With the advancement of informatization in our country’s government, the demand for the application of electronic seals is getting higher and higher, and the security of electronic seals is also paying more and more attention. Seals are here to represent the government and enterprises. Authority, legal personality and personal credibility; the seal is an important symbol of the validity of the official document. Official documents without a seal lack a symbol of authority. To this end, after extensive solicitation of opinions and revisions, the country promulgated the "Electronic Signature Law of the People's Republic of China", which was officially launched on April 1, 2005. Among them:
Electronic signatures and Authentication
Article 14 A reliable electronic signature has the same legal effect as a handwritten signature or seal.
The relevant person in charge of the Ministry of Public Security said that secure electronic seals are a revolution in the history of seals in our country. The China Security Electronic Seal Management Application System applies the world's advanced digital authentication technology to seal security management, strengthens the management of all aspects of the production and application of electronic seals, and ensures the authenticity and reliability of the identity of electronic seal holders.
Baicheng Secure Electronic Seal is based on digital certificates, with digital signatures and digital watermarks as core technologies. It integrates digital signatures and seal (signature) pictures to provide integrity verification and information security. Authenticity verification enables the seal, which has thousands of years of civilized history, to be fully electronic and secure online.
[Baicheng Electronic Seal System] is a computer system security product that has functions such as printing, issuing, managing seals, and electronically using seals. Provide functions such as stamping, signature, identity confirmation, original inspection, encryption and decryption for the circulation (or exchange) of electronic official documents.
The application significance of Baicheng Electronic Seal System is to digitize and network the current physical seal use process in official document processing; to provide application security guarantee for the circulation of electronic official documents; to adapt to the needs of the development of e-government affairs ;At the same time, it conforms to the tradition of Chinese seal use.
Baicheng electronic seal is a national project-approved product. It has been tested and inspected by the China National Information Security Evaluation and Certification Center, and has been approved for national information security certification product model certification. Government Agencies (G2G)
Office automation within government agencies, management of sending and receiving documents between government agencies, and networked offices require corresponding leadership signatures and electronic seals to ensure the integrity and prevention of electronic official documents and other information. Tamperability and non-repudiation. Baicheng's secure electronic seal system not only ensures the high efficiency of government official affairs, but also saves energy by using modern means. It can save a lot of paper costs every year. In one city, the official document circulation is less than the previous year. Hundreds of thousands of dollars.
Government and Business (G2B)
There is a large amount of information exchange between the government and business. How to ensure the security of information is the key for government agencies to improve work efficiency and service levels through online office work. Therefore, using Baicheng's secure electronic signature technology can ensure the security of online offices in terms of technical reliability and legal validity. Such as online tax filing, online declaration, online industry and commerce, electronic customs and other applications.
Internal enterprise (B2B)
Baicheng secure electronic signature is widely used in collaborative office work within enterprises or enterprise groups, and collaborative office work between upper and lower-level units of group companies. It provides security guarantee for enterprises' online collaborative office. For example, document exchange, financial statements, sales reports, logistics management, etc. all require electronic signatures. It can be applied to various industries, such as manufacturing, commerce, finance, telecommunications, electric power, construction and other industries.
Business-to-Business (B2B)
Collaborative commerce between businesses requires trustworthy authentication to ensure the security and effectiveness of information exchange. Baicheng electronic signature system solves this problem well, such as online orders, logistics data exchange, electronic contract management, etc.
Individual to individual (C2C)
In order to prevent personal electronic data (including documents, photos, etc.) in daily office and life from being illegally leaked, personal signatures or fingerprints can be used. To carry out encryption protection, it must pass personal fingerprint verification before it can be decrypted when opened. This ensures the safety and reliability of data during archiving or transmission.
In short, in the process of electronic document exchange, electronic approval or electronic transaction, wherever a signature/seal or identity confirmation is required, an electronic seal is required. ① A computer (PC) hardware server.
② A [Baicheng Electronic Seal System] software server (installed in ①).
③ Several [Baicheng Electronic Seal System] client software is installed on the computer (PC). The running environment of the client software requires system software and MS-Office 2000 or above (application software) (the running environment required by the client software is not included in the price of this product).
④ Several USB-KEY electronic keys or confidential fingerprint signature devices (hardware) used in conjunction with ③.
⑤ When the government uses this system to process "confidential" documents (and data), the servers and client computers need to be equipped with "password cards" (hardware) specified by the state.
The company supplies customers with various products ①, ②, ③, ④ and ⑤. The software system is divided into two types: server version and stand-alone version.
