A method for verifying electronic contract signature based on trusted timestamp

Abstract

The present invention discloses a method for verifying electronic contract signatures based on a trusted timestamp, which relates to the technical field of blockchain and electronic contract signatures. The method comprises receiving an electronic contract signature document to be verified, extracting a timestamp data block and signature data from the electronic contract signature document; sending the timestamp data block to a trusted timestamp service agency for verification, obtaining a storage record corresponding to the electronic contract signature document from a blockchain node, extracting the blockchain storage time and the contract hash value; determining the signing time information of the timestamp data block and the blockchain storage time of the storage record, and outputting a verification pass flag when the time difference between the two is less than a preset threshold and the contract hash value matches the contract document characteristic value. The present invention effectively solves the technical problem of insufficient reliability of traditional single time source verification by constructing a dual verification system of a trusted timestamp service agency and a blockchain distributed ledger.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain and electronic contract signing, and in particular to an electronic contract signing verification method based on a trusted timestamp. Background Art

[0002] With the increasing popularity of e-commerce and digital office work, electronic contracts, as important legal documents, require the authenticity and immutability of their signing process to ensure their legal validity. Blockchain technology, with its decentralized, immutable, and traceable nature, provides a new technical means for the secure storage of electronic contracts. However, existing blockchain-based electronic contract signing methods primarily focus on on-chain storage of contract content and the signing process, lacking reliable verification of timestamp data and multi-dimensional security assurance. Furthermore, the automated verification mechanism of smart contracts can suffer from insufficient trust in verification nodes and limited anomaly detection capabilities in practical applications, making it difficult to meet the requirements for high-security contract signing. Therefore, achieving reliable and accurate verification of the signing time of electronic contracts, and combining multi-node consensus with automated smart contract verification to enhance signing security, has become a pressing challenge facing existing technologies.

[0003] CN112669176B discloses a smart contract-based electronic contract signing method, which includes providing a contract signing interface, completing an electronic signature and uploading a digital fingerprint to a blockchain, constructing and publishing a smart contract, and using a verification node to compare and sign the signature results. Ultimately, the smart contract verifies that the contract signing is valid and uploads the digital fingerprint to the blockchain. This method substantially improves the efficiency of electronic contract signing and the security of evidence storage. However, its over-reliance on the signature consensus of verification nodes carries the risk of insufficient verification nodes or malicious nodes influencing the judgment results. Furthermore, the lack of independent verification of the timestamp's credibility makes it difficult to prevent time information from being tampered with or forged.

[0004] CN115619409A discloses a highly reliable electronic contract signing method and system based on autonomous consortium blockchain technology. Through online registration, identity authentication, electronic seal signing, and full blockchain uploading of signed data, this method ensures full control over the online editing and signing process of electronic contracts and reliable data storage. This method improves the transparency and data security of the signing process, but its reliance on centralized account management and key distribution mechanisms poses security risks for identity authentication. It also fails to fully utilize trusted timestamp technology for multi-dimensional verification of signing times and lacks the ability to intelligently identify and warn of abnormal signing behavior, limiting its application in scenarios requiring high security. Summary of the Invention

[0005] In view of the problems of insufficient trust in verification nodes, lack of credibility of timestamps and difficulty in effectively identifying abnormal signing behavior in existing electronic contract signing methods, the present invention is proposed.

[0006] Therefore, the problem to be solved by the present invention is how to achieve multi-dimensional trusted verification of the electronic contract signing process based on trusted timestamp technology, effectively prevent time information tampering and node malicious behavior, and improve the security, authenticity and legal effect of electronic contract signing.

[0007] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0008] In a first aspect, an embodiment of the present invention provides an electronic contract signature verification method based on a trusted timestamp, which includes:

[0009] receiving an electronic contract signature document to be verified, and extracting a timestamp data block and signature data from the electronic contract signature document;

[0010] Send the timestamp data block to a trusted timestamp service for verification, obtain the evidence record corresponding to the electronic contract signing document from the blockchain node, and extract the blockchain evidence time and contract hash value;

[0011] Determine the signing time information of the timestamp data block and the blockchain storage time of the storage record. When the time difference between the two is less than a preset threshold and the contract hash value matches the contract file feature value, output a verification pass mark.

