Digital signature and verification method and system suitable for grouting industry

Abstract

The invention discloses a digital signature and verification method and system suitable for a grouting industry, and the method comprises the steps: S1, an account creation step: a user creates an account on a block chain network, generates a key pair for the user by using a CA authentication center (HR-CA) supporting a national cryptographic algorithm SM2, makes a public key into a digital certificate, stores a private key into a U-Key, and distributes the digital certificate and the private key to the user; s2, a digital signature step: processing data needing to be signed through a cryptographic hash function SM3 to generate a hash value; a user inserts a U-Key, encrypts a hash value by using a private key of the U-Key, and performs digital signature through a national cryptographic algorithm SM2; s3, a signature verification step: firstly, sending the data and a corresponding digital signature to a signature verification service, and firstly, performing hash operation on the data needing to be verified by the signature verification service by using a national cryptographic hash function SM3 to generate a hash value; and the signature verification service uses the public key of the sender and the received digital signature to carry out verification through a signature verification rule of a cryptographic algorithm SM2.

Description

Technical Field

[0001] The present invention belongs to the technical field of digital signature and signature verification, and in particular relates to a digital signature and verification method and system applicable to the grouting industry, and is applicable to the report signing and settlement signing links in the grouting industry. Background Art

[0002] Grouting refers to the process of injecting a certain proportion (density) of slurry into the foundation pores, cracks or the joints and fissures of the building itself at appropriate pressure to achieve the effects of filling, waterproofing and reinforcement.

[0003] In the grouting industry, the construction unit's report will be printed on site and submitted to the quality inspection for signature. After the quality inspection is signed, it will be submitted to the supervisor for signature. In the settlement process, the results table made based on the report will also go through the same signing process. This working method has the following disadvantages:

[0004] 1. Using paper-based media for storage is not conducive to archiving and preservation and is prone to loss.

[0005] 2. Reports and achievement tables need to be passed around for signatures multiple times, which is inefficient and can easily cause work delays.

[0006] 3. The signature records are scattered, making it impossible to quickly query and verify the signature status in the future.

[0007] 4. It consumes a lot of manpower.

[0008] On the other hand, although the existing digital signature technology can solve the problem of information tampering, its verification process is complicated and needs to rely on third-party institutions, which is inefficient. Therefore, how to improve the efficiency of information exchange in the grouting industry, ensure the authenticity and accuracy of information, and simplify the verification process has become an urgent problem to be solved. Summary of the invention

[0009] The purpose of the present invention is to overcome the problems of the prior art and disclose a digital signature and verification method and system suitable for the grouting industry. The present invention realizes the digitization of the report signing process, and relies on blockchain technology to realize the digitization of the signature process in the statistical settlement process. The report and signature information are tamper-proof and traceable, which solves the problems of slow traditional manual statistical settlement signature process and easy loss of archives.

[0010] The object of the present invention is achieved through the following technical solutions:

[0011] A digital signature and verification method applicable to the grouting industry, the digital signature and verification method comprising:

[0012] S1: Account creation step. The user creates an account on the blockchain network and uses a CA certification center that supports the national encryption algorithm SM2 to generate a key pair for the user. The public key is made into a digital certificate, and the private key is stored in the U-Key and distributed to the user together;

[0013] S2: Digital signature step, the data to be signed is processed through the national secret hash function SM3 to generate a hash value; the user inserts the U-Key, uses its private key to encrypt the hash value, and digitally signs it through the national secret algorithm SM2;

[0014] S3: Signature verification step. When the user needs to verify the signature of certain data, the data and the corresponding digital signature are first sent to the signature verification service. The signature verification service will first use the national secret hash function SM3 to perform a hash operation on the data to be verified to generate a hash value; the signature verification service then uses the sender's public key and the received digital signature to verify through the signature verification rules of the national secret algorithm SM2.

[0015] According to a preferred embodiment, step S1 also includes storing the certificate information and the account information together in the server or blockchain, so that when the signature is verified, the service interface can be called to find the public key of the signer in order to verify the signature.

[0016] According to a preferred embodiment, the public key is used to verify the signature, and the private key is used to generate the signature.

[0017] According to a preferred embodiment, the digital signature process in step S2 includes: firstly, taking the hash value as an input parameter, calling U-Key, encrypting the hash value through the SM2 algorithm to generate a digital signature as the digital signature of the data to be signed.

[0018] According to a preferred embodiment, step S2 also includes: the user saves or sends the generated digital signature, digital certificate, and original data to be signed to the blockchain network.

[0019] According to a preferred embodiment, in step S3, verification is performed using the signature verification rules of the national encryption algorithm SM2. If the verification passes, the signature is valid and the data has not been tampered with; if the verification fails, the signature is invalid and the data may have been tampered with.

