SYSTEM FOR GENERATING A SECURITY DOCUMENT

• US 20150012754A1
• Filed: 07/02/2014
• Published: 01/08/2015
• Est. Priority Date: 07/05/2013
• Status: Active Grant

• Current Assignee: Recipero Ltd.
• Original Assignee: Recipero Ltd.
• Inventors: Gray, Les, Shepherd, Steven Andrew, Hancock, Michael Arthur David
• Granted Patent: US 9,426,128 B2
• Time in Patent Office: Days
• US Class Current: 713/181
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A system for generating a security document includes a plurality of computing nodes forming a computing cluster, each computing node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, and each process having a process identifier for uniquely identifying the process within the node,

• • at least some of the processes on at least some of the nodes being adapted to perform the steps of:
    • a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;
    • b. generating a first random value and a second random value;
    • c. concatenating the subject identifier and the second random value;
    • d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value, resulting in a message digest value;
    • e. truncating the message digest value;
    • f. generating a document identifier comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first delimiter, the first random value, a second delimiter, and the truncated message digest value;
    • g. generating the security document, and applying the document identifier visibly to the document; and
    • h. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.

Claims

1. A system for generating a security document, comprising:

a plurality of computing nodes forming a computing cluster, each computing node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, and each process having a process identifier for uniquely identifying the process within the node,

at least some of the processes on at least some of the nodes being adapted to perform the steps of;

a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;

b. generating a first random value and a second random value;

c. concatenating the subject identifier and the second random value;

d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value, resulting in a message digest value;

e. truncating the message digest value;

f. generating a document identifier comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first delimiter, the first random value, a second delimiter, and the truncated message digest value;

g. generating the security document, and applying the document identifier visibly to the document; and

h. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.

2. The system for generating a security document as claimed in claim 1, in which the document and document identifier are stored in a database on the same computing node which generated the document.

3. The system for generating a security document as claimed in claim 1, in which the first random value is derived from a microsecond timer on the computing node.

4. The system for generating a security document as claimed in claim 1, in which the cryptographic hash function is the MD5 message digest function.

5. The system for generating a security document as claimed in claim 4, in which the truncated message digest value in step (e) is the first eight characters of the hexadecimal output of the MD5 function.

6. The system for generating a security document as claimed in claim 1, in which the first delimiter is different from the second delimiter.

7. A method of generating a security document on a computing process,

the process running on a computing node and the computing node forming part of a computing cluster, each computing cluster including multiple computing nodes and each node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, and each process having a process identifier for uniquely identifying the process within the node,

and the method comprising the steps of:

a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;

b. generating a first random value and a second random value;

c. concatenating the subject identifier and the second random value;

d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value, resulting in a message digest value;

e. truncating the message digest value;

f. generating a document identifier comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first delimiter, the first random value, a second delimiter, and the truncated message digest value;

g. generating the security document, and applying the document identifier visibly to the document; and

h. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.