CN108830109A

CN108830109A - E-seal application, client realization method, system and equipment, storage medium

Info

Publication number: CN108830109A
Application number: CN201810595677.2A
Authority: CN
Inventors: 王星雅
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2018-06-11
Filing date: 2018-06-11
Publication date: 2018-11-16
Anticipated expiration: 2038-06-11
Also published as: CN110490004A; CN108830109B; CN110490004B

Abstract

Present invention discloses a kind of E-seal application method, system, the implementation method of E-seal client and computer equipments, computer readable storage medium.The method includes：According to the stamped signature behavior triggered in distributed network, the E-seal carried out on electronic document is covered, and obtains Electronic Signature file；The stamped signature data of E-seal are obtained by Electronic Signature file and corresponding cryptographic digest；It is synchronous that data of the stamped signature data in the distributed network are carried out by the consistency policy for algorithm of knowing together；The file side of collecting for obtaining Electronic Signature file passes through distributed network authentication Electronic Signature file, verifying is to carry out E-seal institute's relevant information in distributed network to Electronic Signature file to compare to come to obtain the real reliability of the Electronic Signature file with this so that the safety of E-seal application is controllable.

Description

E-seal application, client realization method, system and equipment, storage medium

Technical field

The present invention relates to technical field of data security, in particular to a kind of E-seal application method, system, E-seal The implementation method and computer equipment of client, computer readable storage medium.

Background technique

In daily life and work, it is present in paper, i.e. seal designs on paper document are as obtained by physical seal It arrives, covers and be used to carry out the authorization or corresponding content of corresponding content in the seal designs on paper, for example, certain A little projects, many purposes such as receiving of service.

But seal designs are easy to be imitated, and identify difficult.For example, often there is copy according to seal designs Physical seal, and then the case where steal authorization, even and if this situation occur, also due to similarity degree is high and is difficult to discriminate between out Come.

With the development of digital applications, paper document develops into electronic document, and the seal designs thus carried out cover, And it is directed to what electronic document was carried out, at this point, will also decrease the difficulty and threshold of imitated seal designs, electronic print Chapter pattern can be transmitted arbitrarily in a network environment, can be to realize supervision, and therefore, there is very big wind for the use of E-seal Danger, and identify difficult, it would be highly desirable to need to solve the uncontrollable limitation of safety in E-seal application.

Summary of the invention

The uncontrollable technical problem of safety in E-seal application in order to solve the relevant technologies, the present invention provides one Kind E-seal application method, system, the implementation method of E-seal client and computer equipment, computer-readable storage Medium.

A kind of E-seal application method, the method includes：

According to the stamped signature behavior triggered in distributed network, the E-seal carried out on electronic document is covered, and obtains electronics Stamped signature file；

The stamped signature data of the E-seal are obtained by the Electronic Signature file and corresponding cryptographic digest；

It is synchronous that data of the stamped signature data in the distributed network are carried out by the consistency policy for algorithm of knowing together；

The file side of collecting for obtaining the Electronic Signature file passes through electronics label described in the distributed network authentication Chapter file, the verifying is to carry out E-seal institute relevant information ratio in the distributed network to the Electronic Signature file To come the real reliability that obtains the Electronic Signature file.

A kind of implementation method of E-seal client, the E-seal client corresponds to seal user, described Method includes：

E-seal client is carried out according to the triggering of stamped signature on electronic document, obtains held private key；

The E-seal client initiates the electricity by node of the held private key into the distributed network The stamped signature behavior of subfile, the node are the node that E-seal client is connected in the distributed network；

After stamped signature behavior obtains stamped signature data by the distributed network, the E-seal client is distributed The Electronic Signature file that formula nodes return, the E-seal on the Electronic Signature file are right by the private key institute The seal information stored on account address is answered to obtain.

In one exemplary embodiment, the E-seal client corresponds to the file side of collecting, and the method is also wrapped It includes：

The E-seal client receives the Electronic Signature file that the distributed network is sent, the E-seal visitor Family end correspond to the Electronic Signature file towards the file side of collecting；

The verifying that E-seal is initiated the Electronic Signature file to the distributed network, by the number of E-seal Signature or/and the corresponding cryptographic digest of Electronic Signature file obtain the seal verification result that the distributed network returns.

A kind of E-seal application system, the system comprises the corresponding E-seals of distributed network and the file side of collecting Client；

Node in the distributed network includes stamped signature module, logging modle and synchronization module；

The stamped signature module is configured as carrying out the electricity on electronic document according to the stamped signature behavior triggered in distributed network Sub- seal covers, and obtains Electronic Signature file；

The logging modle is configured to obtain the electricity by the Electronic Signature file and corresponding cryptographic digest The stamped signature data of sub- seal；

The synchronization module is configured as carrying out the stamped signature data by the consistency policy for algorithm of knowing together at described point Data in cloth network are synchronous

The file side of collecting that the E-seal client is configured as obtaining the Electronic Signature file passes through institute Electronic Signature file described in distributed network authentication is stated, the verifying is to the Electronic Signature file in the distributed network The middle E-seal institute's relevant information that carries out compares to obtain the real reliability of the Electronic Signature file.

In one exemplary embodiment, the stamped signature module includes：

Seal Information reading unit, the stamped signature behavior for being triggered in distributed network according to seal user, from print Read seal information in the account address that chapter user holds itself；

Seal visualization, for electronic document specified by the object oriented file side of collecting, according to the print of reading Chapter information executes digital signature visualization, obtains the Electronic Signature file that image shows E-seal.

In one exemplary embodiment, the seal Information reading unit includes：

Address acquisition unit obtains the account that seal user holds itself for the public key according to corresponding to seal user Family address；

Execution unit is read, obtains the seal information of seal user, the seal for reading from the account address Information is used for so that the digital signature of seal user visualizes.

In one exemplary embodiment, the logging modle includes：

Electronic Signature file arithmetic element, for carrying out consistency operation acquisition in terms of content to the Electronic Signature file Cryptographic digest corresponding to the Electronic Signature file content；

Newly-increased unit is recorded, for increasing the E-seal newly by the cryptographic digest and the Electronic Signature file Stamped signature data.

In one exemplary embodiment, the whole network transmission unit includes：

Authentication unit is recorded, each node in the distributed network is used for and is stored according to specified time interval, progress The verifying of stamped signature data deletes and verifies unacceptable stamped signature data, and the stamped signature data of storage include the newly-increased stamped signature Data；

Synchronous execution unit, for will all be verified the consistency policy of common recognition algorithm for the stamped signature number in each node Synchronous according to other nodes into the distributed network, the stamped signature data for storing the distributed network interior joint are reached Unanimously.

In one exemplary embodiment, the identification initiation module is further used for the file side of collecting in acquisition electricity After sub- stamped signature file, the comparison of character string in the distributed network is carried out by the Electronic Signature file, described in identification E-seal in Electronic Signature file, the character string of comparison are covered the number of E-seal by the Electronic Signature file Word signature or/and the corresponding cryptographic digest of Electronic Signature file.

In one exemplary embodiment, the character string of the comparison covers electronics by the Electronic Signature file The digital signature of seal, the identification initiation module include：

Digital signature extraction unit, for by acquisition Electronic Signature file therefrom extract capping E-seal number Signature；

Signature verification initiate unit, for according to the Electronic Signature file towards seal user, to the distribution Formula network initiates the verifying of the digital signature；

As a result receiving unit, the seal verifying knot returned for receiving the distributed network to the file side of collecting Fruit, the seal verification result indicate that the digital signature and seal user sign the number in itself held seal information Whether name is consistent.

In one exemplary embodiment, the node in the distributed network further includes：

Verification information read module, for according to the file side of collecting by acquisition Electronic Signature file initiate digital signature It verifies, the account address that the node in the distributed network itself is held from seal user obtains seal information；

Signature comparison module, for comparing seal signing messages and the initiation verifying of the file side of collecting in the seal information The digital signature, generate the seal verification result returned to the file side of collecting.

In one exemplary embodiment, the character string of the comparison is that the encryption of the Electronic Signature file is plucked It wants, the identification initiation module includes：

Authenticity verification initiates unit, after obtaining Electronic Signature file, according to received Electronic Signature file face To the seal user and itself, the corresponding cryptographic digest of Electronic Signature file to the distributed network initiate institute it is right Answer the authenticity verification of stamped signature behavior；

Authenticity result receiving unit is tested for receiving the distributed network to the seal that the file side of collecting returns Card is as a result, the seal verification result indicates that the distributed network stores corresponding E-seal stamped signature data.

Stamped signature behavior authentication module, the stamped signature behavior authenticity verification for being initiated according to the file side of collecting, from section Whether the Electronic Signature file of the block inquiry request verifying stamped signature behavior authenticity in point corresponds to the stamped signature number of E-seal According to；

Result-generation module is received for generating the seal verification result for corresponding to the query result, and to the file The side's of taking return.

A kind of E-seal client, corresponds to seal user, and the E-seal client includes：

Stamped signature trigger module obtains held private key for carrying out according to the triggering of stamped signature on electronic document；

Stamped signature initiation module, for initiating the electronics by node of the held private key into the distributed network The stamped signature behavior of file, the node are the node that E-seal client is connected in the distributed network；

Stamped signature file reception module, for obtaining after stamped signature behavior obtains stamped signature data by the distributed network The Electronic Signature file that distributed network interior joint returns, the E-seal on the Electronic Signature file is by the private key What the seal information stored on corresponding account address obtained.

In one exemplary embodiment, the E-seal client corresponds to the file side of collecting, the E-seal Client further includes：

File reception module, the Electronic Signature file sent for receiving the distributed network, the E-seal visitor Family end correspond to the Electronic Signature file towards the file side of collecting；

E-seal identifies initiation module, for initiating electronic seal to the distributed network to the Electronic Signature file The verifying of chapter obtains the distributed network by the digital signature of E-seal or/and the cryptographic digest of Electronic Signature file and returns The seal verification result returned.

A kind of computer equipment, the computer equipment include：

Processor；And

Memory is stored with computer-readable instruction on the memory, and the computer-readable instruction is by the processing Device realizes foregoing method when executing.

A kind of computer readable storage medium, which is characterized in that be stored thereon with computer program, the computer program Foregoing method is realized when being executed by processor.

