公开(公告)号：US20120324229A1

公开(公告)日：2012-12-20

申请号：US13164759

申请日：2011-06-20

申请人： Ahto Buldas ,  Andres Kroonmaa ,  Märt Saarepera

发明人： Ahto Buldas ,  Andres Kroonmaa ,  Märt Saarepera

IPC分类号： H04L9/32

CPC分类号： H04L9/321 ,  H04L9/007 ,  H04L9/3247 ,  H04L2209/38

摘要： A method of generating a keyless digital multi-signature is provided. The method includes receiving multiple signature generation requests from one or more client computers, building subtrees based on the signature generation requests, and constructing a search tree including the subtrees. The method also includes assigning explicit length tags to leaf nodes of the search tree to balance the search tree and applying a hash function to each of the search tree nodes. The root hash value and the height of the search tree make up a generated aggregate signature request, followed by receiving an aggregate signature based on the aggregate signature request. The keyless digital multi-signature is generated based on the aggregate signature and contains an implicit length tag to verify that the number of signature generation requests is limited. The aggregate signature is generated if the height of the search tree does not exceed a predetermined height limitation.

摘要翻译： 提供了一种产生无钥匙数字多重签名的方法。 该方法包括从一个或多个客户端计算机接收多个签名生成请求，基于签名生成请求构建子树，以及构建包括子树的搜索树。 该方法还包括将显式长度标签分配给搜索树的叶节点以平衡搜索树并将散列函数应用于每个搜索树节点。 根哈希值和搜索树的高度构成生成的聚合签名请求，然后基于聚合签名请求接收聚合签名。 基于聚合签名生成无钥匙数字多签名，并且包含隐式长度标签以验证签名生成请求的数量是有限的。 如果搜索树的高度不超过预定的高度限制，则生成聚合签名。

公开(公告)号：US08874921B2

公开(公告)日：2014-10-28

申请号：US13164759

申请日：2011-06-20

申请人： Ahto Buldas ,  Andres Kroonmaa ,  Märt Saarepera

发明人： Ahto Buldas ,  Andres Kroonmaa ,  Märt Saarepera

IPC分类号： H04L9/32 ,  H04L9/00

CPC分类号： H04L9/321 ,  H04L9/007 ,  H04L9/3247 ,  H04L2209/38

摘要： A method of generating a keyless digital multi-signature is provided. The method includes receiving multiple signature generation requests from one or more client computers, building subtrees based on the signature generation requests, and constructing a search tree including the subtrees. The method also includes assigning explicit length tags to leaf nodes of the search tree to balance the search tree and applying a hash function to each of the search tree nodes. The root hash value and the height of the search tree make up a generated aggregate signature request, followed by receiving an aggregate signature based on the aggregate signature request. The keyless digital multi-signature is generated based on the aggregate signature and contains an implicit length tag to verify that the number of signature generation requests is limited. The aggregate signature is generated if the height of the search tree does not exceed a predetermined height limitation.

摘要翻译： 提供了一种产生无钥匙数字多重签名的方法。 该方法包括从一个或多个客户端计算机接收多个签名生成请求，基于签名生成请求构建子树，以及构建包括子树的搜索树。 该方法还包括将显式长度标签分配给搜索树的叶节点以平衡搜索树并将散列函数应用于每个搜索树节点。 根哈希值和搜索树的高度构成生成的聚合签名请求，然后基于聚合签名请求接收聚合签名。 基于聚合签名生成无钥匙数字多签名，并且包含隐式长度标签以验证签名生成请求的数量是有限的。 如果搜索树的高度不超过预定的高度限制，则生成聚合签名。

公开(公告)号：US07698557B2

公开(公告)日：2010-04-13

申请号：US11005838

申请日：2004-12-07

申请人： Mart Saarepera ,  Ahto Buldas

发明人： Mart Saarepera ,  Ahto Buldas

IPC分类号： H04L9/32

CPC分类号： H04L9/3263

摘要： A system and method for generating a digital certificate is provided wherein a new digital record is received and is assigned a sequence value. A first composite digital value is generated by applying a first deterministic function to the digital records stored in a repository. The sequence value and first composite digital value are included in a first certificate. After the digital record is added to the repository, a second composite digital value is generated by applying a second deterministic function to the digital records in the repository. This second composite digital value, and a composite sequence value, are published. An interval digital value which is based upon the first and second composite digital values, and the sequence value, are included in a second certificate which thus verifies the authenticity and sequence value of the digital record.