[0012] As a preferred solution of the electronic contract signature verification method based on trusted timestamp of the present invention, the output method of the verification pass mark is:

[0013] Read the signing time information of the timestamp data block and the blockchain evidence storage time of the blockchain evidence record from the verification data buffer area, calculate the time difference through the preset time difference calculation module, and compare the time difference with the preset time threshold;

[0014] When the time difference is less than the first preset time threshold, the corresponding timestamp data block is marked as green security level, and the signature algorithm type of the timestamp data block is detected at the same time; if the signature algorithm type is the national secret SM2 algorithm and the contract hash value completely matches the contract file feature value, a verification pass mark is generated;

[0015] When the time difference is greater than or equal to a first preset time threshold and less than a second preset time threshold, the corresponding timestamp data block is marked as a yellow warning level and a supplementary verification mechanism is initiated;

[0016] When the time difference is greater than or equal to the second preset time threshold and less than the third preset time threshold, the corresponding timestamp data block is marked as a red warning level and an exception handling mechanism is activated;

[0017] When the time difference is greater than or equal to a third preset time threshold, or when the time difference is a negative value, the corresponding timestamp data block is marked as a black failure level, and a safety alarm mechanism is triggered;

[0018] The judgment result data is written into the verification log database, and the verification status information is displayed on the verification interface.

[0019] As a preferred embodiment of the electronic contract signature verification method based on a trusted timestamp described in the present invention, the supplementary verification mechanism includes: extracting the signing geographic location information of the electronic contract signing document, and generating a verification pass mark when the signing geographic location information indicates a cross-time zone operation and the contract hash value completely matches the contract document feature value;

[0020] The exception handling mechanism includes: retrieving the network transmission log of the electronic contract signing document, analyzing the data packet timestamp sequence of the network transmission log, and generating a verification pass mark when it is detected that the data packet timestamp sequence exceeds the preset network delay record and the contract hash value completely matches the contract document feature value;

[0021] The security warning mechanism includes: freezing the verification process of the electronic contract signing document, generating a verification failure mark, and pushing an abnormality notification to a preset security module.

[0022] As a preferred solution of the electronic contract signature verification method based on a trusted timestamp according to the present invention, wherein: the timestamp data block is sent to a trusted timestamp service agency for verification, and the evidence record corresponding to the electronic contract signature document is obtained from the blockchain node, and the blockchain evidence time and contract hash value are extracted, including:

[0023] Constructing a timestamp verification request data packet, and sending the timestamp verification request data packet to the trusted timestamp service agency through a secure communication channel;

[0024] Based on the blockchain location information of the electronic contract signing document, a proof query request is sent to the corresponding blockchain node;

[0025] The blockchain node retrieves the blockchain ledger based on the evidence query request, extracts the evidence record corresponding to the electronic contract signing document, and returns the evidence record to the contract verification terminal, wherein the blockchain evidence time and the contract document characteristic value in the evidence record are stored in the verification data cache area.

[0026] As a preferred solution of the electronic contract signing verification method based on trusted timestamp described in the present invention, the trusted timestamp service agency receives the timestamp verification request data packet, queries the timestamp record corresponding to the contract hash value from the timestamp database, and judges the timestamp record with the signing time information of the timestamp data block.

[0027] As a preferred solution of the electronic contract signature verification method based on a trusted timestamp of the present invention, wherein: receiving the electronic contract signature document to be verified, extracting the timestamp data block and signature data from the electronic contract signature document, including:

[0028] Receiving the electronic contract signature document to be verified through the input port of the contract verification terminal, and using a preset file parsing module to perform data parsing on the electronic contract signature document to separate it into a timestamp data block and signature data;

[0029] Read the contract hash value and the signing time information from the timestamp data block, and temporarily store the contract hash value and the signing time information in the verification buffer area;

[0030] The digital certificate information and digital signature of the signatory are extracted from the signature data, and the format validity of the digital certificate information of the signatory is preliminarily verified.

