Trusted electronic bid opening method, device and systemTechnical Field
The invention relates to the field of electronic bid inviting and purchasing, in particular to a method, a device and a system for opening a trusted electronic bid.
Background
The electronic bid inviting and bidding system provides the technologies of electronic bid book, digital certificate encryption and decryption, computer-assisted bid opening/bid evaluation and the like, comprehensively realizes the electronization and computer-assisted bid inviting of qualification bid, technical bid and business bid, supports electronic sign-in, bid processing and bid winning locking, supports electronic bid inviting report and bid inviting and bidding digital archive, greatly improves the bid inviting and bidding efficiency and saves the bid inviting and bidding cost.
The prior art has the following problems:
in the electronic bidding and opening process, bidders often worry that their bid documents are opened in advance, which results in leakage of the bid documents. If the bidder adopts the method of encrypting by using the CA of the bidder, errors are easy to occur in the bid opening link, so that decryption is unsuccessful, and the risk of discarding the bids exists.
In order to solve the above problems, the present application provides a trusted electronic bid opening method.
Disclosure of Invention
Objects of the invention
In order to solve the technical problems in the background technology, the invention provides a trusted electronic bid opening method, and a trusted electronic bid and bid opening method and system are established.
(II) technical scheme
In order to solve the technical problem, the invention provides a trusted electronic bidding and bidding opening method, which comprises the steps that after a bidder completes a bidding document, a third-party digital certificate in the same place can be selected for encryption;
the encryption firstly adopts a symmetric encryption algorithm to encrypt the whole file, the password of the symmetric encryption algorithm adopts a third-party digital certificate to carry out asymmetric encryption, a digital envelope is formed by encryption, and then the digital certificate of the tenderer is adopted to carry out asymmetric encryption, so that double encryption is realized;
when opening the tender, the tenderer decrypts by using the own digital certificate, applies for a third-party digital certificate to decrypt, and finally symmetrically decrypts;
and all the encryption and decryption records of the third party are stored in the block chain and are permanently kept, so that the bidders can view the encryption and decryption records.
Preferably, after the bidder creates the bid document, the bidder can select the co-located third-party digital certificate to encrypt, wherein the third-party digital certificate comprises the bid document and the encrypted bid document.
Preferably, the encryption firstly adopts a symmetric encryption algorithm to encrypt the whole file, the password of the symmetric encryption algorithm adopts a third-party digital certificate to carry out asymmetric encryption, a digital envelope is formed by encryption, then the tenderer adopts a digital certificate of the tenderer to carry out asymmetric encryption, double encryption is realized, third-party digital certificate encryption and personal digital certificate encryption comprising symmetric encryption algorithm encryption and a symmetric encryption algorithm sub-option are carried out, and the encrypted digital envelope is manufactured to protect the bidding document.
Preferably, when opening the bid, the tenderer uses the own digital certificate to decrypt, applies for the third-party digital certificate to decrypt, and finally performs symmetric decryption, including the symmetric decryption of the combination of personal digital certificate decryption and third-party digital certificate encryption, and decrypts the bidding document plaintext.
Preferably, the encryption and decryption records of the third party are all stored in the blockchain and are permanently kept, and the bidders can view the encryption and decryption records, including the blockchain data storage.
A trusted electronic bid opening device comprises a PC device for bid operation, a PC device for bid opening operation and a server device based on network support, wherein the PC device for bid operation, the PC device for bid opening operation and the server device based on network support are in information interaction based on the Internet.
A trusted electronic bid opening device is characterized by comprising handheld equipment of bid opening personnel, an SIM card is arranged in the handheld equipment, and a communication channel is established between the handheld equipment and server equipment supported by a network.
A trusted electronic bid opening system, a bid module, a bid encryption module, a bid opening decryption module, a block chain storage module and an electronic program required by the operation of the modules, wherein the execution method of the electronic program realizes the trusted electronic bid opening method according to any one of claims 1 to 5; and the trusted electronic bid opening device receives the operation instruction to carry out bid opening operation on the electronic bid opening system.
The technical scheme of the invention has the following beneficial technical effects:
1. the bidding document is subjected to double encryption protection by adopting a method of firstly carrying out symmetric encryption and then carrying out asymmetric encryption, so that the bidding document is high in safety;
2. a method for carrying out double encryption by a third party is introduced to assist encryption operation and realize the cooperative encryption of the personal side and the third party;
3. and the block chain is introduced for storing the certificate, so that the user can conveniently call and look up the encryption and decryption records.
Drawings
FIG. 1 is a schematic diagram of a bid opening process according to the present invention;
FIG. 2 is a flow chart of the electronic bid opening method of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the accompanying drawings in conjunction with the following detailed description. It should be understood that the description is intended to be exemplary only, and is not intended to limit the scope of the present invention. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present invention.
