CN110830256A - File signature method and device, electronic equipment and readable storage medium - Google Patents

Abstract

Embodiments of the present invention provide a file signature method, apparatus, electronic device, and readable storage medium. The method includes: determining a target file to be digitally signed, and calculating an information digest value of the target file according to a preset information digest algorithm; obtaining the private key and public key of a signer who is to digitally sign the target file; using the private key Encrypt the message digest value to obtain the signer's digital signature; store the signer's digital signature, message digest value and public key in the blockchain distributed ledger; write the signature mark in the target file, the signature mark Used to mark that the target file has been digitally signed. In this way, the digital signature can be stored in the blockchain distributed ledger, thereby ensuring the validity of the digital signature and improving the security of the data.

Description

A file signature method, device, electronic device and readable storage medium

technical field

The present invention relates to the field of computer technology, and in particular, to a file signature method, an apparatus, an electronic device and a readable storage medium.

Background technique

File signing refers to digitally signing a file. Among them, the digital signature is some data attached to the file, and the digital signature is often attached to the end of the file. In this way, the recipient of the file can verify, based on the additional data, whether the file was indeed sent by the signer, and whether the file content of the file has been tampered with.

For example, Zhang San uses his private key to digitally sign file A. The digital signature is written at the end of the signed file A. Then, Zhang San sends the signed document A to Li Si. After receiving the signed file A, Li Si can use Zhang San's public key to decrypt the digital signature. If Li Si can decrypt the hash value of file A with Zhang San's public key, it proves that file A was indeed sent by Zhang San. In addition, a hash calculation can be performed on the received file A, and the calculated hash value can be compared with the decrypted hash value. If the comparison results are consistent, it means that file A has not been tampered with; if the comparison results are inconsistent, it means that file A has been tampered with.

However, this method of attaching the digital signature to the file makes the digital signature easy to be tampered with by malicious users, cannot guarantee the validity of the digital signature, and thus threatens the security of user data.

SUMMARY OF THE INVENTION

The purpose of the embodiments of the present invention is to provide a new file signature method, device, electronic device and readable storage medium, so as to ensure the validity of the digital signature and improve the security of data. The technical solution is as follows:

In a first aspect, an embodiment of the present invention provides a file signature method, which may include:

Determine the target file to be digitally signed, and calculate the message digest value of the target file according to the preset message digest algorithm;

Obtain the private key and public key of the signer to digitally sign the target file;

Use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer;

Store the signer's digital signature, message digest value and public key in the blockchain distributed ledger;

Write a signature mark in the target file, and the signature mark is used to mark that the target file has been digitally signed.

Optionally, in an implementation manner, the step of obtaining the private key and public key of the signer who is to digitally sign the target file may include:

Load the private key encrypted file and public key of the signer who wants to digitally sign the target file from the blockchain private key public key pair storage software;

Use the private key decryption key input by the user to decrypt the private key encrypted file to obtain the private key corresponding to the public key.

Optionally, in another implementation manner, the step of obtaining the private key and public key of the signer who is to digitally sign the target file may include:

Call the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file.

Optionally, after invoking the blockchain private key and public key pair generation software to generate the private key and public key of the signer who is to digitally sign the target file, the method may further include:

Obtain the signer's identity;

The identity and public key are stored correspondingly in the blockchain distributed ledger.

Optionally, a message digest value may be included in the signature tag.

Optionally, the signature tag may also include:

At least one of the public key, the signature time of the signer's digital signature, and the signer's identity.

In a second aspect, an embodiment of the present invention further provides a file signature device, the device may include:

A determination module, used for determining the target file to be digitally signed, and calculating the information digest value of the target file according to a preset information digest algorithm;

The first obtaining module is used to obtain the private key and public key of the signer who wants to digitally sign the target file;

The calculation module is used to encrypt and calculate the information digest value by using the private key to obtain the digital signature of the signer;

The first storage module is used for correspondingly storing the signer's digital signature, message digest value and public key in the blockchain distributed ledger;

The marking module is used to write a signature mark in the target file, and the signature mark is used to mark that the target file has been digitally signed.

Optionally, in an implementation manner, the first obtaining module may include:

The loading submodule is used to load the private key encrypted file and public key of the signer who wants to digitally sign the target file from the blockchain private key public key pair storage software;

The decryption sub-module is used to decrypt the private key encrypted file by using the private key decryption key input by the user to obtain the private key corresponding to the public key.

