Secure electronic transactions using a trusted intermediary with non-repudiation of receipt and contents of message

• US 20010037453A1
• Filed: 06/27/2001
• Published: 11/01/2001
• Est. Priority Date: 03/06/1998
• Status: Abandoned Application

• Current Assignee: Chen Hui Wang, Douglas Scott Shoupp, Michael Robert Cantone, Todd Jay Mitty
• Original Assignee: Chen Hui Wang, Douglas Scott Shoupp, Michael Robert Cantone, Todd Jay Mitty
• Inventors: Cantone, Michael Robert, Mitty, Todd Jay, Shoupp, Douglas Scott, Wang, Chen Hui
• Application Number:
  US09/893,935
• Publication Number:
  US 20010037453A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 51/23 Reliability checks, e.g. acknowledgments or fault reporting
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Secure electronic transactions using a trusted intermediary with non-repudiation of receipt and contents of message. A system of, and method for, securely transmitting a package from a sender to a recipient, via an intermediary, are described, as is a novel data arrangement, stored in a computer-readable medium. A sender encrypts the message to form an encrypted inner envelope. A waybill is formed that among other things identifies the recipient as the destination and includes information indicating various levels of services desired, e.g., electronic notarization. The waybill and inner envelope are used to form an encrypted outer envelope that is addressed to a trusted intermediary. The intermediary receives the package and decrypts the outer envelope. It is unable to decrypt the inner envelope, due to the keys employed during encryption. The service information is processed, and the package is used to form a second package addressed to the recipient. The recipient decrypts the package and confirms receipt thereof, using a digest of the message. In this way, receipt and opening of the message cannot be properly repudiated by the recipient. An extra level of encryption to form an outer envelope from the intermediary to the recipient may be included, and the various envelopes and confirmation digests may be signed so that the contents and identities may be authenticated.

Claims

1. A system for use with a communication network to transmit a message thereover from a sender to a recipient, via an intermediary, such that the recipient may not repudiate receipt thereof, the system comprising:

the sender having logic to form a version of the message and to cause the version to be transmitted on the communication network to the intermediary;

the intermediary having

logic to receive the message and to cause a new version to be transmitted to the recipient, the new version of the message containing the message;

the recipient having

logic to receive the new version of the message and, in response thereto, to generate an informational value that is uniquely indicative of the message received by the recipient and to include the uniquely indicative value in a confirmation message, and

logic to transmit the confirmation message to an entity for storage and retrieval thereof, such that the value may be retrieved to prove that the recipient received the message represented by the uniquely indicative value.

2. The system of

claim 1

wherein the logic to generate an informational value that is uniquely indicative of the message forms a digitally signed digest of the message.

3. The system of

claim 2

wherein the version of the message includes inner envelopedData, decryptable by the recipient, the core contents of the inner envelopedData being signedData, the core contents of the signedData being the message;

and

wherein the logic to receive and generate includes logic to decrypt the inner envelopedData to obtain the signedData and logic to use the signedData to authenticate the contents of the message and that the message originated from the sender.

4. The system of

claim 3

wherein the logic to form a version of the message and to cause the version to be transmitted on the communication network includes

logic to form outer envelopedData, decryptable by the intermediary, the contents of the outer envelopedData being signedData, the contents of which include the inner envelopedData;

logic to address the version, having inner and outer envelopedData, to the intermediary;

wherein the intermediary includes

logic to decrypt the outer envelopedData to recover the signedData and to authenticate the contents of the outer envelopedData by using the signedData;

logic to form a new outer envelopedData, decryptable by the recipient, the contents of the new outer envelopedData including the inner envelopedData; and

logic to transmit to the recipient the combination of the inner envelopedData and the new outer envelopedData;

wherein the logic to receive and generate includes logic to decrypt the outer envelopedData to recover the inner envelopedData.

5. The system of

claim 4

wherein the logic to generate an informational value that is uniquely indicative of the message received by the recipient includes

logic to form a digest of the decrypted message and to construct signedData, the core content of which is the digest;

and

logic to construct envelopedData, the contents of which include the signedData; and

wherein the entity to which the confirmation message is transmitted is the intermediary.

6. The system of

claim 4

wherein the logic to form a version of the message an to cause the version to be transmitted includes logic to include information identifying the recipient and another recipient as destinations of the information,

wherein the intermediary further includes

logic to process the decrypted outer envelope to determine the destinations;

logic to transmit to the other recipient the combination of the inner envelope and the new outer envelope, and

logic to determine when the recipient and the other recipient have responded with confirmation messages.

7. The system of

claim 6

wherein the intermediary further includes logic to send a second confirmation message to the sender when the recipient and other recipient have responded.

8. A method of transmitting a message from a sender to a recipient, via an intermediary, such that the recipient may not repudiate receipt thereof, the method comprising the steps of:

(a) forming a version of the message and causing the version to be transmitted on the communication network to the intermediary;

(b) the intermediary receiving the version of the message and sending a new version of the message to the recipient;

(b) the recipient receiving the version of the message and, in response thereto, generating an informational value that is uniquely indicative of the message received by the recipient;

(c) including the uniquely indicative value in a confirmation message, and

(d) transmitting the confirmation message to an entity for storage and retrieval thereof, such that the value may be retrieved to prove that the recipient received the massage represented by the uniquely indicative value.

9. The method of

claim 8

wherein step (b) forms a digitally signed digest of the message.

10. The method of

claim 9

wherein step (a) creates the version of the message to include inner envelopedData, decryptable by the recipient, the core contents of the inner envelopedData being signedData, the core contents of the signedData being the message;

and

wherein step (b) decrypts the inner envelopedData to obtain the signedData and logic to use the signedData to authenticate the contents of the message and that the message originated from the sender.

11. The method of

claim 10

wherein step (a)

forms outer envelopedData, decryptable by an intermediary, the contents of the outer envelopedData being signedData, the contents of which include the inner envelopedData;

addresses the version, having inner and outer envelopedData, to the intermediary;

wherein the method further includes the steps of the intermediary

decrypting the outer envelopedData to recover the signedData and to authenticate the contents of the outer envelopedData by using the signedData;

forming a new outer envelopedData, decryptable by the recipient, the contents of the new outer envelopedData including the inner envelopedData; and

transmitting to the recipient the combination of the inner envelopedData and the new outer envelopedData;

wherein step (b) decrypts the outer envelopedData to recover the inner envelopedData.

12. The method of

claim 11

wherein step (b)

forms a digest of the decrypted message and to construct signedData, the core content of which is the digest;

and

constructs envelopedData, the contents of which include the signedData; and

wherein the entity to which the confirmation message is transmitted is the intermediary.

13. The method of

claim 11

wherein step (a) include information identifying the recipient and another recipient as destinations of the information,

wherein the intermediary further

processes the decrypted outer envelope to determine the destinations;

transmits to the other recipient the combination of the inner envelope and the new outer envelope, and

determines when the recipient and the other recipient have responded with confirmation messages.

14. The method of

claim 13

wherein the intermediary

sends a second confirmation message to the sender when the recipient and other recipient have responded.

15. An arrangement of data stored in a computer-readable medium for providing a confirmation of receipt and of the contents of the message so that the recipient may not repudiate receipt thereof, the stored data arrangement comprising:

a multipart message, one part of which includes a digest of the received message and a digital signature thereof, wherein the multipart message is encrypted.

16. The stored data arrangement of

claim 15

wherein another part of the multipart message includes a computer-readable code, representative of the confirmation results, and wherein yet another part of the multipart message includes a human-readable text message, representative of the confirmation results.