As shown in fig. 1-2, the method for opening a trusted electronic bid according to the present invention includes that after a bidder creates a completed bid document, the bidder may select a third party digital certificate in the same place to encrypt the document;
the encryption firstly adopts a symmetric encryption algorithm to encrypt the whole file, the password of the symmetric encryption algorithm adopts a third-party digital certificate to carry out asymmetric encryption, a digital envelope is formed by encryption, and then the digital certificate of the tenderer is adopted to carry out asymmetric encryption, so that double encryption is realized;
when opening the tender, the tenderer decrypts by using the own digital certificate, applies for a third-party digital certificate to decrypt, and finally symmetrically decrypts;
and all the encryption and decryption records of the third party are stored in the block chain and are permanently kept, so that the bidders can view the encryption and decryption records.
It should be noted that:
1. after completing the bidding document, the bidder can select the same third-party digital certificate for encryption, including compiling the bidding document and encrypting the bidding document; when bidding starts, a bidding document is created in advance, and the created bidding document is symmetrically encrypted.
2. Encrypting the whole file by adopting a symmetric encryption algorithm, asymmetrically encrypting the password of the symmetric encryption algorithm by adopting a third-party digital certificate, encrypting the formed digital envelope, and asymmetrically encrypting the digital envelope by adopting the digital certificate of the tenderer to realize double encryption; after the bid document is symmetrically encrypted based on a symmetric encryption algorithm, the symmetric key is encrypted by adopting a third-party digital certificate, the personal digital certificate of the tenderer is used for carrying out second encryption, double encryption of the bid document is realized, a bid document ciphertext is manufactured, and after the third-party and tenderer are used for double encryption, the security of the bid document is guaranteed.
3. When opening the tender, the tenderer uses the own digital certificate to decrypt, applies for the third party digital certificate to decrypt, and finally performs symmetric decryption, including the symmetric decryption of the combination of personal digital certificate decryption and third party digital certificate encryption, and decrypts the clear text of the tender document.
4. All the encryption and decryption records of the third party are stored in the block chain and are permanently stored, the bidders can check the encryption and decryption records, the block chain data storage is included, the bidding documents are hermetically submitted and uploaded to the block chain for storage, and information such as the bidders, the original text summaries, the ciphertext summaries and the digital envelopes is displayed in advance.
In this embodiment, the encryption and decryption method of the bid document is safe, after the bidder makes the bid document, the bidder can select the same third-party digital certificate to encrypt, the encryption firstly adopts a symmetric encryption algorithm to encrypt the whole document, the password of the symmetric encryption algorithm adopts the third-party digital certificate to carry out asymmetric encryption, a digital envelope formed by encryption is encrypted, then the tenderer adopts the own digital certificate of the tenderer to carry out asymmetric encryption, double encryption is realized, when the tenderer opens the bid, the tenderer firstly uses the own digital certificate to decrypt, then applies for the third-party digital certificate to decrypt, and finally carries out symmetric decryption.
A trusted electronic bid opening device comprises a PC device for bid operation, a PC device for bid opening operation and a server device based on network support, wherein the PC device for bid operation, the PC device for bid opening operation and the server device based on network support are in information interaction based on the Internet.
Further, the method comprises the following steps:
the PC equipment for bidding operation is used for compiling the bidding document and doubly encrypting the bidding document;
the PC equipment for opening the bid is used for decrypting the encrypted bid file and obtaining evidence for bidding;
the server equipment based on network support is used for information interaction between the bid PC equipment and the bid opening PC equipment, and the block chain is arranged in the server equipment for carrying out bid text encryption and decryption recording and assisting a user in calling.
In an alternative embodiment, the trusted electronic bid opening device comprises handheld equipment of bid opening personnel, a SIM card is arranged in the handheld equipment, and the handheld equipment establishes a communication channel with server equipment supported by a network.
It should be noted that: the handheld device is a mobile phone, the identity verification of the mark opening person can be added before the mark opening (the mark opening person can be authenticated by a short message verification code of the mobile phone, and can be set as a plurality of people), before the server device which is in charge of network support of the mark opening operation logs in the system, the short message verification code needs to be sent to the mobile phone through a communication channel which is built based on the internet, and the sending quantity of the short messages is matched with the quantity of the mark opening person.
A trusted electronic bid opening system comprises a bid module, a bid encryption module, a bid opening decryption module, a block chain storage module and an electronic program required by the operation of the modules, wherein the bid module, the bid encryption module, the bid opening decryption module and the block chain storage module are connected in series through the electronic program; and the electronic bid opening device receives the operation instruction to carry out bid opening operation on the electronic bid opening system.
It is to be understood that the above-described embodiments of the present invention are merely illustrative of or explaining the principles of the invention and are not to be construed as limiting the invention. Therefore, any modification, equivalent replacement, improvement and the like made without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention. Further, it is intended that the appended claims cover all such variations and modifications as fall within the scope and boundaries of the appended claims or the equivalents of such scope and boundaries.