Source: https://patents.google.com/patent/CN1635533A/en
Timestamp: 2019-04-23 04:34:01+00:00

Document:
This invention provides a digit stamp system generated and validated in the electron file and paper file, which adopts two value image digit water stamp formula to generate the digit stamp and imbedded it to the original designed position of the digit signing generation device. The system imbedded the digit singing information toe h general stamp image through the technique and combines the electron stamp legibility and the traditional stamp legibility.
本发明涉及数字签名和电子认证技术，特别涉及电子文档与纸质文档的印章系统。 The present invention relates to an electronic digital signature and authentication technologies, and particularly relates to seal systems of electronic documents and paper documents.
在中国传统历史的演进中，签名或画押、印章及官防章都扮演着相当重要之角色。 In the evolution of traditional Chinese history, signature or his mark, official seal and anti plays a very important chapter of the role. 不论是过去中国早期票据金融制度之“飞钱”或是衙门机关的“官防大印”，甚至文人骚客的“藏书章”或目前政府机关的图章，为了表现身份与建立交易秩序，都创造了“盖章”制度，让“盖章”可以具有与“签名”相同的效力。 Whether it is "anti-official seal of" the last notes of the early Chinese financial institution "flying money" or bureaucratic authority, even "chapter books" or the current government stamp of Mystics, in order to show identity and establish trade order, have created a "sealed" system, so that "seal" and may have the same effect as a "signature."
但是，目前伪造公章的现象时有发生，这与公章防伪技术的不完善密切相关。 However, there have occurred counterfeiting seal, which is closely related to the imperfect seal anti-counterfeiting technology. 任何人很容易刻出象模象样的印章出来。 Anyone can easily carve like a decent stamp out.
从技术上看，印章图案结构简单，字体规范，这使得伪造公章变得轻而易举。 From the technical point of view, a simple seal pattern structure, font specification, which makes forgery seal breeze. 而现在种种的印章防伪方法，不能从根本上解决问题。 And now all sorts of anti-counterfeiting seal method, can not solve the problem fundamentally.
在二十一世纪的信息化时代，因数字和网络的普及，为达到与现实生活中使用的“签名”或“盖章”的同样功能，即为了达到与签名或盖章一样具有身份辨识功能并能确认意思表示的方法，于是人们发明了“数字签名”(Digital Signature)或“电子签名”(ElectronicSignature)或称“电子签章”。 In the information age of the twenty-first century, and due to the popularity of digital networks, to achieve the "signature" used in real life or "seal" the same function, that function in order to achieve recognition as having an identity with a signature or seal and to confirm the intention of the method, so people invented the "digital signature" (digital signature) or "electronic signature" (ElectronicSignature) or "electronic signature."
数字签名的安全性勿庸置疑。 Security of digital signatures no doubt. 但盖章乃是我国历史长久以来的习惯，现阶段真正应用数字签名，尚欠缺习惯做后盾。 However, since the seal but a long history of habit, at this stage the real application of digital signatures, still lack the habit of doing backing. 因此如何将数字签名以人们日常所喜闻乐见的方式应用到纸质文档上，以满足中国传统盖章认证的习惯，这个问题需要在技术上得到解决。 So how would a digital signature to everyday people loved the way applied to paper documents, stamped certification to meet Chinese traditional habit, this issue needs to be resolved technically.
中国专利(申请号：96122615.3)提供一种普通物理印章的自动对比与辨识系统。 Chinese Patent (application number: 96122615.3) there is provided a common seal compared automatically with the physical identification system. 该系统将欲验证的印章与系统所保存的原始印章进行自动对比，用以判别传统印章的真伪。 The seal system to be verified with the stored original seal system for automatic comparison to determine the authenticity of a conventional seal. 但是该系统只是在物理形状上自动比较真伪物理印章是否一致，当伪造印章与原来的真实印章非常相似时则不具备防范印章伪造的现象。 However, this system is only automatically compare the physical authenticity of the seal are the same in physical shape, and the seal when the forged seal is very similar to the original is not the real seal is provided to prevent forgery phenomenon.
USPatent No.5388158(1995)的专利描述的方法及装置是将文档的文字报文信息，经过压缩、加密编码为一个二维条码或类似的形式，使用公开密钥算法，实现纸质文档的安全产生与鉴别。 Method and apparatus USPatent No.5388158 (1995) patent describes the text message information of the document, compressed, encrypted encoded as a two-dimensional bar code or the like form, using the public key algorithm, the security paper document produce identification. 包含加密信息的二维条码在实际使用过程中完全背离“盖章是中国历史长久之习惯”这一现象，不具备常用的印章形状，缺乏使用习惯。 Two-dimensional bar code contains encrypted information is completely contrary to the actual use "stamp is China's long history of habit," the phenomenon, does not have the common seal shape, lack of usage. 条形码信息对于用户是隐性的，用户无法直接从条形码中直接得到相关认证信息。 Bar code information is hidden for the user, the user authentication information can not be obtained directly from the barcode directly.
申请号为2001037455(2001)的美国专利揭示了一种包括编码特征的对象鉴别方法和装置。 Application No. 2001037455 (2001) U.S. Patent No. discloses a method and apparatus for identifying a subject comprising coding feature. 编码信息是数字水印对象的构成要素。 Information is encoded components of the digital watermark object. 对象的编码特征还被作为解读数字水印信息的密钥。 Encoding further features of the object as the key interpretation of the digital watermark information. 将数字水印组合到条形码中。 The combination of a digital watermark to the bar code. 通过密钥，条形码数字水印信息可以被解密和提取。 By key, the bar code digital watermark information can be extracted and decrypted. 该方法的缺点与USPatent No.5388158所描述系统的缺点类似，也是不具备实际物理印章的形状，因而缺乏使用习惯的支持。 A disadvantage of this method is described in USPatent No.5388158 and disadvantages similar system, but also do not have the actual physical shape of the seal, and thus the lack of support habits.
