Electronic signing method and device and electronic equipment

Abstract

The invention provides an electronic signing method and device and electronic equipment, and the method comprises the steps: initiating an electronic signing service according to a service initiation instruction, and generating a dynamic two-dimensional code containing a signing list; in response to the login operation of the user on the H5 contract signing page, displaying the contract signing list and the basic identity information of the user for the user to check; evaluating the risk level of the user for handling the electronic contract service, determining combined identity authentication according to the risk level, and serially executing an authentication mode in the combined identity authentication; each contract corresponding to the contract signing list is loaded and displayed for the user to read, and whether the user fully reads each contract is doubly verified; after the double verification ensures that the user reads each contract totally, activating a signing button, responding to a signing request initiated by the user, and checking whether signing data is changed or not; and if not, calling a certification authority interface to generate an electronic signature, synthesizing a signature file based on the electronic signature, generating an evidence chain, and completing evidence storage.

Description

Electronic signing methods, devices and electronic equipment Technical Field

[0001] This disclosure relates to the field of financial technology, specifically to an electronic signing method, device, and electronic device. Background Technology

[0002] With the deep integration of mobile internet and fintech, electronic signatures have replaced traditional paper signatures and are widely used in areas such as bank lending, financing guarantees, and housing leasing.

[0003] However, in the actual implementation of high-risk financial transactions, the electronic signing process has exposed some significant technical flaws and compliance loopholes. For example, the current electronic signing process only provides a full preview of the contract in PDF format. Faced with dozens of pages of legal text, users often habitually scroll quickly to the bottom and check "I have read," but in reality, they have not read the entire contract. This makes it difficult for the platform to provide evidence in the event of subsequent legal disputes.

[0004] There is currently no effective technical solution to the problem of platforms having difficulty providing evidence when legal disputes arise during electronic signing due to users not reading the full text of the contract. Summary of the Invention

[0005] The main purpose of this disclosure is to provide an electronic signing method, device, and electronic device to solve the problem of platform difficulty in providing evidence when legal disputes arise due to users not reading the full text of the contract.

[0006] To achieve the above objectives, a first aspect of this disclosure provides an electronic signing method, comprising: initiating an electronic signing service according to a service initiation instruction, and generating a dynamic QR code containing a signing list; in response to a user's login operation on an H5 signing page after scanning the dynamic QR code and using basic identity information, displaying the signing list and the user's basic identity information for the user to verify; in response to the user's verification and confirmation operation, assessing the risk level of the user's handling of the electronic signing service, determining a corresponding combined identity authentication based on the risk level, and sequentially executing the authentication methods in the combined identity authentication, wherein the combined identity authentication includes one or more authentication methods configured in sequence, such as real-name authentication, element authentication, facial recognition authentication, SMS authentication, and liveness authentication. The authentication process includes three-factor authentication by the mobile operator and / or four-factor authentication by the bank card. After all authentication methods in the combined identity authentication pass, the contracts corresponding to the signed list are loaded and displayed for the user to read. Front-end and back-end verifications are used to double-verify whether the user has read all contracts. After ensuring that the user has read all contracts, the signing button is activated. In response to the signing request initiated by the user clicking the signing button, the signing data is checked for changes. The signing data includes the user's basic identity information, contract status, and business data. If the signing data has not changed, the consistency check passes, the certification authority interface is called to generate an electronic signature, and a signed document is synthesized based on the electronic signature to generate an evidence chain, completing the evidence storage.

[0007] Optionally, the real-name authentication includes: verifying whether the name and ID number match by calling the application programming interface to connect to the bank's database based on the user's name and ID number; the operator's three-factor authentication includes: verifying whether the real-name mobile phone number is the name corresponding to the ID number holder based on the user's name, ID number, and real-name mobile phone number; the bank card four-factor authentication includes: authenticating through the bank's channel based on the user's name, ID number, bank card number, and bank-registered mobile phone number to ensure that the user has a physical financial account; the facial recognition authentication includes: comparing the bank's facial image with the on-site facial image based on the user's name, ID number, and on-site captured facial image, calculating the similarity, and ensuring that the ID holder is operating the device; the SMS authentication includes: verifying that the device is under the user's control and the mobile phone number is valid based on the image verification code and SMS verification code; the liveness detection includes: performing color liveness detection and / or reading liveness detection, using video recording to obtain the corresponding actions and / or numbers read out by the user according to the page prompts, and using biometrics to ensure that the person appearing in front of the camera is a living organism.

