Patent ID: 7210037
Filing Date: 2007-04-24
Classification: G06F

Abstract:
1. A method for facilitating the delegation of operations involved in providing digital signatures to a signature server, the method comprising: allowing a user to authenticate the signature server prior to sending a message to the signature server; receiving the message from the user at the signature server, the message including an item to be signed on behalf of the user by the signature server, a user identifier which identifies the user, and an application identifier which identifies the application being used; authenticating the user at the signature server; determining whether the user is authorized to request a signature for the item by communicating with an authority server that is separate from the signature server, wherein determining whether the user is authorized to request a signature for the item involves looking up an authorization for the user based upon an identifier for the user as well as an identifier for an application to which the user will send the signed item after it has been signed and returned by the signature server; looking up a private key for the user at the signature server based on the user identifier and the application identifier, wherein looking up a private key for the user based on the user identifier and application identifier, and wherein using the private key prevents a user who is allowed to access a second application, but who is not allowed to access the application being used, from gaining access to the application being used; and if the private key is found, signing the item with the private key for the user.