Electrical computers and digital processing systems: support – Multiple computer communication using cryptography – Particular communication authentication technique
Reexamination Certificate
1997-12-23
2001-01-30
Barron, Jr., Gilberto (Department: 2767)
Electrical computers and digital processing systems: support
Multiple computer communication using cryptography
Particular communication authentication technique
C713S178000, C713S170000, C713S155000, C705S075000, C380S258000, C380S259000, C380S260000
Reexamination Certificate
active
06182219
ABSTRACT:
FIELD OF THE INVENTION
The present invention relates to a method and apparatus for authenticating the dispatch and the contents of dispatched information in general.
BACKGROUND OF THE INVENTION
Post, courier, forwarding and other mail services, which enable people to exchange documents and data, have been widely used both in the past and at the present time. With the evolution of modern technology, the use of electronic dispatch devices and systems, such as modems, facsimile machines, electronic mail (E-Mail) and EDI systems, computers, communication networks, and so forth, to exchange data and documents is rapidly evolving.
A substantial quantity of the information exchanged, such as contracts, purchase orders, invoices, monetary orders, notices, and even warning and notification messages, are of utmost importance. Sometimes, when a dispute arises between the sending and receiving party of the exchanged information, the receiving party may raise the claim that he never received the information, that the received information was different from what the sender claims to have sent, or the receiving party may even attempt to forge the received information.
The need, therefore, arises for the sender to prove that specific information has been sent at a specific time to that specific receiving party.
Various solutions to various related problems have been proposed in the literature. For example, the transmission operation itself may be authenticated, as shown in U.S. Pat. No. 5,339,361 (Schwalm et al.), which describes a communication system providing a verification system to identify both the sender and recipient of electronic information as well as an automatic time stamp for delivery of electronic information. This patent, however, does not verify the dispatched information.
Document authentication methods, for example by notarization, have long been in use. A method for notarization of electronic data is provided by EP-A-516 898 (PITNEY BOWES INC.) or its patent family member U.S. Pat. No. 5,022,080 (Durst et al.) which authenticates that source data has not been altered subsequent to a specific date and time. The method disclosed includes mathematically generating a second unit of data from the first unit of data, as by CRC generation, parity check or checksum. The second unit of data is then encrypted together with a time/date indication, and optionally with other information to form an authentication string. Validation that the first unit of data has not been changed is provided by comparing the original data's authentication string with the authentication string generated from the data and time in question. A method is even suggested for having the recipient verify the authenticity of the sender, the time of transmission and the data.
Other patents which discuss document authentication are U.S. Pat. Nos. 5,136,646 and 5,136,647 both to Haber et al. According to these patents, a unique digital representation of the document (which is obtained by means of a one-way hash function) is transmitted to an outside agency, where the current time is added to form a receipt. According to U.S. Pat. No. 5,136,647, the receipt is certified using a cryptographic digital signature procedure, and is optionally linked to other contemporary such receipts thereby fixing the document's position in the continuum of time. According to U.S. Pat. No. 5,136,646, the receipt is certified by concatenating and hashing the receipt with the current record catenate certificate which itself is a number obtained by sequential hashing of each prior receipt with the extent catenate certificate.
Various cryptographic schemes are known in the prior art for encrypting and for authenticating digital data and/or its author. For example Symmetric algorithms such as DES [1.01] and IDEA [1.02], one-way hash functions [1.03] such as MD5 [1.04], Public-Key (asymmetric) algorithms [1.05] such as RSA [1.06], and verifiable digital signatures generation algorithms [1.12] such as DSA [1.07] or RSA, as well as combinations thereof such as PGP [1.08] and MACs [1.13], are currently widely used for security and for authentication purposes [1.09]. An excellent publication relating to encryption, authentication, public-key cryptography and to cryptography and data security in general, as well as applications thereof and additional references to multiple sources can be found in [1]. Further prior art, in particular referring to integrity of stored data, can be found in D. W. Davies & W. L. Price “Security for computer networks”, 1989, John Wiley & Sons, Chichester (UK).
Proof of delivery of non-electronic documents is provided, for example, by Registered Mail and courier services. It is commonly used to authenticate the delivery of materials at a certain time to a certain party, and serves as admissible proof of delivery in a court of law. However, no proof is provided as to the information contents of the specific dispatch.
E-mail and other electronic messages forwarding services are commonly used today. The sender sends a message to the dispatching service which, in turn, forwards the message to the destination and provides the sender with a delivery report which typically includes the date and time of the dispatch, the recipient's address, the transmission completion status, and sometimes even the transmitted data, the number of pages delivered, the recipient's identification information, and so on. The provided delivery report mainly serves for accounting purposes and for notifying the sender of the dispatch and/or its contents. Moreover, frequently no record of the specific dispatched data is maintained with the service after the delivery is completed or provided to the sender.
SUMMARY OF THE PRESENT INVENTION
The literature does not provide a comprehensive solution that directly addresses the problem in question: what information has been sent to whom and when. Accordingly, there is a need for a method and system to provide the sender with a convenient means for authenticating both the dispatch and the contents of documents, electronic information and other information during the normal flow of daily activities.
It is therefore an object of the present invention to improve the capacity of conventional systems and methods for dispatching documents and transmitting information to provide the sender with evidence he can use to prove both the dispatch and its contents.
The present invention discloses an apparatus according to claim
1
for authenticating that certain information has been sent by a sender via a dispatcher to a recipient, the apparatus comprising:
means for providing a set A comprising a plurality of information elements a1, . . . ,an, said information element a1 comprising the contents of said dispatched information, and said one or more information elements a2, . . . ,an containing dispatch-related information and comprise at least the following elements:
a2—a time indication associated with said dispatch; and
a3—information describing the destination of said dispatch,
and wherein at least one of said information elements is provided in a manner that is resistant or indicative of tamper attempts by said sender;
means for associating said dispatch-related information with said element a1 by generating authentication-information, in particular comprising a representation of at least said elements a1, a2 and a3, said representation comprising a set of one or more elements, each comprising a representation of one or more elements of said set A; and
means for securing at least part of said authentication-information against undetected tamper attempts of at least said sender.
Thus, the present invention provides a sender with the capability to prove both the dispatch and the contents of the dispatched materials. The dispatched materials can be paper documents, electronic information or other information which can be dispatched electronically by transmission or non-electronically
Feldbau Michael
Feldbau Ofra
Barron Jr. Gilberto
Callahan Paul E.
Leydig , Voit & Mayer, Ltd.
LandOfFree
Apparatus and method for authenticating the dispatch and... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Apparatus and method for authenticating the dispatch and..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Apparatus and method for authenticating the dispatch and... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2495259