Method for authenticating electronic documents
View Patent ↗A secure method for sending register, authenticated electronic documents is disclosed. The sender sends a first set of data, not including the plaintext message, encrypted with the public key of the recipient, and a second set of data, including the plaintext message, encrypted with a session key which was included in the encrypted first set of data. The recipient is first asked if he wants to receive the message, and then, upon seeing an abstract, asked if he wants to receive the full message. Confirmatory data regarding the decryption of the message and the presentation of the data to the recipient is recorded and sent to an authentication agent.
1. A method of secure communication of an electronic document from sender to recipient, verification of sending of the electronic document by the sender and verification of the receipt of the electronic document by the recipient, in association with at least one third party, comprising the steps of:
the sender generating a document and an abstract of the document;
the sender generating a first encrypted message by encrypting a first message portion with a first encryption key, said first message portion including at least said abstract and a second encryption key;
the sender generating a second encrypted message by encrypting a second message portion with said second encryption key, said second message portion including at least said abstract and said document;
the sender generating a third encrypted message by encrypting a third message portion with a third encryption key, said third message portion including at least said abstract and said second encryption key;
the sender transmitting said first encrypted message to the third party;
the sender transmitting said second and third encrypted messages to the recipient;
the recipient decrypting said third encrypted message to obtain said abstract and said second encryption key;
the recipient using said second encryption key, derived from decrypting said third encrypted message, to decrypt said second encrypted message to obtain said abstract and said document; and
if said abstract from said step of decrypting said third encrypted message is identical to said abstract from said step of decrypting said second encrypted message, then giving the recipient access to said document and reporting the access to said third party.
2. The method of claim 1 wherein said first encryption key is a public key of the third party.
3. The method of claim 2 wherein said second encryption key used in said third message portion is obtained from the third party by the sender.
4. The method of claim 3 wherein said third encryption key is a public key of the recipient.
5. The method of claim 4 wherein the recipient is notified of a message and asked if the recipient wants to receive the abstract prior to said step of decrypting said third encrypted message.
6. The method of claim 5 wherein the recipient is given access to the abstract from said step of decrypting said third encrypted message and asked if the recipient wants to receive the document prior to said step of decrypting said second encrypted message.