Electronic signature authentication
Method of authenticating a signature on a work document in which a remote server generates a digital work fingerprint and a representation file of the work document. The representation file and the digital work fingerprint are transmitted to a client station from the remote server via a wide area communication network, and at least one digital representation fingerprint of the representation file is generated. A file to be signed is generated containing at least the digital work and representation fingerprints. The client station generates only one client signature from the file to be signed, and a client signature file is generated containing at least the file to be signed and the client signature.
1. Method of authenticating a signature on a work document, comprising:
a remote server generating a digital work fingerprint of the work document;
the remote server generating a representation file of the work document;
transmitting the representation file and the digital work fingerprint to a client station from the remote server via a wide area communication network;
generating at least one digital representation fingerprint of the representation file;
generating a file to be signed containing at least the digital work fingerprint and the digital representation fingerprint;
the client station generating only one client signature from the file to be signed; and
generating a client signature file containing at least the file to be signed and the client signature.
2. Method according to claim 1 , further comprising:
presenting at least part of the representation file at the client station; and
initiating the signature generation step by a user.
3. Method according to claim 1 , wherein the digital fingerprint of the representation file and the file to be signed are generated by the client station.
4. Method according to claim 1 , wherein the digital fingerprint of the representation file and the file to be signed are generated by the remote server and/or a third-party server and transmitted to the client station via the wide area communication network.
5. Method according to claim 4 , further comprising:
the client station generating a digital control representation fingerprint of the representation file; and
the client station comparing the representation fingerprint contained in the file to be signed with the control presentation fingerprint in order to authorize, in case of a match, generating the client signature.
6. Method according to claim 1 , wherein the signature file is generated by the remote server or a third-party server.
7. Method according to claim 1 , wherein the representation file is a file intended for a presentation via a man-machine interface in a form directly intelligible to the user.
8. Method according to claim 1 , wherein the representation file is adapted for a continuous presentation or a continuous reading and contains at least one sequence liable to be covered by a presentation, the content of each at least one sequence of the representation file being:
independent of the content of subsequent sequences, if any; and
independent of the execution environment of the presentation step.
9. Method according to claim 1 , wherein generating the representation file comprises implementing an identified program transforming the work document into the representation file.
10. Method according to claim 9 , wherein the representation file is associated with an identifier of the transformation program.
11. Method according to claim 9 , wherein the file to be signed includes the identifier of the transformation program.
12. Method according to claim 1 , wherein the file to be signed contains a server signature generated by the remote server and applied to at least one of:
the work fingerprint;
the representation fingerprint; and
the identifier of the transformation program.
13. Method according to claim 12 , further comprising checking the server signature.
14. Method according to claim 1 , further comprising checking the authenticity of the work document from the signature file associated with the work document, the checking step comprising:
extracting the work fingerprint from the signature file;
calculating a new digital fingerprint from the work document; and
comparing the work fingerprint and the new digital fingerprint to determine if the work document is authentic.
15. Method according to claim 1 , further comprising checking the authenticity of the representation file of the work document from the signature file associated with the work document, the checking step comprising:
extracting the representation fingerprint from the signature file;
generating a new representation file from the work document;
calculating a new digital fingerprint from the new representation file; and
comparing the representation fingerprint and the new digital fingerprint to determine if the representation file of the work document is authentic.
16. Method according to claim 8 , wherein the content of each at least one sequence of the representation file is dependent on the content of the sequence immediately preceding it.