CA2018770C - Public/key date-time notary facility - Google Patents
Public/key date-time notary facility Download PDFInfo
- Publication number
- CA2018770C CA2018770C CA002018770A CA2018770A CA2018770C CA 2018770 C CA2018770 C CA 2018770C CA 002018770 A CA002018770 A CA 002018770A CA 2018770 A CA2018770 A CA 2018770A CA 2018770 C CA2018770 C CA 2018770C
- Authority
- CA
- Canada
- Prior art keywords
- digital
- public key
- generating
- time
- further including
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Lifetime
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/86—Secure or tamper-resistant housings
- G06F21/87—Secure or tamper-resistant housings by means of encapsulation, e.g. for integrated circuits
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/065—Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
- H04L9/0656—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
- H04L9/0662—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher with particular pseudorandom sequence generator
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3297—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving time stamps, e.g. generation of time stamps
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
Abstract
A time notarization apparatus and method is disclosed which uses a secure, microprocessor based hardware platform which performs public key cryptographic operations to obtain trusted time stamping with a minimum of intervention by third parties. The hardware platform is encapsulated in a secure fashion so that the device's timestamping mechanism may not be readily tampered with or altered. The hardware platform includes at least one digital clock and a stable, secure storage device to record the private half of a public/private key pair. Coupled to both the digital clock and the storage device is a data processing device which performs public key signature operations in a secure and tamper-proof manner. Only the processing device has access to the secure storage device and its associated private key. The hardware platform also includes input/output means which receives a digital message which is to be digitally signed and timestamped and which outputs the resulting timestamped signature generated by the device. The hardware platform also includes a power source, (e.g., an on-board battery) to ensure the accuracy of the device's digital clock and the security of storage data prior to installation or in case of a power failure.
Description
2 018'1'7 PUBLIC/KEY DATE-TIME NOTARY FACILITY
FIELD OF TfCE INVENTION
This invention generally relates to an apparatus and method for digitally time stamping digital documents which are going'to be electronically transferred. More particularly, the invention relates to a method and apparatus for serving as a public key date-time notary facility.
BACKGROUND AND SUMMARY OF TBE INVENTION
The rapid growth of electronic mail systems, electronic fund transfer systems, electronic document transfer systems and the like has increased concerns over the security of the data transferred over unsecured communication channels.
Cryptographic systems are widely used to ensure the privacy and authenticity of messages communicated over such unsecured channels.
Now that information and documents are being created, transferred and stored digitally, new requirements now exist for authentication and authorization of such information and documents.
Unlike paper media, digital originals are able to be readily altered. Furthermore, there is no prima facia method for estimating the age or authenticity of digital information -- unlike physical written specimens where age and behavior of chemicals and handwriting provides some means for estimating authenticity and age.
2018"r70 The advent of public key algorithms now allow for a means of digital authentication. These systems range from basic signature systems, such as afforded by the straightforward use of, for example, the RSA Cryptosystem described by patent 4,450,829 to more complex authorization systems such as described by the applicant's patent 4,868,877, which allows for interlocking protection of coordinated signatures.
Typically in digital signatures, an individual's certification (his authorization to use his public key) is inherently bounded by an expiration date. There are many reasons for such a bound. One of these stems from the fact that in any such system there is a need to be able to receive and retain cancellation notices for public keys which have been (accidentally) exposed, or whose owners have been prematurely deprived of authorization. In general, such cancellation notices need to be kept by all parties at least until the certificate's prima facia expiration. If expiration dates were not specified, such notices would have to be retained forever.
If a culprit wishes to circumvent their expiration date, he might, in some cases, simply set back the clock in their computer and perform their signature at an apparently past time.
Also, there are many situations (especially now that an ever increasing amount of business is done electronically) where it is useful or sometimes critically important to ensure that the time and/or date associated with a particular event is in fact correct. For example, the date of an invention disclosure document can make the difference between an inventor securing a valuable proprietary interest in his invention or acquiring no such interest. In a business transaction, it may be important to ensure 'that the time reported as being associated with a contract or a purchase order is, in fact, = correct. In either example, if it were possible for a user to create a back dated signature, the user could create a document which misrepresents itself chronologically.
One way to resolve this problem is to have all critical documents signed and time stamped by an impartial third party "digital notary" service.. It may be difficult to find such a third party; or it may be difficult to obtain the services in a timely manner. For isolated users, such a digital notary might not be readily available. Moreover, this process may become error-prone, tedious, and a source of bottlenecks, while also creating potential security breaches.
The present invention is directed to an apparatus and method for performing a time notarization in a secure way, while eliminating the above-mentioned "digital notary" accessibility problems, thereby making such notarization easy for any individual or corporation to utilize. Moreover, the present invention performs the time notarization so as to make it easy for anyone to verify the notarization and to rely on the notarization time stamp. The apparatus is economical, and can be used locally without regard to using any external services.
FIELD OF TfCE INVENTION
This invention generally relates to an apparatus and method for digitally time stamping digital documents which are going'to be electronically transferred. More particularly, the invention relates to a method and apparatus for serving as a public key date-time notary facility.
BACKGROUND AND SUMMARY OF TBE INVENTION
The rapid growth of electronic mail systems, electronic fund transfer systems, electronic document transfer systems and the like has increased concerns over the security of the data transferred over unsecured communication channels.
Cryptographic systems are widely used to ensure the privacy and authenticity of messages communicated over such unsecured channels.
Now that information and documents are being created, transferred and stored digitally, new requirements now exist for authentication and authorization of such information and documents.
Unlike paper media, digital originals are able to be readily altered. Furthermore, there is no prima facia method for estimating the age or authenticity of digital information -- unlike physical written specimens where age and behavior of chemicals and handwriting provides some means for estimating authenticity and age.
2018"r70 The advent of public key algorithms now allow for a means of digital authentication. These systems range from basic signature systems, such as afforded by the straightforward use of, for example, the RSA Cryptosystem described by patent 4,450,829 to more complex authorization systems such as described by the applicant's patent 4,868,877, which allows for interlocking protection of coordinated signatures.
Typically in digital signatures, an individual's certification (his authorization to use his public key) is inherently bounded by an expiration date. There are many reasons for such a bound. One of these stems from the fact that in any such system there is a need to be able to receive and retain cancellation notices for public keys which have been (accidentally) exposed, or whose owners have been prematurely deprived of authorization. In general, such cancellation notices need to be kept by all parties at least until the certificate's prima facia expiration. If expiration dates were not specified, such notices would have to be retained forever.
If a culprit wishes to circumvent their expiration date, he might, in some cases, simply set back the clock in their computer and perform their signature at an apparently past time.
Also, there are many situations (especially now that an ever increasing amount of business is done electronically) where it is useful or sometimes critically important to ensure that the time and/or date associated with a particular event is in fact correct. For example, the date of an invention disclosure document can make the difference between an inventor securing a valuable proprietary interest in his invention or acquiring no such interest. In a business transaction, it may be important to ensure 'that the time reported as being associated with a contract or a purchase order is, in fact, = correct. In either example, if it were possible for a user to create a back dated signature, the user could create a document which misrepresents itself chronologically.
One way to resolve this problem is to have all critical documents signed and time stamped by an impartial third party "digital notary" service.. It may be difficult to find such a third party; or it may be difficult to obtain the services in a timely manner. For isolated users, such a digital notary might not be readily available. Moreover, this process may become error-prone, tedious, and a source of bottlenecks, while also creating potential security breaches.
The present invention is directed to an apparatus and method for performing a time notarization in a secure way, while eliminating the above-mentioned "digital notary" accessibility problems, thereby making such notarization easy for any individual or corporation to utilize. Moreover, the present invention performs the time notarization so as to make it easy for anyone to verify the notarization and to rely on the notarization time stamp. The apparatus is economical, and can be used locally without regard to using any external services.
The present invention provides a means whereby any digital information can be effectively notarized to have been in existence at the time explicitly stated in the notarization. This eliminates the possibly of electronic backdating through any subterfuge.
The time notarization apparatus and method of the present invention uses a secure, microprocessor based hardware platform which performs public key cryptographic operations to obtain trusted time stamping with a minimum of intervention by third parties. The hardware platform is encapsulated in a secure fashion so that the device's timestamping mechanism may not be feasibly subverted with or altered.
The hardware platform includes at least one digital clock and a stable, secure storage device to record the private half of a public/private key pair. Coupled to both the digital clock and the storage device is a data processing device which performs public key signature operations in a secure and tamper-proof manner. Only the processing device has access to the secure storage device and its associated private key.
The hardware platform also includes input/output means which receives a digital message which is to be digitally signed and timestamped.
The input/output means may return the resulting timestamped signature generated by the device to the presenter of the document or store the digital timestamp or dispose of it in any other appropriate means. The hardware platform also includes a power source, (e.g., an on-board battery) to ensure the ~O18r170 accuracy of the device's digital clock and the security of stored data continuously during all times during device's useful life.
BRIEF DESCRIPTION OF THE DRAWINGS
These as well as other objects and advantages of this invention will be better appreciated by reading the following detailed description of the presently preferred exemplary embodiments taken in conjunction with the accompanying drawings of which:
FIGURE 1 is a block diagram of a public key date/time notary device in accordance with an exemplary embodiment of 'the present invention;
FIGURE 2 is a block diagram showing the device of Figure 1 in conjunction with a document input and various outputs which indicates how the time stamp is created;
FIGURE 3 is a flow diagram showing an exemplary method for loading and initializing the device of Figure 1;
FIGURE 4 is a flow diagram showing how the time stamp is verified;
FIGURE 5 is a block diagram showing an exemplary digital clock module; and FIGURE 6 is a flowchart generally showing the sequence of operations performed by the device in Figure 1 in performing the public key signature operation.
DETAILED DESCRIPTION OF THE DRAWINGS
Figure 1 is a block diagram of a date/time notary device 1 in accordance with an exemplary embodiment of the present invention. Stated briefly, the device 1 includes a clock module 4, which is coupled to processor 6. Processor 6 is also coupled to a storage device 8 and a random number generator 10. Each of these components and an on-board power source 12 are mounted on a printed circuit or computer board 2. The circuit board 2 and the components mounted thereon are packaged in a secure fashion so that the contents of storage device 8 cannot be externally accessed or observed and so that the digital clock (or clocks) in clock module 4 cannot be readily tampered with or altered.
One approach that may be utilized to render the device 1 effectively tamper-proof is to dispose epoxy over the components on the circuit board so that the component pins cannot be probed or tampered with without destruction. The components themselves may be designed to be sensitive to physical tampering so that, for example, numeric values associated with the general registers in processor 6 are modified in response to physical tampering. In this regard, processor 6 may have one or more of its input pins coupled to switches (not shown) embedded in the epoxy which encases it. Such a switch will close (or open) in response to tampering and, for example, generate a distinctive signal level on a processor input pin. Processor 6 may then, for example, respond to the change of state of such an input pin to, in turn, modify or erase a predetermined value, including erasing the private key value stored in a processor register or to branch to an error routine to thereby prevent the public key date/time notary device from operating properly, or having the private key value discovered.
Focussing in more detail on Figure 1, as indicated above, embedded in date/time notary device 1 is a clock module 4. Clock module 4 may, for example, contain a commercially available digital clock such as for example, Model No. MM5827BN.
