Electronic signature processing method and device, equipment, medium and program product

Abstract

The embodiment of the invention provides an electronic signature processing method and device, equipment, a medium and a program product. The method comprises the steps that a signed electronic file is received and preprocessed; determining that the electronic file has the conversion permission, collecting metadata, and associating the metadata with the electronic file; extracting solidification information of the electronic file, executing credible conversion operation on the electronic file, and removing the digital signature information to obtain solidification conversion information; creating a storage file, wherein the storage file stores the extracted solidification information and solidification conversion information; establishing an association relationship between the electronic file and the storage file; verifying and generating a verification report, and recording a verification result; the digital signature information is removed, only the electronic seal information is reserved, the compatibility problem caused by technology updating can be avoided, and it is ensured that the electronic file can be normally looked up and used in the long-term storage and use process.

Description

Technical Field

[0001] The present application relates to the technical field of electronic document processing, and in particular to an electronic signature processing method, device, equipment, medium and program product. Background Art

[0002] Electronic archives refer to various electronic files with preservation value that are formed, processed and stored in computer systems, including text files (such as electronic documents, electronic contracts), image files (such as scanned drawings, photos), and other information records generated in many fields.

[0003] Although the existing solutions can preserve the originality and integrity of electronic files, there are the following risks: With the continuous development of information technology, electronic signature and encryption technology are also constantly updated and evolved. If the digital signature information of the electronic signature is retained, it will be impossible to correctly verify the validity of the digital signature in the future due to factors such as obsolescence of related technologies, upgrades to software or hardware platforms, thereby affecting the availability of electronic files.

[0004] In addition, the digital signature of an electronic seal usually relies on specific encryption algorithms, digital certificates, and related software and hardware environments for verification and analysis. If these systems or software fail, cease maintenance, or are no longer compatible, the digital signature will be unable to be verified, which will in turn affect the use of electronic files. Summary of the invention

[0005] The purpose of the embodiments of the present application is to provide an electronic signature processing method, device, equipment, medium and program product to solve the problem that the existing methods cannot verify digital signatures and thus cannot ensure the availability of electronic files.

[0006] In a first aspect, an embodiment of the present application provides an electronic signature processing method, including:

[0007] Receive signed electronic documents and pre-process them;

[0008] Determine conversion permissions, collect metadata, and associate metadata with electronic files;

[0009] Extract the solidified information of the electronic file and perform a trusted conversion operation on the electronic file, remove the digital signature information, and obtain the solidified conversion information;

[0010] Creating a storage file, the storage file storing the extracted solidification information and solidification conversion information;

[0011] Establish the relationship between electronic files and stored files;

[0012] Perform verification and generate a verification report to record the verification results.

[0013] In the above implementation process, the embodiment of the present application receives the signed electronic file and performs preprocessing; determines whether it has conversion authority, collects metadata, and associates the metadata with the electronic file; extracts the solidified information of the electronic file and performs a trusted conversion operation on the electronic file, removes the digital signature information, and obtains solidified conversion information; creates a storage file, which stores the extracted solidified information and the solidified conversion information; establishes an association between the electronic file and the storage file; performs verification and generates a verification report to record the verification results; removes the digital signature information and only retains the electronic seal information, which can avoid compatibility issues caused by technological updates and ensure that electronic archives can be normally accessed and used during long-term preservation and use.

[0014] Furthermore, the determining of having the conversion authority, collecting metadata, and associating the metadata with the electronic file includes:

[0015] Load the electronic files that need to be converted to trust, automatically parse the file structure, identify the electronic signature location and attribute information, and determine whether the conversion authority is available;

[0016] If the conversion authority is not available, the trusted conversion process ends;

[0017] If you have the conversion authority, metadata will be collected in real time and associated with the electronic file; the metadata includes the file's creation time, author, and modification record.

[0018] In the above implementation process, after confirming that the target object has the conversion authority, metadata is collected to obtain information on various attributes of the electronic archive itself.

[0019] Furthermore, the extracting of the fixed information of the electronic file and performing a trusted conversion operation on the electronic file to remove the digital signature information to obtain the fixed conversion information includes:

[0020] Extracting the fixed information of the electronic file and removing the digital signature information, wherein the fixed information includes relevant parameters of the digital signature, hash value, timestamp and electronic seal information;

[0021] Conduct integrity checks and verifications on the electronic files to be extracted. If any abnormalities are found, record them in a timely manner and issue reminders;

[0022] Convert electronic files, extract electronic signature information, and retain the content of the original electronic files;

[0023] Delete the reference relationship related to the signature to be converted to obtain the modified data;

[0024] The conversion data is recorded in the corresponding metadata structure to obtain solidified conversion information.

