Public key/signature cryptosystem with enhanced digital signature certification

• US 5,214,702 A
• Filed: 05/13/1992
• Issued: 05/25/1993
• Est. Priority Date: 02/12/1988
• Status: Expired due to Term

• Current Assignee: Addison M. Fischer
• Original Assignee: Addison M. Fischer
• Inventors: Fischer, Addison M.
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US07/884,867
• Time in Patent Office: 377 Days
• Field of Search: 380/23, 380/24, 380/25, 380/30
• US Class Current: 380/30
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00758 Asymmetric, public-key algorithms, e.g. RSA, Elgamal
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00782 Hash function, e.g. MD5, MD2, SHA
• CPC Class Codes: G07B 2017/00927 Certificates, e.g. X.509
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A public key cryptographic system is disclosed with enhanced digital signature certification which authenticates the identity of the public key holder. A hierarchy of nested certifications and signatures are employed which indicate the authority and responsibility levels of the individual whose signature is being certified. The certifier in constructing a certificate generates a special message that includes fields identifying the public key which is being certified, and the name of the certifiee. The certificate is constructed by the certifier to define the authority which is being granted and which may relate to a wide range of authorizations, delegation responsibilities or restrictions given to, or placed on the certifiee. Methodology is also disclosed by which multiple objects such as, for example, a cover letter, an associated enclosed letter, an associated graphics file, etc., are signed together. Methodology is also disclosed for digitally signing documents in which a digital signature is generated for both computer verification and for reverification if a document needs to be reconfirmed by reentering from a paper rendition.

Claims

1. In a communication system having a plurality of terminal devices coupled to a channel over which users may exchange messages, at least some of said users having a public key and an associated private key, a method for controlling authority in a message digitally signed by a first party comprising the steps of:

specifying a digital authority defining data structure including;

a first digital field indicative of the public key of the first party,

a second digital field indicative of the public key of a second party whose digital signature, in addition to the signature of the first party, must also be associated with the signed message in order for the signed message to be treated as properly authorized, and

digitally signing the message such that the message is related to the digital authority defining data structure as part of the signature process, whereby message recipients may determine the digitally authority defining data structure during a signature verification process.

2. A method according to claim 1, further comprising the step of including in said second digital field digital data specifying a set of parties whose signatures must be associated with the signed message in order for the signed message to be treated as properly authorized.

3. A method according to claim 2, wherein said set of parties defines joint signers.

4. A method according to claim 2, wherein said set of parties defines countersigners.

5. A method according to claim 1, further including the step of including a further digital field in said digital authority defining data structure defining a set of authorizations which have been vested in the message signer, whereby the limitations and authorizations vested in the signer are incorporated into a digital signature packet and may be determined by a message recipient upon an electronic analysis of the digital signature packet.

6. In a communication system having a plurality of terminal devices coupled to a channel over which users may exchange messages, at least some of said users having a public key and an associated private key, a method for controlling authority in a hierarchial manner comprising the steps of:

formulating at least a portion of a digital message,

digitally signing at least said portion of said digital message; and

indicating within said message a digital authority defining data structure having a plurality of digital fields created by a a certifier, said authorizing digital authority defining data structure being created by the steps of;

specifying by the certifier in at least one of said digital fields, the authority which is vested in the certifier limiting the authority which has been delegated to the signer of said message, by including sufficient digital information to enable a recipient of said message to verify, by electronically analyzing said message, that the authority exercised by the signer in signing the content of said message created by the signer was properly exercised by the signer in accordance with the authority delegated by the certifier; and

identifying the certifier in other of said digital fields by including sufficient digital information for said recipient of the message to determine by electronically analyzing said message that the certifier possesses the authority to grant said delegated authority.

7. A method according to claim 6, further including the step of applying a hashing function to at least a portion of the message to be transmitted to form a presignature hash;

and wherein said digitally signing step includes the step of processing said presignature hash with the signer'"'"'s private key to form said digital signature.

8. A method according to claim 7, further including the step of forming a digital signature packet comprising the digital signature and a representation of said at least a portion of the message to be transmitted.

9. A method according to claim 6, wherein said digital authority defining data structure includes digital fields defining the cosignature requirements which must accompany the signer'"'"'s signature in order for the signer'"'"'s signature to be treated as properly authorized.

10. A method according to claim 9, wherein said digital fields defining cosignature requirements set forth a required digital signature by a specified third party indicating approval of the signer'"'"'s signature to thereby define a counter signature requirement.

11. A method according to claim 10, wherein the third party countersigns by digitally signing the signer'"'"'s digital signature.

12. A method according to claim 9, wherein the cosignature requirements include a digital field specifying at least one other digital signature which is required to appear in the digital message thereby defining a joint signature requirement.

13. A method according to claim 6, wherein said authorizing digital authority defining data structure includes at least one digital field defining limitations as to the authority granted by the digital authority defining data structure.

14. A method according to claim 6, wherein said authorizing digital authority defining data structure defines the identity of the signer.

15. A method according to claim 13, further including the step of specifying a monetary limit for the signer in a digital field in said digital authority defining data structure.