Methods and apparatus for validating a digital signature
Various embodiments include one or more of systems, methods, software, and data structures for validating a digital signature, wherein common information in a certification chain is maintained in one entry of a Document Secure Store (DSS). The DSS separates the Long Term Validation (LTV) information from the digital signature, allowing amendment of and addition to the LTV information in the DSS after a digital signature is applied to a document.
1. A non-transitory computer storage medium storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations comprising:
retrieving first validation information from a certificate authority when connectivity thereto is available, the first validation information being retrieved based on a first digital signature having been applied to a content portion of an electronic document when connectivity to the certificate authority was unavailable, the first validation information being retrieved to validate the first digital signature;
adding a first piece of the retrieved first validation information to a dictionary separate from the content portion and included in the electronic document, the first piece being added based at least in part on a determination that a second piece of the retrieved first validation information corresponds to at least a pre-existing piece of second validation information that was already included in the dictionary before the connectivity was available; and
validating the applied first digital signature using an amalgamation of the added first piece and at least the pre-existing piece of validation information included in the dictionary when connectivity to the certificate authority is unavailable.
2. The non-transitory computer storage medium of claim 1 , wherein the electronic document is associated with at least a second digital signature applied to the content portion, and wherein at least the pre-existing piece of validation information is employable to validate the applied second digital signature when connectivity to the certificate authority is unavailable.
3. The non-transitory computer storage medium of claim 1 , wherein the added first piece is smaller than the retrieved first validation information.
4. The non-transitory computer storage medium of claim 1 , wherein the dictionary is included in a storage portion of the electronic document and the storage portion is separate from the content portion.
5. The non-transitory computer storage medium of claim 1 , wherein at least the pre-existing piece of validation information was retrieved from the certificate authority at a time when connectivity thereto was available, the time being prior to when the first piece of verification validation information is retrieved.
6. A computer-implemented method, comprising:
retrieving first validation information from a certificate authority when connectivity thereto is available, the first validation information being retrieved based on a first digital signature having been applied to a content portion of an electronic document when connectivity to the certificate authority was unavailable, the first validation information being retrieved to validate the first digital signature;
adding a first piece of the retrieved first validation information to a dictionary of the electronic document that is separate from the content portion, the first piece being added based at least in part on a determination that a second piece of the retrieved first validation information corresponds to at least a pre-existing piece of validation information already included in the dictionary before connectivity to the certificate authority became available; and
validating the applied first digital signature using an amalgamation of the added first piece and at least the pre-existing piece of validation information included in the dictionary when connectivity to the certificate authority is unavailable.
7. The computer-implemented method of claim 6 , wherein the content portion of the electronic document is associated with a second digital signature applied to the content portion.
8. The computer-implemented method of claim 7 , wherein at least the pre-existing piece of validation information is employable to validate the second digital signature when connectivity to the certificate authority is unavailable.
9. The computer-implemented method of claim 6 , further comprising:
validating at least the applied first digital signature based at least in part on the added first piece and at least the pre-existing piece of validation information when connectivity to the certificate authority is unavailable.
10. A computerized system comprising:
one or more processors; and
one or more non-transitory computer storage media storing computer-usable instructions that, when used by the one or more processors, cause the one or more processors to:
retrieve, from a certificate authority when connectivity thereto is available, first validation information that is employable to validate a first digital signature of an electronic document, the first validation information being retrieved based on a first digital signature having been applied to a content portion of an electronic document when connectivity to the certificate authority was unavailable;
add a first piece of the retrieved first validation information to a dictionary of the electronic document that is separate from the content portion, the first piece being added based at least in part on a determination that at least a pre-existing piece of validation information included in the dictionary corresponds to a second piece of the retrieved first validation information; and
validate the applied first digital signature using an amalgamation of the added first piece and at least the pre-existing piece of validation information included in the dictionary when connectivity to the certificate authority is unavailable.
11. The computerized system of claim 10 , wherein the electronic document is a signed electronic document having a second digital signature applied to the content portion, and wherein at least the pre-existing piece of validation information is employable to validate the applied second digital signature when connectivity to the certificate authority is unavailable.
12. The computerized system of claim 11 , wherein the dictionary is adapted to store a plurality of pieces of validation information, and wherein the dictionary is employable to validate each of the first and second digital signatures applied to the content portion of the electronic document.
13. The computerized system of claim 10 , wherein the instructions, when used by the one or more processors, further cause the one or more processors to:
validate at least the applied first digital signature based at least in part on the added first piece and at least the pre-existing piece of validation information when connectivity to the certificate authority is unavailable.