Method of extending the validity of a cryptographic certificate

• US 5,373,561 A
• Filed: 12/21/1992
• Issued: 12/13/1994
• Est. Priority Date: 12/21/1992
• Status: Expired due to Term

• Current Assignee: Surety, LLC
• Original Assignee: Bell Communications Research, Inc. (Telefonaktiebolaget LM Ericsson)
• Inventors: Haber, Stuart A., Stornetta, Wakefield S. Jr.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/992,883
• Time in Patent Office: 722 Days
• Field of Search: 380/3-5, 380/9, 380/10, 380/23, 380/24, 380/25, 380/28, 380/30, 380/49, 380/50
• US Class Current: 713/157
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A cryptographic certificate attesting to the authenticity of original document elements, such as time of creation, content, or source, will lose its value when the cryptographic function underlying the certifying scheme is compromised. The present invention provides a means for extending the reliability of such a certificate by subjecting, prior to any such compromise, a combination of the original certificate and the document digital representation from which that certificate was derived to a scheme based on a different and ostensibly less vulnerable function. The new certificate resulting from this procedure extends the validity of the original authenticity by implacably incorporating the original certificate at a time when that certificate could only have been derived by legitimate means.

Claims

1. A method of extending the validity of a first cryptographic certificate derived by applying a first cryptographic function to a digital document, which method comprises:

a) combining a digital representation of said document with a digital representation of said certificate; and

b) applying to the resulting combination during the valid term of said first certificate a different cryptographic function to thereby generate a second certificate attesting to the then current validity of said first certificate.

2. A method according to claim 1 wherein said first function is a cryptographic signature scheme.

3. A method according to claim 2 wherein said different function is a time-stamping procedure.

4. A method according to claim 3 wherein said different function comprises a one-way hashing algorithm.

5. A method according to claim 1 wherein said first function is a time-stamping procedure.

6. A method according to claim 5 wherein said first function comprises a one-way hashing algorithm.

7. A method according to claim 5 wherein said different function is a time-stamping procedure.

8. A method according to claim 7 wherein said first function comprises a first one-way hashing algorithm and said different function comprises a different one-way hashing algorithm.

9. A method according to claim 1 wherein said different function is a time-stamping procedure.

10. A method of certifying a digital representation of a document which comprises:

a) generating a first certificate by applying to said digital representation at least a first cryptographic function;

b) combining said first certificate with said digital representation; and

c) generating a second certificate by applying to said combination at least one cryptographic function which is different from said first function.

11. A method according to claim 10 wherein said first function is a cryptographic signature scheme.

12. A method according to claim 11 wherein said different function is a time-stamping procedure.

13. A method according to claim 12 wherein said different function comprises a one-way hashing algorithm.

14. A method according to claim 10 wherein said first function is a time-stamping procedure.

15. A method according to claim 14 wherein said first function comprises a one-way hashing algorithm.

16. A method according to claim 14 wherein said different function is a time-stamping procedure.

17. A method according to claim 16 wherein said first function comprises a first one-way hashing algorithm and said different function comprises a different one-way hashing algorithm.

18. A method according to claim 10 wherein:

a) said first certificate is generated by applying to said digital representation at least first and second different cryptographic functions; and

b) said second certificate is generated by applying to said combination at least one cryptographic function which is different from said first and second functions.

19. A certificate authenticating a digital representation of a document, said certificate consisting of a second certificate generated according to the method of claim 10.

20. A certificate according to claim 19 wherein:

a) said first certificate is generated by applying to said digital representation at least first and second different cryptographic functions; and

b) said second certificate is generated by applying to said combination at least one cryptographic function which is different from said first and second functions.