Computer networked system and method of digital file management and authentication

• US 20040255120A1
• Filed: 05/24/2004
• Published: 12/16/2004
• Est. Priority Date: 02/26/1999
• Status: Abandoned Application

• Current Assignee: Authentidate Holding Corporation
• Original Assignee: Authentidate Holding Corporation
• Inventors: Wolf, Michael, Themelis, Nicholas, Botti, John T.
• Application Number:
  US10/853,347
• Publication Number:
  US 20040255120A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

The digital file management system and method of the present invention provides a processing service that may be located remotely on a computer network that receives digital files from users and performs file identification, authentication and verification, including time and digital signature. The system and method may include the remote processing and storage of file information such that the user does not need to maintain any application specific software at the user'"'"'s local site. The system and method may record additional independent data with each stored file including: a “true date” gleaned from a secure clock which is not settable by the user (the Authentidate™); a number derived from a cyclic redundancy code (CRC) algorithm or checksum routine against the file; and a CRC or checksum derived from the “true date”, (the “date CRC”). This additional data may be recorded within each digital file after the file is acquired. If the file is altered after the recording of the additional data, recalculation of the CRC on the altered file will not match the original CRC recorded within it. Thus, that the file was altered can be detected. Likewise, if the true date is altered in any way, recalculation of the date CRC will similarly reveal this fact. The CRCs can be checked and verified at any time. If the recalculated value matches the recorded value, the file can be verified as being recorded on the specified date and has not been altered since that time.

Claims

1. A method for registering at least one digital file, the method comprising the steps of:

a) recognizing an occurrence of an event on a computer system;

b) in response to said occurrence of said event, performing a digital signature routine on said at least one digital file to obtain a digital signature of said at least one digital file;

c) creating a time stamp corresponding to the time of submission of said at least one digital file; and

d) sending said digital signature and said time stamp to a remote location;

wherein a user on said computer system does not need to perform any act exclusive to the method in order to cause the method to automatically execute.

2. The method according to claim 1, wherein said occurrence of said event is the execution of a command in a third party software program maintained on said computer system.

3. The method according to claim 2, wherein said occurrence of said event is a specified number of occurrences of said execution of said command in said third party software program.

4. The method according to claim 2, wherein said occurrence of said event is the saving of a document in a word processing program.

5. The method according to claim 1, wherein said occurrence of said event is the passage of a specified amount of time.

6. The method according to claim 1, wherein said occurrence of said event is a specified time of day.

7. The method according to claim 1, wherein said at least one digital file is a class of digital files.

8. The method according to claim 7 wherein said class of digital files is identified by a filename extension.

9. The method according to claim 7 wherein the class of digital files is identified by a storage location on said computer system.

10. The method according to claim 7 wherein said class of digital files is identified by a project designation at said computer system.

11. The method according to claim 7 wherein member digital files of said class of digital files are digital files that have been modified during a period of time.

12. The method according to claim 1, further including the step of receiving a receipt, the receipt including said time stamp, said digital signature, and an identifier of said at least one digital file.

13. The method of claim 1, wherein said time stamp includes at least a time of day and a date.

14. The method of claim 1, wherein said time stamp includes a number representing a quantity of units of measure of time from a predetermined point in time.

15. The method according to claim 14, wherein said number represents a quantity of seconds from a predetermined point in time.

16. The method of claim 1, wherein said digital signature routine is a checksum routine.

17. The method of claim 1, wherein said digital signature routine is a cyclic redundancy code routine.

18. The method of claim 1, wherein said digital signature routine is a publicly available encryption routine.

19. The method of claim 1, wherein said digital signature routine is a proprietary encryption routine.

20. The method of claim 1, wherein said event is determined by a function call from a function from a software developer'"'"'s kit.

21. The method according to claim 1, wherein said occurrence of said event is an operation modifying a digital file on said computer system.

22. The method according to claim 1, wherein said occurrence of said event is an operation upon a digital file on said computer system.

23. A method for registering at least one digital file, the method comprising the steps of:

a) recognizing an occurrence of an event on a computer system; and

b) in response to said occurrence of said event;

sending said at least one digital file to a remote location for creation of a digital signature and authenticating time stamp;

wherein a user on the computer system does not need to perform any act exclusive to the method in order to cause the method to automatically execute.

24. The method according to claim 23, wherein said occurrence of said event is the execution of a command in a third party software program maintained on said computer system.

25. The method according to claim 24, wherein said occurrence of said event is a specified number of occurrences of said execution of said command in said third party software program.

26. The method according to claim 23, wherein said occurrence of said event is the saving of a document in a word processing program.

27. The method according to claim 23, wherein said occurrence of said event is the passage of a specified amount of time.

28. The method according to claim 23, wherein said occurrence of said event is a specified time of day.

29. The method according to claim 23, wherein said at least one digital file is a class of digital files.

30. The method according to claim 29 wherein said class of digital files is identified by a filename extension.

31. The method according to claim 29 wherein the class of digital files is identified by a storage location on said computer system.

32. The method according to claim 29 wherein said class of digital files is identified by a project designation at said computer system.

33. The method according to claim 29 wherein member digital files of said class of digital files are digital files that have been modified during a period of time.

34. The method according to claim 23, further including the step of receiving a receipt, the receipt including said time stamp and an identifier of said at least one digital file.

35. The method of claim 23, wherein said time stamp includes at least a time of day and a date.

36. The method of claim 23, wherein said time stamp includes a number representing a quantity of units of measure of time from a predetermined point in time.

37. The method according to claim 36, wherein said number represents a quantity of seconds from a predetermined point in time.

38. The method of claim 23, wherein said event is determined by a function call from a function from a software developer'"'"'s kit.

