Privacy preserving electronic document signature service

摘要

An electronic document signature system preserves the security of an electronic document while tracking a signature process corresponding to the electronic document. In particular, using a client application on a client device, an originating user can protect an electronic document and send the protected electronic document to a tracking server. The tracking server receives only a protected document such that the security the electronic document is preserved. Using a client applications on client devices, one or more participating users can subsequently receive the protected document from the tracking server, access the contents of the electronic document, and sign the electronic document. The tracking server can record events that occur with respect to the protected document to create an event log.

主权项

1. A method of providing a secure electronic document signature service, comprising:
receiving, by at least one server device and from a client device corresponding to an originating user, a protected electronic document and a user identity of a participant user, wherein the content of the protected electronic document is inaccessible by the at least one server device based on the at least one server device not receiving a key to unprotect the protected electronic document; performing, by the at least one server device, a hash function on the protected electronic document to generate a first server-generated ID element; providing, by the at least one server device, the first server-generated ID element to the client device corresponding to the originating user for verification that the server-generated ID element matches a client-generated ID element generated at the client device corresponding to the originating user; providing, by the at least one server device, the protected electronic document to a client device corresponding to the participant user; receiving, from the client device corresponding to the participant user, a signed version of the protected electronic document comprising an electronic signature of the participant user; performing the hash function on the signed version of the protected electronic document to obtain a second server-generated ID element for the signed version of the protected document; and providing, by the at least one server device, the second server-generated ID element to the client device corresponding to the participant user for verification that the second-generated ID element matches a second client-generated ID element generated at the client device corresponding to the participant user.