METHODS AND SYSTEMS FOR PROVIDING INDEPENDENT VERIFICATION OF INFORMATION IN A PUBLIC FORUM

• US 20080209218A1
• Filed: 02/28/2007
• Published: 08/28/2008
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Rowley, Peter
• Granted Patent: US 9,660,812 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A social networking site host includes, in a user'"'"'s profile, information that has been attested to and verified by both the user and an independent verifier. The independent verifier is an accepted authority with direct knowledge of the information. Both the user and verifier attest to the information by digitally signing the information and including the digital signature with the information. The host or visitors to the social networking site can authenticate the information by using both digital signatures. By authenticating the information, visitors and users viewing information on the social networking site can assume that the information is trusted and accurate.

Claims

1. A method of sharing accurate and trusted information, comprising:

receiving a statement from a user, the statement comprising information about the user, wherein the statement is attested by the user and is attested by a verifier knowledgeable of the information contained in the statement; and

incorporating the statement in a forum capable of sharing information about the user.

2. The method of claim 1, further comprising:

authenticating the attestation of the user; and

authenticating the attestation of the verifier.

3. The method of claim 2, wherein the user and the verifier attest the statement by digitally signing the statement.

4. The method of claim 3, wherein the user and the verifier digitally sign the statement using an asymmetric cryptographic system.

5. The method of claim 4, wherein authenticating the attestation of the user and the verifier, comprises:

retrieving a public cryptographic key of the verifier;

authenticating a verifier'"'"'s digital signature of the statement by applying the verifier'"'"'s public cryptographic key;

retrieving a public cryptographic key of the user; and

authenticating a user'"'"'s digital signature of the statement by applying the user'"'"'s public cryptographic key.

6. The method of claim 1, wherein the statement includes biographic information of the user.

7. The method of claim 1, wherein incorporating the statement in the forum comprises incorporating the statement in a website containing information about the user.

8. The method of claim 7, further comprising embedding the statement in a tag in the website.

9. An apparatus comprising of means for performing the method of claim 1.

10. A computer readable medium comprising computer-readable instructions for causing a processor to perform the method of claim 1.

11. A method of providing accurate and trusted information, comprising:

creating a statement comprising information for sharing in a forum;

creating a first attestation for the statement;

acquiring a second attestation from a verifier with knowledge of the information contained in the statement; and

providing the statement in the forum.

12. The method of claim 11, wherein creating the first attestation comprises digitally signing the statement.

13. The method of claim 12, wherein creating the first attestation comprises digitally signing the statement using an asymmetric cryptographic system.

14. The method of claim 11, wherein the statement includes biographic information.

15. An apparatus comprising of means for performing the method of claim 11.

16. A computer readable medium comprising computer-readable instructions for causing a processor to perform the method of claim 11.

17. A computer for sharing accurate and trusted information, comprising:

a memory configured to store a statement from a user, the statement comprising information about the user, wherein the statement is attested by the user and is attested by a verifier knowledgeable of the information contained in the statement; and

a processor configured to execute a forum application that incorporates the statement and that authenticates the attestation of the user and the attestation of the verifier.

18. The computer of claim 17, wherein the processor is further configured to retrieve a public cryptographic key of the user, authenticating a user'"'"'s digital signature of the statement by applying the user'"'"'s public cryptographic key, retrieving a public cryptographic key of the verifier, and authenticating a verifier'"'"'s digital signature of the statement by applying the verifier'"'"'s public cryptographic key.