How to sign digital streams
AssigneeInternational Business Machines Corporation
InventorsRosario Gennaro, Pankaj Rohatgi
Life of this patent
Estimating the term…
Abstract
A method of signing digital streams so that a receiver of the stream can authenticate and consume the stream at the same rate which the stream is being sent to the receiver. More specifically, this invention involves computing and verifying a single digital signature on at least a portion of the stream. The properties of this single signature will propagate to the rest of the stream through ancillary information embedded in the rest of the stream.
Claims9
A system for creating a combined digital stream from an original stream of data which can be authenticated comprising:
- a stream decomposition component for decomposing said original stream into a plurality of original blocks;
- a software component for adding ancillary information to each of the original blocks to form a combined block for each original block, where said ancillary information is used to authenticate at least one of said original blocks of said original stream;
- and
- a signer component for signing one of the combined blocks, whereby the combined stream comprises the signed one of the combined blocks and the combined blocks for the other original blocks and wherein said ancillary information is created to be used in conjunction with ancillary information of other of said combined blocks to successively authenticate said original blocks of said original stream.
A system for authenticating a combined stream of data, comprising:
- decomposition means for decomposing said stream into a plurality of combined blocks, each of said combined blocks comprising consumable information and ancillary information;
- means for verifying a digital signature on one of said combined blocks, thereby establishing non-repudiably the sender of said stream;
- and
- an authentication component for authenticating some of said combined blocks by using ancillary information extracted from others of said combined blocks.
A program storage device readable by machine tangibly embodying a program of instructions executable by the machine to perform method steps for creating a combined digital stream from an original stream of data which can be authenticated, said method steps comprising:
- decomposing said original stream into a plurality of original blocks;
- adding ancillary information to each of the original blocks to form a combined block for each original block, where said ancillary information is used to authenticate at least one of said original blocks of said original stream;
- and
- signing one of the combined blocks, whereby the combined stream comprises the signed one of the combined blocks and the combined blocks for the other original blocks and wherein said ancillary information is created to be used in conjunction with ancillary information of other of said combined blocks to successively authenticate said original blocks of said original stream.
A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for authenticating a combined stream of data, said method steps comprising:
- decomposing said stream into a plurality of combined blocks, each of said combined blocks comprising consumable information and ancillary information;
- verifying a digital signature on one of said combined blocks, thereby establishing non-repudiably the sender of said stream;
- and
- authenticating some of said combined blocks by using ancillary information extracted from said combined blocks.
Dependencies are inferred from the claim text.