Optionally, in another implementation manner, the first obtaining module may include:

The calling submodule is used to call the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file.

Optionally, in this embodiment of the present invention, the device may further include:

The second obtaining module is used to obtain the identity of the signer after invoking the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file;

The second storage module is used to store the identity identifier and the public key in the distributed ledger of the blockchain.

Optionally, a message digest value may be included in the signature tag.

Optionally, the signature tag may also include:

At least one of the public key, the signature time of the signer's digital signature, and the signer's identity.

In a third aspect, an embodiment of the present invention further provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

memory for storing computer programs;

The processor is configured to implement the method steps of any one of the file signature methods provided by the embodiments of the present invention when executing the program stored in the memory.

In a fourth aspect, an embodiment of the present invention further provides a readable storage medium, where a computer program is stored in the readable storage medium, and the computer program is executed by a processor to realize: method steps.

In a fifth aspect, the embodiments of the present invention further provide a computer program product containing instructions, which, when running on the electronic device, cause the electronic device to execute: the method steps of any one of the file signature methods provided by the embodiments of the present invention.

In the embodiment of the present invention, the target file to be digitally signed can be determined, and the information digest value of the target file can be obtained by calculating according to a preset information digest algorithm. Then, the private key and public key of the signer to digitally sign the target file can be obtained. After that, use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer. After the digital signature is obtained, the digital signature, the message digest value and the public key are correspondingly stored in the blockchain distributed ledger. In this way, digital signatures can be stored in the blockchain distributed ledger. Among them, the blockchain distributed ledger is a distributed database maintained collectively, and has the characteristics of decentralization and information immutability. Therefore, the situation in which the digital signature is easily tampered due to writing the digital signature at the tail of the target file in the prior art can be avoided, and the validity of the digital signature is ensured. In addition, the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, which can facilitate the subsequent verification of the digital signature by using the information digest value and the public key.

After the digital signature, message digest value and public key are stored in the blockchain distributed ledger, the signature mark can also be written in the target file. In this way, it is convenient to record that the target file is a file that has been digitally signed, so as to facilitate subsequent verification of the digital signature of the target file.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts.

1 is a flowchart of a file signature method provided by an embodiment of the present invention;

2 is a schematic structural diagram of a file signature device according to an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

In order to solve the technical problems existing in the prior art, the embodiments of the present invention provide a file signature method, an apparatus, an electronic device, and a readable storage medium.

The following first describes the file signature method provided by the embodiment of the present invention.

Wherein, the file signature method provided by the embodiment of the present invention can be applied to a document reading client. The document reading client includes but is not limited to: WPS (WPS software, WPS software) client, PPT (PowerPoint, presentation) client and PDF (Portable Document Format, portable document format) client.

Correspondingly, the target files in the embodiments of the present invention include, but are not limited to, WPS files, PPT files, and PDF files, which are of course not limited thereto.

Referring to Figure 1, the file signature method may include the following steps:

S101: Determine a target file to be digitally signed, and calculate an information digest value of the target file according to a preset information digest algorithm;

The preset message digest algorithms include but are not limited to: CRC (Cyclic Redundancy Check, cyclic redundancy check) algorithm, SHA (Secure Hash Algorithm, secure hash algorithm) algorithm, RIPEMD (RACE IntegrityPrimitives Evaluation Message Digest, RACE original Integrity check message digest) algorithm, MD4 (Message-Digest Algorithm 4, message digest algorithm version 4) algorithm, and MD5 (Message-Digest Algorithm 5, message digest algorithm version 5) algorithm.

Wherein, calculating the information digest value of the target file may specifically refer to: calculating the information digest value of the file content of the target file.

S102: Obtain the private key and public key of the signer who wants to digitally sign the target file;

Among them, when the signer who wants to digitally sign the target file already has a private key and public key pair, the private key encrypted file and public key of the signer can be loaded directly from the blockchain private key and public key pair storage software.

Then, the private key encrypted file is decrypted using the private key decryption key input by the user to obtain the private key corresponding to the public key. Among them, this method of loading the private key encrypted file can avoid directly loading the signer's private key, thereby avoiding the leakage of the private key and improving the security of the private key.