[0008] Optionally, the liveness authentication is an adaptive multimodal liveness detection based on WebRTC. The liveness authentication includes: automatically detecting whether the user's device supports WebRTC on the H5 platform; if WebRTC is supported, directly calling the camera video stream for real-time detection; if WebRTC is not supported, automatically downgrading to the native camera recording mode, guiding the user to use the native camera of their device to record and upload the video, and receiving the video recorded by the user through the native camera of their device for detection.

[0009] Optionally, the method further includes: during the serial execution of the authentication methods in the combined identity authentication, if any authentication method in the combined identity authentication fails, the process is immediately blocked and the specific failed authentication method is displayed, and the execution of subsequent steps is terminated.

[0010] Optionally, the dual verification of whether the user has fully read each contract, combining front-end and back-end verification, includes: monitoring the scroll bar position in real time on the front end to detect whether the scroll bar has reached the bottom, and recording the bottom-reaching state when it is detected, ensuring that the user has read the last line of each contract; recording the reading time of the user's contract reading through a front-end timer, and graying out the sign button at the bottom of the page before the reading time reaches a pre-configured minimum reading time, making the sign button unavailable; uploading the bottom-reaching state and the reading time as independent evidence nodes for the first verification to the back end, and comparing the reading time and the page loading time with the reading time log for the second verification of the reading time, ensuring that the user has fully read each contract.

[0011] Optionally, the method further includes: if the contract data changes, the consistency check fails, the page prompts that the contract data has expired, returns to the contract list page displaying the contract list, and in response to the user's reset request on the contract list page, retrieves the latest contract list and basic identity information again, and re-executes the steps for the user to verify until the contract data has not changed.

[0012] Optionally, the method further includes: during the execution of the current step, when the user discovers an information error, responding to the user's return request, reversing the order status to the previous step, receiving the user's corrected data, or automatically triggering data correction.

[0013] A second aspect of this disclosure provides an electronic signing device, comprising: a generation unit, configured to initiate an electronic signing service according to a service initiation instruction and generate a dynamic QR code containing a signing list; a display unit, configured to, in response to a user's login operation on an H5 signing page using basic identity information after scanning the dynamic QR code, display the signing list and the user's basic identity information for the user to verify; and a combined identity authentication unit, configured to, in response to the user's verification and confirmation operation, assess the risk level of the user's handling of the electronic signing service, determine the corresponding combined identity authentication based on the risk level, and sequentially execute the authentication methods in the combined identity authentication, wherein the combined identity authentication includes one or more authentication methods configured in sequence, such as real-name authentication, element authentication, facial recognition authentication, SMS authentication, and liveness authentication. The aforementioned element authentication includes operator three-factor authentication and / or bank card four-factor authentication; a dual verification unit, used to load and display each contract corresponding to the signing list for the user to read after all authentication methods in the combined identity authentication have passed, and to dual verify whether the user has read each contract in full by combining front-end verification and back-end verification; a checking unit, used to activate the signing button after the dual verification ensures that the user has read each contract in full, and to check whether the signing data has changed in response to the signing request initiated by the user clicking the signing button, wherein the signing data includes the user's basic identity information, contract status and business data; a signing unit, used to call the certification authority interface to generate an electronic signature if the signing data has not changed, synthesize a signed document based on the electronic signature and generate an evidence chain to complete the evidence storage.

[0014] A third aspect of this disclosure provides a computer-readable storage medium storing computer instructions for causing a computer to perform the electronic signing method provided in any of the first aspects.

[0015] A fourth aspect of this disclosure provides an electronic device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, the computer program being executed by the at least one processor to cause the at least one processor to perform the electronic signing method provided in any of the first aspects. Attached Figure Description

[0016] To more clearly illustrate the technical solutions in the specific embodiments or related technologies of this disclosure, the accompanying drawings used in the description of the specific embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0017] Figure 1 is a flowchart illustrating the electronic signing method provided in this embodiment; Figure 2 is a block diagram of the electronic signing device provided in this embodiment; Figure 3 is a block diagram of the electronic device provided in this embodiment. Detailed Implementation

[0018] To make the objectives, technical solutions, and advantages of the embodiments of this disclosure clearer, the technical solutions of the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this disclosure. All other embodiments obtained by those skilled in the art based on the described embodiments of this disclosure without creative effort are also within the scope of protection of this disclosure.