申请号为2002080996(2002)的美国专利公开了一种在需要防伪的文档(例如护照、货币、票据)等中，编码成可机读的多位二进制信息(如数字水印)，而阅读者不感知它的存在。 Application No. 2002080996 (2002) US Patent discloses a security document A needs (such as a passport, money, tickets), etc., encoded into a number of machine-readable binary information (such as digital watermarking), while those who do not read aware of its existence. 将可见的或潜在的校验图案载入这些文档。 The visible or potential check pattern loaded documents. 这种文档被扫描(如影印机)时，尽管可能被缩放或旋转，但仍能够检测到图案。 When such a document is scanned (e.g., copy machine), although it may be scaled or rotated, but still able to detect the pattern. 校验图案可以作为数字水印信息的载体，也可以独立编码数字水印。 Check pattern can be used as a carrier of the digital watermark information, digital watermark can be encoded independently. 护照处理装置可以通过解码的二元数据，获得关于护照持有人的信息数据。 Passport dichotomous data processing apparatus can be decoded to obtain information about the data of the passport holder. 某些装置可以同时检测数字水印数据和可见结构的存在(例如文档发布人的电子印章)。 There may detect digital watermark data and the visible structure while certain devices (e.g., a document publisher's electronic seal). 该方法在文档中嵌入水印信息，但是水印信息没有与数字签名技术相结合，缺乏可靠的认证方法。 The method watermark information embedded in the document, but the watermark information is not combined with digital signature technology, lack of reliable authentication methods. 此外在文档认证机制中，没有采用中国所习惯的印章图案，而只是用普通的图像作为水印载体。 Also in the document authentication mechanism, did not use the Chinese are accustomed to stamp patterns, but just ordinary image as a watermark carrier.
中国专利(申请号：99816827.0)描述了一种保护电子介质与纸质介质文档合法性的一种方法与装置。 Chinese patent (application number: 99816827.0) describes a device and a method of electronic media and paper media document the legality of protection. 该文档包含文档内容、一个用于鉴别文档的电子印章，该印章包括一个管理机构的可见印章及嵌入印章中的文档内容摘要以及一种附加到所述被鉴别文档的感光或光敏成分。 The document contains document content, a document authentication for electronic seal, the seal comprising a seal visible document summary and a seal fitted in the administration and an additional component to the photosensitive or photoactive be authenticated document. 该专利所采用的电子印章，包含文档的数字签名信息。 Electronic seals used in the patent, contains a digital signature information document. 但是为了将签名信息可以从文档的纸质拷贝版提取出来，采用特定的感光或光敏成分，而不是在印章本身图案中嵌入水印或安全认证信息，而将相关信息嵌入到特殊的感光材料中，增加应用成本与不方便性。 However, in order to signature information may be extracted from a paper-copy of the document out, using a specific photosensitive or photoactive component, instead of embedding a watermark in the security authentication information or pattern stamp itself, and embedding the relevant information in the special photosensitive material, increase the application cost and inconvenience.
中国专利(申请号：01132372.8)提出一个新颖的采用二值图像水印技术的数字防伪方法。 Chinese Patent (application number: 01132372.8) proposes a novel anti-counterfeiting method using digital watermarking technology binary image. 将鲁棒的二值图像水印技术应用于二值/多值图像，结合数字签名技术，可以解决电子文档与纸质文档的真伪认证功能。 The robust binary image watermarking technology used in binary / multi-value image, digital signature technology can solve the authenticity of the authentication of electronic documents and paper documents. 但是该方法对于文档认证与传输，没有提供完整的系统、解决方案、装置与产品。 However, this method for document authentication and transmission, does not provide complete system solutions, equipment and products.
本发明的目的是提供一种能在电子文档与纸质文档中生成并验证的数字印章系统。 Object of the present invention is to provide a generation and verification of the electronic documents with paper documents in a digital seal system.
接收系统认证中心的密钥采用公开密钥算法对文档提取装置的原始文档的关键内容进行数字签名的数字签名生成装置；采用二值图像数字水印算法生成数字印章的数字印章生成装置；将数字签名生成装置的数字签名嵌入到上述数字印章生成装置产生的数字印章中的水印嵌入装置；以及将上述带有数字签名的数字印章加入原始文档的指定位置的数字印章附加装置。 Key certification center of the receiving system using the public key algorithm the key elements of the document to the original document extraction apparatus digitally signing a digital signature generation device; binary image using digital watermarking algorithm to generate the digital seal on the digital seal generating means; digital signature a digital signature generation device embedding a digital watermark embedding the digital seal stamp generating means generated; and a digital stamp added to the original document specified location in the digital signature with a digital stamp attachment.
进一步，本发明提供的数字印章系统还包括一认证装置，该装置包括：对包含数字印章的文档的印章图像进行提取的印章图像提取装置；对包含数字印章的文档的文档内容进行提取的文档内容提取装置；用二值图像水印算法对印章图像提取装置的印章图像进行水印信息(数字签名信息)进行提取的水印信息提取装置；接收系统认证中心签发的密钥，根据上述水印信息提取装置的水印信息和上述文档内容提取装置的文档信息进行验证的验证装置。 Further, the digital seal system provided by the invention further comprises an authentication means, the apparatus comprising: a stamp image including the digital seal documents were stamp image extraction means; document content comprises a digital stamp document for document content extraction extracting means; watermark information (signature information) watermark information extraction means for extracting means seal image stamp image by binary image watermarking algorithm; reception system key issued by the authentication center, the watermark extraction device according to the watermark information document content information and the document information extraction means for authentication verification apparatus.
本发明提供的数字印章系统由于是将文档的数字签名信息通过特定的二值图像水印技术(中国专利：一种数字防伪方法，01132372.8)嵌入于普通印章图像，即在电子文档以及纸质文档上附加包含安全认证功能的数字印章，起到文档的安全认证和防伪方篡改功能，并且满足人们的日常使用习惯，将电子签章的合法性与传统印章的合法性结合起来，并且可以保护和认证电子文档及其输出的相应纸质文档的合法性。 The present invention provides a digital seal system because information of the document is digitally signed by a specific binary image watermarking technique: embedding (Chinese patent a digital anti-counterfeiting method, 01132372.8) to ordinary seal image, i.e., on a paper document and an electronic document additional digital stamp features include secure authentication, secure authentication and play side-tamper security documents and meet the daily use of people's habits, to combine the electronic signature of the legality and legitimacy of traditional seal, and can protect and certification the legitimacy of the corresponding paper documents and electronic document output.