The blockchain private key and public key pair storage software includes but is not limited to digital wallets. Among them, the digital wallet is an existing concept, and the digital wallet is not described in detail here.

When the signer who wants to digitally sign the target file does not have a private key and public key pair, the blockchain private key and public key pair generation software can be called to generate the signer's private key and public key.

The software for generating a blockchain private key and public key pair may include: any software that can generate a blockchain private key and public key pair.

S103: Use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer;

For example, when the message digest value is an MD5 value, the MD5 value can be encrypted and calculated by using the private key, so that the digital signature of the signer can be obtained.

S104: correspondingly store the signer's digital signature, message digest value and public key in the blockchain distributed ledger;

Specifically, a blockchain publishing block can be constructed by using the signer's digital signature, the information digest value of the target file, and the signer's public key, so as to realize the corresponding storage of the digital signature, the information digest value and the public key. Then, the blockchain SDK (Software Development Kit, software development kit) is called to store the release block in the blockchain distributed ledger, so as to realize the network-wide release of the release block. Among them, the blockchain SDK is any software that can store released blocks in the blockchain distributed ledger, which will not be described in detail here.

Since the blockchain distributed ledger is a distributed database maintained collectively, it has the characteristics of decentralization and information immutability. Therefore, the digital signature stored in the distributed ledger of the blockchain cannot be tampered with, which ensures the validity of the digital signature. Further, it is possible to avoid the occurrence of information leaking to malicious users, thereby ensuring data security.

For the examples given in the background art, in the process of using digital signatures in the prior art, it is often necessary to rely on a digital certificate to prove that the public key obtained by Li Si is indeed the public key of Zhang San, so as to ensure that Zhang San’s public key is to a certain extent. the validity of the digital signature. The digital certificate is a file digitally signed by the certificate authority and containing the public key owner information and the public key. The digital certificate can be used to prove that the public key owner legally owns the public key listed in the certificate.

However, the certificate authority is a centralized authority, and the authority is likely to be attacked by hackers. When the agency is attacked, the digital certificates issued by the agency are likely to be tampered with by hackers. Moreover, when Zhang San's digital certificate issued by the agency is tampered with by hackers, the validity of Zhang San's digital signature cannot be ensured at this time, which threatens the security of data.

In the embodiment of the present invention, since the digital signature stored in the blockchain distributed ledger and the corresponding stored public key cannot be tampered with, it can be ensured that the digital signature stored in the blockchain distributed ledger is It is the digital signature of the signer corresponding to the public key, so that the validity of the digital signature can be guaranteed.

In addition, after the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, it is convenient to use the information digest value and the public key to verify the digital signature subsequently.

S105: Write a signature mark in the target file, where the signature mark is used to mark that the target file has been digitally signed.

In order to facilitate the subsequent determination that the target file is a digitally signed file, thereby avoiding repeated digital signatures on the target file and facilitating verification of the digital signature of the target file, a signature mark may also be written in the target file.

Wherein, the signature mark may be a mark set by those skilled in the art according to specific requirements. For the sake of clarity, the signature mark will be described in detail later.

In the embodiment of the present invention, the target file to be digitally signed can be determined, and the information digest value of the target file can be obtained by calculating according to a preset information digest algorithm. Then, the private key and public key of the signer to digitally sign the target file can be obtained. After that, use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer. After the digital signature is obtained, the digital signature, the message digest value and the public key are correspondingly stored in the blockchain distributed ledger. In this way, digital signatures can be stored in the blockchain distributed ledger. Among them, the blockchain distributed ledger is a distributed database maintained collectively, and has the characteristics of decentralization and information immutability. Therefore, the situation in which the digital signature is easily tampered due to writing the digital signature at the tail of the target file in the prior art can be avoided, and the validity of the digital signature is ensured. In addition, the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, which can facilitate the subsequent verification of the digital signature by using the information digest value and the public key.

After the digital signature, message digest value and public key are stored in the blockchain distributed ledger, the signature mark can also be written in the target file. In this way, it is convenient to record that the target file is a file that has been digitally signed, so as to facilitate subsequent verification of the digital signature of the target file.

The following takes a PDF file as an example to describe in detail the file signature method provided by the embodiment of the present invention.

