TWM508733U - Authentication system of electronic insurance policy - Google Patents

Description

Electronic policy verification system

An electronic policy verification system, in particular, a system for verifying an electronic policy using an electronic voucher.

Since the paper file requires a suitable environment, the paper document is easily damaged, and in addition to the environmental factors, the paper document requires space to be stored, and therefore, the storage of the paper document requires a certain cost.

With the rapid development of information processing technology and communication technology, electronic files are not easily destroyed by environmental factors, and there is almost no need to save space, which causes the trend of paper documents to be gradually converted into electronic files. However, in contrast, electronic documents are easier to steal, falsify, or falsify than paper documents, that is, the security of electronic documents is lower than that of paper documents. Therefore, both individuals and companies are concerned about the security of electronic documents. The problem.

Therefore, at present, for the prevention of stealing electronic files, the security of electronic files can be ensured by encrypting electronic files, and for counterfeiting or tampering with electronic files, digital signatures can be used to ensure correctness.

However, for some documents, such as documents that require the owner to confirm the content, such as contracts, policies, etc., the use of paper is still much more than the use of electronic forms. This is usually because the owner of an electronic file cannot directly confirm whether the file has been tampered with or falsified over time, and therefore, the paper is still recorded using a conventional paper file that is easily found to be modified.

In summary, it can be seen that the owner of electronic documents in the prior art has not been able to directly confirm whether the electronic file has been tampered with or forged. Therefore, it is necessary to propose an improved technical means to solve this problem.

In view of the fact that the owner of an electronic document in the prior art cannot directly confirm whether the electronic document has been tampered with or forged, the present invention discloses an electronic policy verification system in which:

The verification system of the electronic policy disclosed in the present invention includes at least: a file providing host for generating a delivery document, the delivery document includes a document to be authenticated and a second digital signature for verifying the document to be authenticated; the verification server uses The receiving document provides the delivery document transmitted by the host, and after successfully verifying the delivery document, an electronic policy is generated, the electronic policy includes the delivery document and the third digital signature of the verification delivery document, and the electronic insurance policy is transmitted. The file provides host storage; the client receives the file to provide the electronic policy transmitted by the host, and is used to verify the delivery file and the file to be authenticated, and displays the verification result of the file to be authenticated and the file to be sent.

The verification system disclosed in the present application is as above, and the difference between the prior art and the prior art is that after the creation of the document to provide the host with the digital signature of the authentication file, the verification server will perform the digital signature again on the digitally signed document to be authenticated. In chapter, the client can verify the digital signature of the authentication server and the file providing host, and display the verification result, thereby solving the problems of the prior art and achieving the technical effect of improving the convenience of using the electronic policy.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

The author can send the electronic policy containing the digital signature to the client by the file providing host after the file providing host and the verification server sequentially process the authentication file to generate the electronic certificate. The client can refer to the electronic policy in the electronic policy. The digital signature verification verifies that the content of the original policy in the document to be certified is correct and displays the verification result.

The system operation of the creation of the electronic voucher using the electronic certificate verification system diagram proposed in the "Picture 1" is described below. As shown in "FIG. 1", the authentication system of the present creation includes a file providing host 110, a verification server 120, and a client 130. Wherein, the document providing host 110 is usually set up in an insurance institution that provides an original policy and/or an electronic policy, such as an insurance company, etc., and the verification server 120 is usually set in a voucher institution, such as a voucher issuing unit, or the like, or may be set in An insurance institution that provides an original policy and/or an electronic policy, but the present creation is not particularly limited to the location where the file providing host 110 and the authentication server 120 are set.

The file providing host 110 is responsible for generating the delivery file. The file providing file generated by the host 110 includes a file to be authenticated and a second digital signature provided to verify the file to be authenticated, that is, the file providing host 110 first uses the file to provide the private key of the host 110 (private Key) Calculate the document to be certified, and obtain the second digit signature generated by the calculation, and combine the document to be certified with the second digit, or merge the document to be certified, the second digit signature and other materials into the delivery document. .

