US4868877A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Public key/signature cryptosystem with enhanced digital signature certification
Assignee: Individual
•
Filing: 1988-02-12
•
Granted: 1989-09-19
•
Expires: 2008-02-12
Abstract
Abstract A public key cryptographic system is disclosed with enhanced digital signature certification which authenticates the identity of the public key holder. A hierarchy of nested certifications and signatures are employed which indicate the authority and responsibility levels of the individual whose signature is being certified. The present invention enhances the capabilities of public key cryptography so that it may be employed in a wider variety of business transactions, even those where two parties may be virtually unknown to each other. Counter-signature and joint-signature requirements are referenced in each digital certification to permit business transactions to take place electronically, which heretofore often only would take place after at least one party physically winds his way through a corporate bureaucracy. The certifier in constructing a certificate generates a special message that includes fields indentifying the public key which is being certified, and the name of the certifiee. In addition, the certificate constructed by the certifier includes the authority which is being granted including information which reflects issues of concern to the certifier such as, for example, the monetary limit for the certifiee and the level of trust which is granted to the certifiee. The certificate may also specify cosignature requirements which are being imposed upon the certifiee.
Inventors
- 👤 Addison M. Fischer
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 22:21
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/38; G06Q20/382; G06Q20/3829; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/60; G06F21/62; G06F21/6209; G06Q20/02; G06Q20/04; G06Q20/3821; G07; G07B; G07B17/00; G07B17/00733; H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; H04L9/3236; H04L9/3247; H04L9/3263; H04L9/3265; G06F2211/00; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2145; G06F2221/2147; G07B2017/00741; G07B2017/00758; G07B2017/00766; G07B2017/00782; G07B2017/00927; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 49
Claim 1
Independent Claim
244 words
In a communication system having a plurality of terminal devices coupled to a channel over which users of said terminal devices may exchange messages, at least some users having a public key and an associated key, an improved method for managing authority by digitally signing and certifying a message to be transmitted to an independent recipient comprising the steps of: formulating at least a portion of a digital message; digitally signing at least said portion of said message; and including within said message an authorizing digital certificate having a plurality of digital fields created by a certifier, said authorizing certificate being created by the steps of: specifying by the certifier in at least one of said digital fields, the authority which is vested in the certifier and which has been delegated to the signer of said message, by including sufficient digital information to enable said independent recipient of said message to verify, be electronically analyzing said message in accordance with a predetermined validation algorithm, that the authority exercised by the signer in signing the content of said message created by the signer was properly exercised by the signer in accordance with the authority delegated by the certifier; and identifying the certifier who has created the signer,s certificate in other of said digital fields by including sufficient digital information for said recipient of the message to determine by electronically analyzing said message that the certifier has been granted the authority to grant said delegated authority.
Claim 2
Dependent Claim
244 words
In a communication system having a plurality of terminal devices coupled to a channel over which users of said terminal devices may exchange messages, at least some users having a public key and an associated key, an improved method for managing authority by digitally signing and certifying a message to be transmitted to an independent recipient comprising the steps of: formulating at least a portion of a digital message; digitally signing at least said portion of said message; and including within said message an authorizing digital certificate having a plurality of digital fields created by a certifier, said authorizing certificate being created by the steps of: specifying by the certifier in at least one of said digital fields, the authority which is vested in the certifier and which has been delegated to the signer of said message, by including sufficient digital information to enable said independent recipient of said message to verify, be electronically analyzing said message in accordance with a predetermined validation algorithm, that the authority exercised by the signer in signing the content of said message created by the signer was properly exercised by the signer in accordance with the authority delegated by the certifier; and identifying the certifier who has created the signer,s certificate in other of said digital fields by including sufficient digital information for said recipient of the message to determine by electronically analyzing said message that the certifier has been granted the authority to grant said delegated authority.
Claim 3
Dependent Claim
29 words
A method according to claim 1, further including the step of providing at least one digital field in said message identifying the nature of the digital data being transmitted.
Claim 4
Dependent Claim
20 words
A method according to claim 2, wherein the nature of the digital data is identified as being a digital signature.
Claim 5
Dependent Claim
19 words
A method according to claim 2, wherein the nature of the digital data is identified as being a certificate.
