US6898707B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Integrating a digital signature service into a database
Assignee: OPEN DATA SYSTEMS
•
Filing: 1999-11-30
•
Granted: 2005-05-24
•
Expires: 2019-11-30
Abstract
Abstract A digital signature service integrates digital signature functions on data, for storage in a database. The digital signature service is integrated within a remote database management system (“RDBMS”). A database client generates a command to the RDBMS to execute a stored procedure or stored function that digitally signs the data and that saves the data in a persistent datastore. In response to the command, the RDBMS, using a digital certificate for the user, generates a signature from the data. In addition, the RDBMS generates a digital signature object for the data that includes the data, certificate and signature. The digital signature object is stored in the database. The digital signature service verifies digital signatures through execution of a query command. The digital signature service also implements business logic to retrieve data based on digital signature criteria, and implements filter functions to filter the storage and retrieval of data based on verification and authentication of digital signatures. The generation of multiple signatories on a single data item is also disclosed.
Inventors
- 👤 Ho Wing Sit
- 👤 Tony F. Kinnis
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 21:20
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/602; G06F21/64; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; H04L9/3263; H04L9/3268; H04L2209/00; H04L2209/56; H04L2209/60
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
106 words
A method for integrating a digital signature service into a database, said method comprising the steps of: storing a database comprising a plurality of records; receiving a store procedure with data from a client of said database; in response to said store procedure; receiving a digital certificate for said client; receiving a private key for said client; generating a signature from said data, digital certificate and private key of said claim; generating a signature object for said data, said digital signature object comprising said data, certificate and signature; and storing said signature object as at least a portion of one of said records in said database.
Claim 2
Dependent Claim
111 words
The method as set forth in claim 1 , further comprising the steps of: receiving a query command from said user to retrieve said data from said record of said database table; retrieving, in response to said query command, said data, certificate and signature for said user; processing said data and said certificate, using said signature, to verify that said data and said certificate are unaltered from their original contents; obtaining, from said certificate, an authentication as to the digital signatory; and generating, as a response to said query command, said data, so as to provide verification of said data with said signature and said certificate in response to said query.
Claim 3
Dependent Claim
64 words
The method as set forth in claim 2 , further comprising the steps of: receiving, as said query command, a query command to retrieve at least one record in said database comprising criteria based on digital signatures stored for said records; identifying records in said database with said criteria regarding said digital signatures; and retrieving said records identified in response to said query command.
Claim 4
Dependent Claim
94 words
The method as set forth in claim 3 , further comprising the steps of: extracting, from said records retrieved, data, certificate and signature stored in said record; processing said data and said certificate, using said signature, to verify that said data and said certificate are unaltered from their original contents; obtaining, from said certificate, an authentication as to the digital signatory of said data; and generating, as a response to said query command, said data, so as to provide verification of said data with said signature and said certificate in response to said query.
Claim 5
Dependent Claim
74 words
The method as set forth in claim 1 , wherein: the step of generating a digital signature for said data comprises the step of generating a single signature object comprising said certificate, said document, and said digital signature; and the step of storing said document, certificate and signature as at least a portion of a record in said database comprises the step of storing said single signature object in said record of said database.
Claim 6
Dependent Claim
34 words
The method as set forth in claim 5 , wherein the step of generating a single signature object comprises the step of generating a serialized object comprising said certificate, said document, and said signature.
Claim 7
Dependent Claim
27 words
The method as set forth in claim 1 , further comprising the step of storing said certificate of said user in a column of said database table.
Claim 8
Dependent Claim
42 words
The method as set forth in claim 7 , wherein the step of storing said certificate of said user in a column of said database table comprises the step of augmenting a user identification field to include said certificate of said user.
Claim 9
Dependent Claim
84 words
The method as set forth in claim 1 , further comprising the steps of: receiving a second digital certificate for a second client; retrieving said signature object from said record in said database as a first signature object; generating a second signature from said first signature object with said second client as a signatory; generating a second signature object, said second signature object comprising said first signature object, said second certificate, and said second signature; and storing, in said database, said second signature object.
Claim 10
Dependent Claim
121 words
The method as set forth in claim 9 , further comprising the steps of: receiving a query command to retrieve said second signature object from said record of said database table; retrieving, in response to said query command, said second signature object for said user; processing said first signature object and said second certificate, using said second signature, to verify that said first signature object and said second certificate are unaltered from their original contents; processing said data and said certificate, using said signature, to verify that said data and said certificate are unaltered from their original contents; and generating, as a response to said query command, said data, so as to provide verification of said first and second digital signatures.
Claim 11
Dependent Claim
112 words
A computer readable medium comprising a plurality of instructions which, when executed by a computer, cause the computer to perform the steps of: storing a database comprising a plurality of records; receiving a store procedure with data from a client of said database; in response to said store procedure; receiving a digital certificate for said client; receiving a private key for said client; generating a signature from said data, digital certificate and private key of said client; generating a signature object for said data, said digital signature object comprising said data, certificate and signature; and storing said signature object as at least a portion of one of said records in said database.