[0031] As a preferred solution of the electronic contract signature verification method based on a trusted timestamp according to the present invention, the preliminary verification of the format validity includes:

[0032] Parsing the certificate fields of the signer's digital certificate information, wherein the certificate fields include the certificate version number, serial number, signature algorithm identifier, certificate issuer information, certificate validity start and end time, and certificate extension format;

[0033] Check the validity period of the certificate to see if the current time is within the validity period.

[0034] Read the root certificate authority identifier of the certificate issuer information and match it with a preset list of trusted certificate authorities;

[0035] Verify the certificate extension format and check whether the signature algorithm identifier is an encryption algorithm type supported by the system. The certificate extension format includes key usage, certificate policy, and CRL distribution point.

[0036] As a preferred solution of the electronic contract signing verification method based on trusted timestamp described in the present invention, wherein: the timestamp data block includes the contract hash value and signing time information; the contract hash value is generated by the SHA-256 algorithm; the signing time information is issued by a trusted timestamp service agency; the signature data includes the digital certificate information and digital signature of the signatory; the digital signature is generated based on the RSA algorithm.

[0037] In a third aspect, an embodiment of the present invention provides a computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: when the computer program instructions are executed by the processor, the steps of the electronic contract signing verification method based on a trusted timestamp as described in the first aspect of the present invention are implemented.

[0038] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium on which a computer program is stored, wherein: when the computer program instructions are executed by a processor, the steps of the electronic contract signing verification method based on a trusted timestamp as described in the first aspect of the present invention are implemented.

[0039] Compared with the existing technology, the beneficial effects of the present invention are: by constructing a dual verification system of a trusted timestamp service agency and a blockchain distributed ledger, the technical problem of insufficient reliability of traditional single time source verification is effectively solved, and the credibility and tamper-proof ability of the electronic contract signing time are significantly improved; the method adopts an intelligent multi-level verification and judgment mechanism, combined with a security level marking system, which can accurately identify various abnormal situations, and provide corresponding supplementary verification and exception handling mechanisms for special scenarios such as cross-time zone operations and network transmission delays, greatly improving the accuracy and adaptability of the verification process; at the same time, through the signature type detection of the national secret SM2 algorithm and the SHA-256 hash value matching verification, the integrity and authenticity of the signature data are ensured, providing efficient, secure and reliable contract signing verification technical support for e-commerce, digital office and other fields. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] To more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. Those skilled in the art can also derive other drawings based on these drawings without inventive effort. Among them:

[0041] Figure 1 The figure is a flow chart of an electronic contract signing verification method based on a trusted timestamp. DETAILED DESCRIPTION

[0042] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0043] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0044] Secondly, the term "one embodiment" or "embodiment" herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The phrase "in one embodiment" appearing in various places throughout this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive of other embodiments.

[0045] Reference Figure 1 , is an embodiment of the present invention, which provides an electronic contract signature verification method based on a trusted timestamp, including:

[0046] S1: Receive the electronic contract signature document to be verified, and extract the timestamp data block and signature data from the electronic contract signature document.

[0047] S1.1: Receive the electronic contract signature file to be verified through the input port of the contract verification terminal, use the preset file parsing module to parse the electronic contract signature file, and separate it into a timestamp data block and signature data.

[0048] It should be noted that the timestamp data block includes the contract hash value and signing time information; the contract hash value is generated by the SHA-256 algorithm; the signing time information is issued by a trusted timestamp service agency; the signature data includes the signatory's digital certificate information and digital signature; the digital signature is generated based on the RSA algorithm.

[0049] S1.2: Read the contract hash value and signing time information from the timestamp data block, and temporarily store the contract hash value and signing time information in the verification buffer area.

[0050] S1.3: Extract the signatory’s digital certificate information and digital signature from the signature data, and perform preliminary verification of the format validity of the signatory’s digital certificate information.

