Method and system for verifying the authenticity and integrity of files
transmitted through a computer network. Authentication information is
encoded in the filename of the file. In a preferred embodiment,
authentication information is provided by computing a hash value of the
file, computing a digital signature of the hash value using a private
key, and encoding the digital signature in the filename of the file at a
predetermined position or using delimiters, to create a signed filename.
Upon reception of a file, the encoded digital signature is extracted from
the signed filename. Then, the encoded hash value of the file is
recovered using a public key and extracted digital signature, and
compared with the hash value computed on the file. If the decoded and
computed hash values are identical, the received file is processed as
authentic.