US5638446A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for the secure distribution of electronic files in a distributed environment
Assignee: Nytell Software LLC
•
Filing: 1995-08-28
•
Granted: 1997-06-10
•
Expires: 2015-08-28
Abstract
Abstract A process for using a trusted third party to create an electronic certificate for an electronic file that can be used to establish the file and verify the identity of the creator of the file. The process is composed of two phases, a registration phase and an electronic file distribution phase. In the registration phase, a trusted third party receives information about an author, including the author's public key and affirmatively verifies the accuracy of this information. In the file distribution phase, an author sends to the trusted third party a signed message containing the hash of the file the author wants to distribute. The trusted third party creates an electronic certificate, signed by the trusted third party, containing the hash of the file sent by the author. A user desiring to receive the file, retrieves the file with the certificate an uses the certificate to verifies, first, that the certificate was created by the trusted third party, and, second, that the hash of the file in the certificate is the same as the hash that is computed from the retrieved file. If these two hash's match, then the user is assured that the file did originate with the author and is uncorrupted.
Inventors
- 👤 Aviel D. Rubin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 17:44
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; H04L9/3215; H04L9/3263; H04L2209/00; H04L2209/60
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
124 words
A method for securely distributing electronic information over a network having an author, a trusted agent, and a user, said method comprising the steps of: registering said author with said trusted agent to provide said trusted agent with said author's public key; said agent verifying said author's public key over a communications channel outside of said network; said author generating a hash value of said electronic information using a cryptographically strong one-way deterministic function; said author digitally signing said hash value; said author sending said signed hash value to said trusted agent; said trusted agent decrypting said signed hash value to verify that said signed hash value was sent by said author; and said trusted agent creating a signed certificate containing said hash value.
Claim 2
Independent Claim
124 words
A method for securely distributing electronic information over a network having an author, a trusted agent, and a user, said method comprising the steps of: registering said author with said trusted agent to provide said trusted agent with said author's public key; said agent verifying said author's public key over a communications channel outside of said network; said author generating a hash value of said electronic information using a cryptographically strong one-way deterministic function; said author digitally signing said hash value; said author sending said signed hash value to said trusted agent; said trusted agent decrypting said signed hash value to verify that said signed hash value was sent by said author; and said trusted agent creating a signed certificate containing said hash value.
Claim 3
Dependent Claim
19 words
The method in accordance with claim 1 further including the step of sending said signed certificate to said author.
Claim 4
Dependent Claim
60 words
The method as recited in claim 1 further including the steps of: said user retrieving said electronic information and said signed certificate; said user decrypting said certificate using said trusted agent's public key; said user computing a hash value of said retrieved electronic information; and said user comparing said computed hash value to said hash value contained in said certificate.
Claim 5
Dependent Claim
19 words
The method as recited in claim 1 wherein said certificate is also stored in memory at said trusted agent.
Claim 6
Dependent Claim
18 words
The method as recited in claim 1 wherein said hash value is the MD-5 one way hash function.
Claim 7
Dependent Claim
35 words
The method as recited in claim 1 wherein said step of signing said hash function further comprises the sub-steps of; creating a message containing said author's name and said hash value; and signing said message.
Claim 8
Independent Claim
99 words
A method for providing the secure distribution of electronic files over a network, said method comprising: registering with a trusted third party an author's identity and public key; said trusted third party verifying, via another communications channel, said author's identity and public key; generating a hash value for an electronic file; digitally signing said hash value using said author's private key; sending said signed hash value to said trusted third party; verifying said signature of said hash value; and said trusted third party creating a certificate by digitally signing said hash value with said trusted third party's private key.
Claim 9
Independent Claim
99 words
A method for providing the secure distribution of electronic files over a network, said method comprising: registering with a trusted third party an author's identity and public key; said trusted third party verifying, via another communications channel, said author's identity and public key; generating a hash value for an electronic file; digitally signing said hash value using said author's private key; sending said signed hash value to said trusted third party; verifying said signature of said hash value; and said trusted third party creating a certificate by digitally signing said hash value with said trusted third party's private key.
Claim 10
Dependent Claim
36 words
The method as recited in claim 7 wherein said certificate further includes the identity of the trusted third party, the name of said author, the name of said electronic file, the name of the hash function.
Claim 11
Dependent Claim
17 words
The method as recited in claim 8 including the step of sending said certificate to said author.
Claim 12
Dependent Claim
25 words
The method as recited in claim 9 further including the step of verifying said signature of said certificate using said trusted third party's public key.
Claim 13
Dependent Claim
62 words
The method as recited in claim 10 further including the steps: accessing said electronic file and said certificate; verifying said signature of said certificate using said trusted third party's public key; computing a new hash value of said electronic file using the hash function identified in said certificate; and comparing said new hash value to said hash value included in said certificate.
Claim 14
Independent Claim
121 words
A method for certifying the content and author of an electronic file using a trusted third party, said method characterized by the steps of: creating a hash of said electronic file using a cryptographically strong one-way algorithm; sending said hash in an electronic message to said trusted third party using public key cryptography so that said trusted third party can be sure that said message originated from a sender as identified; and said trusted third party creating a digitally signed certificate containing the name of the trusted third party, the name of said author, the name of said electronic file, the hash function used to create said hash, the date the certificate was created, and the hash of said electronic file.
Claim 15
Independent Claim
121 words
A method for certifying the content and author of an electronic file using a trusted third party, said method characterized by the steps of: creating a hash of said electronic file using a cryptographically strong one-way algorithm; sending said hash in an electronic message to said trusted third party using public key cryptography so that said trusted third party can be sure that said message originated from a sender as identified; and said trusted third party creating a digitally signed certificate containing the name of the trusted third party, the name of said author, the name of said electronic file, the hash function used to create said hash, the date the certificate was created, and the hash of said electronic file.
Claim 16
Dependent Claim
46 words
The method as recited in claim 12 further characterized by a user: accessing said electronic file; computing a hash of said electronic file; accessing said certificate; verifying the signature of said certificate; and comparing said hash file computed to said hash file contained in said certificate.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-06-09 | 2000-12-09 | 2001-06-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-06-09 | 2004-12-09 | 2005-06-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-06-09 | 2008-12-09 | 2009-06-10 | $7700.00 | Window Closed / Lapsed |