Secure electronic forms permitting layout revision

• US 6,028,938 A
• Filed: 12/03/1996
• Issued: 02/22/2000
• Est. Priority Date: 04/30/1996
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: Shana Corp. (International Business Machines Corporation)
• Inventors: Perman, Charles David, Malkin, Wayne Allan
• Primary Examiner(s): Hayes, Gail O.
• Assistant Examiner(s): Tucker, Christopher M.
• Application Number:
  US08/760,002
• Time in Patent Office: 1,176 Days
• Field of Search: 707/505, 707/507, 707/517, 707/522, 707/523
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

Techniques for ensuring the security of forms data are disclosed. The layout for a particular form is signed separately from the data used to fill out the form using encryption techniques. The signed data is related to the signed layout in a way which permits the layout to be changed without requiring the data to be changed while still guaranteeing that a changed layout does not change the original meaning of the signed data.

Claims

1. A method of storing forms, comprising the steps of:

a. storing at least one form layout;

b. applying a layout originator'"'"'s signature to said form layout; and

c. separately storing form data containing the layout originator'"'"'s signature applied to said form layout.

2. The method of claim 1 further comprising storing a data entry person'"'"'s signature of said form data using encryption.

3. The method of claim 2 further comprising validating one of said layout originator'"'"'s signature and said data entry person'"'"'s signature using a public key infrastructure.

4. The method of claim 3 in which said public key infrastructure is controlled by a trusted third party.

5. The method of claim 1 in which said form layout and said form data are linked by a common schema.

6. The method of claim 5 in which said one form layout is replaced by a different form layout based on said common schema.

7. A method of retrieving form data, comprising the steps of:

a. retrieving a form layout;

b. retrieving form data which contains a reference to a version of said form layout; and

c. associating values of data elements of said form data with corresponding data elements of said version of said form layout.

8. The method of claim 7 in which at least one of said layout and said form data is signed using encryption.

9. The method of claim 7 further comprising editing said values of data elements.

10. The method of claim 9 further comprising:

storing edited values of data elements in revised form data; and

signing said revised form data together with said reference to a version of said form layout.

11. Apparatus for processing form data, comprising:

a. a processor;

b. data storage connected to said processor, said data storage storing at least one form layout and data, said data including a signature applied to the form layout, for filling in at least one instance of said form layout.

12. Apparatus of claim 11, in which said data is signed.

13. Apparatus of claim 12 in which said processor is configured to verify the authenticity of a signature applied to one of said form layout and said data.

14. Apparatus of claim 13 in which said processor is configured to verify the authenticity of a signature applied to one of said form layout and said data before permitting the use of said data with said form layout.

15. A system for processing form data comprising:

a. a server having a database storing at least one form layout and separately storing at least one record containing form data for filling in at least one instance of a form layout and a signature applied to said form layout;

b. a client process running on a computer; and

c. a network connecting said computer to said server;

in which said client process is configured to request a copy of a record to be associated with a copy of at least one form layout.

16. Apparatus of claim 15 in which said client process is configured to verify the authenticity of a signature to one of said form layout and said data.

17. Apparatus of claim 15 in which a trusted third party is connected to said network and provides information to verify the authenticity of signatures to form layouts and form data.

18. A computer program product, comprising:

a. a storage medium;

b. a computer program stored on said storage medium for processing form data stored on said medium comprising at least one of a form layout and form data; and

c. a layout originator'"'"'s signature applied to a form number and revision of said form layout stored in said storage medium.

19. The computer program product of claim 18 in which at least one of said form layout and form data are signed using encryption.

20. The computer program product of claim 19 in which said form layout comprises (1) layout information, (2) said form number and revision, and (3) said layout originator'"'"'s signature applied to the form number and revision.

21. The computer program product of claim 19 in which said form data comprises (1) data information, (2) said form number and revision, and (3) said layout originator'"'"'s signature applied to the form number and revision.

22. A method of storing forms, comprising the steps of:

storing at least one form layout;

storing a form number and revision;

storing a layout originator'"'"'s signature using encryption applied to said form number and revision; and

separately storing form data containing a reference to said form layout.

23. A method of filling in a secure form, comprising the steps of:

retrieving from the secure form a layout originator'"'"'s signature applied to a form layout;

verifying the layout originator'"'"'s signature applied to the form layout; and

filling in the secure form with form data using the form layout.

24. The method of claim 23, further comprising signing the form data and the layout originator'"'"'s signature.

25. The method of claim 24, further comprising signing a form number and revision of the form layout.

26. A method of verifying a filled in, secure form, comprising the steps of:

verifying a layout originator'"'"'s signature applied to a form number and revision of a form layout of the secure form; and

verifying a data entry person'"'"'s signature applied to form data of the filled in, secure form.

27. The method of claim 26, further comprising verifying a layout originator'"'"'s signature to the form layout for the secure form.

28. A method of authenticating a body of data, including a plurality of pieces of information, comprising:

storing the body of data, wherein one of the pieces of information includes an identifier of a related object;

applying a first signature to the body of data;

applying a second signature to the identifier of the related object; and

storing the signature of the identifier of the related object.

29. The method of claim 28, wherein:

the body of data comprises form data; and

the identifier of a related object comprises a form number of a form layout for the form data.

30. The method of claim 28, wherein storing the signature of the identifier of the related object includes storing the signature of the identifier as the one of the pieces of information.

31. A method for verifying a secure body of data, including a plurality of pieces of information, comprising:

accessing one of the pieces of information containing a signature applied to an identifier of a related object;

verifying the signature applied to the identifier of the related object; and

verifying another signature that is applied to the secure body of data.

32. The method of claim 31, wherein

the body of data comprises form data;

and

the identifier of a related object comprises a form number of a form layout for the form data.