Clock module 4 generates a time stamp value V1 on its output lines 3 and 5. The time stamp value Vl may be the output of, as described above, a single digital clock. Alternatively, the value Vl may be an average of the outputs of two or more digital clocks. It also generates an error signal (not shown) when the clocks appear to fail.
Figure 5 shows a block diagram of an exemplary clock module having multiple digital clocks, e.g., 20, 22. The outputs of the digital clocks 20 and 22 are coupled to an average value generating circuit 23 which averages the time stamp signals of clocks 20 and 22 and outputs the average time on output lines 3 and 5 asthe clock module time stamp value Vi.
The outputs of digital clocks 20 and 22 are coupled to, for example, a subtractor 24 which generates a signal indicative of the difference between the digital output of clocks 20 and 22. The difference between the outputs of clocks 20 and 22 is then coupled.to threshold detector 26. If, and only, if the difference between the clock signals exceeds a predetermined threshold, e.g., corresponding to a difference of greater than several milliseconds per day, threshold,detector 26 generates an error signal, which is coupled via output line 3 to processor module 6. Processor module 6 decodes the error signal and enters an error routine which disables device 1 and erases the private key.
The use of multiple digital clocks 20 and 22 is desirable since the date/time notary device 1 is being relied on to generate an accurate time stamp.
Since it is possible that a single digital clock may (over time) begin to operate in a defective manner, the use of two (or more) digital clocks coupled, as described above, to a threshold detector substantially enhances the likelihood that the clock module will generate an accurate time stamp.
Additionally, the use of multiple digital clocks provides a mechanism for detecting that some party is tampering with the clock module. In this regard, if the outputs of ozie of the digital clocks is disturbed, through the use of the threshold detector 26 , an error signal will likely be generated and the device 1 will be thereafter disabled. The Subtractor, although shown in the "clock" module, may actually be performed by the Processor (6). The checking could be performed only when a document is presented, or preferably, could be done continuously.
Turning back to Figure 1, processor module 6 may, for example, be a commercially available microprocessor such as an Intel-286 microprocessor.
The processor 6 may be any microprocessor which has sufficient independent computing power to perform or coordinate public signature operations in a secure and tamper proof manner.
Coupled to processor module 6 is storage device 8 in which a secret private key of a public/private key pair is stored. It is important that the contents of storage device 8 be only accessible to processor module 6. Storage device 8 must be a stable, secure storage device such that users will be unable to determine the contents of the storage device i.e., the private key. Storage device 8 is preferably a read only memory (ROM) which may also operate as a program memory for processor module 6.
Storage device 8 may be embodied in processor module 6. Any detection of attempted tampering should cause this value to be destroyed.
Date/time notary device notary 1 also includes a power source 12, which may be an on-board battery having a relatively long life, which supplies power to the components shown in Figure 1, if the device 1 is operating in a stand alone fashion and when the device is not installed (e.g., during shipping).
Alternatively, as will be explained further below, if the device 1 is operating in conjunction with, for example, an associated computer system, then the device 1 may be externally powered and power source 12 would serve as a battery back-up in case of a power failure. It also must serve to keep the system "alive" between when it is initialized (at the factory) and the time the user plugs in to an external power source.
1. 0 The exemplary date/time notary device 1 also includes a random value generator 10 which is coupled to processor module 6. Random value generator 10 introduces a random value V3 which is utilized in the public key signature operation by processor module 6. Random value generator 10, introduces yet a further degree of cryptographic strength to the public key signature process by introducing a random input which is operated on. By including this random value in each signature, special values, which might give an opponent some unforeseen advantage in cracking the signature system, cannot be supplied by an opponent. Random value generator 10 may, for example, be comprised of a noise diode which generates unpredictable outputs that are used to generate a random number V3. Such random value generators are commercially available and may, for example, comprise Model No. 1N751.
Random value 10 generator may alternatively be implemented by, for example, a subroutine executed by processor module 6 which utilizes any reasonable random value or pseudo-random value generating algorithms (of which there are many which are known) to generate values V3. The random generator is actually optional and only serves to increase the theoretical strength of the algorithm.
Prior to describing the manner in which the date-time notary device 1 operates, the device input, output and the system in which the device 1 will typically operate will be described in conjunction with Eigure 2. Device 1 is contemplated to be typically coupled to a processing system 14 which may, for example, be an IBM-PC or the like.
The circuit board 2 is physically inserted into the PC so as to be coupled to one of the PC ports. In this regard, the circuit board 2 would be coupled to a PC port in the same fashion as, for example, a display interface card. The processing system 14 may, in turn, be coupled to a telecommunications system via, for example, a telephone link so that it is able to receive digitally transmitted files, messages, or documents.
The PC, for example, upon receiving an electronic document to be signed inputs a digital bit stream V2 to be notarized via its output line 15. Thereafter, a notarization proof set packet including a notarized time stamp is returned to the party originally transmitting the electronic document to be signed. Processing system 14, of course, need not be a PC, but rather may be a larger mainframe computer, a network of devices comprising a telecommunication system, etc.
The input value V2 to be signed and time notarized may be any digital value, including, for example, a digital document which may in actuality represent a purchase order, a contract, an authorization to perform a particular act on behalf of the originator of the document, or any other type of document where it is important to prove that the document existed as of a predetermined time. The date/time notary device 1 generates a notarized time stamp which may be utilized to prove that the document was not created at a point in time after the time indicated on the document. The input V2 may also itself be a user's digital signature of yet another digital value. The device may also create a hash of the input V2, and embed the hash in the signature rather than the entire input V2.
In an exemplary embodiment of the present invention, the notarization proof set packet includes four values which are returned to the party transmitting the original digital document to be date/time notarized. In this regard, as shown in Figure 2, the digital document or input value to be notarized, V2, is returned to the document originator. Additionally, the time stamp value Vl, which is the time output of the clock module 4 is returned to the document originator and a notarized time stamp S is also returned. The time stamp value Vl reflects the most accurate time which clock module 4 is capable of generating. Time stamp value Vl, as previously explained will only be generated if the multiple clocks in module 4 are within a predetermined threshold of being in complete synchronization. It is noted that the output of each of the digital clocks in clock module 4 could each be transmitted if desired. In some cases, with some signature systems, including RSA, it might be possible to only retain the "S" value, since the V1 value can be extracted therefrom. On the other hand, it may be necessary to retain V3 as well as Vl.
The general sequence of operations performed by processor 6 is shown in the flowchart of Figure 6.
In brief, the processor 6 inputs and temporarily stores each of the values V1, V2, and V3 and the secret key residing in storage device 8 in, for example, its working RAM (not shown). The processor 6 obtains the input value V2, which is the document to be notarized, via receiving input line 15 and combines this value with the time stamp V1 received via line 3 and the random value generated by module using a public/key cryptographic signature operation. In this regard, the combination of values Vl, V2 and V3 are processed by module 6 using the secret private key stored in storage device B.
The signature process may, for example, be performed using the RSA digital signature technique taught in U.S. Patent 4,405,829.
By way of example only, as shown in Figure 6, assuming a 512 bit (64 byte) RSA signature is utilized, V2 is input and it, or it's hash are temporarily stored as the lower order 16 bytes of the 64 bytes of data which represent the input document which is to be notarized V2 (100). There are many well known hashing schemes which can be used in conjunction with signature systems. Another eight bytes of the 64 byte value is utilized to store V1 the output of the clock module 4 which is input via line 3 and temporarily stored (102). The remaining 40 bytes in the value may consist of random bits which are constructed from the input received from the random number generator 10 (104).
This 64 byte number is then exponentiated with, for example, a RSA private key stored in storage device 8 in accordance with the teachings of U.S. Patent 4,405,829 (106). This yields the digital signature. After processing the 64 bytes of data with the stored private key, an output signature value is stored (108) and output (110) which is identified in Figure 2 as being the notarized time stamp S. There are may ways in which the input V2 and the time stamp could be combined in preparation for signing.
The final value which is included in the notarized time stamp proof set (V2, V1, S, C), which is transmitted to the party whose document is being date/time notarized, is the manufacturer's certification C. Turning back to Figure 2, the manufacturer referred to therein is the manufacturer of the date/time notary device 1. The manufacturer's certification C will have embodied within it the public key 16 which is associated with the device's private key as well as the manufacturer's public key 17 and will include the digital signature of the device's public key by the trusted manufacturer.
Further details regarding the nature of a potentially multi-level digital certificate and an exemplary digital certificate is found in the applicant's U.S. Patent 4,868,877, which issued September 19, 1989 and is entitled "Public Key/Signature Cryptosystem With Enhanced Digital Certification." As described in detail in the applicant's patent, the device's public key may, if desired, be certified in such a way as to identify the authority of its creator. The certification process involves signing this new public key with a private key of the trusted manufacturer and if desired, expressly indicating the authority which has been granted by the signor (i.e., authorization to be a trusted time-notary). Such trust may be implicit simply because of the manufacturer's well recognized public key which is used for the signature. In this regard, the trusted authority (i.e., the manufacturer) is contemplated as having a well-publicized public key, which is known and accepted by all potential users of the device. Such a manufacturer may simply use its private key portion to sign the device's newly created public key. Alternatively as described in the applicant's patent, the delegated authority as a trusted time-notary might be controlled by a hierarchy of certificates or the manufacturer's signature might indicate co-signing necessary by one or more other witnesses to reduce the risk of corruption by a single manufacturer's representative or by any single party. In such a case, the device's certification will need to include information regarding all of these signatures. Alternatively, patent 4,405,829 could be applied directly to yield a simple, one-level certificate which would be validated simply through widespread acceptanc and knowledge of the manufacturer's public key.
In prac=tir.e, the end user receives the device 1 together with a copy (on a floppy disk) of the public key corresponding to the secret private key embedded in the device, the manufacturers' certification of this public key and a program which can be used to feed any input to the device 1 and deliver corresponding output from the device.
The time stamped notarized signature S
(together with items V1, V2 and C) then serves as a notarized record showing that whatever object that was signed did exist at the specified moment (and was in the proximity of a particular signing device 1). Generally, the device's output signature and IvA 0 13 tl "7 0 time stamp value V1 would be typically accompanied by the device's associated public key and the manufacturer's certification of the device's public key, and the manufacturer's public key(s), so that all of these together act as a proof set for the notarization. The notarized time stamp may then be transmitted and/or stored with the object for later proof that the object existed at the specified moment. It is noted that, in a special case, when the object being notarized is actually itself a digital signature by some other party of some third object (e.g., a document, purchase order, etc.), the notarization of such a signature essentially vouches that the signing party did in fac~create said signature on or before the specified time. This provides a very clear analog to the standard functions performed by a conventional notary public service.
The manner in which the device 1 is loaded is exemplified by the flowchart shown in Figure 3. It is contemplated that the device 1 will be initially loaded during the manufacturing process. The loading may occur by coupling the device 1 via its input port 15 (see Figure 2) to a loading processor (not shown) at the manufacturing plant.
