초록 ▼

A computationally efficient method for trusted and dynamic dissemination of digital objects. Related digital objects of various types are grouped, based on their usage and functionality, by an information provider into distribution packages. Trustworthiness of objects contained in a distribution pac

A computationally efficient method for trusted and dynamic dissemination of digital objects. Related digital objects of various types are grouped, based on their usage and functionality, by an information provider into distribution packages. Trustworthiness of objects contained in a distribution package are certified by a trusted certification authority in the form of a certificate which consists of a body and the certification authority's signature on the body based on a public-key digital signature scheme. The body further consists of the name of the information provider; name of the distribution package; and type, safety checking flag, and digest of each and every object. It is used by end users to verify the trust criteria of any individual or any subset of objects specified by the package. To verify whether a received object meets trust criteria certified by the certificate, the end user computes the digest of the object, compares it with the corresponding digest in the certificate, and examines the type and safety checking flag of the object contained in the certificate. The end user car dynamically download additional objects, check their trustworthiness without having to verify the certificate multiple times.

대표청구항 ▼

[ We claim:] [18.] In a system for dissemination of digital objects over a transmission channel, said system including at least one information provider, end user, and trusted third party, where the information provider groups digital objects into distribution packages, and obtains a single certific

[ We claim:] [18.] In a system for dissemination of digital objects over a transmission channel, said system including at least one information provider, end user, and trusted third party, where the information provider groups digital objects into distribution packages, and obtains a single certificate from the trusted third party for each of the distribution packages, said certificate containing information provider identification fields, package identifying field, object information fields including a digest of each of said digital objects, identity of a trusted third party, a time stamp indicating issue date, said trusted third party's digital signature on all of said fields, a computationally efficient method for providing trusted and dynamic access of digital objects by the end user comprising the steps of:a) accessing said certificate from the information provider before accessing any of said digital objects;b) verifying said certificate by the end user using predetermined criteria;c) rejecting said certificate if said predetermined criteria in step b) are not met;d) accessing a digital object from the distribution package if the predetermined criteria in step b) are met;e) computing a digest as output of said predetermined secure one-way function with said accessed digital object from step d) as input;f) comparing said digest from step e) with the digest of the digital object from the object information fields in the certificate;g) rejecting said digital object if the compared digests in step f) are not identical; andh) accepting said digital object if the compared digests in step f) are identical;whereby said end user can verify trustworthiness of each of said digital objects in the single certificate and access any of the digital objects in the distribution package at the user's discretion.