Electronic signatures

• US 7,502,934 B2
• Filed: 12/16/2003
• Issued: 03/10/2009
• Est. Priority Date: 12/16/2003
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Dietl, Josef
• Primary Examiner(s): Lipman; Jacob
• Assistant Examiner(s): Zand; Kambiz
• Application Number:
  US10/738,664
• Publication Number:
  US 20050132196A1
• Time in Patent Office: 1,911 Days
• Field of Search: 713/176, 713/179
• US Class Current: 713/176
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods, apparatus, including computer program products, and systems implement and use techniques relating to electronic signatures. In one implementation, a one-way hash is calculated for an electronic document and a digital watermark representing the one-way hash is embedded in a signature document. Based on a user input, the signature document having the embedded digital watermark is altered, and the electronic document is associated with the signature document. The electronic document and the signature document together comprise a signed electronic document. The user input can include biometric information, such as a handwritten signature or a voice recording. For additional security, the one-way hash can be encrypted before a representation of the hash is embedded in the signature document.

Claims

1. A method comprising:

receiving a signed electronic document comprising an electronic document and a signature document, the signature document including an electronic handwritten signature applied to first image and a digital watermark, wherein the digital watermark is a second image representing a watermark that overlays at least a portion of the first image and embeds in the signature document a first one-way hash calculated using the electronic document, and where the applied electronic signature altered an appearance of the signature document;

verifying an integrity of the digital watermark based, at least in part, on an integrity of the electronic handwritten signature applied to the image;

obtaining the first one-way hash from the first image in connection with at least determining the integrity of the digital watermark;

calculating a second one-way hash for the electronic document;

comparing the first one-way hash to the second one-way hash; and

verifying by a receiving device contents of the signed electronic document based at least in part on the one-way hash comparison.

2. The method of claim 1, wherein the electronic signature applied to an image comprises a black line representing a handwritten signature applied to a graphical representation of an image.

3. The method of claim 2, further comprising:

comparing the electronic handwritten signature to a valid signature specimen; and

verifying the signature document based at least in part on the signature comparison.

4. The method of claim 2, further comprising:

inspecting the black line for indications of alterations to the image after the black line was applied.

5. The method of claim 1, wherein the electronic signature applied to an image comprises a black line representing biometric data applied to a graphical representation of an image.

6. The method of claim 5, further comprising:

comparing the biometric data to expected biometric data; and

verifying the signature document based at least in part on the comparison of biometric data.

7. The method of claim 5, further comprising:

inspecting the black line for indications of alterations to the image after the black line was applied.

8. The method of claim 1, wherein the digital watermark represents an encrypted one-way hash, the method further comprising:

decrypting the one-way hash; and

comparing the decrypted one-way hash to the second one-way hash.

9. The method of claim 8, wherein decrypting the one-way hash comprises using a public key associated with a device used to encrypt the one-way hash.

10. A system comprising:

one or more processors configured to;

receive a signed electronic document comprising an electronic document and a signature document, the signature document including an electronic handwritten signature applied to first image and a digital watermark, wherein the digital watermark is a second image representing a watermark that overlays at least a portion of the first image and embeds in the signature document a first one-way hash calculated using the electronic document, and where the applied electronic signature altered an appearance of the signature document;

verify an integrity of the digital watermark based, at least in part, on an integrity of the electronic handwritten signature applied to the image;

obtain the first one-way hash from the image in connection with at least determining the integrity of the digital watermark;

calculate a second one-way hash for the electronic document;

compare the first one-way hash to the second one-way hash; and

verify contents of the signed electronic document based at least in part on the one-way hash comparison.

11. The system of claim 10, wherein the electronic signature applied to an image comprises a black line representing a handwritten signature applied to a graphical representation of an image.

12. The system of claim 11, further comprising:

the processor further configured to;

compare the electronic handwritten signature to a valid signature specimen; and

verify the signature document based at least in part on the signature comparison.

13. The system of claim 11, further comprising:

the processor further configured to;

inspect the black line for indications of alterations to the image after the black line was applied.

14. The system of claim 10, wherein the electronic signature applied to an image comprises a black line representing a password applied to a graphical representation of an image.

15. The system of claim 14, further comprising:

the processor further configured to;

compare the password to an expected password; and

verify the signature document based at least in part on the password comparison.

16. The system of claim 14, further comprising:

the processor further configured to;

inspect the black line for indications of alterations to the image after the black line was applied.

17. The system of claim 10, wherein the digital watermark represents an encrypted one-way hash, the processor further configured to:

decrypt the one-way hash; and

compare the decrypted one-way hash to the second one-way hash.

