MOBILE ELECTRONIC SIGNATURE SYSTEM

Description

TECHNICAL FIELD

[0001] The invention relates to a mobile electronic signature system that enables the electronic signing of electronic documents in service systems.BACKGROUND OF THE INVENTION

[0002] In the literature, electronic signatures (e-Signatures) are secure electronic signatures created based on a Qualified Electronic Certificate (QEC). Electronic signatures are used in mobile devices, and banking transactions, other financial applications, various applications, and transactions made to public institutions, electronic correspondence and contracts, electronic communications, insurance transactions, and corporate resource planning applications. In this context, applications are being developed to provide electronic signatures in mobile devices through mobile applications. In the literature, developments can be made for determining the suitability of the service by creating an electronic document in the banking service with the provision of electronic signatures in mobile banking systems, making the electronic signature available in the mobile application, and examining the document in the system's infrastructure of the mobile application.

[0003] TW201947497A relates to a financial services application system comprising: an electronic application signature device for filling in e-form and signing the e-signature, a counter terminal, coupling with the electronic application signature device for transmitting e-form and financial services information required for financial services application, and, system server, coupling with the counter terminal for controlling the operation of the financial services application system.

[0004] US2007 / 208944 and US2019 / 097811 are relevant prior art documents.BRIEF DESCRIPTION OF THE INVENTION

[0005] The invention is defined by the independent claims. Preferred embodiments are defined by the dependent claims.

[0006] The object of the invention is to develop an electronic signature system that can be run as a mobile device application, at least partially reducing users' needs such as installing software on their mobile devices, connecting signature hardware to their mobile devices to sign electronic documents.

[0007] In order to achieve the above objectives, the invention relates to a mobile electronic signature system comprising a first client device with a mobile application installed, which provides access to one or more service systems via an internet-accessible network server; a signature server that provides an electronic signature containing one or more electronic certificates transmitted to the mobile application when the first client device accesses the service system; a second client device that receives an electronic document transmitted from the signature server to the first client device; the signature server configured to send a signed electronic document and a time stamp containing the electronic certificate when an electronic signature is added to the electronic document in the first client device, characterized in that the signature server configured to verify a signature file from the first client device to provide appropriate identity verification according to the electronic certificate, and queries the electronic signature authority in the signature file by accessing one or more signature circuits containing electronic signature permissions suitable for signature certificates recorded in a server memory unit, and conduct a verification process that provides a query about the changes made with the addition of the electronic signature by comparing the electronic document with the signed electronic document; the second client device includes a mobile service is configured to send the signature file through the signature server upon determining the success at the verification process. As a result, an electronic signature is provided in a mobile system as a mobile device application where the signing of electronic documents is done in an electronic environment. In addition, an electronic signature system with increased security against malicious third parties in service services through controls in the verification process on the signature server is also provided by at least partially reducing the need for intermediate hardware and software in signing electronic documents and facilitating document signing on the mobile system. Here, the first client device can be, for example, a mobile device used by a bank customer; while the second client device can be a service provider like a bank.

[0008] In a preferred embodiment of the invention, the first client device is a mobile device having a mobile memory unit and a processing unit connected to provide bidirectional data flow with the mobile memory unit. As a result, the processor unit of the first client device is enabled to receive an electronic document and, when receiving a signing command on the device, modify the electronic document to include the electronic signature, thus creating a signed electronic document.

[0009] In a preferred embodiment of the invention, the mobile memory unit is configured to store electronic certificates received from the signature server in the first client device. This way, the certificate data received on the first client device can be stored and retained.

[0010] In a preferred embodiment of the invention, the processing unit is configured to enable the reading and writing of data in the mobile memory unit. As a result, it becomes possible for the first client device to add a timestamp to the signed electronic document containing the electronic certificate and to create a signature file, which can then be sent to the signature server.