The technical solution that the embodiment of the present invention provides can include the following benefits：

For giving the application of E-seal, by according to the stamped signature behavior triggered in distributed network, electronic document is carried out On E-seal cover, Electronic Signature file is obtained with this, it is corresponding, will pass through Electronic Signature file and institute Corresponding cryptographic digest obtains the stamped signature data of E-seal, then passes through the consistency policy of common recognition algorithm and carries out stamped signature number Synchronous according to the data in distributed network, the file side of collecting for obtaining Electronic Signature file passes through distributed network authentication electronics Stamped signature file is come with this so that the safety of E-seal application is controllable, that is, on the one hand realize under the action of distributed network The capping of E-seal on electronic document, distort covered E-seal can not, keeps away The case where E-seal of seal user is imitated is exempted from；On the other hand, due to stamped signature data be in distributed network it is same Step, therefore, also ensure the reliability and safety of stamped signature behavior occurred, in addition to this, the file side of collecting also is led to It crosses distributed network and realizes the verifying of Electronic Signature file, verified under the essence that data can not distort in distributed network Identification to the real reliability of Electronic Signature file, E-seal is easily achieved, and can guarantee reliability.

It should be understood that the above general description and the following detailed description are merely exemplary, this can not be limited Invention.

Detailed description of the invention

The drawings herein are incorporated into the specification and forms part of this specification, and shows and meets implementation of the invention Example, and in specification together principle for explaining the present invention.

Fig. 1 is the simplified schematic diagram of implementation environment according to the present invention shown according to an exemplary embodiment；

Fig. 2 is a kind of block diagram of device shown according to an exemplary embodiment；

Fig. 3 is a kind of flow chart of E-seal application method shown according to an exemplary embodiment；

Fig. 4 is according to the flow chart that step 310 is described shown in Fig. 3 corresponding embodiment；

Fig. 5 is according to the flow chart that step 311 is described shown in Fig. 4 corresponding embodiment；

Fig. 6 is according to the flow chart that step 330 is described shown in Fig. 3 corresponding embodiment；

Fig. 7 is the consistency policy of the application common recognition algorithm according to included by step 335 in Fig. 6 corresponding embodiment, is being divided The diffusion that stamped signature data between each node are carried out in cloth network, the E-seal stamped signature for storing distributed network interior joint Data are reached an agreement the flow chart that step is described；

Fig. 8 be it is shown according to an exemplary embodiment to the file side of collecting after obtaining Electronic Signature file, pass through Electronic Signature file carries out the comparison of character string in distributed network, identifies that the E-seal step in Electronic Signature file carries out The flow chart of description；

Fig. 9 be according to shown in Fig. 8 corresponding embodiment to the file side of collecting after obtaining Electronic Signature file, pass through electricity Sub- stamped signature file carries out the comparison of character string in distributed network, identifies the E-seal step in Electronic Signature file another Implementation exemplifies the flow chart of description；

Figure 10 be show according to another exemplary embodiment to the file side of collecting after obtaining Electronic Signature file, lead to Cross Electronic Signature file carry out distributed network in character string comparison, identify Electronic Signature file in E-seal step into The flow chart of row description；

Figure 11 be according to shown in Figure 10 corresponding embodiment to the file side of collecting after obtaining Electronic Signature file, pass through Electronic Signature file carries out the comparison of character string in distributed network, identifies the E-seal step in Electronic Signature file another The flow chart that one embodiment is described；

Figure 12 is a kind of flow chart of the implementation method of E-seal client shown according to an exemplary embodiment；

Figure 13 is a kind of implementation method of E-seal client shown according to Figure 12 corresponding embodiment in another implementation The flow chart of example；

Figure 14, which is that with no paper business scene shown according to an exemplary embodiment is lower, realizes that with no paper sales counter is corresponding System construction drawing；

Figure 15 is the signal that official document signs and issues involved timing under government affairs office scene shown according to an exemplary embodiment Figure；

Figure 16 is the structural block diagram for implementing a kind of E-seal application system exemplified according to one；

Figure 17 is according to the block diagram that stamped signature module is described shown in Figure 16 corresponding embodiment；

Figure 18 is according to the block diagram that seal Information reading unit is described shown in Figure 17 corresponding embodiment；

Figure 19 is according to the block diagram that logging modle is described shown in Figure 16 corresponding embodiment；

Figure 20 is according to the block diagram that the whole network transmission unit is described shown in Figure 19 corresponding embodiment；

Figure 21 is the block diagram shown according to an exemplary embodiment that identification initiation module is described；

Figure 22 is the block diagram that the node in distributed network is described shown in 1 corresponding embodiment according to fig. 2；

Figure 23 is the block diagram that identification initiation module is described shown according to another exemplary embodiment；

Figure 24 is the block diagram that the node in distributed network is described shown in 3 corresponding embodiments according to fig. 2；

Figure 25 is a kind of block diagram of E-seal client shown according to an exemplary embodiment；

Figure 26 is a kind of block diagram of the electronic client shown according to another exemplary embodiment.

Specific embodiment

Here will the description is performed on the exemplary embodiment in detail, the example is illustrated in the accompanying drawings.Following description is related to When attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodiment Described in embodiment do not represent all embodiments consistented with the present invention.On the contrary, they be only with it is such as appended The example of device and method being described in detail in claims, some aspects of the invention are consistent.

Fig. 1 is the signal schematic drawing of implementation environment according to the present invention shown according to an exemplary embodiment.One In a exemplary embodiment, the E-seal application that the present invention is realized will provide effective control for the use of E-seal, remove It also will be generated Electronic Signature file except this, i.e. it will also be electronics label that performed stamped signature behavior, which provides the service of tracing to the source, E-seal on chapter file realizes verifying, to confirm whether Electronic Signature file is true and reliable.

That is, can be realized the overall process of E-seal application, required progress under the action of distributed network Storage, and inquiry etc., can all be carried out in distributed network.

As shown in Figure 1, the E-seal application that the present invention is realized, for the stamped signature behavior triggered, or for For generated Electronic Signature file, there is seal user and the corresponding file sides of collecting, and seal makes It is between the two with side and the file side of collecting, interaction will be realized by distributed network.

Seal user, authorization or reciever as content in an electronic document, is used in distributed network and makes Electronic document covers the E-seal itself possessed, and then generates Electronic Signature file.

The file side of collecting, the Electronic Signature file for distributed network will be obtained being transmitted.It should be appreciated that the file side of collecting, The contract both sides of institute's agreement content are all used as with seal user, therefore, Electronic Signature file be intended for seal user and The file side of collecting, the file side of collecting should obtain the Electronic Signature that seal user covers E-seal by distributed network File, and the identification of E-seal can be also realized by means of distributed network.

The framework of distributed network as shown in Figure 1, the distributed network of realized E-seal application deploy several Node 110, each node 110 all make and identify realization control and storage for E-seal.

It can be seen that E-seal using and identifying, it is multiple nodes 110 by realizing in many ways, i.e., by being disposed Realize, and by with this to guarantee using E-seal can not distort and precise Identification.

In distributed network, node 110 can be realized by node server, realize critical data with this, i.e., corresponding The synchronous storage of stamped signature data and seal information, guarantees can not distorting for storage.

So far it is recognised that E-seal institute relevant information, i.e. stamped signature data and seal information, in distributed network Each node carry out consistency storage, each node all stores all stamped signature data and seal information；It is corresponding , it should remark additionally herein, based on the storage realized, distributed network can be block chain business network, each All stamped signature data and seal information, are stored with block structure in node, stored stamped signature data and print Chapter information and the block structure cochain constructed are just able to form all stamped signature data and the corresponding block chain storage of seal information.

Fig. 2 is a kind of block diagram of device shown according to an exemplary embodiment.Node 110 shown in FIG. 1, can be dress 200 are set, for example, device 200 can be with node server.

Referring to Fig. 2, which can generate bigger difference because configuration or performance are different, may include one or More than one central processing unit (central processing units, CPU) 222 is (for example, one or more are handled Device) and memory 232, one or more storage application programs 242 or data 244 storage medium 230 (such as one or More than one mass memory unit).Wherein, memory 232 and storage medium 230 can be of short duration storage or persistent storage.It deposits Storage may include one or more modules (diagram is not shown) in the program of storage medium 230, and each module may include To the series of instructions operation in server.Further, central processing unit 222 can be set to logical with storage medium 230 Letter executes the series of instructions operation in storage medium 230 on the device 200.Device 200 can also include one or one with Upper power supply 226, one or more wired or wireless network interfaces 250, one or more input/output interfaces 258, And/or one or more operating systems 241, such as Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM etc..By third party described in following Fig. 3, Fig. 4, Fig. 5, Fig. 6, Fig. 7 and embodiment illustrated in fig. 8 Performed step can be based on the apparatus structure shown in Fig. 2.

Fig. 3 is a kind of flow chart of E-seal application method shown according to an exemplary embodiment.The E-seal Application method, in one exemplary embodiment, as shown in figure 3, at least including the following steps.

In the step 310, according to the stamped signature behavior triggered in distributed network, the E-seal carried out on electronic document adds Lid obtains Electronic Signature file.

Wherein, distributed network is signature client, also referred to as E-seal client had access to based on area The network of block chain.All multinodes are disposed in distributed network, and each node can be for realizing the label of electronic document The storage of chapter and corresponding stamped signature data.In addition to this, seal information corresponding to E-seal will also be stored in distribution In network, to enable distributed network to give to triggered stamped signature behavior with this and respond.

The stamped signature behavior triggered in distributed network is to initiate from E-seal client to distributed network, one In a exemplary embodiment, the received stamped signature instruction of distributed network institute will be corresponded in data.

It should be appreciated that the stamped signature behavior triggered in distributed network is to cover held electronic seal to specified electronic document Chapter, so that attached the seal designs of held E-seal on electronic document and show the related behaviour of the digital signature of identity Make.Corresponding, triggering distributed network realizes the relevant operation of stamped signature on electronic document, can be and connects distribution The E-seal client of network is initiated in the case where user manipulates, and is selected electricity of the user in the manipulated execution of E-seal client Subfile and the sequence of operations that progress stamped signature is triggered to selected electronic document.

The stamped signature behavior triggered in distributed network, indicates seal user, and carries seal user and held Some public keys are covered with this to carry out the E-seal on specified electronic document.It should be appreciated that signified electronics is literary herein Part can be and be also possible to specified by stamped signature behavior with the triggering of stamped signature behavior and to distributed network upload, herein Without limiting.

According to the content in electronic document, the even content in Electronic Signature file, all specify towards seal User and the file side of collecting, that is, the contract both sides of carried content.

In one exemplary embodiment, in distributed network stamped signature behavior be triggered, by institute stamped signature behavior, institute is right It answers public key and positions to an account address, and then the seal information by reading on this account address adds electronic document Lid E-seal obtains Electronic Signature file.Wherein, this account address will be obtained by public key calculation.

It should be appreciated that Electronic Signature file obtained, the electronic document for the stamped signature behavior that corresponds to be triggered.This electricity Subfile is the document for needing stamped signature and carry certain content, as the capping of E-seal obtains Electronic Signature file, institute The content of carrying is also authorized or is received by the E-seal by covering.

In one exemplary embodiment, stamped signature behavior in distributed network, be with an E-seal client to point Institute's connecting node triggers in cloth network.Each individual for possessing E-seal and enterprise, all will as block chain user and It is able to be used in E-seal application of the present invention realization based on block chain.

