CN1916985A

CN1916985A - Automated transaction machine digital signature system and method

Info

Publication number: CN1916985A
Application number: CN 200610128682
Authority: CN
Inventors: 克里斯托弗·L·帕米利; 马克·D·史密斯
Original assignee: Diebold Inc
Current assignee: Diebold Nixdorf Inc
Priority date: 2001-03-07
Filing date: 2002-03-06
Publication date: 2007-02-21
Also published as: ZA200306191B

Abstract

An automated transaction machine such as an ATM (10) is provided. The ATM isoperative to digitally sign electronic documents (42). The ATM may be in operative connectionwith a storage server (32). The storage server is operative responsive to the ATM to maintainelectronic documents (42) in a data store (34) in association with the user's digital safe depositaccount (40) and/or a financial account (48) such as checking, savings, debit, or credit account. The storage server is further operative to store a private key (44) of a user in association with theuser's digital safe deposit account and/or financial account. The ATM is operative to causeelectronic documents to be signed using the private key associated with the user. The ATM is further operative to output the electronic document on a display device (18) of the ATM wherethe user may view and edit the electronic document.

Description

Automated transaction machine digital signature system and method

The application be that March 6, application number in 2002 are 02806620.0 the applying date, denomination of invention divides an application for the application for a patent for invention of " automated transaction machine digital signature system and method ".

Technical field

The present invention relates to automated transaction machine.Particularly, the present invention relates to the system and method for automated transaction machine that can digitized signature electronic document.

Background technology

Can visit personal computer along with increasing individual has maybe, increasing individual is producing electronic document.The example of electronic document comprises the tax return of e-file formula, goods by internet or Email online ordering or service contract, Email, word processing document or the document with any other type of digital form.The type of some electronic document belongs to the safety and the confidentiality of wishing preferably can safeguard for a long time the document when the individual produces, sends or receives the document.

Unfortunately, many personal computers have unsafe configuration.Along with the internet is constantly popularized, many personal computers are all easily by the long-range attack of the institute of the hacker on the internet.In addition, many home personal computer do not dispose password, and the result is for example friend of any people that can physically visit this personal computer, looks after child person, or relative may be unintentionally or the electronic document of the visit sensitivity of having a mind to.Although exist encryption software can encrypt privately owned electronic document, many individuals do not have technical capability to come correct installation and configuration encryption software to their personal computer.Therefore, existence allows the demand of the individual system and method that uses protect the personal electric document to being easier to.

The electronic document that belongs to the individual is generally held on the hard disk of personal computer.For example, user taxation software produces the electronic tax filing single document that is stored in the hard disk usually.Word processor is stored in electronic document files in the general catalogue on the hard disk usually.The Email that personal computer receives and sends also is stored on the hard disk usually.Unfortunately, grow with time, personal computer may meet with software and/or hardware problem, and the latter may damage the computer documents that is stored on the hard disk.Unless individual's execution to the computer documents on its personal computer hard disk in advance and frequent is backed up, and is important, is difficult to substitute, the personal electric document may be owing to hardware or software failure is lost.Even the document is backuped to portable medium for example tape, portable disc or CD, but portable medium itself may degenerate, and is not readable, falls into disuse, or lose.Therefore, exist the demand of the system and method for the integrality of maintenance document that can be is over a long time stored important personal electric document.

Along with the electronic signature law in each state and federal rank issued that the individual will have more opportunity and produce and the electronic signature electronic document.Many electric signing systems use the public-key encryption method to produce and verify electronic signature.When the signature electronic document, the individual uses secret private cipher key to produce the digital signature of this electronic document.Such private cipher key is associated with Public key usually.Other mechanism can use Public key to differentiate this electronic document and digital signature.This Public key is published as the part of digital certificate usually, and digital certificate is by third party's certificate authority digital signing of being trusted.

Although digital certificate and Public key can be open to the world, private cipher key must keep secret and forge to stop.When someone wished certain document of digital signing, this user must adopt the computer program that can have access to its private cipher key.The same with encryption software, many individuals do not have technical capability to come successful installation and use digital signature program on its personal computer.Therefore, existence allows the demand of the individual system and method that uses come digitized signature electronic document to being easy to.

Generally speaking, when the digital signature program belongs to certain man-hour of using this program, its private cipher key of thinking that this people is natural will be by the maintenance of this program secret.What this people was natural in addition thinks that the electronic document of being signed is corresponding to the electronic document of being read and browsing by this people.Unfortunately, if this digital signature program belongs to certain un-trusted mechanism, the individual will be difficult to almost to guarantee that the private cipher key of its input will keep secrecy and/or will be exactly actual in the electronic document of digital signing by the electronic document that this people reads and browses.Therefore, there is the confidentiality that the demand protection of system and method is used for the private cipher key of digitizing signature electronic document.Also exist the demand of system and method is come digitized signature electronic document, it provides additional assurance to the individual, guarantees the replacement signature paper media document that this process can be safe.

Summary of the invention

The purpose of a canonical form of the present invention provides the system and method that is easy to allow the individual use and protects electronic document.

The purpose of another canonical form of the present invention provides that system and method comes store electronic documents and keep the integrality and the confidentiality of this electronic document in over a long time.

The purpose of another canonical form of the present invention provides the system and method that is easy to allow the individual use and comes the digital signing electronic document.

The purpose of another canonical form of the present invention provides the confidentiality that system and method protection is used for the private cipher key of digital signing electronic document.

The purpose of another canonical form of the present invention provides the replacement signature paper media document that system and method comes the digital signing electronic document and the individual digital signature electronic document of further giving security can be safe.

Become more clear in the optimal mode of other purpose general of canonical form of the present invention realization invention below and the additional claim.

The purpose of front will reach in an embodiment, the storage by having automated transaction machine and the system and method for digital signing electronic document.The example of the automated transaction machine that can be used by the individual comprises auto-teller (" ATM ").ATM can allow the user handle banking.Can comprise with ordinary bank's business that ATM handles: dispense cash, reception are deposited, are transferred accounts, pay the bill and inquiry into balance.The treatable banking type of user depends on the performance of concrete bank machine and the program of operating machines.The automated transaction machine of other type can allow user's offset accounts (charge against accounts) or transfer fund.The for example so various ticket values of reward voucher, pass-check, lottery ticket, voucher, check, root ticket, draft, scrip or traveller's check can be printed or provide to the automated transaction machine of other type.Quote ATM, automated transaction machine or automated banking machine for convenience of explanation and should have any device that comprises the processing that is worth conversion.

The representative instance of ATM comprises at least one output unit, display screen for example, audio system, and printer.ATM also comprises at least one input media, touch-screen for example, function key, keypad, keyboard, and/or card reader.ATM also comprises device, for example distributes the mechanism of cash, receipt printing mechanism, and card reader/writer, deposit mechanism and other transaction function devices, this machine uses them to realize comprising the transaction that is worth conversion.

ATM can comprise maybe can be connected at least one computing machine.This computing machine can be connected to output unit and input media, and the transaction function devices in machine.The program that this computing machine comprises component software and carries out therein.In one embodiment, at least can operate a component software and cause this computing machine to provide user interface by display device or other output unit of this machine, it make the user can from this user-dependent numeric security deposit box or account storage and retrieve electronic document.In one embodiment, the numeric security deposit account comprises a certain amount of file storage, and the storage server that the latter can be connected with ATM is safeguarded.Example ATM can communicate by letter with storage server and cause storage server to safeguard electronic document, and the latter's storage is relevant with user's numeric security deposit account.In one embodiment, operation A TM retrieves so that allow the storage server storage, and copy and deletion are stored in the electronic document of user's numeric security deposit account.In addition, this example storage server has been configured exercisable hardware, and software and redundancy technique are protected the integrality of e-file for a long time.The embodiment of storage server can also the encrypted electronic document, and so only the individual of Shou Quaning can visit this electronic document.

The embodiment of ATM can allow the numeric security deposit account of user from external source retrieve electronic document and the document retrieved of storage to the user.For example, external source comprises for example CD of portable storage media, and portable computing is mobile phone for example, and/or the network-accessible memory location.In an embodiment, ATM comprises the portable storage media reading device, and it can read electronic document from portable storage media.The example of the portable storage media reading device that uses with embodiment comprises for example IomegaJaz  driver of portable hard disk reader; The moving device of Magneto Optical MO is Iomega Zip  driver for example; Flash drive is used for writing for example little flash memory of flash memory device and Sony Memory Stick ; The PC card; The CD driver, the DVD driver; Mini disk (Mini-CD) driver; Smart card; Floppy disk; And numerical tape driver.

Example ATM also makes the user can watch and/or listen to the output unit of the content of electronic document by this machine.For example, example ATM can comprise document output software assembly, and it can make the display device output electronic document corresponding visual representation of the computing machine of ATM by ATM.The example of the document output software assembly that can use with this example in operation comprises Adobe  PDF reader, HTML or XML browser, word processor, or any other can read or visit electronic document and export the visual representation of the electronic document of being visited in operation software application.Example ATM can comprise document output software assembly, and it can listen expression accordingly by the audio devices output electronic document of ATM.For example, electronic document can comprise text, and it had not only shown by display screen but also had been transformed into the loudspeaker output by ATM of the sound that can listen.ATM can also further can print the visual representation of electronic document by print apparatus.

