Authority management system and method for electronic bidding

Abstract

The invention discloses an authority management system and method for electronic bidding. The authority management system comprises a bidding transaction platform, a bidding file making tool, a server and a mobile certificate App, the bid invitation transaction platform is used for publishing bid invitation information; a user and enterprise registration mechanism is established in the mobile certificate App, an administrator role is set in an enterprise, three-dimensional management of enterprise personnel can be realized in the App, project / section information is introduced, an enterprise administrator arranges certificate calling in bidding work by himself / herself according to different types of projects / sections, and the service life of the enterprise administrator is prolonged. And an electronic bidding and tendering system is matched to manage and control the authority. The bidding document making tool requests the server to generate a two-dimensional code for project encryption, and feeds back the two-dimensional code to the bidding document making tool for display; and the mobile certificate App scans the two-dimensional code for encryption. The invention relates to the technical field of authority management of electronic bidding, and particularly provides an authority management system and method for electronic bidding.

Description

Technical Field

[0001] The present invention relates to the technical field of rights management for electronic bidding, and in particular to a rights management system and method for electronic bidding. Background Art

[0002] Over the past decade, electronic bidding and tendering has achieved rapid development due to its openness, transparency, speed, security, efficiency, convenience and environmental protection, and has become the most important way to implement public resource transactions, bidding and procurement. Digital certification CA is the basic service supporting the electronic bidding and tendering system. The existing CA application in the bidding and tendering field was designed more than ten years ago. U-Key is generally used as the storage medium for CA certificates (U-Key containing CA certificate is generally called CA lock), and identity authentication, electronic signature and data signature verification, encryption and decryption functions are realized through CA lock.

[0003] With the implementation of the "Regulations on the Implementation of the Bidding Law" across the country since February 1, 2012, all regions are building or have already built public resource trading centers or bidding platforms for various industries. Since the promulgation of the "Electronic Signature Law", the legal effect of electronic signatures has been continuously accepted by more and more market players, and the role of electronic signatures in electronic bidding activities has also been increasingly highlighted.

[0004] In recent years, the trading platforms built by various public resource trading centers have basically adopted the Ukey digital certificate + electronic signature method to deal with the entire bidding process, which has brought four major problems, troubling market entities and hindering the improvement of the convenience of bidding and tendering transactions and the reduction of costs:

[0005] (1) Difficult to handle: Currently, traditional CA signatures require on-site handling for the initial certificate application and changes;

[0006] (2) Difficulty in application: Different CA organizations use different lock media drivers, which often cause installation conflicts between drivers, making driver management difficult and limited by driver versions, which is out of touch with the development of IT technology (for example, the Nanjing Trading Center can only be applied to IE 11, while Microsoft stopped maintaining and upgrading the IE browser in 2016);

[0007] (3) Difficulty in mutual recognition: Different trading platforms need to apply for different CA signature locks, which requires high investment and management costs;

[0008] (4) Difficult to trace: Only the lock is recognized, not the person; only the organization is recorded, not the specific operator.

[0009] In response to the above problems, with the rapid development of mobile Internet technology in recent years, the large-scale popularization of smart phones and the continuous optimization of 4G and 5G networks, in the field of electronic signatures, the advantages of mobile certificate + mobile scanning solutions have become increasingly prominent, and have gradually expanded their application in various public resource trading centers or bidding platforms in various industries.

[0010] As the work of optimizing the business environment continues to deepen, demands for cross-regional and cross-field bidding, multi-personnel bidding, and operation traceability are becoming increasingly prominent. Mobile certificates need to introduce effective authority management to comprehensively solve related problems and provide users with a safer and more efficient experience in the electronic bidding process. Summary of the invention

[0011] In response to the above situation, the technical problems that need to be solved are difficulty in handling, application, mutual recognition and traceability, which hinder the improvement of the convenience level and reduction of costs in bidding and tendering transaction activities.

