Method for securely storing electronic records

• US 5,619,571 A
• Filed: 06/01/1995
• Issued: 04/08/1997
• Est. Priority Date: 06/01/1995
• Status: Expired due to Fees

• Current Assignee: Ernest R. Ewert, Robert D. Reisch, Sandstrom, Brent B.
• Original Assignee: Ernest R. Ewert, Robert D. Reisch, Sandstrom, Brent B.
• Inventors: Sandstrom, Brent B., Ewert, Ernest R., Reisch, Robert D.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/457,835
• Time in Patent Office: 677 Days
• Field of Search: 380/4, 380/23-25, 395/186-188.01, 395/490, 395/491
• US Class Current: 380/200
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 2201/3214 of a date
• CPC Class Codes: H04N 2201/3215 of a time or duration
• CPC Class Codes: H04N 2201/3225 of data relating to an image, a page or a document
• CPC Class Codes: H04N 2201/3226 of identification information or the like, e.g. ID code, index, title, part of an image, reduced-size image
• CPC Class Codes: H04N 2201/3236 Details of authentication information generation
• CPC Class Codes: H04N 2201/3243 of type information, e.g. handwritten or text document
• CPC Class Codes: H04N 2201/3277 The additional information being stored in the same storage device as the image data

Abstract

An improved method of storing or retrieving electronic records. An image identification code and time data provided by a trusted source, as well as a password, are combined to generate a key. The image identification code and time data are stored in a public directory associated with the image data stream. Further, attributes of the image stream, such as its size and a hash of at least a segment of the image data, are determined. The attributes are then used to generated a verification code. The verification code is placed in a private area associated with the data image stream, and the private area is encrypted with the previously generated key.

Claims

1. A method for a computer to store an image data stream on a medium, comprising, in combination:

receiving an image identification code and time data from at least one trusted source;

combining said time data and image identification code to generate a key;

creating an associated directory and inserting said time data and image identification code into said associated directory;

generating a verification code from said image data stream;

creating a private area and inserting said verification code into said private area;

encrypting said private area with said key; and

storing said image data stream, associated directory, and private area on said medium.

2. A method as claimed in claim 1 wherein said key is comprised of said image identification code, time data, and a password.

3. A method as claimed in claim 2 wherein said password is substantially fixed.

4. A method as claimed in claim 2 wherein said password supplied by a user.

5. A method as claimed in claim 1 wherein said image data stream defines an image data size and said verification code includes a number corresponding to said image data size.

6. A method as claimed in claim 1 wherein said verification code includes a number corresponding to a hash of a segment of said image data stream.

7. A method as claimed in claim 1 wherein said verification code includes a number corresponding to a hash of said image data stream.

8. A method as claimed in claim 1 wherein said image data stream is recorded on said medium in a tagged image file format.

9. A method as claimed in claim 1 wherein a header is created for said image data stream, said header includes a pointer to an associated directory, and said associated directory includes a pointer to said private area.

10. A method as claimed in claim 8 wherein said image data stream is recorded according to a CCITT Group 4 Standard.

11. A method as claimed in claim 1 wherein said time data comprises a calendar and clock designation of when said image data stream is recorded on said medium.

12. A method as claimed in claim 1 wherein said trusted source comprises a remote computer interconnected to said computer with a digital transmission facility.

13. A method as claimed in claim 1 wherein said time data comprises a clock designation of when said image data stream is recorded on said medium.

14. A method as claimed in claim 13 further comprising:

detecting a changed image data stream;

receiving a new image identification code and new time data from said at least one trusted source for said changed image data stream;

combining said new time data and new image identification code to generate a new key;

inserting said new key into said associated directory;

generating a new verification code from said changed image data stream;

inserting said new verification code into said private area;

encrypting said private area with said new key; and

storing said changed image data stream, associated directory, and private area on said medium, whereby said key and new key provide an audit trail for changes to said image data stream.

15. A method as claimed in claim 14 further comprising

detecting how said image data stream was changed to make said changed image data stream;

and

storing in said associated directory an indication of how said image data was changed.

