Method and apparatus for creating, supporting, and using travelling programs

• US 5,337,360 A
• Filed: 01/05/1994
• Issued: 08/09/1994
• Est. Priority Date: 04/06/1992
• Status: Expired due to Term

• Current Assignee: Addison M. Fischer
• Original Assignee: Addison M. Fischer
• Inventors: Fischer, Addison M.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/174,154
• Time in Patent Office: 216 Days
• Field of Search: 380/4, 380/23, 380/25, 380/49, 395/200
• US Class Current: 713/176
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method and apparatus for creating, supporting and using a "travelling program" is disclosed. A "travelling program" is a digital data structure which includes a sequence of instructions and associated data and which has the capability of determining at least one next destination or recipient for receiving the travelling program and for transmitting itself together with all relevant data determined by the program to the next recipient or destination. The travelling program can compute, according to any algorithm, the digital material which is to be signed, and also, as needed, the digital material which is to be verified. The program can conditionally decide, based on any known criteria, which users should participate in the signature process. Digital signatures allow the travelling program to provide other types of valuable authentication. The travelling program operates to automate data collection among a group of users. It can be sent to one user, attach (or detach) relevant data files and move on to the next user. Data or files, collected from one or more users can be deposited with another user, or accumulated for batched processing as desired. This methodology eliminates the need for individual users to be counted on to transmit all the required data in the required format. The present invention also efficiently performs electronic data interchange (EDI) in the context of a travelling program which sends itself from user to the next within an organization, collecting, editing and approving data.

Claims

1. In a communications system having a plurality of digital computers coupled to a channel over which computers exchange digital messages, a method for processing information among said computers comprising the steps of:

executing on a first computer a sequence of digital program instructions including instructions which determine at least one next destination that receives the sequence of instructions

transmitting to said next destination, digital information comprising at least said sequence of digital instructions and accompanying digital data associated with said sequence of digital instructions;

determining, based on the sequence of instructions, at at least one of said plurality of digital computers, a first digital value;

computing, based on the sequence of digital instructions, at at least one of said plurality of digital computers a digital signature on said first digital value, thereby creating a digital signature value to be part of said accompanying digital data; and

determining, at said next destination, based on the sequence of digital instructions, whether the sequence of digital instructions must be further transmitted.

2. A method according to claim 1, wherein said digital signature is included as part of the accompanying data to the next destination.

4. A method according to claim 1, wherein said digital signature is represented as data subject to being logically processed by said sequence of program instructions.

5. A method according to claim 1, further including the step of associating a digital certificate with said digital signature and wherein said digital certificate is represented as data subject to being logically processed by said sequence of program instructions.

6. A method according to claim 1, wherein said digital signature is included as part of said accompanying data transmitted to the next destination.

7. A method according to claim 1, further including the step of acquiring data from a user at at least one of said plurality of computers, translating the acquired data by said sequence of digital program instructions into a predefined data structure conforming to a recognized standard.

8. A method according to claim 7, further including the step of processing and verifying the digital signature and the data to which it is applied, independently of said sequence of digital instructions.

9. A method according to claim 1, further including the step of translating data under direction of the sequence of digital instructions into an Electronic Data Interchange (EDI) format.

10. A method according to claim 1, including the step of logically constructing the information to which the digital signature can be selectively applied, wherein such information is treated as a program variable on which the sequence of digital program instructions operate.

11. A method according to claim 1, further including the step of performing a digital signature operation as a function which is invoked under control of said sequence of digital program instructions.

12. A method according to claim 11, wherein the data supplied to said digital signature function reflects values based on any one of a set of data read from a user'"'"'s file, data built in to said sequence of digital program instructions, data entered by the user, data obtained from other signatures, and data obtained from a digital certificate.

13. A method according to claim 1 further including the step of including an indication of the authority which has been vested in a user performing a digital signature, by including sufficient digital information to allow verification that the authority exercised by the signer was properly exercised.

14. A method according to claim 1 further including the step of selecting from a collection of digital certificates the certificate to be used in performing a digital signature.

3. In a digital communications system having a plurality of computers coupled to a channel over which computers exchange messages, a method for processing information among said computers comprising the step of:

executing on a first computer a sequence of digital instructions, including instructions which determine at least one next destination that receives the sequence of digital instructions together with accompanying data including at least one digital signature;

transmitting said sequence of digital instructions together with said accompanying data to said next destination;

performing, under the control of said sequence of digital instructions, a digital signature verification operation based upon information contained in said accompanying data; and

determining, at said next destination whether the sequence of digital instructions must be further transmitted.