In another embodiment, the user can by common network for example internet access be stored in electronic document in the numeric security deposit account.In one embodiment, the present invention can make the user select the digital safety deposit account to increase by internet access to its numeric security deposit account except employing ATM visits.The user can according to the susceptibility that is stored in the electronic document in the numeric security deposit account and type enables or do not enable internet access.

Example ATM can the operation on digitized signature electronic document.In one embodiment, ATM comprises the digital signature component software, and it uses public-key encryption algorithm and agreement, or other Digital Signature Algorithm and agreement, can sign electronic document.For example, instance number word signature software can use and user-dependent private cipher key signature electronic document.Private cipher key is stored in the storage server relevant with user's numeric security deposit account in one embodiment.After differentiating the user, example ATM can safe in utilizationly be stored in the private cipher key digital signing electronic document of storage server.In case electronic document is signed by example ATM, ATM can in operation, send the electronic document signed to user selected position for example with user-dependent numeric security deposit account or external source portable storage media for example, the memory location of portable computing and/or network-accessible.

In certain embodiments, example ATM can use in operation and be stored in for example user's of portable computing private cipher key signature electronic document of external source.For example, user's private cipher key can safe leaving on the smart card.The embodiment of ATM comprises intellignet card fetch, and it can be with smart card communications so that the signature electronic document.

Example storage server or external source be smart card for example, need could use user's private cipher key to produce digital signature then from password or the biometric data of ATM.Example ATM can comprise input media for example keypad or biostatistics reading device, and the user uses for example PIN of the required password of their inputs, or biometric data.

In one embodiment, ATM can come to produce digital signature with ATM from storage server or external unit retrieval private cipher key in operation.In certain embodiments, system can be configured so that ATM does not need to retrieve private cipher key.In this embodiment, the one-way hash function table that ATM can produce electronic document is eap-message digest for example, cryptographic check value, and message integrity check, or handle error detecting code.This one-way hash function table then is forwarded to storage server, smart card, or the external source of the safety of the visit private cipher key that other can be safe.Storage server, smart card, or other safe external source then produces digital signature and responds the one-way hash function table, private cipher key and corresponding the encryption or Digital Signature Algorithm.Storage server, smart card, or other safe external source then returns ATM to this digital signature.ATM then store electronic documents before the numeric security deposit account or the transmission electronic document before external source, digital signature is appended to electronic document.

In one embodiment, ATM forwarding electronic document is to storage server, smart card, or other safe external source.At this embodiment, storage server, smart card, or other safe external source can produce summary from the electronic document that is received and corresponding digital is signed, and transmits this digital signature and/or electronic document then to ATM.Should be appreciated that embodiment comprises any Digital Signature Algorithm of use and key management system, it can make the signature electronic document of ATM safety.The example of the cryptographic algorithm of Shi Yonging comprises RSA and DSA in embodiments of the present invention.

In certain embodiments, numeric security deposit account and/or user's private cipher key may be relevant with user's bank or other accounts of finance, check account for example, deposit account, payment and/or debt-credit account.The user can visit the digital signature feature of digital safety deposit account and/or example ATM, by inserting atm card, bank card, credit card, or other relevant card of the accounts of finance any and user.The user import corresponding password for example PIN or biometric information after the input equipment of ATM, example ATM will be in operation enables users select the trading function of ATM, for example distribute cash, account transfer, deposit, payment bill and inquiry account balance.In addition, the private cipher key digital signing electronic document that example ATM can show the user in operation and use is relevant with user's accounts of finance.In addition, example ATM can make user capture and safeguard the electronic document that is stored in the numeric security deposit account relevant with user's accounts of finance in operation.

In not relevant with user's the accounts of finance card example of those users' numeric security deposit account and/or private cipher key, the user is issued the numeric security deposit account card of numeric security deposit account of the respective user of the readable mark of carrying machine on it.Embodiment A TM can be in operation his/her numeric security deposit account of enables users visit and sign electronic document with response to reading from the machine-readable mark of numeric security deposit account card.

In addition, example ATM can come the digital signing electronic document by the privately owned and publicly-owned key of enables users generation in operation.Example ATM can also be in operation enables users request and/or buy the X.509 certificate that digital certificate for example uses ATM.Example ATM can be connected to certification authority agent and can send to the enough information of certification authority agent so that certification authority agent produces and the issue certificate is given the user in operation.This digital certificate can be used to the digital signature of differentiating that user's use-case ATM is created.Example ATM can store digital certificate to user's numeric security deposit account and/or relevant user's accounts of finance in operation.With other electronic document, example ATM can send the external source that digital certificate is selected to the user in operation.When the signature electronic document, example ATM can associate digital certificate and the electronic document of being signed in operation.Other mechanism can use digital certificate to differentiate the digital signature of electronic document.In described embodiment, ATM can cause the cost relevant with buying digital certificate to be drawn by the accounts of finance of user or other mechanism in operation.If the user has had digital signature, the external source key numbers certificate that embodiment can select by the user in operation.Example ATM can associate the electronic document of digital certificate of being retrieved and ATM signature in operation.The digital certificate that example ATM can further allow the storage of example storage server be retrieved in operation arrives user's numeric security deposit account and/or user's associated finance account.

As previously discussed, example ATM can read electronic document is also exported electronic document by the display device of ATM visual representation in operation.In addition, example ATM can be further in operation enables users utilize the input media input information of ATM to electronic document.For instance, electronic document for example contract can comprise that field imports the name of parties of contract, the description of goods, and the quantity of the payment payment for goods of being considered.Example ATM can enables users import or select text in operation, quantity, and out of Memory is incorporated in the electronic document and then sign document.In addition, the embodiment of ATM can visit the data-carrier store of user profile in operation.This data-carrier store can be used for retrieving information and fill by the input field of the electronic document that ATM checked and edited automatically.

Description of drawings

Fig. 1 is the synoptic diagram of having expressed first embodiment of ATM.

Fig. 2 is the synoptic diagram of having expressed with the embodiment of the system of ATM storage and digital signing electronic document.

Fig. 3-Fig. 8 is the synoptic diagram of user interface screen of having expressed the embodiment of ATM.

Fig. 9-Figure 14 is the synoptic diagram of embodiment of having expressed the ATM system of digital signing document.

Figure 15 is the synoptic diagram of having expressed the document signature system of another embodiment.

Figure 16 is the top view of having expressed embodiment of portable machine that can the digital signing electronic document.

Figure 17 shows the step of an embodiment of the method for signing electronic document.

The synoptic diagram of another embodiment of Figure 18 display document signature system.

Figure 19 shows an embodiment of the user interface screen of ATM.

Embodiment

Referring now to accompanying drawing especially Fig. 1, the figure illustrates schematic automated transaction machine, the synoptic diagram of the ATM 10 of an embodiment.This ATM 10 can comprise at least one computer processor 12 and a plurality of component software 11.Computer processor 12 can respond the operation that component software 11 is controlled ATM in operation.Computer processor 12 can be programmed in operation and enable ATM and carry out function below at least one in an embodiment: at least one bank transaction is for example distributed cash; Storage and retrieve electronic document; And/or digital signing electronic document.

For carrying out these functions, ATM comprises also and can be connected with computer processor 12 that at least one output unit 14 is display device 18 for example, at least one input media 16, and also as the card reader 20 of input media.In certain embodiments, ATM can also comprise and can be connected one or more transaction function devices with computer processor 12.Transaction function devices comprises for example ATM (Automatic Teller Machine) 24, deposit device 22, receipt printer 25 and other device.ATM 10 can be further can with at least one financial transaction process computer or system communication, the latter can realize financial transfer and mandate, in this example its respective hosts banking system 30.ATM 10 can also communicate by letter with at least one storage server 32.In an embodiment, storage server 32 can be communicated by letter with at least one data-carrier store 34 in operation.In another embodiment, ATM 10 can also communicate by letter by main frame banking system 30 with at least one storage server 32.

In one embodiment, storage server responds a plurality of ATM 10 and comes a plurality of electronic documents 42 in numeric security deposit box or account 40 of storage and maintenance safely.These numeric security deposit account correspondences leave the personal document in the data-carrier store 34 in.Electronic document 42 comprises for example numeral expression of physical-file, word processing document, html file, the XML file, other marking language document, Acrobat  pdf document, the electronic data list file, digital certificate, image file, audio files, audio frequency and video file, source code file, use the particular memory file, electronic voting ballet (electronic voting ballet), or the digital document of any other type, they can canned data be computer-readable form.The user can set up one or more numeric security deposit accounts 40 and use ATM 10 to come the storage and maintenance electronic document 42 related with his/her numeric security deposit account.

