Method for ensuring the validity of recovered electronic documents from remote storage

• US 8,218,763 B2
• Filed: 04/22/2009
• Issued: 07/10/2012
• Est. Priority Date: 04/22/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Rooney, John G.
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): Jackson, Jenise
• Application Number:
  US12/427,963
• Publication Number:
  US 20100275030A1
• Time in Patent Office: 1,175 Days
• Field of Search: 380/201, 380/277, 713/165, 713/181, 726/26
• US Class Current: 380/201
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method for electronically storing and retrieving at a later date a true copy of a document stored on a remote storage device comprises: sending a document in electronic format from a document owner'"'"'s computing device to a store entity for storing the document; generating a digest of the document while the document is at the store entity by applying a hash function to the document; signing the digest electronically with a key while said document is at the store entity; generating a receipt that includes the digest and the key; sending the receipt to the document owner; and verifying, at the document owner'"'"'s computing device, that the received receipt corresponds to the document sent from the owner'"'"'s computing device.

Claims

1. A method for electronically storing and retrieving at a later date a true copy of a document stored on a remote storage device comprising:

receiving, at a store entity, a document in electronic format sent from a document owner'"'"'s computing device to said store entity for storing said document, said store entity remotely located from said computing device;

generating, by said store entity, a digest of said document while said document is at said store entity by applying a hash function to the document;

adding to said digest a time of expiration for storing said document at said store entity;

signing said digest electronically with a key while said document is at said store entity;

generating a receipt that includes said signed digest and said time of expiration;

sending, by said store entity, a copy of said receipt to said document owner;

verifying, at the document owner'"'"'s computing device, that the received receipt corresponds to the document sent from the owner'"'"'s computing device; and

subsequently renewing, by said document owner, the receipt to extend said time of expiration for storing said document, said store entity sending said renewed receipt to said owner'"'"'s computing device.

2. The method of claim 1 wherein said digest is signed with a private key.

3. The method of claim 2 wherein said private key is that of the store entity.

4. The method of claim 1 wherein said verifying includes applying a public key to verify that the receipt corresponds to the document sent from the document owner'"'"'s computing device.

5. The method of claim 4 wherein said hash function used for producing a receipt is used for checking said document when verifying that the receipt corresponds to the document sent from the document owner'"'"'s computing device.

6. The method of claim 5 further comprising:

requesting return of the document stored with the store entity by sending the receipt to the store entity.

7. The method of claim 6 further comprising:

verifying that the document received is a true copy of the document sent to the store entity by applying a public key to the receipt received; and

applying a hash function to the digest used for producing said receipt and the document received from said store entity to decrypt the digest and the document received from said store entity; and

comparing the two decrypted documents to verify that the document received from the store entity is a true copy of the document initially sent to the store entity.

8. A computer program product for use with a computer, the computer program product including a non-transitory computer readable storage medium having recorded thereon a computer program or program code for causing the computer to perform a method for electronically storing and retrieving at a later date a true copy of a document stored on a remote storage device comprising:

receiving, at a store entity, a document in electronic format sent from a document owner'"'"'s computing device to said store entity for storing said document, said store entity remotely located from said computing device;

generating, by said store entity, a digest of said document while said document is at said store entity by applying a hash function to the document;

adding to said digest a time of expiration for storing said document at said store entity;

signing said digest electronically with a key while said document is at said store entity;

generating a receipt that includes said signed digest and said time of expiration;

sending, by said store entity, a copy of said receipt to said document owner;

verifying that the received receipt corresponds to the document sent from the owner'"'"'s computing device; and

subsequently renewing, by said document owner, the receipt to extend said time of expiration for storing said document, said store entity sending said renewed receipt to said owner'"'"'s computing device.

9. The computer program product of claim 8 wherein said digest is signed with a private key.

10. The computer program product of claim 9 wherein said private key is that of the store entity.

11. The computer program product of claim 8 wherein said verifying includes applying a public key to verify that the receipt corresponds to the document sent from the document owner'"'"'s computing device.

12. The computer program product of claim 11 wherein said hash function used for producing a receipt is used for checking said document when verifying that the receipt corresponds to the document sent from the document owner'"'"'s computing device.

13. The computer program product of claim 12 further comprising:

requesting return of the document stored with the store entity by sending the receipt to the store entity.

14. The computer program product of claim 13 further comprising:

verifying that the document received is a true copy of the document sent to the store entity by applying a public key to the receipt received; and

applying a hash function to the digest used for producing said receipt and the document received from said store entity to decrypt the digest and the document received from said store entity; and

comparing the two decrypted documents to verify that the document received from the store entity is a true copy of the document initially sent to the store entity.