Digital signatures for tangible medium delivery

• US 7,165,268 B1
• Filed: 10/17/2000
• Issued: 01/16/2007
• Est. Priority Date: 10/17/2000
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Moore, Keith E., Silverstein, D. Amnon
• Primary Examiner(s): Barron; Gilberto
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US09/691,783
• Time in Patent Office: 2,282 Days
• Field of Search: 713/161, 713/165, 713/168, 713/171, 713/200, 713/201, 711164-165, 380228-229, 380/232, 380277-278, 380282-283, 380285-286, 380 29- 30, 380/237, 380/239, 380/201, 380/241, 707/200, 707/203, 707/206, 707/201, 707223-225, 707/229, 725/3, 705/3, 726 1- 7, 726/17, 726/21, 726 26- 27, 726/35, 369 2401- 3001, 369 3003- 3005, 386/15, 386 79- 84, 386105-106, 386/125
• US Class Current: 726/2
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

The invention provides a method for a sender to send a message on a tangible medium and ensure that it is privacy protected until verification that the medium has been received by the authorized recipient. The invention provides a method in which a sender creates an encrypted content message that may be decrypted using a content decryption key that is unknown to the authorized recipient. The sender creates an encrypted authentication message that may be decrypted using a recipient'"'"'s key that is known to the authorized recipient but is unknown to others, except perhaps to the sender. The sender fixes the encrypted content message and the encrypted authentication message onto a tangible medium and then permits the authorized recipient to obtain the tangible medium. The authorized recipient uses the recipient'"'"'s key to decrypt the encrypted authentication message and then creates a valid reply that is based upon or which uses the decrypted authentication message. The authorized recipient sends the valid reply to the sender and upon verification that the reply is valid the sender allows the authorized recipient to obtain the content decryption key. With the content decryption key, the authorized recipient is able to decrypt the encrypted content message. The invention also includes an article of manufacture for sending an encrypted message from a sender to an authorized recipient using a method, of the invention.

Claims

1. A method for a sender to send an encrypted message to an authorized recipient, the method having steps comprising:

creating an encrypted content message that may be decrypted using a content decryption key that is unknown to the authorized recipient;

creating an encrypted authentication message that may be decrypted using a recipient'"'"'s key wherein the recipient'"'"'s key is known to the authorized recipient but unknown to others except perhaps known to the sender;

fixing the encrypted authentication message and the encrypted content message onto a tangible medium and thereafter permitting the authorized recipient to obtain the tangible medium;

if a valid reply has been received, wherein the valid reply is based upon the decrypted authentication message, then allowing the authorized recipient to obtain said content decryption key.

2. The method of claim 1 wherein the recipient'"'"'s key is a secret key that is shared between the sender and the recipient.

3. The method of claim 1 wherein the recipient'"'"'s key is a recipient'"'"'s private key that is associated with a recipient'"'"'s public key.

4. The method of claim 1 wherein said step of creating an encrypted authentication message further comprises a step of sender authentication encryption such that the authorized recipient may use a sender'"'"'s key for decryption of the authentication message thereby authenticating that the sender was the source of the encrypted authentication message, such that the sender'"'"'s key is known to the authorized recipient, and such that the encrypted authentication message may be decrypted with a decryption step employing said recipient'"'"'s key and with another decryption step employing said sender'"'"'s key.

5. The method of claim 4 wherein the sender'"'"'s key is a secret key that is shared between the sender and the authorized recipient but unknown to others.

6. The method of claim 4 wherein the sender'"'"'s key is a public key that is associated with a sender'"'"'s private key.

7. The method of claim 4 wherein the sender'"'"'s key is a public key that is associated with a sender'"'"'s private key.

8. The method of claim 1 wherein said step of creating an encrypted content message further comprises a step of sender authentication encryption such that the authorized recipient may use a sender'"'"'s key for decryption of the encrypted content message thereby authenticating that the sender was the source of the encrypted content message, such that the sender'"'"'s key is known by the authorized recipient, and such that the encrypted content message may be decrypted by a decryption method with a step employing the recipient'"'"'s key and with another step employing the sender'"'"'s key.

