Invoice issuing method and special device thereof

Abstract

The invention relates to an invoice issuing method and a special device thereof, and the method comprises the steps: carrying out the verification of a signature of an invoice issuing platform through an approval agency before the signature, and carrying out the verification of the signature of a previous process through a client, an issuing agency, the invoice issuing platform and the approval agency before the respective signature; if the electronic invoice is illegally tampered or counterfeited in the issuing process, the verification cannot be passed because an attacker cannot master the signature private key of any participant, so that the unforgeability of each link of the electronic invoice issuing is ensured, the invoice data cannot be tampered or counterfeited, and the verification efficiency is improved. The integrity and authenticity of the electronic invoice can be ensured, and the safety and controllability of invoice data can be ensured.

Description

Technical Field

[0001] The present application relates to the field of invoices, and in particular to an invoice issuing method and a dedicated device thereof. Background Art

[0002] Electronic invoices are a product of the information age. Like ordinary invoices, they are issued by the tax bureau to merchants. The invoice numbers are uniformly coded nationwide and use uniform anti-counterfeiting technology. They are assigned to merchants, and the electronic invoices are signed by the electronic tax bureau. In order to regulate the issue of invoicing in the e-commerce market, the best measure at present is to accelerate the popularization of the use of electronic invoices. Like traditional invoices, how to ensure the authenticity, integrity and non-forgeability of the invoice content is the top priority in the actual use of electronic invoices. Summary of the invention

[0003] The purpose of the present invention is to overcome the deficiencies in the prior art and provide an invoice issuance method and a dedicated device thereof, wherein the approval agency verifies the signature of the invoicing platform before signing, and the client, issuing agency, invoicing platform and approval agency will respectively check the signature of the previous process before signing each of them; if the electronic invoice issuance process is illegally tampered with or forged, the verification cannot pass because the attacker cannot obtain the signature private key of any participant, thereby ensuring the non-forgeability of each link in the issuance of electronic invoices, and ensuring that the invoice data cannot be tampered with or forged, which can not only ensure the integrity and authenticity of the electronic invoice, but also ensure the security and controllability of the invoice data.

[0004] This application first discloses an invoice issuance method, step 1: blank invoice application, which is performed before a transaction is generated, and the client applies for an invoice from an issuing agency for use in the transaction;

[0005] Step 2: Invoice information generation. After the transaction is generated, the client generates invoicing data based on the transaction information and the identity information of both parties, signs the invoicing data to generate invoice information, and then sends it to the invoicing platform;

[0006] Step 3: Electronic invoice issuance: the client sends the electronic invoice information to the invoicing platform. The invoicing platform searches for a blank electronic invoice in the storage system based on the client identity information in the electronic invoice information, and generates an electronic invoice for approval based on the electronic invoice information and the blank electronic invoice signature.

[0007] Step 4: Electronic invoice approval. The approval agency will approve the invoice information and the authority of the invoicing platform. If approved, the electronic invoice will officially take effect.

[0008] Preferably, the specific process in step 1 is as follows: the client sends identity information to the issuing agency to apply for a blank invoice; the issuing agency reviews the client's identity information and its invoicing authority. If the review is passed, blank electronic invoice information is generated according to the invoice template, client public key, and client identification name information, otherwise the application fails; the issuing agency checks the generated blank electronic invoice information, and uses the issuing agency's key to uniformly sign the blank electronic invoice information that has passed the inspection, generates blank electronic invoices, and stores them in the storage system.

[0009] Preferably, if the review is passed, blank electronic invoice information is generated based on the invoice template, client public key, and client identification name information.

[0010] Preferably, the specific process of step 2 is as follows: after the transaction occurs, the client generates invoicing data based on the identity information of both parties to the transaction and the specific content of the transaction, including the name and identification number of the buyer and the seller, and the name, type, quantity and amount of the transaction goods; the client checks the invoicing data, and after the check is passed, uses the client private key to sign the invoicing data; the client generates electronic invoice information based on the invoicing data, the client public key, and the client signature, and sends the generated electronic invoice information to the invoicing platform.

[0011] Preferably, the invoicing data specifically includes: the name and identification number of the buyer and the seller, and the name, type, quantity and amount of the transaction goods.

[0012] Preferably, the specific process of step 3 is as follows: after receiving the electronic invoice issuance request, the invoicing platform first verifies whether the client public key is valid; after the verification is passed, multiple client signatures are centrally verified; finally, the available blank electronic invoices are queried in the storage system according to the client's identity information, otherwise the invoicing request fails; after the blank electronic invoice is queried in the storage system, first query whether the issuing agency's public key is a legal public key, if the issuing agency's public key is illegal, the invoicing request fails; the issuing agency's signature with a legal public key is uniformly verified, if the verification fails, the invoicing request fails; the invoicing platform combines the transaction information with the blank electronic invoice, and uses the invoicing platform private key to sign it uniformly to obtain the electronic invoice to be approved.