“本发明提供的数字印章系统的应用，可以克服目前的数字签名技术只能应用于电子文件，对普通文件则无法以人们所熟识的形式提供同样的安全功能。在目前电子商务还不普及的情况下，大多数的正规文档和协议仍然需要物理性质的盖章，这使得数字签名的应用收到了极大的限制。一个可行的解决方案就是利用数字水印技术将数字签名无缝地融合到“数字印章”中，从而使得“数字签名”以数字或纸质形态存在与文件之上，在保证在实现数字签名的文档安全认证之同时，满足国人对传统盖章之使用习惯，从而克服目前现有系统的缺陷。 "The application of digital seal system of the present invention provides, we can overcome the current digital signature technology can be applied to electronic files, can not offer the same security features ordinary people are familiar with the file format. In the current e-commerce is not popular case, most of the formal agreement still needs to seal documents and physical properties, which makes the application of digital signatures received extremely limited. One possible solution is the use of digital watermarking technology will be seamlessly integrated into the digital signature " digital seal ", thus making the" digital signature "on a digital or paper form to the existence of the file, while ensuring document security certification of digital signature, meet people of traditional habits and sealed so as to overcome the current cash systematic defects.
图3B是图3A所述的水印嵌入装置的硬件结构示意图；图4A为鉴别包含数字印章的电子文档的真伪以及合法性认证的示意图；图4B为图4A所述的水印提取装置的硬件结构示意图；图5为鉴别包含数字印章的纸质文档的真伪以及合法性认证示意图；图6为说明本发明提供的数字印章系统的文档是如何制作、传输、以及进行真伪认证的示意图。 3B is a schematic diagram of a hardware configuration of the watermark embedding apparatus of FIG. 3A; FIG. 4A is a schematic diagram of authentication verification of legality and authenticity of the electronic document comprising a digital seal; FIG. 4B is a watermark extraction apparatus according to a hardware configuration of FIG. 4A the authenticity and validity of the authenticator is a schematic view of FIG. 5 is a paper document comprising a digital identification seal;; FIG. 6 is a schematic of how a digital document seal system of the present invention is to provide a production, transmission, and a schematic view of authenticity certification.
下面结合附图对本发明作进一步描述。 DRAWINGS The invention will be further described below in conjunction.
图1A表示一个原始的未加任何信息的印章图像。 1A shows an original image without any added seal information. 通常，印章图像来源于图像制作软件、普通物理印章的数字图像扫描拷贝或其它图像生成装置。 Typically, seal image from the image creation software, digital image scanning common physical copy stamp or other image generating device. 该印章图像101作为数字印章的母版，确保人们在使用过程的习惯性。 The stamp image 101 as a digital stamp of the master, to ensure that people habitually use in the process.
图1B表示本发明提供的数字印章系统的包含数字水印信息(即数字签名信息)的数字印章图像。 1B shows a digital seal system of the present invention provides a digital image including a digital watermark stamp information (i.e., digital signature information). 该数字印章图像102包含两个部分：第一部分是表征有意义的可见的印章图像，并且提供印章的初级鉴别功能；第二部分是嵌入在图像中的数字签名信息，用来鉴别文档的真伪，判断其完整性、非篡改性以及合法性。 Along with the digital image 102 comprises two parts: the first is characterized by significant visible stamp image, and to provide a primary seal function authentication; the second portion is embedded in the image information of the digital signature, to identify the authenticity of the document determining its integrity, and non-tamper resistance legitimacy.
图1C表示图1B的数字印章图像102的纸质复印版103，即数字印章图像102经过打印(或印刷)设备输出到纸张上得到该复印版103。 1C shows a digital image 102 of FIG. 1B stamp paper copy version 103, i.e., a digital image 102 after stamp printed (or print) to obtain the output device 103 on the paper copy version. 纸张上的数字印章图像103同数字印章图像102一样，也包含有同样的两个部分：有意义的印章和嵌入到印章中的数字签名，这说明本发明提供的数字印章系统使得纸质文档也能够通过嵌入在印章中的数字签名来鉴别文档的真伪，判断其完整性、非篡改性以及合法性。 Along with the digital image 103 with a digital stamp image on the sheet 102 as the same also contains two parts: a meaningful stamp and a digital signature embedded in the seal, indicating that the digital seal system of the present invention also provides a paper document such that authenticity of the document can be embedded in the stamp digital signature, determining its integrity, and non-tamper resistance legitimacy.
图1D表示数字印章的其它表示形式，例如，一个人的签字的原始图像104在未加任何额外信息，可对文件做签署的标识作用，并且也作为数字印章的母版。 1D shows another representation of the digital seal, e.g., a person's signature in the original image 104 does not add any additional information, the file can be signed for identification purposes, and also as a digital master stamp.
图1E是表示图1D所述的原始图像104中嵌入文档的数字签名信息，并且经过打印(或印刷)设备输出到纸张上的印章图像105。 FIG 1E is a digital signature information of the original image 104 of FIG. 1D embedded in the document, and outputs to seal the through image on the sheet 105 printed (or print) devices. 包含有数字签名的印章图像105，除了起到文件签署的标识作用，而且还真正具有鉴别文档的真伪，判断其完整性、非篡改性以及合法性等功能。 It contains a digital signature stamp image 105, in addition to the purpose of identification signed documents, but also truly identify the authenticity of the document, determine its functional integrity, unfalsification and legality.
(1)文档内容信息211；(2)包含对211所做的数字签名信息的数字印章。 (1) document content information 211; (2) contains a digital signature made 211 digital stamp information.
