Knowledge based system for document authentication

• US 5,191,613 A
• Filed: 11/15/1991
• Issued: 03/02/1993
• Est. Priority Date: 11/16/1990
• Status: Expired due to Fees

• Current Assignee: Halina S Dziewit, James M. Graziano
• Original Assignee: Halina S Dziewit, James M. Graziano
• Inventors: Graziano, James M., Dziewit, Halina S.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/792,904
• Time in Patent Office: 473 Days
• Field of Search: 340/825.31, 340/825.34, 380/30
• US Class Current: 713/176
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The document authentication apparatus provides document authentication and authenticity capability. Document authentication requires that the person to be charged apply an authenticating mark on the document indicating intent to authenticate the document. This requirement is analogous to a signature on a printed document and is implemented in the document authentication apparatus electronically through the use of both hardware and software. A program which immediately checks the identicalness of the document at the transmitting and receiving station through a high speed comparison, locks in the document such that no modification can occur and then awaits authentication handshakes from the two end points. Such authentication is real-time and can be both hardware and software executable, i.e., password and physical confirmation.

Claims

1. In a data processing system that includes a processor, at least one data terminal and at least one data communication port, a document authentication system comprising:

means for interconnecting said at least one data terminal with said processor;

means, responsive to a first user activating said at least one data terminal to transmit a document origination signal from said at least one data terminal via said interconnecting means to said processor, for transmitting a document, identified by said document origination signal, from said processor to a second user via said data communication port;

means, responsive to receipt of a document authentication signal transmitted to said processor by said second user to acknowledge acceptance of said document by said second user, for comparing said received document authentication signal with said document to determine whether said received document authentication signal contains document acknowledgement data that matches corresponding data in said document, including;

means for identifying differences between said document acknowledgement data contained in said received document authentication signal and said corresponding data in said document,

means for storing data indicative of a set of predetermined thresholds, each threshold in said set of thresholds corresponding to a maximum allowable variation in one of said corresponding data in said document,

means for indicating a match between said received document acknowledgement data and said document when said identified differences do not exceed said maximum allowable variation for each of said corresponding data; and

means responsive to said comparing means determining a match between said received document authentication signal and said corresponding data in said document for authenticating said document.

2. The system of claim 1 further comprising:

means, responsive to said second user transmitting said document authentication signal, for validating the identity of said second user.

3. The system of said claim 2 wherein said validating means comprises

means for measuring an immutable physical characteristic of said second user;

and

means for comparing said measured immutable physical characteristic with data stored in a memory representative of said immutable physical characteristic of said second user as previously measured.

4. The system of claim 1 further comprising:

means, responsive to said first user activating said at least one data terminal to transmit said document origination signal, for validating the identity of said first user.

5. The system of said claim 4 wherein said validating means comprises:

means for measuring an immutable physical characteristic of said first user; and

means for comparing said measured immutable physical characteristic with data stored in a memory representative of said immutable physical characteristic of said first user as previously measured.

6. The system of claim 1 further comprising:

means for appending a digital signature to said authenticated document to detect any alteration of said authenticated document.

7. The system of claim 1 wherein said comparing means further comprises:

means, responsive to said indicating means failing to indicate a match, for producing an alert to denote a failure of said document authentication signal to match said document; and

means, responsive to said first user transmitting a document authentication signal to said processor subsequent to said second user transmitting a document authentication signal to said processor, for authenticating said document inclusive of said identified differences contained in said second user document authentication signal.

8. The system of claim 1 further comprising:

means responsive to at least one of said identified differences exceeding said maximum allowable variation for one of said corresponding data for revising said document; and

means for transmitting said revised document to said second user.

9. The system of claim 1 wherein said second user comprises a processor, programmed to respond to said document transmitted by said transmitting means.

10. In a data processing system that includes a processor, at least one data terminal and at least one data communication port, a method of document authentication comprising the steps of:

interconnecting said data terminal with said processor;

transmitting, in response to said first user activating said data terminal to transmit a document origination signal from said data terminal to said processor, a document, identified by said document origination signal, to a second user via said data communication port;

comparing, in response to receipt of a document authentication signal transmitted to said processor by said second user to acknowledge acceptance of said document by said second user, said received document authentication signal with said document to determine whether said received document authentication signal contains document acknowledgement data that matches corresponding data in said document, including;

identifying differences between said document acknowledgement data contained in said received document authentication signal and said corresponding data in said document,

storing data indicative of a set of predetermined thresholds, each threshold in said set of thresholds corresponding to a maximum allowable variation in one of said corresponding data in said document,

indicating a match between said received document acknowledgement data and said document when said identified differences do not exceed said maximum allowable variation for each of said corresponding data; and

authenticating, in response to said step of comparing determining a match between said received document authentication signal and said corresponding data in said document, said document.

11. The method of claim 10 further comprising the step of:

validating, in response to said second user transmitting said document authentication signal, the identity of said second user.

12. The method of claim 11 wherein said step of validating includes:

measuring an immutable physical characteristic of said second user; and

comparing said measured characteristic with data stored in a memory representative of said immutable physical characteristic of said second user as previously measured.

13. The method of claim 10 further comprising the step of:

validating, in response to said first user activating said at least one data terminal to transmit said document origination signal, the identity of said first user.

14. The method of claim 13 wherein said step of validating includes:

measuring an immutable physical characteristic of said first user; and

comparing said measured characteristic with data stored in a memory representative of said immutable physical characteristic of said first user as previously measured.

15. The method of claim 10 further comprising the step of:

appending a digital signature to said authenticated document to detect any alteration of said authenticated document.

16. The method of claim 10 further comprising the steps of:

producing, in response to said step of indicating failing to indicate a match, an alert to denote a failure of said document authentication signal to match said document; and

authenticating, in response to said first user transmitting a document authentication signal to said processor subsequent to said second user transmitting a document authentication signal to said processor, said document inclusive of said identified differences contained in said second user document authentication signal.

17. The method of claim 10 further comprising the step of:

revising said document, in response to at least one of said identified differences exceeding said maximum allowable variation for one of said corresponding data; and

transmitting said revised document to said second user.

18. The system of claim 10 wherein said second user comprises a processor, programmed to respond to said document transmitted by said transmitting means.