[0025] In the above implementation process, metadata is constructed through a trusted conversion module, and data describing the background, content, structure, and entire management process of electronic files is solidified through technical measures.

[0026] Furthermore, create a storage file that stores the extracted solidified information and solidification conversion information, including:

[0027] Create a storage file that stores the extracted solidified information, solidification conversion information, and related metadata;

[0028] Define different element tags for the storage file respectively to identify the parameters of the solidified information and the parameters of the solidification conversion information; among them, the parameters of the solidified information include: digital signature parameters, hash values, and timestamps, and the parameters of the solidification conversion information include: operator, conversion time, and conversion reason;

[0029] Fill the extracted solidified information and solidification conversion information according to the tags of the corresponding storage file.

[0030] In the above implementation process, creating a storage file and processing it facilitates subsequent retrieval and management.

[0031] Furthermore, establishing the association relationship between the electronic file and the storage file includes:

[0032] Save the electronically signed electronic file according to the electronic file storage specification and classify and store it according to the set rules;

[0033] Associate and save the generated storage file with the corresponding electronically signed electronic file.

[0034] In the above implementation process, associate and save the electronic file and the storage file, and use methods such as the same name with different suffixes or establish a special association index table to ensure that the two can correspond.

[0035] Furthermore, perform verification and generate a verification report to record the verification results, including:

[0036] Verify and confirm the electronic file, storage file, and related metadata;

[0037] Generate a verification report to record the verification results;

[0038] If the verification result shows passing, the electronic archiving process is completed;

[0039] If there are problems, record the specific description of the problems and take handling measures according to the types of problems.

[0040] In the above implementation process, perform verification and generate a verification report to ensure the accuracy of the archived information.

[0041] Furthermore, after establishing the association relationship between the electronic file and the stored file, the process further includes:

[0042] Supplementary collection and improvement of the metadata of electronic files are carried out, and the improved metadata is stored in the storage file.

[0043] The above implementation process facilitates subsequent retrieval and management.

[0044] Furthermore, the metadata collection includes:

[0045] Determine the scope and standards of metadata collection;

[0046] In the process of electronic document formation, handling and circulation, metadata is collected in real time; metadata includes the creation time, author and modification record of the document;

[0047] For existing metadata, it is automatically imported;

[0048] For metadata that cannot be obtained through automatic capture, receive information supplemented by manual description;

[0049] Review and verify the collected metadata according to metadata verification rules;

[0050] Update the status of metadata in real time.

[0051] In the above implementation process, in the field of electronic archives, metadata is the information that describes the various attributes of the electronic archives themselves. At the same time, metadata is backed up and maintained regularly to prevent data loss or damage.

[0052] In a second aspect, an embodiment of the present application provides an electronic signature processing device, including:

[0053] The document receiving module is used to receive the electronic document with signature and perform pre-processing;

[0054] A collection and association module is used to determine the conversion authority, collect metadata, and associate the metadata with the electronic file;

[0055] A trusted conversion module is used to extract the solidified information of the electronic file and perform a trusted conversion operation on the electronic file, remove the digital signature information, and obtain the solidified conversion information;

[0056] An information storage module, used for creating a storage file, wherein the storage file stores the extracted solidification information and solidification conversion information;

[0057] An association establishment module is used to establish an association relationship between electronic files and stored files;

[0058] A verification record module for performing verification, generating a verification report, and recording verification results.

[0059] In a third aspect, an embodiment of the present application provides an electronic device, including:

[0060] A processor, a memory, and a bus, where the processor is connected to the memory through the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the electronic signature processing method as described above.

[0061] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a server, it implements the electronic signature processing method as described above.

[0062] In a fifth aspect, an embodiment of the present application provides a computer program product, where the computer program product includes instructions. When the instructions are executed by a computer, the computer implements the method as described above. Description of the Drawings

[0063] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required to be used in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be regarded as limiting the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings.

[0064] Figure 1 A flowchart of an electronic signature processing method provided by an embodiment of the present application;

[0065] Figure 2 A structural diagram of an electronic signature processing device provided by an embodiment of the present application;

[0066] Figure 3 A structural diagram of an electronic device provided by an embodiment of the present application. Detailed Embodiments

[0067] The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application.