Claim 12
Dependent Claim
112 words
A computer readable medium comprising a plurality of instructions which, when executed by a computer, cause the computer to perform the steps of: storing a database comprising a plurality of records; receiving a store procedure with data from a client of said database; in response to said store procedure; receiving a digital certificate for said client; receiving a private key for said client; generating a signature from said data, digital certificate and private key of said client; generating a signature object for said data, said digital signature object comprising said data, certificate and signature; and storing said signature object as at least a portion of one of said records in said database.
Claim 13
Dependent Claim
113 words
The computer readable medium as set forth in claim 11 , further comprising the steps of: receiving a query command from said user to retrieve said data from said record of said database table; retrieving, in response to said query command, said data, certificate and signature for said user; processing said data and said certificate, using said signature, to verify that said data and said certificate are unaltered from their original contents; obtaining, from said certificate, an authentication as to the digital signatory; and generating, as a response to said query command, said data, so as to provide verification of said data with said signature and said certificate in response to said query.
Claim 14
Dependent Claim
66 words
The computer readable medium as set forth in claim 12 , further comprising the steps of: receiving, as said query command, a query command to retrieve at least one record in said database comprising criteria based on digital signatures stored for said records; identifying records in said database with said criteria regarding said digital signatures; and retrieving said records identified in response to said query command.
Claim 15
Dependent Claim
96 words
The computer readable medium as set forth in claim 13 , further comprising the steps of: extracting, from said records retrieved, data, certificate and signature stored in said record; processing said data and said certificate, using said signature, to verify that said data and said certificate are unaltered from their original contents; obtaining, from said certificate, an authentication as to the digital signatory of said data; and generating, as a response to said query command, said data, so as to provide verification of said data with said signature and said certificate in response to said query.
Claim 16
Dependent Claim
76 words
The computer readable medium as set forth in claim 11 , wherein: the step of generating a digital signature for said data comprises the step of generating a single signature object comprising said certificate, said document, and said digital signature; and the step of storing said document, certificate and signature as at least a portion of a record in said database comprises the step of storing said single signature object in said record of said database.
Claim 17
Dependent Claim
36 words
The computer readable medium as set forth in claim 15 , wherein the step of generating a single signature object comprises the step of generating a serialized object comprising said certificate, said document, and said signature.
Claim 18
Dependent Claim
29 words
The computer readable medium as set forth in claim 11 , further comprising the step of storing said certificate of said user in a column of said database table.
Claim 19
Dependent Claim
44 words
The computer readable medium as set forth in claim 17 , wherein the step of storing said certificate of said user in a column of said database table comprises the step of augmenting a user identification field to include said certificate of said user.
Claim 20
Dependent Claim
86 words
The computer readable medium as set forth in claim 11 , further comprising the steps of: receiving a second digital certificate for a second client; retrieving said signature object from said record in said database as a first signature object; generating a second signature from said first signature object with said second client as a signatory; generating a second signature object, said second signature object comprising said first signature object, said second certificate, and said second signature; and storing, in said database, said second signature object.
Claim 21
Dependent Claim
123 words
The computer readable medium as set forth in claim 19 , further comprising the steps of: receiving a query command to retrieve said second signature object from said record of said database table; retrieving, in response to said query command, said second signature object for said user; processing said first signature object and said second certificate, using said second signature, to verify that said first signature object and said second certificate are unaltered from their original contents; processing said data and said certificate, using said signature, to verify that said data and said certificate are unaltered from their original contents; and generating, as a response to said query command, said data, so as to provide verification of said first and second digital signatures.
Claim 22
Dependent Claim
109 words
A computer comprising: an input device for receiving a digital certificate and a private key for a user of said computer; database client for generating a store procedure with data; database management system, coupled to said database client, for generating, in response to said store procedure, a signature from said data, said database management system further for generating a signature object for said data, digital certificate and private key of said database client, said digital signature object comprising said data, certificate and signature; and database, coupled to said database management system, comprising a plurality of records for storing said signature object as at least a portion of a record.
Claim 23
Dependent Claim
109 words
A computer comprising: an input device for receiving a digital certificate and a private key for a user of said computer; database client for generating a store procedure with data; database management system, coupled to said database client, for generating, in response to said store procedure, a signature from said data, said database management system further for generating a signature object for said data, digital certificate and private key of said database client, said digital signature object comprising said data, certificate and signature; and database, coupled to said database management system, comprising a plurality of records for storing said signature object as at least a portion of a record.
References Cited (Backward Citations)
US5208858A
Cited
US6237096B1
Cited
WO1997012460A1
Cited
WO1997043717A1
Cited
WO1997050207A1
Cited
WO1997050036A1
Cited
WO1998020644A1
Cited
EP0845733A2
Cited
WO1998054633A1
Cited
WO1999022486A1
Cited
US6233577B1
Cited
EP0940945A2
Cited
WO1999048243A1
Cited
WO1999057847A1
Cited
WO1999059096A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-05-23 | 2008-11-22 | 2009-05-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-05-23 | 2012-11-22 | 2013-05-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-05-23 | 2016-11-22 | 2017-05-24 | $7700.00 | Window Closed / Lapsed |