Systems and methods for verifying an electronic documents provenance date

• US 8,677,133 B1
• Filed: 02/10/2009
• Issued: 03/18/2014
• Est. Priority Date: 02/10/2009
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Spencer, Gregory Reeves
• Primary Examiner(s): Zecher, Cordelia
• Assistant Examiner(s): Almamun, Abdullah
• Application Number:
  US12/368,587
• Time in Patent Office: 1,862 Days
• Field of Search: None
• US Class Current: 713/178
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

The present invention validates provenance dates of electronic documents. A document version date may be determined by creating a unique checksum for the document and having the document'"'"'s owner digitally sign it with a private key. The checksum and digital signature are securely stored by an authorization entity along with a timestamp fixing the date/time. A unique resource identifier is returned to the user. Subsequently, if the document'"'"'s date needs to be proved to a third party, a verification program is applied to the original document to create a new checksum. The unique resource identifier is used to retrieve the signed checksum from the authorization entity. Upon verification of matching checksums, the timestamp provided by the authorization entity proves the date/time the document existed. In addition, the public key provided by the document owner proves that the checksum was signed by the owner'"'"'s private key, proving their ownership.

Claims

1. A method for confirming a provenance date of an electronic document, the method comprising:

obtaining the electronic document from a document provider at a first node of a computer network;

obtaining a verification application from an authorization entity at a second node of a computer network;

executing the verification application on the electronic document to create a verification checksum associated with the electronic document;

providing a unique resource identifier and a decryption key to obtain a comparison checksum that has been stored independently from the electronic document at the authorization entity, the authorization entity maintaining a timestamp specifying a time when the comparison checksum was signed; and

comparing the verification checksum with the comparison checksum, wherein if the verification checksum matches the comparison checksum, the provenance date of the electronic document is confirmed by the timestamp.

2. The method of claim 1, further comprising receiving the timestamp from the authorization entity along with the comparison checksum.

3. The method of claim 1, wherein the verification application is a transparent scripting application.