EP0845733A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Implementing digital signatures for data streams and data archives
Assignee: Sun Microsystems Inc
•
Filing: 1997-11-24
•
Granted: —
•
Expires: 2017-11-24
Abstract
Abstract Methods, apparatuses and products are provided for establishing and verifying the authenticity of data within one or more data files. In accordance with one aspect of the present invention, a method for verifying the authenticity of data involves providing at least one data file which includes an identifier and a signature file which includes the identifier for the data file as well as a digital signature. The digital signature is then verified using a computer system, and the identifier in the data file is compared with the identifier in the signature file using the computer system. In one embodiment, the identifier for the data file includes at least one certificate authority, site certificate, software publisher identifier, or a site name, and verifying the authenticity of data involves setting a security level for at least one of the certificate authority, said site certificate, said software publisher identifier, and said site name.
Inventors
- 👤 Benjamin J. Renaud
- 👤 Avril E. Hodges Wilsher
- 👤 John C. Pampuch
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-04 22:09
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/64; G06F15/00; G06F21/50; G06F21/51; G06F21/55; G06F21/554; G06F21/604
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
69 words
A computer-implemented method for verifying the authenticity of data, the method
comprising: receiving at least one data file and a signature file, wherein the data file and the
signature file are separate, the data file including an identifier, the signature file including
the identifier for the data file and a digital signature; and processing the signature file using a computer system to determine the authenticity
of the signature file.
Claim 2
Dependent Claim
65 words
A computer-implemented method for verifying the authenticity of data as recited in
claim 1 further including: comparing the identifier in the data file with the identifier in the signature file using
the computer system to determine the authenticity of the data file, wherein processing the
signature file further includes processing the digital signature using the computer system to
determine the authenticity of the signature file.
Claim 3
Dependent Claim
25 words
The method as recited in claim 2 further including marking the data file as signed
when the identifiers in the data and signature files match.
Claim 4
Independent Claim
63 words
The method as recited in one of claims 2 and 3 wherein when the identifiers in the
data and signature files do not match, the method further includes at least one selected from
the group of ignoring the data file, aborting the loading of the data file, and alerting a user,
when the identifiers in the data and signature files do not match.
Claim 5
Dependent Claim
42 words
A computer-implemented method for verifying the authenticity of data as recited in
one of claims 2-4 wherein comparing the identifier in the data file with the identifier in the
signature file using the computer system is repeated for a second data file.
Claim 6
Dependent Claim
62 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims wherein processing the digital signature further includes
verifying the digital signature with a signature algorithm, the signature algorithm being a
keyed algorithm, wherein the signature algorithm is selected from a group consisting of a
DSA algorithm, and a combined Message Digest and RSA algorithm.
Claim 7
Dependent Claim
37 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims wherein the identifier is generated using one of a one-way
hash function algorithm and a cyclic redundancy checksum algorithm.
Claim 8
Dependent Claim
48 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims wherein comparing the identifier in the data file with the
identifier in the signature file further includes generating one or more of the identifiers with
a one-way hash function algorithm.
Claim 9
Dependent Claim
48 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims wherein comparing the identifier in the data file with the
identifier in the signature file further includes checking one or more of the identifiers with a
cyclic redundancy checksum algorithm.
Claim 10
Dependent Claim
40 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims wherein receiving the data file and the signature file further
includes transferring the data file and the signature file among networked computers.
Claim 11
Dependent Claim
71 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims wherein: the identifier in the data file includes at least one of a certificate authority, a site
certificate, a software publisher identifier, and a site name; and the method includes setting a security level for at least one of said certificate
authority, said site certificate, said software publisher identifier, and said site name.
Claim 12
Dependent Claim
50 words
A computer-implemented method for verifying the authenticity of data as recited in
claim 11 including downloading the data file to the computer system, and when the data file
comprises an applet and when the digital signature is verified, the method includes
branding the applet as verified and running the applet.
Claim 13
Dependent Claim
62 words
A computer-implemented method for verifying the authenticity of data as recited in
claim 12 wherein when the data file comprises an applet, and when the signature is not
verified, the method includes determining whether an unsigned data file is acceptable for
execution on the computer, and terminating the applet if an unsigned data file is not
acceptable for execution on said computer.
Claim 14
Dependent Claim
31 words
A computer-implemented method for verifying the authenticity of data as recited in
claim 13 including branding the applet when the unsigned data file is determined acceptable
for execution on said computer.
Claim 15
Dependent Claim
64 words
A computer-implemented method for verifying the authenticity of data as recited in
claim 14 including the running the applet and determining whether the applet performs an
action that triggers a security check,wherein the security check includes comparing the
brand with the security level and allowing the action when the security check is satisfied
and disallowing the action if the security check is not satisfied.
Claim 16
Dependent Claim
63 words
A computer-implemented method for verifying the authenticity of data as recited in
any one of the preceding claims, further including establishing a data communication
connection with a remote site using the computer system, determining whether the site
requires a secure connection, and determining whether a site certificate for the site is valid
in response to a determination that a secure connection is required.
Claim 17
Independent Claim
107 words
An apparatus for verifying the authenticity of at least one data file and a signature
file, the data file including an identifier, the signature file including the identifier for the data
file and a digital signature, the apparatus comprising: a processor for processing the digital signature to determine the authenticity of the
signature file; and a comparator for comparing the identifier in the data file with the identifier in the
signature file using the computer system to determine the authenticity of the data file,
wherein the processor is further arranged to process the digital signature using the
computer system to determine the authenticity of the signature file.
Claim 18
Dependent Claim
56 words
An apparatus for verifying the authenticity of data as recited in claim 17 wherein the
comparator for comparing the identifier in the data file with the identifier in the signature
file using the computer system further includes a marker for marking the data file as signed
when the identifiers in the data and signature files match.
Claim 19
Dependent Claim
87 words
A computer program product including a computer-usable medium having
computer-readable program code embodied thereon for use in verifying the authenticity of
data, the computer program product including computer-readable program code for
effecting the following with a computer system: a) receiving at least one data file and a signature file, the data file including an
identifier, the signature file including the identifier for the data file and a digital signature;
and b) processing the signature file using a computer system to determine the
authenticity of the signature file.
Claim 20
Dependent Claim
64 words
A computer program product as recited in claim 19 further including computer-readable
program code for: comparing the identifier in the data file with the identifier in the signature file using
the computer system to determine the authenticity of the data file, wherein processing the
signature file further includes processing the digital signature using the computer system to
determine the authenticity of the signature file.
Claim 21
Dependent Claim
51 words
A computer program product as recited in claim 20 further including computer-readable
program code for: comparing the identifier in the data file with the identifier in the signature file using
the computer system further includes marking the data file as signed when the identifiers in
the data and signature files match.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.