Digital signature service

• US 6,959,382 B1
• Filed: 08/16/1999
• Issued: 10/25/2005
• Est. Priority Date: 08/16/1999
• Status: Expired due to Fees

• Current Assignee: OpenData Systems, Inc.
• Original Assignee: Accela Incorporated (Piksel Incorporated)
• Inventors: Sit, Ho Wing, Kinnis, Tony F.
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US09/375,475
• Time in Patent Office: 2,262 Days
• Field of Search: 713/170, 713/168, 713/175, 713/176, 713/177, 713/178, 713/155, 713/153
• US Class Current: 713/170
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A digital signature service generates digital signatures for documents independent of the program used to transmit the documents. The digital signature service may operate as a Web server application, or as a client application on a user'"'"'s computer. The digital signature service imports a certificate specific to a user. To digitally sign a document, the user identifies a document, and the digital signature service generates a single signature file that includes the user'"'"'s certificate, the document, and the digital signature. With the signature file, the user may now store and/or transmit the file using any program while maintaining the integrity and authenticity capabilities associated with digital signatures. The digital signature service also permits multiple digital signatories to a single document. A secure document repository, implemented on a Web Site, is also disclosed.

Claims

1. A method for providing authenticated documents to a plurality of users over a network, said method comprising the steps of:

coupling, through a network, a computer of a first user, a computer of a second user and a server;

implementing, on a server, a digital signature service;

transmitting, over said network, a document from said computer of said first user to said digital signature service;

importing a digital certificate for said first user into said digital signature service;

generating a digital signature from said digital signature service at said server for said document and a certificate for said first user, said digital signature comprising a message digest that defines a unique fingerprint of said document;

transmitting, over said network, said document, said certificate and said signature from said digital signature service to said computer of said first user;

storing said document, said certificate and said signature at said computer of said first user;

transmitting said document, said certificate and said signature from said computer of said first user to said computer of said second user;

accessing, over said network, said digital signature service on said server from said computer of said second user;

verifying, through said digital signature service, that the original content of said document is not altered; and

authenticating, through said digital signature service, that said signor of said document is valid.

2. The method as set forth in claim 1, further comprising the step of permitting, over said network, said second user to generate, through said digital signature service, a digital signature to authenticate digital signing of said document by said second user.

3. The method as set forth in claim 1, further comprising the steps of:

permitting, over said network, at least one additional user to generate, through said digital signature service, a digital signature for a modified version of said document so as to authenticate, through said digital signature, the digital signing by said additional user, and to authenticate the contents of said modified document through generation of a second message digest; and

permitting at least one user, over said network, to access said digital signature service to verify, through said digital signature service, that the original content of said modified document is not unaltered, and to authenticate, through said digital signature service, that said signor of said document is valid.

4. The method as set forth in claim 1, wherein the step of offering to at least one user, over a network, a digital signature service comprises the step of offering said digital signature service through a Web Site over the Internet.

5. A method for generating digital signatures for use with documents shared between at least two parties, said method comprising the steps of:

offering, through a Web Site, a digital signature service for a first user, said digital signature service permitting said first user to select one or more documents to generate a corresponding digital signature, wherein said digital signature authenticates that said first user digitally signed said document and authenticates the contents of said document through generation of a message digest;

storing said document, certificate and said signature at a computer of said first user;

transmitting said document, certificate and said signature from said computer of said first user to a computer of a second user; and

providing, to said second user, a digital signature service through a Web Site for verifying said digital signature for said document, so as to verify that said user digitally signed said document, and to authenticate the contents of said document.

6. The method as set forth in claim 5, further comprising the steps of:

obtaining a certificate, through said digital service, for said user from a certificate authority; and

importing said certificate of said user into a digital signature service to generate said digital signature.

7. The method as set forth in claim 5, further comprising the step of downloading, over said public network, said digital signature service to a computer device of said first user for operation of said digital signature service as a client application on said computer device.

8. A network system for generating digital signatures, said system comprising:

a server for offering, through a Web Site, a digital signature service for a first user, said digital signature service permitting said first user to select one or more documents to generate a corresponding digital signature, wherein said digital signature authenticates that said first user digitally signed said document and authenticates the contents of said document through generation of a message digest;

computer for storing said document, certificate and said signature for said first user;

computer of a second user;

network for transmitting said document, certificate and said signature from said computer of said first user to a said computer of a said second user; and

wherein said server for providing, to said second user, a digital signature service for verifying said digital signature for said document, so as to verify that said user digitally signed said document, and to authenticate the contents of said document.

9. The system as set forth in claim 8, wherein said server further for obtaining a certificate, through said digital signature service, for said user from a certificate authority and for importing said certificate of said user into a digital signature service to generate said digital signature.

10. The system as set forth in claim 8, further comprising a client application for said computer of said first user for operating said digital signature service.

11. A computer readable medium comprising a plurality of instructions, which when executed by a computer, causes the computer to perform the steps of:

offering, to a plurality of users, a digital signature service;

generating, using said digital signature service at a first user, a first signature file corresponding to at least one document, said first signature file comprising said document and a digital signature of said first user;

transferring said first signature file from said first user to a second user;

verifying, at said second user, through use of said digital signature service and said first signature file, that the contents of said document is not altered;

authenticating, at said second user, through said digital signature service, said signature of said first user with said digital signature; and

generating a second signature file comprising said first signature file and a digital signature of said second user, whereby said second signature file permits authentication of said document and verification of said digital signature of said first user and verification of said digital signature of said second user.

12. A method of document verification for a plurality of users, said method comprising the steps of:

offering, to a plurality of users, a digital signature service;

generating, using said digital signature service at a first user, a first signature file corresponding to at least one document, said first signature file comprising said document and a digital signature of said first user;

transferring said first signature file from said first user to a second user;

verifying, at said second user, through use of said digital signature service and said first signature file, that the contents of said document is not altered;

authenticating, at said second user, through said digital signature service, said signature of said first user with said digital signature; and

generating a second signature file comprising said first signature file and a digital signature of said second user, whereby said second signature file permits authentication of said document and verification of said digital signature of said first user and verification of said digital signature of said second user.