It is assumed that a PDF client is installed in the electronic device, and a target PDF file is opened through the PDF client. When user A wants to digitally sign the target PDF file, the PDF client can calculate the MD5 value of the file content of the target PDF file according to the MD5 algorithm.

The PDF client can also obtain user A's private key and public key. Specifically, the PDF client can ask user A whether the blockchain public key and private key exist. If user A has a blockchain public key and private key, load the user A's private key and public key from the blockchain private key and public key pair storage software used by user A to store the public key and private key. Among them, in order to ensure the security of the private key, the private key encrypted file can be loaded, and then decrypted according to the private key entered by user A to obtain the private key.

If user A does not have a blockchain public key and private key, the blockchain private key and public key pair generation software can be invoked to generate user A's private key and public key. The PDF client can then digitally sign the MD5 value with the generated private key.

Wherein, after the private key and public key of user A are generated, the identity of user A can also be obtained. Then, the identity of user A and the public key of user A are correspondingly stored in the blockchain distributed ledger. In this way, the blockchain distributed ledger can record the correspondence between the identity of user A and the public key of user A. That is to say, at this time, the whole network can prove that user A legally owns the public key, which prevents user A's public key from being impersonated.

After obtaining the private key of user A, the PDF client can use the obtained private key to encrypt and calculate the MD5 value, thereby obtaining a digital signature for the target PDF file. Further, the digital signature, MD5 value and public key are stored in the blockchain distributed ledger. In this way, there is no need to write the digital signature at the end of the target PDF file. Moreover, the way of writing the digital signature in the blockchain distributed ledger can prevent the digital signature from being tampered with and ensure the validity of the digital signature.

Wherein, storing the digital signature, the information digest value and the public key in the blockchain distributed ledger can facilitate the subsequent verification of the digital signature by using the information digest value and the public key. In addition, in order to facilitate the subsequent verification of the digital signature of the target PDF file, a signature mark may also be marked on the target PDF file to mark that the target PDF file has completed the digital signature.

In this way, after completing the digital signature of the target PDF file, the PDF client can also identify that the target PDF file is a digitally signed file through the signature mark recorded in the target PDF file.

In order to verify whether the file content of the target PDF file has been tampered with, the PDF client may also calculate the current MD5 value of the target PDF file. Then, call the blockchain SDK to find the MD5 value in the blockchain distributed ledger that matches the current MD5 value. When no MD5 value matching the current MD5 value can be found in the blockchain distributed ledger, it indicates that the file content of the target PDF file has been tampered with.

When the MD5 value matching the current MD5 value can be found in the blockchain distributed ledger, the PDF client can also obtain the public key and digital signature stored in the blockchain distributed ledger corresponding to the MD5 value . Then, use the obtained public key to decrypt the digital signature, and use the decrypted MD5 value to match the current MD5 value. If the match is unsuccessful, it indicates that the digital signature is likely to be forged by a malicious user. At this time, in order to ensure the validity of the digital signature of user A, the target PDF file may be re-signed digitally.

If the match is successful, it indicates that the file content of the target PDF file has not been tampered with, and indicates that the target PDF file is indeed signed by user A.

Wherein, in order to verify the digital signature more effectively, the signature tag may include an information digest MD5 value. In this way, in the process of digital signature verification, the current MD5 value obtained by calculation can be used to first match the message digest value. If the matching is unsuccessful, it indicates that the file content of the target PDF file has been tampered with. If the match is successful, find out whether the MD5 value in the signature tag exists in the blockchain distributed ledger, and perform the corresponding operation according to the search result.

In addition, the signature mark may also include: at least one of the public key, the signature time of the signer's digital signature, and the signer's identity. In this way, it can be verified whether the file content of the target PDF file has been tampered with according to the information recorded in the signature mark.

Wherein, when the signature mark carries the signer's identity, in the process of digital signature verification, the signer's identity may be displayed to the user first. After the user confirms the identity, that is, after the user confirms that it is the signer's digital signature, the PDF client can use the calculated current MD5 value to match the information digest value carried in the signature tag, and based on the matching The result performs the corresponding action. On the contrary, when the user denies the identification, it is determined that the target file has been tampered with.

