Real-time electronic signature validation systems and methods

• US 20080052517A1
• Filed: 08/21/2006
• Published: 02/28/2008
• Est. Priority Date: 08/21/2006
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Allen, David L., Yukawa, Steven J., Anstey, Timothy W., Jain, Rajit
• Granted Patent: US 7,822,985 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/106 Packet or message integrity

Abstract

A method for real-time validation of an electronically signature generated onboard a mobile system. The method includes maintaining a ground mobile user account management (GMUAM) module user database to have up-to-date authorized user account information. The GMUAM is hosted by a stationary central computer system (CCS). The method additionally includes transferring the up-to-date authorized user account information stored on the GMUAM user database to a mobile user account management (MUAM) module user database, thereby updating the MUAM user data base with up-to-date authorized user account information. The MUAM module is included in an onboard computer system (OCS) hosted by the mobile system. The method further includes evoking a signature validator module communicatively connected to the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) is authorized user account information. The SDA and the signature validator module hosted by the OCS.

Claims

1. A real-time electronic signature validation (RTESV) system, said system comprising:

at least one stationary central computer system (CCS) including a ground mobile user account management (GMUAM) module, the GMUAM module comprising a GMUAM user database that is updatable by an enterprise user system to have stored thereon up-to-date authorized user account information; and

at least one onboard computer system (OCS) hosted by at least one mobile system, each OCS including;

a mobile user account management (MUAM) module adapted to communicate with the GMUAM module, the MUAM module comprising a MUAM user database that is updatable by the GMUAM to have stored thereon the up-to-date authorized user account information stored on the GMUAM database; and

a signature validator module communicatively connected to the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) hosted by the OCS is authorized user account information.

2. The system of claim 1, wherein the enterprise user system comprises a stand alone computer based enterprise user interface for manually updating the GMUAM user database with the up-to-date authorized user account information.

3. The system of claim 1, wherein the enterprise user system comprises an enterprise user account management (EUAM) system for automatically updating the GMUAM user database with the up-to-date authorized user account information.

4. The system of claim 3, wherein the RTESV system further comprises a user update service module for propagating the up-to-date authorized user account information from the EUAM to the GMAUM module.

5. The system of claim 1, wherein the GMUAM further comprises an update failure module for generating a failure notification message when an attempt to update the MUAM user database using the up-to-date authorized user account information stored on the GMUAM database fails.

6. A method for real-time validation of an electronically signature generated onboard a mobile system, said method comprising:

maintaining a ground mobile user account management (GMUAM) module user database to have up-to-date authorized user account information stored thereon, the GMUAM hosted by a stationary central computer system (CCS);

transferring the up-to-date authorized user account information stored on the GMUAM user database to a mobile user account management (MUAM) module user database to update the MUAM user data base with up-to-date authorized user account information stored on the GMUAM, the MUAM module included in an onboard computer system (OCS) hosted by a mobile system; and

evoking a signature validator module communicatively connected to the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) is authorized user account information, the SDA and the signature validator module hosted by the OCS.

7. The method of claim 6, wherein maintaining the GMUAM user database comprises transmitting the up-to-date authorized user account information from an enterprise user system to the GMUAM database to update the GMUAM user database with the up-to-date authorized user account information.

8. The method of claim 7, wherein the enterprise user system comprises a stand alone computer based enterprise user interface and transmitting the up-to-date authorized user account information from an enterprise user system comprises manually updating the GMUAM user database with the up-to-date authorized user account information utilizing the stand alone computer based enterprise user interface.

9. The method of claim 7, wherein the enterprise user system comprises an enterprise user account management (EUAM) system and transmitting the up-to-date authorized user account information from an enterprise user system comprises automatically updating the GMUAM user database with the up-to-date authorized user account information utilizing the EUAM system.

10. The method of claim 9, wherein transmitting the up-to-date authorized user account information from the EUAM comprises propagating the up-to-date authorized user account information from the EUAM to the GMUAM module via a user update service module communicatively connected to the EUAM and the GMUAM.

11. The method of claim 6, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises transmitting the up-to-date authorized user account information from the GMUAM to the MUAM as non-loadable data.

12. The method of claim 6, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises generating a failure notification message when an attempt to update the MUAM user database using the up-to-date authorized user account information stored on the GMUAM database fails.

13. The method of claim 6, wherein evoking the signature validator module to access the MUAM database and verify whether user account information included in the electronic signature is authorized user account information comprises comparing the user account information included in the electronic signature to the updated authorized user account information stored on the MUAM database.

14. A method for real-time validation of an electronically signature generated onboard a mobile platform, said method comprising:

transmitting up-to-date authorized user account information from an enterprise user system to ground mobile user account management (GMUAM) module user database to maintain the GMUAM module user database with up-to-date authorized user account information stored thereon, the GMUAM hosted by a stationary central computer system (CCS);

transferring the up-to-date authorized user account information stored on the GMUAM user database to a mobile user account management (MUAM) module user database to update the MUAM user data base with up-to-date authorized user account information stored on the GMUAM, the MUAM module included in an onboard computer system (OCS) hosted by a mobile system;

evoking a signature validator module communicatively connected to the MUAM module to access the MUAM database and verify whether user account information included in an electronic signature initiated by a secure data application (SDA) is authorized user account information, the SDA and the signature validator module hosted by the OCS.

15. The method of claim 14, wherein the enterprise user system comprises a stand alone computer based enterprise user interface and transmitting the up-to-date authorized user account information from an enterprise user system comprises manually updating the GMUAM user database with the up-to-date authorized user account information utilizing the stand alone computer based enterprise user interface.

16. The method of claim 14, wherein the enterprise user system comprises an enterprise user account management (EUAM) system and transmitting the up-to-date authorized user account information from an enterprise user system comprises automatically updating the GMUAM user database with the up-to-date authorized user account information utilizing the EUAM system.

17. The method of claim 16, wherein transmitting the up-to-date authorized user account information from the EUAM comprises propagating the up-to-date authorized user account information from the EUAM to the GMUAM module via a user update service module communicatively connected to the EUAM and the GMUAM.

18. The method of claim 14, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises transmitting the up-to-date authorized user account information from the GMUAM to the MUAM as non-loadable data.

19. The method of claim 14, wherein transferring the up-to-date authorized user account information stored on the GMUAM user database to the MUAM comprises generating a failure notification message when an attempt to update the MAUM user database using the up-to-date authorized user account information stored on the GMUAM database fails.

20. The method of claim 14, wherein evoking the signature validator module to access the MUAM database and verify whether user account information included in the electronic signature is authorized user account information comprises comparing the user account information included in the electronic signature to the updated authorized user account information stored on the MUAM database.