[0020] On the other hand, the present invention also discloses:

[0021] A digital signature and verification system suitable for the grouting industry, the digital signature and verification system comprising: a user management module, a signature module and a signature verification module, the user management module is used to implement account creation and management, the signature module is used to implement digital signature, the signature verification module is used to implement signature verification, and the digital signature and verification system is configured to perform digital signature and verification according to the aforementioned digital signature and verification method.

[0022] According to a preferred embodiment, the digital signature and verification system further includes a certificate management module for generating and managing digital certificates so that each unit or individual participating in the signing has a unique digital certificate.

[0023] According to a preferred embodiment, the signature module digitally signs the report data, and then uploads the digital signature, digital certificate, and original data to be signed to the blockchain.

[0024] According to a preferred embodiment, the signature verification module is configured to be able to perform verification through this module when it is necessary to view or verify the report data and signature information.

[0025] The aforementioned main scheme of the present invention and its further options can be freely combined to form multiple schemes, all of which are schemes that can be adopted and claimed for protection by the present invention. After understanding the scheme of the present invention, those skilled in the art can understand that there are multiple combinations based on the prior art and common knowledge, all of which are technical schemes to be protected by the present invention, and they are not exhaustively listed here.

[0026] Beneficial effects of the present invention:

[0027] 1. Improve efficiency: Through the digital signing process, the multiple transmissions of reports and results tables between various parties are avoided, which greatly improves work efficiency.

[0028] 2. Ensure information security: All report data and signature information will be uploaded to the chain, making the information traceable and tamper-proof, thereby greatly improving the security of information.

[0029] 3. Simplify the query process: All reports and signature information are on the blockchain and can be queried at any time, which greatly simplifies the query process.

[0030] 4. Save resources: Since all signature processes are digitized, there is no need to use paper media for storage, thus saving a lot of paper and storage space.

[0031] 5. Improve credibility: All reports and signatures can be verified on the blockchain, greatly improving the credibility of information. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1It is a structural schematic diagram of a digital signature and verification system applicable to the grouting industry according to the present invention. DETAILED DESCRIPTION

[0033] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0034] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings. In addition, the present invention should point out that in the present invention, if the specific structure, connection relationship, position relationship, power source relationship, etc. are not specifically written, the structure, connection relationship, position relationship, power source relationship, etc. involved in the present invention are all known to those skilled in the art based on the existing technology without creative work.

[0035] Example 1

[0036] refer to Figure 1 As shown, this embodiment discloses a digital signature and verification method applicable to the grouting industry, and the digital signature and verification method includes the following steps.

[0037] Step S1: Account creation step, the user creates an account on the blockchain network to obtain access to the blockchain network, which is the basis for digital signature and verification. When creating an account, the user needs to enter some basic information, such as user name, password, etc. A CA certification center that supports the national secret algorithm SM2 is used to generate a key pair for the user, and the public key is made into a digital certificate, and the private key is stored in the U-Key and distributed to the user.

[0038] Preferably, the public key is used to verify the signature, while the private key is used to generate the signature. After the user account is created, the system will store the certificate information and account information together in the server or blockchain, so that when using the signature verification function, the service interface can be called to find the signer's public key in order to verify his signature.

[0039] Specifically, after creating an account, the CA will store the account information and generate a certificate and private key. The certificate contains the public key information, the owner's identity information (subject), and the digital signature of the digital certificate authority (issuer) to ensure that the overall content of the certificate is correct. The private key is not stored in plain text in the database. No one except the CA itself has access to the CA.

[0040] Step S2: Digital signature step. When the user needs to digitally sign, the data to be signed is first processed through the national secret hash function SM3 to generate a hash value; the user inserts the U-Key, uses its private key to encrypt the hash value, and digitally signs through the national secret algorithm SM2.

[0041] Preferably, the digital signature process in step S2 includes: first, using the hash value as an input parameter, calling U-Key, and encrypting the hash value through the SM2 algorithm to generate a digital signature, which is the user's signature on the data. The user saves or sends the generated digital signature, digital certificate, and the original data to be signed to the blockchain network.

[0042] When other users or systems need to verify the signature information in the blockchain network, they first find the signer's certificate through the blockchain, extract the signer's public key from the certificate, and use the SM2 verification algorithm to verify the signature based on the signer's public key and the received data. In this process, the national secret hash function SM3 and the national secret algorithm SM2 are used. Both algorithms are currently widely used and secure encryption algorithms in China. In this way, the integrity and non-repudiation of the data can be effectively guaranteed to prevent data from being tampered with during transmission.

