Security framework and protocol for universal pervasive transactions

• US 20040030894A1
• Filed: 06/11/2003
• Published: 02/12/2004
• Est. Priority Date: 08/08/2002
• Status: Active Grant

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: Fujitsu Limited
• Inventors: Ji, Lusheng, Labrou, Yannis, Agre, Jonathan Russell
• Granted Patent: US 7,353,382 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A computer system, a method of a computer system and a computer-readable medium securely transmit and verify a multiparty agreement. The method, the computer system, and the computer readable medium include developing and transmitting views of the multi-party agreement by each party to a separate verification party. The verification party authenticates the participants and determines whether the views of the agreement are mutually consistent, and notifies the partys of the results of the comparison.

Claims

1. A computer system securely transmitting and verifying a two-party agreement, said system comprising:

a first device, operated by the first party, developing and transmitting a first view of the two-party agreement, the first view including an encrypted part and an unencrypted plaintext part;

a second device, operated by the second party, developing and transmitting a second view of the two-party agreement, the second view including an encrypted part and an unencrypted plaintext part; and

a third device comprising a verification party receiving the first view and the second view, decrypting the encrypted part of the first view and the encrypted part of the second view, affirming that the first view was developed by the first party and that the second view was developed by the second party, comparing the decrypted part of the first view with the decrypted part of the second view, and transmitting a signal based on the outcome of the comparison.

2. The computer system as in claim 1, wherein either the first device transmits the first view to the third device and the second device independently transmits the second view to the third device, or the first device transmits the first view to the second device and the second device concatenates the first view and the second view and transmits the concatenated view to the third device.

3. The computer system as in claim 2, wherein the third device transmits a response to the first device and the second device either if the third device determines that the decrypted part of the first view matches the decrypted part of the second view for the purposes of the agreement or if the third device determines that the decrypted part of the first view does not match the decrypted part of the second view for the purposes of the agreement.

4. The computer system as in claim 3, wherein the plaintext part of the view of the first device includes the device identification of the first device and the transaction timestamp of the first device, and the encrypted part includes data corresponding to an agreement and a device identification of the second device.

5. The computer system as in claim 4, wherein the plaintext portion may optionally include a transaction ID and the encrypted portion may include one or more of a transaction ID, a message digest, a transaction timestamp, the user ID of the user of the first device and padding data.

6. The computer system of claim 5, in which the encrypted part of the view from the first device is encrypted using a symmetric secret encryption key, and a cryptographic algorithm in which the key and cryptographic algorithm are known only to the first device and the third device and the keys are not communicated either between the first device and the second device or the first device and the third device.

7. The computer system of claim 6 in which the encryption key used by the first device to encrypt the view is generated based on a secret value comprising a Private Identification Entry (PIE), and a deterministic algorithm based on a set of stored parameters and functions, wherein the PIE is known only to the operator of the first device and is not stored on the first device and is also known to the third device that receives the encrypted view developed by the first device, and the deterministic algorithm and the set of stored parameters and functions are known only to the first device and the third device.

8. The computer system of claim 7 in which each of the first device and the third device comprises a known pseudo-random number generator, a known hash function and a known transformation function in order to deterministically produce identical encryption keys given the same transaction timestamp for purposes of encrypting the first view by the first device and decrypting the first view by the third device, wherein:

the pseudo-random number generator receives as input the seed, the base timestamp and the transaction timestamp and produces as output a random number;

the transformation function takes as input the said random number and the PIE and produces as output a number; and

the hash function takes as input the said number and produces as output the encryption key.

9. The computer system as in claim 3, wherein the response from the third device to the first device comprises a plaintext part and an encrypted part, wherein the plaintext part of the response includes the device identification of the first device and a transaction timestamp and may optionally include a transaction ID, and the encrypted part includes data corresponding to a response to the agreement and may include one or more of a device identification of the first device, device identification of the second device, a transaction ID, a message digest, a transaction timestamp, the user ID of the user of the first device and padding data.