Claim 6
Dependent Claim
20 words
A method according to claim 2, wherein the nature of the digital data is identified as being a business document
Claim 7
Dependent Claim
31 words
A method according to claim 1, wherein the formulating step includes the step of providing a digital field allowing the user to insert a predetermined comment regarding the data being transmitted.
Claim 8
Dependent Claim
55 words
A method according to claim 1, further including the step of applying a hashing function to at least a portion of the message to be transmitted to form a presignature hash; and wherein said digitally signing step includes the step of processing said presignature hash with the signer's private key to form said digital signature.
Claim 9
Dependent Claim
35 words
A method according to claim 7, further including the step of forming a digital signature packet comprising the digital signature and a representation of said at least a portion of the message to be transmitted.
Claim 10
Dependent Claim
35 words
A method according to claim 1, wherein said authorizing certificate includes digital fields defining the cosignature requirements which must accompany the signer's signature in order for the signer's signature to be treated as properly authorized.
Claim 11
Dependent Claim
37 words
A method according to claim 9, wherein said digital fields defining co-signature requirements set forth a required digital signature by a specified third party indicating approval of the signer's signature to thereby define a counter signature requirement.
Claim 12
Dependent Claim
18 words
A method according to claim 10, wherein the third party countersigns by digitally signing the signer,s digital signature.
Claim 13
Dependent Claim
36 words
A method according to claim 9, wherein the cosignature requirements include a digital field specifying at least one other digital signature which is required to appear in the digital message thereby defining a joint signature requirement.
Claim 14
Dependent Claim
26 words
A method according to claim 1, wherein said authorizing certificate includes at least one digital field defining limitations as to the authority granted by the certificate.
Claim 15
Dependent Claim
16 words
A method according to claim 1, wherein said authorizing certificate defines the plurality of the signer.
Claim 16
Dependent Claim
25 words
A method according to claim 13, further including the step of specifying a monetary limit for the signer in a digital field in said certificate.
Claim 17
Dependent Claim
33 words
A method according to claim 1, wherein said authorizing certificate includes at least one digital field defining a trust level indicative of the degree of responsibility delegated to the signer by the certifier.
Claim 18
Dependent Claim
55 words
A method according to claim 1, wherein said identifying step includes the step of specifying in digital fields in said authorizing certificate a hierarchy of certificates, whereby a recipient of the message can electronically verify in accordance with a predetermined validation algorithm the authority of the signer based upon an analysis of the signed message.
Claim 19
Dependent Claim
43 words
A method according to claim 1, wherein said step of creating an authorizing certificate includes the steps of creating a certificate by a certifier, whereby the certifier signs the certificate by using the private key associated with one of the certifier,s own certificates.
Claim 20
Dependent Claim
54 words
A method according to claim 1, including the step of transmitting a plurality of certificates, and wherein at least one of the transmitted certificates is a meta-certificate, where a meta-certificate is a digital authorizing certificate from which authority flows which originates from a trusted source commonly known to both the signer and prospective recipients.
Claim 21
Dependent Claim
201 words
In a communications system having a plurality of terminal devices coupled to a communications channel over which users of said terminal devices may exchange messages, at least some of said users having a public key and an associated private key, an improved method of digitally signing and certifying a message to be transmitted for managing authority comprising the steps of: formulating at least a portion of a digital message; digitally signing at least said portion of said message; including within said message an authorizing digital certificate having a plurality of digital fields created for the signer by a certifier, said authorizing certificate being created by the steps of: specifying by the certifier in at least one of said digital fields at least one party whose digital signature, in addition to the signer's signature, is required to be transmitted with said message in order for said signer's signature to be treated as properly authorized; and identifying the certifier who has created the signer,s certificate in other of said digital fields by including sufficient digital information to enable the recipient of said message to determine by electronically analyzing said message that the certifier has been granted the authority to certify the signer's certificate.