[0012] The present invention provides the following technical invention: A rights management system for electronic bidding proposed by the present invention includes a bidding transaction platform, a bidding document preparation tool, a server and a mobile certificate App;

[0013] The bidding transaction platform is used to publish bidding information;

[0014] A user and enterprise registration mechanism is established within the mobile certificate App, and an administrator role is set up within the enterprise. Three-dimensional management of enterprise personnel can be achieved within the App, and project / bid section information can be introduced. For different types of projects / bid sections, enterprise administrators can arrange the retrieval of certificates in bidding work on their own, and cooperate with the electronic bidding system to achieve authority management and control.

[0015] The bidding document making tool requests the server to generate a QR code encrypted for the project, and feeds it back to the bidding document making tool for display;

[0016] The mobile certificate app scans the QR code for encryption, forms the encrypted certificate public key and project section number ext1, and transmits it to the server;

[0017] The bidding document preparation tool calls the encryption certificate public key and the project section number ext1 and compares them with the project section number ext2 to which the file to be encrypted currently being prepared belongs.

[0018] The present invention provides a method for using a rights management system for electronic bidding, which specifically includes the following steps:

[0019] (1) The bidding transaction platform is used to publish bidding information;

[0020] (2) The mobile certificate APP displays all project sections in the form of a list. The staff uses the backend management function to import the project section information into the database and display it on the APP. For different types of projects / sections, the enterprise administrator arranges the retrieval of certificates in the bidding work and cooperates with the electronic bidding system to achieve authority management and control;

[0021] (2) The bidding document preparation tool requests the server to generate a QR code encrypted for the project and feeds it back to the bidding document preparation tool for display;

[0022] (3) The mobile certificate app scans the QR code for encryption, generates the encrypted certificate public key and project section number ext1, and transmits it to the server;

[0023] (4) The bidding document preparation tool calls the encryption certificate public key and the project section number ext1: and compares it with the project section number ext2 to which the currently prepared file to be encrypted belongs; if the comparison is consistent, the file is encrypted; if the comparison is inconsistent, it returns to re-scan and encrypt.

[0024] The present invention proposes a rights management system and method for electronic bidding, and the beneficial effects achieved by adopting the above scheme are as follows:

[0025] (1) Introducing project / bid section-based authority management in the application process of mobile certificates can effectively realize the individualized and independent management requirements of market entities for electronic bidding without destroying the characteristics of bidding, realize the innovation of electronic bidding applications, promote the improvement of the electronic bidding system, and further adapt to the needs of the next step of the development of electronic bidding;

[0026] (2) Since CA locks and mobile certificates will coexist for a long period of time, and the mobile certificate platforms of each CA are independent of each other, for a specific bidding section, generally speaking, each CA's mobile certificate platform can only obtain no more than 50% of the bidding list information. Even if a CA's mobile certificate platform has data leakage, it will not produce catastrophic consequences. In addition, the risk of data leakage can be reduced as much as possible by strengthening the management of CA company's mobile certificate platform (formulating corresponding mobile certificate standards, signing data security commitments, etc.). BRIEF DESCRIPTION OF THE DRAWINGS

[0027] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0028] Figure 1 A flowchart of a rights management system for electronic bidding proposed by the present invention;

[0029] Figure 2 A flowchart of Embodiment 1 of a method for using a rights management system for electronic bidding proposed by the present invention;

[0030] Figure 3 This is a flow chart of Example 2 of a method for using a rights management system for electronic bidding proposed by the present invention. DETAILED DESCRIPTION

[0031] The following will clearly and completely describe the technology in the embodiments of the present invention in conjunction with the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0032] Example 1

[0033] A rights management system for electronic bidding, including a bidding transaction platform, a bidding document making tool, a server and a mobile certificate App;

