform a compliance test on the electronic contract with the electronic signature according to the electronic contract template, determine whether the text content in the electronic contract complies with the specification, and forward the electronic contract that complies with the specification to the signature client of the contract recipient;

[0077] If both parties of the contract signing enterprise are contract security sources, then both parties can safely stamp the electronic contract with electronic signatures. Even if some of the text content in the electronic contract does not meet the standards, both parties can communicate and modify it and re-stamp it.

[0078] If at least one of the two companies signing the contract is a source of suspicious risk in the contract, then regardless of whether the text content of the electronic contract complies with the regulations, the electronic contract will be directly terminated.

[0079] It also includes a risk judgment module, which is used to obtain historical detection results of user companies that are suspected risk sources of the contract, conduct risk assessment on the signature client of the target user company based on the historical detection results, obtain risk assessment results, and judge whether the target user company is a contract security source or a contract risk source based on the risk assessment results. If it is a contract risk source, the target user company will be blacklisted and warned.

[0080] The risk assessment process is as follows:

[0081] The signature server calls the test signature generation module to generate multiple test electronic signatures and modify parameters, obtains the encryption number of the historical test electronic signatures, and sends the newly generated test electronic signatures and modified parameters as well as the encryption numbers of all test electronic signatures to the target user enterprise;

[0082] The signature client of the target user enterprise calls the test signature modification module and the signature stamping module, modifies the newly received test electronic signature according to the modification parameters, stamps the modified test electronic signature on the electronic contract template, obtains the historically stamped electronic contract template according to the encrypted number, and sends all the stamped electronic contract templates to the signature server;

[0083] The signature server locates, modifies and stamps each test electronic signature according to the stamped electronic contract template sent by the signature client;

[0084] Perform security calculation on the electronic contract template stamped by the signature server and the electronic contract template stamped by the signature client to obtain a standard security value;

[0085] Obtain the historical safety value obtained by the historical safety calculation in the historical detection results;

[0086] The standard safety value and the historical safety value are used for risk calculation to obtain the risk assessment value, and a risk threshold is preset. The risk assessment value is compared with the risk threshold, and the target user enterprise is judged whether it is a contract safety source or a contract risk source based on the comparison result.

[0087] If the enterprise has a system failure, communication failure, etc. for a short period of time, which causes the stamped electronic contract template sent to the signature server together with the stamped electronic contract to be abnormal, the signature server will judge it as a suspicious contract risk source, but there is no problem with the account itself and the account user. Therefore, it will be re-judged through risk assessment. If the signature client is only abnormal occasionally, it will be re-judged as a contract security source. If there are a large number of abnormalities, it will be judged as a contract risk source. The blacklisting process is to manually query and authenticate the enterprise to which the signature client belongs, and the blacklisting will be lifted after the manual authentication of the enterprise is lifted. At the same time, the warning process is to announce and notify other enterprises that attempt to sign a contract with the enterprise within a short period of time.

[0088] The risk calculation formula is as follows:

[0089] P=Q t *α+((Q1*L1) 2 +(Q2*L2) 2 +...+(Q i *L i ) 2 )*β

[0090] Among them, P is the risk assessment value, Q t is the standard safety value, Q i is the i-th historical safety value, L i is the preset weight of the i-th historical safety value, α is the preset standard weight, and β is the preset total historical weight;

[0091] When the risk assessment value P is higher than the risk threshold, the target user enterprise is judged to be a contract safety source, otherwise it is a contract risk source.

[0092] The signing client includes:

[0093] The signature storage module is used to store electronic contract templates and electronic signatures, and to perform data encryption, locking, unlocking and decryption processing on electronic contracts and electronic signatures;

[0094] The contract generation module is used to call the electronic contract template, input the contract text to be signed, and generate the electronic contract;

[0095] The test signature modification module is used to receive the test electronic signature sent by the signature server and modify the test electronic signature according to the modification parameters;

[0096] In the test signature modification module, the test electronic signature is modified according to the modification parameters. The test electronic signature is modified using the modification parameters received last time. When the user enterprise completes the registration and authentication, it will receive the first modification parameters. Each modification parameter received will be used for the next test electronic signature modification.

[0097] The modified parameters are one-time data. When the test signature modification module is modified, the modified parameters will be automatically destroyed. The modified test electronic signature is bound to the hardware mechanical code of the host where the signature client is installed. When the user company installs the signature client on a new host, the historically modified test electronic signature cannot be obtained.