The document to be authenticated included in the delivery document may be an electronic document that records the original policy of the user's policy and the first digital signature, or an electronic file that includes an encrypted document of the original policy and the first digital signature. The file providing host 110 may encrypt the original policy to obtain the encrypted file, and use the file providing host 110's private key to calculate the original policy, thereby obtaining the first digital signature provided to verify the original policy after the calculation, and The encrypted file is signed with the first digit, or the encrypted file, the first digit signature, and other materials are merged into the file to be authenticated.

The file providing host 110 is also responsible for transmitting the generated delivery file to the verification server 120, and receiving the electronic policy returned by the verification server 120 after digitally signing the delivery document, and the received electronic policy. Transfer to client 130. In some embodiments, the file providing host 110 transmits the electronic policy to the client 130 via email, but the present invention is not limited thereto.

The verification server 120 is responsible for receiving the delivery file transmitted by the file providing host 110, and verifying the to-be-certified file in the delivery file according to the second digital signature in the delivery file.

The verification server 120 is also responsible for generating an electronic policy after successfully verifying the file to be authenticated, and transmitting the generated electronic policy back to the file providing host 110 for storage. The electronic policy generated by the verification server 120 includes the received delivery document and a third digital signature provided to verify the delivery document. That is to say, after receiving the delivery file, the verification server 120 uses the private key of the verification server 120 to calculate the delivery document to obtain the third digital signature generated by the calculation, and the delivery document and the first A three-digit signature, or a combination of a delivery document, a third-digit signature, and other materials into an electronic policy. Among other things, the other materials that are merged into the electronic policy include, but are not limited to, version information.

In addition, the authentication server 120 can receive the decrypted file transmitted by the client 130 and the electronic policy. Since the electronic policy includes the delivery document and the third digital signature, the delivery document includes the file to be authenticated, and the first digit signature is included in the to-be-certified file. Therefore, the verification server 120 can verify according to the first digital signature. The file is decrypted, and the delivery document is verified according to the third digit signature, and the verification result is generated after verification, and the generated verification result is transmitted to the client 130.

The client 130 is responsible for receiving the electronic policy transmitted by the file providing host 110. Generally, the client 130 can be a device used by the user or a software or hardware in the device used by the user, and the client 130 can open the electronic policy and read the delivery document from the electronic policy. The third digit is signed and the signature file in the electronic policy is verified according to the third digit signature in the electronic policy; the delivery document can also be opened, and the document to be authenticated and the second digit signature are read from the delivery document. And verify the file to be authenticated in the delivery document according to the second digit signature in the delivery document. Even when the file to be authenticated includes the encrypted file and the first digital signature, the client 130 can open the file to be authenticated, and the encrypted file and the first digital signature are read from the file to be authenticated. In addition, the client 130 can also display the verification result of the delivery file and the file to be authenticated.

After the client 130 successfully verifies the file to be authenticated and the file to be authenticated, if the file to be authenticated includes the encrypted file and the first digital signature, the client 130 can decrypt the encrypted file in the file to be authenticated to obtain the decrypted file (that is, the file). The original policy provided by the server 110 is provided). The client 130 can also transmit the decrypted decrypted file and the electronic policy to the verification server 120, whereby the verification server 120 verifies the correctness of the decrypted file and the delivery file.

The client 130 can also display the decrypted file generated by the decryption and/or the verification result returned by the verification server 120. The client 130 may display the verification result in a specific manner on the user interface, for example, display the verification result in the status column, etc., but the present invention is not limited thereto, and the client 130 may also The verification result is displayed in the decrypted file displayed by the client 130 as a visual electronic stamp. When the verification result is indicated as being verified, the electronic seal displayed by the client 130 is also indicated as passing verification, and when the verification result is indicated as When the verification fails, the electronic seal is also indicated as failing verification. That is to say, the client 130 is not the same as the electronic seal displayed when the verification result is verified by the verification and the failed verification, so that the user can watch after Confirm directly whether the decrypted file has passed the verification.

Next, an embodiment will be used to explain the operation of the system of the present creation, and please refer to "2A".

First, a file to be authenticated needs to be provided (step 200). If the original electronic policy does not require encryption, for example, without personal data, the document to be certified may be the original electronic policy.