As indicated by the flowchart shown in Figure 3, the device 1 upon being powered on (30) immediately branches to an initialization mode routine (32). In the initialization mode, the device 1 enters a loading state in which the clock module 4 is initially set (32). Clock module 4 is set based on a universally recognized standard time to accurately initialize the digital clocks and initiate them to begin operation. Thereafter, the processor module 6 internally generates a public key/private key pair using random values which are generated by the processor 6 (or are received frorn the manufacturer during the device s initialization) in a manner consistent with any public key signature method, such as e.g., described in the teachings of the RSA public key cryptography (see U.S. Patent No.
4,405,829 or 4,868,877) (36). Thereafter, the private key portion is loaded into storage device 8 (38). After the private key portion has been stored, an "initialized flag" is set (39) indicating that the device initialization has been completed which insures that the processor 6 cannot be initialized again.
As indicated in step 40, the processor module 6 then transmits the public key which it generated in step 36 to the initializing processor device. It is noted, however, that the private key portion of the public/private key pair is not transmitted to the initializing processor so even the initializing processor is not aware of the secret private key.
Thereafter, a digital signature operation is performed on the transmitted public key (42) using the private key of a trusted authority, e.g., the manufacturer. The initializing processor may perform the signature operation (42) to generate a digital signature for the device 1. Thus, the manufacturer signs the generated device public key and in so doing verifies, by creating a digital certificate for the device (which may be stored in the device itself or on a floppy disk separate from the device), that the time/data notary device 5 is ..~
bonafide and trustworthy. In this regard, the signature process indicates that the signing party has verified that the clocks were initialized to the correct time (44). Furthermore, associated with the certificate for the device is the manufacturer's public key which will be utilized by the party receiving the date time notarized document to assure that the date/time stamp is authentic.
If desired, rather than the public/private key pair being generated by the processor module 6, the public/private key pair may be generated by the initialization processor. In this fashion, the processor module 6 need not have the capability of generating its own public/private key pair, thereby saving on program storage. Thus, an alternative method for initializing device 1 is to initialize the clock values that are used such as in step 34 shown in Figure 3, but rather than having the processor module 6 generate the public/private key pair, such a pair would be loaded by the initialization processor. The initialization processor would then erase its copy of the private part of the key pair immediately after it is generated. Thereafter, the initialization process would proceed as previously described in conjunction with Figure 3.
The recipient of a date/time notarized document, after electronically receiving and storing the document would then verify the time stamp in accordance with the flowchart shown in Figure 4. By so verifying the time stamp, the user can prove that the document was created no later than the date and time indica=ted. The digital time stamp on the ~018770 received document includes an input value that has been notarized V2 (50), a time stamp V1 (52), a notarized time stamp S (54) and a manufacturer's certification C (66, 68, 70). It is noted that the notarized time stamp S (54) has embedded within it the values Vl, V2, and V3 as described above in conjunction with Figures 2 and 6. The manufacturer's certificate C and the notarized time stamp S are processed via a public key operation (56) thereby resulting a 16-byte value X2, an 8-byte value X1 and a 40 byte random value X3. The values X1, X2, and X3 should be equa]. to values Vl, V2, and V3 (which have been described above in conjunction with Figure 2) if the time stamp was properly notarized. The exact steps shown for veryifying the various values are sutiable for the RSA algorithm.
Another sequence of steps may be necessary for other public key algorithms. It should be noted that some public key systems would also need to know the "random" value V3.
X1 is then compared with V1 as indicated at block 58 and if the results are not equal, then the time stamp must be rejected. If the results of Xl is equal to Vl as determined at block 58, then a comparison is made in block 60 between X2 and the input value that has been notarized V2 and if the results are not equal the time stamp is rejected (64).
If the results of the comparison in block 60 indicate that X2 equal V2, then one of the criteria is met for determining that the input value has been deliberately created prior to the time indicated by V1 (82). It is noted that the random value X3 could be compared with the generated random value V3, if desired, but for purposes of simplicity, such a comparison is not shown in Figure 4.
A check of the device's public key is also made in Figure 4. In this regard, from the manufacturer's certificate, the signature of the device's public key, which has been made by the manufacturer (70) and the manufacturer's trusted public key (68) are processed via a public key operation (72). The output of the public key operation should validate the public key associated with the device (66). A comparison is made which compares the device's public key with the output of the public key operation (74). If there is not a match as indicated at block 74, then the time stamp is rejected because the public key that performed the notarization is not known to be trustworthy (80). If the check at blocks 74 and 76 indicate that there is a match, then it is verified that the public key did belong to a device created by the manufacturer. Given the confirination that the device was created by the manufacturer and that the time stamp was created by the device's public key, then the user can accept that the document was created prior to the time/date indicated by time stamp Vi (82).
While the invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not to be limited to the disclosed embodiment, but on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
The time notarization apparatus and method of the present invention uses a secure, microprocessor based hardware platform which performs public key cryptographic operations to obtain trusted time stamping with a minimum of intervention by third parties. The hardware platform is encapsulated in a secure fashion so that the device's timestamping mechanism may not be feasibly subverted with or altered.
The hardware platform includes at least one digital clock and a stable, secure storage device to record the private half of a public/private key pair. Coupled to both the digital clock and the storage device is a data processing device which performs public key signature operations in a secure and tamper-proof manner. Only the processing device has access to the secure storage device and its associated private key.
The hardware platform also includes input/output means which receives a digital message which is to be digitally signed and timestamped.
The input/output means may return the resulting timestamped signature generated by the device to the presenter of the document or store the digital timestamp or dispose of it in any other appropriate means. The hardware platform also includes a power source, (e.g., an on-board battery) to ensure the ~O18r170 accuracy of the device's digital clock and the security of stored data continuously during all times during device's useful life.
BRIEF DESCRIPTION OF THE DRAWINGS
These as well as other objects and advantages of this invention will be better appreciated by reading the following detailed description of the presently preferred exemplary embodiments taken in conjunction with the accompanying drawings of which:
FIGURE 1 is a block diagram of a public key date/time notary device in accordance with an exemplary embodiment of 'the present invention;
FIGURE 2 is a block diagram showing the device of Figure 1 in conjunction with a document input and various outputs which indicates how the time stamp is created;
FIGURE 3 is a flow diagram showing an exemplary method for loading and initializing the device of Figure 1;
FIGURE 4 is a flow diagram showing how the time stamp is verified;
FIGURE 5 is a block diagram showing an exemplary digital clock module; and FIGURE 6 is a flowchart generally showing the sequence of operations performed by the device in Figure 1 in performing the public key signature operation.
DETAILED DESCRIPTION OF THE DRAWINGS
Figure 1 is a block diagram of a date/time notary device 1 in accordance with an exemplary embodiment of the present invention. Stated briefly, the device 1 includes a clock module 4, which is coupled to processor 6. Processor 6 is also coupled to a storage device 8 and a random number generator 10. Each of these components and an on-board power source 12 are mounted on a printed circuit or computer board 2. The circuit board 2 and the components mounted thereon are packaged in a secure fashion so that the contents of storage device 8 cannot be externally accessed or observed and so that the digital clock (or clocks) in clock module 4 cannot be readily tampered with or altered.
One approach that may be utilized to render the device 1 effectively tamper-proof is to dispose epoxy over the components on the circuit board so that the component pins cannot be probed or tampered with without destruction. The components themselves may be designed to be sensitive to physical tampering so that, for example, numeric values associated with the general registers in processor 6 are modified in response to physical tampering. In this regard, processor 6 may have one or more of its input pins coupled to switches (not shown) embedded in the epoxy which encases it. Such a switch will close (or open) in response to tampering and, for example, generate a distinctive signal level on a processor input pin. Processor 6 may then, for example, respond to the change of state of such an input pin to, in turn, modify or erase a predetermined value, including erasing the private key value stored in a processor register or to branch to an error routine to thereby prevent the public key date/time notary device from operating properly, or having the private key value discovered.
Focussing in more detail on Figure 1, as indicated above, embedded in date/time notary device 1 is a clock module 4. Clock module 4 may, for example, contain a commercially available digital clock such as for example, Model No. MM5827BN.
Clock module 4 generates a time stamp value V1 on its output lines 3 and 5. The time stamp value Vl may be the output of, as described above, a single digital clock. Alternatively, the value Vl may be an average of the outputs of two or more digital clocks. It also generates an error signal (not shown) when the clocks appear to fail.
Figure 5 shows a block diagram of an exemplary clock module having multiple digital clocks, e.g., 20, 22. The outputs of the digital clocks 20 and 22 are coupled to an average value generating circuit 23 which averages the time stamp signals of clocks 20 and 22 and outputs the average time on output lines 3 and 5 asthe clock module time stamp value Vi.
The outputs of digital clocks 20 and 22 are coupled to, for example, a subtractor 24 which generates a signal indicative of the difference between the digital output of clocks 20 and 22. The difference between the outputs of clocks 20 and 22 is then coupled.to threshold detector 26. If, and only, if the difference between the clock signals exceeds a predetermined threshold, e.g., corresponding to a difference of greater than several milliseconds per day, threshold,detector 26 generates an error signal, which is coupled via output line 3 to processor module 6. Processor module 6 decodes the error signal and enters an error routine which disables device 1 and erases the private key.
The use of multiple digital clocks 20 and 22 is desirable since the date/time notary device 1 is being relied on to generate an accurate time stamp.
Since it is possible that a single digital clock may (over time) begin to operate in a defective manner, the use of two (or more) digital clocks coupled, as described above, to a threshold detector substantially enhances the likelihood that the clock module will generate an accurate time stamp.
Additionally, the use of multiple digital clocks provides a mechanism for detecting that some party is tampering with the clock module. In this regard, if the outputs of ozie of the digital clocks is disturbed, through the use of the threshold detector 26 , an error signal will likely be generated and the device 1 will be thereafter disabled. The Subtractor, although shown in the "clock" module, may actually be performed by the Processor (6). The checking could be performed only when a document is presented, or preferably, could be done continuously.
Turning back to Figure 1, processor module 6 may, for example, be a commercially available microprocessor such as an Intel-286 microprocessor.
The processor 6 may be any microprocessor which has sufficient independent computing power to perform or coordinate public signature operations in a secure and tamper proof manner.
Coupled to processor module 6 is storage device 8 in which a secret private key of a public/private key pair is stored. It is important that the contents of storage device 8 be only accessible to processor module 6. Storage device 8 must be a stable, secure storage device such that users will be unable to determine the contents of the storage device i.e., the private key. Storage device 8 is preferably a read only memory (ROM) which may also operate as a program memory for processor module 6.
Storage device 8 may be embodied in processor module 6. Any detection of attempted tampering should cause this value to be destroyed.
Date/time notary device notary 1 also includes a power source 12, which may be an on-board battery having a relatively long life, which supplies power to the components shown in Figure 1, if the device 1 is operating in a stand alone fashion and when the device is not installed (e.g., during shipping).
Alternatively, as will be explained further below, if the device 1 is operating in conjunction with, for example, an associated computer system, then the device 1 may be externally powered and power source 12 would serve as a battery back-up in case of a power failure. It also must serve to keep the system "alive" between when it is initialized (at the factory) and the time the user plugs in to an external power source.