[0098] When an enterprise user installs a signature client on a new host, it needs to re-authenticate with the signature server. The multiple sets of encrypted random numbers subsequently sent by the signature server will not contain the test electronic signature encryption number corresponding to the old host.

[0099] The signature and stamping module is used to call the electronic signature and the modified test electronic signature, stamp the electronic signature on the electronic contract, stamp the modified test electronic signature on the electronic contract template, and send the stamped electronic contract and the electronic contract template to the signature server;

[0100] The signature and stamping module stamps the modified test electronic signature on the electronic contract template by first receiving multiple sets of encrypted random numbers sent by the server, the encrypted random numbers being the encryption numbers of the test electronic signature, retrieving the corresponding test electronic signature according to the encryption number, and then stamping the retrieved test electronic signature on the electronic contract template.

[0101] Example 2: Figure 2 As shown, a method for signing an electronic signature includes the following steps:

[0102] The contract initiator and the contract recipient register and authenticate their companies on the server. The user company uploads the electronic contract template to the server, and the server generates the initial modification parameters to the contract initiator and the contract recipient.

[0103] The server periodically generates a test electronic signature, modification parameters, and an encrypted number for the test electronic signature, and sends them to the contract initiator and contract recipient;

[0104] The encryption number corresponds to the last modified parameters, and the initial modified parameters are used for the first test electronic signature modification. By sending the test electronic signature and the modified parameters separately, even if the corporate account is logged in by someone remotely, the abnormal person who logs in will not be able to modify the test electronic signature even if it uses the company's regular electronic signature.

[0105] The contract initiator and the contract receiver both receive the test electronic signature, modification parameters and the encrypted number of the test electronic signature sent by the server, and modify the test electronic signature according to the last modification parameters;

[0106] The contract initiator generates an electronic contract, stamps the electronic signature on the electronic contract, and sends the stamped electronic contract to the server;

[0107] When the server receives the sealed electronic contract, it sends multiple sets of encrypted random numbers to the contract initiator, each set of encrypted random numbers corresponds to an encryption number. The contract initiator obtains the encryption number of the test electronic signature, retrieves the modified test electronic signature according to the encryption number, and then stamps the modified test electronic signature on the electronic contract template, and then sends the sealed electronic contract template to the server;

[0108] For example, the encryption number of the latest test electronic signature sent by the server is 9, the encryption number corresponding to the modification parameters is 10, and the encryption numbers corresponding to the multiple sets of encrypted random numbers sent this time are 1, 4, 5, 7, and 8. The contract initiator will stamp the 1st, 4th, 5th, 7th, and 8th modification test electronic signatures on five electronic contract templates respectively, and send these five stamped electronic contract templates to the server. In this way, even if an abnormal person has a test electronic signature and modification parameters for a short period of time, he cannot obtain the past test electronic signature and modification parameters, and the server can identify him.

[0109] The server performs a security check on the electronic contract template with a seal, obtains the security check result of the contract initiator, performs a contract specification check on the electronic contract with a seal, and determines whether the text content in the electronic contract complies with the specification. If the contract initiator is a contract security source, the electronic contract with a seal that complies with the specification is sent to the contract recipient;

[0110] The contract recipient electronically stamps the electronic contract that complies with the specifications for a second time, and sends the electronic contract with the two stamps to the server;

[0111] When the server receives the electronic contract with two seals, it sends multiple sets of encrypted random numbers to the contract recipient. The contract recipient obtains the encryption number of the test electronic signature according to the encrypted random numbers, retrieves the modified test electronic signature according to the encryption number, and then stamps the modified test electronic signature on the electronic contract template, and then sends the sealed electronic contract template to the server;

[0112] The server performs a security check on the sealed electronic contract template and obtains the security check result of the contract recipient. If the contract recipient is the contract security source, the electronic contract with two seals is sent to the contract initiator. The contract initiator and the contract recipient complete the electronic signature processing of the electronic contract.

[0113] Example 3: Figure 3 As shown, a device for signing an electronic signature includes a service processor and a distributed memory, wherein the service processor is connected to the memory, wherein the distributed memory stores a service self-management program configured to store machine-readable instructions, and the service processor executes the service self-management program. When the instructions are executed by the processor, the method for signing an electronic signature as described in Example 2 is implemented.

