Digital signature system

• US 6,807,633 B1
• Filed: 05/25/2000
• Issued: 10/19/2004
• Est. Priority Date: 05/25/1999
• Status: Expired due to Term

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: Xing, Inc. (Brother Industries Limited)
• Inventors: Pavlik, Patrick
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): Gurshman, Grigory
• Application Number:
  US09/577,660
• Time in Patent Office: 1,608 Days
• Field of Search: 713/155, 713/176, 713/180, 713/170, 380/227
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A digital signature system includes a data receiver for receiving an electronic document over a network; an encryption key database, and a signature processor in communication with the encryption key database and the data receiver. The encryption key database includes encryption key records, each being associated with a subscriber of the database and identifying an encryption key uniquely associated with the subscriber. The signature processor is configured for receiving an indicator of one of the subscribers and for deriving a digital signature from the received electronic data and the encryption key associated with the one subscriber. Upon receipt of electronic data and an indicator of one of the database subscribers, the digital signature system derives a digital signature from the received electronic data and the encryption key associated with the one database subscriber. Typically, the database subscriber is the originator of the electronic data, and the data originator identifies itself by providing the signature processor with a personal identification number assigned to the data originator. After the digital signature is derived, preferably the digital signature system then transmits the derived digital signature to the data originator.

Claims

1. A digital signature system comprising:

a data receiver for receiving electronic data over a network;

an encryption key database including encryption key records, each said record being associated with a subscriber of the database and identifying an encryption key uniquely associated with the subscriber; and

a signature processor in communication with the encryption key database and the data receiver, the signature processor being configured for receiving an indicator of one of the subscribers and for deriving a digital signature from the received electronic data and the encryption key associated with the one subscriber;

wherein each said record includes an identification code uniquely associated with the respective encryption key, the subscriber indicator comprises a subscriber identification number, and the signature processor is configured for deriving the digital signature in accordance with the received identification number and a corresponding one of the identification codes;

wherein the signature processor includes a document database including template records, each said template record including at least one document data item, the data receiver is configured for receiving an indicator of a selected one of the template records, and the signature processor is configured for deriving the digital signature from the received electronic data and the at least one document data items of the selected one template record.

2. The digital signature system according to claim 1, wherein the document receiver is configured for establishing a secure communications link with the one database subscriber, and for receiving the electronic data over the secure communications link.

3. A method of providing digital signatures for electronic documents, comprising the steps of:

providing an encryption key database including encryption key records, each said record being associated with a subscriber of the database and identifying an encryption key uniquely associated with the subscriber;

receiving electronic data over a network;

receiving an indicator of one of the database subscribers; and

deriving a digital signature from the received electronic data and the encryption key associated with the one database subscriber;

wherein each said record includes an identification code uniquely associated with the respective encryption key, the subscriber indicator comprises a subscriber identification number, and the deriving step comprises the steps of querying the encryption database with the received subscriber identification number for a corresponding one of the identification codes, extracting from the encryption database the encryption key associated with the corresponding one identification code, and deriving the digital signature in accordance with the extracted encryption key;

wherein the electronic data receiving step comprises the steps of receiving an indicator of a desired document template, receiving at least one data element for incorporation into an electronic document, and assembling the electronic document from the desired document template and the at least one data element, and the deriving step comprises deriving the digital signature from the assembled electronic document.

4. The method according to claim 3, wherein the electronic data receiving step comprises the steps of establishing a secure communications link with the one database subscriber, and receiving the electronic data over the secure communications link.

5. A digital signature system comprising:

a data receiver for receiving over a network electronic data from one of a plurality of network users;

an encryption key database including encryption key records, each said record being associated with a respective one of the network users and identifying an encryption key uniquely associated with the one network user;

a data processor in communication with the encryption key database and the data receiver, the data processor being configured for deriving a digital signature from the received electronic data and the encryption key associated with the one network user; and

a data transmitter in communication with the data processor for providing the one network user with the derived digital signature;

wherein each said record includes an identification code uniquely associated with the respective encryption key, and the data processor is configured for receiving a subscriber identification number from the one network user and for deriving the digital signature in accordance with the received identification number and a corresponding one of the identification codes;

wherein the data processor includes a document database including template records, each said template record including at least one document data item, the data receiver is configured for receiving from the one network user an indicator of a selected one of the template records, and the data processor is configured for deriving the digital signature from the received electronic data and the at least one document data items of the selected one template record.

6. The digital signature system according to claim 5, wherein the received electronic data and the at least one document data items of the selected one template record together comprise an electronic document, the data processor is configured for assembling the electronic document from the received electronic data and the at least one document data items of the selected one template record, and the data transmitter is configured for transmitting the assembled electronic document together with the derived digital signature to the one network user.

7. The digital signature system according to claim 6, wherein the data receiver is configured for establishing a secure communications link with the one network user and for receiving the electronic data over the secure communications link, and the data transmitter is configured for transmitting the assembled electronic document together with the derived digital signature over the secure communications link.

8. A method of providing digital signatures for electronic documents, comprising the steps of:

providing an encryption key database including encryption key records, each said record being associated with a subscriber of the database and identifying an encryption key uniquely associated with the subscriber;

receiving over a network electronic data from one of the database subscribers;

deriving a digital signature from the received electronic data and the encryption key associated with the one database subscriber; and

transmitting the derived digital signature to the one database subscriber;

wherein each said record includes an identification code uniquely associated with the respective encryption key, and the deriving step comprises the steps of receiving over the network a subscriber identification number from the one database subscriber, querying the encryption database with the received subscriber identification number for a corresponding one of the identification codes, extracting from the encryption database the encryption key associated with the corresponding one identification code, and deriving the digital signature in accordance with the extracted encryption key;

wherein the electronic data receiving step comprises the steps of receiving an indicator of a desired document template, receiving at least one data element for incorporation into an electronic document, and assembling the electronic document from the desired document template and the at least one data element, and the deriving step comprises deriving the digital signature from the assembled electronic document.

9. The method according to claim 8, wherein transmitting step comprises transmitting the assembled electronic document together with the derived digital signature to the one database subscriber.

10. The method according to claim 9, wherein the electronic data receiving step comprises the steps of establishing a secure communications link with the one database subscriber and receiving the electronic data over the secure communications link, and the transmitting step comprises transmitting the derived digital signature together with the derived digital signature over the secure communications link.