[0013] Preferably, the specific process of step 4 is as follows: the approval agency receives the electronic invoice to be approved, and queries whether the public key of the invoicing platform therein is a legal public key. If the public key is illegal, the invoicing request is terminated; after the public key query is passed, the approval agency performs a unified verification of the signature of the invoicing platform, and the invoicing platform signature that fails the verification is an illegal signature, and the invoicing request is terminated; the approval agency queries whether the public key of the issuing agency therein is a legal public key. If the public key is illegal, the invoicing request is terminated; after the public key query is passed, the approval agency performs a unified verification of the signature of the issuing agency, and the signature of the issuing agency that fails the verification is an illegal signature, and the invoicing request is terminated; the approval agency uses the public key of the approval agency to sign the electronic invoice to be approved, and generates a valid electronic invoice together with the generated signature and the electronic invoice to be approved; finally, the generated valid electronic invoice is returned to the client.

[0014] According to another aspect of the present application, a dedicated invoice issuance device is provided, the device adopts an invoice issuance method according to any one of claims 1 to 7, and the device comprises:

[0015] Blank invoice application module, used by the client to apply for invoices from the issuing agency for transaction use;

[0016] The invoice information generation module is used to generate invoice data based on transaction information and identity information of both parties, and to sign the invoice data to generate invoice information;

[0017] The electronic invoice issuance module is used to generate an electronic invoice to be approved based on the electronic invoice information and the blank electronic invoice signature;

[0018] The electronic invoice approval module is used to approve invoice information and invoicing platform permissions.

[0019] Preferably, the device further comprises: a storage module, which is used to store the generated blank electronic invoice.

[0020] According to another aspect of the present application, a dedicated invoice issuance system includes:

[0021] at least one processor; and a memory in communication with the at least one processor; wherein,

[0022] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the invoice issuance method according to any one of claims 1 to 7.

[0023] The present invention verifies the signature of the invoicing platform by the approval agency before signing. The client, issuing agency, invoicing platform and approval agency will respectively check the signature of the previous process before signing each of them. If the electronic invoice is illegally tampered with or forged during the issuance process, the verification cannot pass because the attacker cannot obtain the signature private key of any participant, thereby ensuring the unforgeability of each link in the issuance of electronic invoices and ensuring that the invoice data cannot be tampered with or forged. This can not only ensure the integrity and authenticity of the electronic invoice, but also ensure the security and controllability of the invoice data. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 This is a blank invoice application flow chart of the present invention;

[0025] Figure 2 A schematic diagram of invoice information generation in the present invention;

[0026] Figure 3 A flowchart for issuing electronic invoices in the present invention;

[0027] Figure 4 This is a flowchart of the electronic invoice approval in the present invention. DETAILED DESCRIPTION

[0028] The present invention will be further described below in conjunction with the embodiments.

[0029] The electronic invoice issuance program includes four steps: blank invoice application, invoice information generation, electronic invoice issuance and electronic invoice approval.

[0030] like Figure 1 The figure shows the blank invoice application flow chart, which is carried out before the transaction occurs. The client applies for an invoice from the issuing agency for the transaction. The client sends the identity information to the issuing agency to apply for a blank invoice; the issuing agency reviews the client's identity information and its invoicing authority. If the review is passed, a blank electronic invoice information is generated based on the invoice template, the client's public key, and the client's identification name information. Otherwise, the application fails; the issuing agency checks the generated blank electronic invoice information, and uses the issuing agency's key to sign the blank electronic invoice information that has passed the inspection, generates a blank electronic invoice, and stores it in the storage system.

[0031] Figure 2Schematic diagram of invoice information generation. Invoice information generation. After the transaction occurs, the client generates invoice data based on the transaction information and the identity information of both parties, signs the invoice data to generate invoice information, and then sends it to the invoicing platform. After the transaction occurs, the client generates invoice data based on the identity information of both parties and the specific content of the transaction, including the name and identification number of the buyer and seller, the name, type, quantity and amount of the transaction goods; the client checks the invoice data, and after the check passes, uses the client private key to sign the invoice data; the client generates electronic invoice information based on the invoice data, the client public key, and the client signature, and sends the generated electronic invoice information to the invoicing platform.