16. A method for a computer to store an image data stream on a medium, and comprising, in combination:

receiving time data and image identification code from at least one trusted source;

receiving a password from a user;

combining said time data, image identification code, and password to generate a key;

creating an associated directory and adding said time data and image identification code to said associated directory;

generating a verification code from said image data stream;

creating a private area and inserting said verification code into said private area;

encrypting said private area with said key;

encrypting at least a portion of said image data stream with said key to develop a ciphertext;

recording said ciphertext, associated directory, and private area on said medium.

17. A method as claimed in claim 16 wherein said ciphertext defines an image data size and said verification code includes a number corresponding to said image data size.

18. A method as claimed in claim 16 wherein said verification code includes a number corresponding to a hash of a segment of said ciphertext.

19. A method as claimed in claim 16 wherein said verification code includes a number corresponding to a hash of said ciphertext.

20. A method as claimed in claim 16 wherein said image data stream is recorded on said medium in a tagged image file format.

21. A method as claimed in claim 20 wherein a header is created for said image data stream, said header includes a pointer to said associated directory, and said associated directory includes a pointer to said private area.

22. A method as claimed in claim 16 wherein said image data stream is recorded according to a CCITT Group 4 Standard.

23. A method as claimed in claim 16 wherein said time data comprises a calendar and clock designation of when said ciphertext is filed on said electronic medium.

24. A method as claimed in claim 16 wherein said trusted source comprises a remote computer interconnected to said computer with a digital transmission facility.

25. A method as claimed in claim 16 wherein said trusted source comprises a global positioning system.

26. A method as claimed in claim 16 wherein said trusted source provides location data to said computer and said computer adds said location data to said private area.

27. A method as claimed in claim 26 wherein said location data includes a latitude and longitude designation for said computer.

28. A method as claimed in claim 27 wherein said location data includes a height designation relative to sea level.

29. A method as claimed in claim 16 wherein said trusted source provides a precise time designation to said computer, said precise time designation representing clock time in increments of less than a second, and wherein said computer inserts said precise time designation into said private area.

30. A method as claimed claim 16 further comprising detecting a source of said image data stream and encoding an indication if said source in said associated directory.

31. A method for retrieving an image data stream on a medium, said medium including a public area associated with said image data stream, said public area having an image identification code, time data relating when said image data stream was recorded on said medium, and a pointer to a private area, said private area including a verification code corresponding to recorded parameters of a prior image data stream, comprising, in combination:

reading said public header;

decrypting said private area with a key comprised of said image identification code and time data;

reading said verification code in said private area;

reading said image data stream and determining new parameters of said image data stream;

comparing said new parameters of said data image stream with said recorded parameters of said prior image data stream; and

certifying said image data stream when said recorded parameters correspond to said old parameters.

32. A method as claimed in claim 31 wherein said key further includes a password supplied by a user.

33. A method as claimed in claim 31 wherein said image data stream defines an image data size and said verification code includes a number corresponding to said image data size.

34. A method as claimed in claim 31 wherein said verification code includes a number corresponding to a hash of a segment of said image data stream.

35. A method as claimed in claim 31 wherein said verification code includes a number corresponding to a hash of said image data stream.

36. A method as claimed in claim 31 wherein said image data stream is recorded on said medium in a tagged image file format.

37. A method as claimed in claim 36 wherein said image data stream is recorded according to a CCITT Group 4 Standard.

38. A method as claimed in claim 31 wherein new time data and a new image identification code are in said public area and a new verification code is in said private area, said new time data, identification, and verification codes corresponding to a changed data image stream, said method further comprising:

reading said new image identification code for said changed image data stream;

reading said new verification code for said changed image data stream; and

generating a statement corresponding to said time data and said new time data, whereby an audit trail for said changed data image stream is generated.

39. A method as claimed in claim 38 wherein said public area further includes an indication of how said image data stream was modified to make said changed image data stream and said method further comprises reading said indication and generating a statement how said image data stream was modified.

40. A method as claimed in claim 31 wherein the step of certifying said image data stream comprises publishing a notice of certification.

41. A method as claimed in claim 40 further comprising printing a copy of said image data stream and wherein the step of certifying said image data stream comprises publishing a notice of certification on said copy of said image data stream.