Should remark additionally, Electronic Signature file towards seal user and the file side of collecting, one can be passed through Fixed code identification, for example, carry out data interaction entrained by public key, in another example, corresponding user identifier etc., herein not into Row limits.

In a step 330, the stamped signature number of E-seal is obtained by Electronic Signature file and corresponding cryptographic digest According to.

Wherein, as previously described, each Electronic Signature file obtained suffer from towards seal user and Wen The part side of collecting.For the use of an E-seal, the presence of seal user and the file side of collecting is then clear in user E-seal uses related object.

Stamped signature data include at least cryptographic digest corresponding to Electronic Signature file and Electronic Signature file.Electronic Signature The corresponding cryptographic digest of file is that the content progress consistency operation to Electronic Signature file is obtained, and meaning is consistent herein Property operation, for Electronic Signature file realize in terms of content numerical value describe, for example, it can be Hash operation.Electronic Signature text The cryptographic digest of part is used for the unique identification Electronic Signature file from content, and certainly, Electronic Signature file is to have covered electronic seal Chapter, therefore, in Electronic Signature file include the corresponding seal designs of covered E-seal, the encryption of Electronic Signature file Abstract is that mark is carried out from the content of corresponding electronic document and seal designs.

After being obtained by abovementioned steps and being intended for the Electronic Signature file of seal user and the file side of collecting, electricity The stamped signature that subfile is carried out just is completed, the Electronic Signature file that obtains therefrom and its towards seal user, file The side of collecting is that the stamped signature for being uniquely corresponding to this time be carried out therefore will be by Electronic Signature file, seal user and file The side of collecting records carried out stamped signature, that is, generates corresponding stamped signature data.

Corresponding, stamped signature data can be uniquely corresponding to Electronic Signature file, print for describing a stamped signature behavior Chapter user and the file side of collecting.The stamping each time of E-seal, initiation as execute, and will all obtain corresponding stamped signature Data.In one exemplary embodiment, Electronic Signature file is to be present in stamped signature data in the form of text, and Electronic Signature The corresponding cryptographic digest of file is that the numeralization form of Electronic Signature file is present in stamped signature data, for example, Electronic Signature File is present in stamped signature data in the form of corresponding cryptographic digest, is further enhanced safety with this, be ensure that letter Breath can not be distorted.

Consistency operation is carried out to Electronic Signature file in terms of content, obtains a string of hash characters, this string of hashword symbols The as cryptographic digest of Electronic Signature file, and then accordingly generate corresponding stamped signature data.

In step 350, data of the stamped signature data in distributed network are carried out by the consistency policy for algorithm of knowing together It is synchronous.

Wherein, the stamped signature data generated with stamped signature behavior, will be stored in distributed network, in order to be signed The retrospect of Zhang Hangwei, the stamped signature data being stored in distributed network can also obtain high reliability.

That is, the whole network transmission of the generated stamped signature data in distributed network, is existed for realizing stamped signature data Storage in distributed network.Storage of the stamped signature data in distributed network refers to each node in distributed network All carry out the storage of this stamped signature data, in order to any E-seal client can to the stamped signature behavior occurred into Row retrospect, and be also convenient for realizing subsequent carried out E-seal identification, that is, realize the verifying of Electronic Signature file.

In one exemplary embodiment, it is plucked by the encryption that consistency operation in terms of content obtains Electronic Signature file After wanting, the acquisition of Electronic Signature file means the completion of stamped signature behavior, therefore, is just added by Electronic Signature file obtained It is close abstract and Electronic Signature file institute towards seal user, the file side of collecting generation stamped signature data, at this point, distributed network A node in network will obtain stamped signature data generated, and be interacted by itself Point-to-Point Data between other nodes So that stamped signature data generated are synchronous on each node in distributed network, and then get stored on each node, it is real The whole network transmission of the existing stamped signature data in distributed network.

It should remark additionally, be logical for synchronization of the generated stamped signature data in distributed network on each node The execution realization of the consistency policy of common recognition algorithm is crossed, in the Point-to-Point Data interaction carried out, the data synchronized must It is so the common recognition data of a node.

In addition to this, in generated stamped signature data, synchronizing on each node is performed before in distributed network, may be used also The verifying of the stored stamped signature data of each node is carried out, to guarantee the authentic and valid of the stamped signature data that will be used to synchronize Property.

In step 370, the file side of collecting for obtaining Electronic Signature file passes through distributed network authentication Electronic Signature text Part, the verifying are to carry out E-seal institute's relevant information in distributed network to Electronic Signature file to compare to obtain electronics label The real reliability of chapter file.

Wherein, after seal user obtains Electronic Signature file to electronic document stamped signature, for Electronic Signature file Involved in another party, i.e. the file side of collecting is that seal user arranges certain contents by covering E-seal Another party, therefore, it is also desirable to its transmit Electronic Signature file.

In one exemplary embodiment, after the whole network transmits stamped signature data, the node in distributed network will be to text The part side of collecting issues the Electronic Signature file corresponding to this stamped signature data, so that Electronic Signature file also can be by the file side of collecting Held.

In another exemplary embodiment, the data with stamped signature data in distributed network are synchronous, and file is collected Side also will be synchronous with the node point-to-point data of progress in distributed network as a node, so that distributed network is same The stamped signature data of step are by respective synchronization to the file side of collecting, at this point, the Electronic Signature file in synchronized stamped signature data is just literary The part side of collecting is obtained.

Stamped signature data the whole network transmission completion, it is meant that completion of the seal user to electronic document stamped signature, the whole network all into Go the storages of stamped signature data, will also characterize coming into force for stamped signature behavior, therefore, by with stamped signature data the whole network transmit it is complete At distributed network sends the Electronic Signature file for corresponding to stamped signature data to the file side of collecting.

For the file side of collecting, the received Electronic Signature file of institute, is to carry certain content, and covered electronics Seal contains the electronic document of corresponding seal designs, this is that the file side of collecting can browse through, and be not aware that The true and false of Electronic Signature file, therefore need to identify this Electronic Signature file.

It should be appreciated that the authenticity that Electronic Signature file is carried out being carried out around the E-seal covered , that is, focus on the identification of covered E-seal.

So far, since distributed network stores seal information corresponding to stamped signature data and each seal user, Therefore, the identification of E-seal in Electronic Signature file will be carried out by means of distributed network.Specifically, for the file side of collecting For, it can be connected to the node in distributed network, according to the stamped signature data and/or print of storage on the node connected Chapter information carries out the identification of E-seal in Electronic Signature file.

Due to the storage of distributed network have can not tamper, can realize accurately and reliably electronics therefrom Seal authenticity, so that the identification of E-seal is easily achieved, it is simple and reliable.

By this exemplary embodiment, stamped signature and confirmation of secretarial document operation are realized by means of distributed network, and then are made Security guarantee can be obtained in the circulation of network environment by obtaining e-commerce government affairs, electronic government documents, as a result, will be so that E-seal Application be no longer only limitted to small-scale internal network, pushed E-seal apply range, greatly expand E-seal and answer Use scope.

Exemplary embodiment as described above is able to be applied to various scenes and various network environments, be no longer limited by E-seal is easy to be imitated and identify difficult limitation.

Fig. 4 is according to the flow chart that step 310 is described shown in Fig. 3 corresponding embodiment.In an exemplary reality It applies in example, as shown in figure 4, the step 310, at least includes the following steps.

In step 311, the stamped signature behavior triggered in distributed network according to seal user, certainly from seal user Read seal information in the account address that body is held.

Wherein, seal user corresponds to an E-seal client.Hold the user of E-seal in electronic seal When the triggering of chapter client carries out stamped signature, this user is just used as seal user.With holding the user of E-seal in electronic seal The triggering of chapter client carries out stamped signature, and the node connected in distributed network by E-seal client is triggered stamped signature row For.

It should be noted that user holds E-seal, it is with the shape of seal information corresponding to user in data Formula exists, and is stored in distributed network.Seal information that distributed network is stored is account corresponding to user Location mapped, this account address are the account address that seal user holds.

The account address that seal user holds itself is to be uniquely corresponding to the public key and private key that seal user is held , therefore, account address will carry out unique identification to seal user.

Stamped signature is carried out as seal user triggers in corresponding E-seal client, this seal user is in distribution Stamped signature behavior is triggered in network, at this point, carrying out seal according to the account address that seal user holds itself in distributed network The reading of information.

One it is exemplary implement you in, seal information includes picture number corresponding to digital signature and seal designs According to.For realizing the visualization display of E-seal, this seal designs corresponds to count image data corresponding to seal designs Word signature, on the one hand this data signature is used for unique identification user identity, be on the other hand also used for the unique identification in data Corresponding to the E-seal of user identity, it will thus be appreciated that the digital signature that seal information is included is seal user The digital signature of digital signature and E-seal.

In step 313, to electronic document specified by the object oriented file side of collecting, number is executed according to the seal information of reading Word signature visualization, obtains the Electronic Signature file that image shows E-seal.

Wherein, the electronic document of stamped signature required for seal user, is necessarily intended for seal user, except this it Outside, another party of the carried content of electronic document is authorized or receives, also necessarily electronic document, it is even subsequent to obtain electricity Sub- stamped signature file towards, this side is in subsequent reception and the institute agreement content that will necessarily carry out Electronic Signature file It receives, therefore is existing as the file side of collecting.

After reading seal information required for obtaining stamped signature by distributed network for seal user, read Seal information control under, to electronic document execute digital signature visualization so that electronic document has been attached corresponding print Chapter pattern.

It should be appreciated that the digital signature visualization carried out, is so that the process that digital signature performs image display, shows The image shown is seal designs.

In the Electronic Signature file obtained therefrom, the display of carried content is carried out, in addition to this, also carries out print The display of chapter pattern is by stamped signature with the content that visual in image instruction Electronic Signature file is carried.

It further illustrates, seal designs corresponding image data are corresponding therebetween with digital signature in seal information Digital signature visualization that is existing, being carried out is seal designs to be added to electronic document displayed content, and be embedded in number label The realization process of name, guarantees that seal designs accurately can quickly be identified by the insertion of digital signature, and effectively avoid E-seal is imitated.

In one exemplary embodiment, seal designs are added on displayed content, and are embedded in digital signature, can printed The insertion being digitally signed in the display of chapter pattern can also be embedded in digital signature by additional data structure, so that Electronic Signature file carries this data of digital signature.

By this exemplary embodiment, will pass through distributed network realizes the use of E-seal, and ensure that electricity The authority and safety of sub- seal, E-seal are no longer equal to simple E-seal picture.

Fig. 5 is according to the flow chart that step 311 is described shown in Fig. 4 corresponding embodiment.In an exemplary reality It applies in example, as shown in figure 5, the step 311 at least includes the following steps.