[0019] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this disclosure are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be used interchangeably where appropriate for the embodiments of this disclosure described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0020] It should be noted that, unless otherwise specified, the embodiments and features described in this disclosure can be combined with each other. This disclosure will now be described in detail with reference to the accompanying drawings and embodiments.

[0021] In the actual implementation of high-risk financial transactions (such as large-scale loans and guarantees), the electronic signature process in related technologies has exposed significant technical flaws and compliance loopholes. Current electronic signature processes only provide a full preview of the contract in PDF format. Faced with dozens of pages of legal text, users often habitually scroll quickly to the bottom and check "I have read," but in reality, they haven't read the entire contract. This leads to difficulties for the platform in providing evidence in the event of subsequent legal disputes.

[0022] To address the aforementioned issues, this disclosure provides an electronic signing method, as shown in Figure 1. The method includes the following steps S11 to S16: Step S11: Initiating an electronic signing service based on a service initiation instruction, generating a dynamic QR code containing a signing list; by generating a dynamic QR code containing the signing list, a secure distribution mechanism combining time-sensitive control is implemented. The signing list is shared using a dynamic QR code instead of the long link (URL) format used in related technologies, improving the security and convenience of the sharing method and avoiding the problems of being easily intercepted by SMS or subject to man-in-the-middle attacks in related technologies due to copying and forwarding long links; Step S12: Responding to the user scanning the dynamic QR code and using basic identity information on the H5 signing page. The login process displays a list of signed contracts and the user's basic identity information for verification. The H5 signing page, displayed as the front end, shows the user's basic identity information, which can be their mobile phone number. Users access the H5 signing page by scanning a dynamic QR code with their mobile devices and log in using their mobile phone number. The page displays a list of signed contracts and the user's basic identity information, which the user then verifies. Step S13: In response to the user's verification and confirmation, the risk level of the user's electronic signing transaction is assessed. Based on the risk level, the corresponding combined identity authentication is determined, and the authentication methods in the combined identity authentication are executed sequentially. The combined identity authentication includes methods configured in a specific order. The system employs one or more authentication methods, including real-name authentication, element authentication, facial recognition authentication, SMS authentication, and liveness detection. Element authentication includes three-factor authentication from telecom operators and / or four-factor authentication from bank cards. The system assesses the risk level of a user's electronic signature transaction based on their credit history and the type of electronic signature service. Higher risk levels result in a greater variety of authentication methods included in the combined identity authentication. A user's credit history can be obtained from their personal credit report, and the type of electronic signature service can include credit loans, mortgage loans, pledge loans, and guaranteed loans. The system determines the authentication methods within the combined identity authentication based on the user's risk level, ensuring both business security and conversion rates. The combined identity authentication is then executed sequentially. The authentication methods in the combined identity authentication are executed sequentially according to a pre-configured order. Element authentication can be either carrier three-factor authentication or bank card four-factor authentication, or a combination of both. When element authentication includes both carrier three-factor authentication and bank card four-factor authentication, the carrier three-factor authentication and bank card four-factor authentication are executed sequentially during the combined identity authentication process. Step S14: After all authentication methods in the combined identity authentication are passed, the contracts corresponding to the signed list are loaded and displayed for the user to read. Combined with front-end and back-end verification, a dual verification process is used to ensure the user has read all contracts.The full text of each contract is displayed sequentially for the user to read. Dual verification, combining front-end and back-end checks, ensures the user has read the full text of each contract and provides informed consent. Step S15: After ensuring the user has fully read each contract, the "Sign" button is activated. In response to the user's signing request, the system checks if the signing data has changed. This signing data includes the user's basic identity information, contract status, and business data. After the dual verification ensures the user has fully read each contract, the "Sign" button changes from an unavailable grayed-out state to a clickable active state. After the user clicks the "Sign" button to initiate a signing request, the system checks if the signing data has changed during the time the user spent reading the full text of each contract. Changes in signing data could include the user changing their name, the contract being withdrawn, or a slight decrease in the business interest rate before loan disbursement. Step S16: If the signing data has not changed, the consistency check passes. The system calls the certification authority interface to generate an electronic signature. Based on the electronic signature, a signed document is synthesized, and an evidence chain is generated to complete the notarization. A signed document with a Certification Authority (CA) digital certificate is synthesized, and an evidence chain is generated. ;

[0023] This disclosure generates an irrefutable chain of evidence of "real name + real person + real intent" by cross-verifying multi-source data from UnionPay and telecom operators (real name), combined with liveness detection (real person) and dual reading verification (real intent). This minimizes the risk of legal repudiation and solves the problem of platform difficulty in providing evidence when legal disputes arise due to users not reading the full text of the contract during the electronic signing process.

