System and method for authenticating documents

• US 8,782,422 B2
• Filed: 12/22/2011
• Issued: 07/15/2014
• Est. Priority Date: 04/11/2003
• Status: Expired due to Fees

• Current Assignee: Nextenders PVT Limited
• Original Assignee: Nextenders PVT Limited
• Inventors: Shevade, Ravindra Waman
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US13/335,493
• Publication Number:
  US 20120096276A1
• Time in Patent Office: 936 Days
• Field of Search: 713/176
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A data processing system for distributing and authenticating documents from a plurality of parties to a recipient data processing apparatus is disclosed. The system comprises a plurality of document distribution devices each configured to generate an original hash value from the content of a file containing a document to be distributed. A recipient data processing apparatus is configured to generate an original super hash value from the plurality of the original hash values, and to distribute the original super hash value to each of the document distribution devices. The system provides assurance that distributed documents have not been tampered with during communication, by an unscrupulous distributing party, or by an unscrupulous recipient by only submitting a hash value of the document to be distributed. The hash value provides for assurance at the eventual recipient of the document that no changes to the document have been made.

Claims

1. A document distribution device for distributing a document to a recipient data processing apparatus via a data communications network, the document distribution device comprising:

a data processing apparatus comprising a processor, the data processing apparatus configured to process applications software for generating an electronic document, to encrypt the electronic document produced by the applications software using a public key associated with the document distribution device prior to being communicated to the recipient data processing apparatus, and to generate an original hash value from the electronic document; and

a communication interface configured to communicate the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, to communicate the electronic document to the recipient data processing apparatus via the data communications network, wherein the predetermined event includes expiration of a time limit.

2. The document distribution device as claimed in claim 1, wherein the data processing apparatus is configured to receive from the recipient data processing apparatus, via the communications interface, an original super-hash value generated by the recipient data processing apparatus from a combination of the original hash value communicated by the data processing apparatus and a hash value generated by at least one other document distribution device, and to receive a comparative super hash value generated by the recipient data processing apparatus from the electronic document received from the document distribution device and at least one other electronic document received from the at least one other document distribution device.

3. The document distribution device as claimed in claim 1, wherein the data processing apparatus is configured to decrypt the original hash value using the public key associated with the document distribution device.

4. The document distribution device as claimed in claim 2, wherein the data processing apparatus is configured to encrypt the super hash value received from the recipient data processing apparatus using a public key associated with the recipient data processing apparatus.

5. The document distribution device as claimed in claim 1, wherein the communications interface comprises a recording device configured to record the electronic document on a portable data storage medium, and a bar code generator operable to represent the original hash value as a bar code, and wherein the communications interface is configured to associate the bar code with the portable data storage medium.

6. The document distribution device as claimed in claim 1, wherein the applications software provides an on-line web browser, wherein the electronic document is generated from the on-line browser, and wherein the data communications network comprises at least one of an intranet and the Internet.

7. A method for distributing documents to a recipient data processing apparatus via a data communications network, the method comprising:

generating an electronic document;

encrypting the electronic document produced by an applications software using a public key associated with a document distribution device prior to being communicated to the recipient data processing apparatus;

generating an original hash value from the electronic document; and

communicating the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, communicating the electronic document to the recipient data processing apparatus via the data communications network, wherein the predetermined event includes expiration of a time limit.

8. A non-transitory computer readable medium having a program for executing a method of distributing documents to a recipient data processing apparatus via a data communications network, the method comprising:

generating an electronic document;

encrypting the electronic document produced by an applications software using a public key associated with a document distribution device prior to being communicated to the recipient data processing apparatus;

generating an original hash value from the electronic document; and

communicating the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, communicating the electronic document to the recipient data processing apparatus via the data communications network, wherein the predetermined event includes expiration of a time limit.

9. A document distribution device for distributing a document to a recipient data processing apparatus via a data communications network, the document distribution device comprising:

a data processing apparatus comprising a processor, the data processing apparatus configured to process applications software for generating an electronic document, to encrypt the electronic document produced by the applications software using a public key associated with the document distribution device prior to being communicated to the recipient data processing apparatus, and to generate an original hash value from the electronic document; and

a communication interface configured to communicate the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, to communicate the electronic document to the recipient data processing apparatus via the data communications network,

wherein the data processing apparatus is further configured to receive an original super hash value and a comparative super hash value from the recipient data processing apparatus, and to determine whether or not the electronic document sent to the recipient data processing apparatus has changed from a comparison of the original super hash value and the comparative super hash value.

10. The document distribution device as claimed in claim 9, wherein the data processing apparatus is configured to receive from the recipient data processing apparatus, via the communications interface, the original super-hash value generated by the recipient data processing apparatus from a combination of the original hash value communicated by the data processing apparatus and a hash value generated by at least one other document distribution device, and to receive the comparative super hash value generated by the recipient data processing apparatus from the electronic document received from the document distribution device and at least one other electronic document received from the at least one other document distribution device.

