Data authentication using plural electronic keys

摘要

A method for transmitting digital data to a recipient via a communications network includes providing digital data and digitally signing the digital data using N cryptographic keys. Each of the N cryptographic keys is associated with a same sender of the digital data, and N>1. The recipient receives the digital data and verifies the digital signature using N cryptographic keys associated with the N cryptographic keys used to sign the digital data. In dependence upon verifying the digital signature, the recipient accepts the digital data as being authentic.

主权项

1. A method comprising:
providing digital data for being transmitted to a recipient system via a communications network; digitally signing the digital data using N cryptographic keys comprising first and second cryptographic keys, each of the N cryptographic keys being a private cryptographic key associated with a sender of the digital data, and N>1; transmitting the digitally signed digital data to the recipient system via the communications network; receiving from the recipient an indication that the first cryptographic key is compromised, wherein the second cryptographic key is uncompromised; generating a new first replacement cryptographic key for the first compromised key; encrypting the new first replacement cryptographic key using the second uncompromised cryptographic key; transmitting the encrypted new first replacement cryptographic key to the recipient; receiving from the recipient a key replacement confirmation message digitally signed by the new first replacement cryptographic key; and, verifying the digital signature of the key replacement confirmation message based on the new first replacement cryptographic key.