WO2002084945A1

WO2002084945A1 - Systems and methods for electronic postmarking of data including location data

Info

Publication number: WO2002084945A1
Application number: PCT/US2002/011380
Authority: WO
Inventors: Charles R. Chamberlain
Original assignee: United States Postal Service
Priority date: 2001-04-12
Filing date: 2002-04-12
Publication date: 2002-10-24

Abstract

Systems and mehods for electronic postmarking of location data are provided. Electronic postmarking of location data (S.20) includes generating a hash value corresponding to merged data (S.30). Electronic postmarking further includes generating an electronic postmark data structure (S.40) comprising the hash value and a date/time stamp. The electronic postmarking data structure (S.40) may further include a digital signature.

Description

SYSTEMS AND METHODS FOR ELECTRONIC POSTMARKING OF DATA

INCLUDING LOCATION DATA DESCRIPTION

Cross Reference to Related Applications

[001] This application claims priority from: U.S. Provisional Application Serial No. 60/283,139, filed April 12, 2001 , by Charles R. Chamberlain and titled SYSTEMS AND METHODS FOR ELECTRONIC POSTMARKING INCLUDING LOCATION DATA, the disclosure of which is expressly incorporated herein by reference; U.S. Application Serial No. 09/675,677, filed September 29, 2000, by Leo J. Campbell et al. and titled SYSTEMS AND METHODS FOR AUTHENTICATING AN ELECTRONIC MESSAGE, the disclosure of which is expressly incorporated herein by reference; and PCT Application Serial No. PCT/U S01/47720, filed December 17, 2001 , by Charles R. Chamberlain and titled SYSTEM AND METHODS FOR ELECTRONIC POSTMARKING WITHOUT DIRECTLY UTILIZING AN ELECTRONIC POSTMARK SERVER, the disclosure of which is expressly incorporated herein by reference. Technical Field

[002] This invention, in general, relates to electronic postmarking of data. In particular, this invention relates to electronic postmarking of location data. Background

[003] As described in U.S. Application Serial No. 09675,677, filed September 29, 2000, by Leo J. Campbell et al. and titled SYSTEMS AND METHODS FOR AUTHENTICATING AN ELECTRONIC MESSAGE, the disclosure of which is expressly incorporated herein by reference, an electronic postmark, or EPM, provides content and temporal integrity and identification authenticity for data, which is transferred over a network. Such EPMs have traditionally been used to authenticate the identity of the sender of a particular message or to authenticate the time/date at which the message was created. Increasingly, however, not only the identity and time/date of creation are important, but also the physical or geographic location of the sender of the message is significant. [004] Authenticated location or geographic information may be used for many purposes, including, for example, being able to establish with a certain degree of confidence the location at which a particular message or data was created. But, as noted above, the present systems and methods do not permit that. Accordingly, there exists a need for electronic postmarking of location or geographic data.

SUMMARY

[005] Systems and methods consistent with the present invention permit electronic postmarking of location data.

[006] In one embodiment consistent with the present invention, a method for performing electronic postmarking of data, including user data and location data is provided. The method includes receiving user data from a data acquisition/generation device. The method further includes receiving location data from a location data acquisition/generation device. The method further involves merging the user data with the location data to generate merged data. The method further comprises generating an electronic postmark data structure comprising a hash value of the merged data and a time/date stamp.

[007] Another embodiment consistent with the present invention is a method for performing electronic postmarking of data, including user data and location data. The method includes receiving user data from a data acquisition/generation device. The method further includes receiving location data from a location data acquisition/generation device. The method further involves merging the user data with the location data to generate merged data. The method further comprises generating an electronic postmark data structure comprising a hash value of the merged data, a time/date stamp, and a digital signature.

[008] Yet another embodiment consistent with the present invention is a system for performing electronic post marking of data, including user data and location data. The system includes means for receiving user data from a data acquisition/generation device. The system further includes means for receiving location data from a location data acquisition/generation device. The system further involves means for merging the user data with the location data to generate merged data. The system further comprises means for generating an electronic postmark data structure comprising a hash value of the merged data and a time/date stamp.

