Method for indicating the integrity of a collection of digital objects
View Patent ↗The present invention is directed to a method for indicating the integrity of a collection of digital objects, such as a software package, an email with attachments, etc.) The method comprising the steps of: Sealing the collection of digital objects by gathering the hash values of the digital objects into a binding file and digitally signing the binding file (the binding file may further comprise information about the relations between the objects); and Indicating the integrity of a sealed collection of digital objects by validating the integrity of its binding file via its digital signature; and validating the integrity of each object by the correspondence of its hash value with the corresponding hash value stored within the validated binding file.
1. A method for indicating the integrity of a collection of digital objects, the method comprising the steps of:
sealing said collection of digital objects by:
computing a hash value of each object of said collection;
gathering the computed hash values into a binding file; and
digitally signing said binding file; and
indicating the integrity of the sealed collection of digital objects having a coresponding binding file by:
validating the integrity of said binding file by its digital signature,
computing a hash value of each object of said sealed collection of digital objects, and
validating the integrity of each object of said sealed collection of digital objects by verifying a correspondence of its hash value with the corresponding hash value stored within the validated binding file.
2. A method according to claim 1 , wherein said gathering further comprises including at least one additional digital object in the binding file.
3. A method according to claim 2 , wherein said additional digital object comprises information with relevance to said collection of digital objects.
4. A method according to claim 1 , wherein said collection of digital objects is selected from a group comprising: a software package, an email message, a computer folder, and a Web page.
5. A method for associating a digital license with an executable, the method comprising the steps of:
computing a respective hash value of the digital license and the executable;
gathering the computed hash values into a binding file;
digitally signing said binding file; and
indicating the integrity of the association of the digital license with the executable by:
validating the integrity of said binding file by its digital signature,
computing a hash value of the digital license and a hash value of the executable;
validating the integrity of the digital license by verifying a correspondence of its hash value with the corresponding hash value stored within the validated binding file; and
validating the integrity of the executable by verifying a correspondence of its hash value with the corresponding hash value stored within the validated binding file.
6. A method of indicating the integrity of a number of a credit card, comprising the steps of:
computing a hash value of a first digital object that includes the number of the credit card and an expiration date of the credit card;
computing a hash value of a second digital object that includes a name of an owner of the credit card, a billing address of said owner and a current date;
gathering said computed hash values into a binding file; and
digitally signing said binding file.
7. A method of indicating the integrity of files in a computer folder, comprising the steps of:
computing a respective hash value of each file;
gathering said computed hash values into a binding file;
digitally signing said binding file;and
indicating the integrity of the files in the computer folder by:
validating the integrity of said binding file by its digital signature;
computing a hash value of each file in the computer folder; and
validating the integrity of each file in the computer folder by validating a correspondence of its hash value with the corresponding hash value stored within the validated binding file.
8. A method for indicating the integrity of a collection of digital objects, the method comprising the steps of:
sealing said collection of digital objects by:
computing a hash value of each object of said collection;
gathering the computed hash values into a binding file; and
digitally signing said binding file;
wherein said gathering further comprises including at least one additional digital object in the binding file;
wherein said additional digital object comprises information with relevance to said collection of digital objects;
and wherein said information is selected from the group comprising: information related to a type of one or more members of said collection of digital objects, an association between at least two members of said collection of digital objects, a license expression of at least one member of said collection of digital objects, signors of a contract, time related information.
9. A method for indicating the integrity of a collection of digital objects, the method comprising the steps of:
sealing said collection of digital objects by:
computing a hash value of each object of said collection;
gathering the computed hash values into a binding file; and
digitally signing said binding file;
wherein said sealing includes including metadata about the objects of said collection in said binding file before said digital signing of said binding file.