15. In a communication system having a plurality of computers coupled to a channel over which computers exchange messages, a method for processing information among said computers comprising the steps of:

executing on a first computer a sequence of digital instructions, including digital instructions which determine at least one next destination that receives the sequence of digital instructions;

acquiring data from a user of at lest one of said computers under the control of said sequence of digital instructions;

translating said data under the control of said sequence of digital instructions into a predefined data structure;

digitally signing at least part of said data structure via the execution of said sequence of digital instructions to create a digital signature value;

transmitting digital information including said digital signature value to a next destination under the control of said sequence of digital instructions and determining, at said next destination, based of the sequence of digital instructions, whether the sequence of digital instructions must be further transmitted.

16. A method according to claim 15, wherein said translating step includes the step of translating said data under control of said sequence of instructions into an Electronic Data Interchange (EDI) format.

17. A method according to claim 15, wherein at least part of the aggregate of said data structure together with the digital signature of said data structure is transmitted as a set of data independently of the sequence of digital instructions.

18. A method according to claim 15, wherein the result of the digital signature is verified when the set of instructions is executed at at least one subsequent destination.

19. In a communication system having a plurality of computers coupled to a channel over which computers exchange messages, a method for processing information among said computers comprising the steps of:

executing on a first computer a sequence of digital program instructions, including instructions which determine at least one next destination that receives the sequence of digital instructions;

performing a digital signature operation under the control of said sequence of program instructions using a private key stored in a user token device to obtain a digital signature value;

transmitting digital information including said digital signature value to a next destination; and

determining, at said next destination, based on the sequence of digital program instructions, whether the sequence of digital instructions must be further transmitted.

20. A method according to claim 19 wherein the step of performing a digital signature operation includes the step of determining whether the user'"'"'s private key is stored in a token device or in computer memory.

21. In a digital communications system having a plurality of computer terminals which are located at a plurality of destinations and are coupled to a channel over which computer terminals exchange messages, a method for processing digital information comprising the steps of:

executing on a first computer a sequence of digital program instructions, including instructions which determine at least one next destination that receives the sequence of digital program instructions;

computing a digital value, the content of which is based on logical decisions and manipulations controlled by said sequence of digital program instructions;

performing a digital signature operation on said digital value to create a digital signature value;

transmitting digital information including said digital signature value to a next destination; and

determining, at said next destination, based on said sequence of instructions whether the sequence of digital program instructions must be further transmitted.

22. A digital data processing system for processing digital information by a plurality of computers coupled to a channel over which computers located at a plurality of destinations exchange digital messages comprising:

a first computer including;

at lest one memory for storing a sequence of digital program instructions including

     1) instructions which determine at least one next destination for receiving said sequence of instructions together with accompanying data and

     2) instructions for logically constructing digital data to be signed and for selectively performing a digital signature operation on said digital data, and

processing means for executing said sequence of digital program instructions and for transmitting said sequence of digital program instructions to said next destination; and

a second computer including;

a memory for receiving and for storing the received sequence of digital program instructions and accompanying data transmitted from said first computer including

     1) instructions which determine any next destination for transmitting said sequence of instructions together with its accompanying data, and

     2) instructions for logically constructing digital data to be signed, and for selectively performing a digital signature operation on said digital data, and

processing means for executing said received sequence of digital program instructions to thereby determine any next destination for said sequence of digital instructions.

23. A system according to claim 22, wherein said processing means includes means for acquiring data from a user at at least one of said plurality of computers, and

means for translating the acquired data by said sequence of program instructions into a predefined data structure conforming to a recognized standard.

24. In a communications system having at least one digital computer and a plurality of destinations within said communications system at which users perform digital signatures, a method for handling digital signatures comprising the steps of:

providing a sequence of digital instructions to control the management of digital signatures, including instructions which;

determine digital values,

control creation of a digital signature value based on determined digital values, and

determine a next destination;

executing in at least one digital computer at least one of said instructions to determine a first digital value to be digitally signed;

executing in at least one digital computer at lest one of said instructions to control the creation of a digital signature value computed on said first digital value;

executing in at least one digital computer at least one of said instructions to determine a next destination;

transmitting to said next destination digital information including said sequence of digital instructions;

executing in at least one of said computers at least one of said instructions to determine a further next destination; and

transmitting to said further next destination, digital information including said digital signature value.

25. A method according to claim 24, wherein said information transmitted to said further next destination does not include said sequence of digital instructions.

26. A method according to claim 24, wherein each of said plurality of destinations includes a digital computer.