However, in practice, since the original policy is an electronic file that records the contents of the user's policy, in order to allow the insurance company to protect the user's personal information from third parties, such as providing a certificate authority, but also allowing the user to The third party verification server 120 verifies the policy content recorded in the electronic policy, and the file providing host 110 can generate the original policy (step 202) after obtaining the provided original policy as shown in "FIG. 2B". The first digital signature of the original policy is verified (step 204), and the original policy is encrypted to generate an encrypted file (step 206), after which a file to be authenticated containing the encrypted file and the first digital signature is generated (step 208).

Continuing back to "FIG. 2A", after the file to be authenticated is provided, the file providing host 110 can generate a delivery file (step 210). That is, the file providing host 110 generates a second digital signature for verifying the file to be authenticated, and generates a delivery file containing the file to be authenticated and the second digital signature.

After the file providing host 110 generates the delivery file (step 210), the file providing host 110 can transmit the generated delivery file to the verification server 120 (step 222).

After receiving the mailing file transmitted by the file providing host 110, the verification server 120 may verify the file to be authenticated in the mailing file according to the second digit signature in the mailing file (step 226). That is, the public key of the host 110 is used to calculate the file to be authenticated, and the data generated by the comparison calculation is the same as the second digit signature.

If the difference is different, the file to be authenticated is not verified, that is, the file to be authenticated may have been tampered with, and the original creation is not necessary; if the same, the file to be authenticated is verified, and the verification server 120 can generate an electronic policy (step 230). ). That is, the verification server 120 generates a third digital signature for verifying the delivery document and generates an electronic policy including at least the delivery document and the third digital signature.

After the verification server 120 generates the electronic policy (step 230), the verification server can transmit the generated electronic policy back to the file providing host 110 (step 242), and the file providing host 110 receives the verification from the verification server 120. After the electronic policy, the received electronic policy can be stored and the stored electronic policy transmitted to the client 130 (step 246). In the present embodiment, it is assumed that the file providing host 110 will send the electronic policy to the user's email address.

After receiving the electronic policy transmitted by the file providing host 110, the client 130 can verify the mailing file included in the electronic policy and the file to be authenticated included in the mailing file (step 251), and display the verification result (step 255). .

In addition, as shown in FIG. 2C, after successfully verifying the delivery file and the file to be authenticated (step 253), the client 130 may decrypt the encrypted file included in the file to be authenticated into a decrypted file (step 260), and The decrypted file is displayed (step 271).

Thereafter, the client 130 can transmit the decrypted file and the electronic policy to the verification server 120 (step 275). After receiving the decrypted file transmitted by the client 130 and the electronic policy, the verification server 120 can verify the received decrypted file. And an electronic policy (step 280), and the verification result can be passed back to the client 130 (step 291). In this embodiment, it is assumed that the verification server 120 will take out the delivery document and the third digital signature from the electronic policy, and take out the file to be authenticated from the delivery document, and according to the first digital signature in the file to be authenticated. The decrypted file is verified, and the delivery document is verified according to the third digit signature, and the corresponding verification result is generated after the verification of the decrypted file and the delivery document is completed.

As such, the client 130 can receive the verification result transmitted by the verification server 120 and can display the verification result (step 295). It is assumed that in the present embodiment, the client 130 displays an electronic seal corresponding to the verification result when the decrypted file is displayed.

In summary, it can be seen that the difference between the present creation and the prior art is that after the digital signature of the file to be authenticated by the file providing host, the verification server will digitally sign the document to be authenticated after the signature, the customer The end can verify the digital signature of the verification server and the file providing host, and display the technical means of verifying the result. The technical means can solve the problem that the owner of the electronic policy existing in the prior art cannot directly confirm the policy recorded in the electronic policy. Whether the content has been tampered with or forged, and thus achieves the technical effect of improving the ease of use of the electronic policy.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