The embodiment of ATM 10 can show electronic document in operation the content of watching is on display device 18, and this electronic document is signed in the enables users digitizing.In many Digital Signature Algorithms, the signatory must use secret information for example private cipher key produce digital signature.In one embodiment, user's private cipher key 44 can be stored in user's numeric security deposit account or be stored in the place related with user's numeric security deposit account 40.In an embodiment, user's private cipher key 44 can further be stored in and user's accounts of finance credit card account for example, the debit card account, and check account, any other accounts of finance of deposit account or user is associated.In addition, as what below will further discuss, the embodiment of ATM 10 and/or storage server 32 can use the private cipher key 44 that is associated with user's numeric security deposit account 40 and/or accounts of finance to come digitizing signature electronic document in operation.

Should be appreciated that ATM 10 is embodiment, in other embodiments automated transaction machine can comprise other or supplementary equipment therefore and can in the system of other type, operating.For example, embodiment can comprise can be connected to computer processor 12, comprises the data-carrier store of storage device drive 26, and as the communication port 28 of input/output device.Storage device drive 26 makes computer processor can read and/or write electronic document to external source 56 portable storage media 36 for example as data-carrier store.Communication port 28 makes computer processor can read and/or write electronic document to external source 56 for example portable computing 38 or network-accessible memory location 58.

Fig. 2 illustrate schematicallys the embodiment of ATM 10, it can the operation on the electronic document 42 of storage and maintenance in numeric security deposit account 40.The embodiment of ATM 10 comprises display device 18 for example CRT monitor or LCD display.This display device can responsive computer processor output user interface mark 46.The content-label that this user interface mark can comprise the introductory output of operation A TM and the tabulation of the electronic document that can be visited by ATM 10 is expressed, or the part of the electronic document that can on display device 18, watch by operation.Some embodiment also comprises for example audio system 19 of other output unit 14, and the latter can export audio content that should electronic document.For instance, when electronic document comprises audio-frequency information for example during mp3 file, ATM 10 can programming cause the audio system output sound with the response mp3 file in operation.In addition, if electronic document comprises for example text of language message, embodiment can comprise that speech synthetic device or software can read this language message by the audio system output oral literature of ATM 10 and give the user.

The embodiment of ATM 10 can also comprise at least one input media 16 for example keypad 50 or selector button 52.Input media for example keypad 50 and selector button 52 can make for example corresponding certain account's PIN PIN of user's input operation input information, the quantity of the cash of extraction, or select to check, the specific electronic document of storage and/or digital signing.The biostatistics that also comprises some embodiment of ATM 10 reads for example fingerprint reader of input media 54, the iris scan device, retina scanners, speech recognition equipment, face recognition reader or other can make the user can import the device of the discernible biometric information of user.These discernible biometric information can be made by the embodiment of ATM 10 and be used for further differentiating the user, just allow the user to carry out trading function then, visit digital safety deposit account, and/or the digital signing electronic document.

In an embodiment, ATM input media that can comprise other or addition type comes input information, touch panel device for example, speech recognition system, trace ball, and/or digital signature plate 53.Digital signature plate 53 can produce the numeral expression or the scanning of handwritten signature, and this handwritten signature is with pen or do not write on the signature plate 53 with the stylus 55 of ink.In the electronic document that the digital scanning of this handwritten signature can have been caught and be integrated into by the ATM digital signing by ATM 10.

As previously discussed, ATM 10 can comprise card reader 20.Card reader 20 can read corresponding account information or from the mark of the out of Memory of subscriber card.This card can be a bank card, credit card, and debit card, gas cards, business card, smart card, or other medium, this medium can store account data and/or other is used to discern user or its account's information.These account datas comprise check, deposit, payment, the account number of credit or other bank or accounts of finance.These account datas can also comprise the data representation of user's numeric security deposit account.

In one embodiment, the numeric security deposit account, private cipher key 44, and/or digital certificate 45 can be associated with user's accounts of finance 48.When the user used the example ATM 10 have the card relevant with accounts of finance 48, example ATM can provide user capture user's the numeric security deposit account 40 of being correlated with, private cipher key 44, and/or digital certificate automatically.For example, when the user inserts credit card or payment when snapping into card reader 20, example ATM can be in operation reads credit or payment number from card.ATM can use this account number visit accounts of finance by communicating by letter with main frame banking system 30.In one embodiment, user's private cipher key can be directly related with user's accounts of finance, ATM can by with the main frame banking system communicate by letter cause electronic document by digital signing with the response private cipher key relevant with accounts of finance.In certain embodiments, user's numeric security deposit account 40 can be relevant with user's accounts of finance 48, and ATM can be by visiting digital safety deposit account 40 with main frame banking system communications reception.

The embodiment of ATM 10 can give the user from the cash of the selected quantity of ATM (Automatic Teller Machine) 24 distribution, and by with the financial transaction computing machine for example main frame banking system 30 communicate by letter and borrow bank or accounts of finance.Embodiment A TM 10 can be configured to borrow user charge from user's accounts of finance and be used for allowing ATM store, and watches and the digital signing electronic document.ATM can further be configured to from stored by ATM, watch, other side relevant with the electronic document of digital signing or the accounts of finance of entity are borrowed customer charge.

The embodiment of ATM 10 comprises for example CD driver of storage device drive 26, and it is for example read-only that it can accept portable storage media 36, once writes maybe and can rewrite CD.The embodiment of ATM10 can cause storage device drive 26 to read electronic document from portable storage media 36.The electronic document that is read is can be on the display screen 18 of ATM 10 viewed and/or dump to numeric security deposit account 40.In addition, embodiment A TM can also retrieve stored at the electronic document of numeric security deposit account 40, on display device 18, watch them and/or cause storage device drive 26 recorded electronic documents to portable storage media 36.The example of storage device drive that can be used for other type of embodiment comprises for example Iomega Jaz  driver of portable hard disk reader; The moving device of Magneto Optical MO is IomegaZip  driver for example; Flash drive is used for writing for example little flash memory of flash memory device and SonyMemory Stick ; The DVD driver; Mini disk (Mini-CD) driver; And numerical tape driver.

Some embodiment comprise one or more communication port 28, it can retrieve with the recorded electronic document to portable computing for example mobile phone 38 or network-accessible memory location 58, the URL that the latter and user select or import, e-mail address, or other network address is relevant.The example of suitable communication port 18 comprises USB (universal serial bus) (USB) port, serial RS-232 port, parallel port, infrared (IR) port, radio frequency (RF) port is bluetooth for example, IEEE-1394 port, or for example wired ethernet or wireless ethernet (IEEE 802.11X) connection of the network port.Can be comprised portable computer for example notebook and PDA(Personal Digital Assistant) by the example of the portable computing of other type of the embodiment of ATM 10 visit.

The embodiment of ATM 10 also comprises instrument panel 59, and by the one or more input medias of instrument panel, display device and transaction function devices can allow user capture.ATM 10 may further include the visable indicia 57 of contiguous ATM instrument panel 59, on display screen visual or with the telex network of machine.Visable indicia 57 comprises logo, design, or text is as the source indicator symbol of digital signature service or network.This sign can this server of respective operations, data-carrier store, and host computer system, and/or the service mark of the entity of network, ATM 10 produces electronic signature for the electronic document of its demonstration by communicating by letter with it.This is marked at visually similar mark at subscriber card, and the user can determine fast that this ATM can use this subscriber card digital signing document like this.This mark also is used for making the user to determine that this ATM is associated with service of independently digital signature or the network that can be trusted with the third-party institution, so that show the digitizing signature user's of electronic document and safety electronic document accurately.

Fig. 3-Fig. 8 shows the example of user interface screen of the embodiment of ATM 10.The example of Fig. 3 explicit user interface screen 100, ATM 10 can cause it to pass through display device 18 outputs.In one embodiment, when the user snap into card reader 20 by placement and import PIN after keypad 50 activates ATM 10 with explicit user interface screen 100.User interface screen 100 comprises the optional function 102 of a plurality of users, and it comprises the option that extracts cash 104 from ATM (Automatic Teller Machine) 24; Option with deposit device 22 storage checks 106; The option one 08 of between each account, transferring accounts; And use display device 18 to check the option one 10 of electronic document.Each of these optional functions 102 all is close to a different selector button 52, can cause ATM 10 to handle function corresponding 102 when depressing the latter.

In one embodiment, when the user had selected option one 10 to check electronic document, the user interface screen 120 that example ATM 10 can cause Fig. 4 to show in operation was exported by display device 18.User interface screen 120 comprises a plurality of selection functions 122 herein, and their corresponding different sources are so that the retrieve electronic document supplies to watch.In the example of Miao Shuing, selection function 122 comprises the option one 24 of selecting electronic document from the numeric security deposit account in front; Option one 26-130 coils from ZIP respectively, local network (comprising for example user's PDA of portable computing), and the external sources such as the Internet/intranet website of safety are selected electronic document.

Select one of these electronic document sources in order to respond the user, example ATM 10 can cause exporting user interface screen 140 as shown in Figure 5.User interface screen 140 comprises ATM 10 determined electronic document list 142, and it is to show from the electronic document source that user interface screen 120 is selected.For respond the user select electronic document list 142 one of them, example ATM 10 can cause selected electronic document to be watched by display screen 18.The example of Fig. 6 explicit user interface screen 160, it comprises that mark represents selected loan for purchasing car electronic document 162.

