Entrust Technologies Limited

Entrust Corporation

Kevin Simzer

Adrian O Mancini

Gordon William Coulson

Dhanya Thakkar

Eric R Skinner

James Arthur Turnbull

James A Godfrey

Ivo Ruckstuhl

An apparatus and method provides non-repudiation of transaction information such as mark up language forms, using a non-proxy cryptographic application, such as an applet, that provides information to and from the Web browser. Once a user fills out a mark up language-based form as provided, for example, through a Web browser and selects a 'submit' button, the non-proxy cryptographic application sends the completed form to a server or the receiving unit that provided the incomplete form and waits for the server to present confirmation data such as a confirmation request form. In one embodiment, once a confirmation request form is received, the non-proxy cryptographic application temporarily maintains the confirmation request form, namely a representation of the completed form as provided by the server, in temporary (e.g., volatile) memory, such as RAM. The non-proxy cryptographic application then sends a copy of the temporarily maintained confirmation request form to the Web browser for display to a user. If the user accepts the copy of the confirmation request form, it is signed and sent back to the server where it is compared with a stored copy to insure that no tampering of the accepted form occurred.

Method and apparatus for providing non-repudiation of transaction information that includes mark up language data

An information security network provides a plurality of trusted authorities configurable in a rooted hierarchical structure. At least one of the trusted authorities is a superior authority and at least one of the trusted authorities are subordinate authorities. The trust authorities are capable of issuing digitally signed data structures, referred to as certificates. The superior authority is operative to generate policy control message data, such as separate message data or a certificate containing policy information, to dynamically vary policy control data to facilitate trust authority policy delegation among subordinate authorities. The policy control data includes, among other things, inter-trusted authority trust modification data to dynamically vary validation starting authorities among subordinate authorities.

Dynamic trust anchor system and method

A system and apparatus facilitates digital signing of data communicated between a first unit and a second unit through an interface independent proxy, or multiple independent proxies, interposed between the first and second units. The independent proxy has a digital signature initiation data detector to detect embedded signature initiation data in data to be signed. The independent proxy contains a signature generator through which the form based communication data flows. Initiation data is used in the communication data to automatically trigger the intermediary or independent proxy to sign the communication data. The signature generated by the intermediary is a persistent signature which is preserved in memory so that later verification can be performed once a transaction has been completed.

System and method for signing markup language data

Growing community of inventors

Gloucester, Canada

Kevin Simzer