[0051] In an optional implementation, the format validity is initially verified, including: parsing the certificate fields of the signer's digital certificate information, where the certificate fields include the certificate version number, serial number, signature algorithm identifier, certificate issuer information, certificate validity start and end times, and certificate extension format; checking the certificate validity start and end times to determine whether the current verification time is within the certificate validity range; reading the root certificate authority identifier of the certificate issuer information and matching it with a preset list of trusted certificate authorities; verifying the certificate extension format and checking whether the signature algorithm identifier is an encryption algorithm type supported by the system, and the certificate extension format includes key usage, certificate policy, and CRL distribution point.

[0052] For example, if the signatory is Company A, its digital certificate information includes that the issuing agency is a national CA agency, the certificate is valid from January 1, 2024 to December 31, 2026, the signature algorithm is the national secret SM2 algorithm, and the current time is verified to be within the validity period of the certificate, and the issuing agency information matches the preset trusted CA list, and the certificate is deemed to have passed the verification.

[0053] S2: Send the timestamp data block to a trusted timestamp service agency for verification, obtain the evidence record corresponding to the electronic contract signing document from the blockchain node, and extract the blockchain evidence time and contract hash value.

[0054] S2.1: Construct a timestamp verification request data packet and send the timestamp verification request data packet to the trusted timestamp service agency through a secure communication channel.

[0055] In an optional implementation, the trusted timestamp service agency receives the timestamp verification request data packet, queries the timestamp record corresponding to the contract hash value from the timestamp database, and compares the timestamp record with the signing time information of the timestamp data block.

[0056] Preferably, the specific steps for the trusted timestamp service agency to judge the signing time information of the timestamp record and the timestamp data block include: parsing the timestamp verification request data packet, extracting the signing time information and the contract hash value in the timestamp data block, wherein the signing time information includes the timestamp issuance time, the timestamp serial number and the timestamp signature algorithm identifier; based on the contract hash value, retrieving the corresponding original timestamp record in the timestamp database, wherein the original timestamp record includes the original issuance time of the timestamp, the time source identifier, and the timestamp issuing authority certificate information; judging whether the timestamp serial number of the timestamp data block is consistent with the serial code of the original timestamp record, and verifying whether the timestamp signature algorithm identifier is consistent with the original timestamp The signature algorithm registered in the record is consistent; the timestamp issuance time is compared with the original timestamp issuance time, and the allowable time error range is ±1 second. If it exceeds the error range, the timestamp record is judged to be abnormal; verify whether the time source identifier of the original timestamp record is the National Time Service Center, where the time source identifier includes the time service server number and the time synchronization status code; check the status of the timestamp issuing authority certificate information, including the certificate validity period, certificate revocation status and certificate trust chain integrity; when all the above judgments are passed, a timestamp verification success identifier is generated, and the verification success identifier is returned together with the key fields in the original timestamp record; if any judgment fails, a verification failure identifier including the specific abnormality type is generated.

[0057] S2.2: Based on the blockchain location information of the electronic contract signing document, send a proof query request to the corresponding blockchain node.

[0058] S2.3: The blockchain node retrieves the blockchain ledger based on the evidence query request, extracts the evidence record corresponding to the electronic contract signing document, and returns the evidence record to the contract verification terminal. The blockchain evidence time and contract document feature value in the evidence record are stored in the verification data cache.

[0059] S3: Determine the signing time information of the timestamp data block and the blockchain storage time of the storage record. When the time difference between the two is less than the preset threshold and the contract hash value matches the contract file feature value, output the verification pass mark.

[0060] S3.1: Read the signing time information of the timestamp data block and the blockchain evidence time of the blockchain evidence record from the verification data cache area, calculate the time difference through the preset time difference calculation module, and judge the time difference with the preset time threshold.

[0061] It should be noted that the preset time thresholds include a first preset time threshold, a second preset time threshold and a third preset time threshold; the first preset time threshold is set based on the upper limit of the network transmission delay between the signing node and the evidence storage node, the device time synchronization error range and the system clock drift range; the second preset time threshold is set based on possible network transmission fluctuations, time zone conversion errors in cross-regional signing scenarios and a certain system error tolerance; the third preset time threshold is set based on the maximum tolerable time difference in abnormal scenarios. If this threshold is exceeded, it is regarded as a high-risk or failure state, and a security alarm and verification failure handling mechanism need to be triggered immediately.

