Methods and portable device for digitally signing data
Methods and device for digitally signing documents by using a portable device that encodes a signature string to sound. The acoustic signature string may be transmitted and then decoded back into digital data. The signature string may be further processed to verify the signature of the document and to produce a certificate of identity and integrity for the document. The certificate of identity and integrity may be used to further identify and validate the document and its signer.
1. A method for digitally signing data utilizing a portable device, comprising the steps of:
entering the data or a hash value of the data into the portable device;
digitally signing the data using a portable device private key to produce a public key cryptography standard (PKCS) digital signature string, wherein:
the digital signature string does not include an X.509 certificate;
the digital signature string does not include any open reference to an identity of a signing entity; and
the digital signature string does not include any open data that identifies the portable device;
concatenating to the digital signature string, one of a dynamically encrypted and variable version of an identification code of the portable device and a dynamically encrypted and variable version of identity of the signing entity, to produce a resultant string; and
encoding the resultant string into a plurality of analog sound waves;
transmitting the encoded digital string to a third party;
decrypting, by the third party, the dynamically encrypted identification from the encoded digital string;
retrieving, by the third party, one of a correspondent X.509 certificate and a correspondent public key for the decrypted identification; and
verifying, by the third party the received digital string utilizing one of the correspondent X.509 certificate and the correspondent public key.
2. The method of claim 1 , further comprising the step of generating, by the third party, a certificate of identity and integrity for the received digital string.
3. The method of claim 2 , further comprising the step of transmitting the certificate of identity and integrity to at least one of the signing entity or a receiving entity.
4. The method of claim 3 , further comprises the step of computing a time stamp that contains the date and time of the computation of the digital string; and
wherein:
the step of encoding further comprises encoding the time stamp; and
the step of decrypting the dynamically encrypted identification further comprises a determination of the time stamp.
5. The method of claim 4 , wherein the portable device is an acoustic token.
6. The method of claim 4 , wherein the portable device is a cellular phone.
7. The method of claim 4 , wherein the plurality of analog waves comprises acoustic information.