Technical Reports
HPL-2008-177
Click here for full text:
A content integrity service for digital repositories
Haber, Stuart; Kamat, Pandurang; Kamineni, Kiran
HP Laboratories
HPL-2008-177
Keyword(s): integrity, longevity, archive, repository
Abstract: We present a "content integrity service" for long- lived digital documents, especially for objects stored in digital repositories. The goal of the service is to demonstrate that information in the repository is authentic and has not been unintentionally or maliciously altered, even after its bit representation in the repository has undergone one or more transformations. We describe our design for an efficient, secure service that achieves this, and our implementations of two prototypes of such a service that we developed, most recently for DSpace. Our solution relies on one-way hashing and digital time- stamping procedures. Our service applies not only to transformations to archival content such as format changes, but also to the introduction of new cryptographic primitives, such as the new one-way hash function family that will be chosen by NIST in the competition that was recently announced [10]. In the face of recent attacks on hash functions, this feature is absolutely necessary to the design of an integrity- preserving system that is meant to endure for decades.
6 Pages
Additional Publication Information: Published and presented at OR 2008, 3rd International Conference on Open Repositories, Southampton, UK, April 2008.
External Posting Date: October 21, 2008 [Fulltext]. Approved for External Publication
Internal Posting Date: October 21, 2008 [Fulltext]