Example ATM 10 comprises that also function makes the user can edit shown electronic document 162.For instance, in one embodiment, ATM 10 comprises that component software passes through output unit 18 and shows electronic document, and its form comprises the HTML relevant with this electronic document, DHTML, XML, Active X .NET object, plug-in unit, java script, and/or Java small routine.These features may produce input or select field on display device, can finish or revise them by the input media of operation A TM10.

In order further to help the user to finish the field of electronic document, example ATM can further finish the input field of electronic document from the data-carrier store retrieval relevant information of storing subscriber information in operation.Institute's stored user information can be associated with user's accounts of finance and/or numeric security deposit account.Example ATM uses institute's stored user information to finish the input field of electronic document automatically.For example, electronic document comprises that label is the input field of " Ship_to_address ".Institute's stored user information comprises and describes " Ship_to_address " relevant address information.Example ATM can and insert the input field of the user profile of this coupling to electronic document from the user profile of data-carrier store match retrieval.When the manual input information of user during to electronic document, example ATM can be further makes the field that is used for finishing similar label storing the information imported in the operation after numeric security deposit account or other data-carrier store are convenient to.

In case the user has finished review and/or editing electronic document, example ATM 10 can show another user interface screen 170 in operation, as shown in Figure 7.User interface screen 170 comprises that a plurality of selectable functions 172 comprise review electronic document option one 74; Digital signing electronic document option one 76; Send the option one 78 of electronic document to other position; The option one 80 of deletion electronic document.At described example ATM 10, the option one 80 of deletion electronic document can obtain usually when watching the electronic document of the numeric security deposit account that is arranged in the user.

When the user had selected the option of digital signing electronic document 176, example ATM 10 can produce digital signature and it is appended to the prototype version or the copy version of electronic document.Embodiment can be programmed and use any Digital Signature Algorithm and agreement to adopt the generation digital signature.The example that is used for digital signature cryptographic algorithm of the present invention comprises RSA and DSA.In an embodiment, electronic document can be used with user-dependent private cipher key and sign.This digital signature can be verified the time afterwards, the Public key of the user by using corresponding its private cipher key.This Public key can extract from user's digital certificate.In an embodiment, when electronic document during by digital signing, ATM can cause appending to electronic document with user-dependent digital certificate.ATM can also cause the digital certificate relevant with the certificate authority of the digital certificate of signing the user also to append to this electronic document.

For the digital signature of the signature of legal user bound, the user need show that the proof of his/her intention uses the electronic signature of digital signature as legal binding.Therefore, example ATM 10 provides proof that the additional user interface screen needs this intention of demonstration that the user determines so that create the electronic signature of legal binding.For example, as shown in figure 19, ATM output user interface screen 182 shows the user to do deterministic affirmation input by input media, and this representative of consumer is created the intention of the electronic signature of legal binding.

Some example ATM 10 may separate statement in electronic document, creates the statement of the electronic signature of legal binding comprising its intention of the deterministic demonstration of user by producing digital signature.ATM 10 further causes this statement and/or entire electronic document to be confirmed that by another entity digital signing or numeral this representative of consumer is created the intention of the electronic signature of legal binding.This statement and/or this electronic document can also be related with Digital Time-stamp, and its representative of consumer shows the time of its intention and/or the time that digital signature is created.This Digital Time-stamp can be by ATM by obtaining with the Digital Time-stamp server communication.

In certain embodiments, ATM 10 may require user's hand-written his/her signature on the digital signature plate.ATM 10 produces the digitizing of bitmap or polar plot form and expresses or scan this handwritten signature.The digitizing of handwritten signature is expressed and can be incorporated in the electronic document by ATM.Electronic document shown or that print just comprises the visual representation of user's handwritten signature.

When the user has selected the transmission electronic document to arrive the option one 78 of other position, the embodiment of an ATM 10 can produce user interface screen 190, as shown in Figure 8.User interface screen 190 comprises a plurality of corresponding respectively selection functions that copy diverse location 192 to that send electronic document original or signature.In present described example, selection function 192 comprises the option one 94 of transmission electronic document to the numeric security deposit account, sends electronic document to external source ZIP dish, local network, and the option one 96-200 of the Internet/intranet website of safety.

In one embodiment, the numeric security deposit account is associated with user's private cipher key.Example ATM 10 comprises that further user interface screen makes the user can produce the set of privately owned and Public key in this embodiment, and they are relevant with user's numeric security deposit account and/or be stored in the numeric security deposit account.Embodiment uses private cipher key to come to sign electronic document as the user.

Return with reference to Fig. 1, the embodiment of ATM 10 can also be connected to certificate authority 60 again.Example ATM 10 can communicate by letter with certificate authority in case create digital certificate for example X.509 certificate append to electronic document so that differentiate the digital signature that the user creates.Example ATM 10 can send certificate authority information, and the latter discerns the copy of user and user's Public key.As response, certificate authority can produce and return the digital certificate of signature, and the latter comprises identifying information and user's Public key.Digital certificate is appended to electronic document by ATM 10, stores or is associated with user's numeric security deposit account into and/or send to the external source that the user selects.ATM 10 also receives the copy of digital certificate of certificate authority of relevant issue and signature user's digital certificate.The digital certificate of certificate authority also is affixed to this electronic document, stores or is associated with user's numeric security deposit account into and/or send to the external source that the user selects.

The synoptic diagram of Fig. 9-Figure 14 has been described a plurality of different embodiment.Fig. 9 shows the embodiment of ATM300, and it can be communicated by letter with an embodiment of storage server 302.Storage server can safe storage and a plurality of different user-dependent private cipher keys 304 herein.Storage and the numeric security deposit account of typical case's private cipher key and/or accounts of finance be check or to store the account relevant for example.ATM 300 can send with user-dependent electronic document 306 and arrive storage server 302 in this described embodiment.Storage server comprises digital signature software 308, and it can use with 304 pairs of electronic documents of user-dependent private cipher key 306 and produce digital signature 310.Storage server is followed additional character and is signed electronic document that electronic document and returning signed to ATM 300, and perhaps storage server only sends digital signature 310 to ATM 300.Example ATM 300 then additional character signature 310 to electronic document 306 and transmit the electronic document of being signed and arrive user-selected target location.

In exemplary embodiments, digital signature software comprises RSA Algorithm.But in some exemplary embodiments, digital signature software comprises other or additional digital signature software/hardware.Comprise among the embodiment of digital signature software/hardware of a more than type that at server example ATM 300 can programme and make the user can select them to wish the type of the digital signature of the electronic document that ATM produces.

Figure 10 shows exemplary embodiments ATM 320, and it can be communicated by letter with exemplary embodiments storage server 322.Storage server 322 also can safe storage and a plurality of different user-dependent private cipher keys 324 herein.But, in described embodiment, not to send the complete copy of electronic document 326 to storage server 322, example ATM 320 can produce and send the one-way hash function table 332 of this electronic document 326 to storage server 322.Schematically ATM 320 comprises one or more one-way hash function algorithms 334, and its respective user wishes to be used for signing the digital signature protocol of its electronic document.For example, in order to produce digital signature, the typical one-way hash function algorithm 334 of ATM 320 comprises one-way Hash function MD5 or SHA.

Storage server 322 comprises for example RSA of one or more encryptions and/or Digital Signature Algorithm 328 herein, and it can use one-way hash function table 332 and produce digital signature 330 with user-dependent private cipher key 324 for electronic document 326.Storage server then returns digital signature 330 to ATM 320, and ATM 320 then additional character signature 330 arrives electronic document 326.

Figure 11 shows exemplary embodiments ATM 340, and it can be communicated by letter with exemplary embodiments storage server 342.Storage server 342 also can safe storage and a plurality of different user-dependent private cipher keys 344 herein.But in described embodiment, the transmission user's that storage server 342 can be safe private cipher key is to ATM 340.Example ATM340 comprises digital signature software 348, and it can cause ATM 340 to produce digital signature 350 for user's electronic document 346.

Figure 12 shows exemplary embodiments ATM 400, it can with communicate by letter smart card for example, PDA, or mobile phone with user-dependent portable computing 402.Portable computing 402 comprises at least one and user-dependent private cipher key 404 herein.In described embodiment, the user finishes watching after the associated electronic document 406, and ATM 400 can send electronic document 406 to portable computing 402.Typical portable computing comprises digital signature software 408, and it can utilize the 404 pairs of electronic documents of private cipher key 406 that are stored in the portable computing to produce digital signature 410.Then additional these digital signature 410 of portable computing 402 are to electronic document 406 and return the electronic document signed to ATM 400, and perhaps portable computing only sends digital signature 410 and arrives ATM 400.Example ATM 400 then additional character signature 410 to electronic document 406 and transmit the electronic document of being signed and arrive user-selected target location.