Claim 22
Dependent Claim
201 words
In a communications system having a plurality of terminal devices coupled to a communications channel over which users of said terminal devices may exchange messages, at least some of said users having a public key and an associated private key, an improved method of digitally signing and certifying a message to be transmitted for managing authority comprising the steps of: formulating at least a portion of a digital message; digitally signing at least said portion of said message; including within said message an authorizing digital certificate having a plurality of digital fields created for the signer by a certifier, said authorizing certificate being created by the steps of: specifying by the certifier in at least one of said digital fields at least one party whose digital signature, in addition to the signer's signature, is required to be transmitted with said message in order for said signer's signature to be treated as properly authorized; and identifying the certifier who has created the signer,s certificate in other of said digital fields by including sufficient digital information to enable the recipient of said message to determine by electronically analyzing said message that the certifier has been granted the authority to certify the signer's certificate.
Claim 23
Dependent Claim
43 words
A method according to claim 20, wherein said certificate includes digital fields representative of a list of each of the public keys of the parties at least one of which is required to cosign any message signed with the authority of the certificate.
Claim 24
Dependent Claim
69 words
A method according to claim 20, wherein said certificate includes digital fields representative of a list of public keys of the parties at least one of which may be required to sign any message created under the authority of said certificate and a field defining the minimum member of such signatures which must appear in said message in order for the signer's signature to be treated as properly authorized.
Claim 25
Dependent Claim
42 words
A method according to claim 20, wherein said certificate includes digital fields representative of a list of each of the certificates of the parties at least one of which is required to sign any message created under the authority of said certificate.
Claim 26
Dependent Claim
44 words
A method according to claim 20, including the step of including digital fields in said message associating with each digital signature in said message an authorizing certificate generated by a certifying party which specifies the authority which has been granted to the message sender.
Claim 27
Dependent Claim
35 words
A method according to claim 21, further including the steps of transmitting said message including said certificates and verifying at the recipient,s terminal device each signature through the use of at least one public key.
Claim 28
Dependent Claim
60 words
A method according to claim 20, wherein said step of including an authorizing certificate includes the step of defining a hierarchial ladder of certificates within digital fields in the transmitted message, whereby a recipient of the message can electronically verify in accordance with a predetermined validation algorithm the authority of the sender based upon an analysis of the signed message.
Claim 29
Dependent Claim
41 words
A method according to claim 20, further including the step of creating an authorizing certificate by a certifier, wherein the certifier creates a certificate by signing the certificate by using the private key associates with one of the certifier's own certificates.
Claim 30
Dependent Claim
28 words
A method according to claim 20, further including the step of providing at least one field in said message identifying the nature of the digital data being transmitted.
Claim 31
Dependent Claim
20 words
A method according to claim 28, wherein the nature of the digital data is identified as being a digital signature.
Claim 32
Dependent Claim
20 words
A method according to claim 28, wherein the nature of the digital data is identified as being a digital certificate.
Claim 33
Dependent Claim
55 words
A method according to claim 20, further including the step of applying a hashing function to at least a portion of the message to be transmitted to form a presignature hash; and wherein said digitally signing step includes the step of processing said presignature hash with the signer's private key to form said digital signature.
Claim 34
Dependent Claim
54 words
A method according to claim 20, wherein said authorizing certificate includes at least one digital field defining the requirement of at least one digital signature by at least one third party indicating approval of the sender's signature, thereby defining a countersignature requirement, wherein the third party countersigns by digitally signing the sender's digital signature.
Claim 35
Dependent Claim
38 words
A method according to claim 20, wherein said authorizing certificate includes at least one digital field specifying at least one additional party required to sign said portion of the digital message to thereby define a joint signature requirement.
Claim 36
Dependent Claim
26 words
A method according to claim 20, wherein said authorizing certificate includes at least one digital field defining limitations as to the authority granted by the certificate.
Claim 37
Dependent Claim
16 words
A method according to claim 34, wherein said limitations includes a monetary limit for the signer.
Claim 38
Dependent Claim
29 words
A method according to claim 20, wherein said authorizing certificate includes at least one digital field indicative of the degree of responsibility delegated to the signer by the certifier.
Claim 39
Dependent Claim
33 words
A method according to claim 36, wherein said at least one field defines a trust level indicating the degree of responsibility the certifier is willing to assume for subcertification done by the signer.
Claim 40
Dependent Claim
18 words
A method according to claim 20, wherein said authorizing certificate includes at least one field identifying the signer.