The account that in step 401, the acquisition of the public key according to corresponding to seal user seal user holds itself Location.

Wherein, as previously described, seal user holds private key, i.e. encryption key, by this private key can operation obtain Unique corresponding public key, i.e. decruption key.Label of the seal user in corresponding E-seal client triggering electronic document Zhang Shi will obtain corresponding public key by held private key operation, or directly acquire the public key having had been prepared for, at this point, The account address that seal user holds itself can be obtained come operation according to public key.

Certainly, the account address itself held for seal user is also possible to transport by public key in advance It obtains, therefore, when triggering the stamped signature of electronic document, corresponding account address is directly obtained according to public key.

In step 403, read to obtain the seal information of seal user from account address, the seal information be used for so that The digital signature of seal user visualizes.

Pair wherein, as previously described, in distributed network, seal information is stored on corresponding account address, i.e., For one holds the user of E-seal, seal information is stored in distributed network, and the account held with user Address phase mapping can be read to obtain mapped seal information by account address.

In the exemplary embodiment, seal information is realized to store in the storage of distributed network and seal information The realization of stamped signature when distributed network, so that the application of E-seal is able to carry out under the framework of distributed network, Safety is enhanced, is able to effectively identity be avoided to falsely use.

It can thus be seen that seal user realizes the stamped signature of electronic document via distributed network, for example, can pass through The electronic document of stamped signature required for corresponding E-seal client is uploaded to distributed network, and then in distributed network The lower stamped signature for completing electronic document of control；In addition, after seal information can also being obtained by distributed network, in corresponding electronics Seal client completes stamped signature, to sum up, the stamped signature of electronic document will be in the E-seal client for corresponding to seal user Reach under the cooperation of end and distributed network.

Fig. 6 is according to the flow chart that step 330 is described shown in Fig. 3 corresponding embodiment.In an exemplary reality It applies in example, as shown in fig. 6, the step 330 at least includes the following steps.

In step 331, carries out consistency operation in terms of content to Electronic Signature file and obtain corresponding to Electronic Signature text The cryptographic digest of part content.

Wherein, by executing consistency operation to Electronic Signature file, acquisition is uniquely corresponding to Electronic Signature file content Cryptographic digest.The cryptographic digest of Electronic Signature file will carry out the number that safety is enhanced to the content of Electronic Signature file Value description.

Specifically, seal user after obtaining Electronic Signature file, first carries out in content Electronic Signature file Consistency operation to obtain a string of characters for corresponding to Electronic Signature file content, obtained with this for example, Hash operation Cryptographic digest corresponding to Electronic Signature file content.

It should be appreciated that Electronic Signature file content attached E-seal, therefore, correspond in Electronic Signature file The cryptographic digest of appearance, the content not only carried to Electronic Signature file have carried out consistency description, but also by corresponding seal designs Consistency description has been carried out in conjunction with carried content.The cryptographic digest of Electronic Signature file can also carry out stamped signature behavior and electricity The unique identification of the covered E-seal of subfile.

In step 333, the stamped signature data of E-seal are increased newly by cryptographic digest and Electronic Signature file.

Wherein, with the acquisition of cryptographic digest in abovementioned steps, by the stamped signature behavior completed of triggering increase stamped signature data newly, By continuous increase newly of stamped signature data completed stamped signature behavior can be recorded by distributed network.

Stamped signature data indicate Electronic Signature file towards seal user, the file side of collecting, and pass through electronics The corresponding cryptographic digest of stamped signature file and the unique identification to quantize to this.As a result, under the action of cryptographic digest, into one Step enhance information entrained by stamped signature data can not tamper, and effectively prevent the omission of information.

It is adapted to the stamped signature completed to electronic document, carries out the newly-increased of stamped signature data, the stamped signature data quilt increased newly It is stored in distributed network, even if obtaining the consistency storage for all carrying out stamped signature data between the node in distributed network.

It should be noted that by the cryptographic digest of Electronic Signature file, with Electronic Signature file towards seal make It is generated together with side, the file side of collecting and is adapted to the newly-increased stamped signature data of completed stamped signature behavior, it can be by distributed network One node executes, this node is the node that E-seal client connects in distributed network corresponding to seal user.

Certainly, for the newly-increased of stamped signature data, it is also not limited to this.It in one exemplary embodiment, can be by printing The realization of E-seal client corresponding to chapter user, and in another exemplary embodiment, it can also be by distributed network Host node is realized.

For example, this distributed network is alliance's distributed network, therefore there is host nodes and ordinary node.Host node is logical Carried out point-to-point transmission is crossed, the E-seal client as corresponding to seal user and ordinary node obtain Electronic Signature The cryptographic digest of file, it is of course also possible to be to obtain Electronic Signature file in the stamped signature behavior itself run executes Cryptographic digest, and then with Electronic Signature file towards seal user, the file side of collecting realize E-seal stamped signature data It is newly-increased.

It, can the stamped signature number that increases newly of each node synchronization into distributed network after obtaining the stamped signature data that increase According to making all nodes in distributed network that can synchronize to obtain newly-increased stamped signature by the transmission of the whole networks of stamped signature data Data.

In distributed network, the whole network transmission of stamped signature data is realized by the data interaction of progress point-to-point between node , to enable newly-increased stamped signature data the whole network in distributed network to spread with this.

In one exemplary embodiment, step 335 includes：Using the consistency policy of common recognition algorithm, in distributed network The diffusion that stamped signature data between each node are carried out in network, the E-seal stamped signature data for storing distributed network interior joint reach At consistent.

Wherein, as previously described, all multinodes are disposed in distributed network, each node will all pass through the number of block chain The storage of stamped signature data is carried out according to structure, and the stamped signature data stored between node are all consistent.

It, will be according to synchronization mechanism between distributed network interior joint for the diffusion of stamped signature data in distributed network Difference, have different stamped signature data diffusion processes, but anyway, be all by means of the point-to-point biography between each node It is defeated realized.

Specifically, the diffusion carried out, includes the common recognition that a time interval interior nodes form obtained stamped signature data Value, the stamped signature data that can reach common understanding, the data of institute's point-to-point transmission, the stamped signature data as reached common understanding.

As previously described, in a time interval, for a stamped signature behavior, a node will be with point pair between other nodes The progress of point transmission, receives several stamped signature data corresponding to this stamped signature behavior, at this point, common recognition mechanism is executed, in correspondence It is consensus value that stamped signature data of the accounting greater than 50% are chosen in several stamped signature data of this stamped signature behavior, as consensus value Stamped signature data can be spread to other nodes, and then the whole network for reaching the stored stamped signature data of each node is unified.

In addition to this, newly-increased stamped signature data obtained for node or stored stamped signature data, require according to Certain time interval persistently carries out the verifying of validity and authenticity, to remove overdue stamped signature data, and to body The stamped signature data and corresponding Electronic Signature file that part is not inconsistent are given and are removed, and the orderly pipe of stamped signature is further ensured that with this Reason and controllability.

Further, in one exemplary embodiment, E-seal is increased newly by cryptographic digest and Electronic Signature file Stamped signature data, including：

Obtain the corresponding timestamp of Electronic Signature file；

The newly-increased stamped signature data of E-seal are generated by Electronic Signature file and corresponding cryptographic digest, timestamp, The stamped signature data that timestamp is used to increase newly for E-seal control available time.

Wherein, stamped signature data are other than including cryptographic digest corresponding to Electronic Signature file and Electronic Signature file, It further include the corresponding timestamp of Electronic Signature file.This time stamp is that expiration time stabs, and is used to indicate corresponding Electronic Signature text The validity of part in time.

Fig. 7 is the consistency policy of the application common recognition algorithm according to included by step 335 in Fig. 6 corresponding embodiment, is being divided The diffusion that stamped signature data between each node are carried out in cloth network, the E-seal stamped signature for storing distributed network interior joint Data are reached an agreement the flow chart that step is described.In one exemplary embodiment, as shown in fig. 7, application common recognition algorithm Consistency policy make distributed network interior joint institute in the diffusion for carrying out stamped signature data between each node in distributed network The E-seal stamped signature data of storage are reached an agreement step, are included at least：

In step 501, each node carries out testing for stored stamped signature data according to specified time interval in distributed network Card is deleted and verifies unacceptable stamped signature data, and the stamped signature data of storage include newly-increased stamped signature data.

Wherein, verifying of the node to stored stamped signature data, including temporal validation verification and authentication, with This come guarantee stored stamped signature data be in time and in identity it is effective.

Based on this, when each node in distributed network will carry out stored stamped signature data according to specified time interval Between validity and identity validity verifying.Signified available time refers to corresponding stamped signature data and not yet due.Institute The stamped signature data of storage suffer from corresponding timestamp, and stamped signature data having in time is judged by corresponding timestamp Effect property.

For example, corresponding timestamp includes expiration time stamp, corresponding, the available time carried out is tested Card will obtain the current time stamp timestamp information that whether comparison current time stamp reaches the timestamp that expires in turn to examine Journey is verified by the available time that is carried out, delete the overdue stamped signature data of timestamp present in this node and.

The identity validation verification carried out in node is that the identity carried out to stamped signature data caused by stamped signature behavior is tested Card, to confirm that covered E-seal is that the E-seal held with seal user is consistent, if it is inconsistent, saying Bright corresponding stamped signature behavior be it is invalid, need that the stamped signature behavior and stamped signature file that accordingly generate are given and deleted.

Specifically, account address is obtained towards seal user corresponding public key by institute for the stamped signature data stored, It is read on this account address and obtains the digital signature of seal user, this digital signature is also that this seal user is held It is embedded in the seal designs of E-seal, as the digital signature of E-seal.

It is extracted to obtain the digital signature of covered E-seal by the Electronic Signature file in stamped signature data, carries out two numbers Comparison between word signature, if unanimously, illustrating the stamped signature behavior and generated Electronic Signature that stamped signature data are recorded File, strictly by towards seal user realize, and not be to be realized using other people E-seals.

If digital signature is not consistent, need to delete inconsistent stamped signature data, to guarantee node stored information Reliability.

It should be appreciated that node passes through the verifying itself carried out, and the valid data that can proceed with storage are obtained, because This, by determine effectively can continue to storage stamped signature data write-in have verified that mark, in order to be identified.

In step 503, each node will all be verified the consistency policy of common recognition algorithm for stamped signature data to distribution Other nodes in network are synchronous, and the stamped signature data for storing distributed network interior joint are reached an agreement.

Wherein, by abovementioned steps, each node, which all obtains, itself can continue to be stored, true and reliable data, At this point, synchronization of institute's storing data to other nodes can be carried out by common recognition mechanism.