[0068] It should be noted that: Similar reference numerals and letters denote similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of the present application, the terms "first", "second", etc. are only used for distinguishing descriptions and cannot be understood as indicating or implying relative importance.

[0069] An electronic file refers to various electronic documents with preservation value formed, processed, and stored in a computer system, including text files (such as electronic official documents, electronic contracts), image files (such as scanned drawings, photos), and other information records generated in many fields.

[0070] An electronic file refers to a collection of general electronic image files stored through devices such as computer disks, corresponding to paper files, possessing archival attributes and serving as legal evidence. It has preservation value, has the same effect as traditional carrier archives, and can be used as a voucher in electronic form.

[0071] Compared with traditional paper files, electronic files have obvious advantages in aspects such as storage capacity, retrieval speed, and transmission efficiency, but also face challenges such as being easily tampered with and relying on storage and reading devices and software environments. It can be used for the storage and management of e-government documents; it can be used in many business scenarios such as contract management and personnel file management; it can be used to preserve digital cultural relic information, ancient books and documents, etc.

[0072] The purpose of archiving electronic files is to ensure that these files can be stored for a long time and can be retrieved and used conveniently when needed. Currently, on the premise of conforming to relevant laws, regulations, and technical standards, when archiving, electronic files with electronic signature information will be directly archived and saved, which can maximize the preservation of the originality and integrity of electronic files, facilitating future reference and verification of the authenticity and legality of documents. At the same time, for legally certified electronic files, their electronic signatures and digital signatures are regarded as valid vouchers and will be archived together with the file content.

[0073] Although existing solutions can preserve the originality and integrity of electronic files, there are the following risks: Technology update and compatibility issues: With the continuous development of information technology, electronic signature and encryption technologies are also constantly updated and evolved. If the digital signature information of the electronic signature is retained, due to factors such as the obsolescence of relevant technologies, software or hardware platform upgrades, etc., it will be impossible to correctly verify the validity of the digital signature in the future, thus affecting the usability of electronic files.

[0074] The risk of relying on specific systems and software: The digital signature of an electronic signature usually depends on specific encryption algorithms, digital certificates, and related software and hardware environments for verification and parsing. If these dependent systems or software malfunction, stop maintenance, or become incompatible, it will lead to the inability to verify the digital signature, thereby affecting the use of electronic files.

[0075] Based on this, the embodiments of this application provide an electronic signature processing method to solve the above problems.

[0076] In electronic file management, metadata is data used to describe the background, content, structure, and entire management process of electronic files. The existence of metadata can not only ensure the authenticity and reliability of electronic files, enabling source traceability and process recording, but also guarantee their integrity. In addition, metadata can enhance the usability of electronic files, thus promoting the long-term preservation and effective management of electronic files.

[0077] File background metadata includes information such as the creator of the file (including department name, personal name, etc.), creation time (accurate to date and time), and creation location. File content metadata covers the theme, keywords, content summary, etc. of the file. File structure metadata is mainly information about the electronic file format and internal structure. File management process metadata records the operation information during the process from the formation to the archiving and transfer of electronic files. It includes the version number of the file, modification records (time of each modification, modifier, modified content), approval records (approver, approval time, approval comments), electronic signature information, and operation record information, etc.

[0078] Adopt the technology of trusted conversion of electronic signatures to solidify the original state of electronic files, retain the electronic files themselves, extract and save the signature information, and ensure that the integrity and authenticity of electronic files can still be effectively guaranteed after removing the digital signature. In this way, on the one hand, it can effectively avoid the risk that the digital signature cannot be verified due to the evolution of encryption algorithms, the expiration of digital certificates, or the upgrade of relevant software and hardware platforms, enabling electronic files to maintain stable accessibility and usability in different periods and different technical systems; on the other hand, it reduces the degree of dependence on specific complex technologies in the process of electronic file management, reduces the potential risks of information leakage and tampering caused by poor storage and protection of digital signature information, greatly simplifies the technical architecture and process system of electronic file management, helps to improve the overall efficiency and security of electronic file management work, and thus lays a solid foundation for the long-term, stable, and secure archiving and management of electronic files.

[0079] Please refer to Figure 1 , Figure 1 which is a schematic flow diagram of an electronic signature processing method provided by an embodiment of this application. The electronic signature processing method includes:

[0080] 100. Receive the signed electronic file and perform preprocessing.