[0032] Among them Figure 3 As shown, for electronic invoice issuance, the client sends electronic invoice information to the invoicing platform. The invoicing platform will search for blank electronic invoices in the storage system according to the client identity information in the electronic invoice information, and generate an electronic invoice to be approved by combining the electronic invoice information and the blank electronic invoice signature. After receiving the electronic invoice issuance request, the invoicing platform first verifies whether the client public key is valid; after the verification is passed, multiple client signatures are centrally verified; finally, the storage system is queried for available blank electronic invoices according to the client identity information, otherwise the invoicing request fails; after the blank electronic invoice is queried in the storage system, the issuing agency public key is first queried to see if it is a legal public key. If the issuing agency public key is not legal, the invoicing request fails; the issuing agency signature with a legal public key is uniformly verified. If the verification fails, the invoicing request fails; the invoicing platform combines the transaction information with the blank electronic invoice, and uses the invoicing platform private key to sign it uniformly to obtain the electronic invoice to be approved.

[0033] like Figure 4 As shown, the electronic invoice is approved by the approval agency, and the invoice information and the authority of the invoicing platform are approved. If the approval is passed, the electronic invoice will be officially effective. The approval agency receives the electronic invoice to be approved, and queries whether the public key of the invoicing platform is a legal public key. If the public key is illegal, the invoicing request is terminated; after the public key query is passed, the approval agency conducts a unified verification of the invoicing platform signature. The invoicing platform signature that fails the verification is an illegal signature, and the invoicing request is terminated; the approval agency queries whether the public key of the issuing agency is a legal public key. If the public key is illegal, the invoicing request is terminated; after the public key query is passed, the approval agency conducts a unified verification of the issuing agency signature. The issuing agency signature that fails the verification is an illegal signature, and the invoicing request is terminated; the approval agency uses the approval agency public key to sign the electronic invoice to be approved, and generates a valid electronic invoice together with the electronic invoice to be approved; finally, the generated valid electronic invoice is returned to the client.

[0034] The electronic invoice verification scheme is used to process the electronic invoice verification request of the client. The client sends the electronic invoice to be verified to the unified approval system. The unified approval system uniformly verifies the received electronic invoice to be verified, and verifies the integrity, validity and authenticity of the electronic invoice. The client sends an electronic invoice verification request and sends the electronic invoice to be verified to the unified approval system; the electronic invoice unified approval system receives the invoice verification request, verifies the legitimacy of the public key of the approval agency of the invoice to be verified, and checks whether the invoice field information is legal (that is, whether the key field is missing). If the approval agency public key is not legal or the invoice field information fails to pass the check, the electronic invoice verification fails; the electronic invoice unified approval system extracts the signature and public key of the approval agency of the electronic invoice to be verified, encapsulates multiple verification requests into a unified signature verification request, and uses the unified signature verification algorithm to verify the unified verification request. If the electronic invoice signature verification is successful, it means that the electronic invoice verification is successful, otherwise the electronic invoice verification fails; the electronic invoice unified approval system returns the electronic invoice verification result to the user.

[0035] The embodiment of the present application also provides a dedicated invoice issuance device, which adopts an invoice issuance method according to any one of claims 1 to 7, and the device comprises:

[0036] Blank invoice application module, used by the client to apply for invoices from the issuing agency for transaction use;

[0037] The invoice information generation module is used to generate invoice data based on transaction information and identity information of both parties, and to sign the invoice data to generate invoice information;

[0038] The electronic invoice issuance module is used to generate an electronic invoice to be approved based on the electronic invoice information and the blank electronic invoice signature;

[0039] The electronic invoice approval module is used to approve invoice information and invoicing platform permissions.

[0040] An embodiment of the present application also provides a dedicated invoice issuance system, the system comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute an invoice issuance method as described in any one of claims 1-7.

[0041] The electronic invoice batch issuance scheme uses the SM2 digital signature algorithm to ensure data integrity. In addition to the basic information of both parties to the transaction, the electronic invoice also contains the signature of the issuing agency, the signature of the client, the signature of the invoicing platform, the signature of the approval agency and the corresponding public key. Since the approval agency will verify the signature of the invoicing platform before signing, and the invoicing platform will verify the signature of the issuing agency and the signature of the client before signing. Therefore, in the electronic invoice verification scheme, only the signature of the approval agency of the electronic invoice needs to be verified to ensure the data integrity of the electronic invoice information. The electronic invoice issuance scheme uses SM2 digital signatures in each process of electronic invoice issuance. The client, issuing agency, invoicing platform and approval agency will check the signature of the previous process before signing. If the electronic invoice is illegally tampered with or forged during the issuance process, the attacker cannot obtain the signature private key of any participant, so the verification cannot pass, thereby ensuring the unforgeability of each link of the electronic invoice issuance.

