System for generating a security document

• US 9,426,128 B2
• Filed: 07/02/2014
• Issued: 08/23/2016
• Est. Priority Date: 07/05/2013
• Status: Active Grant

• Current Assignee: Recipero Ltd.
• Original Assignee: Recipero Ltd.
• Inventors: Gray, Les, Shepherd, Steven Andrew, Hancock, Michael Arthur David
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US14/322,598
• Publication Number:
  US 20150012754A1
• Time in Patent Office: 783 Days
• Field of Search: 713/165, 713/167, 713/181
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A system for generating a security document includes a plurality of computing nodes forming a computing cluster, each computing node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, and each process having a process identifier for uniquely identifying the process within the node,

• • at least some of the processes on at least some of the nodes being adapted to perform the steps of:
    • a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;
    • b. generating a first random value and a second random value;
    • c. concatenating the subject identifier and the second random value;
    • d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value, resulting in a message digest value;
    • e. truncating the message digest value;
    • f. generating a document identifier comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first delimiter, the first random value, a second delimiter, and the truncated message digest value;
    • g. generating the security document, and applying the document identifier visibly to the document; and
    • h. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.

Claims

1. A system for generating a security document, comprising:

a plurality of computing nodes forming a computing cluster, each computing node comprising one or more hardware processors, each computing node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, each process being executed by at least one of the one or more hardware processors, and each process having a process identifier for uniquely identifying the process within the node,

at least some of the processes on at least some of the nodes being adapted to perform the steps of;

a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;

b. generating a first random value and a second random value;

c. concatenating the subject identifier and the second random value;

d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value, resulting in a message digest value;

e. truncating the message digest value;

f. generating a document identifier, by at least one of the one or more hardware processors, comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first random value, a second delimiter, and the truncated message digest value

g. generating the security document by formatting the information into a human-readable document in the form of a digital file, and applying the document identifier visibly to the document; and

h. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.

2. The system for generating a security document as claimed in claim 1, in which the document and document identifier are stored in a database on the same computing node which generated the document.

3. The system for generating a security document as claimed in claim 1, in which the first random value is derived from a microsecond timer on the computing node.

4. The system for generating a security document as claimed in claim 1, in which the cryptographic hash function is the MD5 message digest function.

5. The system for generating a security document as claimed in claim 4, in which the truncated message digest value in step (e) is the first eight characters of the hexadecimal output of the MD5 function.

6. The system for generating a security document as claimed in claim 1, in which the first delimiter is different from the second delimiter.

8. A system for generating a security document as claimed in claim 1, in which the generated document identifier is checked for identity against document identifiers previously generated by the same process on the same node, the process returning to step (b) if identity is detected, and continuing to step (g) if identity is not detected.

9. A system for generating a security document as claimed in claim 8, in which the generated document identifier is checked for identity only against document identifiers previously generated by the same process on the same node.

10. A system for generating a security document as claimed in claim 2, in which the generated document identifier is checked for identity against document identifiers previously generated by the same process on the same node, the process returning to step (b) if identity is detected, and continuing to step (g) if identity is not detected.

11. A system for generating a security document as claimed in claim 10, in which the generated document identifier is checked for identity only against document identifiers previously generated by the same process on the same node.

7. A method of generating a security document on a computing process, the process running on a computing node comprising one or more hardware processors, the computing node forming part of a computing cluster, each computing cluster including multiple computing nodes and each node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, each process being executed by least one of the one or more hardware processors and each process having a process identifier for uniquely identifying the process within the node, and the method comprising:

a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;

b. generating a first random value and a second random value;

c. concatenating the subject identifier and the second random value;

d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value;

resulting in a message digest value;

e. truncating the message digest value;

f. generating a document identifier, by at least one of the one or more hardware processors, comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first random value, a second delimiter, and the truncated message digest value;

g. generating the security document by formatting the information into a human-readable document in the form of a digital file, and applying the document identifier visibly to the document; and

h. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.