[0081] Optionally, receive the signed electronic file from a specified business system or other sources, and perform preprocessing on the electronic file. Exemplarily, use file signature verification technology for verification to ensure the integrity of the electronic file.

[0082] 200. Determine the conversion permission, collect metadata, and associate the metadata with the electronic file.

[0083] It can be understood that metadata is a collection of information used to describe the basic characteristics, sources, relationships and other attributes of data; in the field of electronic archives, metadata is information that describes the various attributes of the electronic archives themselves.

[0084] 210. Load the electronic file that needs to be converted to trust, automatically parse the file structure, identify the location and attribute information of the electronic signature, and determine whether the conversion authority is available.

[0085] Optionally, when the signature object to be converted is the last signature object of the target signature document, confirm that the target object has the conversion permission.

[0086] 220. If the conversion authority is not possessed, the trusted conversion processing flow is terminated.

[0087] 230. If the conversion authority is available, metadata shall be collected in real time and associated with the electronic file; the metadata shall include the creation time, author and modification record of the file.

[0088] In the above implementation process, after confirming that the target object has the conversion authority, metadata is collected to obtain information on various attributes of the electronic archive itself.

[0089] 300. Extract the solidified information of the electronic file and perform a trusted conversion operation on the electronic file, remove the digital signature information, and obtain the solidified conversion information.

[0090] Exemplarily, an electronic file is created to store the extracted solidification information, solidification conversion information, and other related metadata. In the electronic file, different element tags are defined to identify the digital signature parameters, hash values, and timestamps in the solidification information, and the operator, conversion time, and conversion reason in the conversion information. The extracted solidification information and conversion information are filled in according to the corresponding electronic file tags to ensure the accuracy and completeness of the information.

[0091] 310. Extract the fixed information of the electronic file and remove the digital signature information, wherein the fixed information includes relevant parameters of the digital signature, hash value, time stamp and electronic seal information.

[0092] Specifically, the solidified information of the electronic file is extracted, including relevant parameters of the digital signature (including signature algorithm, signer information, etc.), hash value, timestamp, electronic seal, etc. The extracted document is checked and verified for integrity to ensure that it is accurate and has not been tampered with. If any abnormality is found, it is recorded in time and the sender of the file is notified to re-provide the correct file.

[0093] 320. Perform integrity check and verification on the electronic document to be extracted. If any abnormality is found, record it in time and issue a reminder.

[0094] 330. Perform conversion processing on the electronic document, extract the electronic signature information, and retain the content of the original electronic document.

[0095] 340. Delete the reference relationship related to the signature to be converted to obtain modified data.

[0096] Specifically, delete the reference relationship related to the signature object to be converted. Exemplarily, an array of interactive form field objects of the signature object to be converted and an array of forms of the page where the signature object to be converted is located can be obtained; traverse the array of interactive form field objects and the array of forms respectively, delete the reference relationship, and obtain the modified data. Reset the index attribute of the signature object to be converted to a free object in the cross-reference table.

[0097] 350. Record the conversion data in the corresponding metadata structure to obtain solidified conversion information.

[0098] Thus, use the trusted conversion module to perform conversion processing on the electronic document according to the established trusted conversion process, extract the electronic signature information, and retain the content of the original document.

[0099] Among them, during the trusted conversion process, record the conversion-related information, including the operator (automatically obtain the current operator information through the system or require the operator to manually input and confirm), the conversion time (accurate to milliseconds, automatically generated by the system), etc. Record the conversion data in the metadata corresponding to the target signed document.

[0100] 400. Create a storage file that stores the extracted solidified information and solidified conversion information.

[0101] 410. Create a storage file that stores the extracted solidified information, solidified conversion information, and related metadata.

[0102] Optionally, the storage file can be an XML document. It can be understood that the related metadata can be the attribute information of the descriptive data added according to specific requirements.

[0103] 420. Define different element tags for the storage file respectively to identify the parameters of the solidified information and the parameters of the solidified conversion information; among them, the parameters of the solidified information include: digital signature parameters, hash values, and timestamps, and the parameters of the solidified conversion information include: operator, conversion time, and conversion reason.

[0104] 430. Fill the extracted solidified information and solidified conversion information according to the tags of the corresponding storage file.

[0105] 500. Establish the relationship between electronic files and stored files.

