Secure electronic commerce using mutating identifiers

• US 20060173794A1
• Filed: 11/23/2005
• Published: 08/03/2006
• Est. Priority Date: 02/27/2002
• Status: Active Grant

• Current Assignee: Imagine Software LLC
• Original Assignee: Imagine Software LLC
• Inventors: Sellars, William, Cochran, William, Malina, Richard
• Granted Patent: US 7,725,404 B2
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: G06Q 50/188 Electronic negotiation

Abstract

Methods and systems for performing electronic commerce using mutating identifiers. One method can include encrypting buyer transaction data with a first mutating identifier, transmitting the buyer transaction data to an authenticator device, decrypting the buyer transaction data, generating a payment request, encrypting the payment request with a third mutating identifier, and transmitting the payment request to a payment authenticator device.

Claims

1. A method of performing electronic commerce using mutating identifiers.

2. The method of claim 1, wherein the method further comprises:

encrypting buyer transaction data with a first mutating identifier;

transmitting the buyer transaction data to an authenticator device;

decrypting the buyer transaction data;

generating a payment request;

encrypting the payment request with a third mutating identifier; and

transmitting the payment request to a payment authenticator device.

3. The method of claim 2, further comprising encrypting vendor transaction data with a second mutating identifier and transmitting the vendor transaction data to the authenticator device.

4. The method of claim 3, further comprising decrypting the vendor transaction data.

5. The method of claim 2, wherein generating a payment request includes generating a payment request including an identity of a vendor device and vendor credentials.

6. The method of claim 2, further comprising transmitting a second receipt to a vendor device.

7. The method of claim 2, further comprising transmitting a fifth mutating identifier to a vendor device.

8. The method of claim 2, further comprising transmitting an approved message to a vendor device if the payment authenticator device approves the payment request.

9. The method of claim 2, further comprising transmitting a declined message to a vendor device if the payment authenticator device declines the payment request.

10. The method of claim 2, wherein generating a payment request includes generating a payment request including an identity of a buyer device and buyer credentials.

11. The method of claim 2, further comprising transmitting a first receipt to a buyer device.

12. The method of claim 2, further comprising transmitting a fourth mutating identifier to a buyer device.

13. The method of claim 2, further comprising transmitting an approved message to a buyer device if the payment authenticator device approves the payment request.

14. The method of claim 2, further comprising transmitting a declined message to a buyer device if the payment authenticator device declines the payment request.

15. The method of claim 2, further comprising transmitting a third receipt to the payment authenticator device.

16. The method of claim 2, further comprising transmitting a sixth mutating identifier to the payment authenticator device.

17. The method of claim 2, further comprising transferring funds between a first account and a second account if the payment authenticator device approves the payment request.

18. The method of claim 2, further comprising providing an escrow service if the payment authenticator device approves the payment request.

19. A method for establishing communication between a first device and a second device, the method comprising:

generating a request for a transaction key;

encrypting the request for a transaction key with a first mutating identifier of the first device;

transmitting the encrypted request for a transaction key to an authenticator device;

generating a transaction key;

generating a first message including the transaction key; and

encrypting the first message with the first mutating identifier of the first device.

20. The method of claim 19, further comprising generating a third mutating identifier for the first device, wherein the first message includes the third mutating identifier.

21. The method of claim 20, further comprising transmitting the first message to the first device.

22. The method of claim 19, further comprising generating a second message including the transaction key and encrypting the second message with a second mutating identifier of the second device.

23. The method of claim 22, further comprising generating a fourth mutating identifier for the second device, wherein the second message includes the fourth mutating identifier.

24. The method of claim 23, further comprising transmitting the second message to the second device.

25. The method of claim 19, wherein generating a request for a transaction key includes generating a request for a transaction key wherein the request for a transaction key includes request-identifying data.

26. The method of claim 25, wherein generating a first message including the transaction key includes generating a first message including the transaction key and the request-identifying data.

