Person-centric account-based digital signature system

• US 20030115151A1
• Filed: 02/03/2003
• Published: 06/19/2003
• Est. Priority Date: 08/04/2000
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Wheeler, Lynn Henry, Wheeler, Anne M.
• Granted Patent: US 6,978,369 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

In a method of managing a database of existing accounts (214) for account holders (202), each account holder (202) has multiple accounts with one or more account authorities (212) for use of a single device with multiple accounts, with each account of each account holder being associated with a public key of a public-private key pair of that accuont holder. A record of information pertaining to all accounts of a particular account holder is maintained in a central location by a central key authority. The information for that account includes the public keys of that account holder. The central key authority transfers information from the record for an account holder to a new account authority for which that account holder desires to establish a new account; the central key authority also receives information from account authorities for inclusion in the record centrally maintained for that account holder.

Claims

1. A method of communicating electronically over a communications medium regarding accounts, comprising the steps of:

(a) for a first account,

(i) maintaining information pertaining to the first account in an account database such that the information is retrievable based on a first unique identifier,

(ii) associating a public key of a public-private key pair with the first unique identifier,

(iii) generating a digital signature for an electronic message using a private key of the public-private key pair, the electronic message including an instruction and the first unique identifier,

(iv) authenticating the electronic message using the public key associated with the information identified by the first unique identifier, and

(v) upon the successful authentication of the electronic message, executing the instruction with respect to the first account represented by the information that is identified by the first unique identifier; and

(b) for a second account,

(i) maintaining information pertaining to the second account in an account database such that the information is retrievable based on a second unique identifier,

(ii) associating the same public key that is associated with the first account with the second unique identifier,

(iii) generating a digital signature for an electronic message using the private key of the public-private key pair, the electronic message including an instruction and the second unique identifier,

(iv) authenticating the electronic message using the public key associated with the information identified by the second unique identifier, and

(v) upon the successful authentication of the electronic message, executing the instruction with respect to the second account represented by the information that is identified by the second unique identifier.

2. The method of claim 1, wherein each account database is maintained by an account authority.

3. The method of claim 2, wherein each account database is maintained by a different account authority.

4. The method of claim 2, wherein both account databases are maintained by the same account authority.

5. The method of claim 2, wherein each said step of generating a digital signature for an electronic message is performed by a device of an account holder, the device including the private key of the public-private key pair.

6. The method of claim 5, wherein the account holder communicates with an account authority by sending the respective electronic message and digital signature in an electronic communication (“

EC”

) to the account authority.

7. The method of claim 6, wherein the account holder sends a respective EC directly to an account authority.

8. The method of claim 7, wherein the device includes each unique identifier with which the public key of the device is associated.

9. The method of claim 6, wherein the device communicates with the communications medium through a device interface.

10. The method of claim 9, wherein the device interface includes each unique identifier and the identity of each account authority with which the public key of the device is associated.

11. The method of claim 10, wherein the device further includes the identity of each account authority with which an account is maintained.

12. The method of claim 6, wherein the account holder sends a respective EC directly to an intermediate party, and the intermediate party communicates the electronic message and digital signature to an account authority.

13. The method of claim 12, wherein each said step of executing the instruction with respect to an account is performed by an account authority.

14. The method of claim 13, wherein an additional instruction is communicated to the intermediate party by the account holder.

15. The method of claim 14, wherein the intermediate party executes the additional instruction upon successful execution by the account authority of the instruction with respect to the account.

16. The method of claim 14, wherein the additional instruction is sent in a separate EC from the account holder to the intermediate party.

17. The method of claim 14, wherein the additional instruction is included in the respective EC sent from the account holder to the intermediate party.

18. The method of claim 17, wherein the additional instruction is removed by the intermediate party from the respective EC before being forwarded to the account authority.

19. The method of claim 1, wherein a said step of executing an instruction is performed based solely on the successful authentication of the electronic message.

