US5373558A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Desinated-confirmer signature systems
Assignee: Cufer Asset Ltd LLC
•
Filing: 1993-05-25
•
Granted: 1994-12-13
•
Expires: 2013-05-25
Abstract
Abstract Cryptographic methods and apparatus for signing (101), receiving (102), verifying (103), and confirming (104) designated-confirmer signatures are disclosed. Such a signature (11) convinces the receiver that the confirmer can convince others that the signer issued the signature. Thus, more protection is provided to the recipient of a signature than with prior art zero-knowledge or undeniable signature techniques, and more protection is provided to the signer than with prior art self-authenticating signatures. A designated confirmer signature is formed in a setting where the signer creates and issues a public key (201) and the confirmer also creates and issues a public key (202). Should the confirmer offer a confirmation (13), the verifier is convinced that the signature was issued by the signer. Such confirmation can itself be, for example, self-authenticating, unconvincing to other parties, or designated confirmer. With plural confirmers, various combinations may be realized, some even including confirmer anonymity.
Inventors
- 👤 David Chaum
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 23:44
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016
Claims Analysis
Total Claims: 28
Claim 1
Independent Claim
177 words
A method for public-key digital authentication of messages, comprising the steps of: creating a private key by a signing party; making a public key, corresponding to said private key of said signing party, verifiable by at least a receiving party; creating a private key by a confirming party and keeping the private key substantially unavailable to at least said receiving party; making a public key, corresponding to said private key of said confirming party, verifiable by at least said receiving party; communicating data including a signature between said signing and said receiving parties, where (a) the data is convincing to the receiving party that, by use of said private key corresponding to said public key of said confirming party, other parties can be convinced that the signature was made by the signing party, and (b) where it is substantially infeasible for the receiving party, for so long as the private key corresponding to the public key of the confirming party is unavailable to the receiving party, to convince other parties of the signature by the signing party.
Claim 2
Independent Claim
177 words
A method for public-key digital authentication of messages, comprising the steps of: creating a private key by a signing party; making a public key, corresponding to said private key of said signing party, verifiable by at least a receiving party; creating a private key by a confirming party and keeping the private key substantially unavailable to at least said receiving party; making a public key, corresponding to said private key of said confirming party, verifiable by at least said receiving party; communicating data including a signature between said signing and said receiving parties, where (a) the data is convincing to the receiving party that, by use of said private key corresponding to said public key of said confirming party, other parties can be convinced that the signature was made by the signing party, and (b) where it is substantially infeasible for the receiving party, for so long as the private key corresponding to the public key of the confirming party is unavailable to the receiving party, to convince other parties of the signature by the signing party.
Claim 3
Dependent Claim
13 words
In the method of claim 1, providing said signature to said confirming party.
Claim 4
Dependent Claim
34 words
In the method of claim 2, wherein said confirming party confirms that a signature is convincing to the receiving party but where transcripts of associated received data are substantially unconvincing to the receiving party.
Claim 5
Dependent Claim
17 words
In the method of claim 2, said confirming party confirming a signature by issuing a self-authenticating signature.
Claim 6
Dependent Claim
19 words
In the method of claim 1, said confirming party being able to confirm individual signatures without confirming any others.
Claim 7
Dependent Claim
16 words
In the method of claim 1, requiring cooperation of plural confirming parties to confirm a signature.
Claim 8
Dependent Claim
16 words
In the method of claim 1, allowing cooperation of alternate confirming parties to confirm a signature.
Claim 9
Dependent Claim
17 words
In the method of claim 7, said confirming party not revealing its identity in the confirmation process.
Claim 10
Dependent Claim
193 words
Apparatus for public-key digital authentication of messages, comprising: means for creating a private key by a signing party; means for making a public key, corresponding to said private key of said signing party, verifiable by at least a receiving party; means for creating a private key by a confirming party and for keeping the private key substantially unavailable to at least said receiving party; means for making a public key, corresponding to said private key of said confirming party, verifiable by at least said receiving party; means for communicating data including a signature between said signing and said receiving parties, including (a) means to ensure that the data is convincing to said receiving party that, by use of said private key corresponding to said public key of said confirming party, other parties can be convinced that the signature was made by the signing party, and also including (b) means to ensure that it is substantially infeasible for the receiving party, for so long as the private key corresponding to the public key of the confirming party is unavailable to the receiving party, to convince other parties of the signature by the signing party.
Claim 11
Dependent Claim
193 words
Apparatus for public-key digital authentication of messages, comprising: means for creating a private key by a signing party; means for making a public key, corresponding to said private key of said signing party, verifiable by at least a receiving party; means for creating a private key by a confirming party and for keeping the private key substantially unavailable to at least said receiving party; means for making a public key, corresponding to said private key of said confirming party, verifiable by at least said receiving party; means for communicating data including a signature between said signing and said receiving parties, including (a) means to ensure that the data is convincing to said receiving party that, by use of said private key corresponding to said public key of said confirming party, other parties can be convinced that the signature was made by the signing party, and also including (b) means to ensure that it is substantially infeasible for the receiving party, for so long as the private key corresponding to the public key of the confirming party is unavailable to the receiving party, to convince other parties of the signature by the signing party.
Claim 12
Dependent Claim
16 words
In the apparatus of claim 9, including means for providing said signature to said confirming party.
Claim 13
Dependent Claim
38 words
In the apparatus of claim 9, including means for said confirming party to confirm that a received signature is convincing to the receiving party, but where transcripts of associated received data are substantially unconvincing to the receiving party.
