Method for certifying and verifying digital web content using public cryptography

• US 8,352,379 B2
• Filed: 01/29/2001
• Issued: 01/08/2013
• Est. Priority Date: 02/14/2000
• Status: Active Grant

• Current Assignee: Refinitiv US Organization, LLC (Refinitiv US Holdings, Inc.)
• Original Assignee: Reuters Limited (The Woodbridge Co. Ltd.)
• Inventors: Fulton, Nicholas, Butler, James Matthew, Curtis, Mark Anthony, Whitehead, Miles Jonathan, Wu, Hui, Parrott, David
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): Winter, John M
• Application Number:
  US10/203,743
• Publication Number:
  US 20030158823A1
• Time in Patent Office: 4,362 Days
• Field of Search: 705/1, 705 50- 80, 709/229
• US Class Current: 705/75
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

There is provided a method of, computer programs for and apparatus for providing and accessing digital content such as a news item. A news provider generates a news item, creates a digitally signed version of the news item and packages them together with a digital certificate issued by a certificate authority containing the public key required to decrypt the digitally signed version. The package is posted to a server and is transmitted, or made available or transmission, over a public data network together with a computer program for verifying the news item. A receiving party receives, over the public data network, the package at a client device and is provided with means for launching, and if necessary first downloading, the verifying program. The verifying program uses the public key contained in the certificate to verify the digitally signed news item. Before being first used to verify a news item, the verifying program receives a shared secret from the receiving party which is stored locally to the client device and is used by the verifying program to confirm that it performed the verification process.

Claims

1. A method comprising:

receiving user input at a verifying program executing on a client computer, said user input comprising a shared secret data item, the shared secret data item including information that is a secret to and shared between a user of the client computer and the verifying program;

the verifying program storing the shared secret data item;

receiving by the verifying program from a server computer a content package comprising an unencrypted item of digital news content, an encrypted content item, and a digital certificate corresponding to a news provider;

decrypting by the verifying program the encrypted content item using a public key corresponding to the digital certificate;

verifying by the verifying program the unencrypted item of digital news content by comparing the unencrypted item of digital news content with the decrypted content item;

the verifying program displaying a result of the verifying of the unencrypted item of digital news content;

and the verifying program authenticating itself by displaying the shared secret data item.

2. The method of claim 1, wherein receiving the content package is subsequent to the verifying program receiving the shared secret data item.

3. The method of claim 1, wherein the wherein the content package is received over a public data network by a client computer together with a user interface component for commencing execution of the verifying program.

4. The method of claim 3, wherein the verifying program comprises a plug-in for an Internet browser application.

5. The method of claim 1, wherein the unencrypted item of digital news content is stored locally on a user client device.

6. One or more computer readable storage media storing computer executable instructions that, when executed by a client computer, causes the client computer to perform the steps of:

receiving user input at a verifying program executing on a client computer, said user input comprising a shared secret data item, the shared secret data item including information that is a secret to and shared between a user of the client computer and the verifying program;

the verifying program storing the shared secret data item;

receiving by the verifying program from a server computer a content package comprising an unencrypted item of digital news content, an encrypted content item, and a digital certificate corresponding to a news provider;

decrypting by the verifying program the encrypted content item using a public key corresponding to the digital certificate;

verifying by the verifying program the unencrypted item of digital news content by comparing the unencrypted item of digital news content with the decrypted content item;

the verifying program displaying a result of the verifying of the unencrypted item of digital news content; and

the verifying program authenticating itself by displaying the shared secret data item.

7. The computer readable media of claim 6, wherein receiving the content package is subsequent to the verifying program receiving the shared secret data item.

8. The computer readable media of claim 6, wherein the wherein the content package is received over a public data network by a client computer together with a user interface component for commencing execution of the verifying program.

9. The computer readable media of claim 8, wherein the verifying program comprises a plug-in for an Internet browser application.

10. The computer readable media of claim 6, wherein the unencrypted item of digital news content is stored locally on a user client device.