[0042] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A method for issuing an invoice, the method comprising: Step 1: Blank invoice application, which is carried out before the transaction is generated. The client applies for an invoice from the issuing agency for use in the transaction; Step 2: Invoice information generation. After the transaction is generated, the client generates invoicing data based on the transaction information and the identity information of both parties, signs the invoicing data to generate invoice information, and then sends it to the invoicing platform; Step 3: Electronic invoice issuance: the client sends the electronic invoice information to the invoicing platform. The invoicing platform searches for a blank electronic invoice in the storage system based on the client identity information in the electronic invoice information, and generates an electronic invoice for approval based on the electronic invoice information and the blank electronic invoice signature. Step 4: Electronic invoice approval. The approval agency will approve the invoice information and the authority of the invoicing platform. If approved, the electronic invoice will officially take effect.

2. A method for issuing invoices according to claim 1, wherein: The specific process in step 1 is as follows: The client sends its identity information to the issuing agency to apply for a blank invoice; the issuing agency reviews the client's identity information and its invoicing authority. If the review is passed, blank electronic invoice information is generated, otherwise the application fails; the issuing agency checks the generated blank electronic invoice information, and uses the issuing agency's key to sign the blank electronic invoice information that has passed the inspection, generates a blank electronic invoice, and stores it in the storage system.

3. The invoice issuing method according to claim 2, further comprising: If the review is passed, blank electronic invoice information will be generated based on the invoice template, client public key, and client identification name information.

4. The invoice issuing method according to claim 1, wherein: The specific process of step 2 is as follows: After the transaction occurs, the client generates invoicing data based on the identity information of both parties to the transaction and the specific content of the transaction; the client checks the invoicing data, and after the check is passed, it uses the client private key to sign the invoicing data; the client generates electronic invoice information based on the invoicing data, the client public key, and the client signature, and sends the generated electronic invoice information to the invoicing platform.

5. A method for issuing invoices according to claim 4, wherein: The invoicing data specifically includes: the name and identification number of the buyer and seller, and the name, type, quantity and amount of the transaction goods.

6. The invoice issuing method according to claim 1, wherein: The specific process of step 3 is as follows: After receiving the electronic invoice issuance request, the invoicing platform first verifies whether the client public key is valid; after the verification is passed, multiple client signatures are centrally verified; finally, the storage system is queried for available blank electronic invoices based on the client's identity information, otherwise the invoicing request fails; after the blank electronic invoice is queried in the storage system, it is first queried whether the issuing agency's public key is a legal public key. If the issuing agency's public key is illegal, the invoicing request fails; the issuing agency's signature with a legal public key is uniformly verified. If the verification fails, the invoicing request fails; the invoicing platform combines the transaction information with the blank electronic invoice, and uses the invoicing platform's private key to sign it uniformly to obtain the electronic invoice to be approved.

7. The invoice issuing method according to claim 1, wherein: The specific process of step 4 is as follows: When the approval agency receives the electronic invoice to be approved, it will check whether the public key of the invoicing platform is a legal public key. If the public key is illegal, the invoicing request will be terminated. After the public key query is passed, the approval agency will conduct a unified verification of the signature of the invoicing platform. If the invoicing platform signature fails to pass the verification, it will be an illegal signature, and the invoicing request will be terminated. When the approval agency checks whether the public key of the issuing agency is a legal public key, if the public key is illegal, the invoicing request will be terminated. After the public key query is passed, the approval agency will conduct a unified verification of the signature of the issuing agency. If the signature of the issuing agency fails to pass the verification, it will be an illegal signature, and the invoicing request will be terminated. The approval agency uses the approval agency public key to sign the electronic invoice to be approved, and generates a valid electronic invoice together with the generated signature and the electronic invoice to be approved. Finally, the generated valid electronic invoice is returned to the client.

8. A dedicated device for invoice issuance, the device adopts an invoice issuance method according to any one of claims 1 to 7, the device comprising: Blank invoice application module, used by the client to apply for invoices from the issuing agency for transaction use; An invoice information generation module is used to generate invoice data based on transaction information and identity information of both parties, and to sign the invoice data to generate invoice information; The electronic invoice issuance module is used to generate an electronic invoice to be approved based on the electronic invoice information and the blank electronic invoice signature; The electronic invoice approval module is used to approve invoice information and invoicing platform permissions.

9. The invoice issuing device according to claim 6, further comprising: A storage module is used to store the generated blank electronic invoice.

10. A dedicated invoice issuance system, comprising: at least one processor; And, a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute an invoice issuance method as described in any one of claims 1-7.

Images