Encryption and authentication systems and methods

• US 7,194,618 B1
• Filed: 03/05/2002
• Issued: 03/20/2007
• Est. Priority Date: 03/05/2001
• Status: Active Grant

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Edwin A. Suominen
• Inventors: Suominen, Edwin A.
• Primary Examiner(s): PEESO, THOMAS R
• Application Number:
  US10/092,943
• Time in Patent Office: 1,841 Days
• Field of Search: 713155-161, 713/168, 713/169, 713/182
• US Class Current: 713/155
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

In a disclosed method for authenticating a digital signature key, a record is prepared that includes an integrated combination of indicia uniquely corresponding to the key, and indicia of a covenant not to repudiate any digital signature made with the key except under specified conditions. The owner of the key performs a legally accepted execution of the record, whereby he enters into a covenant with any bearer of the record not to repudiate any digital signature made with the key except under the specified conditions.

Claims

1. A method for authenticating a digital signature key, the method comprising:

(a) preparing a record including an integrated combination of (1) indicia uniquely corresponding to the key, and (2) indicia of a covenant not to repudiate any digital signature made with the key except under specified conditions; and

(b) having an owner of the key perform a legally accepted execution of the record;

whereby the owner enters into a covenant with any bearer of the record not to repudiate any digital signature made with the key except under the specified conditions.

2. The method of claim 1 further comprising:

(a) obtaining the executed record at an Internet site; and

(b) at the Internet site, posting a digitally certified copy of the document for downloading without independently confirming the identity of the owner of the key.

3. The method of claim 1 wherein the record is a paper document and the indicia uniquely corresponding to the key comprises a fingerprint of the key printed on the document.

4. The method of claim 3 wherein the fingerprint is a cryptographic hash code printed on the document as hexadecimal digits.

5. The method of claim 3 wherein:

(a) the fingerprint is printed as digits in the background of the document; and

(b) the covenant extends to any bearer of a facsimile copy of the document.

6. The method of claim 5 wherein the fingerprint is further printed such that the digits are oriented perpendicular to other text of the record.

7. The method of claim 3 wherein having the owner of the key perform a legally accepted execution of the record comprises having the owner sign the document in ink.

8. The method of claim 7 wherein:

the integrated combination of the record further includes indicia of a statement confirming the identity of the owner of the key and that the owner executed the record in the presence of a notary public; and

(b) the method further comprises having a notary public sign the statement in ink.

9. The method of claim 8 further comprising:

(a) receiving the executed document at an Internet site; and

(b) at the Internet site, after confirming that the document bears a notarized ink signature, posting a digitally certified copy of the document for downloading without independently confirming the identity of the owner of the key.

10. The method of claim 8 wherein the fingerprint is printed as digits in the background of the document.

11. The method of claim 10 wherein the fingerprint is further printed such that the digits are oriented perpendicular to other text of the record.

12. The method of claim 1 wherein the covenant:

(a) refers to a private key uniquely corresponding to the digital signature key; and

(b) includes an acknowledgment that failing to keep the private key secure may result in forging of digital signatures made with the digital signature key.

13. The method of claim 12 wherein:

(a) the record is a paper document and the indicia uniquely corresponding to the key comprises a fingerprint of the key printed as digits in the background of the document; and

(b) having the owner of the key perform a legally accepted execution of the record comprises having the owner sign the document in ink over some of the digits.

14. A legal instrument made by a process comprising:

(a) generating a fingerprint uniquely corresponding to a supplied digital signature key; and

(b) recording in the legal instrument, in an integrated combination, indicia of the fingerprint and a covenant not to repudiate any digital signature made with the key except under specified conditions.

15. The legal instrument of claim 14 wherein the indicia is printed on a paper document.

16. The legal instrument of claim 15 wherein the indicia of the fingerprint is

printed as digits in the background of the document.

17. The legal instrument of claim 16 wherein the covenant appears printed over some of the digits and extends to any bearer of a facsimile copy of the document.

18. The legal instrument of claim 15 further comprising a holographic

signature of a person executing the covenant, inked on the document.

19. The legal instrument of claim 18 wherein the indicia recorded therein further comprises (1) a statement confirming the identity of the person executing the covenant and that the person did so in the presence of a notary public, and (2) a holographic signature of a notary public, inked on the document and executing the statement.

20. The legal instrument of claim 14 wherein the covenant:

(a) refers to a private key uniquely corresponding to the digital signature key; and

(b) includes an acknowledgment that failing to keep the private key secure may result in forging of digital signatures made with the digital signature key.

21. A public key registration method comprising:

(a) having a first person execute a covenant that legally binds the first person to digital signatures uniquely corresponding to and created with a positively identified public key; and

(b) having a second person receive the public key and a record containing the covenant;

(c) wherein the second person relies solely on the covenant for authentication of the public key.

22. The method of claim 21 wherein the covenant includes an acknowledgment that failing to keep the private key secure may result in forging of digital signatures made with the key.

23. The method of claim 21 wherein the covenant is printed on a paper document and having the first person execute the covenant comprises having the first person sign the document in ink.

24. The method of claim 23 further comprising:

(a) having a third party (1) obtain the document, (2) check whether the document has been signed and notarized in ink and, if so, (3) post a digitally certified copy of the document for downloading;

(b) wherein the second person receives the record from the third party but relies on the covenant and not the third party for authentication of the public key.

25. The method of claim 23 wherein the public key is positively identified by a fingerprint of the key that is printed as digits in the background of the document.