Abstract:
A computerized method is provided for certifying a digital object. The digital object is uniquely identified with an identification. The identification is registered with a certification authority using a first public/private key exchange to receive a certificate of the digital object. Authenticity of the object is addressed by means of certification of the supplier&#39;s identity, in conjunction with integrity validation of the object. The digital object is tested to receive a compliance label using a second public/private key information exchange. The digital object is then distributed along with the certificate, and the label using a third public/private key information exchange. Ongoing confidence in object compliance is sustained by re-affirmation and/or notification mechanisms.

Description:
FIELD OF THE INVENTION 
     This invention relates generally to global information systems, and more particularly to certifying the authenticity and correctness of digital objects used in global information systems. 
     BACKGROUND OF THE INVENTION 
     Global information systems, such as the Internet, have greatly reduced the cost of producing and distributing digital information and services, i.e., content. For the purpose of storing, accessing, processing, and distributing, the content can be packaged as digital objects. The content of digital objects can be text, audio, video, images, software programs, digital scrip, and so forth. Supporting digital objects in global information systems may require additional infrastructure services such as repository management, data processing, and communication networks. 
     Conceptually, a digital object includes two main components, data and metadata. The data includes the content, and the metadata describes the content. Typically, the metadata contain a persistent unique identifier of the object. In addition, the metadata can also include access, ownership, and licensing information pertaining to the underlying content. 
     In order to interact with a digital object, the object must be processed. For example, if the object includes as content a video, the processing simply renders the video. Other types of processing can include transforming, distributing, replicating, compressing, repackaging, caching, communicating, aggregating, encrypting, brokering, billing, maintaining, and the like. Therefore, in some cases, it makes sense to include the processes, e.g., software programs, with the digital object. 
     It is desired to provide a method that can certify the authenticity and correctness of digital objects before they are used. 
     SUMMARY OF THE INVENTION 
     A computerized method is provided for certifying a digital object. The digital object is uniquely identified with an fingerprint identification. The identification is registered with a certification authority using a first public/private key exchange to receive a certificate of the digital object. 
     The digital object supplier identity is established though a certification authority. This can then be used to provide assurance of the authenticity of a digital object. The digital object is tested to receive a compliance label using a second public/private key exchange of the third party testing authority. The digital object is then distributed along with the certificate, and the label using a third public/private key exchange to consumers. Encoding/encryption methods are used to provide, for trusted information exchange in all of the above operations. 
     The consumer can then confirm the authenticity and correctness of the digital object. Based on this verification, suitability for consumption can be determined. After the digital object has been distributed, it is also possible to re-affirm the certification. Furthermore, third parties to the consumer, e.g., suppliers, certification authorities, testing authorities, and regulatory authorities, can revoke the certification. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS 
     FIG. 1 is a block diagram of a data structure for storing and communicating a certified digital object according to the invention; 
     FIG. 2 a block diagram of distributed computer system for exchanging certified and tested digital objects; 
     FIG. 3 is a flow diagram of method steps for certifying a digital object; 
     FIG. 4 is a flow diagram of method steps for testing a certified digital object; and 
     FIG. 5 is a flow diagram of step for distributing and confirming a certified and tested digital object. 
     FIG. 6 is a flow diagram for certifying and confirming the authenticity and correctness of digital objects distributed in the system. 
    
    
     DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 
     FIG. 1 shows a data structure  110  for storing and communicating a digital object, and metadata information about the object. FIG. 2 shows parties connected in a massively distributed network that are involved in handling digital objects as described herein. To better understand the overall scheme of handling the digital objects, FIG. 6 is a flow diagram that illustrates how certifying and confirming the authenticity and correctness of digital objects distributed is performed in the system. As will be later explained in more detail, the interaction between a supplier  210  a certification authority  220 , a testing authority  230  and a consumer  240 , includes a number of exchanges and some processing. As shown, processing includes for example creating a fingerprint associated with a digital object that is to be distributed by the supplier  210 . Processing also includes certifying the digital object, testing the digital object and confirming the authenticity and correctness of that digital object. Exchanges include for example the certification authority  220  providing to the supplier  210  an identification (ID) certificate. Exchanges include also sending from the supplier  210  to the 3rd party testing authority  230  a certified copy of the digital object (certified digital object) together with test assertions and the fingerprint. The exchanges further include sending from the supplier  210  to the consumer  240  a certified tested copy of the digital object (certified tested digital object). The following description in conjunction with FIGS. 1-5 provides a more detailed narration of the above described system and method. 
