This disclosure relates generally to the authentication and non-repudiation of hard-copy communications. More particularly, the present disclosure relates to an apparatus and method for producing a digital signature.
Many business activities require execution of various documents, typically by signature. Signing such documents serves a number of purposes. A signature authenticates a writing by identifying the signer with the signed document. In certain contexts, the signature expresses the signer's approval or authorization of the writing, or the signer's intention that it have legal effect. Such authentication also enables the receiver to prove to a third party, such as a judge, that the document was created by the purported sender. This latter ability prevents the sender from repudiating a genuine document, such as a promise to pay, by falsely claiming that it is a forgery created by the receiver. A signature on a written document often imparts a sense of clarity and finality to the transaction and may lessen the subsequent need to inquire beyond the face of a document. Negotiable instruments, for example, rely upon formal requirements, including a signature, for their ability to change hands with ease, rapidity, and minimal interruption. The act of signing a document calls to the signer's attention the legal significance of the signer's act, and thereby helps prevent inconsiderate engagements. Consequently, sound practice calls for transactions to be formalized in a manner which assures the parties of their validity and enforceability.
Until a few years ago, formalization generally involved documenting the transaction on paper and signing or authenticating the paper. Although the basic nature of transactions has not changed, business conditions have required an increasing reliance on digital documents. Ordinary digital documents lack the verifiable authenticity of paper documents in two respects. First, they can be forged by third parties claiming to be the purported sender, or be subjected to undetectable modification in transit. Second, a genuine document can later be repudiated by the actual sender, who may falsely claim that the document is a forgery created by the receiver.
Digital signatures have been used for some time on digital documents to provide the two main functions of an ink signature on a paper document, namely “authentication” and “non-repudiation”. Most digital signature schemes use public key cryptography to provide authentication and non-repudiation for transmitted data. Typical digital signatures created via an asymmetric key algorithm can be validated by anyone knowing the public-key of the sender.
U.S. patent application Ser. No. 11/131,641, filed May 18, 2005, for a “Digital Signature/certificate for Hard-copy Documents” discloses a hard-copy authentication document, which is a physical manifestation of a digital signature or a physical manifestation of a public key affixed to a hard-copy document or physical object, respectively, and a method of authentication and non-repudiation of hard-copy documents, which includes affixing a physical manifestation of a digital signature to a hard-copy document. However, such application does not disclose apparatus for writing the digital signature that could provide the signer with the same feeling of authorship and security as is found when signing ones name.
There is provided a method of a signer affixing a physical manifestation of a digital signature to a hard-copy document. The method comprises inputting a digital copy of the hard-copy document into a secure hash function stored on a computer to produce a message digest. The message digest and a private key of the signer are input into a digital signature generation algorithm stored on the computer to generate an electronic digital signature. The electronic digital signature is transmitted from the computer to a printing device. Finally, the physical manifestation of a digital signature is printed on the hard-copy document with the printing device.
The method may further comprise authenticating the identity of the signer before printing the physical manifestation of a digital signature. Authenticating the identity of the signer may include requiring the signer to enter a PIN number on an input device and comparing the PIN number to an exemplar PIN number of record. Alternatively, authenticating the identity of the signer may include requiring the signer to enter at least one biometric sample into an input device and comparing the biometric sample to an exemplar biometric sample of record. The biometric sample may be a fingerprint, a digital photograph, a voice sample, or a retinal scan.
The method may further comprise switching the printing device to a conventional writing mode and printing with the printing device. Switching the printing device to a conventional writing mode includes entering a code or voice command at the computer. Before printing, the computer queries whether the printing device is in a digital signature mode and generates conventional printing commands if the printing device has been switched to the conventional writing mode. The computer generates printing commands to the printing device to produce the physical manifestation of a digital signature if the printing device has not been switched to the conventional writing mode.
The method of a signer affixing a physical manifestation of a digital signature to a hard-copy document may be included in a method of authentication and non-repudiation of hard-copy documents. This method comprises affixing a physical manifestation of a digital signature to a hard-copy document as described above. The physical manifestation of a digital signature is then converted to an electronic digital signature. The electronic digital signature is validated with a public key to authenticate the hard-copy document.