数字印章可以是普通常见图章212——图章的形状不限(如圆形、椭圆形、长方形、三角形等)，图章内部所表示的结构也不限(如公司图章、个人签章等)，图章内容不限(如有“上海阿须数码技术有限公司”字样，或其它单位字样等)；数字印章也可以是包含数字签名的手写签名图像215。 Common seal may be an ordinary digital stamp stamp 212-- Any shape (e.g., circular, oval, rectangular, triangular, etc.), internal seal structure is also not represented (such as a company seal, personal signature, etc.), seal Any content (if "digital technology Limited Haie be on" the words, words, or other units, etc.); digital seal may be handwritten signature image 215 comprising digital signature.
数字印章还可以是公司徽标213；文档的页眉/页脚线214；及数字水印条形码215，这些表现形式在申请号为02110959.1的中国专利已公开，这里不在详细描述。 Digital seal can also be a company logo, 213; document header / footer line 214; 215 bar codes and digital watermarks, which forms in Chinese patent application No. 02110959.1 has been disclosed, is not described in detail here.
图3A是本发明的数字印章系统产生一包含数字印章的电子文档或纸质文档拷贝的示意图。 FIG 3A is a schematic diagram of a seal comprising a digital electronic document or paper copy of the document on the digital seal system of the present invention is produced. 该系统包括：(1)原始文档310的文档内容提取装置311；(2)制作文档内容数字签名的数字签名生成装置313；(3)原始印章图像的访问控制装置315；(4)数字水印嵌入装置316；(5)数字印章加入装置318；(6)电子形式的文档319的纸质文档复制(拷贝)的打印控制装置322以及打印输出装置321。 The system comprising: (1) the original document content of the document 310 extraction means 311; (2) Production of document content digitally signed digital signature generating device 313; access (3) of the original seal image control apparatus 315; (4) Digital watermark embedding device 316; (5) added on the digital seal means 318; print control means (6) in the form of an electronic document 319 of the paper document copy (copies) 322, and a print output device 321.
其中，在实际的系统中，文档内容提取装置311、数字签名模块313、水印嵌入装置316、根据位置标志对原始文档附加数字印章模块318以及打印输出模块320和打印控制模块322构成了一加盖数字印章装置300，它可以集成一个装置。 Wherein, in a practical system, the document content extraction means 311, a digital signature module 313, watermark embedding device 316, the position of the original document flag figures Along output module 318 and a printing module 320 and the print control module 322 constitute a capping digital stamp device 300, which may be integrated into one device. 而且，在实际应用中，模块化的集成装置300在输入原始文档、原始印章图像、访问控制信息和密钥后可直接生成电子形式或纸质形式的加盖数字印章的文档。 Further, in practical applications, the integrated modular apparatus 300 may generate an electronic form or paper form seal stamped digital document is directly input in the original document, the original seal image, access control information and the key.
密钥312、原始印章图像314、印章访问控制装置315以及印章访问控制信息317可集成于一个U盘大小的E-智能钥匙301中，E-智能钥匙与集成的加盖数字印章装置300的数据交换可通过常用通信接口完成(如USB、串口、并口、红外接口等)，但它们也分别可以单独存储E-智能钥匙以外。 Key 312, an original image 314 stamps, stamp access control information and a data access seal 317 may be integrated in the smart key 301 E- size of a U, the smart key E- and capping integrated digital stamp device 300 control means 315 Interface switching may be completed (e.g., USB, serial, parallel, infrared interface, etc.) by conventional communications, but they can also be other than each individual storage E- fob.
再参见图3A，本发明提供的数字印章系统的整个包含文档的工作过程如下：(1)输入欲加盖数字印章的原始文档310；(2)文档内容提取装置311对原始文档310进行处理，对原始文档关键内容进行提取；(3)上述文档内容提取装置311提取的文档关键内容输入到数字签名生成装置313中，并利用系统认证中心(CA)签发的密钥312，采用公开密钥算法对文档内容做数字签名。 Referring again to Figure 3A, containing the entire digital document operation process of the seal system of the present invention provides the following: (1) input an original document 310 to be stamped with the digital seal; (2) the document content extraction means 311 for processing the original document 310, original document content key extracted; document content key (3) the contents of the document extracted by the extraction means 311 is input to the digital signature generation device 313, and issued by the system using a key certification authority (CA) 312, using the public key algorithm document content as digital signatures. 这种算法是现有技术已公开的技术。 This algorithm is disclosed in the prior art technology.
(4)将签名生成装置313生成的数字签名输入到水印嵌入装置316中。 (4) The signature generation device 313 generates a digital signature is input to the watermark embedding apparatus 316. 水印嵌入装置316得到来自印章访问控制装置315的控制信息，确定是否可以访问原始印章图像314，如果可以，那么在水印嵌入装置316中，将数字签名通过数字水印嵌入算法嵌入到原始印章图像314中，输出包含数字签名信息的数字印章。 Watermark embedding device 316 to obtain the control information control means 315 from the seal access to determine whether access to the original stamp image 314, and if so, the watermark embedding device 316, the digital signature embedded in the original seal image 314 embedded algorithm watermarking the output contains a digital signature digital stamp information. 其中，水印嵌入装置316中所采用的二值图像数字水印算法，其算法步骤与技术细节在申请号为01132372.8的中国专利申请“一种数字防伪方法”中已公开，这里不再描述。 Wherein the binary image digital watermark embedding watermarking algorithm employed in the apparatus 316, the algorithm steps technical details in Chinese Patent Application No. 01132372.8 of "a digital anti-counterfeiting method" have been disclosed, will not be described herein.
(5)根据用户提供的位置标志，在数字印章加入装置318中将数字印章附加在原始文档的指定文档上，形成加盖数字印章的文档，并输出包含数字印章的电子形式的文档319。 (5) The position of the flag provided by the user, the digital document 319 seal means 318 in the digital document specified in the attached seal original document, stamped digital document seal is formed, comprising an electronic form and outputs the digital seal was added.