9. The method of claim 8 wherein the sender'"'"'s key is a secret key that is shared between the sender and the authorized recipient but unknown to others.

10. The method of claim 1 further comprising receiving the valid reply using the sender after permitting the authorized recipient to obtain the tangible medium, and wherein the allowing is responsive to the receiving.

11. The method of claim 10 wherein the valid reply is generated by the recipient after the recipient obtains the tangible medium.

12. The method of claim 1 wherein the creatings, the fixing and the allowing comprise creatings, fixing and allowing using the sender.

13. The method of claim 1 wherein the fixing comprises permanently fixing the encrypted authentication message and the encrypted content message onto said tangible medium.

14. The method of claim 1 wherein the fixing comprises fixing both the encrypted authentication message and the encrypted content message onto the tangible medium comprising the same medium.

15. The method of claim 14 wherein the same medium comprises a single fixed tangible medium.

16. The method of claim 15 wherein the single fixed tangible medium comprises a compact disc.

17. An article of manufacture for sending an encrypted message from a sender who possesses a content decryption key to a recipient who possesses a recipient'"'"'s key, the article, comprising:

a tangible medium;

an encrypted content message fixed on said tangible medium, wherein said encrypted content message may be decrypted using the content decryption key;

an encrypted authentication message fixed on said tangible medium, wherein said encrypted authentication message may be decrypted using the recipient'"'"'s key;

whereby after the article is delivered to the recipient the recipient may use the recipient'"'"'s key to decrypt said encrypted authentication message into a decrypted authentication message, the recipient may use the decrypted authentication message to send a valid reply to the sender confirming that the recipient received said article and the sender may then allow the recipient to obtain the content decryption key.

18. The article of claim 17 wherein the recipient'"'"'s key is a secret key that is shared between the sender and the recipient.

19. The article of claim 17 wherein the recipient'"'"'s key is a recipient'"'"'s private key that is associated with a recipient'"'"'s public key.

20. The article of claim 17 wherein said encrypted authentication message is sender authentication encrypted such that said encrypted authentication message may be decrypted by a decryption method having a step employing the recipient'"'"'s key and having another step employing a sender'"'"'s key such that the recipient may use the sender'"'"'s key to authenticate that the sender was the source of said tangible medium.

21. The article of claim 20 wherein the sender'"'"'s key is a secret key that is shared between the sender and the authorized recipient but unknown to others.

22. The article of claim 20 wherein the sender'"'"'s key is a public key that is associated with a sender'"'"'s private key.

23. The article of claim 17 wherein said encrypted content message is sender authentication encrypted such that said encrypted content message may be decrypted by a decryption method having a step employing the recipient'"'"'s key and having another step employing a sender'"'"'s key such that the recipient may use the sender'"'"'s key to authenticate that the sender was the source of said tangible medium.

24. The article of claim 23 wherein the sender'"'"'s key is a secret key that is shared between the sender and the authorized recipient but unknown to others.

25. The article of claim 23 wherein the sender'"'"'s key is a public key that is associated with a sender'"'"'s private key.

26. The article of claim 17 wherein the encrypted content message and the encrypted authentication message are permanently fixed onto said tangible medium.

27. A method for an authorized recipient to receive an encrypted message from a sender, the method having steps comprising:

receiving a tangible medium from the sender wherein the tangible medium has fixed upon it an encrypted authentication message and an encrypted content message;

using a recipient'"'"'s key to decrypt the encrypted authentication message into a decrypted authentication message, wherein the recipient'"'"'s key is known to the authorized recipient but unknown to others except perhaps known to the sender;

creating a valid reply using the decrypted authentication message;

sending the valid reply to the sender;

if the recipient has received a content decryption key from the sender, then using the content decryption key to decrypt the encrypted content message.

28. The method of claim 27 wherein the creating and the sending the valid reply comprise creating and sending using the authorized recipient.

29. The method of claim 27 wherein the receiving, the usings, the creating, and the sending comprise receiving, usings, creating and sending using the authorized recipient.

30. The method of claim 27 wherein the using the recipient'"'"'s key comprises using the recipient'"'"'s key by the authorized recipient.

31. The method of claim 27 wherein the creating the valid reply comprises creating using the authorized recipient.