System and method for digitally signing a digital agreement between remotely located nodes

• US 6,219,423 B1
• Filed: 06/26/1996
• Issued: 04/17/2001
• Est. Priority Date: 12/29/1995
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Davis, Derek L.
• Primary Examiner(s): Buczinski, Stephen C.
• Application Number:
  US08/678,360
• Time in Patent Office: 1,756 Days
• Field of Search: 380/25, 380/268, 364/225, 364/918, 395/218, 705/37, 705/53, 705/67, 705/75
• US Class Current: 380/268
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A digital arbitration system comprising a server node and at least one signatory node coupled together through a communication link. Each of the signatory node(s) may be configured with a unique private key which is used to digitally sign a message, a hash value of an electronic document for example, and transmits the digitally signed message being a digital signature to the server node via the communication link. The server node determines whether the digital signatures have been received from at least one of the signatory node(s) and whether each of the digital signatures is valid. The server node then transmits all of the digital signatures to each of the signatory node(s), provided both conditions described have been met.

Claims

1. A server comprising:

a bus;

a host processor coupled to the bus;

a memory element coupled to the bus; and

a cryptographic device coupled to the bus, the cryptographic device including

a processing unit, and

a memory element accessible by the processing unit, the memory element to store at least a public key, a private key and arbitration software which, when executed by the processing unit, determines whether each of a plurality of digitally signed messages is valid, and returns the plurality of digitally signed messages to each of a plurality of parties upon determining that each of the plurality of messages is valid, each of the plurality of digitally signed messages further includes a list of signatures associated with the digitally signed message and either (i) an electronic document, or (ii) a hash value of the cryptographic device.

2. The server according to claim 1, wherein the cryptographic device is dedicated to exclusively operate as control arbitration between the plurality of parties.

3. The server of claim 1, wherein the cryptographic device further comprises an internal random number generator contained within the package, the random number generator to generate information to produce the public key and the private key.

4. The server of claim 1, wherein the arbitration software of the cryptographic device is non-modifiable.

5. The server of claim 1, further comprising an input to receive the plurality of digitally signed messages from a plurality of signatory nodes corresponding to the plurality of parties.

6. The server of claim 1, wherein the arbitration software of the cryptographic device is non-modifiable by a user.

7. A server to arbitrate execution of a digital agreement involving a plurality of parties, the server comprising:

a bus;

a memory element coupled to the bus, the memory element containing software to respond to an authentication message and to arbitrate execution of the digital agreement; and

a host processor coupled to the bus, the host processor executing the software to at least determine whether a plurality of digitally signed messages from the corresponding plurality of parties arc valid and to provide the plurality of digitally signed messages to each of a plurality of parties when each of the plurality of messages is deemed to be valid, each of the plurality of digitally signed messages further includes a list of signatures associated with the digitally signed message and either (i) an electronic document, or (ii) a hash value of the cryptographic device.

8. The server of claim 7, further comprising a random number generator coupled to the bus.

9. A computer comprising:

a memory element containing software to respond to an authentication message and to arbitrate execution of a digital agreement; and

a processor coupled to the memory element, the processor executing the software to at least determine whether a plurality of digitally signed messages from a corresponding plurality of parties are valid and to provide the plurality of digitally signed messages to each of the plurality of parties when each of the plurality of messages is deemed to be valid, at least one of the plurality of digitally signed messages includes a list of signatories associated with the at least one digitally signed message.

10. The computer of claim 9, wherein the message includes either an electronic document or a hash value of the electronic document.

11. The computer of claim 9, further comprising a random number generator.

12. The computer of claim 9, wherein the processor is a general purpose microprocessor.

13. A method for digitally signing a digital agreement between a plurality of signatory nodes, comprising:

receiving a query at an arbitration node by at least one signatory node, the query requesting information regarding a configuration of a cryptographic device situated in the arbitration node;

receiving at the arbitration node a digital signature and a signatory list from each signatory node of the plurality of signatory nodes, each digital signature including a hash value of the digital agreement signed with a private key associated with its signatory node; and

producing an acknowledgement for each signatory node of the plurality of signatory nodes upon confirmation that the digital agreement has been digitally signed by the plurality of signatory nodes.

14. The method of claim 13, wherein prior to producing the acknowledgement, the method comprises receiving a copy of the digital agreement.

15. The method of claim 14, wherein prior to producing the acknowledgement, the method comprises:

comparing the signatory lists from each of the plurality of signatory nodes;

if the signatory lists compare, recovering a hash value of the digital agreement for each digital signature provided by the plurality of signatory nodes using public keys associated with one of the signatory lists; and

performing a hash operation on the copy of the digital agreement to produce a resultant hash value;

comparing the resultant hash value with a hash value recovered from each digital signature; and

producing the acknowledgement if the resultant hash value matches each hash value recovered from the digital signatures.