39. The method according to claim 23, wherein said occurrence of said event is an operation modifying a digital file on said computer system.

40. The method according to claim 23, wherein said occurrence of said event is an operation upon a digital file on said computer system.

41. A method for registering at least one digital file, the method comprising the steps of:

a) recognizing an occurrence of an event on a computer system; and

b) in response to said occurrence of said event;

i) performing a digital signature routine on said at least one digital file; and

ii) sending said at least one digital file to a remote location for creation of a digital signature and authenticating time stamp;

wherein a user on said computer system does not need to perform any act exclusive to the method in order to cause the method to automatically execute.

42. The method according to claim 41, wherein said sending at least one digital file includes sending a user key.

43. A method for registering at least one digital file, the method comprising the steps of:

a) receiving at a server remote to a computer system a digital signature corresponding to said at least one digital file, said digital signature having been created on said computer system in response to an event at said computer system; and

b) determining a time stamp corresponding to the time of receipt of said digital signature;

wherein a user on said computer system does not need to perform any act exclusive to the method in order to cause said digital signature to be automatically created.

44. The method of claim 43, further comprising the steps of receiving at said remote server a user key and creating a second digital signature based on said user key and first said digital signature.

45. A method for registering at least one digital file, the method comprising the steps of:

a) receiving at a remote server said at least one digital file, said at least one digital file having been sent from a computer system in response to an event at said computer system;

b) performing a digital signature routine on said at least one digital file to obtain a digital signature of said at least one digital file; and

c) determining a time stamp corresponding to the time of receipt of said digital file;

wherein a user on said computer system does not need to perform any act exclusive to the method in order to cause said computer system to send said at least one digital file.

46. The method of claim 45, further comprising the step of receiving at said remote server a user key, and wherein said performing a digital signature routine on said at least one digital file is performing a digital signature routine on said at least one digital file and said user key to obtain a digital signature of said at least one digital file and said user key.

47. The method according to claim 45, wherein said at least one digital file is a class of digital files.

48. The method according to claim 47 wherein said class of digital files is identified by a filename extension.

49. The method according to claim 47 wherein the class of digital files is identified by a storage location on said computer system.

50. The method according to claim 47 wherein said class of digital files is identified by a project designation at said computer system.

51. The method according to claim 47 wherein member digital files of said class of digital files are digital files that have been modified during a period of time.

52. The method according to claim 45, further including the step of sending a receipt, the receipt including said time stamp, said digital signature, and an identifier of said at least one digital file.

53. The method of claim 45, wherein said time stamp includes at least a time of day and a date.

54. The method of claim 45, wherein said time stamp includes a number representing a quantity of units of measure of time from a predetermined point in time.

55. The method according to claim 54, wherein said number represents a quantity of seconds from a predetermined point in time.

56. The method according to claim 45, wherein said digital signature routine is a checksum routine.

57. The method according to claim 45, wherein said digital signature routine is a cyclic redundancy code routine.

58. The method according to claim 45, wherein said digital routine is a publicly available encryption routine.

59. The method according to claim 45, wherein said digital routine is a proprietary encryption routine.

60. The method according to claim 45, wherein said event is determined by a function call from a function from a software developer'"'"'s kit.

61. The method according to claim 45, wherein steps (b) and (c) are performed a plurality of times to create a plurality of digital signatures and a plurality of digital time stamps, and further comprising the steps of:

d) performing a digital signature routine on said plurality of digital signatures and said plurality of digital time stamps to obtain a superhash digital signature; and

e) determining a time stamp corresponding to the time of creation of said superhash digital signature.

62. The method according to claim 61, further comprising the step of sending said superhash digital signature and said time stamp corresponding to said time of creation to said superhash signature to another server.

63. The method according to claim 45, further comprising the step of storing said digital signature and said time stamp in a database.

64. A method of verifying a second digital file, comprising the steps of claim 63 and further comprising the steps of:

receiving said second digital file;

performing a digital signature routine on said second at least one digital file to obtain a second digital signature;

retrieving said digital signature and said time stamp from said database;

comparing said second digital signature with said digital signature; and

reporting a result from said comparison.

65. The method according to claim 64, further comprising the step of receiving at said remote server a user key, and wherein said performing a digital signature routine on

said at least second digital file is performing a digital signature routine on said second at least one digital file and said user key to obtain a second digital signature of said second at least one digital file and said user key.

66. A computer-readable medium having stored thereon a plurality of instructions, said plurality of instructions including instructions which, when executed by a processor, cause said processor to:

a) recognize an occurrence of an event on a computer system;

b) in response to said occurrence of said event, perform a digital signature routine on at least one digital file to obtain a digital signature of said at least one digital file;

c) create a time stamp corresponding to the time of submission of said at least one digital file; and

d) send said digital signature and said time stamp to a remote location;

wherein a user on said computer system does not need to perform any act exclusive to the system in order to cause the method to automatically execute.

67. The computer-readable medium according to claim 66, wherein said plurality of instructions further includes instructions which, when executed by a processor, causes said processor to send a user key to said remote location.

68. A computer-readable medium having stored thereon a plurality of instructions, said plurality of instructions including instructions which, when executed by a processor, cause said processor to:

a) perform a digital signature routine on at least one digital file to obtain a digital signature of said at least one digital file, wherein said at least one digital file was sent from a computer system in response to an event at said computer system; and

b) determine a time stamp corresponding to the time of receipt of said digital file;

wherein a user on said computer system does not need to perform any act exclusive to the system in order to cause said computer system to send said at least one digital file.

69. The computer-readable medium according to claim 68, wherein said performing a digital signature routine on said at least one digital file is performing a digital signature routine on said at least one digital file and a user key to obtain a digital signature of said at least one digital file and said user key.