110‧‧‧ Documents provided host
120‧‧‧Verification server
130‧‧‧ Client Steps 200‧‧‧Providing Documents to Be Certified Step 202‧‧‧ Providing Original Policy Steps 204‧‧‧ Document Providing Host Generates First Digital Signature Provides Verification of Original Policy Steps 206‧‧‧ File Host Encrypt the original policy to generate the encrypted file. Step 208‧‧‧ The file provides the host to generate the file to be authenticated. The file to be authenticated contains the first digital signature and the encrypted file. Step 210‧‧‧ The file provides the host to generate the delivery file, and the delivery file contains the certificate to be authenticated. The document and the second digit signature step providing verification of the documents to be certified 222‧‧‧ The document provides the host to send the delivery document to the verification server. Step 226‧‧‧Verify whether the server successfully verifies the document to be authenticated Step 230‧‧‧Verification servo The device generates an electronic policy, the electronic policy contains the document for delivery and the third digit of the signature for the verification of the delivery document. 242‧‧‧Verification server transmits the electronic policy to the document providing the host step 246‧‧‧ The file provides the host to transmit the electronic policy to Client Steps 251‧‧‧ Client Verification Documents and Documents to Be Certified Step 253‧‧ Whether the client successfully verifies the delivery document and the file to be authenticated. Step 255‧‧‧ The client displays the verification result Step 260‧‧‧ The client decrypts the encrypted file as the decrypted file Step 271‧‧‧ The client displays the decrypted file Step 275‧‧ The client transmits the decrypted file and the electronic policy to the verification server. Step 280‧‧ Verify the server to verify the decrypted file and send the file. Step 291‧‧ Verify the server to send the verification result to the client Step 295‧‧‧ Client display verification result

The first picture is the system architecture diagram of the electronic certificate verification electronic policy proposed by the author. Figure 2A is a flow chart of the use of electronic voucher verification electronic policy for the creation of the author. Figure 2B is a flow chart of the document to be authenticated provided by the author. Figure 2C is an additional flow chart for the use of electronic voucher verification electronic policy as proposed by the author.

110‧‧‧ Documents provided host

120‧‧‧Verification server

130‧‧‧Client

Claims (10)

An electronic policy verification system, the verification system comprising: a file providing host, configured to generate a delivery file, the delivery file comprising a file to be authenticated and providing a second digit signature for verifying the document to be authenticated; a verification server for receiving the file to provide the delivery file transmitted by the host, and after successfully verifying the delivery file, generating an electronic policy, the electronic policy including the delivery file and providing verification of the delivery file a third digit signature, and the electronic insurance policy for transmitting the electronic policy to the file for providing host storage; and a client for receiving the file to provide the electronic policy transmitted by the host, and for verifying the delivery file and The file to be authenticated, and the verification result of the file to be authenticated and the file to be sent is displayed. The verification system of the electronic policy as claimed in claim 1, wherein the to-be-certified file includes an original policy or an encrypted file generated after the original policy is encrypted, and the original provided by the host provides verification to verify the original One of the first digits of the policy is signed. The verification system of the electronic policy as claimed in claim 1, wherein the client is further configured to decrypt the encrypted file as a decrypted file and transmit the decryption after successfully verifying the delivery file and the to-be-certified file. The file and the electronic policy are sent to the verification server, and the verification server is further configured to verify the decrypted file and the delivery file, and send a verification result to the client for display. The verification system of the electronic policy as claimed in claim 3, wherein the client displays the verification result in a specific position of the user interface. The verification system of the electronic policy as claimed in claim 3, wherein the client is further configured to display the decrypted file. The verification system of the electronic policy as claimed in claim 5, wherein the client displays the verification result in an electronic stamp of one of the visualizations in the decrypted file being displayed. The electronic insurance policy verification system of claim 1, wherein the file providing host transmits the electronic policy to the client by email. For example, the electronic insurance policy verification system described in claim 1 wherein the electronic policy further includes version information. The verification system of the electronic policy as claimed in claim 1, wherein the verification server is disposed at the voucher institution or provides an original insurance policy or an insurance policy of the electronic policy included in the document to be authenticated. The verification system of the electronic policy as claimed in claim 1, wherein the document provides an insurance institution provided by the host to provide an original policy and/or the electronic policy included in the document to be authenticated.