20. The method of claim 1, wherein execution of an instruction with respect to an account comprises communicating a balance of the account.

21. The method of claim 1, wherein execution of an instruction with respect to an account comprises debiting the account by a specified amount.

22. The method of claim 1, wherein execution of an instruction with respect to an account comprises crediting the account by a specified amount.

23. The method of claim 1, wherein execution of an instruction with respect to an account comprises transferring funds to another account.

24. The method of claim 1, wherein execution of an instruction with respect to an account comprises granting access to a database.

25. The method of claim 1, wherein execution of an instruction with respect to an account comprises granting access to a physical location such as a room, building, parking deck, and web site.

26. The method of claim 1, wherein execution of an instruction with respect to an account comprises granting access to a data transmission such as pay per view, music download, and web broadcast.

27. The method of claim 1, wherein execution of an instruction with respect to an account comprises providing a product.

28. The method of claim 1, wherein execution of an instruction with respect to an account comprises providing a service.

29. The method of claim 1, wherein execution of an instruction with respect to an account comprises making a monetary payment from the account.

30. The method of claim 1, wherein execution of an instruction with respect to an account comprises transferring something of monetary value from the account.

31. The method of claim 1, wherein execution of an instruction with respect to an account comprises transferring a security from the account.

32. The method of claim 1, wherein execution of an instruction with respect to an account comprises authorizing a charge to the account.

33. The method of claim 1, wherein execution of an instruction with respect to an account comprises transferring information from the account.

39. The method of claims 1 or 34, further comprising retrieving from an account database the public key associated with the unique identifier of the electronic message.

40. The method of claims 1 or 34, further comprising communicating notice of a rejection of the electronic message.

41. The method of claims 1 or 34, wherein the public key associated with the unique identifier in a message is included in the message.

42. The method of claims 1, 34, 35, or 36, wherein a unique identifier comprises an associated public key.

43. The method of claims 1, 34, 35, or 36, wherein a unique identifier comprises an account number of an account.

44. The method of claims 1 or 35, wherein the information includes an account number.

45. The method of claims 1 or 35, wherein the information includes a current balance for an account.

46. The method of claims 1 or 35, wherein the information includes an available credit for an account.

47. The method of claims 1 or 35, wherein the information includes a list of associated accounts.

48. The method of claims 1 or 34, further comprising the step of composing the electronic message external to a device possessing the private key used to generate the digital signature.

49. The method of claim 48, further comprising the step of calculating a hash value for the electronic message external to the device.

50. The method of claim 48, further comprising the step of inputting the electronic message into the device for generation of the digital signature.

51. The method of claims 1 or 34, further comprising the step of composing an electronic message within a device possessing the private key used to generate a digital signature.

52. The method of claim 51, further comprising the step of calculating a hash value for the electronic message within the device.

53. The method of claims 1 or 35, wherein the information includes the name of an account holder.

54. The method of claims 1 or 35, wherein the information includes the address of an account holder.

55. The method of claims 1 or 35, wherein the information includes the social security number of an account holder.

56. The method of claims 1 or 35, wherein the information includes the tax identification number of an account holder.

57. The method of claims 1 or 35, wherein the information regards a device possessing the private key used to generate a digital signature of an electronic message.

58. The method of claims 1 or 35, wherein the information includes security characteristics of a device possessing the private key used to generate a digital signature of an electronic message.

59. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a personal computer.

60. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a cell phone.

61. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a PDA.

62. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises an electronic key.

63. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a dongle.

64. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a subcutaneous implant.

65. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a secure chip.

66. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises jewelry.

67. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises an IC card.

68. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a credit card.

69. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a debit card.

70. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises a security card.

71. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message comprises an ID badge.

72. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message transmits the digital signature through physical contact with a device interface.

73. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message plugs into the device interface.

74. The method of claim 73, wherein the device is swiped through the device interface.

75. The method of claims 1 or 34, wherein a device possessing the private key used to generate a digital signature of an electronic message transmits the digital signature to a device interface without physical contact therewith.

