Signature validation and generation

• US 20040123108A1
• Filed: 09/12/2003
• Published: 06/24/2004
• Est. Priority Date: 09/12/2002
• Status: Active Grant

• Current Assignee: Software AG
• Original Assignee: Software AG
• Inventors: Korner, Michael Ulrich, Hermann, Eckehard, Kessler, Dieter Hermann, Winkler, Kay Hans-Peter, Kollmorgen, Rene, Schoning, Harald Ralf
• Granted Patent: US 7,761,711 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/68 Special signature format, e.g. XML format
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods and apparatuses for validating a message with a signature. The method may include receiving the message with the signature and carrying out an integrated validation and storing process. The signature may be validated based on a validation algorithm and a key. The received message may be stored in a database. A method for generating a signature for a message may include carrying out an integrated receiving and generating process. The message to be sent may be received and the signature may be generated based on a signing algorithm and a key. The message may be sent with the signature.

Claims

1. A method for validating a message with a signature, wherein said method comprises:

receiving said message with said signature; and

carrying out an integrated validation and storing process, wherein said signature is validated based on a validation algorithm and a key and said received message is stored in a database.

2. The method according to claim 1, wherein in said integrated validation and storing process said message is stored and said signature is validated within one atomic process.

3. The method according to claim 1, wherein the storing process is rolled back, if the signature is not valid.

4. The method according to claim 1, wherein the storing process is completed, if the signature is valid.

5. The method according to claim 1, wherein said received message is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

6. The method according to claim 1, wherein said received signature is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

7. The method according to claim 1, wherein the integrated validation and storing process is carried out by said database.

8. The method according to claim 7, wherein the integrated validation and storing process is controlled by said database.

9. The method according to claim 1, wherein said message is an XML-document.

10. The method according to claim 1, wherein said signature is a digital signature.

11. The method according to claim 1, wherein said integrated validation and storing process is carried out as an ACID transaction.

12. A method for generating a signature for a message, wherein said method comprises:

carrying out an integrated receiving and generating process, wherein said message to be sent is received and said signature is generated based on a signing algorithm and a key, and

sending said message with said signature.

13. The method according to claim 12, wherein in said integrated receiving and generating process said message to be sent is received and said signature is generated within one atomic process.

14. The method according to claim 12, wherein said message to be sent is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished.

15. The method according to claim 12, wherein said key to be used for generating the signature is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished.

16. The method according to claim 12, wherein said message is an XML-document.

17. The method according to claim 12, wherein said integrated receiving and generating process is carried out as an ACID transaction.

18. The method according to claim 12, wherein said integrated receiving and generation process is carried out in a database, where said message to be sent is stored.

19. The method according to claim 12, wherein said signature is a digital signature.

20. The method for validating a message with a signature, wherein said method comprises:

receiving said message with said signature;

starting an ACID transaction;

sending a request to a security device;

validating said signature in said security device;

storing of said message in response to the result of the validation; and

committing said ACID transaction.

21. The method for generating a signature for a message, wherein said method comprises:

starting an ACID transaction;

acquiring said message to be signed;

sending a request to a security device;

generating said signature for said message in said security device;

committing said ACID transaction; and

sending said message with said signature.

22. An apparatus for validating a message with a signature, wherein said apparatus comprises:

a first means for receiving said message with said signature; and

a second means for carrying out an integrated validation and storing process,

wherein said second means are capable and affected to validate said signature based on a validation algorithm and a key and to store said message.

23. An apparatus for generating a signature for a message, wherein said apparatus comprises:

means for carrying out an integrated receiving and generating process, wherein said means are capable and affected to receive said message to be sent and to generate said signature based on a signing algorithm and a key; and

means for sending said message with said signature.