US 11,777,721 B2 · Method and apparatus for two-step data signing

Abstract

A system and method for signing data is presented. In one embodiment, the method comprises: generating a data signing key; transforming the data signing key into a first subkey and a second subkey; encrypting the first subkey according to a secret key of an ODSS; generating a signature verification public key; providing the signature verification public key, the encrypted first subkey, and the second subkey for storage in a client device; accepting a request to sign the data, the request having a representation of the data and the encrypted first subkey; generating a partially computed signature of the data according to the representation of the data and the encrypted first subkey; and providing the partially computed signature of the data to the client device.

Claims19

Dependent claims

A method comprising steps performed by a computer processor, the steps including:

(a) generating a key pair, the key pair including a data signing key and a signature verification public key;
(b) transforming the data signing key into a first subkey and a second subkey;
(c) encrypting the first subkey according to a secret key of an online data signing system (ODSS);
(d) providing the signature verification public key, the encrypted first subkey, and the second subkey to a client device for storage in the client device;
(e) accepting a request to sign data, the request comprising:
(1) a representation of the data to be signed;
and
(2) the encrypted first subkey;
(f) generating a partially computed signature of the data according to the representation of the data and the encrypted first subkey;
and
(g) providing the partially computed signature of the data to the client device.

8 more elements

Dependencies are inferred from the claim text.

Method and apparatus for two-step data signing

Life of this patent

Method and apparatus for two-step data signing

Life of this patent

Abstract

Claims19