Systems, methods and devices for trusted transactions

• US 20070028113A1
• Filed: 08/29/2006
• Published: 02/01/2007
• Est. Priority Date: 12/07/1999
• Status: Active Grant

• Current Assignee: Wistaria Trading Inc.
• Original Assignee: Blue Spike, Inc.
• Inventors: Moskowitz, Scott
• Granted Patent: US 8,538,011 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 1/266 Arrangements to supply power to external peripherals either directly from the computer or under computer control, e.g. supply of power through the communication port, computer controlled power-strips
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 7/582 Pseudo-random number generators
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0618 : Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04L 9/0643 : Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3228 : One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps

Abstract

The invention discloses a system for enhancing trust in transactions, most particularly in remote transactions between a plurality of transactional parties, for instance a seller and buyer(s) of goods and/or services over a public computer network such as the internet. Trust is disclosed to be a multivalent commodity, in that the trust that is to be enhanced relates to information about the subject matter of the transactions (e.g., the suitability of the goods and services sold), the bona fides of the supplier of the goods and services, the appropriateness of a pricing structure for a particular transaction or series of transactions, a quantum of additional transactional value that may be imparted to the transactional relationship, security of information exchange, etc. An important contributor to trust for such aspects of the transaction is disclosed to be the use of highly-secure steganographic computer processing means for data identification, authentication, and transmission, such that confidence in the transaction components is enhanced. By providing an integrated multivalent system for enhancing trust across a variety of categories (for a variety of transaction species, including those in which the need for trust is greater on the part of one party than of another, as well as those in which both require substantial trust enhancement), the invention reduces barriers to forming and optimizing transactional relationships.

Claims

1-19. -19. (canceled)

20. A method for conducting a trusted transaction between two of a plurality of parties who have reached an agreement to transact, comprising:

establishing a secure transmission channel between the two parties;

approving an identity of at least one of the two parties;

determining an amount of value-added information to be exchanged between the parties, the value-added information comprising a plurality of value-adding components;

verifying the agreement to transact; and

transmitting the value-added information.

21. The method of claim 20, wherein the step of approving an identity of at least one of the two parties comprises:

at least one of the parties verifying at least one value-adding component.

22. The method of claim 20, wherein the step of approving an identity of at least one of the two parties comprises:

at least one of the parties authorizing at least one value-adding component.

23. The method of claim 20, wherein the step of approving an identity of at least one of the two parties comprises:

at least one of the parties authenticating at least one value-adding component.

24. The method of claim 20, wherein the step of establishing a secure transmission channel between two of a plurality of parties comprises:

exchanging data between the two parties;

selecting a predetermined key to exchange over the secure transmission channel; and

securing the transmission channel by at least one of a password, a pass phrase entry, a query to a user, and real-time biometric data transfer.

25. The method of claim 20, wherein the step of approving an identity of at least one of the two parties comprises:

exchanging a value-adding component for each party to the other party.

26. The method of claim 20, wherein the step of approving an identity of at least one of the two parties comprises:

at least one of the parties independently verifying a value-adding component of the other party.

27. The method of claim 20, wherein a bandwidth of the primary value-added information comprises a description including at least one of a bandwidth requirement for transmission, a bandwidth requirement for storage, and a bandwidth requirement for playback.

28. The method of claim 20, wherein at least one term for the exchange of primary value-added information is negotiated between parties, the terms selected from the group consisting of an offer, an acceptance, and consideration.

29. The method of claim 28, wherein the at least one term changes in real time.

30. The method of claim 28, wherein access to the at least one term is restricted by at least one of a pass phrase, a password, a correct answer to a query, a real time authentication with a biometric, a real time authentication with personal entropy information, real time telemetry data, and access to additional transaction records.

31. The method of claim 28, wherein the at least one term is referenced by a subsequent transaction.

32. The method of claim 28, wherein the at least one term is access restricted by a provider of at least one value-adding component.

33. The method of claim 28, wherein the at least one term is traced by a provider of at least one value-adding component.

34. The method of claim 28, wherein the at least one term is authenticated by a provider of at least one value-adding component.

35. The method of claim 28, wherein the at least one term is accessed for at least one of verification, authentication, and authorization.

36. The method of claim 28, wherein the at least one term comprises at least one of readable text, visible color, voice command, and visual instructions.

37. The method of claim 28, wherein the at least one term comprises humanly perceptible information.

38. The method of claim 20, wherein the value-added information is convertible into a tangible good.

39. The method of claim 20, further comprising verifying the value-added information.

40. The method of claim 20, further comprising authenticating the value-added information.

41. The method of claim 20, wherein the value-adding components comprise at least one of an equity purchase right, an option, a warrant, and a security instrument.

42. The method of claim 20, wherein the value-adding components comprise a non-cash service.

43. A method for conducting at least one trusted transaction between at least two parties, comprising:

authenticating the at least two parties;

agreeing to a security of a transmission channel;

exchanging secondary value-added information;

determining at least one term for a primary value-added information exchange; and

facilitating payment for the transaction based on the terms.

44. The method of claim 43, wherein the step of facilitating payment for the transaction is accomplished in real-time.

45. The method of claim 44, wherein the at least one term includes micropayment systems.

46. The method of claim 43, wherein the transaction is governed by at least one of legal restrictions that apply to at least one of the parties, a timing of the transaction, a geographic location of the transaction, and value-added information.

47. The method of claim 43, wherein the value-added information is represented physically.

48. The method of claim 43, wherein the secondary value-added information comprises at least one of an equity option and at least one term from a previous trusted transaction.