27. A method of performing electronic commerce using mutating identifiers, the method comprising:

encrypting buyer transaction data with a first mutating identifier;

transmitting the buyer transaction data to an authenticator device;

encrypting buyer credentials with a first transaction key;

transmitting the buyer credentials to a payment authenticator device;

encrypting vendor transaction data with a second mutating identifier;

transmitting the vendor transaction data to an authenticator device;

encrypting vendor credentials with a second transaction key;

transmitting the vendor credentials to a payment authenticator device;

decrypting the buyer transaction data;

decrypting the vendor transaction data;

generating a payment request for a payment authenticator device;

encrypting the payment request with a third mutating identifier;

transmitting the payment request to the payment authenticator device;

decrypting the payment request;

decrypting the buyer credentials;

decrypting the vendor credentials;

generating a first response based on the buyer credentials, the vendor credentials, and the payment request;

generating a second response based on the buyer credentials, the vendor credentials, and the payment request;

transmitting the first response to a buyer device; and

transmitting the second response to a vendor device.

28. The method of claim 27, wherein encrypting vendor transaction data includes encrypting a bill of sale and a price.

29. The method of claim 27, wherein generating a payment request includes generating a payment request including an identity of the vendor device and an identity of the buyer device.

30. The method of claim 27, further comprising verifying the buyer credentials and verifying the vendor credentials.

31. The method of claim 27, wherein generating a payment request includes generating a payment request including a first receipt for the buyer device.

32. The method of claim 31, wherein generating a first response includes generating a first response including the first receipt.

33. The method of claim 27, wherein generating a payment request includes generating a payment request including a fourth mutating identifier for the buyer device.

34. The method of claim 33, wherein generating a first response includes generating a first response including the fourth mutating identifier.

35. The method of claim 27, wherein generating a first response includes generating a first response including at least one of the approved message and the declined message for the buyer device.

36. The method of claim 27, wherein encrypting buyer transaction data includes encrypting a bill of sale and a price.

37. The method of claim 27, wherein encrypting buyer transaction data includes encrypting an identity of the payment authenticator device.

38. The method of claim 27, wherein generating a payment request includes generating a payment request including a second receipt for the vendor device.

39. The method of claim 38, wherein generating a second response includes generating a second response including the second receipt.

40. The method of claim 27, wherein generating a payment request includes generating a payment request including a fifth mutating identifier for the vendor device.

41. The method of claim 40, wherein generating a second response includes generating a second response including the fifth mutating identifier.

42. The method of claim 27, wherein generating a second response includes generating a second response including at least one of an approved message and a declined message for the vendor device.

43. The method of claim 27, wherein generating a payment request includes generating a payment request including a third receipt for the payment authenticator device.

44. The method of claim 27, wherein generating a payment request includes generating a payment request including a sixth mutating identifier for the payment authenticator device.

45. The method of claim 27, further comprising transferring funds from a first account to a second account if the payment authenticator approves the payment request.

46. The method of claim 27, further comprising providing an escrow service if the payment authenticator approves the payment request.

47. An electronic commerce system comprising:

a vendor device;

a buyer device configured to encrypt buyer transaction data with a first mutating identifier and to transmit the buyer transaction data to an authenticator device; and

a payment authenticator device configured to approve or decline a payment request, to generate a first response for the buyer device, to generate a second response for the vendor device, to transmit the first response to the buyer device, and to transmit the second response to the vendor device;

wherein

the authenticator device is configured to decrypt the buyer transaction data, to generate a payment request for the payment authenticator device, to encrypt the payment request with a third mutating identifier of the payment authenticator device, and to transmit the payment request to the payment authenticator device.

48. The system of claim 47, wherein the vendor device is further configured to encrypt vendor transaction data with a second mutating identifier and to transmit the vendor transaction data to the authenticator device.

49. The system of claim 48, wherein the authenticator device is further configured to decrypt the vendor transaction data.

50. The system of claim 47, wherein the vendor device is further configured to encrypt vendor credentials with a second transaction key and to transmit the vendor credentials to the payment authenticator device.

51. The system of claim 50, wherein the payment authenticator device is further configured to decrypt the vendor credentials.

52. The system of claim 50, wherein the payment authenticator device is further configured to encrypt the second response with the second transaction key.

53. The system of claim 47, wherein the authenticator device is further configured to include vendor credentials in the payment request.

54. The system of claim 53, wherein the payment authenticator device is further configured to verify the vendor credentials.