[009] It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the invention, as claimed. BRIEF DESCRIPTION OF THE DRAWINGS

[010] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description, serve to explain the principles of the invention. In the drawings:

[011] FIG. 1 shows an exemplary system environment consistent with the present invention;

[012] FIG. 2A shows an exemplary standalone electronic postmarking (EPM) device consistent with the present invention;

[013] FIG. 2B shows an exemplary embedded EPM device consistent with the present invention;

[014] FIG. 3 shows an exemplary block diagram of an EPM device consistent with the invention; and

[015] FIG. 4 shows a flowchart of an exemplary method for performing electronic postmarking of data, including user data and location data.

DESCRIPTION OF THE EMBODIMENTS

[016] Reference will now be made in detail to the exemplary embodiments consistent with the invention, examples of which are illustrated in the accompanying drawings. Wherever possible, the same reference numbers will be used throughout the drawings to refer to the same or like parts.

[017] Systems and methods consistent with the present invention perform electronic postmarking of data, including location data. Electronic postmarking of location data enables one to authenticate the location data corresponding to a user data. For example, using the location data one may be able to determine the location where a particular image was captured, using for example, a digital camera. As used herein, the term "location data" includes, but is not limited to, data concerning the geographic location, GPS coordinates, position, altitude, longitude, latitude, or the direction of a data acquisition/generation device, such as a digital camera.

[018] FIG. 1 shows an exemplary system environment consistent with the present invention. A sender 102 (also referred to as a user), who has a data acquisition/generation device capable of acquiring or generating data, may send a message along with the acquired/generated data to an electronic postmarking system (EPM system) 104. As used herein, the term "data acquisition/generation device" includes, but is not limited to, a digital camera, a digital video recorder, a personal digital assistant, a handheld computer, a laptop computer, or any other device capable of acquiring, generating, and/or storing electronic data. EPM system 104, as discussed later, may generate an EPM using a regular EPM server, as described in U.S. Application Serial No. 09/675,677, filed September 29, 2000, by Leo J. Campbell et al. and titled SYSTEMS AND METHODS FOR AUTHENTICATING AN ELECTRONIC MESSAGE. The EPM system may also generate an EPM using a MicroEPM device, as described in, PCT Application Serial No. PCT/US01/47720, filed December 17, 2001 , by Charles R. Chamberlain and titled SYSTEM AND METHODS FOR ELECTRONIC POSTMARKING WITHOUT DIRECTLY UTILIZING AN ELECTRONIC POSTMARK SERVER, the disclosure of which is expressly incorporated herein by reference. As used herein, the term "embedded electronic postmarking device" is used to refer to the MicroEPM device of the previously mentioned patent application. Accordingly, in one embodiment consistent with the present invention, an EPM device, such as a MicroEPM device, may be embedded in a data acquisition/generation device.

[019] As shown in FIG. 1 , sender 102 may send data, including location data, via a network 105, such as the Internet, to EPM system 104. The EPM system may then send the data to receiver 106, via a network, such as the Internet.

[020] FIG. 2A shows an exemplary standalone electronic postmarking (EPM) device consistent with the present invention. A user 202 may operate a data acquisition/generation device 204 to generate data. As discussed above, data acquisition/generation device 204 can be any electronic device that is capable of generating, acquiring, and/or storing electronic data. Data acquisition/generation device 204 may transfer the acquired/generated user data to an external EPM device 206 through an interface 207. Data acquisition/generation device 204 may further include a location data sensor, such as a GPS sensor. Using the location data sensor (not shown), data acquisition/generation device 204 may generate data corresponding to the position, altitude, longitude, latitude, or the direction of a data acquisition/generation device, such as a digital camera.

[021] In one embodiment, data acquisition/generation device may merge the user data and the location data to create merged data, which may then be transferred via an interface connecting data acquisition/generation device 204 and EPM device 206.

[022] The interface connecting data acquisition/generation device 204 and EPM device 206 may be any interface that is capable of transferring information, including an electronic, optical or a combination thereof. In particular, the interface may be a network, such as the Internet, a local area network (wired or wireless). The interface could also be any of the interfaces used to connect electronic devices, for example, a serial or a parallel interface for connecting I/O devices to a computer, a Uniform Serial Bus, IEEE-1394, Bluetooth, or any other interface.

[023] At the user's command, the merged data is sent from data acquisition/generation device 204 to EPM device 206. In one embodiment EPM device 206 may generate an electronic postmarking structure for the merged data and store the electronic postmarking structure locally. The stored electronic postmarking structure may then be transferred to EPM server 208. Alternatively, EPM device 206 may continue storing locally the electronic postmarking structures, which may be later transferred in a batch to EPM server 208.

