Method and apparatus for electronic commerce using digital ticket to provide anonymity

• US 20060085359A1
• Filed: 10/19/2005
• Published: 04/20/2006
• Est. Priority Date: 10/19/2004
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Hyoung-shick
• Granted Patent: US 7,730,314 B2
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3257 using blind signatures

Abstract

A method and apparatus for electronic commerce using a digital ticket are provided. The method for electronic commerce using a digital ticket includes hiding a message comprising a random number and transmitting the hidden message to a ticket issuer, receiving the hidden message signed with a digital signature by the ticket issuer, verifying the digital signature on the message, and transmitting the message with the verified digital signature to the ticket issuer to consume a digital ticket.

Claims

1. A method for electronic commerce using a digital ticket, the method comprising:

hiding a message comprising a random number and transmitting the hidden message to a ticket issuer;

receiving the hidden message signed with a digital signature by the ticket issuer;

verifying the digital signature on the message; and

transmitting the message with the verified digital signature to the ticket issuer to consume a digital ticket.

2. The method of claim 1, wherein the message comprises the random number and a ticket usable count.

3. A method for electronic commerce using a digital ticket, the method comprising:

applying a hash function to a message comprising a random number to obtain a hash value;

hiding said hash value and transmitting the hidden hash value to a ticket issuer;

receiving a message from the ticket issuer that comprises the hash value signed with a digital signature by the ticket issuer;

verifying the digital signature on the received message; and

transmitting to the ticket issuer the verified message and a value obtained by applying the hash function to the verified message as many times as one of (a) a value one less than the number of times that the hash function has been applied to obtain the hash value and (b) a value proportional to a ticket usable count, to consume a digital ticket.

4. The method of claim 3, wherein the message comprising the random number comprises information regarding a ticket user.

5. A method for electronic commerce using a digital ticket, the method comprising:

receiving hidden messages each comprising a random number generated by a ticket user;

signing one of said received messages with a digital signature; and

transmitting the message with the digital signature to the ticket user.

6. The method of claim 5, further comprising verifying the received hidden messages, wherein the signing comprises signing the verified messages with the digital signature.

7. The method of claim 6, wherein the verifying of the received message comprises:

requesting and receiving from the ticket user an unblind key that unblinds remaining messages other than the one message among the received messages; and

unblinding the remaining messages using the unblind key and verifying information contained in the remaining messages.

8. The method of claim 6, wherein the verifying of the received messages comprises:

requesting and receiving from the ticket user an unblind key that unblinds remaining messages other than said one message among the received messages and a random number in each of the remaining messages; and

verifying information contained in the remaining messages based on whether a value obtained by unblinding the remaining messages using the unblind key coincides with a value generated using the random number comprised in the remaining messages.

9. A method for electronic commerce using a digital ticket, the method comprising:

receiving a message that comprises a random number generated by a ticket user and is signed with a digital signature by a ticket issuer;

verifying the message;

inspecting whether the message is being used duplicately; and

providing a service to the ticket user if the message is not being used duplicately.

10. The method of claim 9, wherein the verifying of the message comprises verifying the digital signature.

11. The method of claim 9, wherein the inspecting comprises:

extracting the random number from the message;

searching a storage module for the random number; and

if the random number is not present in the storage module, storing the random number in the storage module.

12. The method of claim 9, further comprising requesting the ticket user to generate a message having a ticket usable count decreased by one.

13. A method for electronic commerce using a digital ticket, the method comprising:

receiving a generated hash value generated by a ticket user and signed with a digital signature by a ticket issuer, and an input hash value used to generate the generated hash value;

verifying the generated hash value and the input hash value;

inspecting whether the generated hash value is being used duplicately; and

providing a service to the ticket user if the generated hash value is not being used duplicately.

14. The method of claim 13, wherein the verifying comprises:

verifying the digital signature; and

verifying whether the generated hash value with the digital signature and the input hash value have an appropriate relationship.

15. The method of claim 13, wherein the inspecting comprises:

searching a storage module for the generated hash value; and

if the generated hash value is not present in the storage module, storing the generated hash value in the storage module.