By this exemplary embodiment, it will guarantee accurate reliability for the storage in distributed network, and also will herein On the basis of provide more structurally sound data foundation with the E-seal identification carried out for subsequent, in the same of simplification qualification process When, enhance the accuracy of identification.

In one exemplary embodiment, step 370 includes：The file side of collecting leads to after obtaining Electronic Signature file The comparison that Electronic Signature file carries out character string in distributed network is crossed, the E-seal in Electronic Signature file is identified, compares Character string by Electronic Signature file cover E-seal digital signature or/and Electronic Signature file it is corresponding encryption pluck It wants.

Wherein, as previously described, after obtaining Electronic Signature file, reception will be obtained portion and oneself by the file side of collecting The relevant Electronic Signature file of body, to this Electronic Signature file, the file side of collecting used by distributed network The identification of E-seal, with confirm the E-seal that is used corresponding to Electronic Signature file be strictly towards seal user Held, and is not imitated.

It is embedded in digital signature corresponding to seal user in Electronic Signature file, and can also pass through its content Consistency operation obtains the corresponding cryptographic digest of Electronic Signature file from stamped signature data.And distributed network carries out label The storage of chapter data and seal information, stamped signature data contain Electronic Signature file and the corresponding encryption of Electronic Signature file Abstract；Seal information carries the digital signature and E-seal digital signature of seal user.

Therefore, for the identification of Electronic Signature file, the verifying of Electronic Signature file encryption abstract is carried out, electricity can also be carried out The verifying for the E-seal digital signature being embedded in sub- stamped signature file or two kinds of verifyings all carry out, and mutually assist.

The file side of collecting carries out the digital signature and/or electronics label of covered E-seal by Electronic Signature file Comparison of the cryptographic digest of chapter file in distributed network.

Fig. 8 be it is shown according to an exemplary embodiment to the file side of collecting after obtaining Electronic Signature file, pass through Electronic Signature file carries out the comparison of character string in distributed network, identifies that the E-seal step in Electronic Signature file carries out The flow chart of description.In one exemplary embodiment, the character string of comparison covers E-seal by Electronic Signature file Digital signature, as shown in Figure 8, the file side of collecting is divided after obtaining Electronic Signature file by Electronic Signature file The comparison of character string in cloth network identifies that the E-seal step in Electronic Signature file includes at least：

In step 701, the file side of collecting by acquisition Electronic Signature file therefrom extract capping E-seal number Word signature.

Wherein, Electronic Signature file carries certain content, and the number label of the seal designs, insertion covered Name.Therefore, the file side of collecting can extract from this Electronic Signature file after reception obtains Electronic Signature file and obtain institute Cover the digital signature of E-seal.

In step 703, the file side of collecting according to Electronic Signature file towards seal user, to distributed network send out Play the verifying of digital signature.

Wherein, the file side of collecting using extracted E-seal digital signature and Electronic Signature file towards Seal user initiates the verifying of digital signature in distributed network.Signified digital signature authentication herein is based on distribution The stored seal information of network carries out, and is that verifying the extracted E-seal digital signature in the file side of collecting is deposited with seal user It is stored in the whether consistent process of digital signature entrained by seal information in distributed network.

In step 705, the seal verification result that distributed network is returned to the file side of collecting, seal verification result are received Whether designation number signature is consistent to the digital signature in itself held seal information with seal user.

Wherein, as file collects the digital signature authentication of directional spreding formula network initiation, the file side of collecting will therewith The seal verification result of distributed network return is received, thus seal verification result can confirm the electronic seal for requesting identification Whether chapter is imitated.

It is directly to have carried out Electronic Signature file institute in the identification that this exemplary embodiment is carried out by Electronic Signature file Towards the verifying whether E-seal used in seal user is imitated, under the action of digital signature, no matter electronics label Whether additional seal designs and the seal designs of the held E-seal of seal user are similar in chapter file, can be easily The seal designs for identifying imitated E-seal and covering.

Fig. 9 be according to shown in Fig. 8 corresponding embodiment to the file side of collecting after obtaining Electronic Signature file, pass through electricity Sub- stamped signature file carries out the comparison of character string in distributed network, identifies the E-seal step in Electronic Signature file another Implementation exemplifies the flow chart of description.In a further exemplary embodiment, as shown in figure 9, the file side of collecting is obtaining electronics label After chapter file, the comparison of character string in distributed network is carried out by Electronic Signature file, is identified in Electronic Signature file E-seal step further includes：

In step 801, according to the file side of collecting by acquisition Electronic Signature file initiate digital signature authentication, distribution The account address that node in formula network itself is held from seal user obtains seal information.

Wherein, it should be understood that the file side of collecting shown in Fig. 8 corresponding embodiment passes through the covered electronics of Electronic Signature file The digital signature of seal and the process for realizing identification, and this process is adapted to, distributed network will be the progress of the file side of collecting The identification of E-seal digital signature.

Specifically, distributed network receives institute of the file side of collecting with the initiation of the file side of collecting digital signature authentication Indicate the E-seal digital signature verified and seal user.At this point, distributed network will be according to the file side of collecting The seal user of instruction obtains the account address that this seal user holds, and then obtains under the mapping of this account address Seal information, seal information obtained are exactly the seal information signed and issued to this seal user.

The account address that seal user holds can transport the public key that this seal user holds by distributed network It obtains.

It is the data existence form of the held E-seal of seal user according to the seal information that account address obtains, Seal information obtained contains seal signing messages, i.e. the number label of E-seal digital signature and seal user Name.

In step 803, the number label that seal signing messages and the file side of collecting in seal information initiate verifying are compared Name, generates the seal verification result returned to the file side of collecting.

Wherein, both digital signature that seal signing messages and the file side of collecting in seal information initiate verifying are carried out Between comparison, and seal verification result is accordingly generated, with to the return of the file side of collecting.

Figure 10 be show according to another exemplary embodiment to the file side of collecting after obtaining Electronic Signature file, lead to Cross Electronic Signature file carry out distributed network in character string comparison, identify Electronic Signature file in E-seal step into The flow chart of row description.In another exemplary embodiment, the character string of comparison is the cryptographic digest of Electronic Signature file, such as Shown in Fig. 10, the file side of collecting is carried out in distributed network after obtaining Electronic Signature file by Electronic Signature file The comparison of character string is identified the E-seal in Electronic Signature file, is included at least：

In step 1001, after obtaining Electronic Signature file, the file side of collecting is according to received Electronic Signature file face To seal user and itself, the corresponding cryptographic digest of Electronic Signature file to distributed network initiate corresponding stamped signature row For authenticity verification.

Wherein, Electronic Signature file received for institute, the file side of collecting certainly exist the mirror of corresponding E-seal Determine demand, the identification of this E-seal will be realized by the cryptographic digest of Electronic Signature file.

The file side of collecting carries out corresponding to the consistency operation acquisition in content the received Electronic Signature file of institute to it Cryptographic digest, and then the authenticity verification of corresponding stamped signature behavior is initiated for Electronic Signature file to distributed network.

The initiation of corresponding stamped signature behavior authenticity verification, will be so that distributed network obtaining initiated authenticity verification After the corresponding cryptographic digest of Electronic Signature file of middle instruction, seal user, the file side of collecting, verify whether exist like this Corresponding stamped signature data, i.e., with the presence or absence of cryptographic digest corresponding with indicated Electronic Signature file, seal user and The consistent stamped signature data in the file side of collecting, if it is present illustrating that the stamped signature behavior of institute's requests verification is authentic and valid.

Distributed network accordingly generates seal verification result according to the authenticity verification carried out, thus seal verification result To indicate to whether there is the stamped signature data consistent with verified stamped signature behavior in distributed network.

In step 1003, the seal verification result that distributed network is returned to the file side of collecting, seal verifying knot are received Fruit instruction distributed network stores corresponding E-seal stamped signature data.

Wherein, the file side of collecting receives returned seal verification result with the progress verified in distributed network, Thus seal verification result being determined to, whether the Electronic Signature file for requesting identification is imitated using E-seal, effectively Avoid the generation that identity is falsely used.

Figure 11 be according to shown in Figure 10 corresponding embodiment to the file side of collecting after obtaining Electronic Signature file, pass through Electronic Signature file carries out the comparison of character string in distributed network, identifies the E-seal step in Electronic Signature file another The flow chart that one embodiment is described.

It is as shown in figure 11, in another exemplary embodiment, the file side of collecting after obtaining Electronic Signature file, The comparison of character string in distributed network is carried out by Electronic Signature file, identifies the E-seal step in Electronic Signature file Suddenly, further include：

In step 1101, the stamped signature behavior authenticity verification initiated according to the file side of collecting, distributed network is from node In the stamped signature file of block inquiry request verifying stamped signature behavior authenticity whether correspond to the stamped signature data of E-seal.

Wherein, Electronic Signature file is obtained by a stamped signature behavior, and the authenticity of stamped signature behavior is instruction label Zhang Hangwei is and be the visualization processing that Electronic Signature by being signed and issued to seal user executes digital signature to electronic document It realizes, either electronic document or obtained Electronic Signature file, is all to be intended for identical seal user and Wen The part side of collecting.It can be seen that a stamped signature behavior, has uniquely corresponded to seal user, the file side of collecting and Electronic Signature text The cryptographic digest of part can carry out the authenticity verification of stamped signature behavior based on this.

For distributed network, the stamped signature behavior occurred is to realize to record by stamped signature data, therefore, can By the inquiry of corresponding stamped signature data, to confirm the authenticity of stamped signature behavior.

As previously described, in distributed network, each node carries out the consistency storage of stamped signature data by block, because This inquires block on the node that the file side of collecting is connected, true with the presence or absence of stamped signature behavior is corresponded to inquiry Reality verifying initiate in indicate seal user, the file side of collecting, Electronic Signature file encryption abstract E-seal stamped signature Data.

In step 1103, the seal verification result for corresponding to query result is generated, and to the return of the file side of collecting.

Wherein, the node in distributed network will accordingly generate seal verification result according to query result, and receive to file The side's of taking return, to indicate the authenticity of stamped signature behavior by seal verification result generated.

Institute of the file side of collecting has been carried out based on the stamped signature data that distributed network is stored by this exemplary embodiment The stamped signature behavior authenticity verification of Electronic Signature file is received, and then only needs inquiry and comparison numerically can be simply fast The precise Identification of realization the used E-seal of Electronic Signature file of speed.

By foregoing example embodiment, the sealing system under distributed network architecture is provided for the application of E-seal It realizes, and corresponding, E-seal client, will configure to realize by following exemplary embodiments.

Figure 12 is a kind of flow chart of the implementation method of E-seal client shown according to an exemplary embodiment.? In one exemplary embodiment, the implementation method of the E-seal client is suitable for seal user, that is, the electronics realized Seal client corresponds to seal user's, as shown in figure 12, the implementation method of the E-seal client is at least wrapped Include following steps.

