METHOD AND DEVICE FOR ELECTRONICALLY CAPTURING A HANDWRITTEN SIGNATURE USING EMBEDDING TECHNIQUE

• US 20110179289A1
• Filed: 01/14/2009
• Published: 07/21/2011
• Est. Priority Date: 09/30/2008
• Status: Active Grant

• Current Assignee: StepOver GmbH
• Original Assignee: StepOver GmbH
• Inventors: Guenther, Andreas
• Granted Patent: US 8,700,905 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof

Abstract

A method and apparatus for encrypting an electronic document involves a computer having a first monitor and a signature capture apparatus configured to capture a handwritten signature on a second monitor. A hash sum of the electronic document generated in the computer is transmitted to the signature capture apparatus. The electronic document and the first hash sum thereof are displayed on the first monitor. The first hash sum is also displayed on the second monitor. After electronically capturing the handwritten signature, the signature data are encrypted using the first hash sum. A digital signature image is generated in the signature capture apparatus and the first hash sum is embedded therein. The embedded first hash sum is then extracted in the computer. If the extracted hash sum is identical to the first hash sum generated in the computer apparatus, the encrypted signature data and the signed document are stored.

Claims

1. A method comprising:

providing a computer apparatus having a first monitor configured to display an electronic document to be signed by a signer,

(ii) providing a signature capture apparatus having a second monitor, the signature capture apparatus being an individual unit separate from, but in communication with, the computer apparatus, and being configured to electronically capture a handwritten signature of the signer and biometric data of the signer'"'"'s signature,

(iii) generating in the computer apparatus a first hash sum of the electronic document to be signed,

(iv) transmitting to the signature capture apparatus one of;

(a) the generated first hash sum and (b) the generated first hash sum and the electronic document to be signed,

(v) displaying on the first monitor of the computer apparatus the electronic document to be signed and the first hash sum of the electronic document,

(vi) displaying on the second monitor of the signature capture apparatus the first hash sum transmitted from the computer apparatus,

(vii) electronically capturing the handwritten signature of the signer made on the signature capture apparatus, thereby generating signature data,

(viii) encrypting one of;

(a) the signature data and (b) the signature data and the electronic document using the transmitted first hash sum,

(ix) generating in the signature capture apparatus a digital signature image of the electronically-captured handwritten signature of the signer,

(x) embedding the first hash sum in the generated digital signature image of the electronically-captured handwritten signature of the signer by using a prescribed secret embedding technique,

(xi) transmitting to the computer apparatus one of;

(a) the encrypted signature data and (b) the encrypted signature data and the encrypted electronic document,

(xii) transmitting the digital signature image with the embedded first hash sum to the computer apparatus,

(xiii) extracting the embedded first hash sum in the computer apparatus according to said embedding technique,

(xiv) checking whether the extracted first hash sum is identical to the first hash sum generated in the computer apparatus, and

(xv) if the extracted hash sum is identical to the first hash sum generated in the computer apparatus, performing one of;

(a) storing the encrypted signature data and the signed electronic document on a computer-readable medium and (b) forwarding the encrypted signature data and the signed electronic document to a computer-readable medium for storage purposes.

2. The method according to claim 1, wherein a steganographic technique is used in step (x) to embed the first hash sum in the generated digital signature image of the captured handwritten signature of the signer.

3. The method according to claim 2, wherein the steganographic technique used in step (x) includes adjusting a color of specific pixels of the generated digital image of the captured signature of the signer according to a predefined code so as to correspond to specific bytes of the first hash sum, wherein the adjusted color is identical to the color of the digital image of the signature.

4. The method according to claim 3, wherein a black-and-white digital image of the captured signature of the signer is generated, and only pixels of the generated digital image of the signature are adjusted into black which are not already black.

5. The method according to claim 3, wherein a n₁-th line of the generated digital image represents a n₂-th byte of the first hash sum used for encrypting the signature data, wherein n₁ and n₂ are positive natural numbers.

6. The method according to claim 3, wherein the embedding step (x) is not performed until a predefined number of pixels in the generated digital signature image are colored.

7. The method according to claim 1, further comprising:

(xvi) displaying the transmitted digital signature image on the first monitor of the computer apparatus.

8. The method according to claim 1, wherein in method step (ix) a raster graphics image is generated as the digital signature image.

9. The method according to claim 1, further comprising:

(xvii) encrypting at least one of;

(a) the first hash sum generated in step (iii) and (b) the first hash sum generated in step (iii) and the electronic document to be signed before transmitting the first hash sum, and

(xviii) decrypting one of;

(a) the first hash sum and (b) the first hash sum and the electronic document to be signed in the signature capture apparatus.

10. The method according to claim 1, wherein a first unique key is electronically stored on the signature capture apparatus, and the first unique key and the first hash sum are used in step (viii) for encrypting the signature data, the first unique key being one of:

generated at random and a unique serial number of the signature capture apparatus, and being stored in the signature capture apparatus during the manufacturing process of the signature capture apparatus in a manner that is inaccessable to the outside.

11. The method according to claim 10, wherein a copy of the first unique key is stored at a secure location separate from the signature capture apparatus.

