Creation and distribution of cryptographic envelope

• US 5,673,316 A
• Filed: 03/29/1996
• Issued: 09/30/1997
• Est. Priority Date: 03/29/1996
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Auerbach, Joshua Seth, Chow, Chee-Seng, Crigler, Jeffrey Charles, Kaplan, Marc Adam
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/625,475
• Time in Patent Office: 550 Days
• Field of Search: 380/3, 380/4, 380/23, 380/24, 380/25, 380/28, 380/49
• US Class Current: 705/51
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: G11B 2220/2537 Optical discs
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method and apparatus to create, distribute, sell and control access to digital documents using secure cryptographic envelopes. An envelope is an aggregation of information parts, where each of the parts to be protected are encrypted with a corresponding part encryption key. These encrypted information parts along with the other information parts become part of the envelope. Each part encryption key is also encrypted with a public key, and these encrypted part encryption keys are also included in the envelope. The envelope also includes a list of parts where each entry in the list has a part name and a secure hash of the named part. The list is then signed with a secret key to generate a signature, which is also included in the envelope. The signature can be verified using a second public key associated with first secret key, and the integrity of any information part in the envelope can be checked by computing a second hash and comparing it with the corresponding hash in the list of parts. Also, the information content of any encrypted part can only be recovered by knowledge of a second secret key corresponding to the public key that was used to encrypt the part encryption keys.

Claims

1. A method of creating a cryptographic envelope, which can be distributed arbitrarily to a plurality of users, said envelope being a digital document which is an aggregation of information parts, said method comprising:

a. encrypting one of said information parts with a part encryption key to produce an encrypted part, which is included in said envelope;

b. encrypting said part encryption key with a first public key to produce an encrypted part encryption key, which is included in said envelope;

c. creating a list of parts that are included in said envelope, each entry in said list comprising a part name and a secure hash of said named part, said list also being included in said envelope; and

d. signing said list with a first secret key to produce a signature, which is included in said envelope,

wherein the integrity of said list can be checked using a second public key associated with said first secret key to verify said signature, and wherein the integrity of any one part of said envelope can be checked by computing a second secure hash of said one part and comparing said second hash with its corresponding hash in said list, and wherein the information content of said encrypted part is protected from disclosure and can only be recovered with said part encryption key, and wherein said part encryption key can be recovered by decryption of said encrypted part encryption key using a second secret key corresponding to said first public key.

2. A method as recited in claim 1, further comprising the step of modifying selected ones of said parts of said document by insertions, deletions or changes of selected words or bits in said selected parts and maintaining state information associating each modified document part with its modifications to recover a respective unmodified document.

3. A method as recited in claim 2, wherein said modifications are applied to said selected ones of said parts before said encryption of said part, wherein said state information is encrypted using a third part encryption key, which is encrypted with a third public key.

4. A method as recited in claim 1, wherein said cryptographic envelope contains a computer program, which is to be executed at a server and the result of said execution determines subsequent operations by said server.

5. A method as recited in claim 4, wherein said program describes the terms and conditions on the access of said information parts in said cryptographic envelope, and wherein said execution determines whether access to said information parts is granted.

6. A method as recited in claim 4, wherein said program comprises instructions to modify each document part, wherein each part is modified by insertions, deletions, or changes of selected words or bits in each part, and wherein state information associating each modified document part with its modifications is maintained to recover a respective unmodified document.

7. A method of providing access to content data in a cryptographic envelope, said method comprising:

a. transmitting a request from a user to a server, said request being a request to access a part of said cryptographic envelope, said request comprising at least an encrypted part encryption key which is a public key encryption of a key used to encrypt said part;

b. transmitting a response, in response to said request, from said server to said user, said response being a transformation of said encrypted part encryption key, said transformation being generated by;

decrypting said encrypted part encryption key using a secret key associated with said public key, and

encrypting said part encryption key using a second public key; and

decrypting said transformed key using said secret key into said part encryption key, wherein said selected part is decrypted into clear text using said part encryption key, thereby providing access to said user.

8. In a communications network having a server with electronic access to a plurality of terminals, a method of authorizing access to selected content data, said cryptographic envelope being created by:

a. creating a cryptographic envelope, which can be distributed arbitrarily to a plurality of users, said envelope being a digital document which is an aggregation of information parts, said method comprising;

(i) associating a part encryption key for each of said parts to be protected, wherein one of said parts contains said selected content data;

(ii) encrypting each of said parts to be protected with its associated part encryption key;

(iii) encrypting each said part encryption key with a public key to form an encrypted part encryption key for each of said part encryption keys;

(iv) creating a list of parts, each entry in said list containing a part name for one of said parts, a secure hash for said one part, and

(v) signing said list with a secret key to produce a signature, wherein said cryptographic envelope is the aggregation of;

said signature, said list, said encrypted part encryption keys, said encrypted parts, and those of said information parts which have not been encrypted; and

b. when a user in possession of a copy of said cryptographic envelope desires to access said selected content data said access being given by;

(i) transmitting a request from said user to a server, said request being a request to access a part of said cryptographic envelope, wherein latter said part contains said selected content data, said request comprising at least an encrypted part encryption key which is a public key encryption of an encryption key used to encrypt latter said part;

(ii) transmitting a response, in response to said request, from said server to said user, said response comprising a transformation of said encrypted part encryption key in said request, said transformation being generated by;

decrypting said encrypted part encryption key in said request using a secret key associated with said public key of step b (1), encrypting said part encryption key in said request using a second public key; and

decrypting said transformed key using said secret key associated with said second public key into said part encryption key in said request, wherein said selected part is decrypted into clear text using said part encryption key in said request, thereby providing access to said user.