Mobile multi-party digitally signed documents and techniques for using these allowing detection of tamper

Patent metadata

Field	Value
Publication number	US-11025643-B2
Application number	US-201916372593-A
Country	US
Kind code	B2
Filing date	Apr 2, 2019
Priority date	Apr 2, 2019
Publication date	Jun 1, 2021
Grant date	Jun 1, 2021

Abstract

Authenticated base digital document(s) are issued to client(s) by an issuing party, and aggregate digital document(s) are received. An aggregate digital document includes base digital document(s) and attachment(s). Authenticity of the aggregate digital document(s) is verified, resulting in authenticated aggregate digital document(s), which are stored and/or redistributed. Authentication challenge(s) are sent by a verifying party to a client requesting part or all of an aggregate digital document from the client be verified. The part or all of the aggregate digital document is received and authenticity and integrity are verified, resulting in an authenticated aggregate digital document. The client verifies authenticity of a base digital document and receives the authentication challenge(s) for an authenticated aggregate digital document and sends part or all of the authenticated aggregate digital document to the verifying party for verification by the verifying party.

First claim

What is claimed is:

1. A method, comprising:
issuing by a computer system one or more authenticated base digital documents to one or more clients;
receiving by the computer system one or more aggregate digital documents, wherein an aggregate digital document comprises one of the one or more base digital documents and one or more attachments;
verifying authenticity of the one or more aggregate digital documents, resulting in corresponding one or more authenticated aggregate digital documents; and
performing by the computer system one or both of storing and redistributing the received one or more authenticated aggregate digital documents,
where an authenticated base digital document and the corresponding one or more authenticated attachments for an aggregate digital document form vertices of a graph, and the corresponding one or more authenticated attachments indicate an order of attachment forming edges between the vertices.

2. The method of claim 1 , further comprising merging two or more versions of an authenticated aggregate digital document, the merging reconciling the two or more versions of the aggregated digital document and preserving an order of attachment for attachments in both versions, the merging creating a merged authenticated aggregated digital document that includes preservation of integrity and authenticity of the merged aggregated digital document and its attachments.

3. The method of claim 1 , further comprising updating an authenticated aggregate digital document by securely attaching one or more authenticated attachments to the authenticated aggregate digital document, the attaching preserving authenticity and integrity of the updated authenticated aggregate digital document and its attachments and preserving an order of attachment for the one or more attachments.

4. The method of claim 3 , further comprising redistributing the updated authenticated aggregate digital document.

5. A computer program product comprising a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a computer system to cause the computer system to perform the method of claim 1 .

6. A method, comprising:
sending by a computer system one or more authentication challenges to a client requesting part or all of an aggregate digital document from the client be verified, the aggregate digital document comprising a base digital document or a base digital document with one or more attachments;
receiving by the computer system from the client the part or all of the aggregate digital document; and
verifying by the computer system authenticity and integrity of the part or all of the aggregate digital document, resulting in an authenticated aggregate digital document,
wherein the authenticated aggregate digital document comprises the base digital document with one or more attachments, and wherein the base digital document and the one or more attachments form vertices of a graph and the one or more attachments indicate an order of attachment forming edges between the vertices.

7. The method of claim 6 , wherein verifying by the computer system authenticity of the part or all of the authenticated aggregate digital document comprises verifying the authenticity and the integrity of the part or all of the aggregate digital document at least by verifying authenticity associated with the part or all of the aggregate digital document.

8. The method of claim 6 , further comprising sending a given attachment for the authenticated aggregate digital document to the client, the given attachment comprising information demonstrating authenticity of the given attachment and comprising information preserving an order of attachment from the given attachment to the base digital document or to at least one attachment of the one or more attachments for the authenticated aggregate digital document.

9. The method of claim 6 , wherein the part or all of the authenticated aggregate digital document comprises one or more attributes corresponding to part or all of the base digital document and the one or more attachments, and the verifying comprises verifying authenticity of cryptographic features corresponding to the one or more attributes.

10. The method of claim 6 , further comprising merging two or more versions of an authenticated aggregate digital document, the merging reconciling the two or more versions of the aggregated digital document and preserving an order of attachment for attachments in both versions, the merge creating an authenticated merged aggregated digital document.

11. The method of claim 10 , wherein the two or more versions are received from multiple clients.

12. The method of claim 6 , further comprising updating an authenticated aggregate digital document by securely attaching one or more authenticated attachments to the verified authenticated aggregate digital document to create an updated authenticated aggregate digital document, the attaching preserving integrity of the updated authenticated aggregate digital document and its attachments and preserving an order of attachment for the one or more attachments.

13. The method of claim 12 , further comprising redistributing the updated authenticated aggregate digital document.

14. A computer program product comprising a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a computer system to cause the computer system to perform the method of claim 6 .

15. A method, comprising:
sending by a computer system one or more authentication challenges to a client requesting part or all of an aggregate digital document from the client be verified, the aggregate digital document comprising a base digital document or a base digital document with one or more attachments;
receiving by the computer system from the client the part or all of the aggregate digital document;
verifying by the computer system authenticity and integrity of the part or all of the aggregate digital document, resulting in an authenticated aggregate digital document; and
merging two or more versions of an authenticated aggregate digital document, the merging reconciling the two or more versions of the aggregated digital document and preserving an order of attachment for attachments in both versions, the merge creating an authenticated merged aggregated digital document,
wherein at least one of the two or more versions of the authenticated aggregate digital document is received from the client and at least one other one of the two or more versions of the authenticated aggregate digital document is received from one or more of the following: storage; one or more other clients; or an issuing authority.

16. A method, comprising:
receiving at a computer system one of a base digital document or an aggregate digital document from one of an issuing authority, a client, a credential store, or a verifying party, wherein the aggregate digital document comprises the base digital document one or more attachments;
verifying by the computer system authenticity of the base digital document or the aggregated digital document, resulting in an authenticated aggregate digital document;
receiving at the computer system authentication challenges from a verifying party for the authenticated aggregate digital document; and
sending by the computer system part or all of the authenticated aggregate digital document to the verifying party for verification by the verifying party,
wherein the aggregate digital document comprises the authenticated base digital document with the one or more attachments,

Assignees

• IBM

Inventors

• Jadav Divyesh
• Karanjai Rabimba
• Koved Lawrence
• Alatorre Gabriel

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title