摘要翻译： 提供了一种用于产生数字证书的系统和方法，其中接收到新的数字记录并被分配了序列值。 通过对存储在存储库中的数字记录应用第一确定性函数来生成第一复合数字值。 序列值和第一复合数字值包含在第一证书中。 在将数字记录添加到存储库之后，通过对存储库中的数字记录应用第二确定性函数来生成第二复合数字值。 发布第二个复合数字值和复合序列值。 基于第一和第二复合数字值和序列值的间隔数字值被包括在第二证书中，从而验证数字记录的真实性和序列值。

公开(公告)号：US20130276058A1

公开(公告)日：2013-10-17

申请号：US13625551

申请日：2012-09-24

申请人： AHTO BULDAS ,  GUARDTIME IP HOLDINGS LIMITED

发明人： Ahto Buldas ,  Mart Saarepera

IPC分类号： G06F21/64

CPC分类号： H04L63/0823 ,  G06F21/30 ,  G06F21/64 ,  G06F21/645 ,  H04L9/3247 ,  H04L9/3265 ,  H04L63/0876 ,  H04L2209/38

摘要： Transformations of digital records are used as lowest level inputs to a tree data structure having a root in a core system and having nodes computed as digital combinations of child node values. A combination of root values is published in a permanent medium. Signature vectors are associated with the digital records and have parameters that enable recomputation upward through the tree data structure to either a current root value or to the published value. Recomputation yields the same value only if a candidate digital record is an exact version of the original digital record included in the original computation of the value.

摘要翻译： 数字记录的变换被用作具有在核心系统中的根并且被计算为具有子节点值的数字组合的节点的树状数据结构的最低级输入。 根值的组合在永久介质中公布。 签名向量与数字记录相关联，并且具有能够通过树数据结构向上重新计算到当前根值或已发布值的参数。 仅当候选数字记录是包含在该值的原始计算中的原始数字记录的确切版本时，重新计算才产生相同的值。

公开(公告)号：US20100199087A1

公开(公告)日：2010-08-05

申请号：US12696640

申请日：2010-01-29

申请人： Mart Saarepera ,  Ahto Buldas

发明人： Mart Saarepera ,  Ahto Buldas

IPC分类号： H04L9/32

CPC分类号： H04L9/3263

摘要： A system and method for generating a digital certificate is provided wherein a new digital record is received and is assigned a sequence value. A first composite digital value is generated by applying a first deterministic function to the digital records stored in a repository. The sequence value and first composite digital value are included in a first certificate. After the digital record is added to the repository, a second composite digital value is generated by applying a second deterministic function to the digital records in the repository. This second composite digital value, and a composite sequence value, are published. An interval digital value which is based upon the first and second composite digital values, and the sequence value, are included in a second certificate which thus verifies the authenticity and sequence value of the digital record.

摘要翻译： 提供了一种用于产生数字证书的系统和方法，其中接收到新的数字记录并被分配了序列值。 通过对存储在存储库中的数字记录应用第一确定性函数来生成第一复合数字值。 序列值和第一复合数字值包含在第一证书中。 在将数字记录添加到存储库之后，通过对存储库中的数字记录应用第二确定性函数来生成第二复合数字值。 发布第二个复合数字值和复合序列值。 基于第一和第二复合数字值和序列值的间隔数字值被包括在第二证书中，从而验证数字记录的真实性和序列值。

公开(公告)号：US08312528B2

公开(公告)日：2012-11-13

申请号：US12696623

申请日：2010-01-29

申请人： Mart Saarepera ,  Ahto Buldas

发明人： Mart Saarepera ,  Ahto Buldas

IPC分类号： H04L29/06

CPC分类号： H04L9/3263

摘要： A system and method for generating a digital certificate is provided wherein a new digital record is received and is assigned a sequence value. A first composite digital value is generated by applying a first deterministic function to the digital records stored in a repository. The sequence value and first composite digital value are included in a first certificate. After the digital record is added to the repository, a second composite digital value is generated by applying a second deterministic function to the digital records in the repository. This second composite digital value, and a composite sequence value, are published. An interval digital value which is based upon the first and second composite digital values, and the sequence value, are included in a second certificate which thus verifies the authenticity and sequence value of the digital record.

