System and method for digitally signing electronic documents

• US 7,958,364 B2
• Filed: 11/15/2007
• Issued: 06/07/2011
• Est. Priority Date: 08/09/2007
• Status: Active Grant

• Current Assignee: Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd. (Hon Hai Precision Industry Co., Ltd.), Hon Hai Precision Industry Co., Ltd.
• Original Assignee: Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd. (Hon Hai Precision Industry Co., Ltd.), Hon Hai Precision Industry Co., Ltd.
• Inventors: Lee, Chung-I, Yeh, Chien-Fa, Fan, Xiao-Di, Ou-Yang, Guo-Ling, Lu, Chiu-Hua
• Primary Examiner(s): Revak; Christopher A
• Assistant Examiner(s): KOSOWSKI, CAROLYN M
• Application Number:
  US11/940,327
• Publication Number:
  US 20090044019A1
• Time in Patent Office: 1,300 Days
• Field of Search: 713/176
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme

Abstract

A system for digitally signing electronic documents is disclosed. The system includes a mobile device, an application server and a database, the mobile device includes a requesting module and a digest encrypting module, the application server includes an obtaining module, a digest generating module and a merging module. The requesting module is configured for sending a request for a digital signature of an electronic document to the application server; the obtaining module is configured for obtaining the electronic document from the database; the digest generating module is configured for generating a digest of the electronic document, and sending the digest to the mobile device; the digest encrypting module is configured for encrypting the digest, generating an encrypted value, and sending the encrypted value to the application server; the merging module is configured for merging the encrypted value and the electronic document. A related computer-based method is also disclosed.

Claims

1. A system for digitally signing electronic documents, the system comprising a mobile device, an application server, and a database, the application server being connected to the mobile device and the database, the database being configured for storing electronic documents to be signed digitally, the mobile device storing a digital certificate of a signer, the digital certificate comprising a private key, the mobile device comprising a requesting module and a digest encrypting module, the application server comprising an obtaining module, a digest generating module and a merging module, wherein:

the requesting module is configured for sending a request for a digital signature of an electronic document to the application server;

the obtaining module is configured for obtaining the electronic document from the database according to the request;

the digest generating module is configured for generating a digest of the electronic document using a hash algorithm, and sending the digest of the electronic document to the mobile device;

the digest encrypting module is configured for encrypting the digest of the electronic document with the private key using a public key cryptogram algorithm thereby generating a first encrypted value, and sending the first encrypted value to the application server;

the merging module is configured for merging the electronic document and the first encrypted value according to the PKCS #7 standard;

the digest generating module is further configured for generating a digest of the merged document using the hash algorithm, and sending the digest of the merged document to the mobile device;

the digest encrypting module is further configured for encrypting the digest of the merged document with the private key using the public key cryptogram algorithm thereby generating a second encrypted value, and sending the second encrypted value to the application server; and

the merging module is further configured for merging the first encrypted value, the second encrypted value and the electronic document according to the PKCS #7 standard thereby generating a digitally-signed electronic document.

2. The system according to claim 1, wherein the hash algorithm is the Secure Hash Algorithm 1 (SHA1).

3. The system according to claim 2, wherein the public key cryptogram algorithm is the RSA algorithm.

4. A computer-based method for digitally signing electronic documents, the method comprising:

sending a request for a digital signature of an electronic document to an application server through a mobile device, the mobile device storing a digital certificate of a signer, the digital certificate including a private key;

obtaining the electronic document by the application server from a database according to the request, generating a digest of the electronic document using a hash algorithm, and sending the digest of the electronic document to the mobile device;

encrypting the digest of the electronic document with the private key using a public key cryptogram algorithm through the mobile device thereby generating a first encrypted value, and sending the first encrypted value to the application server;

merging the electronic document and the first encrypted value according to the PKCS #7 standard through the application server, generating a digest of the merged document using the hash algorithm, and sending the digest of the merged document to the mobile device;

encrypting the digest of the merged document with the private key using the public key cryptogram algorithm through the mobile device thereby generating a second encrypted value, and sending the second encrypted value to the application server; and

merging the first encrypted value, the second encrypted value and the electronic document according to the PKCS #7 standard through the application server thereby generating a digitally-signed electronic document.

5. The method according to claim 4, wherein the hash algorithm is the Secure Hash Algorithm 1 (SHA1).

6. The method according to claim 4, wherein the public key cryptogram algorithm is the RSA algorithm.

7. A method for digitally signing electronic documents using an application server, the method comprising:

receiving a request for a digital signature of an electronic document sent from a mobile device to the application server;

obtaining the electronic document by the application server from a database according to the request, generating a digest of the electronic document using a hash algorithm, and sending the digest of the electronic document to the mobile device;

receiving a first encrypted value from the mobile device, the first encrypted value being obtained by encrypting the digest of the electronic document;

merging the electronic document and the first encrypted value according to the PKCS #7 standard through the application server, generating a digest of the merged document using the hash algorithm, and sending the digest of the merged document to the mobile device;

receiving a second encrypted value from the mobile device, the second encrypted value being obtained by encrypting the digest of the merged document; and

merging the first encrypted value, the second encrypted value and the electronic document according to the PKCS #7 standard through the application server thereby generating a digitally-signed electronic document.

8. A method for digitally signing electronic documents using a mobile device, the method comprising:

sending a request for a digital signature of an electronic document to an application server through the mobile device, the mobile device storing a digital certificate of a signer, the digital certificate including a private key;

receiving a digest of the electronic document sent from the application server;

encrypting the digest of the electronic document with the private key using a public key cryptogram algorithm through the mobile device thereby generating a first encrypted value, and sending the first encrypted value to the application server;

receiving a digest of a merged document sent from the application server, the merged document being obtained by merging the electronic document and the first encrypted value; and

encrypting the digest of the merged document with the private key using the public key cryptogram algorithm through the mobile device thereby generating a second encrypted value, and sending the second encrypted value to the application server for merging with the first encrypted value and the electronic document thereby generating a digitally-signed electronic document.