12. The method according to claim 10, further comprising:

asymmetrically encrypting the first hash sum and the unique serial number using a private key stored in the signature capture apparatus,

transmitting the asymmetrically encrypted the first hash sum and the unique serial number to the computer apparatus, and

transmitting the asymmetrically encrypted first hash sum and unique serial number to a further checking computer apparatus separate from the computer apparatus and the signature capture apparatus, the further checking computer apparatus being configured to decrypt the asymmetrically encrypted first hash sum and unique serial number.

13. The method according to claim 1, further comprising:

(xix) generating a random value as a first unique key in the signature capture apparatus for each electronic document to be signed.

14. The method according to claim 13, further comprising:

(xx) generating a second unique key in the signature capture apparatus by combining the first unique key and the first hash sum generated in method step (iii), the second unique key being used in step (viii) for encrypting one of;

(a) the signature data and (b) the signature data and the first hash sum.

15. The method according to claim 13, further comprising:

(xxi) generating a second unique key in the signature capture apparatus by combining the first unique key and the first hash sum generated in method step (iii),

(xxii) generating a second hash sum by hashing the second unique key generated in the signature capture apparatus,

(xxiii) using the generated second hash sum of the second unique key in step (viii) for encrypting at least the signature data.

16. The method according to claim 1, further comprising:

(xxiv) displaying the electronic document on the first monitor and activating an electronic lock so that the displayed electronic document cannot be amended anymore after it is displayed on the first monitor, and

(xxv) executing method step (iii) after the electronic lock has been activated.

17. The method according to claim 1, further comprising:

(xxvi) embedding the hash sum displayed on the second monitor of the signature capture apparatus in the generated digital signature image of the captured handwritten signature of the signer using said embedding technique, and

(xxvii) transmitting the digital signature image with the embedded first hash sum and the embedded hash sum displayed on the second monitor to the computer apparatus.

24. A non-transitory computer-readable storage medium encoded with computer-readable instructions that cause at least one processor to execute the method according to claim 1.

18. A signature system, comprising:

a) a computer apparatus having;

a storage device configured to store at least an electronic document to be signed,

a first data processing device configured to generate a first hash sum of the electronic document to be signed by the signer, to extract the first hash sum embedded in a received digital image of the signature of a signer according to a prescribed secret embedding technique, and to check whether the extracted first hash sum is identical to the first hash sum generated in the computer apparatus,

a first monitor configured to display the electronic document to be signed and the first hash sum of the electronic document to be signed,

a first input/output interface electrically connected with a separate signature capture apparatus and configured to transmit at least the first hash sum of the electronic document to be signed to the signature capture apparatus and to receive data from the signature capture apparatus, and

b) the signature capture apparatus, which is a unit separate from, but in communication with, the computer apparatus via the first input/output interface, the signature capture apparatus having;

a signature capture window configured to capture a signature made thereon and to capture biometric data of the signer'"'"'s signature,

a second monitor configured to display the first hash sum transmitted from the computer apparatus,

a second data processing device configured to encrypt the captured signature data using the first hash sum transmitted from the computer apparatus, to generate in the signature capture apparatus a digital signature image of the captured handwritten signature of the signer, and to embed the first hash sum transmitted from the computer apparatus in the generated digital signature image of the captured handwritten signature of the signer by using said embedding technique,

a second input/output interface electronically connected to the second monitor and the second data processing device and configured to transmit to the computer apparatus one of;

(i) the encrypted signature data, (ii) the encrypted signature data and the first hash sum and (iii) the encrypted signature data, the first hash sum and the digital signature image with the embedded first hash sum.

19. The signature system according to claim 18, wherein

the computer apparatus is configured such that the transmitted digital signature image is displayable on the first monitor of the computer apparatus.

20. The signature system according to claim 18, wherein the first input/output interface and the second input/output interface are configured such that the digital signature image of the captured handwritten signature of the signer is repeatedly displayed at a predetermined frequency on the first monitor of the computer apparatus during execution of the handwritten signature.

21. The signature system according to claim 18, wherein the signature capture apparatus is configured such that a raster graphics image of the signature is being generated at a predetermined frequency as the digital signature image.

22. The signature system according to claim 18, wherein

a first unique key is electronically stored in the signature capture apparatus in a manner that is inaccessable to the outside, the first unique key being configured to be used for encrypting one of:

(i) the signature data and (b) the signature data and the first hash sum.

23. The signature system according to claim 18, wherein

the signature capture apparatus further comprises a random value generator configured to generate a random value, the second data processing device being configured to encrypt one of:

(i) the captured signature data and (b) the captured signature data and the first hash sum using of at least one of the generated random value and a first unique key.

25. (canceled)

26. A signature capture apparatus configured to be used in combination with a computer apparatus of a signature system, the signature capture apparatus being a separate unit configured to electronically communicate with the computer apparatus and comprising:

a signature capture window configured to capture a handwritten signature made thereon by a signer and biometric data of the handwritten signature,

a display device configured to display a first hash sum received from the computer apparatus,

a data processing device configured to encrypt the captured signature data using the first hash sum received from the computer apparatus, to generate in the signature capture apparatus a digital signature image of the captured handwritten signature, and to embed the first hash sum received from the computer apparatus in the generated digital signature image of the captured handwritten signature of the signer by using a prescribed secret embedding technique, and

an input/output interface electronically connected to the display device and the second data processing device and configured to transmit the encrypted signature data and the digital signature image with the embedded first hash sum to the computer apparatus.

27. The signature capture apparatus of claim 26, wherein the signature capture window and the display device are integrated in one input/output field.