[0114] The above-mentioned embodiments only express the preferred implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for ordinary technicians in this field, several modifications, improvements and substitutions can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application.

Claims

1. An electronic signature system, characterized in that: include: Signature server and signature client; The signature server includes: a registration and authentication module, a contract storage module, a test signature generation module, a test signature verification module and a contract detection module; The signature client includes: signature storage module, contract generation module, test signature modification module and signature stamping module; The registration and authentication module is used to provide user enterprise account registration and enterprise authentication. After completing the registration and authentication, the user enterprise provides the enterprise's electronic contract template; The contract storage module is used to store the user company's account data, electronic contract templates, and test electronic signatures. It also performs data encryption, locking, unlocking, and decryption on electronic contracts and electronic signatures. It also has a contract regulations database. The test signature generation module is used to regularly generate test electronic signatures and modification parameters, encrypt the modification parameters, and send the test electronic signatures and modification parameters to the user enterprise that has completed the registration and authentication. Each generated and sent test electronic signature is equipped with an encryption number; The test signature verification module is used to perform security detection on the test electronic signature modified by the signature client according to the modified parameters, and obtain the security detection result of the user enterprise using the signature client; The contract detection module is used to perform a compliance test on the electronic contract with the electronic signature according to the electronic contract template, determine whether the text content in the electronic contract complies with the specification, and forward the electronic contract that complies with the specification to the signature client of the contract recipient; The signature storage module is used to store electronic contract templates and electronic signatures, and to perform data encryption, locking, unlocking and decryption processing on electronic contracts and electronic signatures; The contract generation module is used to call the electronic contract template, input the contract text to be signed, and generate the electronic contract; The test signature modification module is used to receive the test electronic signature sent by the signature server and modify the test electronic signature according to the modification parameters; The signature and stamping module is used to call the electronic signature and the modified test electronic signature, stamp the electronic signature on the electronic contract, stamp the modified test electronic signature on the electronic contract template, and send the stamped electronic contract and electronic contract template to the signature server.

2. An electronic signature system according to claim 1, characterized in that: The test signature modification module modifies the test electronic signature according to the modification parameters by using the modification parameters received last time. After the user enterprise completes the registration and authentication, it will receive the first modification parameters. Each modification parameter received will be used for the next modification of the test electronic signature.

3. An electronic signature system according to claim 1, characterized in that: The signature and stamping module stamps the modified test electronic signature on the electronic contract template by first receiving multiple sets of encrypted random numbers sent by the server, the encrypted random numbers being the encryption numbers of the test electronic signature, retrieving the corresponding test electronic signature according to the encryption number, and then stamping the retrieved test electronic signature on the electronic contract template.

4. An electronic signature system according to claim 3, characterized in that: The specific process of the safety detection is as follows: According to the multiple sets of encrypted random numbers sent by the signature server to the signature client, the corresponding test electronic signature and modification parameters are obtained; Locate the test electronic signature modified by the signature client in the electronic contract template sent by the signature client to obtain the signature coordinates; Modify each test electronic signature according to the modification parameters, and stamp the modified test electronic signature on the electronic contract template according to the signature coordinates; Perform security calculation on the electronic contract template stamped by the signature server and the electronic contract template stamped and sent by the signature client; A security threshold is preset. When the security calculation result is higher than the security threshold, the user enterprise using the signature client is judged as a contract security source. Otherwise, the user enterprise using the signature client is judged as a contract suspicious risk source.

5. An electronic signature system according to claim 4, characterized in that: The security calculation is to calculate the similarity between the signature server in the electronic contract template stamping area and the signature client in the electronic contract template stamping area, and then combine the similarity calculation results of each test electronic signature to obtain a security value through security calculation, and compare the security value with the security threshold to obtain a judgment result. The security calculation formula is as follows: Q=Σ(K1+K2+...+K n ) 2 Among them, Kn is the similarity value of the nth test electronic signature in the stamping area of ​​the two electronic contract templates, and Q is the security value.

6. An electronic signature system according to claim 5, characterized in that: It also includes a risk judgment module, which is used to obtain historical detection results of user companies that are suspected risk sources of the contract, conduct risk assessment on the signature client of the target user company based on the historical detection results, obtain risk assessment results, and judge whether the target user company is a contract security source or a contract risk source based on the risk assessment results. If it is a contract risk source, the target user company will be blacklisted and warned.