1. 0 The exemplary date/time notary device 1 also includes a random value generator 10 which is coupled to processor module 6. Random value generator 10 introduces a random value V3 which is utilized in the public key signature operation by processor module 6. Random value generator 10, introduces yet a further degree of cryptographic strength to the public key signature process by introducing a random input which is operated on. By including this random value in each signature, special values, which might give an opponent some unforeseen advantage in cracking the signature system, cannot be supplied by an opponent. Random value generator 10 may, for example, be comprised of a noise diode which generates unpredictable outputs that are used to generate a random number V3. Such random value generators are commercially available and may, for example, comprise Model No. 1N751.
Random value 10 generator may alternatively be implemented by, for example, a subroutine executed by processor module 6 which utilizes any reasonable random value or pseudo-random value generating algorithms (of which there are many which are known) to generate values V3. The random generator is actually optional and only serves to increase the theoretical strength of the algorithm.
Prior to describing the manner in which the date-time notary device 1 operates, the device input, output and the system in which the device 1 will typically operate will be described in conjunction with Eigure 2. Device 1 is contemplated to be typically coupled to a processing system 14 which may, for example, be an IBM-PC or the like.
The circuit board 2 is physically inserted into the PC so as to be coupled to one of the PC ports. In this regard, the circuit board 2 would be coupled to a PC port in the same fashion as, for example, a display interface card. The processing system 14 may, in turn, be coupled to a telecommunications system via, for example, a telephone link so that it is able to receive digitally transmitted files, messages, or documents.
The PC, for example, upon receiving an electronic document to be signed inputs a digital bit stream V2 to be notarized via its output line 15. Thereafter, a notarization proof set packet including a notarized time stamp is returned to the party originally transmitting the electronic document to be signed. Processing system 14, of course, need not be a PC, but rather may be a larger mainframe computer, a network of devices comprising a telecommunication system, etc.
The input value V2 to be signed and time notarized may be any digital value, including, for example, a digital document which may in actuality represent a purchase order, a contract, an authorization to perform a particular act on behalf of the originator of the document, or any other type of document where it is important to prove that the document existed as of a predetermined time. The date/time notary device 1 generates a notarized time stamp which may be utilized to prove that the document was not created at a point in time after the time indicated on the document. The input V2 may also itself be a user's digital signature of yet another digital value. The device may also create a hash of the input V2, and embed the hash in the signature rather than the entire input V2.
In an exemplary embodiment of the present invention, the notarization proof set packet includes four values which are returned to the party transmitting the original digital document to be date/time notarized. In this regard, as shown in Figure 2, the digital document or input value to be notarized, V2, is returned to the document originator. Additionally, the time stamp value Vl, which is the time output of the clock module 4 is returned to the document originator and a notarized time stamp S is also returned. The time stamp value Vl reflects the most accurate time which clock module 4 is capable of generating. Time stamp value Vl, as previously explained will only be generated if the multiple clocks in module 4 are within a predetermined threshold of being in complete synchronization. It is noted that the output of each of the digital clocks in clock module 4 could each be transmitted if desired. In some cases, with some signature systems, including RSA, it might be possible to only retain the "S" value, since the V1 value can be extracted therefrom. On the other hand, it may be necessary to retain V3 as well as Vl.
The general sequence of operations performed by processor 6 is shown in the flowchart of Figure 6.
In brief, the processor 6 inputs and temporarily stores each of the values V1, V2, and V3 and the secret key residing in storage device 8 in, for example, its working RAM (not shown). The processor 6 obtains the input value V2, which is the document to be notarized, via receiving input line 15 and combines this value with the time stamp V1 received via line 3 and the random value generated by module using a public/key cryptographic signature operation. In this regard, the combination of values Vl, V2 and V3 are processed by module 6 using the secret private key stored in storage device B.
The signature process may, for example, be performed using the RSA digital signature technique taught in U.S. Patent 4,405,829.
By way of example only, as shown in Figure 6, assuming a 512 bit (64 byte) RSA signature is utilized, V2 is input and it, or it's hash are temporarily stored as the lower order 16 bytes of the 64 bytes of data which represent the input document which is to be notarized V2 (100). There are many well known hashing schemes which can be used in conjunction with signature systems. Another eight bytes of the 64 byte value is utilized to store V1 the output of the clock module 4 which is input via line 3 and temporarily stored (102). The remaining 40 bytes in the value may consist of random bits which are constructed from the input received from the random number generator 10 (104).
This 64 byte number is then exponentiated with, for example, a RSA private key stored in storage device 8 in accordance with the teachings of U.S. Patent 4,405,829 (106). This yields the digital signature. After processing the 64 bytes of data with the stored private key, an output signature value is stored (108) and output (110) which is identified in Figure 2 as being the notarized time stamp S. There are may ways in which the input V2 and the time stamp could be combined in preparation for signing.
The final value which is included in the notarized time stamp proof set (V2, V1, S, C), which is transmitted to the party whose document is being date/time notarized, is the manufacturer's certification C. Turning back to Figure 2, the manufacturer referred to therein is the manufacturer of the date/time notary device 1. The manufacturer's certification C will have embodied within it the public key 16 which is associated with the device's private key as well as the manufacturer's public key 17 and will include the digital signature of the device's public key by the trusted manufacturer.
Further details regarding the nature of a potentially multi-level digital certificate and an exemplary digital certificate is found in the applicant's U.S. Patent 4,868,877, which issued September 19, 1989 and is entitled "Public Key/Signature Cryptosystem With Enhanced Digital Certification." As described in detail in the applicant's patent, the device's public key may, if desired, be certified in such a way as to identify the authority of its creator. The certification process involves signing this new public key with a private key of the trusted manufacturer and if desired, expressly indicating the authority which has been granted by the signor (i.e., authorization to be a trusted time-notary). Such trust may be implicit simply because of the manufacturer's well recognized public key which is used for the signature. In this regard, the trusted authority (i.e., the manufacturer) is contemplated as having a well-publicized public key, which is known and accepted by all potential users of the device. Such a manufacturer may simply use its private key portion to sign the device's newly created public key. Alternatively as described in the applicant's patent, the delegated authority as a trusted time-notary might be controlled by a hierarchy of certificates or the manufacturer's signature might indicate co-signing necessary by one or more other witnesses to reduce the risk of corruption by a single manufacturer's representative or by any single party. In such a case, the device's certification will need to include information regarding all of these signatures. Alternatively, patent 4,405,829 could be applied directly to yield a simple, one-level certificate which would be validated simply through widespread acceptanc and knowledge of the manufacturer's public key.
In prac=tir.e, the end user receives the device 1 together with a copy (on a floppy disk) of the public key corresponding to the secret private key embedded in the device, the manufacturers' certification of this public key and a program which can be used to feed any input to the device 1 and deliver corresponding output from the device.
The time stamped notarized signature S
(together with items V1, V2 and C) then serves as a notarized record showing that whatever object that was signed did exist at the specified moment (and was in the proximity of a particular signing device 1). Generally, the device's output signature and IvA 0 13 tl "7 0 time stamp value V1 would be typically accompanied by the device's associated public key and the manufacturer's certification of the device's public key, and the manufacturer's public key(s), so that all of these together act as a proof set for the notarization. The notarized time stamp may then be transmitted and/or stored with the object for later proof that the object existed at the specified moment. It is noted that, in a special case, when the object being notarized is actually itself a digital signature by some other party of some third object (e.g., a document, purchase order, etc.), the notarization of such a signature essentially vouches that the signing party did in fac~create said signature on or before the specified time. This provides a very clear analog to the standard functions performed by a conventional notary public service.
The manner in which the device 1 is loaded is exemplified by the flowchart shown in Figure 3. It is contemplated that the device 1 will be initially loaded during the manufacturing process. The loading may occur by coupling the device 1 via its input port 15 (see Figure 2) to a loading processor (not shown) at the manufacturing plant.
As indicated by the flowchart shown in Figure 3, the device 1 upon being powered on (30) immediately branches to an initialization mode routine (32). In the initialization mode, the device 1 enters a loading state in which the clock module 4 is initially set (32). Clock module 4 is set based on a universally recognized standard time to accurately initialize the digital clocks and initiate them to begin operation. Thereafter, the processor module 6 internally generates a public key/private key pair using random values which are generated by the processor 6 (or are received frorn the manufacturer during the device s initialization) in a manner consistent with any public key signature method, such as e.g., described in the teachings of the RSA public key cryptography (see U.S. Patent No.
4,405,829 or 4,868,877) (36). Thereafter, the private key portion is loaded into storage device 8 (38). After the private key portion has been stored, an "initialized flag" is set (39) indicating that the device initialization has been completed which insures that the processor 6 cannot be initialized again.
As indicated in step 40, the processor module 6 then transmits the public key which it generated in step 36 to the initializing processor device. It is noted, however, that the private key portion of the public/private key pair is not transmitted to the initializing processor so even the initializing processor is not aware of the secret private key.
Thereafter, a digital signature operation is performed on the transmitted public key (42) using the private key of a trusted authority, e.g., the manufacturer. The initializing processor may perform the signature operation (42) to generate a digital signature for the device 1. Thus, the manufacturer signs the generated device public key and in so doing verifies, by creating a digital certificate for the device (which may be stored in the device itself or on a floppy disk separate from the device), that the time/data notary device 5 is ..~
bonafide and trustworthy. In this regard, the signature process indicates that the signing party has verified that the clocks were initialized to the correct time (44). Furthermore, associated with the certificate for the device is the manufacturer's public key which will be utilized by the party receiving the date time notarized document to assure that the date/time stamp is authentic.
If desired, rather than the public/private key pair being generated by the processor module 6, the public/private key pair may be generated by the initialization processor. In this fashion, the processor module 6 need not have the capability of generating its own public/private key pair, thereby saving on program storage. Thus, an alternative method for initializing device 1 is to initialize the clock values that are used such as in step 34 shown in Figure 3, but rather than having the processor module 6 generate the public/private key pair, such a pair would be loaded by the initialization processor. The initialization processor would then erase its copy of the private part of the key pair immediately after it is generated. Thereafter, the initialization process would proceed as previously described in conjunction with Figure 3.
The recipient of a date/time notarized document, after electronically receiving and storing the document would then verify the time stamp in accordance with the flowchart shown in Figure 4. By so verifying the time stamp, the user can prove that the document was created no later than the date and time indica=ted. The digital time stamp on the ~018770 received document includes an input value that has been notarized V2 (50), a time stamp V1 (52), a notarized time stamp S (54) and a manufacturer's certification C (66, 68, 70). It is noted that the notarized time stamp S (54) has embedded within it the values Vl, V2, and V3 as described above in conjunction with Figures 2 and 6. The manufacturer's certificate C and the notarized time stamp S are processed via a public key operation (56) thereby resulting a 16-byte value X2, an 8-byte value X1 and a 40 byte random value X3. The values X1, X2, and X3 should be equa]. to values Vl, V2, and V3 (which have been described above in conjunction with Figure 2) if the time stamp was properly notarized. The exact steps shown for veryifying the various values are sutiable for the RSA algorithm.
Another sequence of steps may be necessary for other public key algorithms. It should be noted that some public key systems would also need to know the "random" value V3.