Other computer hardware and software products required for the operation of this system can be purchased by the customer (or are already available in most cases). The company can also recommend qualified suppliers and related product configurations and software versions.
System structure and functions
The structure of Baicheng electronic seal products is as shown in the figure:
The system function modules are as shown in the figure:
Signature The /signature system mainly implements the functions of sealing/signing and verification.
When an official document needs to be stamped, the user inserts his or her signature device into the USB interface of the work machine. The system identifies the person who stamps the signature, activates the digital certificate, and implements sealing and signature.
The recipient can use the client to verify whether the electronic seal and official document have been tampered with, illegally copied, and the relevant information of the official document. And realize the legal printing and copying of stamped official documents.
The system management subsystem implements user rights management, role assignment, and log operations.
The seal management subsystem implements the production, issuance, and control of seals and watermarks, including the configuration of attributes such as online verification and update of seals. The seal is an important symbol of the validity of the official document. Official documents without a seal lack a symbol of authority. The electronic seal guarantees the authenticity and validity of the electronic official document, that is, the recipient can confirm whether the electronic official document received is from the authentic issuing authority. Therefore, the requirements are:
1. The signature process can be tracked throughout the process, and the identity of the signer can be confirmed;
2. The electronic seal itself must be unique, non-replicable and anti-counterfeiting Capability;
3. Signed electronic documents are encapsulated and encrypted with electronic seals to ensure the confidentiality and data integrity of electronic documents.
4. The electronic seal system must fully comply with the relevant requirements of the "Electronic Signature Law of the People's Republic of China";
5. The electronic seal system must meet the national information security technical standards : GB/T18336-2001 "Information Technology Security Technology Information Technology Security Assessment Criteria" and GB/T17903-1999 "Information Technology Security Technology Non-repudiation"; 1. High security and high technology.
Baicheng electronic seal system integrates leading technologies in the development of international e-government/e-commerce security, including digital signature, digital watermark, digital delivery, biometric identification, digital identity confirmation and other high-end technologies. The electronic seal is guaranteed to be safe and reliable.
2. Anti-copying.
If you use the copy (cut)-paste command to paste the seal in one document into another Word document, the seal image will change accordingly, indicating that the seal is illegally copied. As shown in the figure below 3. Anti-tampering.
The moment the file is opened, the system automatically verifies the official document and pops up the verification result. If the verification fails, the seal pattern will change, as shown in the figure below: (The verification process includes local verification and online verification, that is: whether the verifiable source is legal and valid)
The document has been changed Afterwards, the following operations cannot be performed: stamping, saving, encrypting, copying and printing. When the system is implemented, the security measures used to protect the electronic seal are different, their security levels are also different, and the implementation costs are also different. It also has the functions of unified seal management, centralized or decentralized use, and online authentication.
Method 1: USB-KEY electronic key signer
Key points: Use the USB-KEY electronic key signer (hardware) when the user stamps, and verify that the PIN code is passed. Stamping operation.
Features: Medium security level, USB-KEY and pin code may be stolen. Low implementation costs.
Method 2: IC card signature device
Key points: The user uses a USB-KEY signature device (hardware) when stamping, and the stamping operation is completed after the pin code is verified.
Features: The security level is medium, the IC card and PIN code may be stolen, and a special IC card reader must be equipped.
Method Three: Confidential Fingerprint Signature Device
Key Points: Use a confidential fingerprint signature device (hardware) when stamping, verify that the fingerprint is passed, and implement the sealing operation.
Features: High security level, eliminating the possibility of identity theft. It also has a large capacity and integrates a 512M-1G fingerprint USB flash drive function, so the implementation cost is relatively high. Baicheng electronic seal system adopts a modular overall design, with each subsystem relatively independent, open standards, and stable interfaces. At the same time, it supports applications of various office platforms, such as: MS-word, MS-excel, Html, PDF, WPS, Red-office, Yongzhong office, AutoCAD and various electronic forms, etc.
In order to facilitate the secondary development of application developers, our electronic seal client functions are encapsulated and released in the form of a control package for secondary development of third-party applications to realize the electronic seal system in Applications in other systems. The control package is divided into the following three types:
The first is the COM component, which encapsulates the methods of the electronic seal system into interfaces for third-party application calls, and provides signature, signature, verification and user synchronization operations and other functions.
The second type is ActiveX control, which is used to store and display seals on program forms or web pages.
The third type is the type library, which defines custom types used by the electronic seal system.
Third-party applications can achieve integration with the electronic seal system by referencing the above controls and type libraries and using their methods.