Preservation system for digitally created and digitally signed documents

• US 7,340,607 B2
• Filed: 02/04/2003
• Issued: 03/04/2008
• Est. Priority Date: 02/04/2003
• Status: Expired due to Fees

• Current Assignee: Eastman Kodak Company
• Original Assignee: Eastman Kodak Company
• Inventors: Horvath, Louis S., Wong, Victor C., Jones, Robert S., Williams, Donald R., Abhyankar, Vishwas G., Breslawski, Robert, Bayley, Robert B., Narayan, Badhri, Reisch, Robert V.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): GEE, JASON KAI YIN
• Application Number:
  US10/357,775
• Publication Number:
  US 20040153653A1
• Time in Patent Office: 1,855 Days
• Field of Search: 713/176, 713/186, 705/26, 705/27
• US Class Current: 713/176
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method for preserving a digitally signed document (160) in a digital data preservation system (10). A secure preservation request (176) combines the document (160) with a preservation signature (174) that is generated using an identification mark (172) and the document'"'"'s associated digital signature (168). Once the document (160) is authenticated by the digital preservation system vendor, both the document (160) and the identification mark (172) are recorded onto preservation media (210) in human-readable form.

Claims

1. A method for preserving a document data file provided by a customer to a vendor of data preservation services, wherein a digital signature is coupled to said document data file, the method comprising:

(a) forming a secure preservation request by;

(a1) encoding said digital signature, together with an identification mark from said customer, using said vendor'"'"'s public key, to form a preservation signature;

(a2) coupling said document data file with said preservation signature to form said secure preservation request;

(b) transferring said secure preservation request to said vendor;

(c) decoding said preservation signature using said vendor'"'"'s private key to obtain said digital signature and said identification mark;

(d) decoding said digital signature, using said customer'"'"'s public key to obtain a first unique data verifier;

(e) processing said document data file to obtain a second unique data verifier;

(f) comparing said first and second unique data verifiers; and

(g) recording the data encoding of said document data file and said identification mark onto an analog medium in human-readable form.

2. The method for preserving a document data file according to claim 1 further comprising the steps of encoding said document data file using said vendor public key and decoding said document data file using said vendor private key.

3. The method for preserving a document data file according to claim 1 wherein said human-readable form uses binary encoding.

4. The method for preserving a document data file according to claim 1 wherein said first unique data verifier is a hash file.

5. The method for preserving a document data file according to claim 1 further comprising the step of recording a validation mark onto said analog medium in human readable form.

6. The method for preserving a document data file according to claim 1 wherein said identification mark is supplied by the customer.

7. The method for preserving a document data file according to claim 1 wherein said identification mark is taken from the group consisting of entered text, a digitized image, a biometric mark, and scanned data.

8. The method for preserving a document data file according to claim 1 wherein said identification mark is electronically generated.

9. The method for preserving a document data file according to claim 5 wherein said validation mark comprises a certification timestamp.

10. A method for preserving a document data file provided by a customer to a vendor of data preservation services, wherein first and second identification marks are coupled to said document data file, the method comprising:

(a) forming a secure preservation request by;

(a1) encoding a digital signature, together with a first identification mark from said customer, using a private key, to form a first customer preservation verifier;

(a2) encoding the digital signature, together with a second identification mark from said customer, using the private key, to form a second customer preservation verifier;

(a3) coupling said document data file with said first and second preservation verifiers to form said secure preservation request;

(b) transferring said secure preservation request to said vendor;

(c) decoding portions of said secure preservation request using a vendor private key to obtain said first and second identification marks; and

(d) recording the data encoding of said document data file and said first and second identification marks onto a analog medium in human-readable form.

11. The method for preserving a document data file according to claim 10 wherein said human-readable form uses binary encoding.

12. The method for preserving a document data file according to claim 10 further comprising the step of recording a validation mark onto said analog medium in human readable form.

13. The method for preserving a document data file according to claim 10 wherein said first identification mark is taken from the group consisting of entered text, a digitized image, a biometric mark, and scanned data.

14. The method for preserving a document data file according to claim 10 wherein said first identification mark is electronically generated.

15. A method for preserving a document data file according to claim 10 wherein the steps of encoding said first and second digital signatures comprise using a vendor public key.

16. The method for preserving a document data file according to claim 12 wherein said validation mark comprises a certification timestamp.