(6)根据实际应用需要或用户要求，打印输出装置320可根据打印控制装置322的输出信息打印出电子形式的文档319的纸质拷贝——包含数字印章的纸质形式的文档321。 (6) depending on the application or user requirements, the print output device 320 may print out an electronic form document 319 of the copy paper according to the print control means 322 outputs the information - containing paper documents in the form of the digital seal 321.
对本领域的技术人员来将，水印嵌入装置可以在通用计算机中采用软件模块构成，也可以采用硬件组成。 To the watermark embedding device software modules may be employed to those skilled in the art in a general purpose computer, hardware may be employed. 图3B给出了图3A中水印嵌入装置316的硬件实现的结构框图。 FIG 3B shows the hardware block diagram of the watermark embedding apparatus 316 of FIG. 3A achieved. 该硬件包含中央处理单元CPU323，存储单元FLASH 324，数据外围接口单元326，以及数字水印的嵌入硬件模块327。 The hardware includes a central processing unit CPU 323, a storage unit FLASH 324, the data peripheral interface unit 326, and the digital watermark embedding module 327 hardware. 通过常用通信接口325(如USB、串口、并口等)接收原始印章图像314和要嵌入的水印信息(即数字签名)；然后将处理后的包含数字签名的印章图像通过通信接口325发送回计算机或其它设备。 Receiving an original stamp image 314 and to the embedded watermark information (i.e., digital signature) by conventional communication interface 325 (e.g., USB, serial, parallel, etc.); and containing the processed digital signature stamp image sent back to the computer via the communication interface 325 or other devices.
图4A为鉴别包含数字印章的电子文档的真伪以及合法性的认证装置的示意图。 4A is an electronic document authenticity of the digital seal comprising authentication and device authentication of the legitimacy of a schematic diagram. 该认证装置包括：印章图像提取装置412、文档内容提取装置411、水印信息提取装置413以及数字签名验证装置415。 The authentication apparatus comprising: a stamp image extracting apparatus 412, the document content extraction means 411, the watermark information extracting means 413 and a digital signature verification apparatus 415. 该装置的工作过程如下：(1)输入含数字印章的电子文档410；(2)在印章图像提取装置412中，对输入的电子文档进行处理，提取包含水印(数字签名)的印章图像；(3)在文档内容提取装置411中，对输入的电子文档进行处理，提取受到合法性保护的文档内容；(4)在水印信息提取装置413中，对输入的印章图像进行水印信息(数字签名信息)提取，并输出提取出的数字签名信息。 The operation of this device is as follows: (1) input-containing electronic document on the digital seal 410; (2) in the stamp image extracting apparatus 412, the electronic document input processing, extracting seal image contains a watermark (digital signature); and ( 3) in the document content extraction means 411, the inputted electronic document processing, the document extracted by the legality of the content protection; (4) in the watermark information extraction means 413, the seal on the input image watermark information (signature information ) extracts and outputs the extracted digital signature information. 其中，水印信息提取装置413中所采用的是二值图像数字水印算法的技术在申请号为01132372.8的中国专利中已公开，这里不再描述。 Wherein, in the watermark information extraction means 413 uses the digital watermarking technology binary image algorithms Chinese Patent Application No. 01132372.8 are disclosed in, it will not be described herein.
(5)数字签名验证装置415接收系统认证中心CA签发的密钥414、在水印信息提取装置413中提取的数字签名信息、在文档内容提取装置411中提取的合法的文档内容，然后进行数字签名的验证，并输出结果；当然，印章图像提取装置412、文档内容提取装置411、数字水印信息提取装置413和数字签名验证装置415构成一电子文档验证装置401，它可集成在一个装置中，采用这一单独的装置，用户在输入欲验证的纸质文档410以及密钥414后，即可给出验证结果。 (5) a digital signature verification device 415 receives the system key issued by the authentication center CA 414, the digital signature information in the watermark information extraction means 413 extracts, extracts valid document content extraction means 411 in the document content, then a digital signature authentication, and outputs the result; of course, seal image extracting apparatus 412, the document content extraction means 411, the digital watermark information extracting means 413 and the digital signature verification apparatus 415 constituting an electronic document verification device 401, which may be integrated in one device, using this separate device, the user input paper document to be authenticated and the key 414 after 410, the verification result can be given. 而且，它也既可以由软件编码实现，也可以采用单独的硬件装置或软-硬件混合装置实现。 Further, it may be implemented by software code that can be used separate hardware devices or software - hardware mixing device.
另外，水印信息提取装置413可以在通用计算机中采用软件模块构成，也可以采用硬件组成。 Further, the watermark information extracting means 413 may employ software modules in a general purpose computer, hardware may be employed. 图4B给出了图4A中水印提取装置413的硬件实现方法的结构示意图。 Figure 4B shows the schematic structure of hardware watermark extraction device 413 of FIG. 4A implementation of the method. 该硬件包含中央处理单元(CPU)420，存储单元(FLASH)421，数据外围接口单元423，以及数字水印的提取硬件模块424。 The hardware includes a central processing unit (CPU) 420, a storage unit (FLASH) 421, a peripheral interface unit 423 the data, and digital watermark extraction module 424 hardware. 通过常用通信接口422(如USB、串口、并口等)接收来自印章图像提取装置412的包含水印的印章图像；然后将提取后的水印信息(数字签名)通过通信接口422发送回计算机或其它设备。 By conventional communication interface 422 (e.g., USB, serial, parallel, etc.) receiving seal image contains a watermark from the stamp image extracting device 412; and the watermark information (signature) after extraction is sent back to a computer or other device through the communication interface 422.