16. The method of claim 13, further comprising signing the input hash value with a digital signature and transmitting the input hash value with the digital signature to the ticket user.

17. An apparatus for electronic commerce using a digital ticket, the apparatus comprising:

a message generation module that generates a random number and a message including the random number;

a message processing module that hides the message; and

a transceiver module that transmits the hidden message to a ticket issuer and receives the hidden message signed with a digital signature by the ticket issuer;

wherein the message processing module verifies the digital signature on the received message, and the transceiver module transmits the verified message with the digital signature to the ticket issuer to consume a digital ticket.

18. An apparatus for electronic commerce using a digital ticket, the apparatus comprising:

a message generation module that generates a random number and generating a message including the random number;

a hashing module that applies a hash function to the message to obtain a hash valve;

a message processing module that hides the hash value; and

a transceiver module that transmits the hidden hash value to a ticket issuer and receives the message, wherein the hash value is signed with a digital signature by the ticket issuer;

wherein the message processing module verifies the digital signature on the received message, and the transceiver module transmits the verified message with the digital signature and a value obtained by applying the hash function a number of times one less than a number of times that the hash function has been applied to obtain the hash value, to the ticket issuer to consume a digital ticket.

19. An apparatus for electronic commerce using a digital ticket, the apparatus comprising:

a transceiver module that receives a hidden message including a random number generated by a ticket user; and

a blind signature module that signs the received message with a digital signature;

wherein the transceiver module transmits the message with the digital signature to the ticket user.

20. An apparatus for electronic commerce using a digital ticket, the apparatus comprising:

a transceiver module that receives a message that includes a random number generated by a ticket user and is signed with a digital signature by a ticket issuer;

a digital signature verification module that verifies the received message; and

a duplicate use inspection module that inspects whether the message is being used duplicately.

21. An apparatus for electronic commerce using a digital ticket, the apparatus comprising:

a transceiver module that receives a hash value generated by a ticket user and signed with a digital signature by a ticket issuer, and an input hash value used to generate the hash value;

a digital signature verification module that verifies the digital signature on the hash value;

a hashing module that verifies a relationship between the hash value with the digital signature and the input hash value; and

a duplicate use inspection module that inspects whether the hash value is being used duplicately.

22. A computer readable medium storing a program for executing a method for electronic commerce using a digital ticket, the method comprising:

hiding a message comprising a random number and transmitting the hidden message to a ticket issuer;

receiving the hidden message signed with a digital signature by the ticket issuer;

verifying the digital signature on the message; and

transmitting the message with the verified digital signature to the ticket issuer to consume a digital ticket.

23. A computer readable medium storing a program for executing a method for electronic commerce using a digital ticket, the method comprising:

applying a hash function to a message comprising a random number to obtain a hash value;

hiding said hash value and transmitting the hidden hash value to a ticket issuer;

receiving a message from the ticket issuer that comprises the hash value signed with a digital signature by the ticket issuer;

verifying the digital signature on the received message; and

transmitting to the ticket issuer the verified message and a value obtained by applying the hash function to the verified message as many times as a value one less than the number of times that the hash function has been applied to obtain the hash value, to consume a digital ticket.

24. A computer readable recording medium storing a program for executing a method for electronic commerce using a digital ticket, the method comprising:

receiving hidden messages each comprising a random number generated by a ticket user;

signing one of said received messages with a digital signature; and

transmitting the message with the digital signature to the ticket user.

25. A computer readable recording medium a program for executing a method for electronic commerce using a digital ticket, the method comprising:

receiving a message that comprises a random number generated by a ticket user and is signed with a digital signature by a ticket issuer;

verifying the message;

inspecting whether the message is being used duplicately; and

providing a service to the ticket user if the message is not being used duplicately.

26. A computer readable recording medium storing a program for executing a method for electronic commerce using a digital ticket, the method comprising:

receiving a generated hash value that is generated by a ticket user and is signed with a digital signature by a ticket issuer and an input hash value used to generate the generated hash value;

verifying the generated hash value and the input hash value;

inspecting whether the generated hash value is used duplicately; and

providing a service to the ticket user if the generated hash value is not used duplicately.