Document verification with distributed calendar infrastructure
A client system is configured to obtain signatures for digital input records. An application program interface reformats each digital record, and this is used as an argument to a cryptographic hash function, from which a signature request is formed. The signature request is then submitted to a keyless, distributed hash tree infrastructure system, which returns a signature that includes recomputation values enabling recomputation from the result of the cryptographic hash function upward through the hash tree infrastructure to a root hash value at a calendar period corresponding to a time during which the signature request was originally submitted. An arbitrary subsequent test digital record is considered authenticated if, applying the cryptographic hash function to it, along with any other parameters included in the original computation, and recomputing an uppermost value using the recomputation values, the same composite calendar value is attained as when it was originally computed.
1. A method for enabling authentication of digital records, comprising:
inputting at least one digital record;
via an application program interface (API), reformatting the at least one digital record;
computing a result of a cryptographic hash function having the reformatted digital record as an argument;
forming a signature request from the result of the cryptographic hash function;
submitting the signature request to a keyless, distributed hash tree infrastructure system; and
receiving a signature corresponding to the signature request from the keyless, distributed hash tree infrastructure system, said signature including recomputation values enabling recomputation from the result of the cryptographic hash function upward through the keyless, distributed hash tree infrastructure to a root hash value for a calendar period corresponding to a time period during which the signature request was originally submitted, said root hash value being an uppermost value of successive hashing of sibling values generated from all digital input records input to the keyless, distributed hash tree infrastructure during the calendar period;
said recomputation values including, for each request submitted during the calendar period, the sibling node values in a directed path in a tree data structure from the cryptographic hash function of the digital records up to the root hash value;
including, as an additional argument to the cryptographic hash function chosen from the group: an identifier of an entity requesting a signature for the at least one digital record; an identifier of a computer into which the at least one digital record has been input; and an indication of a geographic location of a computer into which the at least one digital record has been input;
whereupon an arbitrary subsequent test digital record is considered authenticated relative to a corresponding original digital record if, applying the cryptographic hash function to the arbitrary subsequent test digital record along with any other parameters included in an original computation of the result of the cryptographic hash function and, recomputing an uppermost value independent of trust authority-generated keys, using the recomputation values in the signature, the root hash value is attained.