초록 ▼

This invention concerns a system and method for securely distributing subsetted fonts from a distributor to a client. The system includes a signing module to construct an authentication tree having leaves formed of glyphs, one or more intermediate levels of nodes computed as one-way functions of the

This invention concerns a system and method for securely distributing subsetted fonts from a distributor to a client. The system includes a signing module to construct an authentication tree having leaves formed of glyphs, one or more intermediate levels of nodes computed as one-way functions of the glyphs, and a root computed as a one-way function of the nodes. The signing module digitally signs the root of the authentication tree using a private signing key unique to the font creator or distributor. The system has a subsetting module to construct a font subset file that contains selected glyphs and other data to be included in a font subset. The font subset file also holds the digitally signed root of the font authentication tree and one or more authentication values of the authentication tree that represents non-selected glyphs and data of the font that are not contained in the font subset. The font subset file is distributed to requesting clients. An authentication module at the client authenticates the font subset file received from the distributor. The authentication module reconstructs the root of the authentication tree using the selected glyphs and data in the font subset and the authentication values that represent the non-selected glyphs and data not contained in the font subset. The authentication module also produces an unsigned version of the digitally signed root using a public key of the font creator to produce an unsigned root digest. The authentication module compares the unsigned root to the reconstructed root and if and only if they match, authenticates the font subset file as originating from the distributor (or font creator) and not being subsequently altered.

대표청구항 ▼

[ What is claimed is:] [11.] In a system for electronically delivering media wherein the media is segmented into multiple individual media segments and the segments are used to construct an authentication tree that is digitally signed by a source to authenticate the media as belonging to the source,

[ What is claimed is:] [11.] In a system for electronically delivering media wherein the media is segmented into multiple individual media segments and the segments are used to construct an authentication tree that is digitally signed by a source to authenticate the media as belonging to the source, a method comprising the following steps:subsetting the media to form a media subset containing one or more of the media segments; andsending the media subset and at least one authentication value of the authentication tree that represents the media segments not contained within the media subset so that a recipient can authenticate the media subset as belonging to the source.