10. The computer system of claim 9, in which the encrypted part of the response of the third device to the first device is encrypted using a symmetric secret encryption key and a cryptographic algorithm in which the key and cryptographic algorithm are known only to the first device and the third device and the keys are not communicated either between the first device and the second device or the first device and the third device.

11. The computer system of claim 10 in which the encryption key used by the third device to encrypt the encrypted portion of the response to the first device is generated based on a secret value comprising a Private Identification Entry (PIE), and a deterministic algorithm based on a set of stored parameters and functions, wherein the PIE is known only to the operator of the first device and is not stored on the first device and is also known to the third device and the deterministic algorithm and the set of stored parameters and functions are known only to the first device and the third device.

12. The computer system of claim 11 in which each of the third device and the first device comprises a known pseudo-random number generator, a known hash function and a known transformation function and deterministically produce identical keys given the same transaction timestamp for purposes of encrypting the response by the third device and decrypting the response by the first device, wherein:

the pseudo-random number generator receives as input the seed, the base timestamp and the transaction timestamp and produces as output a random number;

the transformation function takes as input the said random number and the PIE and produces as output a number; and

the hash function takes as input the said number and produces as output the encryption key.

13. The computer system as in claim 3, wherein the plaintext part of the view of the second device includes the device identification of the second device and the transaction timestamp of the second device, and the encrypted part includes data corresponding to an agreement, and a device identification of the first device.

14. The computer system as in claim 13, wherein the plaintext portion may optionally include a transaction ID and the encrypted portion may include one or more of a transaction ID, a message digest, a transaction timestamp, the user ID of the user of the second device and padding data.

15. The computer system of claim 14, in which the encrypted part of the view from the second device is encrypted using a symmetric secret encryption key, and a cryptographic algorithm in which the key and cryptographic algorithm are known only to the second device and the third device and the keys are not communicated either between the first device and the second device or the second device and the third device.

16. The computer system of claim 15 in which the encryption key used by the second device to encrypt the view is generated based on a secret value comprising a Private Identification Entry (PIE), and a deterministic algorithm based on a set of stored parameters and functions, wherein the PIE is known only to the operator of the second device and is not stored on the second device and is also known to the third device that receives the encrypted view developed by the second device, and the deterministic algorithm and the set of stored parameters and functions are known only to the second device and the third device.

17. The computer system of claim 16 in which each of the second device and the third device comprises a known pseudo-random number generator, a known hash function and a known transformation function and deterministically produce identical encryption keys given the same transaction timestamp for purposes of encrypting the second view by the second device and decrypting the second view by the third device, wherein:

the pseudo-random number generator receives as input the seed, the base timestamp and the transaction timestamp and produces as output a random number;

the transformation function takes as input the said random number and the PIE and produces as output a number; and

the hash function takes as input the said number and produces as output the encryption key.

18. The computer system as in claim 3, wherein the response from the third device to the second device comprises a plaintext part and an encrypted part, wherein the plaintext part of the response includes the device identification of the second device and a transaction timestamp and may optionally include a transaction ID, and the encrypted part includes data corresponding to a response to the agreement and may include one or more of a device identification of the second device, device identification of the first device, a transaction ID, a message digest, a transaction timestamp, the user ID of the user of the second device and padding data.

19. The computer system of claim 18, in which the encrypted part of the response of the third device to the second device is encrypted using a symmetric secret encryption key and a cryptographic algorithm in which the key and cryptographic algorithm are known only to the second device and the third device and the keys are not communicated either between the first device and the second device or the second device and the third device.

20. The computer system of claim 19 in which the encryption key used by the third device to encrypt the encrypted part of the response is generated based on a secret value comprising a Private Identification Entry (PIE), and a deterministic algorithm based on a set of stored parameters and functions, wherein the PIE is known only to the operator of the second device and is not stored on the second device and is also known to the third device and the deterministic algorithm and the set of stored parameters and functions are known only to the second device and the third device.

