Preventing digital forgery
A set of security templates is maintained including first and second templates. The first template specifies time and location stamp authentication for a file, and contextual security conditions that must be met before the file can be accessed. The second template specifies the time and location stamp authentication, but not the contextual security conditions. One of the first or second security templates is applied to the particular file. When the second security template is applied, a GPS-crypto device adds a time and location stamp to the particular file. The particular file is signed using a private key associated with the GPS-crypto device to generate an authentication signature based on the time and location stamp. The authentication signature is added to the particular file to allow a recipient to verify the time and location stamp of the particular file using a public key corresponding to the private key.
1. A method comprising:
maintaining a plurality of security templates comprising first and second security templates, the first security template specifying time and location stamp authentication for a file, and contextual security conditions that must be met before the file can be accessed, and
the second security template specifying the time and location stamp authentication, but not the contextual security conditions;
applying one of the first or second security templates to a particular file;
when the second security template is applied to the particular file, adding, by a GPS-crypto device, a time and location stamp to the particular file;
signing, using a private key associated with the GPS-crypto device, the particular file to generate an authentication signature based on the time and location stamp; and
adding the authentication signature to the particular file to allow a recipient to verify the time and location stamp of the particular file using a public key corresponding to the private key.
2. The method of claim 1 wherein the location stamp comprises a geographical location.
3. The method of claim 1 wherein the GPS-crypto device is on a host at which the particular file was created.
4. The method of claim 1 further comprising:
upon the particular file being received at a host computer of the recipient, the host computer not having the GPS-crypto device, allowing the recipient to verify that the time and location stamp has not been tampered with.
5. The method of claim 1 further comprising:
when the first security template is applied to the particular file,
adding, by the GPS-crypto device, the time and location stamp to the particular file; and
adding, by the GPS-crypto device, one or more of a plurality of security access records to the particular file, the plurality of security access records comprising:
a first security access record defining an exclusion zone where the particular file is not allowed to be accessed,
a second security access record defining a geo-fence where the particular file is allowed to be accessed,
a third security access record defining a time-fence indicating a time, day, or both when the particular file is allowed to be accessed,
a fourth security access record specifying an expiration date after which the particular file is no longer allowed to be accessed, and
a fifth security access record specifying one or more identifiers of one or more other GPS-crypto devices that are allowed to access the particular file.
6. The method of claim 1 wherein applying the second security template to the particular file further comprises:
creating a file format for the particular file, the file format comprising a first region having the authentication signature, a second region having the time and location stamp, and a third region having content of the particular file, wherein the content is unencrypted.
7. A system for preventing digital forgery, the system comprising: a processor; and memory configured to store one or more sequences of instructions, which when executed by the processor, cause the processor to carry out the steps of:
maintaining a plurality of security templates comprising first and second security templates, the first security template specifying time and location stamp authentication for a file, and contextual security conditions that must be met before the file can be accessed, and
the second security template specifying the time and location stamp authentication, but not the contextual security conditions;
applying one of the first or second security templates to a particular file;
when the second security template is applied to the particular file, adding, by a GPS-crypto device, a time and location stamp to the particular file;
signing, using a private key associated with the GPS-crypto device, the particular file to generate an authentication signature based on the time and location stamp; and
adding the authentication signature to the particular file to allow a recipient to verify the time and location stamp of the particular file using a public key corresponding to the private key.
8. The system of claim 7 wherein the location stamp comprises a geographical location.
9. The system of claim 7 wherein the GPS-crypto device is on a host at which the particular file was created.
10. The system of claim 7 wherein the processor further carries out the steps of:
upon the particular file being received at a host computer of the recipient, the host computer not having the GPS-crypto device, allowing the recipient to verify that the time and location stamp has not been tampered with.
11. The system of claim 7 wherein the processor further carries out the steps of:
when the first security template is applied to the particular file,
adding, by the GPS-crypto device, the time and location stamp to the particular file; and
adding, by the GPS-crypto device, one or more of a plurality of security access records to the particular file, the plurality of security access records comprising:
a first security access record defining an exclusion zone where the particular file is not allowed to be accessed,
a second security access record defining a geo-fence where the particular file is allowed to be accessed,
a third security access record defining a time-fence indicating a time, day, or both when the particular file is allowed to be accessed,
a fourth security access record specifying an expiration date after which the particular file is no longer allowed to be accessed, and
a fifth security access record specifying one or more identifiers of one or more other GPS-crypto devices that are allowed to access the particular file.
12. The system of claim 7 wherein applying the second security template to the particular file further comprises:
creating a file format for the particular file, the file format comprising a first region having the authentication signature, a second region having the time and location stamp, and a third region having content of the particular file, wherein the content is unencrypted.
13. A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, the computer-readable program code adapted to be executed by one or more processors to implement a method for preventing digital forgery, the method comprising:
maintaining a plurality of security templates comprising first and second security templates, the first security template specifying time and location stamp authentication for a file, and contextual security conditions that must be met before the file can be accessed, and
the second security template specifying the time and location stamp authentication, but not the contextual security conditions;
applying one of the first or second security templates to a particular file;
when the second security template is applied to the particular file, adding, by a GPS-crypto device, a time and location stamp to the particular file;
signing, using a private key associated with the GPS-crypto device, the particular file to generate an authentication signature based on the time and location stamp; and
adding the authentication signature to the particular file to allow a recipient to verify the time and location stamp of the particular file using a public key corresponding to the private key.
14. The computer program product of claim 13 wherein the location stamp comprises a geographical location.
15. The computer program product of claim 13 wherein the GPS-crypto device is on a host at which the particular file was created.
16. The computer program product of claim 13 wherein the method further comprises:
upon the particular file being received at a host computer of the recipient, the host computer not having the GPS-crypto device, allowing the recipient to verify that the time and location stamp has not been tampered with.
17. The computer program product of claim 13 wherein the method further comprises:
when the first security template is applied to the particular file,
adding, by the GPS-crypto device, the time and location stamp to the particular file; and
adding, by the GPS-crypto device, one or more of a plurality of security access records to the particular file, the plurality of security access records comprising:
a first security access record defining an exclusion zone where the particular file is not allowed to be accessed,
a second security access record defining a geo-fence where the particular file is allowed to be accessed,
a third security access record defining a time-fence indicating a time, day, or both when the particular file is allowed to be accessed,
a fourth security access record specifying an expiration date after which the particular file is no longer allowed to be accessed, and
a fifth security access record specifying one or more identifiers of one or more other GPS-crypto devices that are allowed to access the particular file.
18. The computer program product of claim 13 wherein applying the second security template to the particular file further comprises:
creating a file format for the particular file, the file format comprising a first region having the authentication signature, a second region having the time and location stamp, and a third region having content of the particular file, wherein the content is unencrypted.