Service message management system and method

• US 20020044662A1
• Filed: 08/21/2001
• Published: 04/18/2002
• Est. Priority Date: 08/22/2000
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Sowler, Jonathan
• Application Number:
  US09/934,195
• Publication Number:
  US 20020044662A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/68 Special signature format, e.g. XML format
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A method for forming a service message for a multi-service environment, said method comprising digitally signing a first part of a service message comprising one or more message components, and digitally signing a second part of said service message comprising one or more message components. The service message is formed from said first and second parts, and first and second digital signatures of said first and second parts. Thus a service message for a multi-service environment is formed wherein first and second parts of the message are signed separately.

Claims

1. A method for forming a service message for a multi-service environment, said method comprising:

digitally signing one or more message components for a first part of a service message;

digitally signing one or more message components for a second part of said service message; and

forming said service message from said first and second parts, and first and second digital signatures of said first and second parts.

2. A method according to claim 1, wherein at least one message component is common to both said first and second parts of said service message.

3. A method according to claim 1, further comprising associating one or more message components relating to a first service with each other to form said first part, and associating said one or more message components relating to a second service with each other to form said second part.

4. A method according to claim 1, wherein said service message includes one or more message blocks, each comprising one or more message components.

5. A method according to claim 4, wherein at least one message block is common to both said first and second parts of said service message.

6. A method according to claim 5, wherein two or more blocks comprising one of said first or second parts of said message are related to each other.

7. A method according to claim 1, further comprising forming said service message such that cryptographic data for said service message is disposed in a separate part of said message from said first and second parts.

8. A method for decoding a service message comprising first and second parts respectively associated with first and second services of a multi-service environment, said method comprising:

receiving said service message at a first service;

verifying only said first part of said message at said service;

receiving said service message at a second service; and

verifying only said second part of said service message at said second service.

9. A program element comprising program code for configuring a computer system to form a service message for a multi-service environment, the program code operable to:

digitally sign one or more message components for a first part of a service message;

digitally sign one or more message components for a second part of said service message; and

form said service message from said first and second parts, and first and second digital signatures of said first and second parts.

10. A program element comprising program code translatable to configure a computer system to form a service message for a multi-service environment, the program code operable to:

receive said service message at a first service;

verify only said first part of said message at said service;

receive said service message at a second service; and

verify only said second part of said service message at said second service.

11. A program element comprising program code for configuring a computer system to decode a service message comprising first and second parts respectively associated with first and second services of a multi-service environment, the program code operable to:

verify only said first part of said message for said first service; and

verify only said second part of said message for said second service.

18. An electronic signal according to claim 17, wherein cryptographic data for said message is a third, separate part of said message.

19. An electronic signal according to claim 17, wherein said first part of said message is associated with a first service, and said second part of said message is associated with a second service.

20. An electronic signal according to claim 17, comprising a plurality of message components forming said message, said first and second parts each comprising one or more of said components.

21. An electronic signal according to claim 17, wherein at least one message component is common to both first and second parts of said service message.

22. An electronic signal according to claim 20, comprising a plurality of message blocks each including one or more of said message components, said first and second parts each comprising one or more of said message blocks.

23. An electronic signal according to claim 22, wherein two or more blocks comprising said first or second parts of said message are related to each other.

25. A computer system according to claim 24, wherein at least one message component is common to both said first and second parts of said service message.

26. A computer system according to claim 24, further configured to associate one or more message components relating to a first service with each other to form said first part, and associating said one or more message components relating to a second service with each other to form said second part.

27. A computer system according to claim 24, wherein said first part of said message is associated with a first service, and said second part of said message is associated with a second service.

28. A computer system according to claim 27, wherein at least one message block is common to both said first and second parts of said service message.

29. A computer system according to claim 27, wherein two or more blocks comprising one of said first or second parts of said message are related to each other.

30. A computer system according to claim 24, further configured to form said service message such that cryptographic data for said service message is disposed in a separate part of said message from said first and second parts.

12. A program element comprising program code translatable to configure a computer system to decode a service message comprising first and second parts respectively associated with first and second services of a multi-service environment, the program code operable to:

verify only said first part of said message for said first service; and

verify only said second part of said message for said second service.

13. A computer-readable medium encoded with computer-readable program code for configuring a computer system to form a service message for a multi-service environment, the program code operable to:

digitally sign one or more message components for a first part of a service message;

digitally sign one or more message components for a second part of said service message; and

form said service message from said first and second parts, and first and second digital signatures of said first and second parts.

14. A computer-readable medium encoded with computer-readable program code translatable for configuring a computer system to form a service message for a multi-service environment, the program code operable to:

digitally sign one or more message components for a first part of a service message;

digitally sign one or more message components for a second part of said service message; and

form said service message from said first and second parts, and first and second digital signatures of said first and second parts.

15. A computer-readable medium encoded with computer-readable program code for configuring a computer system to decode a service message comprising first and second parts respectively associated with first and second services of a multi-service environment, the program code operable to:

verify only said first part of said message for said first service; and

verify only said second part of said message for said second service.

16. A computer-readable medium encoded with computer-readable program code translatable for configuring a computer system to decode a service message comprising first and second parts respectively associated with first and second services of a multi-service environment, the program code operable to:

verify only said first part of said message for said first service; and

verify only said second part of said message for said second service.

17. An electronic signal encoding a service message for a multi-service environment, wherein first and second parts of said message are each separately digitally signed.

24. A computer system for a multi-service environment, the computer system configured to:

receive two or more message components for a service message;

digitally sign one or more of said message components for a first part of said service message;

digitally sign one or more of said message for a second part of said service message; and

form said service message from said first and second parts, and first and second digital signatures of said first and second parts.

31. Apparatus for forming a service message for a multi-service environment, comprising:

means for receiving one or more components for a service message;

means for digitally signing one or more of said components for a first part of said service message;

means for digitally signing one or more of said components for a second part of said service message; and

means for creating said service message from said first and second parts, and first and second digital signatures of said first and second parts.

32. A computer system for a multi-service environment, the computer system configured to:

receive a service message comprising first and second parts respectively associated with first and second services of said multi-service environment;

verify only said first part of said service message for said first service; and

verify only said second part of said service message for said second service.

33. Apparatus for decoding a service message comprising first and second parts respectively associated with first and second services of a multi-service environment, said apparatus comprising:

means for receiving said service message;

means for verifying only said first part of said service message for said first service; and

means for verifying only said second part of said service message for said second service.

34. A computer network comprising at least one computer system connectable to at least one further computer system via a network, the at least one computer system configured to:

receive two or more message components for a service message;

digitally sign one or more of said message components for a first part of said service message;

digitally sign one or more of said message for a second part of said service message; and

form said service message from said first and second parts, and first and second digital signatures of said first and second parts.

35. A computer network comprising at least one computer system connectable to at least one further computer system via a network, the at least one computer system configured to:

receive a service message comprising first and second parts respectively associated with first and second service of said multi-service environment;

verify only said first part of said service message for said first service; and

verify only said second part of said service message for said second service.