Signature validation and generation

• US 7,761,711 B2
• Filed: 09/12/2003
• Issued: 07/20/2010
• Est. Priority Date: 09/12/2002
• Status: Active Grant

• Current Assignee: Software AG
• Original Assignee: Software AG
• Inventors: Kollmorgen, Rene, Körner, Michael Ulrich, Schöning, Harald Ralf, Hermann, Eckehard, Kessler, Dieter Hermann, Winkler, Kay Hans-Peter
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US10/661,350
• Publication Number:
  US 20040123108A1
• Time in Patent Office: 2,503 Days
• Field of Search: 713/176
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/68 Special signature format, e.g. XML format
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods and apparatuses for validating a message with a signature. The method may include receiving the message with the signature and carrying out an integrated validation and storing process. The signature may be validated based on a validation algorithm and a key. The received message may be stored in a database. A method for generating a signature for a message may include carrying out an integrated receiving and generating process. The message to be sent may be received and the signature may be generated based on a signing algorithm and a key. The message may be sent with the signature.

Claims

1. A method for validating a message with a signature, wherein said method comprises:

receiving said message with said signature; and

carrying out an integrated validation and storing process, wherein said signature is validated based on a validation algorithm and a key and said received message is stored in a database, and wherein said carrying out the integrated validation and storing process comprises storing said message and validating said signature within one atomic process;

wherein said storing said message and validating said signature within one atomic process prevents possible modification of the message between validation and storage, and wherein said received message is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

2. The method according to claim 1, wherein the storing process is rolled back, if the signature is not valid.

3. The method according to claim 1, wherein the storing process is completed, if the signature is valid.

4. The method according to claim 1, wherein said received signature is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

5. The method according to claim 1, wherein the integrated validation and storing process is carried out by said database.

6. The method according to claim 5, wherein the integrated validation and storing process is controlled by said database.

7. The method according to claim 1, wherein said message is an XML-document.

8. The method according to claim 1, wherein said signature is a digital signature.

9. The method according to claim 1, wherein said integrated validation and storing process is carried out as an ACID transaction.

10. A method for generating a signature for a message, wherein said method comprises:

carrying out an integrated receiving and generating process, wherein said message to be sent is received and said signature is generated based on a signing algorithm and a key, wherein said carrying out the integrated receiving and generating process comprises receiving said message to be sent and generating said signature within one atomic process, wherein said receiving said message and said generating said signature within one atomic process prevents possible modification of the message between said receiving and said generating, and wherein said message to be sent is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished; and

sending said message with said signature.

11. The method according to claim 10, wherein said key to be used for generating the signature is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished.

12. The method according to claim 10, wherein said message is an XML-document.

13. The method according to claim 10, wherein said integrated receiving and generating process is carried out as an ACID transaction.

14. The method according to claim 10, wherein said integrated receiving and generation process is carried out in a database, where said message to be sent is stored.

15. The method according to claim 10, wherein said signature is a digital signature.

16. An apparatus for validating a message with a signature, wherein said apparatus comprises:

a first means for receiving said message with said signature; and

a second means for carrying out an integrated validation and storing process, wherein said second means are capable and affected to validate said signature based on a validation algorithm and a key and to store said message, wherein said carrying out the integrated validation and storing process comprises storing said message and validating said signature within one atomic process, wherein said storing said message and validating said signature within one atomic process prevents possible modification of the message between validation and storage, and wherein said received message is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

17. An apparatus for generating a signature for a message, wherein said apparatus comprises:

means for carrying out an integrated receiving and generating process, wherein said means are capable and affected to receive said message to be sent and to generate said signature based on a signing algorithm and a key, wherein said carrying out the integrated receiving and generating process comprises receiving said message to be sent and generating said signature within one atomic process, wherein said receiving said message and said generating said signature within one atomic process prevents possible modification of the message between said receiving and said generating, wherein said message to be sent is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished; and

means for sending said message with said signature.

18. A method for validating a message with a signature, wherein said method comprises:

receiving said message with said signature; and

carrying out an integrated validation and storing process, wherein said signature is validated based on a validation algorithm and a key and said received message is stored in a database, wherein said integrated validation and storing process prevents possible modification of the message between validation and storage, and wherein said received message is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

19. The method according to claim 18, wherein the storing process is rolled back, if the signature is not valid.

20. The method according to claim 18, wherein said received signature is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

21. A method for generating a signature for a message, wherein said method comprises:

carrying out an integrated receiving and generating process, wherein said message to be sent is received and said signature is generated based on a signing algorithm and a key, wherein said carrying out the integrated receiving and generating process prevents possible modification of the message between said receiving and said generating, and wherein said message to be sent is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished; and

sending said message with said signature.

22. The method according to claim 21, wherein said key to be used for generating the signature is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished.

23. A method for validating a message with a signature, wherein said method comprises:

receiving said message with said signature; and

carrying out an integrated validation and storing process, wherein said signature is validated based on a validation algorithm and a key and said received message is stored in a database, and wherein said carrying out the integrated validation and storing process comprises storing said message and validating said signature within one atomic process;

wherein said storing said message and validating said signature within one atomic process prevents possible modification of the message between validation and storage, and wherein said received signature is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

24. A method for generating a signature for a message, wherein said method comprises:

carrying out an integrated receiving and generating process, wherein said message to be sent is received and said signature is generated based on a signing algorithm and a key, wherein said carrying out the integrated receiving and generating process comprises receiving said message to be sent and generating said signature within one atomic process, wherein said receiving said message and said generating said signature within one atomic process prevents possible modification of the message between said receiving and said generating, and wherein said key to be used for generating the signature is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished; and

sending said message with said signature.

25. An apparatus for validating a message with a signature, wherein said apparatus comprises:

a first means for receiving said message with said signature; and

a second means for carrying out an integrated validation and storing process, wherein said second means are capable and affected to validate said signature based on a validation algorithm and a key and to store said message, wherein said carrying out the integrated validation and storing process comprises storing said message and validating said signature within one atomic process, wherein said storing said message and validating said signature within one atomic process prevents possible modification of the message between validation and storage, and wherein said received signature is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

26. An apparatus for generating a signature for a message, wherein said apparatus comprises:

means for carrying out an integrated receiving and generating process, wherein said means are capable and affected to receive said message to be sent and to generate said signature based on a signing algorithm and a key, wherein said carrying out the integrated receiving and generating process comprises receiving said message to be sent and generating said signature within one atomic process, wherein said receiving said message and said generating said signature within one atomic process prevents possible modification of the message between said receiving and said generating, wherein said key to be used for generating the signature is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished; and

means for sending said message with said signature.

27. A method for validating a message with a signature, wherein said method comprises:

receiving said message with said signature; and

carrying out an integrated validation and storing process, wherein said signature is validated based on a validation algorithm and a key and said received message is stored in a database, wherein said integrated validation and storing process prevents possible modification of the message between validation and storage, and wherein said received signature is locked before the integrated validation and storing process is carried out and released after the integrated validation and storing process has been finished.

28. A method for generating a signature for a message, wherein said method comprises:

carrying out an integrated receiving and generating process, wherein said message to be sent is received and said signature is generated based on a signing algorithm and a key, wherein said carrying out the integrated receiving and generating process prevents possible modification of the message between said receiving and said generating, and wherein said key to be used for generating the signature is locked before the integrated receiving and generating process is carried out and released after the integrated receiving and generating process has been finished; and

sending said message with said signature.