Method for secure time-stamping of digital documents

• US 5,136,647 A
• Filed: 08/02/1990
• Issued: 08/04/1992
• Est. Priority Date: 08/02/1990
• Status: Expired due to Term

• Current Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Bell Communications Research, Inc. (Telefonaktiebolaget LM Ericsson)
• Inventors: Haber, Stuart A., Stornetta, Wakefield S. Jr.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/561,888
• Time in Patent Office: 733 Days
• Field of Search: 364/200, 364/900, 380/3, 380/4, 380/30, 380/49, 380/850, 380/5, 380/9, 380/10, 380/28
• US Class Current: 713/178
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A system for time-stamping a digital document, including for example text, video, audio, or pictorial data, protects the secrecy of the document text and provides a tamper-proof time seal establishing an author'"'"'s claim to the temporal existence of the document. Initially, the author reduces the document to a number by means of a one-way hash function, thereby fixing a unique representation of the document text. In one embodiment of the invention the number is then transmitted to an outside agency where the current time is added to form a receipt which is certified by the agency using a public key signature procedure before being returned to the author as evidence of the document'"'"'s existence. In later proof of such existence, the certificate is authenticated by means of the agency'"'"'s public key to reveal the receipt which comprises the hash of the alleged document along with the time seal that only the agency could have signed into the certificate. The alleged document is then hashed with the same one-way function and the original and newly-generated hash numbers are compared. A match establishes the identify of the alleged document as the time-stamped original. In order to prevent collusion in the assignment of a time stamp by the agency and thus fortify the credibility of the system, the receipt is linked to other contemporary receipts before certification by the agency, thereby fixing a document'"'"'s position in the continuum of time. In another embodiment, a plurality of agencies are designated by means of random selection based upon a unique seed that is a function of the hash number of the document to be time-stamped. Thus being denied the ability to choose at will the identity of an agent, the author cannot feasibly arrange for falsification of a time stamp.

Claims

1. A method of time-stamping a digital document which comprises:

a) transmitting a digital representation of said document from an originator to an outside agency;

b) creating at said outside agency a receipt comprising a digital representation of then current time and at least a portion of a digital representation of said digital document; and

c) certifying said receipt at said outside agency by means of a verifiable digital cryptographic signature scheme.

2. A method of time-stamping a digital document according to claim 1 wherein said transmitted digital document representation comprises at least a portion of the digital representation of the number derived by application of a deterministic function algorithm to said digital document.

3. A method of time-stamping a digital document according to claim 1 wherein said receipted digital document representation comprises at least a portion of the digital representation of the number derived by application of a deterministic function algorithm to said digital document.

4. A method of time-stamping a digital document according to claim 3 wherein said digital number representation is derived from the application of a one-way hashing algorithm to said digital document.

5. A method of time-stamping a digital document according to claim 1 wherein said receipt further comprises the time representation and digital document representation specific to at least one other digital document receipted by said outside agency.

6. A method of time-stamping a digital document according to claim 5 wherein the receipt of said at least one other digital document was created by said outside agency earlier than that of the currently receipted digital document.

7. A method of time-stamping a digital document according to claim 5 wherein the receipt of said at least one other digital document was created by said outside agency later than that of the currently receipted digital document.

8. A method of time-stamping a digital document according to claim 1 wherein said outside agency is selected at random from a predetermined universe.

9. A method of time-stamping a digital document according to claim 8 wherein said outside agency is selected by means of a pseudorandom generator seeded with at least a portion of the digital representation of the number derived by application of a deterministic function algorithm to said digital document.

10. A method of time-stamping a digital document according to claim 9 wherein said pseudorandom generation seed is derived from the application of a one-way hashing algorithm to said digital document.

11. A method of time-stamping a digital document according to claim 10 which further comprises the like preparation of a time-stamp certificate by at least one additional outside agency selected by said pseudorandom generation and wherein the input for each additional outside agency selection is at least a portion of the digital representation of the output derived from the application of said one-way hashing algorithm to a digital representation of the previously generated output.

12. A method of time-stamping a digital document according to claim 9 which further comprises the like preparation of a time-stamp certificate by at least one additional outside agency selected by said pseudorandom generation.

13. A method for the secure time-stamping of a digital document

characterized in that

a) a digital representation of said document is transmitted from an originator to an outside agency;

b) said outside agency creates a receipt comprising a digital representation of then current time and at least a portion of a digital representation of said digital document; and

c) said receipt is certified at said outside agency by means of a verifiable digital cryptographic signature scheme.

14. A method for the secure time-stamping of a digital document according to claim 13

characterized in that said receipt further comprises the time representation and digital document representation specific to at least one other digital document receipted by said outside agency.

15. A method for the secure time-stamping of a digital document according to claim 14

characterized in that the receipt of said at least one other digital document was created by said outside agency later than that of the currently receipted digital document.

16. A method for the secure time-stamping of a digital document according to claim 13

characterized in that said outside agency is selected at random from a predetermined universe by means of a pseudorandom generator seeded with at least a portion of the digital representation of the number derived from the application of a deterministic function algorithm to said digital document.

17. A method for the secure time-stamping of a digital document according to claim 16

characterized in that said seed is derived from the application of a one-way hashing algorithm to said digital document.

18. A method for the secure time-stamping of a digital document according to claim 16

characterized in that a time-stamp certificate for said digital document is likewise prepared by at least one additional outside agency selected by means of said pseudorandom generation.