Public key/signature cryptosystem with enhanced digital signature certification

• US 4,868,877 A
• Filed: 02/12/1988
• Issued: 09/19/1989
• Est. Priority Date: 02/12/1988
• Status: Expired due to Term

• Current Assignee: Addison M. Fischer
• Original Assignee: Addison M. Fischer
• Inventors: Fischer, Addison M.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US07/155,467
• Time in Patent Office: 585 Days
• Field of Search: 380/23-25, 380/30
• US Class Current: 713/157
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00758 Asymmetric, public-key algorithms, e.g. RSA, Elgamal
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00782 Hash function, e.g. MD5, MD2, SHA
• CPC Class Codes: G07B 2017/00927 Certificates, e.g. X.509
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A public key cryptographic system is disclosed with enhanced digital signature certification which authenticates the identity of the public key holder. A hierarchy of nested certifications and signatures are employed which indicate the authority and responsibility levels of the individual whose signature is being certified. The present invention enhances the capabilities of public key cryptography so that it may be employed in a wider variety of business transactions, even those where two parties may be virtually unknown to each other. Counter-signature and joint-signature requirements are referenced in each digital certification to permit business transactions to take place electronically, which heretofore often only would take place after at least one party physically winds his way through a corporate bureaucracy. The certifier in constructing a certificate generates a special message that includes fields indentifying the public key which is being certified, and the name of the certifiee. In addition, the certificate constructed by the certifier includes the authority which is being granted including information which reflects issues of concern to the certifier such as, for example, the monetary limit for the certifiee and the level of trust which is granted to the certifiee. The certificate may also specify cosignature requirements which are being imposed upon the certifiee.

Claims

1. In a communication system having a plurality of terminal devices coupled to a channel over which users of said terminal devices may exchange messages, at least some users having a public key and an associated key, an improved method for managing authority by digitally signing and certifying a message to be transmitted to an independent recipient comprising the steps of:

formulating at least a portion of a digital message;

digitally signing at least said portion of said message; and

including within said message an authorizing digital certificate having a plurality of digital fields created by a certifier, said authorizing certificate being created by the steps of;

specifying by the certifier in at least one of said digital fields, the authority which is vested in the certifier and which has been delegated to the signer of said message, by including sufficient digital information to enable said independent recipient of said message to verify, be electronically analyzing said message in accordance with a predetermined validation algorithm, that the authority exercised by the signer in signing the content of said message created by the signer was properly exercised by the signer in accordance with the authority delegated by the certifier; and

identifying the certifier who has created the signer,s certificate in other of said digital fields by including sufficient digital information for said recipient of the message to determine by electronically analyzing said message that the certifier has been granted the authority to grant said delegated authority.

2. A method according to claim 1, further including the step of providing at least one digital field in said message identifying the nature of the digital data being transmitted.

3. A method according to claim 2, wherein the nature of the digital data is identified as being a digital signature.

4. A method according to claim 2, wherein the nature of the digital data is identified as being a certificate.

5. A method according to claim 2, wherein the nature of the digital data is identified as being a business document

6. A method according to claim 1, wherein the formulating step includes the step of providing a digital field allowing the user to insert a predetermined comment regarding the data being transmitted.

7. A method according to claim 1, further including the step of applying a hashing function to at least a portion of the message to be transmitted to form a presignature hash;

and wherein said digitally signing step includes the step of processing said presignature hash with the signer'"'"'s private key to form said digital signature.

8. A method according to claim 7, further including the step of forming a digital signature packet comprising the digital signature and a representation of said at least a portion of the message to be transmitted.

9. A method according to claim 1, wherein said authorizing certificate includes digital fields defining the cosignature requirements which must accompany the signer'"'"'s signature in order for the signer'"'"'s signature to be treated as properly authorized.

10. A method according to claim 9, wherein said digital fields defining co-signature requirements set forth a required digital signature by a specified third party indicating approval of the signer'"'"'s signature to thereby define a counter signature requirement.