[0062] In an optional implementation, when the time difference is less than a first preset time threshold, the corresponding timestamp data block is marked as a green security level, and the signature algorithm type of the timestamp data block is detected at the same time; if the signature algorithm type is the national secret SM2 algorithm and the contract hash value completely matches the contract file characteristic value, a verification pass mark is generated.

[0063] Preferably, the supplementary verification mechanism includes: extracting the signing geographic location information of the electronic contract signing document, and generating a verification pass mark when the signing geographic location information shows a cross-time zone operation and the contract hash value completely matches the contract file characteristic value.

[0064] In an optional implementation, when the time difference is greater than or equal to a first preset time threshold and less than a second preset time threshold, the corresponding timestamp data block is marked as a yellow warning level and a supplementary verification mechanism is initiated.

[0065] Preferably, the exception handling mechanism includes: retrieving the network transmission log of the electronic contract signing document, analyzing the data packet timestamp sequence of the network transmission log, and generating a verification pass mark when it is detected that the data packet timestamp sequence exceeds the preset network delay record and the contract hash value completely matches the contract file characteristic value.

[0066] For example, in a certain verification, the signing time of the timestamp data block is 14:32:10 on June 15, 2024, and the blockchain evidence storage time is 14:32:50 on June 15, 2024, with a time difference of 40 seconds. This exceeds the first preset time threshold (2 seconds) and is lower than the second preset time threshold (60 seconds). It is automatically marked as a yellow warning level, and the supplementary verification mechanism is activated to retrieve the geographical location information of the contract signing. After analysis, it is found that the geographical location of the contract signing is in a different country. After combining the time zone error, the time threshold is readjusted, and it is finally confirmed that the time difference is within the allowable range, and the verification pass mark is output.

[0067] In an optional implementation, when the time difference is greater than or equal to the second preset time threshold and less than a third preset time threshold, the corresponding timestamp data block is marked as a red warning level and an exception handling mechanism is initiated.

[0068] In an optional implementation, when the time difference is greater than or equal to a third preset time threshold, or the time difference is a negative value, the corresponding timestamp data block is marked as a black failure level, and a safety alarm mechanism is triggered.

[0069] Preferably, the security warning mechanism includes: freezing the verification process of the electronic contract signature document, generating a verification failure mark, and pushing an abnormality notification to a preset security module.

[0070] For example, the signing time of a contract is 14:32:10 on June 15, 2024, and the blockchain evidence storage time is 14:34:00 on June 15, 2024. The time difference is 110 seconds, which exceeds the third preset time threshold (100 seconds); at the same time, through SHA-256 comparison, it is found that the contract hash value does not match the evidence feature value, a double abnormality mark is generated, the emergency response plan is activated, the contract file is frozen and transferred to a special queue, and the signatory is further credit-rated. It is found that there are multiple failed signing records in its signing history and the credit score is lower than the set threshold of 80 points. Therefore, the signatory's subsequent signing authority is automatically restricted, and an abnormal alarm is pushed to the contract management platform.

[0071] Specifically, when the time difference is greater than or equal to the preset time threshold, a time anomaly indicator is generated and the following processing is performed: the operation log of the electronic contract signing document is extracted, and the signing behavior sequence recorded in the operation log is analyzed; when the signing behavior sequence shows that there are multiple failed signing attempts, and the number of failures exceeds the preset threshold N (where N is 3 times), the electronic contract signing document is marked as a high-risk contract, and a signing time anomaly alarm is pushed to the contract management platform; the signing time anomaly alarm includes the time difference data and the operation behavior analysis report.

[0072] Furthermore, when the contract hash value does not match the contract file characteristic value, an integrity exception flag is generated and the following processing is performed: the file comparison module is called to scan the electronic contract signature document field by field to generate a difference location report; when the difference location report shows that key contract terms (including the contract subject, amount and performance period) have changed, the anti-tampering protection mechanism will be triggered, which includes: freezing the subsequent operation permissions of the electronic contract signature document, saving the difference location report to the blockchain evidence storage node, and pushing a contract integrity violation warning to the preset interface.