49. The method of claim 43, wherein the secondary value-added information derives benefit from a previous trusted transaction.

50. The method of claim 49, wherein the at least two trusted transactions are substantially contiguous.

51. The method of claim 49, wherein the at least two trusted transactions have

at least one of a time or an event limitation.

52. The method of claim 43, further comprising the step of:

agreeing to at least one term for a different transaction.

53. The method of claim 43, wherein the first trusted transaction enables manipulation of information in a subsequent transaction.

54-67. -67. (canceled)

68. A method for bi-directionally exchanging value-added information between at least two parties, comprising:

associating a plurality of unique identifiers with the value-added information, the value-added information including at least one of a digital watermark, a file header, a file attachment, and a file wrapper;

associating each of the at least two parties with unique identifiers, the unique identifiers including at least one of a digital watermark, a file header, a file attachment, and a file wrapper; and

exchanging value-added information between the at least two parties.

69. The method of claim 68, wherein the transaction and the unique identifiers are stored for subsequent reference.

70. The method of claim 68, wherein unique identifiers are access restricted by at least one pre-determined rule.

71. The method of claim 68, wherein the unique identifiers are asymmetrically access restricted.

12. The method of claim 70, wherein the access restriction is dependent on verification of a querying party.

73. The method of claim 70, wherein the access restriction allows value-added information to be transmitted in an altered format.

74. The method of claim 68, further comprising the step of:

associating the bi-directional exchange of value-added information with a subsequent exchange of additional value-added information.

75. The method of claim 74, wherein the additional value-added information is governed by at least one separate term.

76. The method of claim 74, wherein the additional value-added information comprises a right to purchase equity in at least one of the parties to the transaction.

77. The method of claim 68, further comprising the step of agreeing to at least one term for a subsequent transaction.

78-140. -140. (canceled)

141. A device for conducting trusted transactions between at least two parties, comprising:

a steganographic cipher;

a controller for receiving input data or outputting output data; and

at least one input/output connection, wherein the device has a unique identification code.

142. The device of claim 141, wherein the unique identification code is predetermined.

143. The device of claim 141, wherein the unique identification code is upgradeable.

144. The device of claim 141, wherein the steganographic cipher comprises:

a number generator selected from the group consisting of a pseudo-random number generator and a random number generator;

a predetermined key generation algorithm selected from the group consisting of a hash function and a special one-way function;

a predetermined message information selected from the group consisting of a digital signature, a time stamp, a digital watermark, and function-dependent data;

a predetermination of the information carrier signals characteristics selected from the group consisting of a perceptual characteristic and a signal feature.

145. The device of claim 141, wherein the steganographic cipher manipulates the input data.

146. The device of claim 141, wherein the steganographic cipher manipulates the output data

147. The device of claim 141, wherein the input of input data is controlled by predetermined information selected from the group consisting of a pass phrase, a password, biometric data, and a personal entropy query.

148. The device of claim 144, wherein an identification of a device holder requires at least one additional iteration of verification by at least one of a pass phrase, a password, biometric data, and a personal entropy query.

149. The device of claim 141, wherein the device converts at least one value-added information metrics selected from the group consisting of a price, a selection, and a service into humanly perceptible information.

150. The device of claim 149, wherein the humanly perceptible information relates to at least one of a present value cost to the party, at least one term for use, a level of confidence over the transaction, a level of confidence over transmission security, and a data integrity metric of the value-added information.

151. The device of claim 141, wherein the device is manufactured as a device selected from the group consisting of a smart card, a microchip, and a software application.

152. The device of claim 151, wherein the manufactured device is tamper-resistant.

153. The device of claim 151, wherein the manufactured device ceases to function if at least one function of the manufactured device is altered by an unauthorized party.

154. The device of claim 151, wherein the software application is subject to a steganographic cipher for serialization or creating unique instances of individual copies of the application.

155. The device of claim 141, further comprising an analog to digital converter.

156. The device of claim 141, wherein the device is securely linked to at least one of a means for payment and a transmission channel for private key exchange and approval.

157. The device of claim 156, wherein the key approval is selected from the group consisting of identification, authentication, and authorization.

158. The device of claim 141, wherein the device transacts according to at least one predetermination of at least an identity of the vendor, a plurality of conditions of the information transfer, a payment, and an identity of a separate but similar device.

159. The device of claim 141, wherein the device further comprises:

an internal memory.

160. A trusted transaction device for transmitting authentic value-added information data between at least two parties, comprising:

a display;

a unique identifier;

means for ciphering information input and output;

means for interacting with other similarly functional devices; and

means for storing or retrieving value-added information and a value-adding component.

161. The device of claim 160, wherein the display transceives cryptographically verifiable information.

162. The device of claim 161, wherein the cryptographically verifiable information is observed by a user.

163. The device of claim 160, wherein the unique identifier is upgradeable.

164. The device of claim 160, wherein the unique identifier is serialized.

165. The device of claim 160, wherein the unique identifier comprises at least one of a means for facilitating transaction authorization, a means for facilitating bandwidth requirements, and a means for associating the unique identifier with information.

166. The device of claim 160, wherein the means for ciphering information comprises at least one of a means for facilitating transaction authorization, a means for facilitating bandwidth requirements, and a means for associating the unique identifier with information.

167. The device of claim 160, further comprising:

a means for establishing communications/connecting with other similarly outfitted devices;

a means for storing or retrieving trusted transaction value-adding component data; and

a

means for attaching storage or transducers to the device.

168. The device of claim 167, further comprising:

means for anonymous tracing of the transaction.

169. The device of claim 167, wherein information is processed in real time.

170-186. -186. (canceled)