When the signature tag also carries the signature time of the digital signature, and when an MD5 value matching the current MD5 value can be found in the blockchain distributed ledger, it can also be determined that the found MD5 value corresponds to the storage timestamp. And it is judged whether the time interval between the storage time stamp and the signature time of the digital signature is less than a preset threshold. If it is greater than or equal to the preset threshold, it is determined that the target file has been tampered with. Wherein, the preset threshold can be set by those skilled in the art according to the actual situation, which is not limited here.

On the contrary, if it is less than the preset threshold, it can be determined that the target file has not been tampered with. Wherein, when the signature tag also carries the public key, it can also be determined whether the public key stored in the blockchain distributed ledger corresponding to the information digest value matches the public key carried in the signature tag. If it does not match, it is determined that the target file has been tampered with.

If there is a match, the public key is used to decrypt the digital signature stored in the blockchain distributed ledger corresponding to the message digest value. If the decryption fails, it indicates that the corresponding stored digital signature is likely to be forged, and it is determined that the target file has been tampered with. If the decryption is successful, it is judged whether the message digest value obtained by decryption is the same as the corresponding stored message digest value. If they are the same, it is determined that the target file has not been tampered with. If they are not the same, it indicates that the digital signature is likely to be a digital signature forged by a malicious user. At this time, in order to ensure the validity of the digital signature, the target file may be re-signed using the above-mentioned digital signature method, thereby obtaining a new digital signature.

Among them, in order to prevent the content carried in the signature mark from being tampered with by malicious users, it is reasonable to use the private key of user A to digitally sign the content carried in the signature mark.

In summary, since the blockchain distributed ledger is a distributed database maintained collectively, it has the characteristics of decentralization and information immutability. Therefore, by applying the file signature method provided by the embodiment of the present invention, the digital signature can be stored in the blockchain distributed ledger, thereby ensuring that the digital signature is not tampered with and improving the security of the data.

Corresponding to the above-mentioned method embodiments, an embodiment of the present invention further provides a file signature device. Referring to FIG. 2 , the device may include:

A determination module 201, configured to determine a target file to be digitally signed, and calculate an information digest value of the target file according to a preset information digest algorithm;

The first obtaining module 202 is used to obtain the private key and public key of the signer who will digitally sign the target file;

The calculation module 203 is used to encrypt and calculate the information digest value by using the private key to obtain the digital signature of the signer;

The first storage module 204 is used for correspondingly storing the signer's digital signature, message digest value and public key in the blockchain distributed ledger;

The marking module 205 is used to write a signature mark in the target file, and the signature mark is used to mark that the target file has been digitally signed.

By applying the device provided by the embodiment of the present invention, the target file to be digitally signed can be determined, and the information digest value of the target file can be obtained by calculating according to a preset information digest algorithm. Then, the private key and public key of the signer to digitally sign the target file can be obtained. After that, use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer. After the digital signature is obtained, the digital signature, the message digest value and the public key are correspondingly stored in the blockchain distributed ledger. In this way, digital signatures can be stored in the blockchain distributed ledger. Among them, the blockchain distributed ledger is a distributed database maintained collectively, and has the characteristics of decentralization and information immutability. Therefore, the situation in which the digital signature is easily tampered due to writing the digital signature at the tail of the target file in the prior art can be avoided, and the validity of the digital signature is ensured. In addition, the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, which can facilitate the subsequent verification of the digital signature by using the information digest value and the public key.

After the digital signature, message digest value and public key are stored in the blockchain distributed ledger, the signature mark can also be written in the target file. In this way, it is convenient to record that the target file is a file that has been digitally signed, so as to facilitate subsequent verification of the digital signature of the target file.

Optionally, in an embodiment of the present invention, the first obtaining module 202 may include:

The loading submodule is used to load the private key encrypted file and public key of the signer who wants to digitally sign the target file from the blockchain private key public key pair storage software;

The decryption sub-module is used to decrypt the private key encrypted file by using the private key decryption key input by the user to obtain the private key corresponding to the public key.

Optionally, in another embodiment of the present invention, the first obtaining module 202 may include:

The calling submodule is used to call the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file.

Optionally, in this embodiment of the present invention, the device may further include:

The second obtaining module is used to obtain the identity of the signer after invoking the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file;

The second storage module is used to store the identity identifier and the public key in the distributed ledger of the blockchain.

Optionally, in this embodiment of the present invention, the signature tag may include an information digest value.