21. The computer system of claim 20 in which each of the third device and the second device comprises a known pseudo-random number generator, a known hash function and a known transformation function and deterministically produce identical keys given the same transaction timestamp for purposes of encrypting the response by the third device and decrypting the response by the second device, wherein:

the pseudo-random number generator receives as input the seed, the base timestamp and the transaction timestamp and produces as output a random number;

the transformation function takes as input the said random number and the PIE and produces as output a number; and

the hash function takes as input the said number and produces as output the encryption key.

22. A computer system securely transmitting and verifying a multi-party agreement among N parties where N is larger than or equal to two, said computer system comprising:

a collection of N devices, each device operated by a party to the agreement, developing and transmitting its view of the multi-party agreement;

where each view includes an encrypted part and an unencrypted, plaintext part, and

an N+1-st device comprising a verification party, receiving the views from the N agreement parties, decrypting the encrypted part of each view, affirming that each view was developed by its associated agreement party, comparing the decrypted views from the N agreement parties and transmitting a response signal based on the outcome of the comparison.

23. The computer system as in claim 22, wherein either each of the N devices independently transmits its view to the N+1-st device comprising the verification party, or, each of the N devices concatenates its view to a list of views until all N views are collected so that each view appears once in the list and the list is then transmitted to the N+1-st device.

24. The computer system as in claim 23, wherein the N+1-st device transmits a response to each of the N devices in the multi-party agreement either if it decides that the decrypted part of all N views from the N devices in the multi-party agreement match each other for the purposes of the agreement or if it decides that the decrypted part of all N views from the N devices in the multi-party agreement do not match each other for the purposes of the agreement.

25. The computer system as in claim 24, wherein the plaintext part of the view of a device includes the device identification and the transaction timestamp of each device, and the encrypted part includes data corresponding to a multi-party agreement and the device identification for each of the other devices in the multi-party agreement.

26. The computer system as in claim 25, wherein the plaintext portion of a view from a device may optionally include a transaction ID, the number of parties in the agreement and the encrypted portion may include one or more of a transaction ID, the number of parties in the agreement, a message digest, a transaction timestamp, the user ID of the user of the device and padding data.

27. The computer system of claim 26, in which the encrypted part of the view from each device is encrypted using a symmetric secret encryption key, and a cryptographic algorithm in which the key and cryptographic algorithm are known only to that device and the N+1-st device and the keys are not communicated.

28. The computer system of claim 27 in which the encryption key used by a device in the multi-party agreement to encrypt the view is generated based on a secret value comprising a Private Identification Entry (PIE), and a deterministic algorithm based on a set of stored parameters and functions, wherein the PIE is known only to the operator of a device and is not stored on the device and is also known to the N+1-st device that receives its encrypted view, and the deterministic algorithm and the set of stored parameters and functions are known only to a device and the N+1-st device.

29. The computer system of claim 28 in which a device in the multi-party agreement and the N+1-st device comprises a known pseudo-random number generator, a known hash function and a known transformation function and deterministically produce identical encryption keys given the same transaction timestamp, for purposes of encrypting the view by the device and decrypting the view by the N+1-st device, wherein:

the pseudo-random number generator receives as input the seed, the base timestamp and the transaction timestamp and produces as output a random number;

the transformation function takes as input the said random number and the PIE and produces as output a number; and

the hash function takes as input the said number and produces as output the encryption key.

30. The computer system as in claim 29, wherein the response from the N+1-st device to a device in the multi-party agreement comprises of a plaintext part and an encrypted part, wherein the plaintext part of the response includes the device identification of the device and a transaction timestamp and may optionally include a transaction ID, and the encrypted part includes data corresponding to a response to the agreement and may include one or more of a device identification of the device, device identification of the devices of the parties in the agreement, a transaction ID, a number of parties in the agreement, a message digest, a transaction timestamp, the user ID of the user of the device and padding data.

