Patent ID: 8443196

Claim:
A signing method, wherein after an identifier and a separator of information for review have been shared between a client host and a server, the method comprises the steps of: operations by the client host: creating a connection between the client host and a key device; receiving transaction information entered by a user via an input unit which comprises at least one input of the client host and input of the key device; generating a transaction message based on the transaction information; determining key information according to the transaction message; transferring to the key device a data packet for signing with the key information and the separator; and waiting for receiving a first or second feedback from the key device by the client host, operations by the key device: receiving from the client host the data packet for signing; obtaining the key information from the data packet for signing by the separator; outputting the identifier of information for review corresponding to the key information, and waiting for confirmation of the user; completing digital signing of the data packet for signing if the confirmation is received by the key device from the user within a predetermined time period, in which the predetermined time period is a pre-defined value of time for waiting for the confirmation of the user; transmitting a signature generated by the digital signing to the client host as the first feedback; and returning a cancellation message to the client host as the second feedback if a cancellation signal is received by the key device within the predetermined time period, and operations by the server: receiving the transaction message and the signature from the client host; obtaining key information from the transaction message according to the identifier of information for review; generating the data packet for signing according to the key information and the separator; and verifying the signature from the client host with the data packet for signing wherein said confirmation of the user comprise the client host receives digital key information entered by the user via the input of the key device, extracts the key information from the transaction message according to the identifier of information for review, and verifies the digital key information against the key information extracted from the transaction message.