[0106] 510. The electronic files after trusted conversion shall be saved in accordance with the electronic archive storage specifications and classified and stored according to the set rules.

[0107] Optionally, the original document after the trusted conversion can be saved in accordance with the electronic archive storage specifications, and the storage path, file name, etc. can be determined. It can also be classified and stored according to file type, date, business category, etc. to facilitate subsequent retrieval and management.

[0108] 520. The generated storage file is associated with the corresponding trusted converted electronic file and saved.

[0109] Optionally, the generated storage file is associated with the corresponding trusted converted electronic file and saved by using the same name but different suffixes or establishing a special associated index table to ensure that the two can correspond.

[0110] 600. Perform verification and generate a verification report, recording the verification results.

[0111] 610. Verify and validate electronic documents, stored files, and related metadata.

[0112] Specifically, the stored electronic files, stored files and related metadata are verified and confirmed. Check whether the files are complete and readable, whether the stored file structure and content are correct, and whether the metadata is accurate and matches the electronic files.

[0113] 620. Generate a verification report and record the verification results.

[0114] 630. If the verification result shows passed, the electronic filing process is completed.

[0115] 640. If there is a problem, record the specific description of the problem and take appropriate action based on the type of problem.

[0116] Thus, a verification report is generated to record the verification results. If the verification result shows that it has passed, it means that the electronic filing process has been successfully completed; if there are problems, the specific description of the problem needs to be recorded in detail, and corresponding treatment measures should be taken according to the different types of problems, including correcting error information, re-executing some process steps, etc.

[0117] As described above, the embodiment of the present application receives a signed electronic file and performs preprocessing; determines whether it has conversion authority, collects metadata, and associates the metadata with the electronic file; extracts the solidified information of the electronic file and performs a trusted conversion operation on the electronic file, removes the digital signature information, and obtains solidified conversion information; creates a storage file, which stores the extracted solidified information and the solidified conversion information; establishes an association between the electronic file and the storage file; performs verification and generates a verification report, recording the verification results; removes the digital signature information, and only retains the electronic seal information, which can avoid compatibility issues caused by technological updates and ensure that electronic archives can be normally accessed and used during long-term preservation and use.

[0118] On the basis of the above embodiment, the method of the embodiment of the present application can also be embodied as follows: after the association relationship between the electronic file and the storage file is established, the method further includes:

[0119] Supplementary collection and improvement of the metadata of electronic files are carried out, and the improved metadata is stored in the storage file.

[0120] Specifically, other metadata of electronic files are collected and improved, including file subject, keywords, file size, file format and other information, which can be manually entered or automatically extracted (if supported by the business system or tool). The improved metadata is stored in an XML document to further enrich the description information of the electronic archive.

[0121] Based on the above embodiment, the method of the embodiment of the present application can also be embodied as follows: the metadata collection includes:

[0122] 231. Determine the scope and standards for metadata collection.

[0123] 232. Metadata shall be collected in real time during the formation, processing and circulation of electronic documents; metadata shall include the creation time, author and modification record of the document.

[0124] Optionally, the automatic capture function of the electronic archive management system can be used to collect metadata in real time during the formation, handling and circulation of electronic documents, including the creation time, author, modification record, etc. of the document. For metadata already existing in some business systems, it can be automatically imported into the electronic archive management system through interfaces or data sharing.

[0125] 233. Existing metadata will be automatically imported.

[0126] 234. For metadata that cannot be obtained through automatic capture, receive supplementary information from manual cataloging.

[0127] Optionally, for metadata that cannot be obtained through automatic capture, such as the confidentiality level and retention period of files, archivists or relevant business personnel shall supplement the manual description according to the actual situation to ensure the accuracy of the metadata.

[0128] 235. According to the metadata verification rules, the collected metadata is audited and verified.

[0129] Optionally, the collected metadata is audited and verified to check the integrity, accuracy, and consistency of the metadata. Establish metadata verification rules to check required fields, data formats, etc., and promptly discover and correct incorrect or missing metadata.

[0130] 236. The status of the metadata is updated in real time.

[0131] Specifically, the metadata that has passed the audit is stored and managed together with the electronic files, and the association relationship between the metadata and the electronic files is established to ensure the correspondence and consistency between the two. The metadata can be organized and stored by using XML-based encapsulation methods, etc., to facilitate data exchange and sharing.