Optionally, in this embodiment of the present invention, the signature mark may further include at least one of: a public key, the signature time of the signer's digital signature, and the signer's identity identifier.

Corresponding to the above method embodiments, an embodiment of the present invention further provides an electronic device, see FIG. 3 , including a processor 301, a communication interface 302, a memory 303, and a communication bus 304, wherein the processor 301, the communication interface 302, the memory 303 completes the mutual communication through the communication bus 304,

a memory 303 for storing computer programs;

The processor 301 is configured to implement the method steps of any one of the above file signature methods when executing the program stored in the memory 303 .

In the embodiment of the present invention, the electronic device can determine the target file to be digitally signed, and can calculate and obtain the information digest value of the target file according to a preset information digest algorithm. Then, the private key and public key of the signer to digitally sign the target file can be obtained. After that, use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer. After the digital signature is obtained, the digital signature, the message digest value and the public key are correspondingly stored in the blockchain distributed ledger. In this way, digital signatures can be stored in the blockchain distributed ledger. Among them, the blockchain distributed ledger is a distributed database maintained collectively, and has the characteristics of decentralization and information immutability. Therefore, the situation in which the digital signature is easily tampered due to writing the digital signature at the tail of the target file in the prior art can be avoided, and the validity of the digital signature is ensured. In addition, the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, which can facilitate the subsequent verification of the digital signature by using the information digest value and the public key.

After the digital signature, message digest value and public key are stored in the blockchain distributed ledger, the signature mark can also be written in the target file. In this way, it is convenient to record that the target file is a file that has been digitally signed, so as to facilitate subsequent verification of the digital signature of the target file.

Corresponding to the above method embodiments, embodiments of the present invention further provide a readable storage medium, in which a computer program is stored, and when the computer program is executed by a processor, the method steps of any of the above file signature methods are implemented.

After the computer program stored in the readable storage medium provided by the embodiment of the present invention is executed by the processor of the electronic device, the electronic device can determine the target file to be digitally signed, and can calculate and obtain the target file according to a preset information digest algorithm The message digest value of . Then, the private key and public key of the signer to digitally sign the target file can be obtained. After that, use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer. After the digital signature is obtained, the digital signature, the message digest value and the public key are correspondingly stored in the blockchain distributed ledger. In this way, digital signatures can be stored in the blockchain distributed ledger. Among them, the blockchain distributed ledger is a distributed database maintained collectively, and has the characteristics of decentralization and information immutability. Therefore, the situation in which the digital signature is easily tampered due to writing the digital signature at the tail of the target file in the prior art can be avoided, and the validity of the digital signature is ensured. In addition, the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, which can facilitate the subsequent verification of the digital signature by using the information digest value and the public key.

After the digital signature, message digest value and public key are stored in the blockchain distributed ledger, the signature mark can also be written in the target file. In this way, it is convenient to record that the target file is a file that has been digitally signed, so as to facilitate subsequent verification of the digital signature of the target file.

Corresponding to the above method embodiments, the embodiments of the present invention also provide a computer program product containing instructions, which, when running on an electronic device, cause the electronic device to execute: any of the above method steps of the file signature method.

When the computer program product containing the instruction provided by the embodiment of the present invention is run on the electronic device, the electronic device can determine the target file to be digitally signed, and can calculate and obtain the target file according to the preset information digest algorithm. Information digest value. Then, the private key and public key of the signer to digitally sign the target file can be obtained. After that, use the private key to encrypt and calculate the message digest value to obtain the digital signature of the signer. After the digital signature is obtained, the digital signature, the message digest value and the public key are correspondingly stored in the blockchain distributed ledger. In this way, digital signatures can be stored in the blockchain distributed ledger. Among them, the blockchain distributed ledger is a distributed database maintained collectively, and has the characteristics of decentralization and information immutability. Therefore, the situation in which the digital signature is easily tampered due to writing the digital signature at the tail of the target file in the prior art can be avoided, and the validity of the digital signature is ensured. In addition, the digital signature, the information digest value and the public key are correspondingly stored in the blockchain distributed ledger, which can facilitate the subsequent verification of the digital signature by using the information digest value and the public key.

After the digital signature, message digest value and public key are stored in the blockchain distributed ledger, the signature mark can also be written in the target file. In this way, it is convenient to record that the target file is a file that has been digitally signed, so as to facilitate subsequent verification of the digital signature of the target file.