X1 is then compared with V1 as indicated at block 58 and if the results are not equal, then the time stamp must be rejected. If the results of Xl is equal to Vl as determined at block 58, then a comparison is made in block 60 between X2 and the input value that has been notarized V2 and if the results are not equal the time stamp is rejected (64).
If the results of the comparison in block 60 indicate that X2 equal V2, then one of the criteria is met for determining that the input value has been deliberately created prior to the time indicated by V1 (82). It is noted that the random value X3 could be compared with the generated random value V3, if desired, but for purposes of simplicity, such a comparison is not shown in Figure 4.
A check of the device's public key is also made in Figure 4. In this regard, from the manufacturer's certificate, the signature of the device's public key, which has been made by the manufacturer (70) and the manufacturer's trusted public key (68) are processed via a public key operation (72). The output of the public key operation should validate the public key associated with the device (66). A comparison is made which compares the device's public key with the output of the public key operation (74). If there is not a match as indicated at block 74, then the time stamp is rejected because the public key that performed the notarization is not known to be trustworthy (80). If the check at blocks 74 and 76 indicate that there is a match, then it is verified that the public key did belong to a device created by the manufacturer. Given the confirination that the device was created by the manufacturer and that the time stamp was created by the device's public key, then the user can accept that the document was created prior to the time/date indicated by time stamp Vi (82).
While the invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not to be limited to the disclosed embodiment, but on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
Claims (40)
1. A digital time notarization device for enabling a user to digitally notarize digital information without regard to any particular recipient of said digital information comprising:
platform means for supporting components;
clock means for generating clock signals indicative of time;
input means for receiving a digital input value to be notarized;
storage means for storing a private key created for said device having a corresponding device public key where said device public key has been certified by a trusted authority, said storage means being secured such that said private key is not accessible to said user; and processor means for operating on said clock signals and said digital input value using said private key corresponding to the public key certified by said trusted authority for generating a notarized time stamp, said input means, storage means and processor means being supported by said platform means, whereby a holder of said device public key certified by said trusted authority may verify that said notarized time stamp is authentic without any further information regarding said notarization device.
platform means for supporting components;
clock means for generating clock signals indicative of time;
input means for receiving a digital input value to be notarized;
storage means for storing a private key created for said device having a corresponding device public key where said device public key has been certified by a trusted authority, said storage means being secured such that said private key is not accessible to said user; and processor means for operating on said clock signals and said digital input value using said private key corresponding to the public key certified by said trusted authority for generating a notarized time stamp, said input means, storage means and processor means being supported by said platform means, whereby a holder of said device public key certified by said trusted authority may verify that said notarized time stamp is authentic without any further information regarding said notarization device.
2. A device according to claim 1, further comprising random number generator means, coupled to said processor means for generating a relatively unpredictable output value, said processor means creating said notarized time stamp using said unpredictable output value.
3. A device according to claim 2, wherein said random number generator means includes a noise generating diode.
4. A device according to claim 2, wherein said random number generator means comprises a random number generating subroutine executed by said processor means.
5. A device according to claim 1, wherein said clock means includes a plurality of digital clocks.
6. A device according to claim 5, further including averaging means coupled to receive the outputs of said plurality of digital clocks for generating a time output signal which is the average of the outputs of said plurality of digital clocks.
7. A device according to claim 5, further including threshold detecting means for generating an error signal if the difference between the outputs of said plurality of clocks exceeds a predetermined threshold.
8. A device according to claim 1, further including means for rendering said device effectively tamper-proof.
9. A device according to claim 8, further including means for encapsulating said clock means and said processor means on said platforms means such that said clock means and said processor means can not be readily tampered with.
10. A device according to claim 8, further including switch means coupled to said processor means, said processor means including means responsive to a change of state of said switch means for preventing said device from operating properly.
11. A device according to claim 1, wherein said processor means comprises computational means for performing a public key digital signature operation on said input value and said clock signals.
12. A device according to claim 1, further including power supply means, disposed on said platform means for supplying power to components disposed on said platform means.
13. A device according to claim 1, wherein said input value represents at least one digital message, said input means being coupled to said processor means, for receiving said input value, and for supplying said input value to said processor means, whereby said device may be coupled to a communications system for receiving a digital message to be time stamped and for transmitting a time stamped notarized digital document to said communications system.
14. A device according to claim 1, wherein said processor means includes means for generating a public key/private key pair.
15. A device according to claim 1, wherein said processor means includes flag means for storing an indication that the notarization initialization has been completed.
16. A digital time notarization system comprising:
data processing means for performing data processing related tasks;
a digital time notarization device coupled to said data processing means, said notarization device including:
platform means for supporting digital components;
input means, disposed on said platform means, for receiving from said data processing means an input value to be time notarized;
storage means, disposed on said platform means, for storing a private key created for said notarization device, said private key having a corresponding device public key, said device public key having been certified by a trusted authority;
clock means, disposed on said platform means, for generating clock signals indicative of time; and processor means, disposed on said platform means, for operating on said clock signals and said input value using said private key and for generating a notarized time stamp.
data processing means for performing data processing related tasks;
a digital time notarization device coupled to said data processing means, said notarization device including:
platform means for supporting digital components;
input means, disposed on said platform means, for receiving from said data processing means an input value to be time notarized;
storage means, disposed on said platform means, for storing a private key created for said notarization device, said private key having a corresponding device public key, said device public key having been certified by a trusted authority;
clock means, disposed on said platform means, for generating clock signals indicative of time; and processor means, disposed on said platform means, for operating on said clock signals and said input value using said private key and for generating a notarized time stamp.
17. A system according to claim 16, wherein said data processing means includes a personal computer.
18. A system according to claim 16, wherein said data processing means includes a plurality of ports and said platform means is coupled to one of said ports.
19. A system according to claim 16, wherein said data processing means includes a telecommunications system for coupling digital messages to be time stamped to said device and for receiving time stamped signatures from said device.
20. A system according to claim 16, further comprising random number generator means, coupled to said processor means for generating a relatively unpredictable output value, said processor means creating said notarized time stamp using said unpredictable output value.
21. A system according to claim 16, wherein said clock means includes a plurality of digital clocks.
22. A system according to claim 21, further including averaging means coupled to receive the outputs of said plurality of digital clocks for generating a time of day output signal which is the average of the outputs of said plurality of digital clocks.
23. A system according to claim 21, further including threshold detecting means for generating an error signal if the difference between the outputs of said plurality of clocks exceeds a predetermined threshold.
24. A system according to claim 16, further including means for encapsulating said clock means and said processor means on said platforms means such that said clock means and said processor means can not be feasibly tampered with.
25. A system according to claim 16, wherein said processor means comprises computational means for performing a public key digital signature operation using said input value and said clock signals.
26 26. A system according to claim 16, further including power supply means, disposed on said platform means for supplying power to components disposed on said platform means.
27. A system according to claim 16 further including origination means for transmitting a digital message to be time stamped to said data processing means, said data processing means including means for transmitting a digital time stamped notarization proof set.
28. A system according to claim 16, further including means for generating a proof set which includes at least a notarized time stamp and the digital certificate by the manufacturer of the device of the device's public key.
29. A system according to claim 28, wherein the manufacturer's certificate includes the public key of the device and it's signature by the manufacturer's public key.
30. A method of digitally time notarizing a digital message comprising the steps of:
receiving a digital message to be date/time notarized by a special purpose digital notarization device;
generating clock signals indicative of time within said device;
accessing a private key created for said device and stored in a tamper proof storage device in said notarization device, said private key having a corresponding device public key, said device public key having been certified by a trusted authority; and operating on said digital message, and said clock signals, using said private key, whereby a notarized time stamp is generated by said notarization device.
receiving a digital message to be date/time notarized by a special purpose digital notarization device;
generating clock signals indicative of time within said device;
accessing a private key created for said device and stored in a tamper proof storage device in said notarization device, said private key having a corresponding device public key, said device public key having been certified by a trusted authority; and operating on said digital message, and said clock signals, using said private key, whereby a notarized time stamp is generated by said notarization device.
31. A method according to claim 30, further including the steps of:
generating a relatively unpredictable value, and creating said notarized time stamp using said unpredictable value.
generating a relatively unpredictable value, and creating said notarized time stamp using said unpredictable value.
32. A method according to claim 30, further including the step of encapsulating components on said device such that the components can not be readily tampered with.
33. A method according to claim 30, wherein said receiving step includes receiving said digital value from a data processing system.
34. A method according to claim 30, further including the step of generating a public key/private key pair within a processor in said special purpose device.
35. A method according to claim 30, further including the step of initializing said special purpose device prior to said receiving step and storing an indication within said special purpose device that the initialization has been completed.
36. A method according to claim 30 further including the step of generating a digital time stamped notarization proof set.
37. A method according to claim 30, wherein said trusted authority is the manufacturer of the device and further including the step of generating a proof set which includes at least a notarized time stamp and the digital certificate by the manufacturer of the device of the device's public key.
38. A method according to claim 30, further including the step of initializing said device by:
initializing a clock module within the device generating a public/private key pair, and loading the private key in a storage device within said device.
initializing a clock module within the device generating a public/private key pair, and loading the private key in a storage device within said device.
39. A method according to claim 38, wherein said initializing step further includes the step of digitally verifying the device initialization by a witness.
