US6021491A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Digital signatures for data streams and data archives
Assignee: Oracle America Inc
•
Filing: 1996-11-27
•
Granted: 2000-02-01
•
Expires: 2016-11-27
Abstract
Abstract Methods, apparatuses and products are provided for verifying the authenticity of data within one or more data files. Each data file is provided with an identifier, such as a one-way hash function or cyclic redundancy checksum. A signature file, that includes the identifiers for one or more data files, is provided with a digital signature created with a signature algorithm. The data file(s) and signature file are then transferred, or otherwise provided to a user. The user verifies the digital signature in the signature file using a signature verifying algorithm. Once verified as being authentic, the signature file can be used to verify each of the data files. Verification of the data files can be accomplished by comparing the identifier for each data file with the corresponding identifier in the signature file. If the identifiers in the data and signature files match, then the data file can be marked as authentic. If the identifiers do not match then the data file can be rejected or otherwise dealt with accordingly.
Inventors
- 👤 Benjamin J. Renaud
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 20:00
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/64; G06F2221/00; G06F2221/21; G06F2221/2115
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
85 words
A method for creating a secure data file suitable for transferring over a computer network, the method comprising: providing at least one data file having an identifier using a computer system; and creating a signature file having the identifier for the at least one data file and a digital signature using the computer system, the signature file being separate from the at least one data file, wherein the signature file is arranged to substantially vouch for the authenticity of the at least one data file.
Claim 2
Independent Claim
85 words
A method for creating a secure data file suitable for transferring over a computer network, the method comprising: providing at least one data file having an identifier using a computer system; and creating a signature file having the identifier for the at least one data file and a digital signature using the computer system, the signature file being separate from the at least one data file, wherein the signature file is arranged to substantially vouch for the authenticity of the at least one data file.
Claim 3
Dependent Claim
57 words
A method as recited in claim 1 further including: running a signature algorithm on the signature file; and determining when running the signature algorithm on the signature file verifies the authenticity of the signature file, wherein when it is determined that the signature file is authentic, the at least one data file is determined to be authentic.
Claim 4
Dependent Claim
109 words
A method as recited in claim 1 further including: providing a second data file having an identifier using the computer system; adding the identifier for the second data file to the signature file, wherein the signature file is arranged to vouch for the authenticity of the at least one data file and the second data file; running a signature algorithm on the signature file; and determining when running the signature algorithm on the signature file verifies the authenticity of the signature file, wherein when it is determined that the signature file is authentic, the at least one data file and the second data file are determined to be authentic.
Claim 5
Dependent Claim
143 words
A method as recited in claim 3 further including: comparing the identifier for the at least one data file with the identifier for the at least one data file in the signature file when it is determined that the signature file is authentic, wherein when the identifier for the at least one data file and the identifier for the at least one data file in the signature file match, the at least one data file is determined to be authentic; and comparing the identifier for the second data file with the identifier for the second data file in the signature file when it is determined that the signature file is authentic, wherein when the identifier for the second data file and the identifier for the at second data file in the signature file match, the second data file is determined to be authentic.
Claim 6
Dependent Claim
31 words
A method as recited in claim 2 wherein when it is determined that the signature file is authentic, substantially only the at least one data file is transferred over the network.
Claim 7
Dependent Claim
34 words
A method as recited in claim 5 wherein when it is determined that the signature file is authentic, the signature file and the at least one data file are separately transferred over the network.
Claim 8
Independent Claim
127 words
A method for verifying the authenticity of a first digital data file and a digital signature file, the digital signature file being separate from the first digital data file, the first digital data file including an identifier, the digital signature file including the identifier for the first data file and a digital signature, the method including: verifying the digital signature using a computer system to determine the authenticity of the digital signature file; determining when the digital signature is verified; and comparing the identifier in the first digital data file with the identifier for the first digital data file in the digital signature file using the computer system to identify the first digital data file as authentic when it is determined that the digital signature is verified.
Claim 9
Independent Claim
127 words
A method for verifying the authenticity of a first digital data file and a digital signature file, the digital signature file being separate from the first digital data file, the first digital data file including an identifier, the digital signature file including the identifier for the first data file and a digital signature, the method including: verifying the digital signature using a computer system to determine the authenticity of the digital signature file; determining when the digital signature is verified; and comparing the identifier in the first digital data file with the identifier for the first digital data file in the digital signature file using the computer system to identify the first digital data file as authentic when it is determined that the digital signature is verified.
Claim 10
Dependent Claim
44 words
A method as recited in claim 7 further including a second digital file having an identifier, the second digital file being separate from the first digital file and the digital signature file, the digital signature file including the identifier for the second digital file.
Claim 11
Dependent Claim
54 words
A method as recited in claim 8 further including: comparing the identifier in the second digital data file with the identifier for the second digital data file in the digital signature file using the computer system to identify the second digital file as authentic when it is determined that the digital signature is verified.
Claim 12
Independent Claim
121 words
A method for verifying the authenticity of a plurality of data files suitable for transfer over a networked computing system, each of the plurality of data files including a data file identifier, the method comprising: creating a single signature file, the signature file including a digital signature, the signature file further including a version of the data file identifier for each of the plurality of data files, the single signature file being separate from each of the plurality of data files; and verifying the authenticity of the digital signature included in the signature file, wherein when the digital signature included in the signature file is verified as being authentic, each of the plurality of data files is considered to be authentic.
Claim 13
Independent Claim
121 words
A method for verifying the authenticity of a plurality of data files suitable for transfer over a networked computing system, each of the plurality of data files including a data file identifier, the method comprising: creating a single signature file, the signature file including a digital signature, the signature file further including a version of the data file identifier for each of the plurality of data files, the single signature file being separate from each of the plurality of data files; and verifying the authenticity of the digital signature included in the signature file, wherein when the digital signature included in the signature file is verified as being authentic, each of the plurality of data files is considered to be authentic.
Claim 14
Dependent Claim
34 words
A method as recited in claim 10 further including: transferring the plurality of data files over the networked computing system when the digital signature included in the signature file is verified as being authentic.
Claim 15
Dependent Claim
65 words
A method as recited in claim 10 wherein verifying the authenticity of the digital signature included in the signature file includes running a signature algorithm on the digital signature, and wherein each of the plurality of data files is considered to be authentic when the authenticity of the digital signature is verified without running a verification algorithm on each of the plurality of data files.
Claim 16
Dependent Claim
108 words
A method as recited in claim 10 further including: comparing the version of the data file identifier for each of the plurality of data files with the corresponding data file identifier for each of the plurality of data files when the digital signature included in the signature file is verified as being authentic, wherein when the version of the data file identifier for a particular data file selected from the plurality of data files substantially matches the data file identifier for the particular data file selected from the plurality of data files, the particular data file selected from the plurality of data files is considered to be authentic.
References Cited (Backward Citations)
US4405829A
Cited
US5005200A
Cited
US4981370A
Cited
US5031214A
Cited
US5163091A
Cited
US5191613A
Cited
US5677953A
Cited
US5457746A
Cited
US5703951A
Cited
US5499294A
Cited
US5572673A
Cited
US5572590A
Cited
US5619571A
Cited
US5625693A
Cited
US5757915A
Cited
US5673316A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-01-31 | 2003-08-02 | 2004-02-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-01-31 | 2007-08-02 | 2008-02-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-01-31 | 2011-08-02 | 2012-02-01 | $7700.00 | Window Closed / Lapsed |