Electronic seal based on electronic handwriting signature technology

Abstract

According to an electronic seal based on the electronic handwriting signature technology, a seal maker authorizes a seal center to collect, store and generate an electronic seal and authorizes a user to use the electronic seal. The electronic seal comprises an impression, electronic handwritten signature data, signature object abstract data and a label, wherein an active biological characteristic of the electronic handwritten signature data is used as a verification basis for use permission of the electronic seal. The electronic seal generates a serial number for the signature object and then adds identification data to the signed signature object. By the electronic seal, the risk of keeping a traditional encryption authentication device is reduced, the signing willingness of an authorized seal user is expressed through signing, and a signature object can be traced through additional information.

Description

technical field [0001] The invention relates to the field of information security, in particular to an electronic seal based on electronic handwritten signature technology. Background technique [0002] There are mainly two schemes for commonly used electronic seal technology. One is to authenticate the user's wishes based on static features such as text messages, passwords, and face recognition, and then call digital certificates for signatures. This scheme is easy to be stolen or imitated because of static identification features. There are loopholes in security. It is impossible to guarantee the real identity of the user when calling the electronic seal. If the mobile phone or password is stolen, the thief can easily obtain the authorization of the electronic seal through this method. The electronic seal information generated in this way is difficult to identify its authenticity. [0003] The other uses the encryption certificate stored in the removable storage carrier a...

AI Technical Summary

Problems solved by technology

[0002] There are mainly two schemes for commonly used electronic seal technology. One is to authenticate the user's wishes based on static features such as text messages, passwords, and face recognition, and then call digital certificates for signatures. This scheme is easy to be stolen or imitated because of static identification features. There are loopholes in security

It is impossible to guarantee the real identity of the user when calling the electronic seal. If the mobile phone or password is stolen, the thief can easily obtain the authorization of the electronic seal through this method. The electronic seal information generated in this way is difficult to identify its authenticity

[0003] The other uses the encryption certificate stored in the removable storage carrier as the basis for the signature authorization of the electronic seal, but this method usually requires a compatible computer as the terminal, and other smart devices such as mobile phones are difficult to use as the signature authorization due to interface compatibility and other issues. the terminal

At the same time, if the two-step verification is not enabled, it is difficult to distinguish whether the user is a real authorized user. Even if the two-step verification method is used, it is still useless when both terminals are stolen

[0004] CN 108206831 A discloses a method for realizing an electronic seal, but it is still difficult to determine the real identity of the user by using a random code as a verification means, even if the private key is stored in the second password device, such as USB-KEY, IC card, These devices are still at risk of physical theft

It is always difficult to avoid physical theft during identity verification, thereby forging the identity of the signer, through the client receiving random codes or other auxiliary encryption measures to prevent, rather than through the means of users actively submitting identity verification

[0005] On the other hand, the verification of the electronic seal itself is usually verified by traditional methods such as certificates. However, the particularity of the electronic document makes it easier to separate the electronic seal from the original signature object, and then forge the abstract by means of credentialing and other means. and other information, forged signature objects

The electronic seal is real, but the document to be signed is forged

Images