In step 1310, E-seal client is carried out according to the triggering of stamped signature on electronic document, what acquisition was held Private key.

In step 1330, E-seal client initiates electricity by node of the held private key into distributed network The stamped signature behavior of subfile, node are the node that E-seal client is connected in distributed network.

In step 1350, after stamped signature behavior obtains stamped signature data by distributed network, E-seal client termination The Electronic Signature file that contracture cloth nodes return, the E-seal on Electronic Signature file is by corresponding to private key What the seal information stored on account address obtained.

Wherein, in the exemplary embodiment, user uses held E-seal in E-seal client, with To electronic document stamped signature, this user is seal user.It should be appreciated that the E-seal held, be distributed network to What this user signed and issued.

In the application of E-seal, the stamped signature that seal use direction electronic document carries out should necessarily be used and itself be closed The E-seal that method is held, this E-seal are that distributed network is signed and issued, and therefore, corresponding seal information is storage In distributed network.

The stamped signature behavior for initiating electronic document to distributed network therefore, it is necessary to the private key held by user, into And side enables to distributed network that can accordingly read seal letter with the initiation of stamped signature behavior in E-seal client Breath, and stamped signature behavior is executed to electronic document under the control of seal information.

After distributed network executes stamped signature behavior and records, the E-seal client where seal user can be obtained Corresponding Electronic Signature file is obtained, attached the corresponding seal designs of E-seal in Electronic Signature file, and be embedded in number Signature.

Further illustrate, the private key that user holds in E-seal client, have unique corresponding public key, this Public key is mapped on the account address that user is held, i.e., by public key can operation with obtaining account that user is held Location.

Therefore, E-seal client can be the execution of stamped signature behavior in distributed network by held private key Account address required for obtaining, and then the seal information stored on this account address.

The stamped signature of E-seal client progress triggered to electronic document, will be realized by obtained seal information The stamped signature of the carried content of electronic document adds seal designs and insertion digital signature to carried content.

So far, the execution of stamped signature behavior is just realized for electronic document, it is corresponding to obtain Electronic Signature file, and held Capable stamped signature behavior also by by distributed network by towards seal user, the file side of collecting and Electronic Signature file Cryptographic digest record, that is, generate and store stamped signature data.

This exemplary embodiment is the use that user realizes E-seal, and signified user, can be individual, It can be enterprise institution etc., herein without limiting.

For each user, such as needs to hold the E-seal that itself legal can be used, require to be printed thus Chapter registration and network storage.Indicated seal registration and network storage will also be intended for distributed network progress.

With the progress that seal is registered, corresponding seal information can be obtained, and be stored in distributed network.Specifically , in user's registration seal, due to either for individual or unit mechanism, suffering from unique corresponding title, For example, organization, unified social credibility code, business license number and seal coding etc., according to corresponding name query Whether corresponding seal information is had existed, if it does not exist, then registering through, if had existed, to the print carried out Chapter registration returns to error code.

If registered through, corresponding seal information will be generated, this seal information is in addition to the seal figure including aforementioned meaning Except case and digital signature, further comprise registion time stamp, title, account address etc., in seal information seal designs and The presence of digital signature is able to ensure that the uniqueness of E-seal, and ensure that electronic seal under the cooperation of distributed network The non-reproduction of chapter.Wherein, registion time stamp is used to indicate seal registion time, and account address is then used for as E-seal Mapping using from the obtained account address of realization to seal information.It can be seen that when seal user is to electronic document stamped signature, In the seal information that distributed network is stored, lookup is contained held account for the account address held by itself The seal information of address, this seal information correspond to the legal E-seal held of seal user.

The user of seal registration, the as user of distributed network are carried out, therefore, the seal registration carried out is to pass through use The node of E-seal client connection is realized where family, and seal information needs to carry out thus after the generation of this node The whole network diffusion in distributed network, guarantees that each node in distributed network will receive a seal information, and store Into memory, the network of a new round is waited to know together.

After completing the network common recognition of a new round, the seal information synchronized is just stored on the block of node.One In a exemplary embodiment, synchronization and common recognition process of the seal information in distributed network include：Section in distributed network Point can combine seal information collected by a period of time, if obtaining the letter of dry chop corresponding to each E-seal Breath, if at this point, using the public key of seal owner as index entry, operation institute is right for dry chop information corresponding to E-seal The cryptographic digest for answering each seal information is stored cryptographic digest obtained as index key.

If for dry chop information corresponding to each E-seal, will extract accounting greater than 50% seal information as Consensus value is propagated to the whole network.Specifically, for each E-seal, in several cryptographic digests of owner's public key mapped, The cryptographic digest that accounting is greater than 50% is taken out, seal information corresponding to this cryptographic digest is consensus value.

To the E-seal that each user is held, if it more corresponds to a seal information in node, for example, Thus in all seal information collected by E-seal, seal information greater than 50% all seal information (aforementioned meanings thus Corresponding seal information more in node), then this seal information is consensus value, the other sections that can be synchronized in network Point.

And so on, by taking turns iteration, it is unified that the whole network of seal information in distributed network can be realized, and then make more The stamped signature of electronic document can be realized by the connection with arbitrary node in distributed network by obtaining seal user, and also The identification of E-seal is realized with the connection by means of E-seal client and arbitrary node.

For example, each round common recognition in node is carried out according to specified time interval.By point-to-point between node Data interaction, each node in distributed network, can all be collected into many seal information, collected many seal information are Corresponding to various E-seals.

It is further illustrated, in distributed network, each node is all registered with the seal carried out, without stopping pregnancy Raw seal information, node by all seal information packages generated in specified time interval at set, then to distributed network In other nodes spread be packaged set.

Corresponding, with the diffusion for being packaged set, the node in distributed network can all receive multiple set, If each set contains dry chop information.Seal information includes the account address of seal owner, and even seal possesses The public key of person.

, can be with the public key of seal owner for key at this point, for the received multiple set of node institute, i.e. index entry is right After seal information acquires cryptographic digest in set, it will be associated storage according to corresponding public key, connect with this to obtain In the multiple set received, the relevant seal information of each seal owner institute, and then this is chosen, it just obtains node and thinks It can be as the seal information for the consensus value for corresponding to this seal owner.

Such as, it obtains receiving node with cryptographic Hash, i.e. cryptographic digest existing for hash value form by Hash operation N number of set will form following data, i.e.,

Seal 1：[hash11, hash12, hash13, hash14 ... hash1N]

Seal 2：[hash21, hash22, hash23, hash24 ... hash2N]

Seal 3：[hash31, hash32, hash33, hash34 ... hash3N]

Seal 4：[hash41, hash42, hash43, hash44 ... hash4N]

……

Wherein, seal 1, seal 2, seal 3, seal 4 ..., all public key for corresponding seal owner.

For the multiple cryptographic Hash of 1 mapped of seal, the cryptographic Hash work that numerical value is identical and accounting is greater than 50% is taken out It for consensus value, is pushed with this, obtains the consensus value in all seal information synchronized, and then make according to consensus value obtained The seal information storage that the whole network carries out is obtained to reach an agreement.

This exemplary embodiment, be able to the E-seal client corresponding to seal user realize seal registration with And register to obtain seal information the whole network in distributed network and transmit, with this come the electronic document that is carried out by electronic client Stamped signature establishes solid base.

Figure 13 is a kind of implementation method of E-seal client shown according to Figure 12 corresponding embodiment in another implementation The flow chart of example.In a further exemplary embodiment, E-seal client corresponds to the file side of collecting, as shown in fig. 13 that, The implementation method of the E-seal client, it is further comprising the steps of.

In step 1510, E-seal client receives the Electronic Signature file that distributed network is sent, E-seal Client correspond to this Electronic Signature file towards the file side of collecting.

In step 1530, the identification of E-seal is initiated Electronic Signature file to distributed network, by E-seal Digital signature or/and the corresponding cryptographic digest of Electronic Signature file obtain the seal verification result that distributed network returns.

Wherein, as the electronic document carried out circulates, the corresponding user of E-seal client as seal in addition to making It except side, also tends to be existing as the file side of collecting, this will depend on the progress of stamped signature in electronic document.

For example, an only side needs to carry out stamped signature to this for the stamped signature of progress required for an electronic document, because This, it is then as file that there is seal users, and hold the other users to suffer restraints in seal user signs The side of collecting and it is existing.

In another example an electronic document needs related two users all to carry out stamped signature, then the two users are both as print Chapter user, and as the file side of collecting.

Therefore, E-seal client realizes the stamped signature of electronic document except through distributed network, also passes through distribution Network carries out collecting and identifying for Electronic Signature file.

E-seal client can receive Electronic Signature file transmitted by distributed network, at this point, E-seal is objective The corresponding user in family end is existing for the effect file side of collecting.E-seal client after receiving Electronic Signature file, The digital signature of E-seal can be extracted from Electronic Signature file, and/or Electronic Signature file is carried out consistent in content Property operation, to obtain the cryptographic digest of Electronic Signature file.

E-seal client makes Electronic Signature file using the digital signature and/or cryptographic digest extracted It is identified with E-seal, to confirm that E-seal used in Electronic Signature file is that seal user really holds, Or confirmation Electronic Signature file be strictly institute towards seal user and the file side of collecting progress electronic document stamped signature institute It obtains, to confirm the authentic and valid of Electronic Signature file.

One side, the seal designs on Electronic Signature file are embedded in the digital signature of seal user, or in electricity The digital signature of seal user is embedded on sub- stamped signature file by additional data structure.Therefore, E-seal client It can confirm that the authentic and valid of Electronic Signature file, or confirmation generate by the digital signature extracted on Electronic Signature file The used E-seal of Electronic Signature file it is authentic and valid, and be not imitated to assume another's name to generate.

Another aspect, the cryptographic digest of Electronic Signature file can be by Electronic Signature file in terms of content consistent Property operation, such as Hash operation obtain, and can be cryptographic Hash.And the note of performed stamped signature behavior is carried out in distributed network Record, that is, store the stamped signature data corresponding to stamped signature behavior, stamped signature data in addition to instruction institute towards seal user, file receipts After the side of taking, the cryptographic digest of generated Electronic Signature file is also recorded, therefore, E-seal client can pass through electronics The cryptographic digest of stamped signature file obtains the authenticity of corresponding stamped signature behavior in distributed network authentication, corresponding stamped signature behavior Necessary being just indicates the authentic and valid of used E-seal, and the generation of Electronic Signature file is not imitated E-seal And acquisition of assuming another's name.

This exemplary embodiment realizes E-seal client corresponding to the file side of collecting, and then by means of block Block chain business network is to have received the E-seal client of Electronic Signature file to meet E-seal identification need present in it It asks, and is able to ensure that facilitating for identification is errorless.

