Unique digital signature

• US 6,085,321 A
• Filed: 08/14/1998
• Issued: 07/04/2000
• Est. Priority Date: 08/14/1998
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Omnipoint Corp. (Deutsche Telekom AG)
• Inventors: Roeder, G. R. Konrad, Gibbs, Benjamin K.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): SONG, HOSUK
• Application Number:
  US09/134,133
• Time in Patent Office: 690 Days
• Field of Search: 380/23, 380/25, 380/49, 380/30, 713/200, 713/162, 713/168, 713/170, 713/180, 713/181, 705/80, 705/12, 705/76, 705/77
• US Class Current: 713/170
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method and apparatus for a unique digital signature is provided. According to one aspect of the invention, a unique digital signature comprises an adapted digital signature and a service id. The adapted digital signature provides temporary or restricted privileges for a particular electronic service. In one embodiment, the electronic service is electronic message forwarding. In another embodiment, the electronic service is electronic media delivery. An authentication log file is maintained for recording status information concerning unique digital signatures.

Claims

1. A method for generating a unique digital signature comprising:

receiving a request for said unique digital signature;

incrementing an index number corresponding to a system key;

executing a one-way hash function, using said index number and said system key as inputs, said one-way hash function producing a hash value in a first digital format;

transforming said hash value in said first digital format into a second digital format, and using said transformed hash value in said second digital format as an adapted digital signature;

concatenating said adapted digital signature and said service id to form said unique digital signature; and

returning said unique digital signature.

2. The method of claim 1, further comprising:

testing said index number against a maximum index number;

if said index number is greater than said maximum index number, then;

incrementing a system key number;

generating a new value for said system key;

storing said new value for said system key in an authentication log file; and

resetting said index number.

3. The method of claim 1, wherein said adapted digital signature can be successfully authenticated only a fixed number of times.

4. The method of claim 3, wherein said system key is not shared with a remote electronic message system.

5. A method for authenticating a unique digital signature comprising:

extracting an adapted digital signature and a service id from said unique digital signature;

testing said service id to ensure said service id is valid;

verifying said adapted digital signature is valid by;

retrieving a system key from a plurality of system keys;

hashing said system key with an index number to form a hash value;

converting said hash value from a binary format into a second digital format;

comparing said hash value in said second digital format with said adapted digital signature;

incrementing said index number; and

repeating said act of hashing if said hash value in said second digital format and said adapted digital signature do not match; and

in response to said act of verifying;

setting an indicator in an authentication log file, said indicator designating said index number and said system key combination as used; and

granting access to an electronic service corresponding to said service id.

6. The method of claim 5, in response to said act of verifying, if said adapted digital signature is not valid, then further performing the acts of:

recording failure information into a failure log file; and

denying access to said electronic service.

7. The method of claim 5, further comprising receiving an electronic message, said electronic message comprising a message body and a message header, said message header comprising said unique digital signature.

8. The method of claim 5, wherein said electronic service includes an electronic messaging service, said electronic messaging service configured to respond to receipt of said unique digital signature by sending a reply message including media to a remote user that sent said unique digital signature.

9. The method of claim 5, wherein said electronic service includes a wireless short message service message, and said wireless short message service configured to respond to receipt of said unique digital signature by forwarding a message to a wireless receiver corresponding to said unique digital signature.

10. The method of claim 5, wherein said electronic service includes an electronic voting system, and said electronic voting system configured to respond to receipt of said unique digital signature by recording a vote corresponding to said unique digital signature.

11. The method of claim 5, wherein said adapted digital signature can be successfully authenticated only a fixed number of times.

12. The method of claim 11, wherein said system key is not shared with a remote electronic message system.

13. The method of claim 5, further comprising:

testing a memory location identified by said system key and said index number, prior to said step of verifying said adapted digital signature; and

rejecting said unique digital signature if said memory location indicates that said system key and said index number combination has been used.

14. A computer readable medium having stored therein one or more sequences of instructions for generating a unique digital signature, said one or more sequences of instructions causing one or more processors to perform a plurality of acts, said acts comprising:

receiving a request for a unique digital signature;

incrementing an index number corresponding to a system key;

executing a one-way hash function, using said index number and said system key as inputs, said one-way hash function producing a hash value in a first digital format;

transforming said hash value in said first digital format into a second digital format, and using said transformed hash value in said second digital format as an adapted digital signature;

concatenating said adapted digital signature and said service id to form said unique digital signature; and

returning said unique digital signature.

15. The computer readable medium of claim 14, further comprising:

testing said index number against a maximum index number;

if said index number is greater than said maximum index number, then;

incrementing a system key number;

generating a new value for said system key;

storing said new value for said system key in an authentication log file; and

resetting said index number.

16. The computer readable medium of claim 14, wherein said adapted digital signature can be successfully authenticated only a fixed number of times.

17. The computer readable medium of claim 16, wherein said system key is not shared with a remote electronic message system.

18. A computer readable medium having stored therein one or more sequences of instructions for authenticating a unique digital signature, said one or more sequences of instructions causing one or more processors to perform a plurality of acts, said acts comprising:

extracting an adapted digital signature and a service id from said unique digital signature;

testing said service id to ensure said service id is valid;

verifying said adapted digital signature is valid by;

retrieving a system key from a plurality of system keys;

hashing said system key with an index number to form a hash value;

converting said hash value from a binary format into a second digital format;

comparing said hash value in said second digital format with said adapted digital signature;

incrementing said index number; and

repeating said act of hashing if said hash value in said second digital format and said adapted digital signature do not match; and

in response to said act of verifying;

setting an indicator in an authentication log file, said indicator designating said index number and said system key combination as used; and

granting access to an electronic service corresponding to said service id.

19. The computer readable medium of claim 18, wherein in response to said act of verifying, if said adapted digital signature is not valid, then further comprising:

recording failure information into a failure log file; and

denying access to said electronic service.

20. The computer readable medium of claim 18, further comprising receiving an electronic message, said electronic message comprising a message body and a message header, said message header comprising said unique digital signature.

21. The computer readable medium of claim 18, wherein said electronic service includes an electronic messaging service, said sequences of instructions configured to cause said electronic messaging service to respond to receipt of said unique digital signature by sending a reply message including media to a remote user that sent said unique digital signature.

22. The computer readable medium of claim 18, wherein said electronic service includes a wireless short message service, said sequences of instructions configured to cause said wireless short message service to respond to receipt of said unique digital signature by forwarding a message to a wireless receiver corresponding to said unique digital signature.

23. The computer readable medium of claim 18, wherein said electronic service includes an electronic voting system, said sequences of instructions configured to cause said electronic voting system to respond to receipt of said unique digital signature by recording a vote corresponding to said unique digital signature.

24. The computer readable medium of claim 18, wherein said adapted digital signature can be successfully authenticated only a fixed number of times.

25. The computer readable medium of claim 24, wherein said system key is not shared with a remote electronic message system.

26. The method of claim 24, further comprising:

testing a memory location identified by said system key and said index number, prior to said step of verifying said adapted digital signature; and

rejecting said unique digital signature if said memory location indicates that said system key and said index number combination has been used.