Electronic deposit box system

• US 20020046188A1
• Filed: 06/12/2001
• Published: 04/18/2002
• Est. Priority Date: 06/12/2000
• Status: Active Grant

• Current Assignee: BiP Solutions Ltd. (B.I.P. (Holdings) Ltd.)
• Original Assignee: BiP Solutions Ltd. (B.I.P. (Holdings) Ltd.)
• Inventors: Burges, Ronald Llewellyn, Smith, Scott Allan, Groundwater, David Sean
• Granted Patent: US 7,441,277 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

There is disclosed a secure electronic deposit box system 25 and a related method of controlling access to electronic information, particularly suitable for use in electronic tendering or the like. The method comprises the steps of providing:

at least one user apparatus 5;

a remote server 10;

a communications link 15 between the at least one user apparatus 5 and the remote server 10;

allocating disk storage space 20 on the remote server 10 unique to the at least one user apparatus 5;

allowing the at least one user access to the storage space 20 via secure encryption of data sent to/from the user apparatus 5 and the server 10 and username/password login to the server. By this arrangement, the at least one user apparatus 15 can send data in the form of documentation to the disk storage space 20, and can also access the documentation on the disk storage space 20.

Claims

1. A method of controlling access to electronic information comprising the steps of providing:

at least one user apparatus;

a remote server;

a communications link between the at least one user apparatus and the remote server;

allocating disk storage space on the remote server unique to the at least one user apparatus;

allowing the at least one user access to the storage space via username and password login to the server and via secure encryption of data sent to or from the user apparatus from or to the server.

2. A method of controlling access to electronic information as claimed in claim 1, wherein the secure encryption comprises:

transactions between user and server being encrypted using SSL (Secure Socket Layer); and

transactions involving access to the storage space being further protected by a requirement for a user to present a digital certificate.

3. A method of controlling access to electronic information as claimed in claim 2, wherein the digital certificate is required whenever the user attempts to read or write from or to the storage space.

4. A method of controlling access to electronic information as claimed in claim 3, wherein data sent by a user apparatus is encrypted by public key in the case of SSL transactions and additionally by private key via presentation of a digital certificate in the case of accessing the data storage space.

5. A method of controlling access to electronic information as claimed in claim 4, wherein data received by the server is decrypted via private key in the case of SSL transactions and by public key in the case of digital certificate verification accessing the data storage space.

6. A method of controlling access to electronic information as claimed in claim 1, wherein the method further comprises the additional step of allowing at least one further user access to the data storage space.

7. A method of controlling access to electronic information as claimed in claim 6, wherein each said at least one further user is allowed access to the data storage space upon presentation of a further digital certificate.

8. A method of controlling access to electronic information as claimed in claim 7, wherein the further users access t the data storage space can be managed by the at least one user with regard to times and dates when the at least one further user can write to and/or read from the data storage space.

13. A computer program product adapted for use in the method of any claims 1 to 8, 10 and 11.

14. A computer program product when used in the method of any of claims 1 to 8, 10 and 11.

15. A computer program adapted for implementation of the method of any of claims 1 to 8, 10 and 11.

16. A computer or computer network when loaded with the computer program of claim 15.

9. An electronic safety deposit system comprising:

at least one user apparatus;

a remote server;

a communications link between the at least one user apparatus and the remote server;

disk storage space allocated on the remote server unique to the at least one user apparatus; and

means for allowing the at least one user access to the storage space via username and password login and via secure encryption of data sent to or from the user apparatus from or to the server.

10. A method of providing an account-based Internet/Intranet service which allows an at least one account holder to:

create at least one secure electronic deposit box on a centralised server in which a box or boxes can be stored documentation in a secure environment;

manage timeframes for invited participants to access said documentation and or for the Invited Participant to upload to the centralised server further documentation.

11. A method as claimed in claim 10, wherein the method further allows the at least one account holder to track activity relating to each said at least one electronic deposit box.

12. A secure electronic deposit or tender box system comprising an account-based Internet or Intranet server system with a worldwide Web (HTTP) interface for uploading and downloading documentation onto a centralised server in a secure environment, using digital certificates to ensure data confidentiality, data integrity, data authentication, non-repudiation and proof of origin and receipt.