     The data structure  110  includes the digital object  101 , which may be encoded or encrypted to control use, the object fingerprint  102 , a time/date stamp  103 , identification and other information about a supplier  104 , identification and other information about a certificate authority  105 , identification and other information about a 3rd party testing authority  106 , a certificate of identity from the certificate authority  107 , a label from the 3rd party testing authority  108 , and a checksum  109 . 
     The digital object can be software programs, multimedia, or any other type of consumable data. 
     The fingerprint,  102 , is generated by a process that can be applied to the object resulting in a bit pattern or value which is highly dependent on the object&#39;s content with the additional property that it is highly unlikely that objects having different content have the same fingerprint. Fingerprinting allows the almost certainly unique identification and integrity validation of objects without central management of identification information, a highly desirable attribute in a globally distributed environment. 
     FIG. 2 shows a first party, for example a content supplier  210  that can generate digital objects  101  certified and tested as described below. The supplier  210  can be a software or multimedia vendor. The supplier  210  obtains one or more supplier identity certificates  107  from certifying authorities  220 . A certifying authority can be a bank, government agency, or other trusted, publicly accessible entity. 
     The authority certifies the identity of the supplier, which is an essential step in establishing the authenticity of a digital object. The supplier  210  then provides the digital object  101  to a 3rd party testing authority  230 , along with a statement of the assertions the supplier would like to make about the correctness of the object. Correctness assertions might include, but are not limited to, statements about the operating environment, required resources, and/or security policy requirements. 
     The 3rd party organization  230  applies manual and/or automated mechanisms to verify the correctness of these assertions, and provides a label  108  back to the supplier which is explicitly tied to the fingerprint identity of the object. 
     The supplier  210  then combines the digital object with the identifying metadata (including the authenticity certificate and the label)  110  for delivery to the consumer. 
     The consumer  240  then uses the metadata to evaluate the object in relationship to their needs, environment and policies. This may entail additional, or ongoing interaction with the 3rd party testing authority  230 , to ensure that the object continues to be correct. Some forms of correctness may not be detectable with the tests applied by the 3rd party, and therefor information about subsequent failures may be important to the consumer. 
     The steps of the certification process according to the invention are described with reference to FIG.  3 . The supplier has one or more methods of trusted information exchange available. Here, public/private key encryption is used as the example, with the supplier having a public key  302  and a private key  301  that can be used to encrypt/decrypt data, which ever is used to encrypt the data, the other is required to decrypt it. 
     Using the public key  311  of a certifying authority  220 , the supplier provides that authority with their public key, and other identifying information. The certifying authority applies their processes to verify that this supplier is the entity they claim to be, and then provides back a certificate  107 . 
     This certificate incorporates the public key of the supplier  302 , identifying information about the supplier and other information as determined by the certificate authority  220 , all of which is encrypted using the certifying authority&#39;s private key  312 . The resulting certificate  107 , can be decrypted by anyone with access to the certifying authority&#39;s public key (which is expected to be publicly known and widely available). 
     Since this certificate  107  can only be decrypted with the public key  311  of the certificate authority  220 , which means it was encrypted by their private key  312 , the contents can be trusted to have been provided by that authority  220 . 
     The supplier  210  then can apply this certificate to any digital object as an indication of the identity of the supplier. By combining this certificate  107 , with a digital object  101 , and a finger print of the digital object  102 , and whatever assertions that the supplier wishes to make about the object  304  into a certified digital object  305 . This will typically be encrypted using the suppliers private key  301  (so any interested party can decrypt it with the suppliers public key  302 .) 