By exemplary embodiment as described above, the reality of system is provided on method flow for applying for E-seal Thus the realization of existing and corresponding various clients will make E-seal be able to the circulation applied to electronic document, and Suitable for various internet scenes, for example, various types of e-commerce scenes etc., simple and reliable, also will greatly facilitate The work efficiency of government affairs institute related service in urban service.

By taking the scene of E-seal application as an example, the application of E-seal and E-seal client in the above method are described The realization at end reaches electronic document, the i.e. circulation of electronic document with this.Any individual or enterprise institution all can by The seal carried out in distributed network is registered and holds E-seal, and each in distributed network in the form of block structure Node stores generated seal information, and in other words, distributed network is that all multi-users have print by block structure Chapter information.

Any user can be by distributed network to electronic document stamped signature, in order to by corresponding electronics label as a result, Chapter restoring files are to related other users, thus reach with regard to the agreement of the carried content of electronic document between user, it can Realize that electronic document is intended for the genuine and believable circulation of user.

It should be appreciated that being used by the E-seal that distributed network is realized, Electronic Signature restoring files, E-seal Identification and the retrospect of stamped signature behavior etc., electronic document, including the Electronic Signature file accordingly obtained, involved by its circulation Each link on, corresponding user will meet current demand by distributed network.

E-seal application and E-seal client under with no paper business scene are realized；

With no paper business scene is to cooperate operation system using electrical screen hardware, realize with no paper sales counter, for user it is real In existing business, the Electronic Signature file of the be supplied to user of sales counter is obtained with the signature that E-seal is carried out, is being realized E-seal application and E-seal client under the action of so that with no paper at all, the progress of networking thoroughly realize business hall With no paper storage and circulation, and then process is handled to simplify with this, improves business handling efficiency, mitigate business service people conscientiously Member's burden, reduces operation expense.

Figure 14, which is that with no paper business scene shown according to an exemplary embodiment is lower, realizes that with no paper sales counter is corresponding System construction drawing.In one exemplary embodiment, as shown in figure 14, to realize with no paper sales counter, 1750 institute of operation system The electronic document of output is realized stamped signature and with docking for distributed network, is obtained via E-seal client 1710 Electronic Signature file, in addition to operation system 1750 return achieve other than, also can on no paper sales counter transacting business visitor Family returns to Electronic Signature file, at this point, client will be used as the file side of collecting 1730, and is also the electronics by itself being run Seal client realizes what file was collected.

For example, client, as the file side of collecting 1730, used E-seal client is operate in no paper battalion On the electrical screen hardware that the industry Room is configured, client will be in this electrical screen hardware transacting business, the electronics of institute's transacting business generation File, operation system 1750 will be used as seal user, dock distributed network by E-seal client 1710, realize label Chapter.

So far, the problem of just making electronic document produced by with no paper sales counter cover E-seal obtains safe and efficient solution Certainly.

The E-seal that government affairs are handled official business under scene is applied and E-seal client is realized；

Government affairs office scene is similar with no paper business scene, requires to realize electronic document by distributed network Stamped signature.

Under with no paper business scene, file is collected Founder and is on no paper sales counter side, therefore, only business handle with And the reception of Electronic Signature file, and there is no the qualification requirements to the used E-seal of Electronic Signature file.

Government affairs handle official business scene unlike this, and the file side of collecting of government affairs office scene is distally to collect government affairs office people The Electronic Signature file that member is transmitted by distributed network, therefore, the file side of collecting generally requires identification Electronic Signature text Part the use of E-seal whether is strictly that government affairs office sectors is held, if having authority.

Figure 15 is the signal that official document signs and issues involved timing under government affairs office scene shown according to an exemplary embodiment Figure.Handle official business under scene in this government affairs, as shown in figure 15, OA system is used in government affairs office sector, also will by with The connection of E-seal customer end A and be docked on distributed network, thus come by means of distributed network realize official document label Hair.

E-seal customer end A corresponds to seal user's；Distributed network will realize signing and issuing for official document thus And data deposit card.It should be appreciated that signified data deposit card, and it is to realize electronic data, such as stamped signature data, Electronic Signature text The storage of part, in order to provide tracing function.

E-seal customer end B then corresponds to the file side of collecting；E-seal customer end B will be the file side of collecting Obtain the official document that government affairs office sector is signed and issued, that is, official document of affixing one's seal.Herein on basis, the file side of collecting will also pass through electronic seal Chapter customer end B affix one's seal the identification of official document, and the realization of this identification, timing as shown in figure 15 is it is found that be by means of distribution It is existing that the data that network is realized deposit confirmation.

In addition to this, it can be naturally also applied under the scenes such as internet finance, for the thus required contract signature carried out It provides and supports.

It is applied by E-seal as described above and E-seal client is realized, can be existing based on this Demand realize electronic signature platform, contract management system, many services such as official document receive-transmit system, to meet and support various industry Business and infrastructure service, it is efficiently convenient, reach the clear and legible purpose of Electronic Signature file, under the support of distributed network, Ensure high-intensitive access and data safety.

Following is apparatus of the present invention embodiment, can be used for executing above method embodiment of the present invention.The present invention is filled Undisclosed details in embodiment is set, embodiment of the method for the invention is please referred to.

Figure 16 is the structural block diagram for implementing a kind of E-seal application system exemplified according to one.As shown in figure 16, In an exemplary embodiment, which includes that node 2200 in distributed network and the file side of collecting are right The E-seal client 2300 answered.

Node 2200 in the distributed network includes stamped signature module 2210 and logging modle 2230, synchronization module 2250；

The stamped signature module 2210 is configured to be carried out on electronic document according to the stamped signature behavior triggered in distributed network E-seal covers, and obtains Electronic Signature file；

The logging modle 2230 is configured as obtaining by the Electronic Signature file and corresponding cryptographic digest The stamped signature data of the E-seal；

The synchronization module 2250 is configured as carrying out the stamped signature data by the consistency policy for algorithm of knowing together in institute The data stated in distributed network are synchronous；

The file side of collecting that the E-seal client 2300 is configured as obtaining the Electronic Signature file is logical Electronic Signature file described in the distributed network authentication is crossed, the verifying is to the Electronic Signature file in the distribution E-seal institute's relevant information is carried out in network to compare to obtain the real reliability of the Electronic Signature file.

Figure 17 is according to the block diagram that stamped signature module is described shown in Figure 16 corresponding embodiment.In an exemplary reality It applies in example, as shown in figure 17, which includes at least：Seal Information reading unit 2211 and seal visualization 2213。

Seal Information reading unit 2211, the stamped signature behavior for being triggered in distributed network according to seal user, Read seal information in the account address itself held from seal user；

Seal visualization 2213, for electronic document specified by the object oriented file side of collecting, according to the institute of reading It states seal information and executes digital signature visualization, obtain the Electronic Signature file that image shows E-seal.

Figure 18 is according to the block diagram that seal Information reading unit is described shown in Figure 17 corresponding embodiment.At one In exemplary embodiment, as shown in figure 18, which is included at least：Address acquisition unit 2401 and reading Take execution unit 2403.

Address acquisition unit 2401 obtains seal user for the public key according to corresponding to seal user and itself holds Account address；

Execution unit 2403 is read, obtains the seal information of seal user for reading from the account address, it is described Seal information is used for so that the digital signature of seal user visualizes.

Figure 19 is according to the block diagram that logging modle is described shown in Figure 16 corresponding embodiment.In an exemplary reality It applies in example, as shown in figure 19, which includes at least：Electronic Signature file arithmetic element 2231, record are newly-increased single Member 2233.

Electronic Signature file arithmetic element 2231, for carrying out consistency operation in terms of content to the Electronic Signature file Obtain the cryptographic digest for corresponding to the Electronic Signature file content；

Newly-increased unit 2233 is recorded, for increasing the electronic seal newly by the cryptographic digest and the Electronic Signature file The stamped signature data of chapter.

Further, in one exemplary embodiment, newly-increased unit 2233 is recorded to be configurable for：Obtain the electricity The corresponding timestamp of sub- stamped signature file；

The newly-increased label of the E-seal are generated by the Electronic Signature file and corresponding cryptographic digest, timestamp Chapter data, the stamped signature data that the timestamp is used to increase newly for the E-seal control available time.

Figure 20 is according to the block diagram that the whole network transmission unit is described shown in Figure 19 corresponding embodiment.In an example In property embodiment, as shown in figure 20, which is included at least：Record authentication unit 2251 and synchronous execution unit 2253。

Authentication unit 2251 is recorded, each node in the distributed network is used for and carries out institute according to specified time interval The verifying of stamped signature data is stored, deletes and verifies unacceptable stamped signature data, the stamped signature data of storage include newly-increased described Stamped signature data；

Synchronous execution unit 2253, for will all be verified the consistency policy of common recognition algorithm for stamped signature number in each node Synchronous, the E-seal stamped signature for storing the distributed network interior joint according to other nodes into the distributed network Data are reached an agreement.

In another exemplary embodiment, E-seal client is further used for the file side of collecting in acquisition electricity After sub- stamped signature file, the comparison of character string in the distributed network is carried out by the Electronic Signature file, described in identification E-seal in Electronic Signature file, the character string of comparison are covered the number of E-seal by the Electronic Signature file Word signature or/and the corresponding cryptographic digest of Electronic Signature file.

Figure 21 is the block diagram shown according to an exemplary embodiment that identification initiation module is described.In an example In property embodiment, the character string of comparison is covered the digital signature of E-seal, such as Figure 21 by the Electronic Signature file Shown, which includes at least：2330 and of unit is initiated in digital signature extraction unit 2310, signature verification As a result receiving unit 2350.

Digital signature extraction unit 2331, for by acquisition Electronic Signature file therefrom extract capping E-seal Digital signature；

Unit 2333 is initiated in signature verification, for according to the Electronic Signature file towards seal user, to described Distributed network initiates the verifying of the digital signature；

As a result receiving unit 2335, the seal verifying returned for receiving the distributed network to the file side of collecting As a result, the seal verification result indicates the digital signature and seal user to the number in itself held seal information It whether consistent signs.

Corresponding, Figure 22 is retouching shown in 1 corresponding embodiment to the node in distributed network according to fig. 2 The block diagram stated.In another exemplary embodiment, as shown in figure 22, the node 2200 in distributed network further includes：Verifying Information reading module 2270 and signature comparison module 2280.

Verification information read module 2350, the digital signature authentication for being initiated according to the file side of collecting, makes from seal Seal information is obtained with the account address that side holds itself；

Signature comparison module 2360, for comparing seal signing messages and the initiation of the file side of collecting in the seal information The digital signature of verifying, generates the seal verification result returned to the file side of collecting.

Figure 23 is the block diagram that identification initiation module is described shown according to another exemplary embodiment.At another In exemplary embodiment, the character string of comparison is the cryptographic digest of the Electronic Signature file, as shown in figure 23, electronic seal Chapter client 2300 includes at least authenticity verification and initiates unit 2370 and authenticity result receiving unit 2380.