Figure 13 shows exemplary embodiments ATM 420, and it can be communicated by letter with portable computing 422.Portable computing 422 also comprises at least one user's private cipher key 424 herein.But, in described embodiment, not to send the complete copy of electronic document 426 to portable computing 422, example ATM 420 can produce and send the one-way hash function table 432 of this electronic document 426 to portable computing 422.Example ATM 420 comprises one or more one-way hash function algorithms 434, and its respective user wishes to be used for signing the digital signature protocol of its electronic document 426.Use one-way hash function algorithm 434, ATM 420 can produce the one-way hash function table 432 of electronic document 426 and transmit one-way hash function table 432 to portable computing 422 in operation.

Typical case's portable computing 422 comprises one or more encryptions and/or Digital Signature Algorithm 428, and it can use one-way hash function table 432 and produce digital signature 430 with user-dependent private cipher key 424 for electronic document 426.Portable computing 422 then returns digital signature 430 to ATM 420, and ATM 420 then additional character signature 430 arrives electronic document 426.

Figure 14 shows exemplary embodiments ATM 440, and it can be communicated by letter with typical portable computing 442.Portable computing 442 also comprises at least one user's private cipher key 444 herein.But, in described embodiment, the transmission user's that portable computing 442 can be safe private cipher key 444 to ATM 440.Example ATM 440 comprises digital signature software 448, and it can cause ATM 440 to produce digital signature 450 for user's electronic document 446.

Return with reference to Fig. 1, schematically storage server 32 can be safeguarded the access log 62 relevant with user's numeric security deposit account 40 and/or accounts of finance 48 again.This example storage server 32 can be attempted the numeric security deposit account 40 of calling party to each and/or use the recording storage of private cipher key 44 to arrive visit daily record 62.If the fraudster increases user's the numeric security deposit account and/or the visit of private cipher key, the instance access daily record will be used to determine the when and where of this unwarranted visit generation.The instance access daily record also comprises the record of the electronic document of system's signature.For example, this record comprises the one-way hash function table of electronic document.If the fraudster uses this instance system to come the digital signing electronic document, just can look back access log and determine which document has been forged.

The exemplary embodiments of some ATM can be used symmetric encipherment algorithm, and for example DES and secret key encryption are stored in electronic document in the numeric security deposit account.Example ATM can make the user be input to the password of ATM or biometric information from the user and produce key and come the encrypted electronic document.For deciphering electric document file, schematic ATM can point out the user to re-enter password and/or biometric data produces key again.

Except the signature electronic document, another ATM embodiment can use and ATM, storage server, and digital signature service/network, or third party's private cipher key digital signing of being correlated with are confirmed and/or are co-signed electronic document.For example, can be with its private cipher key digital signing electronic document except making the user, example ATM can also use with irrelevant another private cipher key of user's private cipher key and make electronic document further by digital signing.This another private cipher key can with the notary public who authorizes, digital signature service, or other parties relevant with this electronic document is associated.Schematically the further additional digital certificate that is associated with this another private cipher key of ATM is to the electronic document of being signed.This digital certificate is used to verify the authenticity of second digital signature.The digital certificate relevant with certificate authority also is affixed to this electronic document, and wherein arbitrary or all customer digital certificates and notary public's digital certificate or other number formulary word certificate are issued and signed to certificate authority.

In an embodiment, ATM can the additional character timestamp to electronic document, its mode is to comprise current date and time to electronic document before electronic document is by the signature of the number of ATM.In certain embodiments, ATM can cause electronic document to add Digital Time-stamp by document timestamp entity or server.For example, schematically ATM sends the one-way hash function table of electronic document to the timestamp entity.This timestamp entity can add expresses the date that this timestamp entity receives the one-way hash function table, the time data in time and time zone.Thereby this timestamp entity then forms Digital Time-stamp with this one-way hash function of private cipher key digital signing and the Time of Day of timestamp entity.The digital certificate of this Digital Time-stamp and this timestamp entity then is returned ATM.The digital certificate of then additional this Digital Time-stamp of ATM and timestamp entity is to electronic document.In some instances, the Digital Time-stamp entity is to the same entity of the digital signature that should be able to produce ATM user, service, or network.

Figure 15 shows the example of the document signature system of an embodiment.System 500 comprises at least one ATM 510 herein, can show and the digital signing electronic document.ATM 510 can also communicate by letter with one or more servers 508, and the latter comprises and the financial transaction disposal system, main frame banking system, DPS (Document Processing System), or digital signature service or the relevant server of network.

In addition, ATM 510 can receive electronic document by wired or wireless network 516 from least one personal computer (PC) 512 or other calculation element.In described embodiment, ATM 510 comprises maybe can be connected to shared or outside addressable network driver 514, and it can store the electronic document that enters and send.The network drive that should share can be isolated into one or more positions, for example " inbox " and " outbox " storage area.

PC 512 can selectivity be given permission and visits network drive that shared network drive 514 or part share for example relevant with ATM 510 " inbox ".The electronic document that PC 512 is created then is stored, and derives and/or send to the network drive 514 that ATM 510 shares.The user of operation A TM 510 can select ATM order that ATM is shown and digital signing is stored in electronic document in the shared network drive 514.The digital signing version of electronic document then is stored, and derives and/or send to " outbox " on for example shared network drive 514 of the shared network drive of shared network drive 514 or part.The document that PC 512 or other calculation element are then signed from network drive 514 retrievals of sharing.ATM 510 can also be connected to printer 518 and cover the selectable option of printer prints digital signature electronic document in operation.

Embodiment A TM 510 can comprise transaction function devices, and for example ATM (Automatic Teller Machine) and the deposit device trading function that makes ATM can carry out other type are for example distributed cash and storage check.But some embodiment A TM 510 can be configured to for example portable form of different forms, and it can not be distributed cash or receive the check of storage.The example of the ATM of such portable forms as shown in figure 16.This embodiment that takes formula ATM 520 that makes comprises magnetic card reader 522 or other card reader, display screen 524 and digital signature plate 526.Schematically ATM 520 comprises that also function key 528 is provided to the input of ATM.Other embodiment of display screen 524 comprises the touch-screen and for example wireless or wired network interface of communicator 527 of the input that is provided to ATM.

Go back with reference to Figure 15, the tissue of ability that embodiment A TM 510 is hoped to offer the reliable digital signing electronic document of user security uses again.These tissues comprise bank, mortgage company, title company, S﹠amp; L (medium and small financial federation), insurance company, the automobile commission merchant, leasing company, university, hospital, government organs, or produce any other tissue that document needs its user's signature.Schematically ATM 510 offer the user of tissue or client or other user easily mode watch and the digital signing electronic document.

The exemplary steps that Figure 17 display operation system 500 is related.This method step described herein is relevant with the automobile commission merchant, still, should be appreciated that this exemplary steps can also be applied to any tissue of wishing its number signature electronic document, entity, group or individual.This method starts from step 600, and the financial manager of this tissue or other member prepare the electronic document corresponding with loan for purchasing car.This electronic document comprises the word processing document, Acrobat  PDF document, and extend markup language (XML) document, or the energy electronics of other any kind is expressed the document of loan for purchasing car.

In an embodiment, the standard compliant loan form of this electronic document.This form comprises standardized XML tag, and it describes relevant credit side, debit, and the information of loan clause.This mark comprises for example title and the address of each side, the size of the loan, and the length of maturity, interest rate and any other may be the clause of a loan part or the information of category.In case document is created, the financial manager in step 602 store electronic documents to memory location that ATM can visit.For example, financial manager's store electronic documents is to " inbox " relevant with ATM.

At the processing loan application that busy tissue may walk abreast, a plurality of ATM can be obtained so that store electronic documents.In this case, the network drive of sharing can be relevant with title or the sign of specific ATM, and the latter can be by the network drive visit electronic document of sharing.In case electronic document is stored in the memory location, the financial manager with guides user bring into use can the retrieve electronic document specific ATM.

In case user capture ATM, the user will follow the indication that shows on the ATM display screen.If the user has had the numeric security deposit account, digital certificate, and/or the private cipher key relevant with accounts of finance, ATM can point out user's plug-in card or swipe the card, this card and numeric security deposit account, digital certificate, and/or private cipher key is relevant.For example, if this user has check account or the credit card relevant with the numeric security deposit account, the user can insert or brush the card reader that his/her check atm card or credit snap into ATM in step 604.

In response, in step 606, ATM can enough card reader reads the accounts of finance relevant with this card number and asks the user to import PIN.In step 608, the user is by keypad or by touch-screen (it is configured to show the visual representation of keypad) input PIN.In one embodiment, the PIN of 4 numerals that PIN is corresponding relevant with user's accounts of finance.In another embodiment, the PIN corresponding stored with user's numeric security deposit account, digital certificate, and/or the relevant different passwords of private cipher key.This password can comprise four or more multiple digital and/or alpha-numeric characters.In other embodiments, ATM may point out the user to provide biometric data as password by the biostatistics reading device that uses ATM.