图5是本发明的数字印章系统的包含数字印章的纸质文档的认证装置的方框图，该装置包括：图像采集装置511、图像处理装置512、文字信息的自动识别与手工录入装置/模块513、文档内容提取装置515、印章图像提取514、水印信息提取装置(模块)413以及数字签名验证装置415。 FIG 5 is a block diagram of a paper document authentication apparatus comprising the digital seal on the digital seal system of the present invention, the apparatus comprising: an image acquisition device 511, the image processing apparatus 512, the automatic identification and manual entry of character information device / module 513, document content extraction means 515, the seal 514 to extract the image, the watermark information extracting means (module) 413 and a digital signature verification apparatus 415. 其验证步骤是：(1)输入含数字印章的纸质文档510；(2)图像采集装置511利用图像录入设备(如摄像机、扫描仪等)将纸质文档510按通用数字图像格式(如JPEG、BMP等)扫描到计算机或其它电子设备中；(3)图像处理模块512对输入的纸质文档的图像扫描版进行基本的图像预处理，包括去噪、旋转、尺度变换、图像恢复等，并且分割出包含数字印章的子图像部分和包含文字信息的子图像部分；(4)文字信息的自动录入与手工录入装置/模块513接收图像处理模块512产生的包含文字信息的子图像，做光学字符识别OCR(Optical Character Recognition)处理，自动识别图像中的文字信息。 Which verification step: a paper document 510 (1) containing digital input seal; (2) the image pickup apparatus 511 using the image input apparatus (e.g., camera, scanner, etc.) according to the general paper document 510 digital image format (such as JPEG , BMP, etc.) to scan a computer or other electronic device; (3) the image processing module 512 of the basic image preprocessing a scanned paper document image input, including denoising, rotating, scaling, image recovery, and the divided sub-image portions comprising the digital seal and the sub-image portions containing character information; sub image including character information automatically input (4) the character information and the manual input device / module 513 receives the image processing module 512 generates and do optical character recognition OCR (Optical character recognition) processing, automatic recognition character information in the image. 对于错误，也可以采用手工录入的方式将文字信息输入到计算机或电子设备中；(5)印章图像提取模块514接收图像处理模块512生成的包含数字印章的子图像，对其做进一步的图像匹配、阈值分割等图像处理，输出与原始印章图像大小一样的待检测数字印章图像；(6)文档内容提取装置/模块515接收文字信息的自动录入与手工录入装置/模块513传来的文字识别内容，对其做信息的进一步提取，得到受到合法性保护的文档内容信息；(7)在水印信息提取装置516中，对输入的印章图像进行水印信息(数字签名信息)提取，并输出提取出的数字签名信息。 For error, manual input may be used to enter text mode information into the computer or the electronic device; (5) the seal image extraction module 514 receives the image processing module 512 generates a sub-image including the digital seal, so further image matching , threshold segmentation binary image processing, and outputs the original seal image the same size to be detected digital seal image; automatically input and manual input means / module 515 receives the text message (6) document content extraction / module 513 transmitted from the character recognition content , its done extracting further information, protection of information obtained by the content of the document legitimacy; (7) in the watermark information extraction unit 516, to seal the input image watermark information (digital signature information) is extracted, and the extracted output digital signature information. 其中，该装置516中所采用的是二值图像数字水印提取算法的技术在申请号为01132372.8的中国专利中已公开，这里不再描述。 Wherein, the apparatus 516 is employed in the digital watermarking technology binary image extraction algorithm is disclosed in China Patent Application No. 01132372.8, the not be described herein. 这一装置与图4所示的水印信息提取装置413可以是同一模块。 Watermark information extracting apparatus shown in FIG device 4413 that may be the same module.
(8)数字签名验证装置518接收系统认证中心CA签发的密钥517、在516中提取的数字签名信息、在515中提取的合法的文档内容，然后进行数字签名的验证，并输出结果；其中，图像采集装置511、图像处理装置/模块512、文字信息的自动识别与手工录入装置/模块513、印章图像提取装置514、文档内容提取装置515、数字水印信息提取装置516和数字签名验证装置517构成一纸质文档验证装置501，它也可以集成一个装置5，用户使用这一单独装置，在输入欲验证的纸质文档510以及密钥517，即可给出验证结果。 (8) a digital signature verification device 518 receives the system key issued by the authentication center CA 517, the digital signature information 516 is extracted, in the legal document content 515 extracted, and then the digital signature verification, and outputs the result; wherein image acquisition apparatus 511, an image processing apparatus / module 512, automatic identification and manual entry device / module character information 513, the seal image extracting device 514, the document content extraction means 515, the digital watermark information 516 and digital signature verification means extracts 517 constituting a paper document verification device 501, which may be integrated into a device 5, the user uses the separate devices, the input paper document 510 to be validated, and the key 517, the verification result can be given.
图6表示本发明包含数字印章生成、传输和认证功能的数字印章系统，该系统包含E-智能钥匙301、在文档上加盖数字印章系统300、文档传输系统601、电子文档验证装置401、纸质文档验证装置501和验证结果显示装置623。 Figure 6 shows the present invention comprises a digital stamp generation, transmission and authentication of the digital seal system, the system comprising E- smart key 301, seal system 300 stamped digital document delivery system 601, the electronic document on the document verification device 401, the paper quality document verification device 501 and a verification result display unit 623.
从上面的描述可知，数字印章装置300包含文档内容提取装置311、数字签名模块313、水印嵌入装置316、根据位置标志对原始文档附加数字印章模块318以及打印输出模块320和打印控制模块322，也可以是一集成装置。 From the above description, a digital stamp device 300 includes a document content extraction means 311, a digital signature module 313, watermark embedding device 316, the position flag figures original document stamp module 318 and a print output module 320 and the print control module 322, also It may be an integrated device. 电子文档验证装置401包含印章图像提取装置412、文档内容提取装置411、数字水印信息提取装置413和数字签名验证装置415构成。 The electronic document verification device 401 comprises a stamp image extracting apparatus 412, the document content extraction means 411, the digital watermark information extracting means 413 and the digital signature verification apparatus 415 configured. 纸质文档验证装置501包含图像采集装置511、图像处理装置/模块512、文字信息的自动识别与手工录入装置/模块513、印章图像提取装置514、文档内容提取装置515、数字水印信息提取装置516和数字签名验证装置517。 Paper document verification device 501 includes an image acquisition apparatus 511, an image processing apparatus / module 512, automatic identification and manual entry device / module 513 text messages Along image extracting device 514, the document content extraction means 515, the digital watermark information extracting means 516 and a digital signature verification apparatus 517.
