Digital signing method

• US 7,305,558 B1
• Filed: 10/19/2000
• Issued: 12/04/2007
• Est. Priority Date: 10/22/1999
• Status: Expired due to Term

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Miyazaki, Kunihiko, Sakai, Mizuhiro, Takaragi, Kazuo, Susaki, Seiichi, Sasaki, Ryoichi, Moritsu, Toshiyuki, Matsumoto, Tsutomu, Iwamura, Mitsuru
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Hoffman; Brandon S
• Application Number:
  US09/693,713
• Time in Patent Office: 2,602 Days
• Field of Search: 713/178
• US Class Current: 713/178
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

According to the invention, techniques for authenticating that a digitally signed document is genuine. Specific embodiments according to the present invention can determine whether a digital signature was generated by a digital signature generator, or if the digital signature was generated by a third party posing as the digital signature generator. Specific embodiments can provide independent verification of digital signer identity based upon prior signed messages, time/date stamps, and the like. Techniques according to the present invention can be embodied in methods, apparatus, computer software and systems.

Claims

1. A digital signing method, comprising:

providing a log list comprising previously generated digital signatures;

computing a hash value of inputted data including a message to be signed or a hash value thereof, the inputted data further including only the most recently generated digital signature obtained from the log list or a hash value thereof;

encoding the computed hash value of the inputted data to produce encoded data of a predetermined format that is suitable for encryption processing for generating a signature;

applying a secret key to the encoded data to produce a generated digital signature;

registering as log data the generated digital signature in the log list; and

distributing a signature-attached data including the generated digital signature, the message to be signed, and the earlier generated digital signature or the hash value thereof.

2. The digital signing method of claim 1, wherein said log data further comprises a distribution destination, and wherein said log data including a distribution destination attached thereto.

3. The digital signing method of claim 1, said method further comprising:

registering the log data with said log list only when the data from a previously signed message is included in the latest log data registered with said log list.

4. The digital signing method of claim 1, said method further comprising:

obtaining a timestamp from a trusted authority, said timestamp generated by applying a second secret key to the digital signature, and a time; and

distributing a signature-attached data including the generated digital signature for the message to be signed, the message to be signed, the previous log data or the hash value thereof for generating the signature, and the timestamp.

5. A digital signing apparatus, comprising:

a processor; and

a storage medium to store a log list comprising previously generated digital signatures, wherein

said processor computes a hash value of inputted data including a message to be signed or a hash value thereof, the inputted data further including only the most recently generated digital signature obtained from the log list or a hash value thereof, and wherein

said processor encodes the computed hash value of the inputted data into encoded data of a predetermined format that is suitable for encryption processing for generating a signature;

said processor applies a secret key to the encoded data to produce a generated digital signature;

said processor prepares a signature-attached data including the generated digital signature for the message to be signed, the message to be signed, and the previous log data or the hash value thereof for generating the signature; and

said processor registers as log data the signature-attached data in the log list.

6. The digital signing apparatus of claim 5, wherein

said processor applies said secret key to a message or the hash value thereof to generate a digital signature for the message;

and wherein

said processor prepares a signature-attached data that includes the generated digital signature, the message, and the previous log data or hash value thereof; and

wherein

said processor registers log data of a signature-attached data including the generated digital signature, the message, and the previous log data or hash value thereof, with said log list.

7. The digital signing apparatus of claim 5, wherein said log data further comprises a distribution destination.

8. The digital signing apparatus of claim 5, wherein:

registration of the log data with said log list is permitted only when the previous log data is included in the latest log data registered with said log list.

9. The digital signing apparatus of claim 5, wherein:

said processor obtains a timestamp from a trusted authority, said timestamp generated by applying a second secret key to the digital signature, and a time; and

said processor prepares said signature-attached data including the generated digital signature, the message, and the previous log data or hash value thereof, and the timestamp.

10. The digital signing apparatus of claim 5, further comprising:

an interface configured to be connectable to a computer.

11. The digital signing apparatus of claim 10, wherein:

if a number of the log data registered with the log list exceeds a particular value, said processor outputs at least one of a plurality of log data registered with the log list to said computer, whereupon said computer registers said at least one of a plurality of log data with a second log list prepared in said computer, and thereupon,

said processor deletes said at least one of a plurality of log data from said log list in said storage medium.

12. A computer-readable storage medium for creating a digital signature, the computer-readable storage medium comprising:

program code to maintain a log list comprising previously generated digital signatures;

program code to operate a processor to compute a hash value of inputted data including a message to be signed or a hash value thereof, the inputted data further including only the most recently generated digital signature obtained from the log list or a hash value thereof;

program code to operate the processor to encode the computed hash value of the inputted data into predetermined format data that is suitable for encryption processing for generating a signature;

program code to operate the processor to apply a secret key to the encoded data to produce a generated digital signature; and

program code to operate the processor to register as log data the generated digital signature in the log list.

13. The computer-readable storage medium of claim 12, wherein the computer readable storage medium is a computer readable medium for storing the codes.

14. The computer-readable storage medium of claim 12, wherein the computer readable storage medium is a computer readable medium for transmitting the codes.