For carrying out the ATM of many variety classes trading functions, after the user imported PIN, ATM can show the user interface screen of the screen 100 of similar Fig. 3.As previously discussed, user interface screen 100 comprises that optional function 102 extracts cash, and the storage check is transferred accounts between each account, and checked electronic document.The Portable ATM 520 for example shown in Figure 16 for ATM, ATM extract electronic document that is stored in ATM relevant " inbox " and the user interface screen that shows the screen 160 of similar Fig. 6 immediately.If a more than electronic document is arranged in " inbox ", ATM will show that the tabulation of obtainable electronic document is selective.Under each situation, ATM can extract electronic document from the memory location at step 610 example, and show the visual representation of the document in step 612.

The user can read over shown document and import the information of the needed necessity of electronic document.For example, electronic document may comprise that clause needs the deterministic agreement of user.This clause comprises for example checkbox of user interface element, input field, and/or drop-down list hurdle, and they can be selected/do not choose, editor, and/or select by the input media of ATM.

In case the information updating of any necessity that document is reviewed and provide with the user can provide the input of order to express this electronic document of digital signing step 614 user.In response, in step 616, ATM prompting user provides the deterministic digital signature of accepting of further input expression user to represent as the intention of user's legal binding signature.To comprising the ATM of digital signature plate, this determinacy input comprises allows the user write his/her handwritten signature on the digital signature plate.The digital scanning of this handwritten signature then is integrated in the electronic document then just digital signing the document.

In order to respond the determinacy input of reception, ATM uses private cipher key digital signing this electronic document relevant with the accounts of finance that reads in step 618 from user's card.In case the document is by digital signing, it is just relevant with one or more digital certificates, comprises the digital certificate relevant with finance account.This digital certificate comprises user's Public key, and it can be used to the digital signature of authenticating electronic documents.In other embodiments, electronic document comprises sequence number and/or to entity, address or URL quote, and the digital certificate by their users can be extracted certifying digital signature.In certain embodiments, the certificate digital certificate of weighing into mechanism is published and signs the user's relevant with this electronic document digital certificate.

In case electronic document is by digital signing, ATM can send the OPADD of the electronic document of signature to one or more appointments in step 620.The OPADD of this appointment comprises that ATM extracts the original storage position of unsigned electronic document.The OPADD of this appointment comprises part shared network driver, its corresponding certain electronics " outbox ".The OPADD map network address of this appointment, e-mail address, database, URL maybe can receive any other external storage location or the communication system of electronic document.For example, in one embodiment, the OPADD of appointment comprises the URL of document process server.For example, if the corresponding loan for purchasing car of electronic document, the OPADD of appointment can be the document process server of lending money to the bank of user's buying car.

But the digital signature of the document processing server authenticating electronic documents.If signature is that effectively the document process server is determined the title of each side and the clause of address and loan with regard to the XML tag of analytical electron document.The process that the loan disposal system that this information then is integrated into bank is set up loan account and initialization necessity is collected user's payment.In other embodiments, the corresponding loan of the OPADD of appointment disposal system can make resell another bank or other entity of this loan safety.In other embodiments, the OPADD of appointment is to storing and/or handle any system of the electronic document of being signed.

In one embodiment, the OPADD of appointment is the configurable parameter in ATM.In other embodiments, the OPADD of appointment is determined from the parameter of electronic document by ATM.For example, electronic document may comprise XML tag, and it comprises the address information of the OPADD of relevant appointment.In user's the accounts of finance embodiment relevant with the numeric security deposit account, ATM will further store the copy of the electronic document of being signed into the user's relevant with user's accounts of finance numeric security deposit account.

In an embodiment, ATM is associated with certain side relevant with electronic document to the digital signature handling in step 622.Embodiment A TM can make the financial transaction disposal system for example the information of the relevant handling of main frame banking system or other server record to database, daily record, or notes are at once or delay processing.In one embodiment, ask for handling to the accounts of finance relevant with user's card.In another embodiment, ask for handling to the relevant account of the mechanism of preparing unsigned electronic document.For example, ATM can comprise configuration parameter to should be able to collection process the accounts of finance of expense.For example under the agential situation of automobile, this configuration parameter may comprise and the automobile commission merchant or the relevant account number of bank of offering a loan.In step 622, the ATM or digital signature service or the webserver relevant with this ATM can be communicated by letter with the financial transaction disposal system, and for example the main frame banking system is asked for handling to this account.In an embodiment, electronic document can comprise the account number that will be taken by collection process.For example electronic document can comprise disposal cost account XML tag.

In certain embodiments, ATM can also get in touch the financial transaction disposal system for example main frame banking system or other server authorize collection process to take certain account, send the electronic document signed OPADD then to appointment at step 618 digital signing the document or in step 620.If this account does not have the enough amount of money to come payment processes expense or it can not accept the payment processes expense, ATM can cancel the signature electronic document.ATM will then export visible message by the display screen of ATM and illustrate that this electronic document can not be by digital signing.

The memory location that the OPADD of appointment can be visited the tissue that should be able to be created this unsigned document.For example, with reference to the agential example of automobile, the OPADD of appointment comprises the network drive that can be visited by the financial manager.This manager then causes electronic document to be printed output so that can be to the hard copy of this electronic document of user.In other embodiments, ATM can be connected to printer and comprise the option of the hard copy of optional printing electronic document in operation.

By among some embodiment of one or more other mechanisms signature, ATM can comprise that step verifies that the signature of other mechanism just makes the user can the digital signing electronic document then before electronic document.For example in the agential example of automobile, financial manager elder generation digital signing loan for purchasing car ATM is then just visited this electronic document.The agential digital signature of automobile is made user's energy digital signing loan for purchasing car then by the ATM checking.Electronic document comprises the relevant digital certificate of automobile commission merchant for example with other mechanism in this embodiment.This electronic document also comprises the digital certificate of the certificate authority of the digital certificate of signing this other mechanism.

In front among the embodiment of Miao Shuing, before user's the accounts of finance card with user's numeric security deposit account, digital certificate, and/or private cipher key is correlated with.The method that provides the accounts of finance card to come the electronic document among the digital signing ATM is provided embodiment.For example, the credit card issuer for example bank many credit card account are arranged.Because it is high competitive that credit card business is tended to, so increase the credit card that the digital signature ability will provide additional excitation to carry to the user and use bank to issue to the credit card of bank-user.

The example of this described method comprises bank or other entity set-up personal digital certificate, and public/private cipher key is right, and/or the numeric security deposit account is for example credit card account or other accounts of finances of a plurality of accounts of finances that are pre-existing in.This personal digital certificate, public/private cipher key is right, and/or the numeric security deposit account is stored in and is associated by each accounts of finance of bank or digital signature service or network operation on one or more servers.

The synoptic diagram of the embodiment of Figure 18 display system 700, it can realize described method.System 700 comprises a plurality of banks 702,704 herein, or other accounts of finance.Each bank comprises a plurality of accounts of finances 706,708, for example credit card account.To among these accounts each, can there be digital signature service or the digital certificate of network entity 710 management in one or more storage servers 712 in bank, and public/private cipher key is right, and/or the numeric security deposit account.

The embodiment of digital signature service or network 710 comprises or can communicate by letter with host computer system 714.Host computer system can provide the service of a plurality of ATM 716 access number word signature networks 710.This service comprises that the example and the store electronic documents of the digital signature of electronic document arrive the numeric security deposit account.As previously discussed, the user of bank 702,704 will use their credit card or other card relevant with accounts of finance to cause ATM digital signing electronic document.The handling that obtains from the signature electronic document will be forwarded or impose the network of this digital signature of operation and at least one entity of bank or other card issuer.In one embodiment, handling will be shared between the network of operating this digital signature and bank or other card issuer.

Allow user's accounts of finance be used to the digital signing e-file in order to advertise, described embodiment method is included in the mark or the trade mark of dismissing the bank of putting card on the card, service marking, design, or mark illustrates that this card can be used for the digital signature electronic document.This sign can be for example trade mark/service mark of 710 of digital signature network of source indicator symbol.In addition, can be used to sign the ATM 716 of electronic document in order to make the easier location of user's energy, this ATM 716 can comprise or import the sign of coupling.Bank or other there is for example entity of credit card of the accounts of finance that is pre-existing in a large number, at present the embodiment of the method for describing comprises to the user and posts substituting credit card, and the latter comprises that mark for example indicates and illustrates that this card can be used to the digital signing electronic document.In one embodiment, the user uses in the past relevant with its accounts of finance PIN visit ATM so that the big shelves of digital signing electronics.In another embodiment, bank offers the user and uses independent password to visit the service of digital signature network.

In certain embodiments, ATM can cause new digital certificate to be used for signing electronic document for the user creates.For example, if the user does not have the digital certificate of issue in the past, public/private cipher key to and/or numeric security deposit account and smart card, portable computing, accounts of finance, credit card, and/or the numeric security deposit account is associated, this example ATM can offer customer digital certificate, public/private cipher key to and/or the numeric security deposit account.In certain embodiments, ATM makes the user can transmit the digital certificate of new establishment to smart card, portable storage media, portable computing, network storage location, or the memory location selected of other user or address are so that sign electronic document by example ATM or other digital signature software and device in the future.As below discussing, in certain embodiments, ATM will make the user can the related new digital certificate of creating, public/private cipher key to and/or the numeric security deposit account select or give user's card by the digital signature Web publishing to the user.

