Trusted Repository System for Secure Electronic Document Signing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic document systems lack secure methods to verify the identity of document originators and protect the integrity of electronically stored documents, as they cannot replicate the authenticity of paper-based signatures and are prone to alteration.
Innovation Solution
A Trusted Repository System (TRS) that uses asymmetric cryptography to securely create, store, and manage electronic signatures, ensuring the integrity of documents by never relinquishing control of the authoritative copy and applying a tamper seal with a digital signature, while allowing remote signing with multimedia signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If electronic documents are transmitted and stored in digital format, then communication efficiency and accessibility are improved, but document integrity and authenticity are compromised due to ease of alteration
Solution Approach 1:
The system applies digital signatures and cryptographic hashing to documents before transmission and storage. The authoritative copy is sealed with a tamper seal containing a cryptographic hash of the document content, preventing undetected alterations. This preliminary cryptographic binding ensures document integrity is established before the document enters circulation.
Solution Approach 2:
The Trusted Repository System (TRS) acts as an intermediary that maintains the authoritative copy of electronic documents. The TRS verifies digital signatures, manages cryptographic keys, and provides a chain of custody record. This intermediary layer separates the document from direct user manipulation while maintaining accessibility through controlled retrieval.
2Reliability
If traditional signature verification methods are used for electronic documents, then authentication capability is improved, but the methods are not applicable due to lack of physical presence and handwritten signatures
Solution Approach 1:
The system replaces mechanical signature verification (physical signatures, notary seals, in-person witnessing) with cryptographic mechanisms. Digital signatures use asymmetric cryptography to provide equivalent authentication without requiring physical presence. The TRS acts as an electronic notary, verifying signer identity through cryptographic proof rather than physical observation.
Solution Approach 2:
The digital signature system provides universal authentication capability across multiple platforms and communication channels. The same cryptographic mechanism works for emails, web-based documents, mobile applications, and automated systems, replacing the need for different verification methods in different contexts.
3Reliability
If the Trusted Repository System maintains control of the authoritative copy, then document security and integrity are improved, but remote signing capability is reduced
Solution Approach 1:
The system separates the authoritative copy (maintained securely by the TRS) from working copies (distributed to signers). The authoritative copy remains sealed and immutable in the TRS, while working copies can be viewed and signed remotely. Digital signatures are applied to working copies and then submitted back to the TRS for verification and chaining to the authoritative copy.
Solution Approach 2:
The TRS creates and distributes encrypted working copies of the authoritative document to authorized signers. These copies contain the document content and signature fields but cannot be altered without detection. Signers apply their digital signatures to these copies, which are then returned to the TRS for verification and integration into the chain of custody.
Data Source
AI summary
Exemplary embodiments include methods of handling stored electronic original information objects that have been created by electronically signing information objects by respective authorized users and transfer agents, submitting signed information objects to a trusted repository system, validating the submitted signed information objects by at least testing the integrity of the contents of each signed information object and the validity of the signature of the respective transfer agent, and applying to each validated information object a date-time stamp and a digital signature and authentication certificate of the trusted repository system that is an electronic vault. One method includes the remote signing of electronic documents without the trusted repository ever releasing the electronic original documents and other information objects that are controlled and protected by the trusted repository system. Other methods include handling information objects that are transferable records according to specified business and government rules.