System and method for verifying signatures on documents

• US 6,081,610 A
• Filed: 12/29/1995
• Issued: 06/27/2000
• Est. Priority Date: 12/29/1995
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Pestoni, Florian, Naor, Moni, Dwork, Cynthia
• Primary Examiner(s): Mancuso, Joseph
• Application Number:
  US08/586,020
• Time in Patent Office: 1,642 Days
• Field of Search: 282/119, 282/120, 282/121, 282/122, 282/123, 282/137, 282/140, 280/3, 280/4, 280/23, 280/30, 280/25, 280/21
• US Class Current: 382/119
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G07C 9/35 by means of a handwritten signature
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/127 in which both online and offline card verification can take place

Abstract

A system and method are provided for producing verified signatures on documents such as checks and affidavits. Initially, a customer who is to obtain a verified signature, at some point in time, registers with a signatory authority, and a secret key, having public and private components, is established uniquely for that customer. When a document requires a verified signature, the customer presents the document and proof of his/her identity, such as a preprogrammed computer-interfacable card, to a signature system. Typically, such a system is to be available at an institution, such as an office, bank, or post office, where such services will routinely be used. The system accesses the archive of the private portion of the customer'"'"'s key, and generates an encoded signature based, in part, on the content of the document. Accordingly, when a recipient of the document later wishes to verify the signature, the recipient uses the customer'"'"'s public key to decode the signature. It is then straightforward to verify the signature against the content of the document.

Claims

1. A signature verification method for use with a hardcopy document which is to bear a signature by a customer, the customer having a secure private key, the customer'"'"'s private key corresponding with a publicly available public key, the method comprising the steps of:

generating a digital signature, employing the customer'"'"'s private key;

the signature being based on the content of the hard-copy document, the step of generating employing an existentially unforgeable signature scheme

associating the signature with the hard-copy document;

decoding the signature based on the customer'"'"'s public key, thereby verifying that the customer signed the hard-copy document because the customer'"'"'s private key was used; and

verifying the content of the hard-copy document against the decoded signature, thereby verifying that the signature was made for the hard-copy document.

2. A signature verification method as recited in claim 1, wherein the step of maintaining a database of keys includes the steps of:

generating a key; and

notarizing the key.

3. A signature verification method as recited in claim 2, wherein:

(i) the step of maintaining a database of keys includes the steps, executed for a customer, of;

generating a key pair including a private key and a public key,

storing the private key in a secure way, and

outputting the public key as a two-dimensional code; and

(ii) the step of notarizing includes the steps of;

presenting the two-dimensional code and proof of the customer'"'"'s identity to an authority, the authority having a private key,

generating a two-dimensional encoding of the key presented, the encoding including a signature of the private key of the authority, and

presenting the two-dimensional encoding of the key presented, signed with the private key of the authority, as a receipt to the customer.

4. A signature verification method as recited in claim 2, wherein the step of (iii) outputting includes outputting the public key as a two-dimensional code signed using a predetermined system key.

5. A signature verification method as recited in claim 1, wherein the step of generating a digital signature includes establishing the customer'"'"'s identity.

6. A signature verification method as recited in claim 5, wherein:

the step of maintaining a database of keys includes issuing the customer an identity card programmed with information regarding the customer'"'"'s identity; and

the step of establishing the customer'"'"'s identity includes;

(i) establishing an interface between the identity card and a signature system having an identity card interface and a user interface, and

(ii) the user interactively performing an identification procedure, using the user interface, wherein the user'"'"'s identity is established based on the programming of the identity card.