[0132] During the management process of electronic files, when operations such as format conversion, migration, and appraisal are performed, the corresponding metadata is updated in a timely manner to ensure that the metadata can accurately reflect the latest status of the electronic files. At the same time, the metadata is regularly backed up and maintained to prevent data loss or damage.

[0133] In addition, during the entire electronic archiving process, a perfect log recording mechanism is established to record operation information, operation time, operators, and possible error information at each step, etc., for process traceability and auditing. Regularly perform performance evaluation and optimization on the electronic archiving process, and adjust the electronic signature trusted conversion module, XML document structure, storage strategy, etc. according to the actual business requirements and technological development situation to ensure the efficiency and adaptability of the process. Develop relevant security policies and permission management mechanisms to strictly control the personnel, system modules, and data access permissions involved in archiving to prevent security incidents such as information leakage and tampering. Through the above process design, the archiving of signed electronic files is realized, ensuring the integrity, accuracy, and security of relevant information, and laying a solid foundation for the long-term management and use of electronic files.

[0134] As described above, the embodiments of the present application guarantee the long-term availability of electronic files: removing the digital signature information and only retaining the seal graphics can avoid compatibility problems caused by technological updates, ensuring that electronic files can be normally viewed and used during long-term storage and use. Only retaining the seal graphics can reduce the dependence on specific technologies and systems, enabling electronic files to be used more widely.

[0135] Ensure the security of electronic files: Removing the digital signature information and only retaining the seal graphics can ensure the authenticity and integrity of electronic files, and strengthen the management and monitoring of the formation, transmission, and storage processes of electronic files.

[0136] Meet the long-term requirements of file management: Removing the digital signature information and only retaining the seal graphics can more conveniently integrate and share electronic files, improving the efficiency and convenience of file management. Following the traditional principles and norms of file management, in traditional file management, seals mainly exist in the form of graphics and serve as an important voucher and identifier. Removing the digital signature information and only retaining the seal graphics is more in line with the traditional principles and norms of file management, enabling electronic files to be consistent with traditional files in form and management methods, facilitating better understanding and acceptance of electronic files by file managers and users.

[0137] Promote the standardization and normalization of electronic file management: Removing the digital signature information and only retaining the seal graphics can unify the format and content of electronic files, avoiding the chaos of electronic file formats caused by inconsistent processing methods of electronic signature digital signatures by different units or departments. This helps improve the standardization and normalization level of electronic file management, laying a better foundation for the long-term management and use of electronic files. After removing the digital signature information, the management focus of electronic files will be more concentrated on the management of file content, metadata, and other relevant information. This is conducive to the file management department formulating more unified and clear standards and norms, including the classification, naming, storage format, metadata standards, etc. of electronic files, thus promoting the standardization and normalization process of electronic file management and improving the quality and management level of electronic files.

[0138] The embodiment of the present application adopts corresponding decryption and conversion processes for different signed document types to ensure that the integrity and readability of the original document data are not damaged during the trusted conversion process of the electronic signature; for different electronic file formats and encryption scenarios, a specific hash algorithm is used to calculate the hash value of the file to obtain the unique digital fingerprint of the file content, which is used to verify the integrity of the file in the subsequent processing process. For the extraction of digital signature information, it is necessary to accurately obtain parameters such as the signer information (including the subject name, issuing authority, etc. in the certificate), the signature algorithm, and the signature timestamp; design a reasonable XML schema (Schema) or document type definition (DTD) to standardize the solidification information, trusted conversion information and metadata. Accurately fill all kinds of information extracted from the electronic file into the corresponding element nodes of the XML document, and ensure the grammatical correctness of the XML document. Construct metadata, and solidify the data describing the background, content, structure and the entire management process of the electronic archive through technical measures. At the same time, information verification before archiving can ensure the authenticity and reliability of the electronic archive, realize source tracing and process recording, and at the same time ensure the integrity of the electronic archive.

[0139] The above steps are not to be performed in a strict order as described in the numbers, but should be understood as an overall solution.

[0140] In the second aspect, based on the above embodiments, Figure 2 A schematic diagram of the structure of an electronic signature processing device provided in an embodiment of the present application. Figure 2 The electronic signature processing device provided in this embodiment specifically includes: a file receiving module 201, a collection and association module 202, a trusted conversion module 203, an information storage module 204, an association establishment module 205 and a verification record module 206.