11. A method according to claim 10, wherein the third party countersigns by digitally signing the signer,s digital signature.

12. A method according to claim 9, wherein the cosignature requirements include a digital field specifying at least one other digital signature which is required to appear in the digital message thereby defining a joint signature requirement.

13. A method according to claim 1, wherein said authorizing certificate includes at least one digital field defining limitations as to the authority granted by the certificate.

14. A method according to claim 1, wherein said authorizing certificate defines the plurality of the signer.

15. A method according to claim 13, further including the step of specifying a monetary limit for the signer in a digital field in said certificate.

16. A method according to claim 1, wherein said authorizing certificate includes at least one digital field defining a trust level indicative of the degree of responsibility delegated to the signer by the certifier.

17. A method according to claim 1, wherein said identifying step includes the step of specifying in digital fields in said authorizing certificate a hierarchy of certificates, whereby a recipient of the message can electronically verify in accordance with a predetermined validation algorithm the authority of the signer based upon an analysis of the signed message.

18. A method according to claim 1, wherein said step of creating an authorizing certificate includes the steps of creating a certificate by a certifier, whereby the certifier signs the certificate by using the private key associated with one of the certifier,s own certificates.

19. A method according to claim 1, including the step of transmitting a plurality of certificates, and wherein at least one of the transmitted certificates is a meta-certificate, where a meta-certificate is a digital authorizing certificate from which authority flows which originates from a trusted source commonly known to both the signer and prospective recipients.

20. In a communications system having a plurality of terminal devices coupled to a communications channel over which users of said terminal devices may exchange messages, at least some of said users having a public key and an associated private key, an improved method of digitally signing and certifying a message to be transmitted for managing authority comprising the steps of:

formulating at least a portion of a digital message;

digitally signing at least said portion of said message;

including within said message an authorizing digital certificate having a plurality of digital fields created for the signer by a certifier, said authorizing certificate being created by the steps of;

specifying by the certifier in at least one of said digital fields at least one party whose digital signature, in addition to the signer'"'"'s signature, is required to be transmitted with said message in order for said signer'"'"'s signature to be treated as properly authorized; and

identifying the certifier who has created the signer,s certificate in other of said digital fields by including sufficient digital information to enable the recipient of said message to determine by electronically analyzing said message that the certifier has been granted the authority to certify the signer'"'"'s certificate.

21. A method according to claim 20, wherein said certificate includes digital fields representative of a list of each of the public keys of the parties at least one of which is required to cosign any message signed with the authority of the certificate.

22. A method according to claim 20, wherein said certificate includes digital fields representative of a list of public keys of the parties at least one of which may be required to sign any message created under the authority of said certificate and a field defining the minimum member of such signatures which must appear in said message in order for the signer'"'"'s signature to be treated as properly authorized.

23. A method according to claim 20, wherein said certificate includes digital fields representative of a list of each of the certificates of the parties at least one of which is required to sign any message created under the authority of said certificate.

24. A method according to claim 20, including the step of including digital fields in said message associating with each digital signature in said message an authorizing certificate generated by a certifying party which specifies the authority which has been granted to the message sender.

25. A method according to claim 21, further including the steps of transmitting said message including said certificates and verifying at the recipient,s terminal device each signature through the use of at least one public key.

26. A method according to claim 20, wherein said step of including an authorizing certificate includes the step of defining a hierarchial ladder of certificates within digital fields in the transmitted message, whereby a recipient of the message can electronically verify in accordance with a predetermined validation algorithm the authority of the sender based upon an analysis of the signed message.

27. A method according to claim 20, further including the step of creating an authorizing certificate by a certifier, wherein the certifier creates a certificate by signing the certificate by using the private key associates with one of the certifier'"'"'s own certificates.

28. A method according to claim 20, further including the step of providing at least one field in said message identifying the nature of the digital data being transmitted.