76. The method of claim 75, wherein the device transmits the digital signature through wireless communication.

77. The method of claim 75, wherein the device transmits the digital signature through an RF transmission.

78. The method of claims 1, 34, or 36, wherein the communications medium is open and insecure.

79. The method of claims 1, 34, or 36, wherein the communications medium comprises the Internet.

80. The method of claims 1, 34, or 36, wherein the electronic message is not encrypted.

81. The method of claims 1, 34, or 36, wherein the electronic message is encrypted.

82. The method of claims 1, 34, or 36, wherein the electronic message includes no personally-identifying information regarding an owner of the account.

83. The method of claims 1, 34, or 36, wherein the electronic message includes no account-identifying information other than a unique identifier of an account.

84. The method of claims 1 or 35, wherein a said step of associating a public key with a unique identifier comprises recording the public key with the information retrievable based on the unique identifier.

85. The method of claims 1 or 35, wherein a said step of associating a public key with a unique identifier comprises indexing the information retrievable based on the unique identifier with the public key.

103. The method of claim 1, further comprising communicating information maintained in the registration authority database for a particular account holder to a new account authority with which the account holder desires to establish an account, the information including a public key of that account holder to be associated by the new account authority with the new account.

104. The method of claim 103, wherein no personal information regarding the account owner is communicated to the new account authority.

34. A method of requesting an account authority to execute an instruction with regard to an account maintained by the account authority, comprising the steps of:

(a) for a first account,

(i) composing an electronic message including,

(A) an instruction regarding the first account, and

(B) a first unique identifier by which a first account authority identifies the first account from accounts maintained by the first account authority,

(ii) digitally signing the electronic message using a private key of a public-private key pair for which the public key is associated by the first account authority with the first account, and

(iii) sending the electronic message and digital signature to the first account authority over a communications medium; and

(b) for a second account,

(i) composing an electronic message including,

(A) an instruction regarding the second account, and

(B) a second unique identifier by which a second account authority identifies the second account from accounts maintained by the second account authority,

(ii) digitally signing the electronic message using the same private key of the public-private key pair for which the same public key is associated by the second account authority with the second account, and

(iii) sending the electronic message and digital signature to the second account authority over a communications medium.

35. A method of managing accounts in a database, comprising the steps of:

(a) recording information pertaining to each of the accounts in the database;

(b) assigning a respective unique identifier to each account such that information pertaining to each respective account is retrievable from the database based on its unique identifier, and

(c) associating the same public key of a public-private key pair with a plurality of unique identifiers.

36. A device used in communicating electronically over a communications medium regarding an account, the device including,

(a) a private key of a public-private key pair;

(b) a plurality of unique account identifiers, each identifying an account maintained by an account authority with which the public key of the public-private key pair is associated.

37. The device of claim 36 further including the identity of the account authority maintaining each of the identified accounts, whereby an electronic message which is digitally signed by the device may be directed to an appropriate account authority maintaining the account which the communication regards.

38. The device of claim 36 wherein the identity of the account authority maintaining each of the identified accounts is determinable from the respective unique account identifiers, whereby an electronic message which is digitally signed by the device may be directed to an appropriate account authority maintaining the account which the communication regards.

86. A method of managing a database of a central key authority for a plurality of account holders, each account holder having at least one account associated with a public key of a public-private key pair of that account holder, comprising maintaining for each account holder a record of information pertaining to the accounts of that account holder associated with the public keys of the account holder.

87. The method of claim 86, wherein the information pertaining to the accounts of an account holder includes the public keys associated with the accounts.

88. The method of claim 86, wherein each account of an account holder is associated with the same public key of that account holder.

89. The method of claim 86, wherein the information pertaining to the accounts of the account holder includes the single public key associated with the accounts of that account holder.

90. The method of claim 86, wherein the information pertaining to the accounts of an account holder includes the identity of the account authority of each account.