The communication bus mentioned in the above electronic device may be a peripheral component interconnect standard (Peripheral Component Interconnect, PCI) bus or an Extended Industry Standard Architecture (Extended Industry Standard Architecture, EISA) bus or the like. The communication bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of presentation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the above electronic device and other devices.

The memory may include random access memory (Random Access Memory, RAM), and may also include non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor. The above-mentioned processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), etc.; it may also be a digital signal processor (Digital Signal Processing, DSP), dedicated integrated Circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any relationship between these entities or operations. any such actual relationship or sequence exists. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device that includes a list of elements includes not only those elements, but also includes not explicitly listed or other elements inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

Each embodiment in this specification is described in a related manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the embodiments of the apparatus, electronic equipment, readable storage medium and computer program product containing instructions, since they are basically similar to the method embodiments, the description is relatively simple. Can.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims (14)

1. a file signature method, is characterized in that, described method comprises: Determine the target file to be digitally signed, and calculate the information digest value of the target file according to a preset information digest algorithm; obtain the private key and public key of the signer who is to digitally sign the target file; The information digest value is encrypted and calculated by using the private key to obtain the digital signature of the signer; correspondingly store the signer's digital signature, the message digest value and the public key in the blockchain distributed ledger; A signature mark is written in the target file, and the signature mark is used to mark that the target file has been digitally signed. 2. The method according to claim 1, wherein the step of obtaining the private key and the public key of the signer who will digitally sign the target file comprises: Load the private key encrypted file and the public key of the signer who will digitally sign the target file from the blockchain private key and public key pair storage software; The private key encrypted file is decrypted using the private key decryption key input by the user to obtain the private key corresponding to the public key. 3. The method according to claim 1, wherein the step of obtaining the private key and the public key of the signer who will digitally sign the target file comprises: Call the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file. 4. The method according to claim 3, characterized in that, in said calling the block chain private key and public key pair generation software, generating the private key and public key of the signer who will digitally sign the target file. After the step, the method further includes: obtain the identity of the signer; The identity identifier and the public key are correspondingly stored in the blockchain distributed ledger. 5. The method of claim 1, wherein the signature tag includes the message digest value. 6. The method according to claim 5, wherein the signature mark further comprises: At least one of the public key, the signature time of the signer's digital signature, and the signer's identity. 7. A file signature device, wherein the device comprises: a determination module, configured to determine the target file to be digitally signed, and calculate the information digest value of the target file according to a preset information digest algorithm; The first obtaining module is used to obtain the private key and public key of the signer who is to digitally sign the target file; a calculation module, configured to encrypt and calculate the information digest value by using the private key to obtain the digital signature of the signer; a first storage module, configured to store the signer's digital signature, the message digest value and the public key correspondingly in the blockchain distributed ledger; A marking module, configured to write a signature mark in the target file, where the signature mark is used to mark that the target file has been digitally signed. 8. The apparatus according to claim 7, wherein the first obtaining module comprises: The loading submodule is used to load the private key encrypted file and the public key of the signer who will digitally sign the target file from the blockchain private key and public key pair storage software; The decryption submodule is used for decrypting the private key encrypted file by using the private key decryption key input by the user to obtain the private key corresponding to the public key. 9. The apparatus according to claim 7, wherein the first obtaining module comprises: The calling submodule is used for calling the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file. 10. The apparatus of claim 9, wherein the apparatus further comprises: The second obtaining module is used to obtain the identity of the signer after invoking the blockchain private key and public key pair generation software to generate the private key and public key of the signer who will digitally sign the target file; The second storage module is configured to store the identity identifier and the public key in the distributed ledger of the blockchain. 11. The apparatus of claim 7, wherein the signature tag includes the message digest value. 12. The device according to claim 11, wherein the signature mark further comprises: At least one of the public key, the signature time of the signer's digital signature, and the signer's identity. 13. An electronic device, characterized in that it comprises a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; memory for storing computer programs; The processor is configured to implement the method steps described in any one of claims 1-6 when executing the program stored in the memory. 14. A readable storage medium, wherein a computer program is stored in the readable storage medium, and when the computer program is executed by a processor, the method steps of any one of claims 1-6 are implemented.

Images