40. A method according to claim 39, wherein said verifying step includes the step of generating a digital certificate for said device.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US07/421,104 US5001752A (en) | 1989-10-13 | 1989-10-13 | Public/key date-time notary facility |
US421,104 | 1989-10-13 |
Publications (2)
Publication Number | Publication Date |
---|---|
CA2018770A1 CA2018770A1 (en) | 1991-04-13 |
CA2018770C true CA2018770C (en) | 2007-08-14 |
Family
ID=23669180
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002018770A Expired - Lifetime CA2018770C (en) | 1989-10-13 | 1990-06-12 | Public/key date-time notary facility |
Country Status (7)
Country | Link |
---|---|
US (1) | US5001752A (en) |
EP (1) | EP0422757B1 (en) |
JP (1) | JPH03185551A (en) |
AT (1) | ATE144360T1 (en) |
AU (1) | AU624299B2 (en) |
CA (1) | CA2018770C (en) |
DE (1) | DE69028894T2 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20220100905A1 (en) * | 2020-09-30 | 2022-03-31 | Liveoak Technologies, Inc. | Platform for providing remote online notarization service |
Families Citing this family (193)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5189700A (en) * | 1989-07-05 | 1993-02-23 | Blandford Robert R | Devices to (1) supply authenticated time and (2) time stamp and authenticate digital documents |
US5347579A (en) * | 1989-07-05 | 1994-09-13 | Blandford Robert R | Personal computer diary |
FR2650097B1 (en) * | 1989-07-19 | 1992-12-31 | Pailles Jean Claude | CABLE MICROCIRCUIT CARD AND TRANSACTION METHOD BETWEEN A CORRESPONDING CABLE MICROCIRCUIT CARD AND A TERMINAL |
US5136643A (en) * | 1989-10-13 | 1992-08-04 | Fischer Addison M | Public/key date-time notary facility |
US5022080A (en) * | 1990-04-16 | 1991-06-04 | Durst Robert T | Electronic notary |
US5067155A (en) * | 1990-05-09 | 1991-11-19 | Control Module Inc. | Method and means to limit access to computer systems |
DE69133502T2 (en) * | 1990-06-01 | 2006-09-14 | Kabushiki Kaisha Toshiba, Kawasaki | Secret transmission method and device |
US5136646A (en) * | 1991-03-08 | 1992-08-04 | Bell Communications Research, Inc. | Digital document time-stamping with catenate certificate |
US5136647A (en) * | 1990-08-02 | 1992-08-04 | Bell Communications Research, Inc. | Method for secure time-stamping of digital documents |
US5224163A (en) * | 1990-09-28 | 1993-06-29 | Digital Equipment Corporation | Method for delegating authorization from one entity to another through the use of session encryption keys |
US5200999A (en) * | 1991-09-27 | 1993-04-06 | International Business Machines Corporation | Public key cryptosystem key management based on control vectors |
FR2681964A1 (en) * | 1991-10-01 | 1993-04-02 | Widmer Michel | SYSTEM FOR STORING COMPUTERIZED DATA ON A RECORDING MEDIUM AND METHOD FOR TRANSMITTING DATA USING SUCH A RECORDING MEDIUM. |
US5164988A (en) * | 1991-10-31 | 1992-11-17 | International Business Machines Corporation | Method to establish and enforce a network cryptographic security policy in a public key cryptosystem |
US7028187B1 (en) * | 1991-11-15 | 2006-04-11 | Citibank, N.A. | Electronic transaction apparatus for electronic commerce |
US5557518A (en) | 1994-04-28 | 1996-09-17 | Citibank, N.A. | Trusted agents for open electronic commerce |
US5453601A (en) | 1991-11-15 | 1995-09-26 | Citibank, N.A. | Electronic-monetary system |
US5150407A (en) * | 1991-12-16 | 1992-09-22 | Chan Steve S C | Secured data storage devices |
US5157726A (en) * | 1991-12-19 | 1992-10-20 | Xerox Corporation | Document copy authentication |
FR2699300B1 (en) * | 1992-12-15 | 1995-03-10 | Mireille Campana | Method of authenticating a computer assembly by another computer assembly. |
US5373561A (en) * | 1992-12-21 | 1994-12-13 | Bell Communications Research, Inc. | Method of extending the validity of a cryptographic certificate |
US6408388B1 (en) | 1993-05-05 | 2002-06-18 | Addison M. Fischer | Personal date/time notary device |
US5422953A (en) * | 1993-05-05 | 1995-06-06 | Fischer; Addison M. | Personal date/time notary device |
US5444780A (en) * | 1993-07-22 | 1995-08-22 | International Business Machines Corporation | Client/server based secure timekeeping system |
AU683038B2 (en) * | 1993-08-10 | 1997-10-30 | Addison M. Fischer | A method for operating computers and for processing information among computers |
ATE191110T1 (en) * | 1993-12-14 | 2000-04-15 | Landis & Gyr Tech Innovat | METHOD AND DEVICE FOR SECURING THE INFORMATION OF A DATA PACKET |
FR2711263A1 (en) * | 1993-12-23 | 1995-04-21 | France Telecom | Electronic device for date-stamped certification |
UA41387C2 (en) * | 1994-01-13 | 2001-09-17 | Сертко, Інк | Method for setting of true communication being checked, method for protected communication, method for renewal of micro-software, method for execution of enciphered communication and method for giving to device checked on identity of right on electron transaction |
US20020013898A1 (en) * | 1997-06-04 | 2002-01-31 | Sudia Frank W. | Method and apparatus for roaming use of cryptographic values |
NL9400222A (en) * | 1994-02-11 | 1995-09-01 | Seerp Westra | Method for so-called proof locking. |
US6088797A (en) * | 1994-04-28 | 2000-07-11 | Rosen; Sholom S. | Tamper-proof electronic processing device |
US5588060A (en) * | 1994-06-10 | 1996-12-24 | Sun Microsystems, Inc. | Method and apparatus for a key-management scheme for internet protocols |
FR2722596A1 (en) * | 1994-07-13 | 1996-01-19 | France Telecom | SYSTEM FOR CONTROLLING ACCESS LIMITED TO AUTHORIZED AND RENEWABLE TIME PLACES USING A PORTABLE MEMORY MEDIUM |
WO1996020452A1 (en) * | 1994-12-28 | 1996-07-04 | Kabushiki Kaisya Advance | Certifying system and transaction system with the certification |
US7162635B2 (en) * | 1995-01-17 | 2007-01-09 | Eoriginal, Inc. | System and method for electronic transmission, storage, and retrieval of authenticated electronic original documents |
SE504085C2 (en) | 1995-02-01 | 1996-11-04 | Greg Benson | Methods and systems for managing data objects in accordance with predetermined conditions for users |
US7505945B2 (en) * | 1995-02-08 | 2009-03-17 | Cryptomathic A/S | Electronic negotiable documents |
US6157721A (en) * | 1996-08-12 | 2000-12-05 | Intertrust Technologies Corp. | Systems and methods using cryptography to protect secure computing environments |
US6658568B1 (en) * | 1995-02-13 | 2003-12-02 | Intertrust Technologies Corporation | Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management |
US7143290B1 (en) * | 1995-02-13 | 2006-11-28 | Intertrust Technologies Corporation | Trusted and secure techniques, systems and methods for item delivery and execution |
US5943422A (en) | 1996-08-12 | 1999-08-24 | Intertrust Technologies Corp. | Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels |
US7124302B2 (en) * | 1995-02-13 | 2006-10-17 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US8639625B1 (en) | 1995-02-13 | 2014-01-28 | Intertrust Technologies Corporation | Systems and methods for secure transaction management and electronic rights protection |
US5892900A (en) | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US6948070B1 (en) | 1995-02-13 | 2005-09-20 | Intertrust Technologies Corporation | Systems and methods for secure transaction management and electronic rights protection |
EP1643340B1 (en) | 1995-02-13 | 2013-08-14 | Intertrust Technologies Corp. | Secure transaction management |
US7133846B1 (en) | 1995-02-13 | 2006-11-07 | Intertrust Technologies Corp. | Digital certificate support system, methods and techniques for secure electronic commerce transaction and rights management |
US20060206397A1 (en) * | 1995-02-13 | 2006-09-14 | Intertrust Technologies Corp. | Cryptographic methods, apparatus and systems for storage media electronic right management in closed and connected appliances |
US7095854B1 (en) * | 1995-02-13 | 2006-08-22 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US7133845B1 (en) * | 1995-02-13 | 2006-11-07 | Intertrust Technologies Corp. | System and methods for secure transaction management and electronic rights protection |
US5619571A (en) * | 1995-06-01 | 1997-04-08 | Sandstrom; Brent B. | Method for securely storing electronic records |
US5768389A (en) * | 1995-06-21 | 1998-06-16 | Nippon Telegraph And Telephone Corporation | Method and system for generation and management of secret key of public key cryptosystem |
US5812669A (en) * | 1995-07-19 | 1998-09-22 | Jenkins; Lew | Method and system for providing secure EDI over an open network |
US6393566B1 (en) | 1995-07-28 | 2002-05-21 | National Institute Of Standards And Technology | Time-stamp service for the national information network |
US6898581B1 (en) | 1995-08-21 | 2005-05-24 | Pitney Bowes Inc. | Secure user certification for electronic commerce employing value metering system |
US5796841A (en) * | 1995-08-21 | 1998-08-18 | Pitney Bowes Inc. | Secure user certification for electronic commerce employing value metering system |
EP0760565B1 (en) * | 1995-08-28 | 1998-07-08 | Ofra Feldbau | Apparatus and method for authenticating the dispatch and contents of documents |
DE19532617C2 (en) * | 1995-09-04 | 1998-01-22 | Nisl Klaus Dipl Ing | Method and device for sealing computer data |
US6802005B1 (en) * | 1995-10-11 | 2004-10-05 | Pitney Bowes Inc. | Method and system for tracking a person's time at a location |
US5828751A (en) | 1996-04-08 | 1998-10-27 | Walker Asset Management Limited Partnership | Method and apparatus for secure measurement certification |
US8092224B2 (en) | 1995-11-22 | 2012-01-10 | James A. Jorasch | Systems and methods for improved health care compliance |
US7553234B2 (en) | 1995-11-22 | 2009-06-30 | Walker Digital, Llc | Method and apparatus for outputting a result of a game via a container |
US5720034A (en) * | 1995-12-07 | 1998-02-17 | Case; Jeffrey D. | Method for secure key production |
US5926551A (en) * | 1995-12-28 | 1999-07-20 | International Business Machines Corporation | System and method for certifying content of hard-copy documents |
US20060265336A1 (en) * | 1996-02-26 | 2006-11-23 | Graphon Corporation | Automated system for management of licensed digital assets |
US20010011253A1 (en) * | 1998-08-04 | 2001-08-02 | Christopher D. Coley | Automated system for management of licensed software |
DE19610401A1 (en) * | 1996-03-16 | 1997-09-18 | Deutsche Telekom Ag | Method and arrangement for proving the time at which a cryptographic process was carried out |
US6959387B2 (en) | 1996-03-21 | 2005-10-25 | Walker Digital, Llc | Method and apparatus for verifying secure document timestamping |
US5923763A (en) | 1996-03-21 | 1999-07-13 | Walker Asset Management Limited Partnership | Method and apparatus for secure document timestamping |
US8549310B2 (en) * | 1996-04-08 | 2013-10-01 | Walker Digital, Llc | Method and apparatus for secure measurement certification |
DE19620611A1 (en) * | 1996-05-22 | 1997-11-27 | Martin Rahe | Facsimile transmission method especially for legal documents |
US6463416B1 (en) * | 1996-07-15 | 2002-10-08 | Intelli-Check, Inc. | Authentication system for identification documents |
