초록 ▼

Method and system for verifying the authenticity and integrity of files transmitted through a computer network. Authentication information is encoded in the filename of the file. In a preferred embodiment, authentication information is provided by computing a hash value of the file, computing a digi

Method and system for verifying the authenticity and integrity of files transmitted through a computer network. Authentication information is encoded in the filename of the file. In a preferred embodiment, authentication information is provided by computing a hash value of the file, computing a digital signature of the hash value using a private key, and encoding the digital signature in the filename of the file at a predetermined position or using delimiters, to create a signed filename. Upon reception of a file, the encoded digital signature is extracted from the signed filename. Then, the encoded hash value of the file is recovered using a public key and extracted digital signature, and compared with the hash value computed on the file. If the decoded and computed hash values are identical, the received file is processed as authentic.

대표청구항 ▼

I claim: 1. A method for encoding authentication information in the filenames of computer files containing digital data, said method comprising the steps of: providing a master computer file, a first computer file, and a second computer file, wherein the master computer file has an original filenam

I claim: 1. A method for encoding authentication information in the filenames of computer files containing digital data, said method comprising the steps of: providing a master computer file, a first computer file, and a second computer file, wherein the master computer file has an original filename structured as FNAME0.EXT0 such that FNAME0 denotes an alphanumeric name portion of the original filename of the master computer file and EXT0 denotes an alphanumeric file extension portion of the original filename of the master computer file, wherein the first computer file has an original filename structured as FNAME1.EXT1 such that FNAME1 denotes an alphanumeric name portion of the original filename of the first computer file and EXT1 denotes an alphanumeric file extension portion of the original filename of the first computer file, and wherein the second computer file has an original filename structured as FNAME2.EXT2 such that FNAME2 denotes an alphanumeric name portion of the original filename of the second computer file and EXT2 denotes an alphanumeric file extension portion of the original filename of the second computer file; generating a signed filename of the master computer file by performing the steps of: computing a hash value H0 of only the digital data comprised by the master computer file, computing a digital signature of the hash value H0 using a private key of a sender, generating the signed filename of the master computer file by encoding the computed digital signature of the hash value H0 in the original filename of the master computer file such that the signed filename of the master computer file comprises the computed digital signature of the hash value H0 disposed between FNAME0 and EXT0, and associating the signed filename of the master computer file with the master computer file; generating a signed filename of the first computer file by performing the steps of: computing a hash value H1 of only the digital data comprised by the first computer file, computing a digital signature of the hash value H1 using the private key of a sender, generating the signed filename of the first computer file by encoding the computed digital signature of the hash value H1 in the original filename of the first computer file such that the signed filename of the first computer file comprises the computed digital signature of the hash value H1 disposed between FNAME1 and EXT1, and associating the signed filename of the first computer file with the first computer file; generating a signed filename of the second computer file by performing the steps of: computing a hash value H2 of only the digital data comprised by the second computer file, computing a digital signature of the hash value H2 using the private key of a sender, generating the signed filename of the second computer file by encoding the computed digital signature of the hash value H2 in the original filename of the second computer file such that the signed filename of the second computer file comprises the computed digital signature of the hash value H2 disposed between FNAME2 and EXT2, and associating the signed filename of the second computer file with the second computer file; and generating a composite computer file by attaching to the master computer file the first computer file and its associated signed filename and by attaching to the master computer file the second computer file and its associated signed filename. 2. The method of claim 1, wherein said steps of computing the hash values H0, H1 and H2 use a Secure Hash Algorithm or a Message-Digest-5 algorithm. 3. The method of claim 1, wherein the master computer file is an electronic mail (e-mail). 4. The method of claim 1, said method further comprising sending, by the sender to a receiver, the composite computer file.