18. The system of claim 17, wherein the processor is further configured to decrypt the one-way hash using a public key associated with a device used to encrypt the one-way hash.

19. A method comprising:

receiving a signed electronic document comprising an electronic document and an audio signature file, the audio signature file including a voice recording applied to a first audio recording and a digital watermark, wherein the digital watermark is a second audio recording representing a watermark that overlays at least a portion of the first audio recording and embeds in the audio signature file a first one-way has calculated using the electronic document, and where the applied electronic signature altered the audio signature file;

verify an integrity of the digital watermark based, at least in part, on an integrity of the voice recording applied to the first audio recording;

obtaining the first one-way hash from the second audio recording in connection with at least determining the integrity of the digital watermark;

calculating a second one-way hash for the electronic document;

comparing the first one-way hash to the second one-way hash; and

verifying by a receiving device contents of the signed electronic document based at least in part on the one-way hash comparison.

20. The method of claim 19, wherein the digital watermark represents an encrypted one-way hash, the method further comprising:

decrypting the one-way hash; and

comparing the decrypted one-way hash to the second one-way hash.

21. The method of claim 20, wherein decrypting the one-way hash comprises using a public key associated with a device used to encrypt the one-way hash.

22. An apparatus comprising a computer-readable medium storing instructions operable to cause a programmable processor to:

receive a signed electronic document comprising an electronic document and an audio signature file, the audio signature file including a voice recording applied to a first audio recording and a digital watermark, wherein the digital watermark is a second audio recording representing a watermark that overlays at least a portion of the first audio recording and embeds in the audio signature file a first one-way has calculated using the electronic document, and where the applied electronic signature altered the audio signature file;

verify an integrity of the digital watermark based, at least in part, on an integrity of the voice recording applied to the first audio recording;

obtain the first one-way hash from the second audio recording in connection with least determining the integrity of the digital watermark;

calculate a second one-way hash for the electronic document;

compare the first one-way hash to the second one-way hash; and

verify by a receiving device contents of the signed electronic document based at least in part on the one-way hash comparison.

23. The apparatus of claim 22, wherein the audio signature file includes an electronic signature applied to an image comprises a black line representing a handwritten signature applied to a graphical representation of an image.

24. The apparatus of claim 23, further comprising instructions operable to:

compare the electronic handwritten signature to a valid signature specimen; and

verify the signature document based at least in part on the signature comparison.

25. The apparatus of claim 23, further comprising instructions operable to:

inspect the black line for indications of alterations to the image after the black line was applied.

26. The apparatus of claim 23, wherein the electronic signature applied to an image comprises a black line representing biometric data applied to a graphical representation of an image.

27. The apparatus of claim 26, further comprising instructions operable to:

compare the biometric data to expected biometric data; and

verify the signature document based at least in part on the comparison of biometric data.

28. The apparatus of claim 26, further comprising instructions operable to:

inspect the black line for indications of alterations to the image after the black line was applied.

29. The apparatus of claim 22, wherein the digital watermark represents an encrypted one-way hash, the instructions further operable to:

decrypt the one-way hash; and

compare the decrypted one-way hash to the second one-way hash.

30. The apparatus of claim 29, wherein instructions operable to decrypt the one-way hash comprise instructions operable to use a public key associated with a device used to encrypt the one-way hash.

31. An apparatus comprising a computer-readable medium storing instructions operable to cause a programmable processor to:

receiving a signed electronic document comprising an electronic document and an audio signature file, the audio signature file including a voice recording applied to a first audio recording and a digital watermark, wherein the digital watermark is a second audio recording representing a watermark that overlays at least a portion of the first audio recording and embeds in the audio signature file a first one-way has calculated using the electronic document, and where the applied electronic signature altered the audio signature file;

verify an integrity of the digital watermark based, at least in part, on an integrity of the voice recording applied to the first audio recording;

obtaining the first one-way hash from the second audio recording in connection with at least determining the integrity of the digital watermark;

calculating a second one-way hash for the electronic document;

comparing the first one-way hash to the second one-way hash; and

verifying by a receiving device contents of the signed electronic document based at least in part on the one-way hash comparison.

32. The apparatus of claim 31, wherein the digital watermark represents an encrypted one-way hash, the instructions further operable to:

decrypt the one-way hash; and

compare the decrypted one-way hash to the second one-way hash.

33. The apparatus of claim 32, wherein instructions operable to decrypt the one-way hash comprise instructions operable to use a public key associated with a device used to encrypt the one-way hash.