US6078910A (en) * | 1996-08-20 | 2000-06-20 | Ascom Hasler Mailing Systems Inc. | Printing postage with cryptographic clocking security |
US5920861A (en) | 1997-02-25 | 1999-07-06 | Intertrust Technologies Corp. | Techniques for defining using and manipulating rights management data structures |
US6237094B1 (en) | 1997-05-21 | 2001-05-22 | At&T Corporation | System and method for using a second resource to store a data element from a first resource in a first-in first-out queue |
US6098170A (en) * | 1997-05-21 | 2000-08-01 | At&T Corporation | System and method for using a second resource to store a data element from a first resource in a first-in first-out queue |
US6101603A (en) | 1997-05-21 | 2000-08-08 | At&T Corporation | System and method for using a second resource to store a data element from a first resource in a first-in last-out stack |
US6111953A (en) * | 1997-05-21 | 2000-08-29 | Walker Digital, Llc | Method and apparatus for authenticating a document |
US6209090B1 (en) | 1997-05-29 | 2001-03-27 | Sol Aisenberg | Method and apparatus for providing secure time stamps for documents and computer files |
US6584565B1 (en) | 1997-07-15 | 2003-06-24 | Hewlett-Packard Development Company, L.P. | Method and apparatus for long term verification of digital signatures |
IL135069A0 (en) * | 1997-09-22 | 2001-05-20 | Eolas Technologies Inc | Method and system for transient key digital time stamps |
US7047415B2 (en) | 1997-09-22 | 2006-05-16 | Dfs Linkages, Inc. | System and method for widely witnessed proof of time |
US6381696B1 (en) | 1998-09-22 | 2002-04-30 | Proofspace, Inc. | Method and system for transient key digital time stamps |
US7017046B2 (en) * | 1997-09-22 | 2006-03-21 | Proofspace, Inc. | System and method for graphical indicia for the certification of records |
US7092914B1 (en) * | 1997-11-06 | 2006-08-15 | Intertrust Technologies Corporation | Methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information |
US6112181A (en) | 1997-11-06 | 2000-08-29 | Intertrust Technologies Corporation | Systems and methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information |
US6314521B1 (en) | 1997-11-26 | 2001-11-06 | International Business Machines Corporation | Secure configuration of a digital certificate for a printer or other network device |
JPH11249964A (en) | 1998-03-03 | 1999-09-17 | Fujitsu Ltd | Clock device and computer device |
DE29806161U1 (en) * | 1998-04-06 | 1998-07-30 | Afg Elektronik Gmbh | Clock |
US6826685B1 (en) * | 1998-06-10 | 2004-11-30 | International Business Machines Corporation | Method and system for the digital certificate generation and distribution |
WO2000007077A1 (en) * | 1998-07-31 | 2000-02-10 | Intel Corporation | Method and apparatus for providing certified time |
US6671803B1 (en) * | 1998-10-06 | 2003-12-30 | Koninklijke Philips Electronics N.V. | Method and system for consumer electronic device certificate management |
US7209889B1 (en) | 1998-12-24 | 2007-04-24 | Henry Whitfield | Secure system for the issuance, acquisition, and redemption of certificates in a transaction network |
US6389537B1 (en) * | 1999-04-23 | 2002-05-14 | Intel Corporation | Platform and method for assuring integrity of trusted agent communications |
JP3782259B2 (en) | 1999-05-31 | 2006-06-07 | 富士通株式会社 | Signature creation device |
JP2003519417A (en) * | 1999-06-23 | 2003-06-17 | データム・インコーポレイテツド | System and method for providing a trusted third party clock and a trusted local clock |
US6393126B1 (en) | 1999-06-23 | 2002-05-21 | Datum, Inc. | System and methods for generating trusted and authenticatable time stamps for electronic documents |
NL1012435C2 (en) * | 1999-06-25 | 2000-12-28 | Koninkl Kpn Nv | System for secure storage and management in a TTP server. |
US6898709B1 (en) | 1999-07-02 | 2005-05-24 | Time Certain Llc | Personal computer system and methods for proving dates in digital data files |
US6948069B1 (en) | 1999-07-02 | 2005-09-20 | Time Certain, Llc | Method and system for determining and maintaining trust in digital image files with certifiable time |
US6895507B1 (en) * | 1999-07-02 | 2005-05-17 | Time Certain, Llc | Method and system for determining and maintaining trust in digital data files with certifiable time |
US7409557B2 (en) | 1999-07-02 | 2008-08-05 | Time Certain, Llc | System and method for distributing trusted time |
US8868914B2 (en) * | 1999-07-02 | 2014-10-21 | Steven W. Teppler | System and methods for distributing trusted time |
US7243236B1 (en) * | 1999-07-29 | 2007-07-10 | Intertrust Technologies Corp. | Systems and methods for using cryptography to protect secure and insecure computing environments |
CA2317139C (en) | 1999-09-01 | 2006-08-08 | Nippon Telegraph And Telephone Corporation | Folder type time stamping system and distributed time stamping system |
US6792536B1 (en) | 1999-10-20 | 2004-09-14 | Timecertain Llc | Smart card system and methods for proving dates in digital files |
US20050160272A1 (en) * | 1999-10-28 | 2005-07-21 | Timecertain, Llc | System and method for providing trusted time in content of digital data files |
US6742119B1 (en) | 1999-12-10 | 2004-05-25 | International Business Machines Corporation | Time stamping method using time delta in key certificate |
US7519824B1 (en) | 1999-12-10 | 2009-04-14 | International Business Machines Corporation | Time stamping method employing multiple receipts linked by a nonce |
US7490241B1 (en) | 1999-12-10 | 2009-02-10 | International Business Machines Corporation | Time stamping method employing user specified time |
US7315948B1 (en) | 1999-12-10 | 2008-01-01 | International Business Machines Corporation | Time stamping method employing a separate ticket and stub |
US6965998B1 (en) | 1999-12-10 | 2005-11-15 | International Business Machines Corporation | Time stamping method using time-based signature key |
US6993656B1 (en) | 1999-12-10 | 2006-01-31 | International Business Machines Corporation | Time stamping method using aged time stamp receipts |
US6571344B1 (en) * | 1999-12-21 | 2003-05-27 | Koninklijke Philips Electronics N. V. | Method and apparatus for authenticating time-sensitive interactive communications |
IL144901A0 (en) * | 2000-01-13 | 2002-06-30 | Yasukura Yutaka | Electronic information inquiry process |
GB0004976D0 (en) * | 2000-03-01 | 2000-04-19 | Tatis International | Trade and transport information system |
US8055509B1 (en) * | 2000-03-10 | 2011-11-08 | Walker Digital, Llc | Methods and apparatus for increasing and/or for monitoring a party's compliance with a schedule for taking medicines |
AU2000275203A1 (en) * | 2000-04-28 | 2001-11-12 | Swisscom Mobile Ag | Method for securing communications between a terminal and an additional user equipment |
US7603721B2 (en) * | 2000-05-09 | 2009-10-13 | Microsoft Corporation | Restricted software and hardware usage on a computer |
ES2165812A1 (en) * | 2000-07-13 | 2002-03-16 | Fab Nac Moneda Y Timbre Es | Independent device for electronic certification of time |
CA2417916A1 (en) * | 2000-08-04 | 2002-02-14 | Lynn Henry Wheeler | Method and apparatus for access authentication entity |
US7552333B2 (en) * | 2000-08-04 | 2009-06-23 | First Data Corporation | Trusted authentication digital signature (tads) system |
US6848048B1 (en) * | 2000-10-13 | 2005-01-25 | Litronic Inc. | Method and apparatus for providing verifiable digital signatures |
US6948065B2 (en) | 2000-12-27 | 2005-09-20 | Intel Corporation | Platform and method for securely transmitting an authorization secret |
US7174568B2 (en) * | 2001-01-31 | 2007-02-06 | Sony Computer Entertainment America Inc. | Method and system for securely distributing computer software products |
US20020104004A1 (en) * | 2001-02-01 | 2002-08-01 | Bruno Couillard | Method and apparatus for synchronizing real-time clocks of time stamping cryptographic modules |
GB2372597B (en) * | 2001-02-27 | 2005-08-10 | Hewlett Packard Co | Device and method for data timestamping |
US7065656B2 (en) | 2001-07-03 | 2006-06-20 | Hewlett-Packard Development Company, L.P. | Tamper-evident/tamper-resistant electronic components |
US7296299B2 (en) | 2001-07-03 | 2007-11-13 | Hewlett-Packard Development Company, L.P. | Tamper-evident and/or tamper-resistant electronic components |
US7328348B2 (en) * | 2001-08-02 | 2008-02-05 | Safenet, Inc. | Method and system for securely timestamping digital data |
GB0123453D0 (en) * | 2001-09-28 | 2001-11-21 | Ncipher Corp Ltd | Time stamping device |
US20030126447A1 (en) * | 2001-12-27 | 2003-07-03 | Jacques Debiez | Trusted high stability time source |
US20030145200A1 (en) * | 2002-01-31 | 2003-07-31 | Guy Eden | System and method for authenticating data transmissions from a digital scanner |
US20030190046A1 (en) * | 2002-04-05 | 2003-10-09 | Kamerman Matthew Albert | Three party signing protocol providing non-linkability |
US20050076213A1 (en) * | 2002-04-12 | 2005-04-07 | James Conlow | Self-enrollment and authentication method |
US7708189B1 (en) | 2002-05-17 | 2010-05-04 | Cipriano Joseph J | Identification verification system and method |
US7142674B2 (en) * | 2002-06-18 | 2006-11-28 | Intel Corporation | Method of confirming a secure key exchange |
GB2390703A (en) * | 2002-07-02 | 2004-01-14 | Ascent Group Ltd | Storage and authentication of data transactions |
US20040203868A1 (en) * | 2002-08-14 | 2004-10-14 | Eidson John C. | Measurement authentication |
US7076802B2 (en) * | 2002-12-31 | 2006-07-11 | Intel Corporation | Trusted system clock |
DE10308232A1 (en) * | 2003-02-25 | 2004-09-09 | Francotyp-Postalia Ag & Co. Kg | Method for determining time information |
US7370212B2 (en) | 2003-02-25 | 2008-05-06 | Microsoft Corporation | Issuing a publisher use license off-line in a digital rights management (DRM) system |
FR2852413B1 (en) * | 2003-03-12 | 2005-05-20 | SECURE, INVIOLABLE AND INFALSIFIABLE DEVICE FOR THE STORAGE OF AUTHENTICATED AND DATED DATA WITH LEGAL OR LEGAL VALUE | |
US20050125656A1 (en) * | 2003-06-16 | 2005-06-09 | Rizwan Mallal | Electronic notary system and method for long-term digital signature authentication |
CN1642077B (en) * | 2004-01-13 | 2011-07-06 | 国际商业机器公司 | Credible digital time stamp generating and verifying method and system |
US20060242406A1 (en) * | 2005-04-22 | 2006-10-26 | Microsoft Corporation | Protected computing environment |
ATE493706T1 (en) * | 2004-08-02 | 2011-01-15 | Ibm | METHOD FOR GUARANTEEING THE FRESHNESS OF RESULTS FOR INQUIRIES AGAINST A NON SECURE DATA STORAGE |
US7340610B1 (en) | 2004-08-31 | 2008-03-04 | Hitachi, Ltd. | Trusted time stamping storage system |
US8347078B2 (en) | 2004-10-18 | 2013-01-01 | Microsoft Corporation | Device certificate individualization |
US7860318B2 (en) | 2004-11-09 | 2010-12-28 | Intelli-Check, Inc | System and method for comparing documents |
US8176564B2 (en) * | 2004-11-15 | 2012-05-08 | Microsoft Corporation | Special PC mode entered upon detection of undesired state |
US8336085B2 (en) * | 2004-11-15 | 2012-12-18 | Microsoft Corporation | Tuning product policy using observed evidence of customer behavior |
US20060106920A1 (en) * | 2004-11-15 | 2006-05-18 | Microsoft Corporation | Method and apparatus for dynamically activating/deactivating an operating system |
