| 摘要 |
<p>The present invention relates to methods, modules, and devices enabling improved authenticity and integrity verification of a content package. The content package comprises at least an originator specific certificate, an access limited data object and data content to be verified for authenticity and integrity. The originator specific certificate and the access limited data object are linked together via a first linkage information, which establishes a first linkage between the originator specific certificate and the access limited data object. The access limited data object and the data content are linked together via a second linkage information, which establishes a second linkage between the access limited data object and the data content. The first linkage information is extracted from the originator specific certificate and it is checked whether the first linkage information links to the access limited data object including corresponding first linkage information. Then a hash code is extracted from the access limited data object, which hash code serves as second linkage information. The extracted hash code is verified against a determined hash code by comparing the extracted and determined hash codes. The determined hash code is obtained on the basis of a hash algorithm, which is applied on the data content. Hence, the verifying includes verifying the second linkage; and verifying authenticity and integrity of the data content.</p> |
