Method and system for the supply of data, transactions and electronic voting

• US 10,135,797 B2
• Filed: 08/16/2017
• Issued: 11/20/2018
• Est. Priority Date: 11/06/2001
• Status: Expired due to Term

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Dare, Peter R., Owlett, John, Tyabji, Imran F.
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US15/678,749
• Publication Number:
  US 20170366511A1
• Time in Patent Office: 461 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity'"'"'s electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity'"'"'s electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Claims

1. A system for transfer of ownership of electronic property, comprising:

a processor and a memory connected to the processor, wherein the memory includes program instructions that, when executed by the processor, cause the processor to perform a method, the method comprising;

encrypting an electronic property using a session key, wherein the electronic property includes an identification link, wherein the identification link is generated from an identifier of an empowerment certificate and a random number;

encrypting the session key with a public key of a second entity;

signing the electronic property with an electronic signature of a first entity, wherein the signing the electronic property comprises encrypting the electronic property including the identification link with a private key of a first entity;

generating the empowerment certificate signed with another electronic signature of the first entity and including an indication of the second entity and an indication of data which is to be supplied to the second entity from a source or the data itself, wherein the empowerment certificate includes the identification link and the encrypted session key; and

sending the empowerment certificate and the encrypted electronic property, including the identification link, to a second computing device.

2. The system as claimed in claim 1, wherein the identification link is a bit-stream generated from a serial number of the empowerment certificate.

3. The system as claimed in claim 1, wherein the empowerment certificate includes an indicated validity period which begins earlier than a time of generation of the empowerment certificate.

4. The system as claimed in claim 3, wherein the empowerment certificate has a second validity period relating to a period for a duration of which rights in the electronic property are transferred.

5. The system as claimed in claim 1, further comprising a second digital certificate signed with an electronic signature by a third entity and including:

an indication of the first entity;

an indication of the second entity;

an indication of the third entity; and

data to be supplied.

6. The system as claimed in claim 5, wherein the data to be supplied includes the public key of a private/public key pair of the first entity.

7. The system as claimed in claim 1, wherein the electronic property is configured to be tracked by each of the first entity and the second entity each having an account identified by the electronic property wherein each of the accounts are configured to be incremented or decreased by a unit upon transfer of the electronic property.

8. The system as claimed in claim 7, wherein the account is identified by a hash of the electronic property.

9. The system of claim 1, wherein the electronic property is selected from the group consisting of music, pictures and multi-media works.

10. The system of claim 1, wherein the empowerment certificate is configured to transfer ownership of the electronic property over a computer network from the first entity to the second entity.

11. A non-transitory computer readable storage medium comprising instructions that, when executed by a computing device, cause the computing device to perform the steps of:

encrypting an electronic property using a session key, wherein the electronic property includes an identification link, wherein the identification link is generated from an identifier of an empowerment certificate and a random number;

encrypting the session key with a public key of a second entity;

signing the electronic property with an electronic signature of a first entity, wherein the signing the electronic property comprises encrypting the electronic property including the identification link with a private key of a first entity;

generating the empowerment certificate signed with another electronic signature of the first entity and including an indication of the second entity and an indication of data which is to be supplied to the second entity from a source or the data itself, wherein the empowerment certificate includes the identification link and the encrypted session key; and

sending the empowerment certificate and the encrypted electronic property, including the identification link, to a second computing device.

12. The non-transitory computer readable storage medium of claim 11, wherein the identifier of the empowerment certificate is a serial number of the empowerment certificate.

13. The non-transitory computer readable storage medium of claim 11, wherein the empowerment certificate has a validity period which begins earlier than a time of generation of the empowerment certificate.