Claim 41
Dependent Claim
57 words
A method according to claim 20 further including the step of transmitting a plurality of certificates, and wherein at least one of the transmitted certificates is a meta-certificate where a meta-certificate is a digital authorizing certificate from which all authority flows, said meta-certificate originating from a trusted source commonly known to both the signer and the recipient.
Claim 42
Independent Claim
193 words
A method of digitally signing and certifying a sender's message to enable a recipient to determine that the send-r is properly authorized comprising the steps of: specifying in at least one digital field in an authorizing digital certificate created by a certifier the delegated authority which has been granted to the sender, said authorizing certificate including a plurality of digital fields; identifying in other of said digital fields in said certificate the identity of the certifier by including sufficient digital information for said recipient to determine that the certifier has been granted the authority to grant the delegated authority; transmitting a message to said recipient having at least one digital signature, said message including said digital certificate which specifies the authority which has been granted to the sender; receiving said message by said recipient and validating the identity of the sender by electronically analyzing the at least one digital signature; and determining the authority which has been granted to the sender by analyzing the delegated authority information specified in said authorizing certificate and determining by electronically analyzing said digital fields that said certifier has been granted the authority to grant said delegated authority.
Claim 43
Independent Claim
193 words
A method of digitally signing and certifying a sender's message to enable a recipient to determine that the send-r is properly authorized comprising the steps of: specifying in at least one digital field in an authorizing digital certificate created by a certifier the delegated authority which has been granted to the sender, said authorizing certificate including a plurality of digital fields; identifying in other of said digital fields in said certificate the identity of the certifier by including sufficient digital information for said recipient to determine that the certifier has been granted the authority to grant the delegated authority; transmitting a message to said recipient having at least one digital signature, said message including said digital certificate which specifies the authority which has been granted to the sender; receiving said message by said recipient and validating the identity of the sender by electronically analyzing the at least one digital signature; and determining the authority which has been granted to the sender by analyzing the delegated authority information specified in said authorizing certificate and determining by electronically analyzing said digital fields that said certifier has been granted the authority to grant said delegated authority.
Claim 44
Dependent Claim
70 words
A method according to claim 40, wherein said at least one digital signature is created by computing a presignature hash and said step of validating the identity of the sender including the step of recomputing said presignature hash with the received message, encrypting the signature to be verified, comparing the recomputed presignature hash and said encrypted signature to be verified; and rejecting said signature if there is not a match.
Claim 45
Dependent Claim
18 words
A method according to claim 41, wherein said encrypting operation is performed with the sender's public encrypting key.
Claim 46
Dependent Claim
32 words
A method according to claim 40, further including the step of electronically verifying by a predetermined verification algorithm that the received message is identical to the message as it was initially signed.
Claim 47
Dependent Claim
92 words
A method according to claim 40, further including the steps of: specifying in digital fields in said message at least one digital signature in addition to the signer's signature required to be transmitted; transmitting said at least one digital signature required to be transmitted and at least one associated certificate; electronically examining, upon receipt of said message, all received digital certificates and signatures; and determining in accordance with a predetermined validation algorithm that all necessary signatures are present and that the sender is properly authorized based on data contained in said certificates.
Claim 48
Dependent Claim
21 words
A method according to claim 40, wherein said authorizing certificate includes at least one field defining the identity of the signer.
Claim 49
Dependent Claim
52 words
A method according to claim 40, further including transmitting a plurality of certificates and wherein at least one of the transmitted certificates is a meta-certificate, where a meta-certificate is a digital authorizing certificate from which authority flows which originates from a trusted source commonly known to both the signer and the recipient.
References Cited (Backward Citations)
US4405829A
Cited
US4438824A
Cited
US4471163A
Cited
US4759063A
Cited
US4799258A
Cited
US4625076A
Cited
US4633036A
Cited
US4759064A
Cited
US4771461A
Cited
US4811393A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1992-09-18 | 1993-03-20 | 1993-09-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1996-09-18 | 1997-03-20 | 1997-09-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2000-09-18 | 2001-03-20 | 2001-09-19 | $7700.00 | Window Closed / Lapsed |