Long-term validation of a digital signature status indicator

• US 8,683,605 B1
• Filed: 03/27/2012
• Issued: 03/25/2014
• Est. Priority Date: 03/27/2012
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Tenenboym, Isak, Levy, Philip, Kaufman, Marc, Landwehr, John
• Primary Examiner(s): Zecher, Cordelia
• Assistant Examiner(s): Lakhia, Viral
• Application Number:
  US13/431,803
• Time in Patent Office: 728 Days
• Field of Search: 726/26, 713/176, 713/164, 713/156, 380/255
• US Class Current: 726/26
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/645 using a third party

Abstract

Long-Term Validation (LTV) of a digital signature status indicator is disclosed. In some embodiments, the Long-Term Validation of a digital signature status indicator includes automatically determining whether a digital signature of a digitally signed document is LTV enabled based at least in part on LTV information; and generating an LTV status indicator that displays whether the digital signature of the digitally signed document is LTV enabled.

Claims

1. A method comprising:

determining that a digital signature of a digitally signed document is not enabled for long-term validation, wherein the long-term validation comprises validating the digital signature after an expiration of a digital certificate used to digitally sign the document;

identifying a required action for enabling the digital signature for the long-term validation, wherein identifying the required action comprises identifying a time period in which the long-term validation can be enabled; and

providing a long-term validation indicator that indicates that the digital signature is not enabled for the long-term validation, identifies the required action for enabling the long-term validation, and identifies the time period in which the long-term validation can be enabled.

2. The method of claim 1, wherein the time period is identified based on expiration data for the digital certificate.

3. The method of claim 1, further comprising:

subsequent to the expiration of the time period, determining that the digital signature of the digitally signed document is not enabled for long-term validation; and

providing an updated long-term validation indicator indicating that the digital signature cannot be enabled for the long-term validation.

4. The method of claim 1, wherein identifying the required action further comprises determining that the long-term validation can be enabled by embedding revocation data or expiration data for the digital certificate in the document.

5. The method of claim 1, wherein determining that the digital signature is not enabled for long-term validation comprises:

identifying a plurality of certificates in a certificate chain, wherein the certificate chain includes the digital certificate used to digitally sign the document; and

determining that at least one certificate from the plurality of certificates is not enabled for long-term validation.

6. The method of claim 1, further comprising:

determining that the required action has been performed subsequent to providing the long-term validation indicator; and

providing an updated long-term validation indicator indicating that the digital signature of the digitally signed document is enabled for the long-term validation.

7. A system comprising:

a processor; and

a non-transitory computer-readable medium coupled to the processor,

wherein the processor is configured to execute instructions stored on the non-transitory computer-readable medium to perform operations comprising;

determining that a digital signature of a digitally signed document is not enabled for long-term validation, wherein the long-term validation comprises validating the digital signature after an expiration of a digital certificate used to digitally sign the document,

identifying a required action for enabling the digital signature for the long-term validation, wherein identifying the required action comprises identifying a time period in which the long-term validation can be enabled, and

providing a long-term validation indicator that indicates that the digital signature is not enabled for the long-term validation, identifies the required action for enabling the long-term validation, and identifies the time period in which the long-term validation can be enabled.

8. The system of claim 7, wherein the time period is identified based on expiration data for the digital certificate.

9. The system of claim 7, wherein the operations further comprise:

subsequent to the expiration of the time period, determining that the digital signature of the digitally signed document is not enabled for long-term validation; and

providing an updated long-term validation indicator indicating that the digital signature cannot be enabled for the long-term validation.

10. The system of claim 7, wherein identifying the required action further comprises determining that the long-term validation can be enabled by embedding revocation data or expiration data for the digital certificate in the document.

11. The system of claim 7, wherein determining that the digital signature is not enabled for long-term validation comprises:

identifying a plurality of certificates in a certificate chain, wherein the certificate chain includes the digital certificate used to digitally sign the document; and

determining that at least one certificate from the plurality of certificates is not enabled for long-term validation.

12. The system of claim 7, further comprising:

determining that the required action has been performed subsequent to providing the long-term validation indicator; and

providing an updated long-term validation indicator indicating that the digital signature of the digitally signed document is enabled for the long-term validation.

13. A non-transitory computer-readable medium tangibly embodying program code executable by a processor, the program code comprising:

program code for determining that a digital signature of a digitally signed document is not enabled for long-term validation, wherein the long-term validation comprises validating the digital signature after an expiration of a digital certificate used to digitally sign the document;

program code for identifying a required action for enabling the digital signature for the long-term validation, wherein identifying the required action comprises identifying a time period in which the long-term validation can be enabled; and

program code for providing a long-term validation indicator that indicates that the digital signature is not enabled for the long-term validation, identifies the required action for enabling the long-term validation, and identifies the time period in which the long-term validation can be enabled.

14. The non-transitory computer-readable medium of claim 13, wherein the time period is identified based on expiration data for the digital certificate.

15. The non-transitory computer-readable medium of claim 13, further comprising:

program code for determining that the digital signature of the digitally signed document is not enabled for long-term validation subsequent to the expiration of the time period; and

program code for providing an updated long-term validation indicator indicating that the digital signature cannot be enabled for the long-term validation.

16. The non-transitory computer-readable medium of claim 13, wherein identifying the required action further comprises determining that the long-term validation can be enabled by embedding revocation data or expiration data for the digital certificate in the document.

17. The non-transitory computer-readable medium of claim 13, further comprising:

determining that the required action has been performed subsequent to providing the long-term validation indicator; and

providing an updated long-term validation indicator indicating that the digital signature of the digitally signed document is enabled for the long-term validation.