[0141] Among them, the file receiving module 201 is used to receive the signed electronic file and perform preprocessing; the collection and association module 202 is used to determine the conversion authority, collect metadata, and associate the metadata with the electronic file; the trusted conversion module 203 is used to extract the solidified information of the electronic file and perform a trusted conversion operation on the electronic file, remove the digital signature information, and obtain the solidified conversion information; the information storage module 204 is used to create a storage file, which stores the extracted solidified information and the solidified conversion information; the association establishment module 205 is used to establish an association relationship between the electronic file and the storage file; the verification record module 206 is used to perform verification and generate a verification report to record the verification results.

[0142] As described above, the embodiment of the present application receives a signed electronic file and performs preprocessing; determines whether it has conversion authority, collects metadata, and associates the metadata with the electronic file; extracts the solidified information of the electronic file and performs a trusted conversion operation on the electronic file, removes the digital signature information, and obtains solidified conversion information; creates a storage file, which stores the extracted solidified information and the solidified conversion information; establishes an association between the electronic file and the storage file; performs verification and generates a verification report, recording the verification results; removes the digital signature information, and only retains the electronic seal information, which can avoid compatibility issues caused by technological updates and ensure that electronic archives can be normally accessed and used during long-term preservation and use.

[0143] The electronic signature processing device provided in the embodiment of the present application can be used to execute the electronic signature processing method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0144] In a third aspect, an embodiment of the present application further provides an electronic device that can integrate the electronic signature processing device provided in an embodiment of the present application. Figure 3 Schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 3 The electronic device includes: an input device 33, an output device 34, a memory 32 and one or more processors 31; the memory 32 is used to store one or more programs; when the one or more programs are executed by the one or more processors 31, the one or more processors 31 implement the electronic signature processing method provided in the above embodiment. The input device 33, the output device 34, the memory 32 and the processor 31 can be connected by a bus or other means. Figure 3 The example of connecting through bus is taken in the following.

[0145] The processor 31 executes various functional applications and data processing of the device by running the software programs, instructions and modules stored in the memory 32, that is, implements the above-mentioned electronic signature processing method.

[0146] The electronic device provided above can be used to execute the electronic signature processing method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0147] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the electronic signature processing method as described above, and can achieve the same beneficial effects.

[0148] Certainly, the storage medium containing computer-executable instructions provided by the embodiments of the present application is not limited to the electronic signature processing method as described above, and can also execute related operations in the electronic signature processing methods provided by any embodiment of the present application.

[0149] In a fifth aspect, the embodiments of the present application further provide a computer program product. The methods described in the various embodiments of the present application can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instructions are loaded and executed on a computer, the processes or functions described in the various embodiments of the present application are executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device, an OAM (Open Application Model), or other programmable devices.

[0150] The computer program or instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program or instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center in a wired or wireless manner. The computer-readable storage medium can be any available medium that a computer can access, or a data storage device such as a server or data center integrating one or more available media. The available medium can be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it can also be an optical medium, such as a digital video disc; or it can be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium can be a volatile or non-volatile storage medium, or can include both volatile and non-volatile types of storage media.

[0151] In several embodiments provided in this application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions, and operations of devices, methods, and computer program products according to multiple embodiments of this application. In this regard, each block in the flowchart or block diagram may represent a module, a program segment, or a part of code, and the module, program segment, or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than that marked in the accompanying drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and / or flowchart, as well as the combination of blocks in the block diagram and / or flowchart, can be implemented by a dedicated hardware-based system that performs the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0152] In addition, each functional module in various embodiments of this application can be integrated together to form an independent part, or each module can exist alone, or two or more modules can be integrated to form an independent part.

[0153] If the said function is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing an electronic device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of this application. The aforementioned storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical discs that can store program codes.

[0154] The above are only embodiments of the present application and are not intended to limit the protection scope of the present application. For those skilled in the art, the present application may have various changes and modifications. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the protection scope of the present application. It should be noted that similar reference numerals and letters denote similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings.

[0155] As described above, these are only the specific implementation manners of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by the present application, and all such changes or replacements should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

[0156] It should be noted that in this text, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements not only includes those elements but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device. Without further limitation, an element defined by the phrase "comprising a..." does not exclude the existence of additional identical elements in the process, method, article or device comprising the said element.