摘要翻译： 提供了一种用于产生数字证书的系统和方法，其中接收到新的数字记录并被分配了序列值。 通过对存储在存储库中的数字记录应用第一确定性函数来生成第一复合数字值。 序列值和第一复合数字值包含在第一证书中。 在将数字记录添加到存储库之后，通过对存储库中的数字记录应用第二确定性函数来生成第二复合数字值。 发布第二个复合数字值和复合序列值。 基于第一和第二复合数字值和序列值的间隔数字值被包括在第二证书中，从而验证数字记录的真实性和序列值。

公开(公告)号：US20100199342A1

公开(公告)日：2010-08-05

申请号：US12696623

申请日：2010-01-29

申请人： Mart Saarepera ,  Ahto Buldas

发明人： Mart Saarepera ,  Ahto Buldas

IPC分类号： H04L9/32

CPC分类号： H04L9/3263

摘要： A system and method for generating a digital certificate is provided wherein a new digital record is received and is assigned a sequence value. A first composite digital value is generated by applying a first deterministic function to the digital records stored in a repository. The sequence value and first composite digital value are included in a first certificate. After the digital record is added to the repository, a second composite digital value is generated by applying a second deterministic function to the digital records in the repository. This second composite digital value, and a composite sequence value, are published. An interval digital value which is based upon the first and second composite digital values, and the sequence value, are included in a second certificate which thus verifies the authenticity and sequence value of the digital record.

公开(公告)号：US08347372B2

公开(公告)日：2013-01-01

申请号：US12696640

申请日：2010-01-29

申请人： Mart Saarepera ,  Ahto Buldas

发明人： Mart Saarepera ,  Ahto Buldas

IPC分类号： H04L29/06

CPC分类号： H04L9/3263

摘要： A system and method for generating a digital certificate is provided wherein a new digital record is received and is assigned a sequence value. A first composite digital value is generated by applying a first deterministic function to the digital records stored in a repository. The sequence value and first composite digital value are included in a first certificate. After the digital record is added to the repository, a second composite digital value is generated by applying a second deterministic function to the digital records in the repository. This second composite digital value, and a composite sequence value, are published. An interval digital value which is based upon the first and second composite digital values, and the sequence value, are included in a second certificate which thus verifies the authenticity and sequence value of the digital record.

摘要翻译： 提供了一种用于产生数字证书的系统和方法，其中接收到新的数字记录并被分配了序列值。 通过对存储在存储库中的数字记录应用第一确定性函数来生成第一复合数字值。 序列值和第一复合数字值包含在第一证书中。 在将数字记录添加到存储库之后，通过对存储库中的数字记录应用第二确定性函数来生成第二复合数字值。 发布第二个复合数字值和复合序列值。 基于第一和第二复合数字值和序列值的间隔数字值被包括在第二证书中，从而验证数字记录的真实性和序列值。

公开(公告)号：US20050138361A1

公开(公告)日：2005-06-23

申请号：US11005838

申请日：2004-12-07

申请人： Mart Saarepera ,  Ahto Buldas

发明人： Mart Saarepera ,  Ahto Buldas

IPC分类号： G06F21/00 ,  H04L9/32 ,  G06F11/30

CPC分类号： H04L9/3263

摘要： A system and method for generating a digital certificate is provided wherein a new digital record is received and is assigned a sequence value. A first composite digital value is generated by applying a first deterministic function to the digital records stored in a repository. The sequence value and first composite digital value are included in a first certificate. After the digital record is added to the repository, a second composite digital value is generated by applying a second deterministic function to the digital records in the repository. This second composite digital value, and a composite sequence value, are published. An interval digital value which is based upon the first and second composite digital values, and the sequence value, are included in a second certificate which thus verifies the authenticity and sequence value of the digital record.

摘要翻译： 提供了一种用于产生数字证书的系统和方法，其中接收到新的数字记录并被分配了序列值。 通过对存储在存储库中的数字记录应用第一确定性函数来生成第一复合数字值。 序列值和第一复合数字值包含在第一证书中。 在将数字记录添加到存储库之后，通过对存储库中的数字记录应用第二确定性函数来生成第二复合数字值。 发布第二个复合数字值和复合序列值。 基于第一和第二复合数字值和序列值的间隔数字值被包括在第二证书中，从而验证数字记录的真实性和序列值。