Digital signatures have been provided for non-repudiation wherein the user is associated with a given set of data and the signer can not deny participation with the signature. A digital signature associates a digital or numerical code with a set of electronic data. The code is generated using a private key that uniquely identifies the person that is approving the contents of the data.
To create a digital signature, an encryption process, such as DES or Triple DES for example, is utilized with a private key to encrypt a hash of the data set. The private key is associated with a given user. Thereafter, a public key which corresponds to the private key is utilized to decrypt the encrypted data to arrive at the original data set.
Digital signatures provide security benefits of identification and authentication plus data integrity to arrive at non-repudiation. The identity of the signing person of a transaction is known and can be proven to a third party. The signature is linked to the user. The signature is also linked to the data being signed such that if the data is changed, the signature is invalidated. For non-repudiation, the signing party can not deny having signed the transaction inasmuch as the signature is linked to the user and the data.
Previous paper-oriented tasks such as vendor payment were processed by routing paper around the organization. Approvals were hand-written signatures on paper. However, the aims of arriving at substantially paperless initiatives and improving the practice of obtaining authorization have resulted in wider acceptance and usage of digital signatures.
There exists a need to provide improved storage and verification systems utilizing digital signatures.