Quantum safe digital signature service

Patent metadata

Field	Value
Publication number	US-12425227-B2
Application number	US-202218081225-A
Country	US
Kind code	B2
Filing date	Dec 14, 2022
Priority date	Dec 14, 2022
Publication date	Sep 23, 2025
Grant date	Sep 23, 2025

Abstract

Mechanisms are disclosed for decoupled integration of quantum-safe digital signatures into software applications. Electronic document content is stored, by a software application, in connection with a document store. An application programming interface (API) request is issued to a quantum-safe digital signature service. The API request comprises an identifier associated with the electronic document content and a request to generate a quantum-safe signature associated with the electronic document content. The request to generate a quantum-safe signature of the electronic document content causes the quantum-safe digital signature service to perform several steps. First, the electronic document content is retrieved from the document store. Next, a quantum-safe digital signature data structure is generated. Next, the quantum-safe digital signature data structure is stored to the document store. A signing status update is transmitted to the software application. The software application reads the signature data structure from the document store.

First claim

Having thus described various embodiments of the invention, what is claimed as new and desired to be protected by Letters Patent includes the following:

1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method of decoupled integration of quantum-safe digital signatures into a software application, the method comprising:
storing, by the software application, in connection with a document store, electronic document content;
issuing an application programming interface (API) request to a quantum-safe digital signature service,
wherein the quantum-safe digital signature service interface with a multi-algorithm quantum-safe cryptographic library that supports multiple quantum-safe algorithms to generate a variety of quantum-safe signatures,
wherein the API request comprises an identifier associated with the electronic document content and a request to generate a quantum-safe signature associated with the electronic document content, and
wherein the request to generate the quantum-safe signature of the electronic document content causes the quantum-safe digital signature service to:
retrieve the electronic document content from the document store based on the identifier;
generate a quantum-safe digital signature data structure;
store the quantum-safe digital signature data structure to the document store; and
transmit a signing status update to the software application; and

reading, by the software application, the quantum-safe digital signature data structure from the document store.

2. The non-transitory computer-readable media of claim 1 , wherein the API request is made directly to the quantum-safe digital signature service.

3. The non-transitory computer-readable media of claim 1 , wherein the API request is made indirectly to the quantum-safe digital signature service via the document store by setting an attribute associated with the electronic document content.

4. The non-transitory computer-readable media of claim 1 , wherein the electronic document content comprises an electronic file that is persisted in connection with persistent storage associated with the document store.

5. The non-transitory computer-readable media of claim 1 , wherein the document store is a document management system.

6. The non-transitory computer-readable media of claim 1 , wherein the API request is a REST API request.

7. The non-transitory computer-readable media of claim 1 , wherein the signature data structure comprises an electronic file containing the quantum-safe digital signature.

8. The non-transitory computer-readable media of claim 1 , wherein the quantum-safe digital signature service detects an attribute associated with the electronic document content to determine that a new quantum-safe signature is required.

9. A method for decoupled integration of quantum-safe digital signatures into a software application, the method comprising:
storing, by the software application, in connection with a document store, electronic document content;
issuing an application programming interface (API) request to a quantum-safe digital signature service,
wherein the quantum-safe digital signature service interface with a multi-algorithm quantum-safe cryptographic library that supports multiple quantum-safe algorithms to generate a variety of quantum-safe signatures,
wherein the API request comprises an identifier associated with the electronic document content and a request to generate a quantum-safe signature associated with the electronic document content, and
wherein the request to generate the quantum-safe signature of the electronic document content causes the quantum-safe digital signature service to:
retrieve the electronic document content from the document store based on the identifier;
generate a quantum-safe digital signature data structure;
store the quantum-safe digital signature data structure to the document store; and
transmit a signing status update to the software application; and

causing the application to read the quantum-safe digital signature data structure from the document store.

10. The method of claim 9 , wherein the API request is made directly to the quantum-safe digital signature service.

11. The method of claim 9 , wherein the API request is made indirectly to the quantum-safe digital signature service via the document store by setting an attribute associated with the electronic document content.

12. The method of claim 9 , wherein the document store is a document management system.

13. The method of claim 9 , wherein the API request is a REST API request.

14. The method of claim 9 , wherein the signature data structure comprises an electronic file containing the quantum-safe digital signature.

15. The method of claim 9 , wherein the electronic document content comprises an electronic file that is persisted in connection with persistent storage associated with the document store.

16. A system for decoupled integration of quantum-safe digital signatures into a software application, the system comprising:
at least one processor;
and at least one non-transitory memory storing computer executable instructions that when executed by the at least one processor cause the system to carry out actions comprising:
storing, by the software application, in connection with a document store, electronic document content;
issuing an application programming interface (API) request to a quantum-safe digital signature service,
wherein the quantum-safe digital signature service interface with a multi-algorithm quantum-safe cryptographic library that supports multiple quantum-safe algorithms to generate a variety of quantum-safe signatures,
wherein the API request comprises an identifier associated with the electronic document content and a request to generate a quantum-safe signature associated with the electronic document content, and
wherein the request to generate the quantum-safe signature of the electronic document content causes the quantum-safe digital signature service to:
retrieve the electronic document content from the document store based on the identifier;
generate a quantum-safe digital signature data structure;
store the quantum-safe digital signature data structure to the document store; and
transmit a signing status update to the software application; and

causing the software application to read the quantum-safe digital signature data structure from the document store.

17. The system of claim 16 , wherein the API request is made directly to the quantum-safe digital signature service.

18. The system of claim 16 , wherein the API request is made indirectly to the quantum-safe digital signature service via the document store by setting an attribute associated with the electronic document content.

19. The system of claim 16 , wherein the document store is a document management system.

20. The system of claim 16 , wherein the API request is a REST API request.

Assignees

• Sap Se

Inventors

• Naduvath Anitha
• Philip Bino Rose
• Tueno Anselme
• Hoursanov Andrey
• Rausch Tim
• Boehm David
• Naduvath Ajitha
• Doula Mohamed

Classifications

• G06F16/93 Primary

  Document management systems · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title