As for signature electronic document relevant expense, ATM can also be the establishment digital certificate, public/private cipher key to and/or numeric security deposit account and collection cost.As previously discussed, this expense can be to user's accounts of finance, the accounts of finance relevant in storage with ATM, or the accounts of finance relevant with the mechanism of hope signature electronic document imposed.For example, in the sight of the relevant signature electronic document of discussing in front with loan for purchasing car, ATM can cause the expense relevant with the establishment digital certificate to be associated with the entity that electronic document is provided, for example automobile commission merchant or the financial institution that offers loans.

The input media that described ATM embodiment points out the user to pass through ATM is imported relevant user's information, and the latter is integrated into and/or is associated with digital certificate.This information comprises user's title, address, and birthday.This information also comprises user's SSN (social security number), passport No., driver's driving license number, national identification card number, student's numbering, or other any and user-dependent exclusive number.It is right that the information that being used for of being provided produces digital certificate comprises that also password that the user provides or other numbering are used for creating or visit public/private cipher key, and this Public key just is integrated into digital certificate.

Produce digital certificate in order to quicken input information to ATM, ATM can be a digital certificate retrieval user information specific from the electronic document of intention with the ATM digital signing.For example, user in front signs in the sight of loan for purchasing car document, and the agential financial manager of automobile or other employee can import user's title, the address, SSN (social security number), birthday, driver's driving license number, and/or other user specific information is to the electronic document of corresponding loan.This information can be stored as the form of XML data or other computer-accessible relevant with electronic document.Make before the user signs electronic document at ATM, ATM can visit the customizing messages with the electronic document associated user.The information of visiting from electronic document can also be integrated in the digital certificate by ATM except directly being imported the ATM by the user.In certain embodiments, ATM can be by the output unit output user information specific of ATM.The accuracy that this ATM can point out the user to verify information is earlier just created digital certificate then.

In an embodiment, ATM causes user specific information to be forwarded to certificate authority, and it can issue the digital certificate of signature for the user.In certain embodiments, ATM transmits user specific information to the digital signature network of discussing in the past, storage server, and/or other server, it can form digital certificate and/or with the certificate authority interface of issue digital certificate.

In an embodiment, the digital signature network can further be differentiated in operation and the user specific information that is provided contrast and verify the user specific information that is provided by the service 720 of contact credit report or other User Information Database.If user specific information is invalid, and is discontinuous, or suspicious, this instance number word signature network will return representative refusal generation digital certificate and give user's message to ATM.This message will illustrate the reason of refusal.

The embodiment of ATM can further obtain additional information and comprise biostatistics input from user's digital certificate request, finger scan for example, the digital image of user's face, iris scan, hand scanning, or any input of other representative of consumer identity.This information also is integrated into and is associated with digital certificate.This information also is used to the checking user's of elder generation identity and just creates digital certificate then.

In certain embodiments, ATM will further point out the user input card, credit card for example, and smart card, the driver driving license, national I.D., or any other can be by the card of the card reader of ATM visit with the uniqueness of extracting user specific information.This user specific information comprises also that account number or other are stored in the card numbers, and it can be forwarded to the digital signature network, and the financial transaction disposal system is the main frame banking system for example, or other server is used to differentiate user's identity.In certain embodiments, ATM will further point out input media input password or the PIN relevant with this card that the user passes through ATM.ATM can be in operation by with digital signature network, main frame banking system, or card itself communication, password or PIN that checking is imported.

In certain embodiments, ATM will point out the user to provide input to illustrate whether the user wishes newly to create digital certificate, public/private cipher key to and/or the numeric security deposit account and with the user's of former existence accounts of finance for example credit card or bank card are associated.In this case, example ATM will point out the user to insert or brush desirable card by the card reader of ATM.The account number that reads can be forwarded to the digital signature network and be stored in the digital certificate of relevant user's new establishment from card, public/private cipher key to and/or the numeric security deposit account.This digital signature network will further be notified and block relevant accounts of finance, the user will be described with digital certificate, public/private cipher key to and/or the numeric security deposit account be associated with the account number of card.Financial institution then will issue neocaine and give the user, comprising the mark or the sign of this digital signature network.

The embodiment of ATM also points out subscriber-related user whether to wish the new digital certificate of creating, public/private cipher key to and/or the numeric security deposit account be associated with user-dependent other uniqueness card/numbering.For example, this card comprises user's social insurance card, driver's driving license card, the national ID card, and student ID card.In this case, example ATM will point out the user to insert or brush the card of the exclusive number that stores expectation on it by the card reader of ATM.The exclusive number that reads also will be forwarded to the digital signature network and be associated with the new digital certificate of creating of user in storage from card, public/private cipher key to and/or the numeric security deposit account.

In certain embodiments, the new digital certificate of creating, public/private cipher key to and/or the numeric security deposit account be not associated with the card/numbering of other uniqueness of accounts of finance or user, this digital signature network can be distributed to the number signature card and be used to sign the electronic document that electronic document in the future and visit are stored in user's numeric security deposit account.This digital signature card comprises the storage digital certificate that is associated with new establishment thereon, public/private cipher key to and/or the account number of the uniqueness of numeric security deposit account.In one embodiment, ATM can comprise the card dispensing apparatus, in case digital certificate is created, it can directly be exported the digital signature card and give the user.In another embodiment, the digital signature network is with the production of initialization digital signature card, and this card will be posted to user's address.

In case digital certificate, public/private cipher key to and/or the numeric security deposit account be created, example ATM will point out the user to use the private cipher key relevant with the new digital certificate of creating to sign electronic document.In an embodiment, wherein the related accounts of finance of user or other digital certificate or digital signature card that blocks/number new establishment are issued to the user, ATM will point out the user input media input password or PIN relevant with card by ATM, so that use future this card to sign electronic document in the numeric security deposit account that electronic document and/or visit be stored in new establishment.In the future, the user uses his/her credit card, digital signature card, or other and the new digital certificate of creating, public/private cipher key to and/or the relevant card of numeric security deposit account sign at same ATM or be connected to electronic document among other example ATM of instance number word signature network.As previously discussed, ATM embodiment will point out user's input password or the password relevant with card, then the electronic document that just makes the user can sign electronic document and/or visit digital safety deposit account with ATM.

As shown in figure 18, the embodiment of digital signature network further for example communicates by letter and makes the user can be from the computing machine of family or their digital certificate of other calculation element visit in internet 718 with common network, public/private cipher key to and/or the numeric security deposit account.The digital signature network further provide on the internet service for example digital signing electronic document and/or store electronic documents to the numeric security deposit account relevant with accounts of finance.For example, in one embodiment, digital signature network packet includes network server makes the user can import his/her accounts of finance number or other card/numbering and PIN or other password browser or other calculation element by PC.If the information of being imported is effectively, embodiment digital signature network makes the user can use the private cipher key relevant with the accounts of finance of importing number or other card/numbering to sign electronic document.This webserver further makes the electronic document of the storage server of Internet user's managed storage in digital signature network 710, for example watches, and copy, deletion and forwarding document are to other position and address.

Be used for operating automated transaction machine of the present invention and connect computing machine, the computing machine of the computer software of computer processor and server from various types of article loadings to correspondence.This computer software can comprise and from one or more article disk for example, CD, or load among the DVD etc.This software also is included in for example hard disk drive of article, tape, read-only memory device, or storage card.Other comprises that the article with the data representation of the instruction of mode operational computations machine described herein are suitable for operating automated transaction machine and relevant digital signature service, network and server and system according to embodiment described herein equally.

The embodiment of automated banking machine described herein and system is with reference to concrete component software, function and feature in addition description.Other embodiment of this invention can comprise other or different component softwares, Digital Signature Algorithm, and encrypted component provides similar function.

Therefore new automated transaction machine digital signature system and method finished one or more previously described targets, eliminated the difficulty that device before using and system are run into, and solved problem and obtained the result of expectation described herein.

In the description in front, the specific term of use is for briefly, clear and definite and easy to understand, but implicit unnecessary restriction, because these terms are for purposes of illustration, its intention is to analyze widely.In addition, description herein and explanation are forms by way of example, and the present invention is without limits in detail illustrated and that describe.

In claims, any mode that is described as carrying out a kind of function all is appreciated that any way that comprises known to the those of ordinary skills that can carry out described function, and feature shown in being not limited to here and result or only be equal to it.Therefore, the description of contained exemplary embodiment should not be considered to limit the invention to feature described here in the summary.

Mode of the present invention is constructed and operated to feature of the present invention, discovery and the principle described, and advantage that reaches and useful results; New and useful structure, device, element, setting, partly, combination, system, equipment, operation, method and concern as described in the appended claims.

Claims

1. method comprises:

A) from card, read accounts of finance number by the operation card reader arrangement;

B) send the accounts of finance that from card, reads number to the server that is associated with the digital signature network, accounts of finance that wherein said server can cause private cipher key and accessed accounts of finance to be associated with storing reading from card with response number and accounts of finance relevant; And

C) cause electronic document by digital signing with the response private cipher key relevant with accounts of finance.