Authenticity verification initiate unit 2337, for according to received Electronic Signature file towards the seal user And itself, Electronic Signature file encryption makes a summary and initiates the authenticity verification of corresponding stamped signature behavior to the distributed network；

Authenticity result receiving unit 2339, the print returned for receiving the distributed network to the file side of collecting Chapter verification result, the seal verification result indicate that the distributed network stores corresponding E-seal stamped signature data.

Corresponding, Figure 24 is retouching shown in 3 corresponding embodiments to the node in distributed network according to fig. 2 The block diagram stated.In another exemplary embodiment, as shown in figure 24, the node 2200 in distributed network further includes：Stamped signature Behavior authentication module 2401 and result-generation module 2403.

Stamped signature behavior authentication module 2401, the stamped signature behavior authenticity verification for being initiated according to the file side of collecting, Whether the distributed network corresponds to from the Electronic Signature file of the block inquiry request verifying stamped signature behavior authenticity in node In the stamped signature data of E-seal

Result-generation module 2403, for generating the seal verification result for corresponding to the query result, and to the text The return of the part side of collecting.

Figure 25 is a kind of block diagram of E-seal client shown according to an exemplary embodiment.In an exemplary reality It applies in example, a kind of E-seal client, corresponds to seal user, the E-seal client includes：Label Chapter trigger module 2710, stamped signature initiation module 2730 and stamped signature file reception module 2750.

Stamped signature trigger module 2710 obtains held private key for carrying out according to the triggering of stamped signature on electronic document；

Stamped signature initiation module 2730, described in being initiated by node of the held private key into the distributed network The stamped signature behavior of electronic document, the node are the node that E-seal client is connected in the distributed network；

Stamped signature file reception module 2750 is used for after stamped signature behavior obtains stamped signature data by the distributed network, The Electronic Signature file that distributed network interior joint returns is obtained, the E-seal on the Electronic Signature file is by described What the seal information stored on account address corresponding to private key obtained.

Figure 26 is a kind of block diagram of the electronic client shown according to another exemplary embodiment.In another exemplary reality It applies in example, a kind of E-seal client corresponds to the file side of collecting, as shown in figure 26, which also wraps It includes：File reception module 2810 and E-seal identify initiation module 2830.

File reception module 2810, the Electronic Signature file sent for receiving the distributed network, the electronic seal Chapter client correspond to the Electronic Signature file towards the file side of collecting；

E-seal identifies initiation module 2830, for initiating electricity to the distributed network to the Electronic Signature file The identification of sub- seal obtains the distributed network by the digital signature of E-seal or/and the cryptographic digest of Electronic Signature file The seal verification result that network returns.

Optionally, the present invention also provides a kind of computer equipment, which can be used for aforementioned shown implementation ring In border, execute as above it is any shown in method all or part of step.The computer equipment includes：

Processor；

Memory for storage processor executable instruction；

The computer-readable instruction realizes preceding method when being executed by the processor.

The concrete mode that the processor of device in the embodiment executes operation is held in the embodiment of preceding method Detailed description is gone, no detailed explanation will be given here.

In the exemplary embodiment, a kind of storage medium is additionally provided, which is computer readable storage medium, It such as can be the provisional and non-transitorycomputer readable storage medium for including instruction.The storage medium is for example including instruction Memory, above-metioned instruction can by the processor of device execute to complete the above method.

It should be understood that the present invention is not limited to the precise structure already described above and shown in the accompanying drawings, and And various modifications and change can executed without departing from the scope.The scope of the present invention is limited only by the attached claims.

Claims

1. a kind of E-seal application method, which is characterized in that the method includes：

According to the stamped signature behavior triggered in distributed network, the E-seal carried out on electronic document is covered, and obtains Electronic Signature File；

The file side of collecting for obtaining the Electronic Signature file passes through the text of Electronic Signature described in the distributed network authentication Part, the verifying are to carry out E-seal institute's relevant information in the distributed network to the Electronic Signature file to compare Obtain the real reliability of the Electronic Signature file.

2. the method according to claim 1, wherein described according to the stamped signature row triggered in the distributed network For, the E-seal carried out on electronic document covers, Electronic Signature file is obtained, including：

The stamped signature behavior triggered in distributed network according to seal user, the account address itself held from seal user Read seal information；

To electronic document specified by the object oriented file side of collecting, it is visual that digital signature is executed according to the seal information of reading Change, obtains the Electronic Signature file that image shows E-seal.

3. according to the method described in claim 2, it is characterized in that, described distributed in distributed network according to seal user Seal information is read in the stamped signature behavior triggered in network, the account address itself held from seal user, including：

The account address that seal user holds itself is obtained according to public key corresponding to seal user；

It reads to obtain the seal information of seal user from the account address, the seal information is used for so that seal user Digital signature visualization.

4. the method according to claim 1, wherein described by Electronic Signature file and corresponding encryption Abstract obtains the stamped signature data of E-seal, including：

Consistency operation is carried out in terms of content to the Electronic Signature file to obtain corresponding to the Electronic Signature file content Cryptographic digest；

Increase the stamped signature data of the E-seal newly by the cryptographic digest and the Electronic Signature file.

5. according to the method described in claim 4, it is characterized in that, described pass through the cryptographic digest and Electronic Signature text Part increases the stamped signature data of the E-seal newly, including：

Obtain the corresponding timestamp of the Electronic Signature file；

The newly-increased stamped signature number of the E-seal is generated by the Electronic Signature file and corresponding cryptographic digest, timestamp According to the stamped signature data that the timestamp is used to increase newly for the E-seal control available time.

6. according to the method described in claim 5, it is characterized in that, described in the consistency policy progress by algorithm of knowing together Data of the stamped signature data in the distributed network are synchronous, including：

Each node carries out the verifying of stored stamped signature data according to specified time interval in the distributed network, deletes verifying Unacceptable stamped signature data, the stamped signature data of storage include the newly-increased stamped signature data；

Each node all by be verified common recognition algorithm consistency policy by the stamped signature data into the distributed network Other nodes are synchronous, and the stamped signature data for storing the distributed network interior joint are reached an agreement.

7. the method according to claim 1, wherein the file for obtaining the Electronic Signature file is received The side of taking passes through Electronic Signature file described in the distributed network authentication, including：

The file side of collecting carries out the distributed network after obtaining Electronic Signature file, through the Electronic Signature file The comparison of character string in network, identifies the E-seal in the Electronic Signature file, and the character string of comparison is the electronics The digital signature or/and the corresponding cryptographic digest of Electronic Signature file of the covered E-seal of stamped signature file.

8. the method according to the description of claim 7 is characterized in that the character string of the comparison is the Electronic Signature text The digital signature of the covered E-seal of part, the file side of collecting pass through the electronics after obtaining Electronic Signature file Stamped signature file carries out the comparison of character string in the distributed network, identifies the E-seal in the Electronic Signature file, packet It includes：

The file side of collecting by acquisition Electronic Signature file therefrom extract capping E-seal digital signature；

The file side of collecting according to the Electronic Signature file towards seal user, to the distributed network initiate institute State the verifying of digital signature；

Receive the seal verification result that the distributed network is returned to the file side of collecting, the seal verification result instruction Whether the digital signature and seal user are consistent to the digital signature in itself held seal information.

9. according to the method described in claim 8, it is characterized in that, the file side of collecting obtain Electronic Signature file it Afterwards, the Electronic Signature file is identified in the comparison that character string in the distributed network is carried out by the Electronic Signature file In E-seal, further include：

According to the file side of collecting by the digital signature authentication initiated of acquisition Electronic Signature file, section in the distributed network The account address that point itself is held from seal user obtains seal information；

Compare seal signing messages in the seal information and the file side of collecting initiate the digital signature of verifying, generate to The seal verification result that the file side of collecting returns.

10. the method according to the description of claim 7 is characterized in that the character string of the comparison is the Electronic Signature The cryptographic digest of file, the file side of collecting are carried out after obtaining Electronic Signature file by the Electronic Signature file The E-seal in the Electronic Signature file is identified in the comparison of character string in the distributed network, including：

Obtain Electronic Signature file after, the file side of collecting according to received Electronic Signature file towards the seal make With side and itself, the corresponding cryptographic digest of Electronic Signature file to the distributed network initiate the true of corresponding stamped signature behavior Reality verifying；

Receive the seal verification result that the distributed network is returned to the file side of collecting, the seal verification result instruction The distributed network stores corresponding E-seal stamped signature data.

11. according to the method described in claim 10, it is characterized in that, the file side of collecting obtain Electronic Signature file it Afterwards, the Electronic Signature file is identified in the comparison that character string in the distributed network is carried out by the Electronic Signature file In E-seal, further include：

The stamped signature behavior authenticity verification initiated according to the file side of collecting, the distributed network are looked into from the block in node Whether the Electronic Signature file for asking requests verification stamped signature behavior authenticity corresponds to the stamped signature data of E-seal；

The seal verification result for corresponding to the query result is generated, and to the file side of collecting return.

12. a kind of implementation method of E-seal client, which is characterized in that the E-seal client makes corresponding to seal With side, the method includes：

The E-seal client initiates the electronics text by node of the held private key into the distributed network The stamped signature behavior of part, the node are the node that E-seal client is connected in the distributed network；

After stamped signature behavior obtains stamped signature data by the distributed network, the E-seal client obtains distributed network The Electronic Signature file that network interior joint returns, the E-seal on the Electronic Signature file is by account corresponding to the private key What the seal information stored on the address of family obtained.

13. a kind of E-seal application system, which is characterized in that the system comprises distributed networks and the file side of collecting correspondence E-seal client；

The stamped signature module is configured as carrying out the electronic seal on electronic document according to the stamped signature behavior triggered in distributed network Chapter covers, and obtains Electronic Signature file；

The logging modle is configured to obtain the electronic seal by the Electronic Signature file and corresponding cryptographic digest The stamped signature data of chapter；

The synchronization module is configured as carrying out the stamped signature data by the consistency policy for algorithm of knowing together in the distribution Data in network are synchronous

The E-seal client is configured as obtaining the file side of collecting of the Electronic Signature file by described point Electronic Signature file described in cloth network verification, it is described verifying be to the Electronic Signature file in the distributed network into Row E-seal institute's relevant information compares to obtain the real reliability of the Electronic Signature file.

14. a kind of computer equipment, which is characterized in that the computer equipment includes：

Processor；And

Memory is stored with computer-readable instruction on the memory, and the computer-readable instruction is held by the processor Method according to any one of claim 1 to 12 is realized when row.

15. a kind of computer readable storage medium, which is characterized in that be stored thereon with computer program, the computer program Method according to any one of claim 1 to 12 is realized when being executed by processor.