Personal date/time notary device

• US 6,408,388 B1
• Filed: 07/30/1999
• Issued: 06/18/2002
• Est. Priority Date: 05/05/1993
• Status: Expired due to Term

• Current Assignee: Addison M. Fischer
• Original Assignee: Addison M. Fischer
• Inventors: Fischer, Addison M.
• Primary Examiner(s): Swann, Tod
• Assistant Examiner(s): Callahan, Paul E.
• Application Number:
  US09/363,744
• Time in Patent Office: 1,054 Days
• Field of Search: 380/259, 705/65, 705/66, 705/67, 705/72, 705/73, 713/155, 713/156, 713/159, 713/172, 713/173, 713/176, 713/178, 713/400
• US Class Current: 713/176
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/125 Offline card verification
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A personal data/time notary device is embodied in a token device such as a “smart card”. The portable notary device includes an input/output (I/O) port, which is coupled to a single integrated circuit chip. The I/O port may be coupled to a conventional smart card reading device which in turn is coupled to a PC, lap-top computer or the like. A tamper resistant secret private key storage is embodied on the chip. The private key storage is coupled to the processor which, in turn, is coupled to a permanent memory that stores the program executed by the processor. At least one clock is embodied on the card. A second clock 14 and a random value generator 10 are also preferably coupled to the processor. The device combines digital time notarization into a digital signature operation to ensure that a time stamp is always automatically present. The user does not need to be involved in any additional decision making as to whether time stamping is necessary.

Claims

1. A smart card reader for connecting a user'"'"'s smart card to a computer comprising:

a smart card interface port for receiving a digital value from said smart card;

a source providing digital information indicative of at least one of date and time;

a secure storage device for storing a smart card reader private key, wherein said private key is used in performing digital signature operations;

a communication port operatively coupled in use to transfer information to a computer; and

a smart card reader processor device connected to said smart card interface port, said communication port, said secure storage device, and said source providing digital information, for receiving said digital value and said information indicative of at least one of date and time and for performing at least one digital signature operation with said private key for output to said communication port.

2. A smart card reader according to claim 1, wherein said smart card includes a processor for performing at least digital signature operations, and a secure storage device for storing a user'"'"'s private key, and wherein said digital value received by said smart card interface port is a smart card based digital signature.

3. A smart card reader according to claim 2, wherein said smart card reader processor is operable to digitally sign said smart card based digital signature using said smart card reader private key and to transfer a time notarized digital signature to the user'"'"'s computer.

4. A smart card reader according to claim 1, wherein said smart card reader processor device is operable to transfer said digital signature to said smart card.

5. A smart card reader according to claim 1, wherein said smart card reader includes a memory having locations for storing data indicative of a digital certificate associated with said smart card reader.

6. A smart card reader according to claim 1, wherein said smart card reader processor device is operable to validate a user'"'"'s personal identification password (PIN) as a prerequisite to providing the digital signature.

7. A smart card reader according to claim 1, wherein said source providing digital information indicative of at least one of date and time is a clock embodied in said reader.

8. A method for time/date notarizing a digital value using a card having a storage device embodied thereon and a card reader comprising the steps of:

a) receiving a digital value;

b) processing said digital value and generating a value to be notarized;

c) obtaining at least one of the current time and current date from a trusted source;

d) creating a digital data structure including at least one of the current time and date, and a value derived from the value to be notarized,

e) accessing a stored card reader private key embodied within said card reader; and

f) digitally signing digital data in said data structure.

9. A method according to claim 8, wherein said stored electronic card reader private key has an associated public key certified as having its private key operating from within a secure time notary device.

10. A method according to claim 8, further comprising the step of transferring the digitally signed digital data to the card.

11. A method according to claim 10, further comprising the step of validating the digitally signed data.

12. A method according to claim 8, further including the step of storing data indicative of a digital certificate associated with said card reader.

13. A method according to claim 12, further including the step of validating the digitally signed data using said digital certificate.

14. A method according to claim 8, further including the step of validating a user'"'"'s personal identification password (PIN) as a prerequisite to providing the digital signature.

15. A method according to claim 8, wherein said card includes a storage device and a processor.

16. A method according to claim 15, wherein said card is a smart card.

17. A method according to claim 8, wherein said trusted source providing digital information indicative of at least one of date and time is a clock embodied in said reader.

18. A card reader for connecting a user'"'"'s card having a storage device to a computer comprising:

a card interface port for receiving a digital value from said card;

a source for providing information indicative of at least one of date and time;

a secure storage device for storing a card reader private key, wherein said private key is used in performing digital signature operations;

a communication port for transferring information to a computer; and

a card reader processor device coupled to said card interface port, said communication port, said secure storage device, and said source for provide information, for receiving said digital value and said indication of at least one of date and time and for performing at least one digital signature operation with said private key for output to said communication port.

19. A card reader according to claim 18, wherein said card includes a processor for performing at least digital signature operations, and a secure storage device for storing a user'"'"'s private key, and wherein said digital value received by said card interface port is an electronic card based digital signature.

20. A card reader according to claim 19, wherein said card reader processor is operable to digitally sign said card based digital signature using said card reader private key and to transfer a time notarized digital signature to said computer.

21. A card reader according to claim 18, wherein said card includes a processor.

22. A card reader according to claim 21, wherein said card is a smart card.

23. A card reader according to claim 18, wherein said source providing digital information indicative of at least one of date and time is a clock embodied in said reader.

24. A token reader for connecting a user'"'"'s token to a computer comprising:

a token interface port for receiving a digital value from said token;

a source providing digital information indicative of at least one of date and time;

a secure storage device for storing a token reader private key, wherein said private key is used in performing digital signature operations;

a communication port for transferring information to a computer; and

a token reader processor device coupled to said token interface port, said communication port, said secure storage device, and said source providing digital information, for receiving said digital value and said information indicative of at least one of date and time and for performing at least one digital signature operation with said private key for output to said communication port.

25. A token reader according to claim 24, wherein said token includes a processor for performing at least digital signature operations, and a secure storage device for storing a user'"'"'s private key, and wherein said digital value coupled to said token interface port is a token based digital signature.

26. A token reader according to claim 25, wherein said token reader processor is operable to digitally sign said token based digital signature using said token reader private key and to transfer a time notarized digital signature to the user'"'"'s computer.

27. A token reader according to claim 24, wherein said token reader processor device is operable to transfer said digital signature to said token.

28. A token reader according to claim 24, wherein said token reader includes a memory having locations for storing data indicative of a digital certificate associated with said token reader.

29. A token reader according to claim 24, wherein said token reader processor device is operable to validate a user'"'"'s personal identification password (PIN) as a prerequisite to providing the digital signature.

30. A token reader according to claim 24, wherein said source providing digital information indicative of at least one of date and time is a clock embodied in said reader.