91. The method of claim 86, wherein the information pertaining to the accounts of an account holder includes a unique identifier of each account by which a record maintained by the account authority of each account is retrievable from an account database of the account authority.

92. The method of claim 86, wherein the information pertaining to the accounts of an account holder includes attributes of each account.

93. The method of claim 86, wherein the information pertaining to the accounts of an account holder includes personal information of that account holder.

94. The method of claim 93, wherein the information pertaining to the accounts of an account holder includes information regarding a device of that account holder in which a private key of a public-private key pair of that account holder is kept.

95. The method of claim 94, wherein the information regarding the device includes security features of the device.

96. The method of claim 86, further comprising the step of recording information in the record of an account bolder received from an account authority of an account of that account holder.

97. The method of claim 86, further comprising the step of recording information in the record of an account holder received from a manufacturer of a device of that account holder in which a private key of a public-private key pair of that account holder is kept.

98. The method of claim 86, further comprising the step of recording information in the record of an account holder received from a distributor of a token of that account holder in which a private key of a public-private key pair of that account holder is kept.

99. The method of claim 86, further comprising the step of indexing the records of the account holders in the registration authority database by the public keys of each account holder.

100. The method of claim 86, further comprising the step of indexing the records of the account holders in the registration authority database by unique identifiers.

101. The method of claim 86, further comprising the step of notifying for a particular account holder each account authority of an account of that account holder with which a single public key is associated which has been lost, stolen, or compromised.

102. The method of claim 101, further comprising the step of communicating a public key of another public-private key pair of that account holder to a notified account authority to be newly associated with the account of that account holder maintained by that account authority.

105. The method of claim 86, further comprising receiving information from an existing account authority of an account holder and maintaining the information in a record for that account holder in the registration authority database, the information including a public key of that account holder associated with the account of that account authority.

106. The method of claim 86, wherein the information includes an account number.

107. The method of claim 86, wherein the information includes a list of associated accounts.

108. The method of claim 86, wherein the information includes the name of an account holder.

109. The method of claim 86, wherein the information includes the address of an account holder.

110. The method of claim 86, wherein the information includes the social security number of an account holder.

111. The method of claim 86, wherein the information includes the tax identification number of an account holder.

112. The method of claims 86, wherein the information regards a device possessing a private key of the account holder used to generate a digital signature of an electronic message.

113. The method of claim 86, wherein the information includes security features of the device.

114. A method of maintaining a Central Key Authority (CKA) database, the CKA database comprising account information of users including:

(a) a public key of a user device that generates digital signatures,

(b) third-party account identifiers each of which identifies to a third-party an account of the user that is maintained with the third-party and that has been associated with the user'"'"'s public key by the third-party.

115. The method of claim 114, wherein the information linked with the public key comprises security features of the device.

116. The method of claim 114, wherein the information linked with the public key comprises a manufacturing history of the device.

117. The method of claim 114, wherein the public key and information linked therewith is obtained from a Secure Entity.

118. The method of claim 114, wherein the account information maintained in the CKA database for each user further includes the identity of each third-party with which an account is maintained that is identified by one of the third-party account identifiers.

119. The method of claim 114, wherein the account information of the users is indexed in the CKA database by unique CKA account identifiers such that the account information for a user is retrievable from the CKA database based on the account identifier.

120. The method of claim 119, wherein the public key is the CKA account identifier.

121. The method of claim 114, wherein the account information maintained in the CKA database for each user further includes user-specific information.

122. The method of claim 121, wherein the user-specific information is verified.

123. The method of claim 122, wherein each user account further includes a record of the techniques that were employed in verifying the user-specific information.

124. The method of claim 121, wherein the user-specific information includes the name and address of the user.

125. The method of claim 121, wherein the user-specific information includes the age and gender of the user.

126. The method of claim 121, further comprising establishing an account on behalf of a user with a third-party by communicating the public key of the user and information with the public key from the CKA database to the third-party.