     A recipient of a certified digital object  305 , can have confidence in the authenticity of the object. This can be established by decrypting the certified object with the public key of the supplier  302 , decrypting the certificate with the public key  311  of the certificate authority  220 , and comparing the public key for the supplier from the certificate authority with that used to decrypt the package. 
     Confirmation can be acquired from the certifying authority  220  that the certificate is still valid if that is appropriate. The fingerprint process can then be applied to the object  101 , to verify that the object matches the fingerprint  102  in the certified digital object package. However, this does not assure that the object will conform to the assertions  304  made by the supplier. 
     Steps of the testing process according to the invention are described with reference to FIG.  4 . The supplier  210  provides the certified digital object  305  to a 3rd party testing authority  230 . This may be done by encoding the certified object with the private key of the supplier  301 , or the public key of the 3rd party testing authority  402 , or a combination to ensure the contents are not disclosed to any other parties. 
     The testing authority  230  can decrypt the package using their private key and/or the suppliers public key, and verify the authenticity as indicated above. The testing authority  230  then applies whatever series of tests  410  are applicable for the assertions  304  made by the supplier. The results are combined into a label  108 , which would contain the object fingerprint  102 , and the confirmation statements that the testing authority  230  has determined with respect to the digital object  101 . 
     These statements may indicate both characteristics of the object  101 , and also information about the method of testing applied, since consumer policies may require specific test methods as well as specific characteristics. The label would be encrypted by the testing authority  230 , using their private key  401 , and also the public key  302  of the supplier  210  to ensure that the authenticity of the results were retained, and also that they were only available to the supplier. 
     The certificate of supplier identity  107 , and the label with tested object characteristics  108  are both retained in the form encrypted by the authority (certificate authority  220  for the certificate, encrypted by their private key  312 ; and the testing authority  230  for the label, encrypted by their private key  401 ). 
     These are provided to consumers in this encrypted form so the public key  311  of the certification authority  220 , and public key  402  of the testing authority  230  can be used to authenticate the integrity of these certifications. (Of course the supplier  210  can also decrypt these to verify that these certifications are in good order with respect to their business requirements.) 
     The supplier  210  then combines the object  101 , its fingerprint  102 , date/time information  103 , identification information about the supplier  104 , the certificate authority  105 , and the testing authority  106 , as well as the identity certificate  107  and the label  108  into a package with checksum  109  for distribution. This is a certified and tested digital object  110 . 
     The steps for distribution, acceptance, and continued confidence in a digital object according to the invention are described with reference to FIG.  5 . The supplier  210  makes the certified and tested digital object  110  available to consumers via appropriate mechanisms (media distribution, online, etc.) 
     The consumer  240 , obtains a copy of the object  110 , and verifies it&#39;s authenticity. This entails decrypting the object and metadata  110  using the public key of the supplier  302 , verifying the identity of the supplier with the certificate information  107 , decrypting this with the public key  311  of the certifying authority, and verifying the label contents  108 , by decryption using the public key  402  of the testing authority. 
     The integrity of the object  101 , can be verified with the fingerprint identification  102 . The label metadata can then be compared with the relevant policies, and operating environment of the consumer. Additional confidence in the correctness of the object can be obtained by affirmation by the testing authority  230 . Once the object authenticity and correctness is verified in accordance with the consumer&#39;s policies, the object can be accepted. This process may involve additional&#39;steps with the supplier to obtain digital keys required for use of the object, and complete any contractual arrangements. 
     Once the object  101  is put into use, consumer  240  policies may require that regular re-affirmation  541  be initiated with the testing authority  230  to obtain verification  531  that the object is still correct with respect to the policies of the consumer. The testing authority  230  may also provide a service to consumers  240  notifying them  532  of revocation of all or part of the label test characteristics. The results of a verification  531  or revocation  532  may result in the consumer  532  in determining that it is required to stop using the digital object  543 . 
     It is understood that the above described embodiments are simply illustrative of the principles of the invention. Various other modifications and changes may be made by those skilled in the art which will embody the principles of the invention an fall within the spirit and scope thereof.