[0034] The bidding transaction platform is used to publish bidding information; a user and enterprise registration mechanism is established in the mobile certificate App, and an administrator role is set up within the enterprise. The three-dimensional management of enterprise personnel can be realized in the App, and project / bid section information can be introduced. For different types of projects / bid sections, enterprise administrators can arrange the certificate retrieval in the bidding work by themselves, and cooperate with the electronic bidding system to realize the control of permissions. The bidding document production tool requests the server to generate a QR code encrypted for the project, and feeds it back to the bidding document production tool for display; the mobile certificate App scans the QR code for encryption, forms the encryption certificate public key and project bid section number ext1, and transmits it to the server; the bidding document production tool calls the encryption certificate public key and project bid section number ext1 and compares it with the project bid section number ext2 to which the encrypted file currently being produced belongs.

[0035] The present invention provides a method for using a rights management system for electronic bidding, which specifically includes the following steps:

[0036] (1) The bidding and transaction platform is used to publish bidding information. The mobile certificate app enters information about the bidding and transaction platform in advance. The mobile certificate app includes project names and codes. The app displays all project sections in the form of a list. The staff uses the backend management function to import the project section information into the database and display it on the app. For different types of projects / sections, the enterprise administrator arranges the retrieval of certificates in the bidding work and cooperates with the electronic bidding system to achieve authority management and control;

[0037] (2) The bidding document preparation tool requests the server to generate a QR code encrypted for the project and feeds it back to the bidding document preparation tool for display;

[0038] (3) The mobile certificate app scans the QR code for encryption, generates the encrypted certificate public key and project section number ext1, and transmits it to the server;

[0039] (4) The bidding document preparation tool calls the encryption certificate public key and the project section number ext1: and compares the project section number to which the currently prepared file to be encrypted belongs; if the comparison is consistent, the file is encrypted; if the comparison is inconsistent, it returns to re-scan and encrypt.

[0040] Efficiently implement permission management based on section number in the background of mobile certificate app, with good user experience, simple system structure and easy implementation.

[0041] Example 2

[0042] A rights management system for electronic bidding, including a bidding transaction platform, a bidding document making tool, a server, and a mobile certificate App;

[0043] The bidding transaction platform is used to publish bidding information; a user and enterprise registration mechanism is established in the mobile certificate App, and an administrator role is set up within the enterprise. The three-dimensional management of enterprise personnel can be realized in the App, and project / bid section information can be introduced. For different types of projects / bid sections, enterprise administrators can arrange the certificate retrieval in the bidding work by themselves, and cooperate with the electronic bidding system to realize the control of permissions. The bidding document production tool requests the server to generate a QR code encrypted for the project, and feeds it back to the bidding document production tool for display; the mobile certificate App scans the QR code for encryption, forms the encryption certificate public key and project bid section number ext1, and transmits it to the server; the bidding document production tool calls the encryption certificate public key and project bid section number ext1 and compares it with the project bid section number ext2 to which the encrypted file currently being produced belongs.

[0044] The present invention provides a method for using a rights management system for electronic bidding, which is different from the first embodiment in that: the electronic bidding platform completes the registration and management of rights, and the business system (bidding tool, trading system, bid opening hall, etc.) inquires whether the CA platform has the operation authority during operation, and the corresponding operation of the unauthorized customer is blocked by the business system.

[0045] Specifically, the enterprise administrator assigns permissions to specific personnel according to the bidding section through the APP, and the APP background sends the bidding section number and the certificate information with permission to the bidding transaction platform;

[0046] The bidding tool cooperates with the code scanning tool to retrieve the certificate of the current user;

[0047] The bidding tool will send the obtained user certificate and bidding section information to the bidding transaction platform for permission matching. If the match is successful, the user will be allowed to proceed to the next step.

[0048] The characteristic of this solution is to register the authority allocation information in the bidding and trading platform. After retrieving the certificate, the business system needs to verify the authority information with the bidding and trading platform, thereby realizing the authority management based on the bidding section number. The user experience is good, and the system structure is relatively complex. The business system needs to add authority management requirements based on mobile certificates and bidding section information.