这样，包含数字印章的电子或纸质文档的生成、传输与认证的工作过程如下：(1)输入原始文档310；(2)数字印章的盖章系统300接收原始文档310输入的信息，根据E-智能钥匙301中的信息与控制功能，确定是否进行盖章操作。 Thus, generation, transmission and authentication of the operation of the electronic or paper documents containing the digital seal is as follows: (1) input an original document 310; (2) the digital seal 300 seal system 310 receives input information of the original document, according to E - smart key 301 information and control functions to determine whether the seal operation. 如果可以，那么系统300输出加盖数字印章的电子或纸质文档；(3)数字印章的盖章系统300接收到的电子文档信息或纸质文档信息通过文档传输装置601输入电子文档验证装置401或纸质文档验证系统501。 If so, the system 300 outputs an electronic seal stamped digital document or paper; (3) the digital seal seal system 300 receives the electronic document information or the paper document information 601 input electronic document verification device 401 via the document transfer means or paper document verification system 501. 具体的，电子文档信息通过文档传输装置601的传输节点614经数字传输(装置)616(如网络传输)到达节点618。 Specifically, the electronic document information (apparatus) 616 (e.g., network transmission) reaching through a digital transmission node 618 614 document transmission apparatus 601 through the network node. 另外，纸质文档的信息通过传输节点615经物理传输(装置)617(如普通邮件、直接送交等)到达节点619。 Further, a paper document information 615 of the physical transmission of the transmission by the node (device) 617 (e.g., regular mail, etc. sent directly) through to the node 619. 传输过程也可以是混合型的(如先数字传输，在物理传输，然后再数字传输等)。 Transmission can also be mixed (such as the first digital transmission, the transmission in the physical, and then the digital transmission, etc.).
(4)来自节点618的包含数字印章的电子文档，被输入到电子文档验证装置401中进行文档的合法性验证。 (4) comprising a digital seal from the electronic document node 618, is input to the electronic document verification device 401 to verify the legitimacy of the document. 来自节点619的包含数字印章的纸质文档，被输入到纸质文档验证系统501中进行文档的合法性验证。 Paper document comprising a digital seal from the node 619, the paper document is input to the authentication system 501 to verify the legitimacy of the document. 验证结果输出并在验证结果显示装置623中显示出来，根据该结果可以确定数字水印的真伪。 Verification result and the verification result output display device 623 are displayed, the authenticity of the digital watermark can be determined based on the result.
通过上面的描述，可以发现，本发明提供的数字印章系统的技术要点极其效果如下：1：采用了数字印章技术，是文档更实用数字印章具有鉴别电子文档和纸质文档真伪以及防篡改、防伪造功能。 Through the above description, can be found, technical points of the digital seal system of the present invention provides an extremely effect are as follows: 1: the use of digital technology seal, the seal is a document having a more practical digital identification authenticity of electronic documents and paper documents and tamper-proof, anti-counterfeiting features. 一个数字印章包括：(1)能够在文档上显式存在的数字图像或相应的纸质输出拷贝。 A digital seal comprising: (1) a digital image can be explicitly present in the document or a corresponding output copy paper. 该图像是显式存在于电子文档或纸质文档中，并且能够被人眼及图像采集部件所识别；(2)嵌入在图像中的数字签名或其它安全认证信息。 The image is explicitly present in the electronic document or paper documentation, and can be recognized by the human eye and the image pickup means; (2) embedded in the image or other secure digital signature authentication information. 数字签名是采用公开密钥算法对文档内容所做的数字签名。 A digital signature is a public key algorithm for digital document content made signature.
数字印章既可以是电子文档中包含数字签名信息的数字图像，也可以是包含数字签名信息的数字图像的纸质输出拷贝。 Digital seal can be either an electronic digital document image contains digital signature information, it can also include a paper copy of the digital image output of digital signature information.
2：在文档上加盖数字印章的方法与装置文档包含两个概念，它既表示存在于计算机或电子设备中的电子文档(如MS-WORD、WPS、EMAIL、HTML网页等)，也表示该电子文档经过打印输出设备(或印刷设备)输出到纸张上的纸质拷贝。 2: The method of the digital seal stamped on the document with document apparatus comprising two concepts, both indicating the presence of a computer or electronic device the electronic document (e.g., MS-WORD, WPS, EMAIL, HTML web pages, etc.), and indicates that the output to a paper copy of the electronic document sheet passes through the print output device (or the printing apparatus).
在文档上加盖数字印章，其步骤包含一下部分：首先在文档上加盖数字印章，需要确定系统的输入参数。 The digital seal stamped on the document, which includes a lower portion of the step of: firstly stamped on the digital seal on the document, the system needs to determine the input parameters. 需要的输入参数包括：(1)用于生成数字印章的原始印章图像(数字形式)；(2)用于存储原始印章图像的电子存储设备，如计算机硬盘、USB盘、IC卡等；(3)用于控制原始印章图像访问以及数字印章生成的装置，该装置确定什么人或什么设备可以访问原始印章图像，并且是否可以启动数字印章生成程序。 Required input parameters include: (1) for generating a digital image of the original seal of seal (in digital form); (2) an electronic storage device for storing the original seal image, such as a computer hard drive, USB disk, IC cards and the like; (3 ) means for controlling access to the original stamp and a digital image generated by the seal, the apparatus determines who or what the seal device may access the original image, and the digital seal can initiate generation program. 控制信息来源于盖章人的口令，生物特征(如指纹、虹膜、脸像等)或其它连接于该装置的硬件设备(如EKEY、IC卡、硬件狗等)。 Password control information is derived from human seal, biometric (e.g., fingerprint, iris, face image, etc.), or other hardware devices connected to the apparatus (e.g. EKEY, IC card, hardware, dogs, etc.).