Claim 14
Dependent Claim
21 words
In the apparatus of claim 9, including means for said confirming party to confirm said signature by creating a self-authenticating signature.
Claim 15
Dependent Claim
20 words
In the apparatus of claim 9, including means for said confirming party to confirm individual signatures without confirming any others.
Claim 16
Dependent Claim
19 words
In the apparatus of claim 9, including means ensuring cooperation of plural confirming parties to confirm a said signature.
Claim 17
Dependent Claim
19 words
In the apparatus of claim 14, including means for said confirming party to conceal its identity in the confirmation.
Claim 18
Dependent Claim
19 words
In the apparatus of claim 9, including means allowing cooperation of alternate confirming parties to confirm a said signature.
Claim 19
Independent Claim
115 words
A method for creating a first signature hinged on a second signature, comprising the steps of: creating a first private key by a signer party; making a corresponding first public key known to at least one other party; forming said second signature, related to a second public key, without knowledge of the corresponding second private key; and forming said first signature, by said signer party, depending on said second signature, such that validity of said second signature substantially means validity of said first signature and validity of said hinged signature as whole, and substantial unconvincingness of said second signature means substantial unconvincingness of said first signature and unconvincingness of said hinged signature as a whole.
Claim 20
Independent Claim
115 words
A method for creating a first signature hinged on a second signature, comprising the steps of: creating a first private key by a signer party; making a corresponding first public key known to at least one other party; forming said second signature, related to a second public key, without knowledge of the corresponding second private key; and forming said first signature, by said signer party, depending on said second signature, such that validity of said second signature substantially means validity of said first signature and validity of said hinged signature as whole, and substantial unconvincingness of said second signature means substantial unconvincingness of said first signature and unconvincingness of said hinged signature as a whole.
Claim 21
Dependent Claim
88 words
The method of claim 17 including the further step of: forming said first signature by replacing the output of a one-way function in a signature scheme by the output of a combining function; said combining function taking one or more parameters of said second signature as a first input; said combining function taking the output of said one-way function as a second input; and said combining function producing an output such that substantial control over said first input gives substantial control over said output of said combining function.
Claim 22
Dependent Claim
100 words
The method of claim 17, including the further steps of: issuing, by said signer party, to a receiver party, said hinged signature; convincing, by said signer party, of said receiver party, that at least one confirmer party, corresponding with said second public key, can separately convince other parties that the hinged signature was formed using said private key; and said signature and said convincing by said signer party being such that said receiver party is substantially unable to convince other parties knowing said first and said second public keys that said first signature was formed using said first private key.
Claim 23
Dependent Claim
100 words
The method of claim 18, including the further steps of: issuing, by said signer party, to a receiver party, said hinged signature; convincing, by said signer pretty, of said receiver party, that at least one confirmer party, corresponding with said second public key, can separately convince other parties that the hinged signature was formed using said private key; and said signature and said convincing by said signer party being such that said receiver party is substantially unable to convince other parties knowing said first and said second public keys that said first signature was formed using said first private key.
Claim 24
Dependent Claim
121 words
Apparatus for creating a first signature hinged on a second signature, said apparatus comprising: means for creating a first private key by a signer party; means for making a corresponding first public key known to at least one other party; means for forming said second signature, related to a second public key, without knowledge of the corresponding second private key; and means for forming said first signature, by said signer party, depending on said second signature, such that validity of said second signature substantially means validity of said first signature and validity of said hinged signature as whole, and substantial unconvincingness of said second signature means substantial unconvincingness of said first signature and unconvincingness of said hinged signature as a whole.
Claim 25
Dependent Claim
121 words
Apparatus for creating a first signature hinged on a second signature, said apparatus comprising: means for creating a first private key by a signer party; means for making a corresponding first public key known to at least one other party; means for forming said second signature, related to a second public key, without knowledge of the corresponding second private key; and means for forming said first signature, by said signer party, depending on said second signature, such that validity of said second signature substantially means validity of said first signature and validity of said hinged signature as whole, and substantial unconvincingness of said second signature means substantial unconvincingness of said first signature and unconvincingness of said hinged signature as a whole.
Claim 26
Dependent Claim
99 words
Apparatus as in claim 21 further comprising: means for forming said first signature by replacing the output of a one-way function in a signature scheme by the output of a combining function; means for causing said combining function to take one or more parameters of said second signature as a first input; means for causing said combining function to take the output of said one-way function as a second input; and means for causing said combining function to produce an output such that substantial control over said first input gives substantial control over said output of said combining function.
Claim 27
Dependent Claim
105 words
Apparatus as in claim 21 further comprising: means for issuing, by said signer party, to a receiver party, said hinged signature; means for convincing, by said signer party, of said receiver party, that at least one confirmer party, corresponding with said second public key, can separately convince other parties that the hinged signature was formed using said private key; and means for causing said signature and said convincing by said signer party to be such that said receiver party is substantially unable to convince other parties knowing said first and said second public keys that said first signature was formed using said first private key.
Claim 28
Dependent Claim
105 words
Apparatus as in claim 22 further comprising: means for issuing, by said signer party, to a receiver party, said hinged signature; means for convincing, by said signer party, of said receiver party, that at least one confirmer party, corresponding with said second public key, can separately convince other parties that the hinged signature was formed using said private key; and means for causing said signature and said convincing by said signer party to be such that said receiver party is substantially unable to convince other parties knowing said first and said second public keys that said first signature was formed using said first private key.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-12-12 | 1998-06-13 | 1998-12-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-12-12 | 2002-06-13 | 2002-12-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-12-12 | 2006-06-13 | 2006-12-13 | $7700.00 | Window Closed / Lapsed |