Recording medium with a signed hypertext recorded thereon signed hypertext generating method and apparatus and signed hypertext verifying method and apparatus

• US 6,697,997 B1
• Filed: 08/02/1999
• Issued: 02/24/2004
• Est. Priority Date: 08/12/1998
• Status: Expired due to Fees

• Current Assignee: Nippon Telegraph and Telephone Corporation
• Original Assignee: Nippon Telegraph and Telephone Corporation
• Inventors: Fujimura, Ko
• Primary Examiner(s): Hong, Stephen S.
• Assistant Examiner(s): LUDWIG, MATTHEW J
• Application Number:
  US09/366,215
• Time in Patent Office: 1,667 Days
• Field of Search: 707/513, 707/501, 705/54, 705/3, 705/64, 705/6, 705/21, 705/57, 705/58, 705/59, 715/513, 715/501, 713/156, 713/157
• US Class Current: 715/210
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

In a hypertext made up of a plurality of linked documents, each document is composed of a document ID, an issuer ID, a property definition, and a signature attached to the document in its entirety. The property definition includes a property name 402, a value 403, a destination document ID 404, and a constraint definition part 405. By setting in the constraint definition part 405 a hash constraint 406 on the destination document 410, a schema ID constraint 407 defining the document type of the document 410, and a constraint 408 restricting the value of a particular property of the document 410, it is possible to make alterations in the contents of a signed document or attach a document and to prevent invalid alterations in the document contents or invalid attachment of a document.

Claims

1. A method for creating a signed hypertext made up of a plurality of linked documents, said method comprising the steps of:

(a) forming at least one of said plurality of documents by an identifier of an issuer of said at least one document, at least one property definition part and an issuer signature attached to said at least one document in its entirety;

(b) when said property definition part has a link, incorporating into said property definition part an identifier of a destination document and a constraint definition part for defining a constraint on said destination document;

(c) generating a unique document identifier for a document not yet instantiated as said destination document at the time of creating a source document which is said at least one document, and incorporating said unique document identifier as a future destination document into said property definition part of said source document; and

(d) generating said destination document with said unique document identifier when the body of said destination document is instantiated.

2. The method of claim 1, wherein said constraint on said destination document defined in said constraint definition part is a schema of said destination document which defines the document type of said destination document.

3. The method of claim 1, wherein said constraint on said destination document is a specified value of a particular property of said destination document.

4. The method of claim 1, wherein said constraint on said destination document is a hash value of said destination document.

5. A recording medium on which there is recorded, as a program for execution by a computer, a method for generating a signed hypertext made up of a plurality of linked documents in which:

at least one of said plurality of documents is composed of an identifier of an issuer of said at least one document, at least one property definition part and an issuer signature attached to said at least one document in its entirety; and

said at least one property definition part includes a property value, an identifier of a destination document, and a constraint definition part for defining a constraint on said destination document;

said program comprising the steps of;

(a) generating a unique document identifier for a document not yet instantiated as said destination document at the time of creating a source document which is said at least one document;

(b) incorporating said unique document identifier as a future destination document into said property definition part of said source document; and

(c) generating said destination document with said unique document identifier when the body of said destination document is instantiated.

6. The recording medium of claim 5, wherein said program further comprises a step of specifying, as said constraint on said destination document, a schema of said destination document which defines the document type of said destination document.

7. The recording medium of claim 5, wherein said program further comprises a step of specifying, as said constraint on said destination document, the value of a property of said destination document.

8. The recording medium of claim 5, wherein said program further comprises a step of specifying, as said constraint on said destination document, hash value of said destination document.

9. The recording medium on which there is recorded, as a program for execution by a computer, a method for verifying a signed hypertext made up of a plurality of linked documents in which:

at least one of said plurality of documents is composed of an identifier of an issuer of said at least one document, at least one property definition part and an issuer signature attached to said at least one document in its entirety; and

said at least one property definition part includes a property value, an identifier of a destination document, and a constraint definition part for defining a constraint on said destination document;

said program comprising the steps of;

(a) verifying whether said destination document satisfies said constraint defined in a source document which is said at least one document; and

(b) verifying the validity of an issuer signature attached to each of said plurality of document forming said signed hypertext.

10. The recording medium of claim 9, wherein said step (a) includes a step of verifying the consistency of a schema of said destination document which defines the document type of said destination document.

11. The recording medium of claim 9, wherein said step (a) includes a step of verifying the value of a particular property of said destination document.

12. The recording medium of claim 9, wherein said step (a) includes a step of verifying a hash value of said destination document.

13. The recording medium of claim 9, wherein said program filer comprises a step of verifying whether said identifier of said destination document is consistent with a destination document identifier defined in said source document.

14. A signed hypertext generating apparatus which:

forms a signed hypertext by a plurality of linked documents;

forms at least one of said plurality of documents by an identifier of said at least one document, an identifier of an issuer of said at least one document, at least one property definition part, and an issuer signature attached to said at least one document in its entirety; and

, when said property definition part has a link, incorporates in said property definition part an identifier of a destination document and a constraint definition part for defining a constraint on said destination document;

said apparatus comprising;

means for generating a unique document identifier for a document not yet instantiated as said destination document at the time of creating a source document which is said at least one document;

means for incorporating said unique document identifier as an identifier of a future destination document into said property definition part of said source document; and

means for generating said destination document with said unique document identifier when the body of said destination document is instantiated.

15. The signed hypertext generating apparatus of claim 14, which further comprises means for specifying, as said constraint on said destination document, a schema of said destination document which defines the document type of said destination document.

16. The signed hypertext generating apparatus of claim 14, which further comprises means for specifying, as said constraint on said destination document, the value of a property of said destination document.

17. The signed hypertext generating apparatus of claim 14, which further comprises means for specifying, as said constraint on said destination document, hash value of said destination document.

18. An apparatus for verifying a signed hypertext made up of a plurality of linked documents in which:

at least one of said plurality of documents is composed of an identifier of an issuer of said at least one document, at least one property definition part and an issuer signature attached to said at least one document in its entirety; and

said at least one property definition part includes a property value, an identifier of a destination document, and a constraint definition part for defining a constraint on said destination document;

said apparatus comprising;

means for verifying whether said destination document satisfies said constraint defined in a source document which is said at least one document; and

means for verifying the validity of an issuer signature attached to each of said plurality of document forming said signed hypertext.

19. The apparatus of claim 18, wherein said destination document verifying means includes means for verifying the consistency of a schema of said destination document which defines the document type of said destination document.

20. The apparatus of claim 18, wherein said destination document verifying means includes means for verifying the value of a particular property of said destination document.

21. The apparatus of claim 18, wherein said destination document verifying means includes means for verifying a hash value of said destination document.

22. The apparatus of claim 18, which further comprises means for verifying whether said identifier of said destination document is consistent with a destination document identifier defined in said source document.