US5214702A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Public key/signature cryptosystem with enhanced digital signature certification
Assignee: Individual
•
Filing: 1992-05-13
•
Granted: 1993-05-25
•
Expires: 2012-05-13
Abstract
Abstract A public key cryptographic system is disclosed with enhanced digital signature certification which authenticates the identity of the public key holder. A hierarchy of nested certifications and signatures are employed which indicate the authority and responsibility levels of the individual whose signature is being certified. The certifier in constructing a certificate generates a special message that includes fields identifying the public key which is being certified, and the name of the certifiee. The certificate is constructed by the certifier to define the authority which is being granted and which may relate to a wide range of authorizations, delegation responsibilities or restrictions given to, or placed on the certifiee. Methodology is also disclosed by which multiple objects such as, for example, a cover letter, an associated enclosed letter, an associated graphics file, etc., are signed together. Methodology is also disclosed for digitally signing documents in which a digital signature is generated for both computer verification and for reverification if a document needs to be reconfirmed by reentering from a paper rendition.
Inventors
- 👤 Addison M. Fischer
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 14:57
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/60; G06F21/62; G06F21/6209; G06Q20/04; G06Q20/38; G06Q20/382; G06Q20/3829; G07; G07B; G07B17/00; G07B17/00733; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; H04L9/3263; H04L9/3265; G06F2211/00; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2145; G06F2221/2147; G07B2017/00741; G07B2017/00758; G07B2017/00766; G07B2017/00782; G07B2017/00927; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
159 words
In a communication system having a plurality of terminal devices coupled to a channel over which users may exchange messages, at least some of said users having a public key and an associated private key, a method for controlling authority in a message digitally signed by a first party comprising the steps of: specifying a digital authority defining data structure including: a first digital field indicative of the public key of the first party, a second digital field indicative of the public key of a second party whose digital signature, in addition to the signature of the first party, must also be associated with the signed message in order for the signed message to be treated as properly authorized, and digitally signing the message such that the message is related to the digital authority defining data structure as part of the signature process, whereby message recipients may determine the digitally authority defining data structure during a signature verification process.
Claim 2
Dependent Claim
159 words
In a communication system having a plurality of terminal devices coupled to a channel over which users may exchange messages, at least some of said users having a public key and an associated private key, a method for controlling authority in a message digitally signed by a first party comprising the steps of: specifying a digital authority defining data structure including: a first digital field indicative of the public key of the first party, a second digital field indicative of the public key of a second party whose digital signature, in addition to the signature of the first party, must also be associated with the signed message in order for the signed message to be treated as properly authorized, and digitally signing the message such that the message is related to the digital authority defining data structure as part of the signature process, whereby message recipients may determine the digitally authority defining data structure during a signature verification process.
Claim 3
Dependent Claim
45 words
A method according to claim 1, further comprising the step of including in said second digital field digital data specifying a set of parties whose signatures must be associated with the signed message in order for the signed message to be treated as properly authorized.
Claim 4
Dependent Claim
14 words
A method according to claim 2, wherein said set of parties defines joint signers.
Claim 5
Dependent Claim
13 words
A method according to claim 2, wherein said set of parties defines countersigners.
Claim 6
Dependent Claim
69 words
A method according to claim 1, further including the step of including a further digital field in said digital authority defining data structure defining a set of authorizations which have been vested in the message signer, whereby the limitations and authorizations vested in the signer are incorporated into a digital signature packet and may be determined by a message recipient upon an electronic analysis of the digital signature packet.
Claim 7
Dependent Claim
226 words
In a communication system having a plurality of terminal devices coupled to a channel over which users may exchange messages, at least some of said users having a public key and an associated private key, a method for controlling authority in a hierarchial manner comprising the steps of: formulating at least a portion of a digital message, digitally signing at least said portion of said digital message; and indicating within said message a digital authority defining data structure having a plurality of digital fields created by a a certifier, said authorizing digital authority defining data structure being created by the steps of: specifying by the certifier in at least one of said digital fields, the authority which is vested in the certifier limiting the authority which has been delegated to the signer of said message, by including sufficient digital information to enable a recipient of said message to verify, by electronically analyzing said message, that the authority exercised by the signer in signing the content of said message created by the signer was properly exercised by the signer in accordance with the authority delegated by the certifier; and identifying the certifier in other of said digital fields by including sufficient digital information for said recipient of the message to determine by electronically analyzing said message that the certifier possesses the authority to grant said delegated authority.
Claim 8
Dependent Claim
226 words
In a communication system having a plurality of terminal devices coupled to a channel over which users may exchange messages, at least some of said users having a public key and an associated private key, a method for controlling authority in a hierarchial manner comprising the steps of: formulating at least a portion of a digital message, digitally signing at least said portion of said digital message; and indicating within said message a digital authority defining data structure having a plurality of digital fields created by a a certifier, said authorizing digital authority defining data structure being created by the steps of: specifying by the certifier in at least one of said digital fields, the authority which is vested in the certifier limiting the authority which has been delegated to the signer of said message, by including sufficient digital information to enable a recipient of said message to verify, by electronically analyzing said message, that the authority exercised by the signer in signing the content of said message created by the signer was properly exercised by the signer in accordance with the authority delegated by the certifier; and identifying the certifier in other of said digital fields by including sufficient digital information for said recipient of the message to determine by electronically analyzing said message that the certifier possesses the authority to grant said delegated authority.
Claim 9
Dependent Claim
55 words
A method according to claim 6, further including the step of applying a hashing function to at least a portion of the message to be transmitted to form a presignature hash; and wherein said digitally signing step includes the step of processing said presignature hash with the signer's private key to form said digital signature.
Claim 10
Dependent Claim
35 words
A method according to claim 7, further including the step of forming a digital signature packet comprising the digital signature and a representation of said at least a portion of the message to be transmitted.
Claim 11
Dependent Claim
38 words
A method according to claim 6, wherein said digital authority defining data structure includes digital fields defining the cosignature requirements which must accompany the signer's signature in order for the signer's signature to be treated as properly authorized.
Claim 12
Dependent Claim
37 words
A method according to claim 9, wherein said digital fields defining cosignature requirements set forth a required digital signature by a specified third party indicating approval of the signer's signature to thereby define a counter signature requirement.
Claim 13
Dependent Claim
18 words
A method according to claim 10, wherein the third party countersigns by digitally signing the signer's digital signature.
Claim 14
Dependent Claim
36 words
A method according to claim 9, wherein the cosignature requirements include a digital field specifying at least one other digital signature which is required to appear in the digital message thereby defining a joint signature requirement.
Claim 15
Dependent Claim
34 words
A method according to claim 6, wherein said authorizing digital authority defining data structure includes at least one digital field defining limitations as to the authority granted by the digital authority defining data structure.
Claim 16
Dependent Claim
20 words
A method according to claim 6, wherein said authorizing digital authority defining data structure defines the identity of the signer.
Claim 17
Dependent Claim
29 words
A method according to claim 13, further including the step of specifying a monetary limit for the signer in a digital field in said digital authority defining data structure.
References Cited (Backward Citations)
US4218582A
Cited
US4633036A
Cited
US4885777A
Cited
US5018196A
Cited
US4759064A
Cited
US4771461A
Cited
US4868877A
Cited
US5005200A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-05-24 | 1996-11-23 | 1997-05-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-05-24 | 2000-11-23 | 2001-05-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-05-24 | 2004-11-23 | 2005-05-25 | $7700.00 | Window Closed / Lapsed |