Trusted content server

• US 6,941,477 B2
• Filed: 07/11/2001
• Issued: 09/06/2005
• Est. Priority Date: 07/11/2001
• Status: Active Grant

• Current Assignee: Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Kevin O'Keefe
• Inventors: O'Keefe, Kevin
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Ananthanarayanan, Ramya
• Application Number:
  US09/903,124
• Publication Number:
  US 20030014666A1
• Time in Patent Office: 1,518 Days
• Field of Search: 713/182, 705/51, 707/10
• US Class Current: 726/4
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A method and apparatus for providing access to authenticated electronic documents over a network. The apparatus comprises a server computer, a user interface connected to the server via a first network interface for providing user access to the server, a computer network containing the electronic documents connected to the server via a second network interface, a database connected to the server via a third network interface, for storing data for authenticating the electronic documents. The first network interface, second network interface and the third network interface are disjunct respective to each other such that the user, the computer network and the database are not in communication therebetween. The apparatus further comprises a verification server having first and second network interfaces for connecting the computer network and the database thereto, wherein the first and second network interfaces are disjunct such that the database is not accessible to the computer network.

Claims

1. An apparatus for providing access to a plurality of authenticated electronic documents over a network comprising:

a server computer;

a user interface connected to said server via a first network interface for providing user access to said server;

a computer network connected to said server via a second network interface, said electronic documents being accessible through said computer network;

a database connected to said server computer via a third network interface, said database storing indexed information for authenticating the content of each of said plurality of electronic documents, the indexed information including seed values corresponding to each of said electronic documents;

said first network interface, said second network interface and said third network interface being disjunct respective to each other such that said user interface, said computer network and said database are not in communication therebetween;

a verification server comprising first and second network interfaces for connecting said computer network and said database thereto, said first and second network interfaces being disjunct such that said database is not accessible through said computer network, said verification server for iteratively traversing said database and retrieving said indexed information corresponding to a next one of said electronic documents, retrieving said electronic document via said computer network, checking the authenticity of the content of said electronic document using said corresponding seed values and updating the database with a status of the authenticity of said electronic document;

said server computer configured so that upon receipt of a user request for a document, said server queries said database as to whether said requested document is indexed therein and returns a denial if said requested document is not indexed in said database, otherwise said server retrieves said requested document via said computer network, confirms the authenticity thereof using said seed values corresponding to the requested document and returns the contents of the requested document to the user if the requested document is determined to be authentic;

wherein said apparatus provides a user access to a plurality of authenticated electronic documents available through said computer network and prevents the user from directly accessing said computer network.

2. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said access is limited to selected documents.

3. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said access is selective based on the user.

4. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said computer network is a public network.

5. An apparatus as for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said computer network is a private network.

6. An apparatus as for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said computer network is the Internet.

7. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 further comprising a router connected to said user interface, said computer network, said server computer and said verification server for forwarding data packets from said computer network to said server computer and said verification server.

8. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 7 further comprising a high speed switch connected between said router and said server computer, said database and said verification server for providing data transmissions therebetween.

9. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 further comprising a router connected to said user interface and said server for transmitting data therebetween.

10. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said database contains for each said electronic document indexed information for identifying and authenticating said document and a status indicator for storing the status of the authenticity thereof.

11. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said apparatus is scalable.

12. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said database is updatable.

13. An apparatus for providing access to authenticated electronic documents over a network as defined in claim 1 wherein said user is a computer.

14. A method for providing access to a select group of authenticated electronic documents over a network comprising the steps of:

reviewing the content of each of a plurality of electronic documents to determine whether said electronic document is acceptable based on a review of the subject matter thereof;

generating seed values for each of said electronic documents deemed acceptable for use thereafter in authenticating copies of the content of said electronic document;

initializing a database by storing indexed information for identifying and authenticating each of said electronic documents deemed acceptable, the indexed information including the seed values corresponding to said electronic documents;

receiving a request from a user for an electronic document;

searching and retrieving from said database said indexed information for said requested document, returning a denial for said request if said requested document is not indexed in said database;

accessing said network and retrieving the content of said requested document;

calculating a checksum for the content of said retrieved document;

comparing said checksum with said authenticating information for authenticating the content of said retrieved document;

returning the content of said retrieved document to said user if the content of said retrieved document is authenticated;

returning a refusal to said user if the content of said retrieved document is not authenticated; and

updating said authenticating information for said document in said database based on the results of said comparing.

15. A method of providing access to a select group of authenticated electronic documents over a network as defined in claim 14 further comprising the steps of:

iteratively traversing said database and retrieving said indexed information for identifying and authenticating a next one of said electronic documents;

retrieving from said network the content of said next one of said electronic documents.

calculating a checksum for the content of said retrieved document;

comparing said checksum with said authenticating information for authenticating the content of said retrieved document; and

updating said database with the authenticity status of said document.

16. A method of providing access to authenticated electronic documents over a network as defined in claim 14 wherein the step of calculating a checksum for the content of said retrieved document further comprising the steps of:

retrieving said seed values for said electronic document from said database;

traversing a forward pass of the data stream of the content of said retrieved document and calculating a first value for each position in said data stream using said seed numbers;

traversing a reverse pass of the data stream of the content of said retrieved document and calculating a second value for each position in said data stream using said seed numbers; and

summing said first value and said second value.

17. A method of providing access to authenticated electronic documents over a network as defined in claim 14 wherein the step of calculating a checksum for the content of said retrieved document further comprising the steps of:

retrieving said indexed seed values for said document from said database;

initializing values for said checksum and a start counter to zero;

initializing a length counter equal to the length of the content of said retrieved document; and

traversing the content of said document character by character, adding to said checksum a first calculated value and a second calculated value for each character thereof wherein said start counter is incremented and said length counter is decremented for each said character traversed.

18. A method of providing access to authenticated electronic documents over a network as defined in claim 14 wherein said user request is received from a computer.