Method and system for processing electronic documents

• US 20010018739A1
• Filed: 12/28/2000
• Published: 08/30/2001
• Est. Priority Date: 12/20/1996
• Status: Active Grant

• Current Assignee: Financial Services Technology Consortium, International Business Machines Corporation, Sun Microsystems Incorporated (Oracle Corporation), Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Fleetboston Financial Corporation (Bank of America Corp.)
• Inventors: Chang, Sheveling, Virkki, Jyri, Hibbert, Chris, Kravitz, Jeffrey, Anderson, Milton, Jaffe, Frank, Palmer, Elaine
• Granted Patent: US 6,609,200 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 40/166 Editing, e.g. inserting or deleting
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/042 characterized in that the payment protocol involves at least one cheque
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/04 by paper currency

Abstract

The invention includes a markup language according to the SGML standard in which document type definitions are created under which electronic documents are divided into blocks that are associated with logical fields that are specific to the type of block. Each of many different types of electronic documents can have a record mapping to a particular environment, such as a legacy environment of a banking network, a hospital'"'"'s computer environment for electronic record keeping, a lending institution'"'"'s computer environment for processing loan applications, or a court or arbitrator'"'"'s computer system. Semantic document type definitions for various electronic document types (including, for example, electronic checks, mortgage applications, medical records, prescriptions, contracts, and the like) can be formed using mapping techniques between the logical content of the document and the block that is defined to include such content. Also, the various document types are preferably defined to satisfy existing customs, protocols and legal rules.

Claims

1. A method for allowing distributed production of an encrypted document, comprising

providing a computer network having a first and a second workstation and being capable of transferring an electronic document between the workstations,

providing each of the workstations with an editor capable of modifying an electronic document to include blocks of information including a content block representative of content, and a signature block representative of a signature signal associated with the content block, and having a hash operator for processing data to generate a hash signal,

allowing a user at the first workstation to operate the respective editor to modify a first electronic document to include a first content block and an associated first signature block, and to employ the hash operator to generate a first hash signal as a function of the first content block and to insert the first hash signal within the first signature block and to generate a first signature hash signal as a function thereof,

transferring the first electronic document to the second workstation,

allowing a user at the second workstation to operate the respective editor to modify the first electronic document to include a second content block and an associated second signature block, and to employ the hash operator to generate a second hash signal as a function of the second content block and to insert the second hash signal within the second signature block and to generate a second signature hash signal as a function thereof,

and allowing a third user to operate the editor to generate a third signature signal as a function of the first signature hash signal and the second signature hash signal.

3. The system of

claim 1

, wherein the document is a loan application.

4. The system of

claim 1

, wherein the document is a contract.

5. The system of

claim 1

, wherein the document is a medical record.

6. The system of

claim 1

, wherein the document is a prescription.

7. The system of

claim 1

, wherein the document is a transcript.

8. The system of

claim 1

, wherein the document is a notarized document.

9. A computer-based system of

claim 1

, further comprising:

a token, the token having a memory, a processor, and a port for communication with a computer,

a memory of such token that contains a private encryption key associated with secure information related to the user of the computer which is usable to append a secure, verifiable signature to an electronic document generated with the computer, and

certification information provided by a third party which is usable to append a secure, verifiable certificate to the electronic document to certify a relationship between the user and a public key of the user.

2. A system for transmission of electronic documents in a distributed computer network, comprising:

a first computer;

a second computer;

a network;

a document type definition according to the standard generalized markup language standard, the document type definition permitting the division of documents into a plurality of blocks; and

a secure authenticator, for ensuring authenticity of a document and permitting the discarding of a document part without destroying the authentication of the entire document.

10. A system for transmission of secure electronic documents over a distributed computer network, comprising:

a first signer computer;

a second signer computer;

a network;

a document processor, for generating electronic documents, wherein the documents may be divided into a plurality of blocks according to logical content of such blocks; and

a secure authenticator, for digitally signing such documents and such blocks.

11. A computer-based method of securing the transmission of electronic documents over a distributed computer network, comprising:

dividing the electronic document into a plurality of blocks;

applying a signature to one or more of the blocks; and

applying a multi-level hash function to the signature and the blocks.

12. The computer-based method of

claim 11

, wherein the blocks include a signature block and each block has a reference number, wherein the multi-level hash function comprises:

generating a random number;

appending the random number to the contents of the electronic document;

calculating a first hash value of the random number and the contents of the document;

inserting the first hash value into the signature block;

appending the random number to the contents of each block of the electronic document;

calculating a second hash value of the random number and the contents of the block;

calculating a third hash value of the first hash value, the second hash value, the reference numbers of the blocks, and the random number; and

encrypting the hash value.

13. The method of

claim 11

, wherein the blocks may be transmitted without destroying the integrity of the signature with respect to the document.