[0024] In one optional implementation of this disclosure, real-name authentication includes: verifying whether the name and ID number match by calling an application programming interface to connect to the bank's database based on the user's name and ID number; real-name authentication verifies the user's name and ID number, which is the most basic identity foundation; operator three-factor authentication includes: verifying whether the real-name mobile phone number corresponds to the name of the ID number holder based on the user's name, ID number, and real-name mobile phone number; bank card four-factor authentication includes: authenticating through the bank's channel based on the user's name, ID number, bank card number, and bank-registered mobile phone number, ensuring that the user has a physical financial account; bank card four-factor authentication, which authenticates through the bank's channel, is the highest level of security authentication method in financial lending scenarios; facial recognition authentication includes: verifying whether the user's name and ID number match. The system compares the bank-side image with the on-site captured image, calculating the similarity to ensure the operation is performed by the ID holder. The bank-side image, stored in the bank's database, serves as an authoritative source and is compared with the on-site captured image. If the similarity is greater than or equal to a preset threshold, it confirms the operation is indeed performed by the ID holder. SMS authentication includes verifying the user's control over the device and the validity of the phone number using both image and SMS verification codes. It also verifies the validity and ownership of the phone number. Liveness detection includes performing color liveness detection and / or reading liveness detection, capturing the user's actions and / or verbal readings based on on-screen prompts through video recording. This biometric recognition ensures the person appearing in front of the camera is a living being. Liveness detection verifies the operator's identity.

[0025] In one optional implementation of this disclosure, the liveness authentication is an adaptive multimodal liveness detection based on WebRTC. The liveness authentication includes: automatically detecting whether the user's device supports WebRTC on the H5 platform; wherein, WebRTC is Web Real-Time Communication; if WebRTC is supported, the camera video stream is directly invoked for real-time detection; if WebRTC is not supported, the system automatically downgrades to the native camera recording mode, guiding the user to record and upload the video using the native camera of the user's device, and receiving the video recorded by the user through the native camera of the user's device for detection.

[0026] Due to differences between Android and iOS systems, and between WeChat and third-party browser kernels, mobile terminals suffer from severe fragmentation. The WebRTC protocol often fails to be invoked on some older mobile terminal models or in specific application environments, preventing users from completing liveness authentication and impacting business conversion rates. This disclosure combines WebRTC and native camera recording to achieve intelligent degradation and adaptive compatibility, enhancing technical compatibility. WebRTC automatic degradation and the H5 architecture enable smooth liveness authentication on various mobile terminals without downloading an application, improving the conversion rate of electronic signature services.

[0027] In one optional embodiment of this disclosure, the method further includes: during the serial execution of authentication methods in combined identity authentication, if any authentication method in the combined identity authentication fails, the process is immediately blocked and the specific failed authentication method is displayed, terminating the execution of subsequent steps. The next step is only triggered after the current step passes.

[0028] In one optional implementation of this disclosure, a dual verification process combining front-end and back-end validation is used to ensure that the user has read all of each contract. This includes: real-time monitoring of the scrollbar position on the front-end to detect if the scrollbar has reached the bottom, recording the bottom-reaching state when it is detected, ensuring that the user has read the last line of each contract; real-time monitoring of the scrollbar on the H5 side to calculate whether scrollTop + clientHeight has reached the bottom; recording the user's reading time for the contract using a front-end timer, and graying out the sign button at the bottom of the page before the reading time reaches a pre-configured minimum reading time, making the sign button unavailable; recording the user's reading time for the contract by the front-end timer, and then comparing the reading time with the minimum reading time, which can be 30 seconds; if the reading time is less than the minimum reading time, the sign button is grayed out and unavailable, preventing the user from clicking the grayed-out sign button; uploading the bottom-reaching state and reading time as independent evidence nodes for the first verification to the back-end, and comparing the reading time and page loading time with the reading time log for a second verification of the reading time, ensuring that the user has read all of each contract. The backend is used to provide or process data.

