The invention discloses an industrial operation permission
electronic signature method and
system based on multiple
verification and process management and control, and belongs to the technical field of industrial safety management and information safety. The method comprises the following steps: a
server generates a dynamic token containing a session context and an anti-replay random number (Non) in a specific link according to a job permission process; the signer mobile terminal obtains the token through
optical scanning,
radio frequency induction or
sound wave receiving and the like; triggering local biological feature
authentication after successful analysis, wherein a feature acquisition interface or logic of the mobile terminal for generating a
device fingerprint is in a default limited state; in response to the fact that the biometric
authentication is passed and an internal
authorization signal is received, the mobile terminal switches a feature collection interface to a non-limited state, calls the interface to collect hardware
feature data of the current device to generate a
device fingerprint, and integrates the identity information to generate signature data; and after receiving the data, the
server verifies the validity of the random number and the consistency of the device fingerprints, and dynamically verifies the authority according to the context information. The invention further comprises a mechanism for automatically switching
sound wave transmission based on environment
perception. Malicious programs are prevented from collecting fingerprints through
sequential control of a bottom
layer interface, the problem of industrial limited space communication is solved through
sound wave transmission, and replay prevention and unauthorized prevention are achieved in combination with a process context.