[0011] In a preferred embodiment of the invention, the second client device is a system server device that provides the service system and sends the electronic document. In this way, the second client device can act as a server for the service, providing an electronic document to the first client device through the signature server, and upon determining the compliance of the signature file received from the first client device during the verification process, the desired mobile service can be obtained by sending it to the second client device. In this case, for example, a bank's financial service can be accessed from the second client device, and the bank's financial services can be displayed in the service areas within the mobile application.

[0012] In a preferred embodiment of the invention, the verification process is configured to be recorded in the server memory unit, including a time stamp. In this way, if an error or inconsistency occurs in the processes carried out on the signature server, the analysis of the recorded verification process can be performed.

[0013] In a preferred embodiment of the invention, the second client device comprises a system memory unit configured to store one or more electronic signatures containing electronic certificates. In this way, when it is necessary to have signatures from both parties, the second client device can perform the processes carried out by the first client device and send the signed document back to the first client device.BRIEF DESCRIPTION OF THE FIGURES

[0014] Figure 1 is a schematic illustration of a mobile electronic signature system according to the subject matter invention.DETAILED DESCRIPTION OF THE INVENTION

[0015] In this detailed explanation, the invention is explained without any limitation and only with reference to examples to better explain the subject matter.

[0016] Figure 1 schematically shows the subject matter of a mobile electronic signature system. In the mobile electronic signature system, the developed electronic signature system can be used by providing access to banking services from mobile devices. The mobile electronic signature system has a first client device (14) as a user. Here, the first client device (14) can be a mobile device, for example, a smartphone of a user who wants to access banking services. A mobile memory unit (16) and a processor unit (18) are interconnected to provide data flow on the first client device (14). In the mobile memory unit (16), incoming data, such as electronic certificates (32) received from a signature server (20), are stored in a manner that retains them. The processor unit (18) enables the reading and writing of data stored in the mobile memory unit (16). In this way, changes or adjustments can be made to the data. For example, a time stamp (40) can be added to the signed electronic document (38) containing an electronic certificate (32) on the first client device (14), and a signature file (42) can be created and sent to the signature server (20). The first client device (14) has a mobile application (30) installed, which provides access to the mobile electronic signature system of the invention. Here, the first client device (14) accesses one or more service systems (12) through an internet-enabled network server (10) with the mobile application (30). The service system (12) can be, for example, the system of banking services provided, and the first client device (14) can use these services in a service area. With the access of the first client device (14) to the service system (12) via the mobile application (30), at least one electronic signature (34) is transmitted from the signature server (20) to the device (14). An electronic signature (34) can contain one or more electronic certificates (32). Here, an electronic document (36) sent from a second client device (26) is transmitted to the first client device (14) via the signature server (20). The signature server (20) is a hardware server that provides the mobile infrastructure for the system of the invention. The signature server (20) includes a server memory unit (22) where one or more signature circuits (50) are registered. Access is provided to signature circulars (50) containing electronic signature permissions (46) suitable for signature certificates (48) registered in the server memory unit (22). The electronic document (36) can be, for example, a document in PDF format. In addition, the electronic document (36) can also be a bank instruction form, for example. Here, the second client device (26) is also a system server device where the service system (12) is provided. For example, the second client device (26) can be a system server of a bank finance system. The second client device (26) includes a system memory unit (28) where one or more electronic signatures (34) containing an electronic certificate (32) are stored. A signed electronic document (38) is created by adding the electronic signature (34) provided by the signature server (20) to the electronic document (36) received from the second client device (26) via the signature server (20) in the first client device (14). A signature file (42) is provided by adding a timestamp (40) to the signed electronic document (38) and includes the electronic certificate (32) provided with the electronic signature (34). The signature file (42) created in the interface of the mobile application (30) in the first client device (14) is sent to the second client device (26) through the mobile electronic signature system of the invention, but the signature file (42) first comes to the signature server (20) where content checks are performed. A verification process (24) is performed to ensure the content checks of the signature file (42) arrive at the signature server (20). During the verification process (24), identity checks are made to determine whether the signature file (42) is suitable for the electronic certificate (32), and if the accuracy is determined, identity approval is given. In addition, access is provided to signature circulars (50) recorded in the server memory unit (22), the electronic signature authority (46) in the signature file (42) is queried, and the validity of the electronic signature authority (46) is ensured if suitability is determined at the end of the query. Furthermore, a comparison is made between the electronic document (36) and the signed electronic document (38), for example, whether it is different from the original document or whether a change has been made in the electronic document (36) with the addition of the electronic signature (34), and if a specified error is not detected, the suitability of the verification process (24) is ensured, and the signature file (42) is sent from the signature server (20) to the second client device (26). Here, the verification process (24) is recorded in the server memory unit (22) of the signature server (20) with a time stamp. Thus, if an error or inconsistency occurs in the processes performed on the signature server (20), the recorded verification process (24) can be reviewed. For example, the security of the service in the mobile electronic signature system of the invention with the control of the signature server (20) in banking services is increased. When the signature file (42), whose suitability is determined in the verification process (24), reaches the second client device (26), a mobile service (44) is provided, and the desired service purchase on the system is completed.REFERENCE NUMBERS