55. The system of claim 47, wherein the authenticator device is further configured to include a fifth mutating identifier for the vendor device in the payment request.

56. The system of claim 55, wherein the payment authenticator device is further configured to transmit the fifth mutating identifier to the vendor device.

57. The system of claim 47, wherein the payment authenticator device is further configured to include at least one of an approved message and a declined message in the second response.

58. The system of claim 47, wherein the buyer device is further configured to encrypt buyer credentials with a first transaction key and to transmit the buyer credentials to the payment authenticator device.

59. The system of claim 58, wherein the payment authenticator is further configured to decrypt the buyer credentials.

60. The system of claim 58, wherein the payment authenticator device is further configured to encrypt the first response with the first transaction key.

61. The system of claim 47, wherein the authenticator device is further configured to include buyer credentials in the payment request.

62. The system of claim 61, wherein the payment authenticator device is further configured to verify the buyer credentials.

63. The system of claim 47, wherein the authenticator device is further configured to include a fourth mutating identifier for the buyer device in the payment request.

64. The system of claim 63, wherein the payment authenticator device is further configured to transmit the fourth mutating identifier to the buyer device.

65. The system of claim 47, wherein the payment authenticator device is further configured to include at least one of an approved message and a declined message in the first response.

66. The system of claim 47, wherein the authenticator device is further configured to include a third receipt for the payment authenticator device in the payment request.

67. The system of claim 47, wherein the authenticator device is further configured to include a sixth mutating identifier for the payment authenticator device in the payment request.

68. The system of claim 47, wherein the payment authenticator device is further configured to transfer funds between a first account and a second account upon approving the payment request.

69. The system of claim 47, wherein the payment authenticator device is further configured to provide an escrow service upon approving the payment request.

70. A method of performing electronic commerce using mutating identifiers, the method comprising:

encrypting transaction data with a first mutating identifier;

transmitting the transaction data to an authenticator device; and

receiving a response from a payment authenticator device.

71. A method of performing electronic commerce using mutating identifiers, the method comprising:

obtaining a payment request from an authenticator device including transaction data, the payment request encrypted with a first mutating identifier;

decrypting the payment request;

verifying the transaction data; and

transmitting a response.

72. A method of performing electronic commerce using mutating identifiers, the method comprising:

obtaining transaction data encrypting with a first mutating identifier;

decrypting the transaction data;

generating a payment request including at least a portion of the transaction data; and

transmitting the payment request to a payment authenticator device.

73. A method of establishing communication between a first device and a second device, the method comprising:

generating a request for a transaction key;

encrypting the request for a transaction key with a first mutating identifier of the first device;

transmitting the encrypted request for a transaction key to an authenticator device; and

receiving a message including a transaction key encrypting with the first mutating identifier.

74. A method of establishing communication between a first device and a second device, the method comprising:

obtaining a request for a transaction key from the first device, the request for a transaction key encrypted in a first mutating identifier;

decrypting the request for a transaction key;

generating a first message including the transaction key;

encrypting the first message with the first mutating identifier of the first device; and

transmitting the first message to the first device.

75. A method of conducting electronic commerce, the method comprising:

encrypting buyer transaction data with a first buyer key;

transmitting the buyer transaction data to an authenticator device;

encrypting buyer credentials with a first transaction key; and

transmitting the buyer credentials to a payment authenticator device.

76. A method as claimed in claim 75, further comprising:

encrypting vendor transaction data with a vendor key;

transmitting the vendor transaction data to an authenticator device;

encrypting vendor credentials with a second transaction key; and

transmitting the vendor credentials to a payment authenticator device.

77. A method as claimed in claim 76, further comprising:

decrypting the buyer transaction data;

decrypting the vendor transaction data;

generating a payment request for a payment authenticator device;

encrypting the payment request with a payment request key; and

transmitting the payment request to the payment authenticator device.

78. A method as claimed in claim 77, further comprising:

decrypting the payment request;

decrypting the buyer credentials;

decrypting the vendor credentials;

generating a first response based on the buyer credentials, the vendor credentials, and the payment request;

generating a second response based on the buyer credentials, the vendor credentials, and the payment request;

transmitting the first response to the buyer device; and

transmitting the second response to the buyer device.