[024] FIG. 2B shows an exemplary embedded EPM device 215 consistent with the present invention. According to this embodiment an EPM device 215 may be embedded or physically incorporated into a data acquisition/generation device 214. As above, data acquisition/generation device 214 can be any electronic device that is capable of generating, acquiring, and/or storing electronic data. User data and location data may be transferred within the data acquisition/generation device to embedded EPM device 215 upon a user command or it may be transferred automatically. Data acquisition/generation device 214 may connect to an EPM server 216 for the generation of a batch EPM of the stored electronic postmarks.

[025] FIG. 3 shows an exemplary block diagram of an EPM device 300 consistent with the invention. The exemplary EPM device may include a postmark storage unit 306, a secure EPM interface 308, a postmark generation unit 310, a device interface 312, a real-time clock 314, a date generator 316, and a location data generator 318. Using real time data from real-time clock 314, user data and/or location data 304, a private key, and/or location data from location data generator 318, a postmark generation unit 310 creates an electronic postmark data structure. Postmark generation unit may be a software module executing on a general-purpose microprocessor or an application specific integrated circuit ("ASIC"). The generated electronic postmark data structure may be stored in postmark storage unit 306. Postmark storage unit 306 may be RAM, a flash memory, a hard drive, or any other appropriate type of electronic or optical storage.

[026] A plurality of electronic postmark data structures may be stored in the postmark storage unit for transfer in a single batch later. At the user's command, either a single electronic postmark data structure or a plurality of electronic postmark data structures may be transferred to EPM server 302 via secure EPM interface 308. Data, including user data and/or location data may arrive via device interface 312. A key interface (not shown) may accept a private key from an official source, such as the United States Postal Service (USPS), or any other trusted source of private keys (as described in the aforementioned U.S. Application Serial No. 09/675,677, filed September 29, 2000).

[027] Location data generator 318 may comprise at least one of a geo-position sensor, an altitude sensor, and a directional sensor. The geo- position sensor may generate longitude and/or latitude information. The altitude sensor may acquire information concerning the altitude of the data acquisition/generation device at the time data, such as a digital picture was acquired. The directional sensor may, for example, provide information concerning the direction in which the data acquisition/generation device, is pointing at the time user data, such as a digital image from a digital camera, was generated. [028] FIG. 4 shows a flowchart of an exemplary method for performing electronic postmarking of data, including user data and location data. In stage S.10, user data, including, for example, user acquired and/or user generated data, is received by an EPM device, such as the EPM device of FIG. 3. User data may either be acquired or generated locally or it may be received via device interface 312 of FIG. 3.

[029] In stage S.20, location data, including, for example, geo- position coordinates of the data acquisition/generation device, is received by the EPM device. Location data may be received via device interface 312 of FIG. 3 or may be locally generated using location data generator 318 of FIG. 3.

[030] In stage S.30, user data is merged with the location data to create merged data. A software module (which is not shown in FIG. 3) loaded in the memory (not shown) associated with the EPM device may perform this function. Alternatively, merging of the data may also be performed by the data acquisition/generation device.

[031] In stage S.40, an electronic postmark data structure is generated. As part of this stage, several sub-stages may occur. In one embodiment, the merged data obtained from the previous stage is hashed using, for example, a one-way hash function. As part of this sub-stage, any known or later developed hash function may be used. In one embodiment, a hash function, which produces a 64-bit key may be used. The hash may then be time/date stamped. Time may be obtained using real-time clock 314 of FIG. 3. Date may be obtained using date generator 316 of FIG. 3. Alternatively a time/date stamp may be obtained from a trusted external source.

[032] In one embodiment, the electronic postmark data structure may be generated comprising the hash value of the merged data and the time/date stamp. Alternatively, the electronic postmark data structure may be generated comprising the hash value of the merged data, the time/date stamp, and a digital signature comprising, for example, a private key. A digital signature may be produced by first performing a secure hash algorithm by using, for example, the Secure Hash Standard FIPS 180-1 on the data to be signed, to produce a secure hash value. The secure hash value may then be processed using a digital signature algorithm (DSA) and a unique private key to produce two data values. These data values may comprise the digital signature, which may then be appended to the hash value and the time/date stamp to form an electronic postmark data structure.

[033] In one embodiment after an electronic postmark data structure is generated, as discussed above, the generated electronic postmark data structure may be stored in a log. Alternatively, a data entry corresponding to the generated electronic postmark data structure may be stored in the log. The log may be located at EPM server 110 of FIG. 3.