[0043] Step S3: Signature verification step. When the user needs to verify the signature of certain data, the data and the corresponding digital signature are first sent to the signature verification service. The signature verification service will first use the national secret hash function SM3 to perform a hash operation on the data to be verified to generate a hash value; the signature verification service then uses the sender's public key and the received digital signature to verify through the signature verification rules of the national secret algorithm SM2.

[0044] Furthermore, in step S3, verification is performed using the signature verification rules of the national encryption algorithm SM2. If the verification passes, the signature is valid and the data has not been tampered with; if the verification fails, the signature is invalid and the data may have been tampered with.

[0045] Example 2

[0046] refer to Figure 1Based on Example 1, this embodiment further discloses: a digital signature and verification system applicable to the grouting industry, wherein the digital signature and verification system is configured to perform digital signature and verification according to the digital signature and verification method described in Example 1.

[0047] The digital signature and verification system includes: a user management module, a signature module and a signature verification module. The user management module is used to implement account creation and management, the signature module is used to implement digital signature, and the signature verification module is used to implement signature verification.

[0048] Preferably, the digital signature and verification system further comprises a certificate management module for generating and managing digital certificates, so that each unit or individual participating in the signing has a unique digital certificate.

[0049] Preferably, the signing module digitally signs the report data, and then uploads the digital signature, digital certificate, and original data to be signed to the blockchain.

[0050] Preferably, the signature verification module is configured to be able to perform verification through this module when the report data and signature information need to be viewed or verified.

[0051] Through the above technical scheme, the present invention realizes the digitization of the signature process in the statistical settlement process, makes the signature information traceable, and ensures that the report data is tamper-proof, thereby solving the problems of slow traditional manual statistical settlement signature process and easy loss of archives.

[0052] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A digital signature and verification method applicable to the grouting industry, characterized in that: The digital signature and verification method comprises: S1: Account creation step. The user creates an account on the blockchain network and uses a CA certification center that supports the national encryption algorithm SM2 to generate a key pair for the user. The public key is made into a digital certificate, and the private key is stored in the U-Key and distributed to the user together; S2: Digital signature step, the data to be signed is processed through the national secret hash function SM3 to generate a hash value; the user inserts the U-Key, uses its private key to encrypt the hash value, and digitally signs it through the national secret algorithm SM2; S3: Signature verification step. When the user needs to verify the signature of certain data, the data and the corresponding digital signature are first sent to the signature verification service. The signature verification service will first use the national secret hash function SM3 to perform a hash operation on the data to be verified to generate a hash value; the signature verification service then uses the sender's public key and the received digital signature to verify through the signature verification rules of the national secret algorithm SM2.

2. The digital signature and verification method according to claim 1, characterized in that: Step S1 also includes storing the certificate information and account information together in the server or blockchain, so that when verifying the signature, the service interface can be called to find the public key of the signer in order to verify the signature.

3. The digital signature and verification method as claimed in claim 2, characterized in that: The public key is used to verify the signature, and the private key is used to generate the signature.

4. The digital signature and verification method according to claim 1, wherein: The digital signature process in step S2 includes: first, taking the hash value as an input parameter, calling U-Key, and encrypting the hash value through the SM2 algorithm to generate a digital signature as the digital signature of the data to be signed.

5. The digital signature and verification method as claimed in claim 4, characterized in that: The step S2 also includes: the user saves or sends the generated digital signature, digital certificate, and original data to be signed to the blockchain network.

6. The digital signature and verification method according to claim 1, wherein: In step S3, verification is performed using the signature verification rules of the national secret algorithm SM2. If the verification passes, the signature is valid and the data has not been tampered with; if the verification fails, the signature is invalid and the data may have been tampered with.

7. A digital signature and verification system suitable for the grouting industry, characterized in that: The digital signature and verification system includes: a user management module, a signature module and a signature verification module, the user management module is used to implement account creation and management, the signature module is used to implement digital signature, and the signature verification module is used to implement signature verification. The digital signature and verification system is configured to perform digital signature and verification according to the digital signature and verification method as described in any one of claims 1 to 6.

8. The digital signature and verification system as claimed in claim 7, characterized in that: The digital signature and verification system also includes a certificate management module for generating and managing digital certificates so that each unit or individual participating in the signature has a unique digital certificate.

9. The digital signature and verification system as claimed in claim 7, characterized in that: The signing module digitally signs the report data, and then uploads the digital signature, digital certificate, and original data to be signed to the blockchain.

10. The digital signature and verification system according to claim 7, characterized in that: The signature verification module is configured to be able to perform verification through this module when it is necessary to view or verify the report data and signature information.

Images