Paradigms for verification of authorization at source of electronic documents in an integrated environment

Abstract

Verification of correct authorization of an electronic document at its source is as essential as the more familiar requirement of authentication, and of increasing importance. This verification is a relatively new explicit requirement (1990) for electronic documents. Currently any checks of authorization at source are done by human elements in the receiving enterprise. Automated technology will force changes to current message processing methods to include verification of authorization at source in order to prevent fraud by esoteric attackers. This paper explains the necessity for verification of authorization at source, proposes and compares paradigms based on audit principles used with paper documents, and examines common problems of privacy and disclosure, and overheads on both sender and receiver.