[034] Other embodiments of the invention will be apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the invention being indicated by the following claims.

Claims

WHAT IS CLAIMED IS:

1. A method for performing electronic postmarking of data, including user data and location data, the method comprising: receiving user data from a data acquisition/generation device; receiving location data from a location data acquisition/generation device; merging the user data with the location data to generate merged data; and generating an electronic postmark data structure comprising the merged data and a time/date stamp.

2. The method of claim 1 , wherein the step of generating the electronic postmark data structure comprises generating a hash value from the merged data.

3. The method of claim 1 , wherein the stage of generating an electronic postmark data structure includes generating a digital signature for inclusion in the electronic postmark data structure.

4. The method of claim 1 , wherein location data includes at least one of position, altitude, longitude, latitude, and direction.

5. The method of claim 1 , wherein the stage of generating the electronic postmark data structure includes forwarding the merged data to an electronic postmarking server.

6. The method of claim 1 , wherein the stage of generating the electronic postmark data structure includes forwarding the merged data to an embedded electronic postmarking device.

7. The method of claim 6, wherein the embedded electronic postmarking device is embedded in the data acquisition/generation device.

8. The method of claim 1 , wherein the data acquisition/generation device is one of a digital camera, a digital video recorder, a personal digital assistant, a handheld computer, a laptop computer, and other device capable of generating and storing electronic data.

9. The method of claim 1 , wherein the location acquisition/generation device is at least one of a GPS sensor, an altitude sensor, a position sensor, a latitude sensor, a longitude sensor, and a direction sensor.

10. The method of claim 1 , further comprising: storing the generated electronic postmark data structure in a log file.

11. A method for performing electronic postmarking of data, including user data and location data, the method comprising: receiving user data from a data acquisition/generation device; receiving location data from a location data acquisition/generation device; merging the user data with the location data to generate merged data; and generating an electronic postmark data structure comprising the merged data, a time/date stamp, and a digital signature.

12. The method of claim 11 , wherein the step of generating the electronic postmark data structure comprises generating a hash value from the merged data.

13. The method of claim 11 , wherein location data includes at least one of position, altitude, longitude, latitude, and direction.

14. The method of claim 11 , wherein the stage of generating the electronic postmark data structure includes forwarding the merged data to an electronic postmarking server.

15. The method of claim 11 , wherein the stage of generating the electronic postmark data structure includes forwarding the merged data to an embedded electronic postmarking device.

16. The method of claim 15, wherein the embedded electronic postmarking device is embedded in the data acquisition/generation device.

17. The method of claim 11 , wherein the data acquisition/generation device is one of a digital camera, a digital video recorder, a personal digital assistant, a handheld computer, a laptop computer, and other device capable of generating and storing electronic data.

18. The method of claim 11 , where in the location acquisition/generation device is at least one of a GPS sensor, an altitude sensor, a position sensor, a latitude sensor, a longitude sensor, and a direction sensor..

19. A system for performing electronic postmarking of data, including user data and location data, the system comprising: means for receiving user data from a data acquisition/generation device; means for receiving location data from a location data acquisition/generation device; means for merging the user data with the location data to generate merged data; and means for generating an electronic postmark data structure comprising the merged data and a time/date stamp.

20. The system of claim 19, wherein means for generating the electronic postmark data structure comprises means for generating a hash value from the merged data.

21. The system of claim 19, wherein the means for generating an electronic postmark data structure includes means for generating a digital signature for inclusion in the electronic postmark data structure.

22. The system of claim 19, wherein location data includes at least one of position, altitude, longitude, latitude, and direction.

23. The system of claim 19, wherein the means for generating the electronic postmark data structure includes means for forwarding the merged data to an electronic postmarking server.

24. The system of claim 19, wherein the means for generating the electronic postmark data structure includes means for forwarding the merged data to an embedded electronic postmarking device.

25. The system of claim 24, wherein the embedded electronic postmarking device is embedded in the data acquisition/generation device.

26. The system of claim 19, wherein the data acquisition/generation device is one of a digital camera, a digital video recorder, a personal digital assistant, a handheld computer, a laptop computer, and other device capable of generating and storing electronic data.

27. The system of claim 19, wherein the location acquisition/generation device is at least one of a GPS sensor, an altitude sensor, a position sensor, a latitude sensor, a longitude sensor, and a direction sensor.