(4)原始电子文档；(5)用于生成原始电子文档的数字签名的密钥，该密钥是由系统认证中心CA(Certificated Agent)采用标准PKI体系签发的私钥(Private Key)。 (4) an original electronic document; (5) for generating an original electronic document is a digital signature key, the key is the use of the system by a certification authority CA (Certificated Agent) standard issued by the private key of the PKI (Private Key).
其次，上面的输入参数通过数据传输通道输入到数字水印嵌入装置中，并生成文档的数字印章图像。 Secondly, the above input parameters inputted through the data transmission channel to the digital watermark embedding apparatus, seal image and generates a digital document. 数字印章图像包含了文档的数字签名信息，经过该装置被输出到盖章模块中。 Along with the digital image information of the document contains digital signatures, after the device is sealed to the output module.
最后，盖章模块将数字印章图像附加在文档的指定位置，生成并输出已加盖数字印章的电子文档。 Finally, the digital module seal image stamp appended to the specified location in the document, generates and outputs an electronic document sealed with the digital seal. 该电子文档可以经过打印输出(或印刷)设备，产生相应的纸质拷贝。 The electronic document may be subjected to print out (or printing) apparatus to give the corresponding paper copy.
3：文档的真伪认证方法与装置鉴别包含数字印章的文档真伪认证，其装置包括：文档输入设备、文档内容及数字印章图像的提取设备、数字水印提取设备、数字签名验证设备以及结果输出设备。 3: The authentication verifying method and apparatus for discriminating the authenticity of a document comprising a document authentication on the digital seal, which apparatus comprising: a document input device, extraction device, and the document content image on the digital seal, the digital watermark extraction device, a digital signature verification device and a result output device. 装置需要的输入参数包括：原始的输入文档(电子及纸质的)、由CA签发的盖章人或单位的公钥，那么鉴别方法的基本步骤是：(1)文档输入：对于纸质拷贝，则在需要对纸质拷贝进行图像采集，并将采集的图像输入到鉴别设备中；(2)对输入文档进行内容提取与印章图像提取。 Input parameters required apparatus comprising: an original input document (electronic and paper-based), or sealed unit issued by the CA's public key, then the authentication process is the basic steps: (1) Document Input: For copying paper , then the need for a paper copy of the image acquisition, and the acquired image is input to the authentication device; (2) the image content extracting extracts the seal on the input document.
(3)在数字水印检测设备中对印章图像进行水印检测与提取。 (3) Along watermark detection and extraction of an image in the digital watermark detection apparatus.
(4)将文档内容和水印输入到数字签名验证设备中，进行数字签名的验证，并将结果输出。 (4) the document content and the watermark input to a digital signature verification device, a digital signature verification, and outputs the result.
1.一种数字印章系统，其特征在于，它包括：对原始文档的关键内容进行提取的文档提取装置；接收系统认证中心的密钥采用公开密钥算法对文档提取装置的原始文档的关键内容进行数字签名的数字签名生成装置；采用二值图像数字水印算法生成数字印章的数字印章生成装置；将数字签名生成装置的数字签名嵌入到上述数字印章生成装置产生的数字印章中的水印嵌入装置；以及将上述带有数字签名的数字印章加入原始文档的指定位置的数字印章附加装置。 A digital seal system, characterized in that it comprises: a document on the original document content key extracting means of extracting; key certification center receiving system using the public key algorithm the original document to the document content key extracting means digital digitally signed signature generation device; using binary image watermarking algorithm to generate the digital seal on the digital seal generating means; digital signature generation device digital signature is embedded on the digital seal the digital stamp generating means for generating a watermark embedding device; Along with the added numbers, and the original document specified location in the digital signature with a digital stamp attachment.
2.如权利要求1所述的数字印章系统，其特征在于，它还包括一认证装置，该认证装置包括：对包含数字印章的文档的印章图像进行提取的印章图像提取装置；对包含数字印章的文档的文档内容进行提取的文档内容提取装置；用二值图像水印算法对印章图像提取装置的印章图像进行水印信息(数字签名信息)进行提取的水印信息提取装置；以及接收系统认证中心签发的密钥，根据上述水印信息提取装置的水印信息和上述文档内容提取装置的文档信息进行验证的验证装置。 The digital seal system according to claim 1, characterized in that it further comprises an authentication device, the authentication device comprising: a stamp image including a digital document may be seal image stamp extraction means; containing digital seal document content of the document for document content extracted by the extracting means; watermark information (signature information) watermark information extracted by the extracting means to seal image stamp image extracting means with a binary image watermarking algorithm; and reception system certification authority issued key, the document information verification apparatus verifies means extracting watermark information according to the watermark information extracting means and said document content.
3.如权利要求2述的数字印章系统，其特征在于，所述的认证装置还包含一电子或纸质文档信息的文档传输装置。 2 described later on the digital seal system as claimed in claim 3, characterized in that said authentication apparatus further comprises a document transfer device or an electronic paper document information.
4.如权利要求2所述的数字印章系统，其特征在于，它还包括一图像采集装置、图像采集装置、图像信息的自动识别与手工录入装置，所述图像采集装置可对包含数字印章的纸质文档进行图像采集，然后将采集到的信息输入到所述图像处理装置和图像信息的自动识别与手工录入装置。 The digital seal system according to claim 2, characterized in that it further comprises an image pickup apparatus, an image acquisition device, automatic identification and manual entry of the image information apparatus, the image capture device may include a digital to seal paper documents, image acquisition, and then the collected information to the input image recognition means and the manual entry and processing of the image information.
5.如权利要求4的数字印章系统，其特征在于，它还包括一可将电子文档打印出来变成纸质文档的打印输出装置。 5. The digital seal system as claimed in claim 4, characterized in that it further comprises an electronic document can be printed into the printing paper document output device.

References: Application No. 2001037455
 Application No. 2002080996
 application No. 02110959
 Application No. 01132372
 Application No. 01132372
 Application No. 01132372