[0017] 10Network server32Electronic certificate12Service system34Electronic signature14First client device36Electronic document16mobile memory unit38Signed electronic document18Processor unit40Timestamp20Signature server42Signature file22Server memory unit44Mobile service24Confirmation process46Electronic signature authorization26Second client device48Signing certificate28System memory unit50Signature circular30Mobile application

Claims

1. A mobile electronic signature system comprising a first client device (14) with a mobile application (30) installed, which provides access to one or more service systems (12) via an internet-accessible network server (10); a signature server (20) that provides an electronic signature (34) containing one or more electronic certificates (32) transmitted to the first client device (14) when the first client device (14) accesses the service system (12); wherein an electronic document (36) sent from the second client device (26) is transmitted to the first client device (14) via the signature server (20); the signature server (20) configured to send a signature file (42) received from the first client device (14) to the second client device (26), after the signature file has been verified by the signature server; wherein the signature file (42) is created by the first client device (14) by adding a time stamp (40) to a signed electronic document (38), the signature file (42) including the one or more electronic certificate (32) provided with the electronic signature (34), and wherein the signed electronic document (38) is generated by the first client device (14) by adding the electronic signature (34) to the electronic document (36), wherein the signature server (20) is configured to verify the signature file (42) from the first client device (14) to provide appropriate identity verification according to the one or more electronic certificate (32), and to query an electronic signature authority (46) in the signature file (42) by accessing one or more signature circuits (50) containing electronic signature permissions (46) suitable for signature certificates (48) recorded in a server memory unit (22), and to conduct a verification process (24) that provides a query about the changes made in the signed electronic document (38) by comparing the electronic document (36) with the signed electronic document (38); and when the second client device (26) receives the signature file (42) from the signature server (20) upon determining the success at the verification process (24), a mobile service (44) is provided to the first client by the second client.

2. A mobile electronic signature system according to Claim 1, wherein the first client device (14) being a mobile device having a mobile memory unit (16) and a processing unit (18) connected to provide bidirectional data flow with the mobile memory unit (16).

3. A mobile electronic signature system according to Claim 2, wherein the mobile memory unit (16) being configured to store electronic certificates (32) received from the signature server (20) in the first client device (14).

4. A mobile electronic signature system according to Claim 2, wherein the processing unit (18) being configured to enable reading and writing of data in the mobile memory unit (16).

5. A mobile electronic signature system according to any one of the preceding claims, wherein the second client device (26) is being a system server device that provides the service system (12) and sends the electronic document (36).

6. A mobile electronic signature system according to any one of the preceding claims, wherein the verification process (24) is being configured to be recorded in the server memory unit (22), including a timestamp (40).

7. A mobile electronic signature system according to Claim 5, wherein the second client device (26) comprising a system memory unit (28) configured to store one or more electronic signatures (34) containing electronic certificates (32).