Real-time electronic signature validation systems and methods

• US 7,822,985 B2
• Filed: 08/21/2006
• Issued: 10/26/2010
• Est. Priority Date: 08/21/2006
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Allen, David L., Yukawa, Steven J., Anstey, Timothy W., Jain, Rajit
• Primary Examiner(s): Pyzocha; Michael
• Assistant Examiner(s): SIMS, JING F
• Application Number:
  US11/507,147
• Publication Number:
  US 20080052517A1
• Time in Patent Office: 1,527 Days
• Field of Search: 713/176, 713/180, 713/181, 713/175
• US Class Current: 713/176
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/106 Packet or message integrity

Abstract

A method for real-time validation of an electronically signature generated onboard a mobile system. The method includes maintaining a ground mobile user account management (GMUAM) module user database to have up-to-date authorized user account information. The GMUAM is hosted by a stationary central computer system (CCS). The method additionally includes transferring the up-to-date authorized user account information stored on the GMUAM user database to a mobile user account management (MUAM) module user database, thereby updating the MUAM user data base with up-to-date authorized user account information. The MUAM module is included in an onboard computer system (OCS) hosted by the mobile system. The method further includes evoking a signature validator module communicatively connected to the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) is authorized user account information. The SDA and the signature validator module hosted by the OCS.

Claims

1. A real-time electronic signature validation (RTESV) system, said system comprising:

at least one stationary central computer system (CCS) including a ground mobile user account management (GMUAM) module, the GMUAM module comprising a GMUAM user database that is updatable by an enterprise user system to have stored thereon up-to-date authorized user account information; and

at least one onboard computer system (OCS) hosted by at least one mobile system, where the at least one mobile system is located on a mobile vehicle, each OCS including;

a mobile user account management (MUAM) module adapted to communicate with the GMUAM module, the MUAM module comprising a MUAM user database that is updatable by the GMUAM to have stored thereon the up-to-date authorized user account information stored on the GMUAM database;

a subsystem of the OCS that receives an entry made by a user using the OCS and that generates a dynamic certificate that includes;

a first identifier which is uniquely associated with the OCS from which the entry was created; and

and a second identifier which identifies the mobile vehicle that the OCS is located on;

a signature validator module in communication with the subsystem, and further being communicatively connected to the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) hosted by the OCS is authorized user account information.

2. The system of claim 1, wherein the enterprise user system comprises a stand alone computer based enterprise user interface for manually updating the GMUAM user database with the up-to-date authorized user account information.

3. The system of claim 1, wherein the enterprise user system comprises an enterprise user account management (EUAM) system for automatically updating the GMUAM user database with the up-to-date authorized user account information.

4. The system of claim 3, wherein the RTESV system further comprises a user update service module for propagating the up-to-date authorized user account information from the EUAM to the GMAUM module.

5. The system of claim 1, wherein the GMUAM further comprises an update failure module for generating a failure notification message when an attempt to update the MUAM user database using the up-to-date authorized user account information stored on the GMUAM database fails.

6. A method for real-time validation of an electronic signature generated onboard a mobile vehicle, said method comprising:

receiving an entry made by an individual using an onboard computer system (OCS) located on the mobile vehicle, and generating an electronic signature for the entry, where the electronic signature includes a dynamic certificate, the dynamic certificate including a first identifier which is uniquely associated with the OCS from which the entry was created, and a second identifier which identifies the mobile vehicle on which the OCS is being used;

maintaining a ground mobile user account management (GMUAM) module user database to have up-to-date authorized user account information stored thereon, the GMUAM hosted by a stationary central computer system (CCS);

transferring the up-to-date authorized user account information stored on the GMUAM user database to a mobile user account management (MUAM) module user database to update the MUAM user data base with up-to-date authorized user account information stored on the GMUAM, the MUAM module included in the OCS;

after generating the electronic signature, substantially immediately evoking a signature validator module communicatively connected to the MUAM module to access the MUAM database and to verify, substantially immediately, whether user account information included in the electronic signature, initiated by a secure data application (SDA), is authorized user account information, the SDA and the signature validator module being hosted by the OCS.