14. A computer-based system for processing a document that is human readable and machine processable, comprising:

a document type definition according to the standard generalized mark-up language standard;

a tag type of such document type definition for separating the document into a plurality of blocks; and

a signature algorithm, wherein a recipient of a signed portion of the document may verify one or more of the authenticity, the execution and the integrity of the portion without having access to the entire document.

15. The computer-based system of

claim 14

, wherein the signature algorithm comprises:

a first signature algorithm for signing the blocks; and

a second signature algorithm for signing the document.

16. The computer-based system of

claim 14

, wherein the document is a loan application.

17. The computer-based system of

claim 14

, wherein the document is a contract.

18. The computer-based system of

claim 14

, wherein the document is a medical record.

19. The computer-based system of

claim 14

, wherein the document is a prescription.

20. The computer-based system of

claim 14

, wherein the document is a transcript.

21. The computer-based system of

claim 14

, wherein the document is a notarized document.

22. The computer-based system of

claim 14

, wherein the first signature algorithm and the second signature algorithm are public key signature algorithms.

23. The computer-based system of

claim 15

, wherein the document is a loan application.

24. The computer-based system of

claim 15

, wherein the document is a contract.

25. The computer-based system of

claim 15

, wherein the document is a medical record.

26. The computer-based system of

claim 15

, wherein the document is a prescription.

27. The computer-based system of

claim 15

, wherein the document is a transcript.

28. The computer-based system of

claim 15

, wherein the document is a notarized document.

29. The computer-based system of

claim 15

, wherein the document is a financial instrument.

30. The computer-based system of

claim 29

, further comprising:

certificates to bind public keys to signers of such blocks or such documents.

31. The computer-based system of

claim 30

, further comprising:

a data storage and retrieval device for storing a private key of such signature algorithm.

32. The computer-based system of

claim 31

, further comprising:

a data storage and retrieval device for recording data associated with a financial transaction.

33. The computer-based system of

claim 32

, further comprising:

an algorithm for ensuring the uniqueness of the document.

34. The computer-based system of

claim 33

, wherein the transmission of the document is insensitive to the transport system.

35. A computer-based system for processing a document that is human readable and machine processable, comprising:

means for separating the document into a plurality of blocks;

means for signing the blocks; and

means for signing the entire document, wherein a recipient of a signed block of such document may verify that the block is a block of such entire document.

36. A system for providing cryptographically signed electronic financial instruments, comprising:

a syntax definition for said financial instruments;

electronic checkbook hardware, for ensuring authenticity and uniqueness of the financial instrument; and

a signature system permitting the binding and discarding of document parts.

37. A computer-based system for processing a document that is human readable and machine processable, comprising:

a document type definition according to the standard generalized mark-up language standard, wherein the document type definition provides for compliance with at least one of a legal requirement and a business practice.

38. The computer-based system of

claim 37

, further comprising:

a signature algorithm, wherein a recipient of a signed portion of the document may verify one or more of the authenticity, the execution and the integrity of the portion without having access to the entire document.

39. The computer-based system of

claim 38

, wherein compliance with at least one of a legal requirement and a business practice comprises:

a content block for a type of significant communication; and

a protocol for manipulation of the content of such block.

40. The computer-based system of

claim 37

, wherein the significant communication is a performative utterance.

41. The computer-based system of

claim 37

, wherein the significant communication is a statement to pay funds to the order of a party.

42. The computer-based system of

claim 37

, wherein the significant communication is a medical prescription.

44. The markup language of

claim 42

, wherein the document is a loan application.

45. The markup language of

claim 42

, wherein the document is a contract.

46. The markup language of

claim 42

, wherein the document is a medical record.

47. The markup language of

claim 42

, wherein the document is a prescription.

48. The markup language of

claim 42

, wherein the document is a transcript.

49. The markup language of

claim 42

, wherein the document is a notarized document.

50. The markup language of

claim 42

, further comprising:

means for dividing the electronic document into a plurality of blocks;

means for applying a signature to one or more of the blocks; and

means for applying a multi-level hash function to the signature and the blocks.

51. The computer-based method of

claim 49

, wherein the blocks include a signature block and each block has a reference number, wherein the multi-level hash function comprises:

means for generating a random number;

means for appending the random number to the contents of the electronic document;

means for calculating a first hash value of the random number and the contents of the document;

means for inserting the first hash value into the signature block;

means for appending the random number to the contents of each block of the electronic document;

means for calculating a second hash value of the random number and the contents of the block;

means for calculating a third hash value of the first hash value, the second hash value, the reference numbers of the blocks, and the random number; and

means for encrypting the third hash value.

43. A computer mark-up language for processing a document that is human readable and machine processable, comprising:

a document type definition according to the standard generalized mark-up language standard;

a tag type of such document type definition for separating the document into a plurality of blocks; and

a signature algorithm, wherein a recipient of a signed portion of the document may verify one or more of the authenticity, the execution and the integrity of the portion without having access to the entire document.