[0029] This disclosure employs front-end and back-end verification. The front-end combines detection of scrolling to the bottom and timer recording of user reading time, while the back-end performs secondary verification of reading time to prevent technical bypass. This ensures that users read every contract in its entirety, guaranteeing informed consent and avoiding legal disputes arising from users not reading the full contract. It also solves the problem of platform difficulties in providing evidence when legal disputes arise due to users not reading the full contract during electronic signing.

[0030] In one optional implementation of this disclosure, the method further includes: if the contract data changes, the consistency check fails, the page displays a message indicating that the contract data has expired, and the user is redirected to the contract list page displaying the contract list. In response to a user's reset request on the contract list page, the latest contract list and basic identity information are retrieved again, and the steps for user verification are re-executed until the contract data has not changed. The change in contract data could be due to the user changing their name, the contract being withdrawn, or a slight decrease in the interest rate before loan disbursement.

[0031] After a user clicks the reset button on the contract list page to initiate a reset request, the latest contract list and basic identity information are retrieved again. The latest contract list and basic identity information are then displayed to the user for verification. The user verification and subsequent steps are then re-executed until it is confirmed that the contract data has not changed. During the re-execution process, unchanged data in the contract data can be quickly reused, and only changed data in the contract data is reset.

[0032] Furthermore, in scenarios involving multiple contracts or multiple roles such as primary borrower and guarantor, if the business data in the signing data changes after signing (e.g., the business interest rate decreases slightly before loan disbursement), the unchanged data in the signing data can be quickly reused, and only the changed business data needs to be modified to reset the signing action.

[0033] In one optional embodiment of this disclosure, the method further includes: during the execution of the current step, when the user discovers an information error, responding to the user's return request, reversing the order status to the previous step, and receiving the user's corrected data or automatically triggering data correction. The information may be the user's name, mobile phone number, ID card number, etc. When the user discovers an information error, they initiate a return request to return to the previous step.

[0034] By combining the above-mentioned reset and rollback, this disclosure enables the reset of changed data and the feedback of error information through online operations, eliminating the need for offline communication and reducing manual operation and maintenance costs.

[0035] As can be seen from the above description, this disclosure achieves the following technical effects: This disclosure generates an irrefutable chain of evidence of "real name + real person + real intent" through multi-source data cross-verification (real name) from UnionPay and telecom operators, combined with liveness authentication (real person) and dual reading verification (real intent), minimizing the risk of legal repudiation and solving the problem of platform difficulty in providing evidence when legal disputes arise due to users not reading the full text of the contract during electronic signing; the authentication method in the combined identity authentication is determined according to the risk level of the user's electronic signing business, ensuring both business security and conversion rate; the combination of WebRTC and native camera recording achieves intelligent degradation and adaptive compatibility, enhancing technical compatibility. WebRTC automatic degradation and the H5 architecture enable smooth liveness authentication on various mobile terminals without downloading an application, improving the conversion rate of electronic signing business.

[0036] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0037] This disclosure also provides an electronic signing device for implementing the above method embodiments. As shown in FIG2, the electronic signing device 20 includes: a generation unit 21, used to initiate an electronic signing business according to a business initiation instruction and generate a dynamic QR code containing a signing list; a display unit 22, used to respond to a user's login operation on an H5 signing page after scanning the dynamic QR code and using basic identity information, displaying the signing list and the user's basic identity information for the user to verify; and a combined identity authentication unit 23, used to respond to a user's verification and confirmation operation, assess the risk level of the user's electronic signing business, determine the corresponding combined identity authentication according to the risk level, and execute the authentication methods in the combined identity authentication in sequence, wherein the combined identity authentication includes real-name authentication, element authentication, facial recognition authentication, SMS authentication, and liveness authentication configured in sequence. One or more authentication methods are provided, including three-factor authentication by the operator and / or four-factor authentication by the bank card; a dual verification unit 24 is used to load and display each contract in the signed list for the user to read after all authentication methods in the combined identity authentication have passed, and to double verify whether the user has read each contract in full by combining front-end verification and back-end verification; an inspection unit 25 is used to activate the sign button after the dual verification ensures that the user has read each contract in full, and to check whether the signing data has changed in response to the signing request initiated by the user clicking the sign button, wherein the signing data includes the user's basic identity information, contract status and business data; a signing unit 26 is used to call the certification authority interface to generate an electronic signature if the signing data has not changed, and to synthesize a signed document and generate an evidence chain based on the electronic signature to complete the evidence storage.