7. The method of claim 6, wherein maintaining the GMUAM user database comprises transmitting the up-to-date authorized user account information from an enterprise user system to the GMUAM database to update the GMUAM user database with the up-to-date authorized user account information.

8. The method of claim 7, wherein the enterprise user system comprises a stand alone computer based enterprise user interface and transmitting the up-to-date authorized user account information from an enterprise user system comprises manually updating the GMUAM user database with the up-to-date authorized user account information utilizing the stand alone computer based enterprise user interface.

9. The method of claim 7, wherein the enterprise user system comprises an enterprise user account management (EUAM) system and transmitting the up-to-date authorized user account information from an enterprise user system comprises automatically updating the GMUAM user database with the up-to-date authorized user account information utilizing the EUAM system.

10. The method of claim 9, wherein transmitting the up-to-date authorized user account information from the EUAM comprises propagating the up-to-date authorized user account information from the EUAM to the GMUAM module via a user update service module communicatively connected to the EUAM and the GMUAM.

11. The method of claim 6, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises transmitting the up-to-date authorized user account information from the GMUAM to the MUAM as non-loadable data.

12. The method of claim 6, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises generating a failure notification message when an attempt to update the MUAM user database using the up-to-date authorized user account information stored on the GMUAM database fails.

13. The method of claim 6, wherein evoking the signature validator module to access the MUAM database and verify whether user account information included in the electronic signature is authorized user account information comprises comparing the user account information included in the electronic signature to the updated authorized user account information stored on the MUAM database.

14. A method for real-time validation of an electronically signature generated onboard a mobile vehicle, said method comprising:

receiving an entry made by an individual using an onboard computer system (OCS) of a mobile system located on the mobile vehicle, and generating an electronic signature for the entry, where the electronic signature includes a dynamic certificate, the dynamic certificate including;

a first identifier which is uniquely associated with the OCS from which the entry was created; and

a second identifier which specifically identifies the mobile vehicle on which the OCS is being used;

transmitting up-to-date authorized user account information from an enterprise user system to ground mobile user account management (GMUAM) module user database to maintain the GMUAM module user database with up-to-date authorized user account information stored thereon, the GMUAM hosted by a stationary central computer system (CCS);

transferring the up-to-date authorized user account information stored on the GMUAM user database to a mobile user account management (MUAM) module user database to update the MUAM user data base with up-to-date authorized user account information stored on the GMUAM, the MUAM module included in the OCS hosted by the mobile system;

evoking a signature validator module in communication with the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) is authorized user account information, the SDA and the signature validator module hosted by the OCS.

15. The method of claim 14, wherein the enterprise user system comprises a stand alone computer based enterprise user interface and transmitting the up-to-date authorized user account information from an enterprise user system comprises manually updating the GMUAM user database with the up-to-date authorized user account information utilizing the stand alone computer based enterprise user interface.

16. The method of claim 14, wherein the enterprise user system comprises an enterprise user account management (EUAM) system and transmitting the up-to-date authorized user account information from an enterprise user system comprises automatically updating the GMUAM user database with the up-to-date authorized user account information utilizing the EUAM system.

17. The method of claim 16, wherein transmitting the up-to-date authorized user account information from the EUAM comprises propagating the up-to-date authorized user account information from the EUAM to the GMUAM module via a user update service module communicatively connected to the EUAM and the GMUAM.

18. The method of claim 14, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises transmitting the up-to-date authorized user account information from the GMUAM to the MUAM as non-loadable data.

19. The method of claim 14, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises generating a failure notification message when an attempt to update the MUAM user database using the up-to-date authorized user account information stored on the GMUAM database fails.

20. The method of claim 14, wherein evoking the signature validator module to access the MUAM database and verify whether user account information included in the electronic signature is authorized user account information comprises comparing the user account information included in the electronic signature to the updated authorized user account information stored on the MUAM database.