Data validation

• US 6,065,119 A
• Filed: 05/30/1997
• Issued: 05/16/2000
• Est. Priority Date: 05/30/1997
• Status: Expired due to Fees

• Current Assignee: Los Alamos National Security LLC (Government of the United States of America)
• Original Assignee: Regents of the University of California (University of California)
• Inventors: Handel, Theodore G., Sandford, Maxwell T. II
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): ELISCA, PIERRE E
• Application Number:
  US08/865,826
• Time in Patent Office: 1,082 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 395/200.59, 380/25, 380/30
• US Class Current: 726/22
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04N 1/32144 embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp
• CPC Class Codes: H04N 2201/323 for tracing or tracking, e.g. forensic tracing of unauthorized copies

Abstract

A method of authenticating digital data such as measurements made for medical, environmental purposes, or forensic purpose, and destined for archival storage or transmission through communications channels in which corruption or modification in part is possible. Authenticated digital data contain data-metric quantities that can be constructed from the digital data by authorized persons having a digital key. To verify retrieved or received digital data, the data-metrics constructed from the retrieved or received data are compared with similar data-metrics calculated for the retrieved or received digital data. The comparison determines the location and measures the amount of modification or corruption in the retrieved or received digital data.

Claims

1. A method of validating digital data values comprising the steps of:

calculating first data-metrics that measure said digital data values completely, or in parts;

authenticating said digital data in the form of revisions made by data embedding methods to represent said digital data-metrics by means of modifications to said digital data values;

calculating second data-metrics for said digital data values after said digital data values are transmitted, archived, or opened to unauthorized modification;

constructing an independent version of said first data-metrics for said digital data values after said digital data values are transmitted, archived, or opened to unauthorized modification by means of constructing said first data-metrics using said data embedding methods;

comparing said calculated second data-metric with said constructed independent version of said first data-metric to determine locations and amount of modifications or changes to said digital data values; and

outputting said locations and amount of modifications to said digital data values as verification quantities to a data port or file.

2. The method as described in claim 1 further comprising the step of combining said first data-metric with predetermined information indicative of separation of said first data-metric into packets containing a sequence number, a checksum, and a portion of said data-metric.

3. The method as described in claim 2 further comprising the step of compressing said first data-metric packet prior to embedding said first data-metric packet into said digital data values.

4. The method as described in claim 1 of embedding said first data-metrics in said digital-data values according to a specified sequence compatible with said data embedding methods in a linear or spatial distribution.

5. The method as described in claim 1, wherein said digital data values comprise integer data digitized from an analog sensor.

6. The method as described in claim 1, wherein said digital data values comprise floating-point data digitized from an analog sensor.

7. The method as described in claim 1, wherein said digital data values comprise digital data values presented to software or hardware from an unknown source.

8. The method as described in claim 1, wherein said digital data values relate to identification of individuals by means of physiological or bio-molecular measurements.

9. The method as described in claim 1, wherein said digital data values relate to the diagnosis of disease, aging, or injury.

10. The method as described in claim 1, wherein said digital data values comprise measurements made as records for environmental monitoring or measurement.

11. The method as described in claim 1, wherein said digital data values comprise measurements made or retained for purposes of a forensic analysis.

12. The method as described in claim 1, wherein said digital data values comprise measurements made as records used for purposes of litigation or evidence.

13. The method as described in claim 1, wherein said digital data values comprise digital multimedia information.

14. Apparatus for authenticating digital data values that can be serialized to a sequence of individual digital-data element values comprising:

data authentication means receiving said individual digital-data element values in an ordered sequence for calculating data-metrics and embedding pair-candidate values and for outputting said data-metrics and said embedding pair-candidate values;

data embedding means receiving said data-metrics, said embedding pair candidate values and said individual digital-data element values in an ordered sequence for embedding said data-metrics and said embedding pair candidate values into said individual digital-data element values in said ordered sequence and outputting authenticated digital-data values.

15. The apparatus as described in claim 14 wherein said data authentication means and said data embedding means are contained within a chipset.

16. The apparatus as described in claim 14 wherein said data authentication means and said data embedding means are implemented with discrete components in circuit board circuitry.

17. Apparatus for constructing data-metrics from a key-pair table embedded into individual frames of digital-data values presented in sequence comprising:

data-metric construction means receiving said key-pair table and said individual frames of digital-data values and outputting a bitstream corresponding to a first data-metric embedded into said individual frames of digital-data values;

data-metric means receiving said individual frames of digital data values for calculating a second data- metric and outputting said second data-metric;

data verification means receiving said bitstream corresponding to said first data-metric and said second data-metric for comparing said first data-metric with said second data-metric, and presenting said results of said comparison to an output port.

18. The apparatus as described in claim 17 wherein said data-metric construction means, said data-metric means and said data verification means are contained within a chipset.

19. The apparatus as described in claim 17 wherein said data-metric construction means, said data-metric means and said data verification means are implemented by discrete components in circuit board circuitry.

20. The apparatus as described in claim 17 wherein said data-metric construction means, said data-metric means and said data verification means are implemented in software or firmware programming.