[0049] Analysis on user data security

[0050] User data is divided into core data and general data. Core data mainly includes user bid quotations, technical bid documents and other data that can directly affect the bid results; general data includes user bid information and enterprise information and other data that generally cannot directly affect the bid results. The electronic bidding system should ensure the security of user core data and protect the security of user general data to the maximum extent.

[0051]

[0052] Through the analysis of the data involved in each subsystem in the above table, it can be concluded that since the mobile certificate introduces bid section-based permission management, the possible risk of data leakage lies in the bidding list information.

[0053] Since CA locks and mobile certificates will coexist for a long period of time, and each CA's mobile certificate platform is independent of each other, therefore, for a specific bidding section, generally speaking, each CA's mobile certificate platform can only obtain no more than 50% of the bidding list information. Even if a CA's mobile certificate platform suffers from data leakage, it will not produce catastrophic consequences.

[0054] In addition, the risk of data leakage can be minimized by strengthening the management of the CA company's mobile certificate platform (formulating corresponding mobile certificate standards, signing a data security commitment letter, etc.).

[0055] At present, in the field of electronic bidding and tendering, with the continuous expansion of the areas and fields in which enterprises participate in project bidding, it is inevitable that multiple people within the enterprise will bid. How to solve the problem of operation traceability and realize the effective management of the internal bidding and tendering work of the enterprise is a real problem facing every enterprise.

[0056] By applying mobile certificates based on project / section authority management in the field of electronic bidding and tendering, combined with mobile certificate APP, these problems faced by users can be efficiently solved.

[0058] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, material or apparatus including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, material or apparatus.

[0059] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A rights management system for electronic bidding, characterized in that: Including bidding transaction platform, bidding document making tool, server and mobile certificate app; The bidding transaction platform is used to publish bidding information; Establish a user and enterprise registration mechanism within the mobile certificate app and set up an administrator role within the enterprise; The bidding document making tool requests the server to generate a QR code encrypted for the project, and feeds it back to the bidding document making tool for display; The mobile certificate app scans the QR code for encryption, forms the encrypted certificate public key and project section number ext1, and transmits it to the server; The bidding document preparation tool calls the encryption certificate public key and the project section number ext1 and compares them with the project section number ext2 to which the file to be encrypted currently being prepared belongs.

2. The method for using a rights management system for electronic bidding according to claim 1, characterized in that: The specific steps include: (1) The bidding transaction platform publishes bidding information; (2) The mobile certificate APP displays all project sections in the form of a list. The staff uses the backend management function to import the project section information into the database and display it on the APP. For different types of projects / sections, the enterprise administrator arranges the retrieval of certificates in the bidding work and cooperates with the electronic bidding system to achieve authority management and control; (2) The bidding document preparation tool requests the server to generate a QR code encrypted for the project and feeds it back to the bidding document preparation tool for display; (3) The mobile certificate app scans the QR code for encryption, generates the encrypted certificate public key and project section number ext1, and transmits it to the server; (4) The bidding document preparation tool calls the encryption certificate public key and the project section number ext1: and compares it with the project section number ext2 to which the currently prepared file to be encrypted belongs; if the comparison is consistent, the file is encrypted; if the comparison is inconsistent, it returns to re-scan and encrypt.

3. The method for preparing a rights management system for electronic bidding according to claim 2, characterized in that: The electronic bidding and tendering platform completes the registration and management of permissions. The enterprise administrator assigns permissions to specific personnel according to the bidding section through the APP. The APP background sends the bidding section number and the certificate information with permissions to the bidding transaction platform; the bidding tool cooperates with the scanning tool to retrieve the current user's certificate; the bidding tool sends the obtained user certificate and bidding section information to the bidding transaction platform for permission matching. A successful match allows the user to proceed to the next step.

Images