[0073] Furthermore, when the time difference exceeds the limit and the characteristic value does not match at the same time, a double abnormality mark is generated and the following processing is performed: the emergency response plan is initiated, which includes: transferring the electronic contract signing document to a special queue, extracting the signatory's historical signing record for credit assessment, and when the credit assessment result is lower than the preset credit threshold, the signatory's subsequent signing authority will be automatically restricted, and the contract-related parties will be notified to start the manual review process.

[0074] S3.2: Write the judgment result data into the verification log database and display the verification status information on the verification interface.

[0075] In summary, the present invention effectively solves the technical problem of insufficient reliability of traditional single time source verification by constructing a dual verification system of a trusted timestamp service agency and a blockchain distributed ledger, and significantly improves the credibility and tamper-proof ability of the electronic contract signing time; the method adopts an intelligent multi-level verification and judgment mechanism, combined with a security level marking system, which can accurately identify various abnormal situations, and provide corresponding supplementary verification and exception handling mechanisms for special scenarios such as cross-time zone operations and network transmission delays, greatly improving the accuracy and adaptability of the verification process; at the same time, through the signature type detection of the national secret SM2 algorithm and the SHA-256 hash value matching verification, the integrity and authenticity of the signature data are ensured, providing efficient, secure and reliable contract signing verification technical support for e-commerce, digital office and other fields.

[0076] This embodiment also provides an electronic device comprising a processor, memory, a communication interface, a display, and an input device connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal via wired or wireless communication. The wireless communication can be achieved via Wi-Fi, a carrier network, NFC (near-field communication), or other technologies. The display of the computer device can be a liquid crystal display or an electronic ink display. The input device of the computer device can be a touchscreen layer covering the display, buttons, a trackball, or a touchpad provided on the computer device housing, or an external keyboard, touchpad, or mouse.

[0077] The storage medium proposed in this embodiment and the method proposed in the above embodiment belong to the same inventive concept. For technical details not fully described in this embodiment, please refer to the above embodiment, and this embodiment has the same beneficial effects as the above embodiment.

[0078] Through the above description of the embodiments, those skilled in the art can clearly understand that the present invention can be implemented with the help of software and necessary general-purpose hardware. Of course, it can also be implemented with hardware, but in many cases the former is a better embodiment. Based on this understanding, the technical solution of the present invention, or the part that contributes to the existing technology, can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute the method of the embodiment of the present invention.

[0079] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

[0080] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of a fully hardware embodiment, a fully software embodiment, or an embodiment combining software and hardware. Furthermore, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The solutions in the embodiments of the present application may be implemented using various computer languages.

[0081] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0082] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0083] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0084] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present application.

[0085] Obviously, those skilled in the art may make various changes and modifications to this application without departing from the spirit and scope of this application. Thus, if these modifications and variations of this application fall within the scope of the claims of this application and their equivalents, this application is intended to include these modifications and variations.

Claims

1. A method for verifying electronic contract signature based on a trusted timestamp, characterized by: include, receiving an electronic contract signature document to be verified, and extracting a timestamp data block and signature data from the electronic contract signature document; Send the timestamp data block to a trusted timestamp service for verification, obtain the evidence record corresponding to the electronic contract signing document from the blockchain node, and extract the blockchain evidence time and contract hash value; Determine the signing time information of the timestamp data block and the blockchain storage time of the storage record. When the time difference between the two is less than a preset threshold and the contract hash value matches the contract file feature value, output a verification pass flag. Read the signing time information of the timestamp data block and the blockchain evidence storage time of the blockchain evidence record from the verification data buffer area, calculate the time difference through the preset time difference calculation module, and compare the time difference with the preset time threshold; When the time difference is less than the first preset time threshold, the corresponding timestamp data block is marked as green security level, and the signature algorithm type of the timestamp data block is detected at the same time; if the signature algorithm type is the national secret SM2 algorithm and the contract hash value completely matches the contract file feature value, a verification pass mark is generated; When the time difference is greater than or equal to a first preset time threshold and less than a second preset time threshold, the corresponding timestamp data block is marked as a yellow warning level and a supplementary verification mechanism is initiated; When the time difference is greater than or equal to the second preset time threshold and less than the third preset time threshold, the corresponding timestamp data block is marked as a red warning level and an exception handling mechanism is activated; When the time difference is greater than or equal to a third preset time threshold, or when the time difference is a negative value, the corresponding timestamp data block is marked as a black failure level, and a safety alarm mechanism is triggered; Write the judgment result data into the verification log database and display the verification status information on the verification interface; The supplementary verification mechanism includes: extracting the signing geographical location information of the electronic contract signing document, and generating a verification pass mark when the signing geographical location information shows a cross-time zone operation and the contract hash value completely matches the contract document feature value; The exception handling mechanism includes: retrieving the network transmission log of the electronic contract signing document, analyzing the data packet timestamp sequence of the network transmission log, and generating a verification pass mark when it is detected that the data packet timestamp sequence exceeds the preset network delay record and the contract hash value completely matches the contract document feature value; The security warning mechanism includes: freezing the verification process of the electronic contract signing document, generating a verification failure mark, and pushing an abnormality notification to a preset security supervision module.

