초록 ▼

Digital certification method in which a first digital signature dependent upon a first user identity and a first user system in combination, is stored accessibly to a certification server. The first user identity can be distinguished by, for example, a PIN provided by the user. Subsequently, the use

Digital certification method in which a first digital signature dependent upon a first user identity and a first user system in combination, is stored accessibly to a certification server. The first user identity can be distinguished by, for example, a PIN provided by the user. Subsequently, the user system generates a second signature dependent upon both the current user identity and the current user system in combination. The certifying system then compares the second signature with the first, as stored, to certify the transaction. The certification can accommodate normal computer system component drift. An inquiring system, desiring to confirm the identity of a user, issues a challenge code to the user system. The user system then digests the user's PIN, individual component signatures as they currently exist on the user's system, together with the challenge code to generate the new signature. The new signature is transmitted back to the inquiring system, which transmits it on to the certification server together with the challenge code. The certification server then digests the challenge code with the original signature as previously stored, and compares the result to the newly provided signature to confirm the users identity, else drift criteria can be applied if desired.

대표청구항 ▼

[ I claim:] [1.] A digital certification method, comprising the steps of:storing, at a first time, a first signature dependent upon a first user identity and a first user system in combination;generating, at a second time subsequent to said first time, a second signature dependent upon a second user

[ I claim:] [1.] A digital certification method, comprising the steps of:storing, at a first time, a first signature dependent upon a first user identity and a first user system in combination;generating, at a second time subsequent to said first time, a second signature dependent upon a second user identity and a second user system in combination; andcertifying, in dependence upon said first and second signatures, whether the combination of said second user identity and said second user system match the combination of said first user identity and said first user system.