11. The document distribution device as claimed in claim 9, wherein the data processing apparatus is configured to decrypt the original hash value using the public key associated with the document distribution device.

12. The document distribution device as claimed in claim 9, wherein the data processing apparatus is configured to decrypt the super hash value received from the recipient data processing apparatus using the public key associated with the recipient data processing apparatus.

13. The document distribution device as claimed in claim 9, wherein the communications interface comprises a recording device configured to record the electronic document on a portable data storage medium, and a bar code generator operable to represent the original hash value as a bar code, and wherein the communications interface is configured to associate the bar code with the portable data storage medium.

14. The document distribution device as claimed in claim 9, wherein the applications software provides an on-line web browser, wherein the electronic document is generated from the on-line browser, and wherein the data communications network comprises at least one of an intranet and the Internet.

15. A document distribution device for distributing a document to a recipient data processing apparatus via a data communications network, the document distribution device comprising:

a data processing apparatus comprising a processor, the data processing apparatus configured to process applications software for generating an electronic document, to encrypt the electronic document produced by the applications software using a public key associated with the document distribution device prior to being communicated to the recipient data processing apparatus, and to generate an original hash value from the electronic document; and

a communication interface configured to communicate the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, to communicate the electronic document to the recipient data processing apparatus via the data communications network, wherein the electronic document is communicated as part of an e-mail.

16. The document distribution device as claimed in claim 15, wherein the data processing apparatus is configured to receive from the recipient data processing apparatus, via the communications interface, an original super-hash value generated by the recipient data processing apparatus from a combination of the original hash value communicated by the data processing apparatus and a hash value generated by at least one other document distribution device, and to receive a comparative super hash value generated by the recipient data processing apparatus from the electronic document received from the document distribution device and at least one other electronic document received from the at least one other document distribution device.

17. The document distribution device as claimed in claim 15, wherein the data processing apparatus is configured to decrypt the original hash value using the public key associated with the document distribution device.

18. The document distribution device as claimed in claim 16, wherein the data processing apparatus is configured to decrypt the super hash value received from the recipient data processing apparatus using a public key associated with the recipient data processing apparatus.

19. The document distribution device as claimed in claim 15, wherein the communications interface comprises a recording device configured to record the electronic document on a portable data storage medium, and a bar code generator operable to represent the original hash value as a bar code, and wherein the communications interface is configured to associate the bar code with the portable data storage medium.

20. The document distribution device as claimed in claim 15, wherein the applications software provides an on-line web browser, wherein the electronic document is generated from the on-line browser, and wherein the data communications network comprises at least one of an intranet and the Internet.

21. A method for distributing documents to a recipient data processing apparatus via a data communications network, the method comprising:

generating an electronic document;

encrypting the electronic document produced by an applications software using a public key associated with a document distribution device prior to being communicated to the recipient data processing apparatus;

generating an original hash value from the electronic document; and

communicating the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, communicating the electronic document to the recipient data processing apparatus via the data communications network, wherein the electronic document is communicated as part of an e-mail.

22. A non-transitory computer readable medium having a program for executing a method of distributing documents to a recipient data processing apparatus via a data communications network, the method comprising:

generating an electronic document;

encrypting the electronic document produced by an applications software using a public key associated with a document distribution device prior to being communicated to the recipient data processing apparatus;

generating an original hash value from the electronic document; and

communicating the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, communicating the electronic document to the recipient data processing apparatus via the data communications network, wherein the electronic document is communicated as part of an e-mail.

23. A method for distributing documents to a recipient data processing apparatus via a data communications network, the method comprising:

generating an electronic document;

encrypting the electronic document produced by an applications software using a public key associated with a document distribution device prior to being communicated to the recipient data processing apparatus;

generating an original hash value from the electronic document;

communicating the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, communicating the electronic document to the recipient data processing apparatus via the data communications network;

receiving an original super hash value and a comparative super hash value from the recipient data processing apparatus; and

determining whether or not the electronic document sent to the recipient data processing apparatus has changed from a comparison of the original super hash value and the comparative super hash value.

24. A non-transitory computer readable medium having a program for executing a method of distributing documents to a recipient data processing apparatus via a data communications network, the method comprising:

generating an electronic document;

encrypting the electronic document produced by an applications software using a public key associated with a document distribution device prior to being communicated to the recipient data processing apparatus;

generating an original hash value from the electronic document;

communicating the original hash value to the recipient data processing apparatus before a predetermined event via the data communications network, and, after the predetermined event, communicating the electronic document to the recipient data processing apparatus via the data communications network;

receiving an original super hash value and a comparative super hash value from the recipient data processing apparatus; and

determining whether or not the electronic document sent to the recipient data processing apparatus has changed from a comparison of the original super hash value and the comparative super hash value.