2. The electronic contract signature verification method based on a trusted timestamp according to claim 1, characterized in that: Send the timestamp data block to a trusted timestamp service agency for verification, obtain the evidence record corresponding to the electronic contract signing document from the blockchain node, and extract the blockchain evidence time and contract hash value, including: Constructing a timestamp verification request data packet, and sending the timestamp verification request data packet to the trusted timestamp service agency through a secure communication channel; Based on the blockchain location information of the electronic contract signing document, a proof query request is sent to the corresponding blockchain node; The blockchain node retrieves the blockchain ledger based on the evidence query request, extracts the evidence record corresponding to the electronic contract signing document, and returns the evidence record to the contract verification terminal, wherein the blockchain evidence time and the contract document characteristic value in the evidence record are stored in the verification data cache area.

3. The electronic contract signature verification method based on a trusted timestamp according to claim 2, characterized in that: The trusted timestamp service agency receives the timestamp verification request data packet, queries the timestamp record corresponding to the contract hash value from the timestamp database, and compares the timestamp record with the signing time information of the timestamp data block.

4. The electronic contract signature verification method based on a trusted timestamp according to claim 3, characterized in that: Receiving an electronic contract signature document to be verified, and extracting a timestamp data block and signature data from the electronic contract signature document, including: Receiving the electronic contract signature document to be verified through the input port of the contract verification terminal, and using a preset file parsing module to perform data parsing on the electronic contract signature document to separate it into a timestamp data block and signature data; Read the contract hash value and the signing time information from the timestamp data block, and temporarily store the contract hash value and the signing time information in the verification buffer area; The digital certificate information and digital signature of the signatory are extracted from the signature data, and the format validity of the digital certificate information of the signatory is preliminarily verified.

5. The electronic contract signature verification method based on a trusted timestamp according to claim 4, characterized in that: The preliminary verification of the validity of the format includes: Parsing the certificate fields of the signer's digital certificate information, wherein the certificate fields include the certificate version number, serial number, signature algorithm identifier, certificate issuer information, certificate validity start and end time, and certificate extension format; Check the validity period of the certificate to see if the current time is within the validity period. Read the root certificate authority identifier of the certificate issuer information and match it with a preset list of trusted certificate authorities; Verify the certificate extension format and check whether the signature algorithm identifier is an encryption algorithm type supported by the system. The certificate extension format includes key usage, certificate policy, and CRL distribution point.

6. The electronic contract signature verification method based on a trusted timestamp according to claim 4, characterized in that: The timestamp data block includes the contract hash value and signing time information; the contract hash value is generated by the SHA-256 algorithm; the signing time information is issued by a trusted timestamp service agency; the signature data includes the digital certificate information and digital signature of the signatory; the digital signature is generated based on the RSA algorithm.

7. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the electronic contract signing verification method based on a trusted timestamp are implemented as described in any one of claims 1 to 6.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the electronic contract signing verification method based on a trusted timestamp are implemented as described in any one of claims 1 to 6.

Images