31. The computer system of claim 30, in which the encrypted part of the response of the N+1-st device to a device in the multi-party agreement is encrypted using a symmetric secret encryption key and a cryptographic algorithm in which the key and cryptographic algorithm are known only to the device and the N+1-st device and the keys are not communicated.

32. The computer system of claim 31 in which the encryption key used by the N+1-st device to encrypt the response to a device in the multi-party agreement is generated based on a secret value comprising a Private Identification Entry (PIE), and a deterministic algorithm based on a set of stored parameters and functions, wherein the PIE is known only to the operator of the device and is not stored on the device and is also known to the N+1-st device and the deterministic algorithm and the set of stored parameters and functions are known only to the device and the N+1-st device.

33. The computer system of claim 32 in which a device in the multi-party agreement and the N+1-st device comprises a known pseudo-random number generator, a known hash function and a known transformation function and deterministically produce identical keys given the same transaction timestamp for purposes of encrypting the response by the N+1-st device and decrypting the response by said device in the multi-party agreement, wherein:

the pseudo-random number generator receives as input the seed, the base timestamp and the transaction timestamp and produces as output a random number;

the transformation function takes as input the said random number and the PIE and produces as output a number; and

the hash function takes as input the said number and produces as output the encryption key.

34. A method of a computer system securely transmitting and verifying a two-party agreement, said method comprising:

developing and transmitting, by a first device operated by the first party, a first view of the two-party agreement, the first view including an encrypted part and an unencrypted plaintext part;

developing and transmitting, by a second device operated by the second party, a second view of the two-party agreement, the second view including an encrypted part and an unencrypted plaintext part; and

receiving, by a third device comprising a verification party, the first view and the second view, decrypting the encrypted part of the first view and the encrypted part of the second view, affirming that the first view was developed by the first party and that the second view was developed by the second party, comparing the decrypted part of the first view with the decrypted part of the second view, and transmitting a signal based on the outcome of the comparison.

35. A method of a computer system securely transmitting and verifying a multi-party agreement among N parties where N is larger than or equal to two, said method comprising:

developing and transmitting, by a collection of N devices each device operated by a party to the agreement, its view of the multi-party agreement;

where each view includes an encrypted part and an unencrypted, plaintext part, and

receiving, by an N+1-st device comprising a verification party, the views from the N agreement parties, decrypting the encrypted part of each view, affirming that each view was developed by its associated agreement party, comparing the decrypted views from the N agreement parties and transmitting a response signal based on the outcome of the comparison.

36. A computer readable storage controlling a computer to securely transmit and verify a two-party agreement, by the functions comprising:

developing and transmitting, by a first device operated by the first party, a first view of the two-party agreement, the first view including an encrypted part and an unencrypted plaintext part;

developing and transmitting, by a second device operated by the second party, a second view of the two-party agreement, the second view including an encrypted part and an unencrypted plaintext part; and

receiving, by a third device comprising a verification party, the first view and the second view, decrypting the encrypted part of the first view and the encrypted part of the second view, affirming that the first view was developed by the first party and that the second view was developed by the second party, comparing the decrypted part of the first view with the decrypted part of the second view, and transmitting a signal based on the outcome of the comparison.

37. A computer readable storage controlling a computer to securely transmit and verify a multi-party agreement among N parties where N is larger than or equal to two, by the functions comprising:

developing and transmitting, by a collection of N devices each device operated by a party to the agreement, its view of the multi-party agreement;

where each view includes an encrypted part and an unencrypted, plaintext part, and

receiving, by an N+1-st device comprising a verification party, the views from the N agreement parties, decrypting the encrypted part of each view, affirming that each view was developed by its associated agreement party, comparing the decrypted views from the N agreement parties and transmitting a response signal based on the outcome of the comparison.