The present disclosure may be better understood and its numerous objects and advantages will become apparent to those skilled in the art by reference to the accompanying drawings in which:
U.S. patent application Ser. No. 11/131,641, filed May 18, 2005, for a “Digital Signature/Certificate for Hard-copy Documents”, the disclosure of which is incorporated herein by reference in its entirety, discloses a hard-copy authentication document, which is a physical manifestation of a digital signature or a physical manifestation of a public key affixed to a hard-copy document or physical object, respectively, and a method of authentication and non-repudiation of hard-copy documents, which includes affixing a physical manifestation of a digital signature to a hard-copy document.
The term “physical manifestation of a digital signature” is hereby defined as a machine readable format bound to the document, such as through printing, having a capacity sufficient to display the complete data content of a digital signature meeting the criteria of applicable industry standards. One such physical manifestation is a printed representation of the digital signature in a 2D barcode. Two dimensional (2D) symbologies first appeared in 1988 when Code 49 was introduced by Intermec. Two dimensional barcodes can be classified into several types, with stacked and matrix being the most prevalent. Some of the advantages of 2D over one-dimensional (1 D) barcodes are the physical size, storage capability and data accuracy. One example of a 2D barcode is Adobe's PDF-417 2D barcode. Another such physical manifestation is a print of the digital signature in Xerox DataGlyphs™. The term “hard-copy document” is hereby defined as any artifact bearing information that may carry a physical manifestation of a digital signature.
The Digital Signature/Certificate for Hard-copy Documents application discloses that digital signatures can be printed on a label that could then be affixed to the document being signed. Alternatively, the signature might be printed directly on the document by running it through a conventional printer. However, both of these methods have limitations. A label might become unattached or it might be transferred to a different document. Bound documents can not be fed through conventional printers. Conventional printers would also require guidance as to where to place the signature. What is desired is a way for the person signing the document to add his or her signature wherever desired with as much ownership and security as a conventional signature with a pen.
With reference to the drawings wherein like numerals represent like parts throughout the several figures, and more particularly to
The printing device 16 of the subject disclosure is a printing device that produces the digital signature. The term “printing device” is hereby defined as any device that is capable of printing or applying a digital signature directly on a hard-copy document. Such printing devices include fixed-position printers having the capacity for receiving the hard-copy document on which the digital signature is to be printed. Portable printing devices having a similar capacity may also be used. Hand-held printers, such as the mouse printer, described in U.S. Pat. No. 5,927,872 to Yamada, issued Jul. 27, 1999, are particularly suited to the subject method since such printers may be used with any size hard-copy document. Another hand-held printer is a pen printer, described in U.S. Pat. No. 6,626,593 to Doberenz, issued Sep. 30, 2003, is shown in
The printing device 16 receives image data through the connector 34. The image data may or may not be stored by a memory 30, depending upon the speed of the connection and the speed of the print drive electronics in converting the image data signals into ink sprayed out the nozzle. Once the image data is provided, the print drive circuit 24 converts it into the necessary control signals to operate the ink dispenser. The microcontroller 28 provides finer controller of the electronics or addition of special print processes.
When the user has positioned the printing device 16 in the appropriate spot, an initial position switch is triggered. As shown in
With reference to
To ensure that the digital signature corresponds to the identity of the signer, the identity of the signer is verified 54 before the digital signature is printed. Such identity verification 54 can be performed by simply requiring the signer to enter a PIN number on the input device 19, for example a keypad or keyboard, and comparing the PIN number to an exemplar PIN number of record. For greater security biometrics, such as fingerprint analysis, retinal scan comparison, visual comparison, or voice recognition may be used. The input device 19 for this method of confirmation of identity and construction of the signature might be a microphone (for voice recognition), digital camera (for visual comparison), or a special purpose fingerprint scanner. All of which may be connected directly to the computer 12 as shown in
With reference to
Integration of a scanner 18′ to the hand-held printing device 16′ would allow for digital signatures and certificates to be read back and verified also. Common fields could then also be identified and completed by the hand-held printing device 16′ if they were color coded or marked in some way the hand-held printing device 16′ could recognize.
It will be appreciated that various of the above-disclosed and other features and functions, or alternatives thereof, may be desirably combined into many other different systems or applications. Also that various presently unforeseen or unanticipated alternatives, modifications, variations or improvements therein may be subsequently made by those skilled in the art which are also intended to be encompassed by the following claims.