2. method according to claim 1 also comprises:

D) the numeric security deposit account of visit corresponding accounts of finance number; And

E) causing electronic document to be associated with the numeric security deposit account is stored in the remote data storage.

3. method according to claim 1 also comprises:

D) receive electronic document from described remote data storage; And

E) send described electronic document to the external storage location that is different from remote data storage.

4. method according to claim 1 wherein also comprises before in step (c):

D) visual representation of the display device of the automated transaction machine by comprising ATM (Automatic Teller Machine) output electronic document, wherein said automated transaction machine comprises card reader arrangement.

5. method according to claim 4 wherein also comprises before in step (c):

E) make the content of user's modification electronic document be input at least one input media of automated transaction machine by at least one.

6. method according to claim 4 wherein also comprises before in step (c):

E) catch handwritten signature scanning by the digital signature plate of automated transaction machine; And

F) additional described handwritten signature scans described electronic document.

7. method according to claim 1 wherein also comprises before in step (c):

C) the prompting user imports at least one and imports the affirmation of representing the signature of the corresponding legal binding of conscious usefulness digital signing electronic document; And

Wherein step (c) is performed with response and receives at least one input.

8. method according to claim 7 wherein also comprises afterwards in step (e):

F) at least one input media by automated transaction machine receives at least one input, and wherein said automated transaction machine comprises described card reader arrangement; And

G) cause at least one input record and described accounts of finance number to be associated with storing.

9. method according to claim 1 is wherein at the described accounts of finance of step (a) number corresponding credit number.

10. method according to claim 1 wherein also comprises before in step (c):

D) at least one input media by automated transaction machine receives at least one input, and wherein said automated transaction machine comprises card reader arrangement; And

E) at least one input of being received of the digital signature network information correspondence of send server association, wherein said server can cause being allowed to visiting the determining of password of the corresponding relevant private cipher key of input that private cipher key received with response.

11. method according to claim 10 is wherein in the corresponding biometric data that receives by the biostatistics reading device on the automated transaction machine of at least one input of step (d).

12. method according to claim 10, wherein at least one imports the PIN of corresponding accounts of finance in step (d), and wherein said PIN is by the keypad input of automated transaction machine.

13. method according to claim 1 also comprises:

D) cause described electronic document to be coupled with Digital Time-stamp.

14. a computer-readable medium that carries instruction, it can cause at least one computing machine in automated transaction machine to cause automated transaction machine to realize the step of the method described in the claim 1.

15. a method comprises:

A) visit electronic document with automated transaction machine;

B) cause digital certificate to be produced, wherein said digital certificate comprises and the user's of identification automated transaction machine the information of identity that wherein said digital certificate comprises the private cipher key corresponding with Public key.

C) display screen by automated transaction machine shows the visual representation of electronic document;

D) the prompting user imports at least one and imports the affirmation of representing the signature of the corresponding legal binding of conscious usefulness digital signing electronic document;

E) input media by at least one automated transaction machine receives at least one input;

F) produce digital signature to respond at least one input and private cipher key for described electronic document; And

G) cause described digital signature and digital certificate to append to described electronic document.

16. method according to claim 15 wherein also comprises before in step (b): the partial information at least of h) retrieving relevant user identity from electronic document.

17. method according to claim 16 also comprises:

H) cause the numeric security deposit account in remote data storage, to be set up, comprise digital certificate and private cipher key that storage is relevant with the numeric security deposit account for the user.

18. method according to claim 17 also comprises:

I) cause the copy of the electronic document of digital signing to be stored and be associated with the numeric security deposit account.

19. method according to claim 15 is wherein accessed from the memory location of network-accessible at the described electronic document of step (a).

20. method according to claim 15 also comprises:

H) memory location that copies network-accessible to of the digital signing of transmission electronic document.

21. method according to claim 15 also comprises:

H) network address that copies the electronic document appointment to of the digital signing of transmission electronic document.

22. method according to claim 15 also comprises:

H) network address that copies described automated transaction machine appointment to of the digital signing of transmission electronic document.

23. method according to claim 15 also comprises:

H) cause the digital signature handling by communicating by letter with the financial transaction disposal system to account's collection of appointment in electronic document.

24. method according to claim 15 also comprises:

H) cause the digital signature handling by communicating by letter with the financial transaction disposal system to account's collection of automated transaction machine appointment.

25. method according to claim 15 also comprises:

H) cause the Digital Time-stamp of electronic document to be created; And

I) cause described Digital Time-stamp to be affixed to electronic document.

26. method according to claim 15, wherein said automated transaction machine comprises ATM (Automatic Teller Machine).

27. computer-readable medium carrying instruction can cause at least one computing machine in automated transaction machine to cause automated transaction machine to realize the step of the method described in the claim 15.

28. an equipment comprises:

At least one computer processor; And

At least one data-carrier store can be connected to computer processor, wherein said at least one data-carrier store comprises a plurality of numeric security deposit accounts that are stored in wherein, related at least one private cipher key of each numeric security deposit account wherein, wherein said computer processor can be communicated by letter with a plurality of ATM, and wherein said computer processor can respond at least one ATM to be caused producing digital signature with a response and a private cipher key that digital safety deposit account is relevant for electronic document.

29. equipment according to claim 28, wherein said computer processor can receive electronic document from least one ATM, wherein said computer processor can store electronic documents to a data-carrier store that digital safety deposit account is relevant.

30. equipment according to claim 29, wherein said computer processor can and send electronic document any one to a plurality of ATM from data-carrier store retrieve electronic document.

31. equipment according to claim 29, wherein said computer processor can encryption and decryption be stored in the electronic document of at least one data-carrier store to respond the key that receives from least one ATM.

32. equipment according to claim 28, wherein each numeric security deposit account is associated with accounts of finance number, wherein said computer processor can be visited the message that receives from least one ATM with response with the private cipher key of a digital safety deposit account association, comprising the accounts of finance correspondence accounts of finance relevant with digital safety deposit account number.

33. equipment according to claim 32, wherein said at least one accounts of finance number corresponding credit number.

34. equipment according to claim 28, wherein each numeric security deposit account is associated with at least one digital certificate, and wherein said computer processor can cause digital signature and at least one digital certificate that is associated with a digital safety deposit account to append to electronic document.

35. equipment according to claim 28, at least one data storer can be safeguarded and store to wherein said computer processor, the access log relevant with each numeric security deposit account.

36. equipment according to claim 28, wherein at least one ATM comprises ATM (Automatic Teller Machine), and wherein said computer processor can be communicated by letter with the financial transaction disposal system and be caused being authorized to from ATM (Automatic Teller Machine) distribution cash.

37. can causing new numeric security deposit account to be created in data-carrier store responding to come, equipment according to claim 28, wherein said computer processor communicates by letter with described at least one ATM.

38. according to the described equipment of claim 37, wherein said computer processor can cause new private cipher key and corresponding Public key to be produced with response communicating by letter with at least one ATM, and wherein said computer processor can be associated with storing private cipher key with new numeric security deposit account.

39. according to the described equipment of claim 38, the storage that wherein said computer processor can cause digital certificate to be produced and be associated with new numeric security deposit account, wherein said digital certificate comprises Public key.

40. according to the described equipment of claim 39, wherein said computer processor can receive accounts of finance number from least one ATM, wherein said computer processor can be stored and new numeric security deposit account associated finance account number.

41. according to the described equipment of claim 40, wherein said computer processor can receive the password input from least one ATM, wherein said computer processor can be stored the password input relevant with new numeric security deposit account.

42. equipment according to claim 28, wherein said computer processor can receive the one-way hash function table from least one ATM, and wherein said computer processor can cause digital signature to be produced with response one-way hash function table and private cipher key.

43. equipment according to claim 28, wherein said computer processor can cause second digital signature of electronic document to be produced the private cipher key that is not associated with a described digital safety deposit account with response.

44. it is that electronic document produces digital signature that equipment according to claim 28, wherein said computer processor can cause the digital signature handling to cause with response to the accounts of finance collection.

45. according to the described equipment of claim 44, wherein said computer processor can receive the information of relevant accounts of finance from described at least one ATM.

46. equipment according to claim 28, wherein said computer processor can cause Digital Time-stamp to be produced and append to electronic document.

47. a method comprises:

A) receive request from automated transaction machine and come digital signing by the electronic document of automated transaction machine visual display, wherein said request comprises that account number is associated with the numeric security deposit account;

B) private cipher key that visit is relevant with the numeric security deposit account is to respond described account number;

C) produce the digital signature of electronic document to respond described private cipher key; And

D) cause digital signature to be affixed to electronic document.

48., also comprise according to the described method of claim 47:

E) electronic document of storage digital signing copies the data-carrier store that is associated with the numeric security deposit account to.

49. according to the described method of claim 47, wherein at the corresponding accounts of finance of the described account number of step (a) number.

50., also comprise according to the described method of claim 47:

E) from automated transaction machine distribution cash.