[0038] The specific methods of execution of each unit in the above device embodiments have been described in detail in the embodiments related to the method, and will not be elaborated here.

[0039] This disclosure also provides an electronic device, as shown in FIG3, which includes one or more processors 31 and a memory 32, wherein FIG3 shows one processor 31 as an example.

[0040] The controller may also include an input device 33 and an output device 34.

[0041] The processor 31, memory 32, input device 33 and output device 34 can be connected by a bus or other means. Figure 3 shows an example of connection by bus.

[0042] Processor 31 can be a central processing unit (CPU), or it can be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations of the above types of chips. The general-purpose processor can be a microprocessor or any conventional processor.

[0043] The memory 32, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer-executable programs, and modules, such as the program instructions / modules corresponding to the control method in this embodiment. The processor 31 executes various functional applications and data processing of the server by running the non-transitory software programs, instructions, and modules stored in the memory 32, thereby implementing the electronic signing method of the above-described method embodiment.

[0044] The memory 32 may include a program storage area and a data storage area. The program storage area may store the operating system and applications required for at least one function; the data storage area may store data created by the use of the processing device operated by the server. Furthermore, the memory 32 may include high-speed random access memory and may also include non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory 32 may optionally include memory remotely located relative to the processor 31, and these remote memories can be connected to a network connection device via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0045] Input device 33 can receive input numerical or character information, and generate key signal inputs related to user settings and function control of the server's processing device. Output device 34 may include display devices such as a display screen.

[0046] One or more modules are stored in memory 32 and, when executed by one or more processors 31, perform the method shown in Figure 1.

[0047] Those skilled in the art will understand that all or part of the processes in the above method embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it can include the processes as described in the above method embodiments. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), random access memory (RAM), flash memory (FM), hard disk drive (HDD), or solid-state drive (SSD), etc.; the storage medium can also include combinations of the above types of memory.

[0048] Although embodiments of the present disclosure have been described in conjunction with the accompanying drawings, those skilled in the art can make various modifications and variations without departing from the spirit and scope of the present disclosure, and such modifications and variations all fall within the scope defined by the appended claims.

Claims

1. An electronic signing method, characterized in that, include: Initiate an electronic signature service based on the service initiation instruction, and generate a dynamic QR code containing a list of signed contracts; In response to a user's login operation on the H5 signing page after scanning the dynamic QR code and using basic identity information, the signing list and the user's basic identity information are displayed for the user to verify. In response to the user's verification and confirmation operation, the risk level of the user's electronic signing service is assessed. Based on the risk level, a corresponding combined identity authentication is determined, and the authentication methods in the combined identity authentication are executed sequentially. The combined identity authentication includes one or more authentication methods configured in sequence, such as real-name authentication, element authentication, facial recognition authentication, SMS authentication, and liveness authentication. The element authentication includes three-factor authentication from a mobile carrier and / or four-factor authentication from a bank card. After all authentication methods in the combined identity authentication pass, each contract in the signing list is loaded and displayed for the user to read. Front-end and back-end verifications are used to double-verify whether the user has read all contracts. After double-verification ensures that the user has read all contracts, the signing button is activated. In response to the signing request initiated by the user clicking the signing button, the signing data is checked for changes. The signing data includes the user's basic identity information, contract status, and business data. If the signing data has not changed, the consistency check passes, the certification authority interface is called to generate an electronic signature, and a signed document is synthesized based on the electronic signature to generate an evidence chain, completing the evidence storage.