US8464348B2 (en) * | 2004-11-15 | 2013-06-11 | Microsoft Corporation | Isolated computing environment anchored into CPU and motherboard |
GB2421155B (en) * | 2004-12-07 | 2007-06-06 | Hewlett Packard Development Co | A system and method for constraint resolution |
US7890762B2 (en) * | 2004-12-30 | 2011-02-15 | Sap Ag | Differentiated proxy digital signatures |
US20060153369A1 (en) * | 2005-01-07 | 2006-07-13 | Beeson Curtis L | Providing cryptographic key based on user input data |
US7869593B2 (en) * | 2005-01-07 | 2011-01-11 | First Data Corporation | Software for providing based on shared knowledge public keys having same private key |
US7693277B2 (en) * | 2005-01-07 | 2010-04-06 | First Data Corporation | Generating digital signatures using ephemeral cryptographic key |
US7490239B2 (en) * | 2005-01-07 | 2009-02-10 | First Data Corporation | Facilitating digital signature based on ephemeral private key |
US7936869B2 (en) * | 2005-01-07 | 2011-05-03 | First Data Corporation | Verifying digital signature based on shared knowledge |
US20060153364A1 (en) * | 2005-01-07 | 2006-07-13 | Beeson Curtis L | Asymmetric key cryptosystem based on shared knowledge |
US7593527B2 (en) * | 2005-01-07 | 2009-09-22 | First Data Corporation | Providing digital signature and public key based on shared knowledge |
US20060153370A1 (en) * | 2005-01-07 | 2006-07-13 | Beeson Curtis L | Generating public-private key pair based on user input data |
US20060156013A1 (en) * | 2005-01-07 | 2006-07-13 | Beeson Curtis L | Digital signature software using ephemeral private key and system |
US20060153367A1 (en) * | 2005-01-07 | 2006-07-13 | Beeson Curtis L | Digital signature system based on shared knowledge |
JP2006236252A (en) * | 2005-02-28 | 2006-09-07 | Fujitsu Ltd | Security device, time calibration device, time stamp device, power supply control method and power supply control program |
US8438645B2 (en) | 2005-04-27 | 2013-05-07 | Microsoft Corporation | Secure clock with grace periods |
US8725646B2 (en) | 2005-04-15 | 2014-05-13 | Microsoft Corporation | Output protection levels |
US9436804B2 (en) | 2005-04-22 | 2016-09-06 | Microsoft Technology Licensing, Llc | Establishing a unique session key using a hardware functionality scan |
US9363481B2 (en) | 2005-04-22 | 2016-06-07 | Microsoft Technology Licensing, Llc | Protected media pipeline |
US20060265758A1 (en) | 2005-05-20 | 2006-11-23 | Microsoft Corporation | Extensible media rights |
US8353046B2 (en) * | 2005-06-08 | 2013-01-08 | Microsoft Corporation | System and method for delivery of a modular operating system |
US20090134181A1 (en) * | 2005-07-13 | 2009-05-28 | Vitality, Inc. | Medication dispenser with automatic refill |
US20100328099A1 (en) * | 2005-07-13 | 2010-12-30 | Vitality, Inc. | Night Light With Embedded Cellular Modem |
US20100270257A1 (en) * | 2005-07-13 | 2010-10-28 | Vitality, Inc. | Medicine Bottle Cap With Electronic Embedded Curved Display |
US20070016443A1 (en) * | 2005-07-13 | 2007-01-18 | Vitality, Inc. | Medication compliance systems, methods and devices with configurable and adaptable escalation engine |
CA2618135C (en) | 2005-08-09 | 2014-10-28 | Nexsan Technologies Canada Inc. | Data archiving system |
GB2431020B (en) * | 2005-10-05 | 2010-08-25 | Gary Watkins | Apparatus and system for verification of documents and data |
US7996679B2 (en) * | 2005-10-05 | 2011-08-09 | International Business Machines Corporation | System and method for performing a trust-preserving migration of data objects from a source to a target |
US8190923B2 (en) * | 2005-12-20 | 2012-05-29 | Microsoft Corporation | Method to securely initialize, protect and recover system date/time |
US20080195860A1 (en) * | 2007-02-14 | 2008-08-14 | Motorola, Inc. | Method and apparatus for detecting a compromised node in a network |
US20080235513A1 (en) * | 2007-03-19 | 2008-09-25 | Microsoft Corporation | Three Party Authentication |
US20090189441A1 (en) * | 2008-01-29 | 2009-07-30 | Paul Degoul | Distributed electrical/electronic architectures for brake-by-wire brake systems |
US8083129B1 (en) | 2008-08-19 | 2011-12-27 | United Services Automobile Association (Usaa) | Systems and methods for electronic document delivery, execution, and return |
FR2986124B1 (en) * | 2012-01-25 | 2014-03-14 | Ercom Engineering Reseaux Comm | METHOD FOR AUTHENTICATING A DEVICE COMPRISING A PROCESSOR AND A CHIP CARD BY GENERATING A PATTERN |
CA2865548C (en) | 2012-03-01 | 2021-03-02 | Ologn Technologies Ag | Systems, methods and apparatuses for the secure transmission and restricted use of media content |
US9559845B2 (en) | 2012-03-01 | 2017-01-31 | Ologn Technologies Ag | Systems, methods and apparatuses for the secure transmission of media content |
CA3113258C (en) * | 2012-06-18 | 2023-01-24 | Ologn Technologies Ag | Systems, methods and apparatuses for secure time management |
CN103718186B (en) | 2013-09-05 | 2015-07-08 | 华为技术有限公司 | Storage system and data operation request treatment method |
US10373409B2 (en) | 2014-10-31 | 2019-08-06 | Intellicheck, Inc. | Identification scan in compliance with jurisdictional or other rules |
WO2018125020A1 (en) * | 2016-12-29 | 2018-07-05 | Limited Liability Company "Innovation Development Hub" | Cryptographic transformation device |
US10333717B2 (en) * | 2017-03-09 | 2019-06-25 | Microsoft Technology Licensing, Llc | Timestamped license data structure |
US11777748B2 (en) | 2018-11-28 | 2023-10-03 | International Business Machines Corporation | Trusted timestamping |
Family Cites Families (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4264782A (en) * | 1979-06-29 | 1981-04-28 | International Business Machines Corporation | Method and apparatus for transaction and identity verification |
US4386233A (en) * | 1980-09-29 | 1983-05-31 | Smid Miles E | Crytographic key notarization methods and apparatus |
US4438824A (en) * | 1981-04-22 | 1984-03-27 | Siemens Corporation | Apparatus and method for cryptographic identity verification |
US4458109A (en) * | 1982-02-05 | 1984-07-03 | Siemens Corporation | Method and apparatus providing registered mail features in an electronic communication system |
US4637051A (en) * | 1983-07-18 | 1987-01-13 | Pitney Bowes Inc. | System having a character generator for printing encrypted messages |
US4799258A (en) * | 1984-02-13 | 1989-01-17 | National Research Development Corporation | Apparatus and methods for granting access to computers |
US4575621A (en) * | 1984-03-07 | 1986-03-11 | Corpra Research, Inc. | Portable electronic transaction device and system therefor |
US4625076A (en) * | 1984-03-19 | 1986-11-25 | Nippon Telegraph & Telephone Public Corporation | Signed document transmission system |
US4633036A (en) * | 1984-05-31 | 1986-12-30 | Martin E. Hellman | Method and apparatus for use in public-key data encryption system |
US4710955A (en) * | 1985-11-25 | 1987-12-01 | General Instrument Corporation | Cable television system with two-way telephone communication path |
US4837822A (en) * | 1986-04-08 | 1989-06-06 | Schlage Lock Company | Cryptographic based electronic lock system and method of operation |
US4799259A (en) * | 1986-04-10 | 1989-01-17 | Rockwell International Corporation | Monolithic random digital noise generator |
GB8621333D0 (en) * | 1986-09-04 | 1986-10-15 | Manitoba Telephone System | Key management system |
US4797928A (en) * | 1987-01-07 | 1989-01-10 | Miu Automation | Encryption printed circuit board |
US4868877A (en) * | 1988-02-12 | 1989-09-19 | Fischer Addison M | Public key/signature cryptosystem with enhanced digital signature certification |
US5005200A (en) * | 1988-02-12 | 1991-04-02 | Fischer Addison M | Public key/signature cryptosystem with enhanced digital signature certification |
-
1989
- 1989-10-13 US US07/421,104 patent/US5001752A/en not_active Expired - Lifetime
-
1990
- 1990-05-29 EP EP90305778A patent/EP0422757B1/en not_active Expired - Lifetime
- 1990-05-29 AT AT90305778T patent/ATE144360T1/en not_active IP Right Cessation
- 1990-05-29 DE DE69028894T patent/DE69028894T2/en not_active Expired - Lifetime
- 1990-06-12 CA CA002018770A patent/CA2018770C/en not_active Expired - Lifetime
- 1990-06-18 AU AU57531/90A patent/AU624299B2/en not_active Expired
- 1990-09-27 JP JP2260322A patent/JPH03185551A/en active Pending
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20220100905A1 (en) * | 2020-09-30 | 2022-03-31 | Liveoak Technologies, Inc. | Platform for providing remote online notarization service |
US11687676B2 (en) * | 2020-09-30 | 2023-06-27 | Liveoak Technologies, Inc. | Platform for providing remote online notarization service |
Also Published As
Publication number | Publication date |
---|---|
DE69028894D1 (en) | 1996-11-21 |
AU5753190A (en) | 1991-04-18 |
EP0422757A3 (en) | 1992-10-21 |
JPH03185551A (en) | 1991-08-13 |
AU624299B2 (en) | 1992-06-04 |
EP0422757B1 (en) | 1996-10-16 |
ATE144360T1 (en) | 1996-11-15 |
CA2018770A1 (en) | 1991-04-13 |
US5001752A (en) | 1991-03-19 |
EP0422757A2 (en) | 1991-04-17 |
DE69028894T2 (en) | 1997-04-03 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CA2018770C (en) | Public/key date-time notary facility | |
US5136643A (en) | Public/key date-time notary facility | |
EP0841604B1 (en) | Personal date/time notary device | |
US6408388B1 (en) | Personal date/time notary device | |
US6334118B1 (en) | Software rental system and method for renting software | |
CA2043533C (en) | Electronic notary | |
EP1253744B1 (en) | Method for generation and management of a secret key in a public key cryptosystem | |
US5805712A (en) | Apparatus and method for providing secured communications | |
KR100455326B1 (en) | Document authentication system and method | |
US7167986B2 (en) | Upgradeable timestamp mechanism | |
US7039808B1 (en) | Method for verifying a message signature | |
US6237098B1 (en) | System for protecting weight verification device private key | |
JP2002514799A (en) | Electronic transmission, storage and retrieval system and method for authenticated documents | |
US6246967B1 (en) | Weight verification device | |
Stapleton | Security without obscurity: A guide to confidentiality, authentication, and integrity | |
Omura | Novel applications of cryptography in digital communications | |
CA2271178A1 (en) | Server-side public key cryptography apparatus with private key protection and isolation from public networks | |
CN112907375A (en) | Data processing method, data processing device, computer equipment and storage medium | |
CN101281563A (en) | Digital signing apparatus with using counter | |
US20070150754A1 (en) | Secure software system and method for a printer | |
JP2788296B2 (en) | Card usage system | |
Borselius et al. | A pragmatic alternative to undetachable signatures | |
JP3082883B2 (en) | IC prepaid card system | |
Waidner et al. | Loss-tolerance for electronic wallets. | |
Dafelmair | Model and implementation of a secure SW-development process for mission critical software |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
EEER | Examination request | ||
MKEX | Expiry |