Claims

1. A method for processing an electronic signature, characterized in that: The method comprises: Receive signed electronic documents and pre-process them; Determine conversion permissions, collect metadata, and associate metadata with electronic files; Extract the solidified information of the electronic file and perform a trusted conversion operation on the electronic file, remove the digital signature information, and obtain the solidified conversion information; Creating a storage file, the storage file storing the extracted solidification information and solidification conversion information; Establish the relationship between electronic files and stored files; Perform verification and generate a verification report to record the verification results.

2. The electronic signature processing method according to claim 1, characterized in that: The determining of having the conversion authority, collecting metadata, and associating the metadata with the electronic file includes: Load the electronic files that need to be converted to trust, automatically parse the file structure, identify the electronic signature location and attribute information, and determine whether the conversion authority is available; If the conversion authority is not available, the trusted conversion process ends; If you have the conversion permission, metadata will be collected in real time and associated with the electronic file; the metadata includes the file's creation time, author, and modification record.

3. The electronic signature processing method according to claim 1, characterized in that: The step of extracting the solidified information of the electronic file and performing a trusted conversion operation on the electronic file to remove the digital signature information to obtain the solidified conversion information includes: Extracting the fixed information of the electronic file and removing the digital signature information, wherein the fixed information includes relevant parameters of the digital signature, hash value, timestamp and electronic seal information; Conduct integrity checks and verifications on the electronic files to be extracted. If any abnormalities are found, record them in a timely manner and issue reminders; Convert electronic files, extract electronic signature information, and retain the content of the original electronic files; Delete the reference relationship related to the signature to be converted to obtain the modified data; The conversion data is recorded in the corresponding metadata structure to obtain solidified conversion information.

4. The electronic signature processing method according to claim 1, characterized in that: The creating of a storage file, wherein the storage file stores the extracted solidification information and solidification conversion information, includes: Creating a storage file, the storage file stores the extracted solidification information, solidification conversion information and related metadata; Different element tags are defined for the storage files to identify parameters of the solidified information and parameters of the solidified conversion information; wherein the parameters of the solidified information include: digital signature parameters, hash values ​​and timestamps, and the parameters of the solidified conversion information include: operator, conversion time and conversion reason; The extracted solidification information and solidification conversion information are filled in according to the labels of the corresponding storage files.

5. The electronic signature processing method according to claim 1, characterized in that: The establishing of the association relationship between the electronic file and the stored file includes: The electronic files after the credible conversion are saved in accordance with the electronic archive storage specifications and classified and stored according to the set rules; The generated storage file is associated and saved with the corresponding trusted converted electronic file.

6. The electronic signature processing method according to claim 1, characterized in that: The verification is performed and a verification report is generated to record the verification results, including: Verify and validate electronic documents, stored files, and related metadata; Generate verification reports and record verification results; If the verification result shows passed, the electronic filing process is complete; If there is a problem, record a detailed description of the problem and take action based on the type of problem.

7. The electronic signature processing method according to claim 1, characterized in that: After the association relationship between the electronic file and the stored file is established, the following steps are also included: Supplementary collection and improvement of the metadata of electronic files are carried out, and the improved metadata is stored in the storage file.

8. The electronic signature processing method according to claim 1, characterized in that: The collected metadata includes: Determine the scope and standards of metadata collection; In the process of electronic document formation, handling and circulation, metadata is collected in real time; metadata includes the creation time, author and modification record of the document; For existing metadata, it is automatically imported; For metadata that cannot be obtained through automatic capture, receive information supplemented by manual description; Review and verify the collected metadata according to metadata verification rules; Update the status of metadata in real time.

9. An electronic signature processing device, characterized in that: include: The document receiving module is used to receive the electronic document with signature and perform pre-processing; A collection and association module is used to determine the conversion authority, collect metadata, and associate the metadata with the electronic file; A trusted conversion module is used to extract the solidified information of the electronic file and perform a trusted conversion operation on the electronic file, remove the digital signature information, and obtain the solidified conversion information; An information storage module, used for creating a storage file, wherein the storage file stores the extracted solidification information and solidification conversion information; An association establishment module is used to establish an association relationship between electronic files and stored files; The verification record module is used to perform verification and generate verification reports to record verification results.

10. An electronic device, characterized in that: include: A processor, a memory and a bus, wherein the processor is connected to the memory via the bus, and the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, they are used to implement the electronic signature processing method according to any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the server, the electronic signature processing method according to any one of claims 1 to 8 is implemented.

12. A computer program product, characterized in that The computer program product comprises instructions which, when executed by a computer, cause the computer to implement the method according to any one of claims 1-8.

Images