2. The method according to claim 1, characterized in that, The real-name authentication includes: verifying whether the name and ID number match by calling the application programming interface to connect to the bank's database based on the user's name and ID number; the operator's three-factor authentication includes: verifying whether the real-name mobile phone number is the name corresponding to the ID number holder based on the user's name, ID number, and real-name mobile phone number; the bank card four-factor authentication includes: authenticating through the bank's channel based on the user's name, ID number, bank card number, and bank-registered mobile phone number to ensure that the user has a physical financial account; the facial recognition authentication includes: comparing the bank's facial image with the on-site facial image based on the user's name, ID number, and on-site captured facial image, calculating the similarity, and ensuring that the ID holder is operating the device; the SMS authentication includes: verifying that the device is under the user's control and the mobile phone number is valid based on the image verification code and SMS verification code; the liveness detection includes: performing color liveness detection and / or reading liveness detection, using video recording to obtain the corresponding actions and / or numbers read out by the user according to the page prompts, and using biometrics to ensure that the person appearing in front of the camera is a living organism.

3. The method according to claim 1, characterized in that, The liveness authentication is an adaptive multimodal liveness detection based on WebRTC. The liveness authentication includes: automatically detecting whether the user's device supports WebRTC on the H5 platform; if WebRTC is supported, directly calling the camera video stream for real-time detection; if WebRTC is not supported, automatically downgrading to the native camera recording mode, guiding the user to use the native camera of their device to record and upload the video, and receiving the video recorded by the user through the native camera of their device for detection.

4. The method according to claim 1, characterized in that, The method further includes: during the serial execution of the authentication methods in the combined identity authentication, if any authentication method in the combined identity authentication fails, the process is immediately blocked and the specific failed authentication method is displayed, and the execution of subsequent steps is terminated.

5. The method according to claim 1, characterized in that, The method combines front-end and back-end verification to double-verify whether the user has read every contract in full. This includes: monitoring the scroll bar position in real time on the front end to detect if the scroll bar has reached the bottom, recording the bottom-reaching state when it is detected, ensuring that the user has read the last line of each contract; recording the user's reading time on the contract using a front-end timer, and graying out the sign button at the bottom of the page before the reading time reaches the pre-configured minimum reading time, making the sign button unavailable; uploading the bottom-reaching state and the reading time as independent evidence nodes for the first verification to the back end, and comparing the reading time and the page loading time in the reading time log for a second verification of the reading time, ensuring that the user has read every contract in full.

6. The method according to claim 1, characterized in that, The method further includes: if the contract data changes, the consistency check fails, the page prompts that the contract data has expired, and returns to the contract list page that displays the contract list. In response to the user's reset request on the contract list page, the latest contract list and basic identity information are retrieved again, and the steps for the user to verify are re-executed until the contract data has not changed.

7. The method according to claim 1, characterized in that, The method further includes: during the execution of the current step, when the user discovers an information error, responding to the user's return request, reversing the order status to the previous step, receiving the user's corrected data or automatically triggering data correction.

8. An electronic signing device, characterized in that, include: The generation unit is used to initiate electronic signature business according to the business initiation instruction and generate a dynamic QR code containing the signature list; The display unit, in response to a user's login operation on the H5 signing page after scanning the dynamic QR code and using basic identity information, displays the signing list and the user's basic identity information for the user to verify. The combined identity authentication unit, in response to the user's verification and confirmation operation, assesses the risk level of the user's electronic signing service, determines the corresponding combined identity authentication based on the risk level, and sequentially executes the authentication methods in the combined identity authentication. The combined identity authentication includes one or more authentication methods configured in sequence, such as real-name authentication, element authentication, facial recognition authentication, SMS authentication, and liveness authentication. The element authentication includes operator three-factor authentication and / or bank card four-factor authentication. Dual verification is also included. The first unit, after all authentication methods in the combined identity authentication have passed, loads and displays each contract corresponding to the signed list for the user to read, combining front-end and back-end verification to double-verify whether the user has read all contracts. The second unit, after ensuring that the user has read all contracts through double verification, activates the signing button and, in response to the signing request initiated by the user clicking the signing button, checks whether the signing data has changed, wherein the signing data includes the user's basic identity information, contract status, and business data. The third unit, if the signing data has not changed, passes the consistency check, calls the certification authority interface to generate an electronic signature, synthesizes a signed document based on the electronic signature, generates an evidence chain, and completes the evidence storage.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions for causing a computer to perform the electronic signing method according to any one of claims 1 to 7.

10. An electronic device, characterized in that, The electronic device includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, the computer program being executed by the at least one processor to cause the at least one processor to perform the electronic signing method according to any one of claims 1 to 7.

Images