29. A method according to claim 28, wherein the nature of the digital data is identified as being a digital signature.

30. A method according to claim 28, wherein the nature of the digital data is identified as being a digital certificate.

31. A method according to claim 20, further including the step of applying a hashing function to at least a portion of the message to be transmitted to form a presignature hash;

and wherein said digitally signing step includes the step of processing said presignature hash with the signer'"'"'s private key to form said digital signature.

32. A method according to claim 20, wherein said authorizing certificate includes at least one digital field defining the requirement of at least one digital signature by at least one third party indicating approval of the sender'"'"'s signature, thereby defining a countersignature requirement, wherein the third party countersigns by digitally signing the sender'"'"'s digital signature.

33. A method according to claim 20, wherein said authorizing certificate includes at least one digital field specifying at least one additional party required to sign said portion of the digital message to thereby define a joint signature requirement.

34. A method according to claim 20, wherein said authorizing certificate includes at least one digital field defining limitations as to the authority granted by the certificate.

35. A method according to claim 34, wherein said limitations includes a monetary limit for the signer.

36. A method according to claim 20, wherein said authorizing certificate includes at least one digital field indicative of the degree of responsibility delegated to the signer by the certifier.

37. A method according to claim 36, wherein said at least one field defines a trust level indicating the degree of responsibility the certifier is willing to assume for subcertification done by the signer.

38. A method according to claim 20, wherein said authorizing certificate includes at least one field identifying the signer.

39. A method according to claim 20 further including the step of transmitting a plurality of certificates, and wherein at least one of the transmitted certificates is a meta-certificate where a meta-certificate is a digital authorizing certificate from which all authority flows, said meta-certificate originating from a trusted source commonly known to both the signer and the recipient.

40. A method of digitally signing and certifying a sender'"'"'s message to enable a recipient to determine that the send-r is properly authorized comprising the steps of:

specifying in at least one digital field in an authorizing digital certificate created by a certifier the delegated authority which has been granted to the sender, said authorizing certificate including a plurality of digital fields;

identifying in other of said digital fields in said certificate the identity of the certifier by including sufficient digital information for said recipient to determine that the certifier has been granted the authority to grant the delegated authority;

transmitting a message to said recipient having at least one digital signature, said message including said digital certificate which specifies the authority which has been granted to the sender;

receiving said message by said recipient and validating the identity of the sender by electronically analyzing the at least one digital signature; and

determining the authority which has been granted to the sender by analyzing the delegated authority information specified in said authorizing certificate and determining by electronically analyzing said digital fields that said certifier has been granted the authority to grant said delegated authority.

41. A method according to claim 40, wherein said at least one digital signature is created by computing a presignature hash and said step of validating the identity of the sender including the step of recomputing said presignature hash with the received message,

encrypting the signature to be verified, comparing the recomputed presignature hash and said encrypted signature to be verified;

and

rejecting said signature if there is not a match.

42. A method according to claim 41, wherein said encrypting operation is performed with the sender'"'"'s public encrypting key.

43. A method according to claim 40, further including the step of electronically verifying by a predetermined verification algorithm that the received message is identical to the message as it was initially signed.

44. A method according to claim 40, further including the steps of:

specifying in digital fields in said message at least one digital signature in addition to the signer'"'"'s signature required to be transmitted;

transmitting said at least one digital signature required to be transmitted and at least one associated certificate;

electronically examining, upon receipt of said message, all received digital certificates and signatures; and

determining in accordance with a predetermined validation algorithm that all necessary signatures are present and that the sender is properly authorized based on data contained in said certificates.

45. A method according to claim 40, wherein said authorizing certificate includes at least one field defining the identity of the signer.

46. A method according to claim 40, further including transmitting a plurality of certificates and wherein at least one of the transmitted certificates is a meta-certificate, where a meta-certificate is a digital authorizing certificate from which authority flows which originates from a trusted source commonly known to both the signer and the recipient.