127. The method of claim 126, wherein the public key of the user and information with the public key is communicated upon the request of the third-party to which it is communicated.

128. The method of claim 121, further comprising updating PuK-linked accounts of a user maintained with at least two independent third-parties with a new public key of the user, comprising the steps of:

(a) receiving an EC, the EC including one of the CKA account identifiers and a message including the new public key and a digital signature therefor,

(b) authenticating the message of the EC using the public key associated with the account in the CKA database identified by the CKA account identifier, and upon successful authentication thereof,

(c) sending an EC to each of the third-parties, each EC including the new public key and the third-party account identifier for the respective third-party maintained in the CKA database and associated with the account identified by the CKA account identifier.

129. The method of claim 121, further comprising digitally signing the new public key of the user and third-party account identifier.

130. A system of communicating electronically over a communications medium regarding an account, comprising the steps of:

(a) maintaining information pertaining to the account in a database such that the information is retrievable by a unique identifier, the information including security features of a device that generates digital signatures using a private key of a public-private key pair;

(b) associating the public key of the device with the unique identifier in the database;

(c) receiving an electronic communication including the unique identifier and a digital signature for a message generated by a suspect device;

(d) authenticating the message using the public key associated with the unique;

(e) upon successful authentication of the message, identifying the security features retrievable by the unique identifier as being the security features of the genuine device; and

(f) gauging the risk that said generated digital signature was fraudulently sent based on said identified security features of the genuine device.

131. The method of claim 130, wherein said step of maintaining the record is performed by an account authority.

132. The method of claim 130, wherein said step of maintaining the record is performed by a central key authority.

133. The method of claim 130, wherein said step of identifying the security features of the device is performed by an account authority.

134. The method of claim 130, wherein said step of identifying the security features of the device is performed by an central key authority.

135. The method of claim 130, wherein the unique identifier comprises the associated public key.

136. The method of claim 130, wherein the unique identifier comprises an account number.

137. The method of claim 130, wherein the communications medium is open and insecure.

138. The method of claim 130, wherein the communications medium comprises the Internet.

139. The method of claim 130, further comprising gauging the risk that the digital signature was fraudulently originated based on said identified security features.

145. The method of claims 130 or 140, wherein the information includes the name of an account holder.

146. The method of claims 130 or 140, wherein the information includes the address of an account holder.

147. The method of claims 130 or 140, wherein the information includes the social security number of an account holder.

148. The method of claims 130 or 140, wherein the information includes the tax identification number of an account holder.

149. The method of claims 130 or 140, wherein the information includes an account number for the account.

150. The method of claims 130 or 140, wherein the information includes a current balance for the account.

151. The method of claims 130 or 140, wherein the information includes an available credit for the account.

152. The method of claims 130 or 140, wherein the information includes a list of associated accounts.

153. The method of claims 130 or 140, wherein the security characteristics for each respective device are indexed in the database to that device'"'"'s public key.

154. The method of claims 130 or 140, wherein the security characteristics for each respective device are indexed in the database to a unique identifier.

155. The method of claim 154, further comprising sending the EC received from the user to each of the third-parties.

140. A method of managing a database for identification of security features of a device that generates digital signatures, comprising the steps of:

(a) recording in the database for each of a plurality of devices,

(i) a public key of a pair of public-private keys of the device, and

(ii) information including security features of the device, the security features being associated with the public key in the database; and

(b) identifying security features from the database to a recipient of an electronic message for which a digital signature was originated utilizing a private key of the public-private key pair of a particular one of the devices, the security features being for the particular device.

141. The method of claim 140, further comprising gauging the risk that said originated digital signature was fraudulently originated based on said identified security characteristics.

142. The method of claim 140, wherein the public key used to authenticate the electronic message is received with the digital signature.

143. The method of claim 140, wherein the public key associated with the record identified by the unique identifier of the message is included in the message.

144. The method of claim 140, further comprising retrieving from the account database the public key associated with the record identified by the unique identifier.