7. An electronic signature system according to claim 6, characterized in that: The risk assessment process is as follows: The signature server calls the test signature generation module to generate multiple test electronic signatures and modify parameters, obtains the encryption number of the historical test electronic signatures, and sends the newly generated test electronic signatures and modified parameters as well as the encryption numbers of all test electronic signatures to the target user enterprise; The signature client of the target user enterprise calls the test signature modification module and the signature stamping module, modifies the newly received test electronic signature according to the modification parameters, stamps the modified test electronic signature on the electronic contract template, obtains the historically stamped electronic contract template according to the encrypted number, and sends all the stamped electronic contract templates to the signature server; The signature server locates, modifies and stamps each test electronic signature according to the stamped electronic contract template sent by the signature client; Perform security calculation on the electronic contract template stamped by the signature server and the electronic contract template stamped by the signature client to obtain a standard security value; Obtain the historical safety value obtained by the historical safety calculation in the historical detection results; The standard safety value and the historical safety value are used for risk calculation to obtain the risk assessment value, and a risk threshold is preset. The risk assessment value is compared with the risk threshold, and the target user enterprise is judged whether it is a contract safety source or a contract risk source based on the comparison result.

8. An electronic signature system according to claim 7, characterized in that: The risk calculation formula is as follows: P=Q t *α+((Q1*L1) 2 +(Q2*L2) 2 +...+(Q i *L i ) 2 )*β Among them, P is the risk assessment value, Q t is the standard safety value, Q i is the i-th historical safety value, L i is the preset weight of the i-th historical safety value, α is the preset standard weight, and β is the preset total historical weight; When the risk assessment value P is higher than the risk threshold, the target user enterprise is judged to be a contract safety source, otherwise it is a contract risk source.

9. A method for signing an electronic signature, characterized in that: The following steps are involved: Step 1: The contract initiator and the contract recipient register and authenticate their companies on the server. The user company uploads the electronic contract template to the server. The server generates the initial modification parameters to the contract initiator and the contract recipient. The server periodically generates the test electronic signature, modification parameters and encryption number of the test electronic signature, and sends them to the contract initiator and the contract recipient. Step 2: The contract initiator and the contract receiver both receive the test electronic signature, modification parameters and the encryption number of the test electronic signature sent by the server, and modify the test electronic signature according to the modification parameters; Step 3: The contract initiator generates an electronic contract, stamps the electronic signature on the electronic contract, and sends the stamped electronic contract to the server; Step 4: When the server receives the sealed electronic contract, it sends multiple sets of encrypted random numbers to the contract initiator. The contract initiator obtains the encryption number of the test electronic signature, retrieves the modified test electronic signature according to the encryption number, and then stamps the modified test electronic signature on the electronic contract template, and then sends the sealed electronic contract template to the server; Step 5: The server performs a security check on the electronic contract template with a seal, obtains the security check result of the contract initiator, performs a contract specification check on the electronic contract with a seal, and determines whether the text content in the electronic contract complies with the specification. If the contract initiator is a contract security source, the electronic contract with a seal that complies with the specification is sent to the contract recipient; Step 6: The contract recipient electronically stamps the electronic contract that complies with the specification for the second time, and sends the electronic contract with the two stamps to the server; Step 7: When the server receives the electronic contract with two seals, it sends multiple sets of encrypted random numbers to the contract recipient. The contract recipient obtains the encryption number of the test electronic signature, retrieves the modified test electronic signature according to the encryption number, and then stamps the modified test electronic signature on the electronic contract template, and then sends the sealed electronic contract template to the server; Step 8: The server performs a security check on the sealed electronic contract template and obtains the security check result of the contract recipient. If the contract recipient is the contract security source, the electronic contract with two seals is sent to the contract initiator. The contract initiator and the contract recipient complete the electronic signature processing of the electronic contract.

10. A device for signing an electronic signature, characterized in that: The device includes a service processor and a distributed memory, the service processor is connected to the memory, the distributed memory stores a service self-management program, and is configured to store machine-readable instructions. The service processor executes the service self-management program, and when the instructions are executed by the processor, the method for signing an electronic signature as described in claim 9 is implemented.

Images