System and method for secure electronic data delivery

• US 20070033400A1
• Filed: 08/03/2006
• Published: 02/08/2007
• Est. Priority Date: 08/08/2005
• Status: Active Grant

• Current Assignee: Raymond Senez
• Original Assignee: Raymond Senez
• Inventors: Senez, Raymond
• Granted Patent: US 8,033,459 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Electronic data is securely delivered from an issuer to a recipient, in the form of an encrypted object. Data belonging to the issuer to be delivered is first selected and then encrypted into the object. The object is registered with a transaction archive for tracking the object prior to transmitting the object to the recipient. Upon receipt, the recipient is prompted for an access code. Attempts to enter the access code by the recipient are registered with the transaction archive. The data is displayed to the recipient only after a correct access code has been entered and only after an attempt to enter the access code by the recipient is registered with the transaction archive.

Claims

1. A method for secure delivery of electronic data from an issuer to a recipient, the method comprising:

selecting data belonging to the issuer to be delivered;

encrypting the data into an object;

registering the object with a transaction archive for tracking the object;

transmitting the object to the recipient;

prompting the recipient for an access code;

registering attempts to enter the access code by the recipient with the transaction archive; and

displaying the data to the recipient only after a correct access code has been entered.

2. The method according to claim 1 including displaying the data to the recipient only after an attempt to enter the access code by the recipient is registered with the transaction archive.

3. The method according to claim 1 including verifying the issuer to the recipient using a certificate authority.

4. The method according to claim 1 including attaching a non-encrypted digital certificate to the data encrypted into the object.

5. The method according to claim 1 including restricting access to the transaction archive to only the issuer.

6. The method according to claim 1 including selecting a data packager to be encrypted into the object which permits the recipient to encrypt information into an object to be returned back to the issuer.

7. The method according to claim 1 including encrypting the data into the object using a private and public key pair.

8. The method according to claim 1 including disabling the object responsive to repeated attempts to enter an invalid access code.

9. The method according to claim 1 including registering the access code with a secure server and authenticating the recipient with the secure server to provide the recipient with the access code.

10. The method according to claim 9 including transmitting a plurality of objects to the recipient, each object having a respective access code associated therewith and authenticating the recipient with the secure server in the same manner to provide the recipient with each of the access codes.

11. The method according to claim 10 including transmitting the plurality of objects to the recipient from different issuers.

12. The method according to claim 9 including providing the recipient with authenticating information responsive to a successful response by the recipient to a query transmitted to the recipient by the issuer in the form of an enrolment object, and authenticating the recipient with the secure server by requesting the authenticating information from the recipient.

13. The method according to claim 1 including transmitting an object to the recipient which comprises an enrolment object which enrols the recipient with a secure server and provides the recipient with authenticating information responsive to a successful response by the recipient to a query by the enrolment object, and providing the recipient with an access code associated with a subsequently transmitted object upon the secure server subsequently receiving the authentication information from the recipient.

14. The method according to claim 13 including disabling the enrolment object upon providing the recipient with authenticating information.

15. The method according to claim 13 including determining a successful response by the recipient to the query by comparing a response by the recipient to a solution stored both within the enrolment object and on the secure server.

16. The method according to claim 13 including transmitting a plurality of enrolment objects to a plurality of recipients in which each of the recipients receives respective authenticating information from the secure server upon successfully responding to a query, and subsequently providing each of the recipients with an access code to a subsequently transmitted object upon receipt by the secure server of the respective authenticating information.

17. The method according to claim 16 wherein the plurality of recipients commonly receive a subsequently transmitted common object having an access code associated therewith and each of the recipients receives from the secure server the access code to the common object upon receipt of the respective authenticating information.

18. The method according to claim 1 wherein the recipient comprises an organization having a plurality of users and wherein the method includes selecting authorized ones of the users within the organization which are permitted to view the data when the data is encrypted into the object and permitting only the authorized ones of the users to view the data by providing each of the authorized ones of the users with a respective password including identification of a respective portion of the data to be viewed in association therewith.

19. A method for secure delivery of electronic data from an issuer to a recipient, the method comprising:

selecting data belonging to the issuer to be delivered;

placing the data into an object;

registering the object with a transaction archive for tracking the object;

transmitting the object to the recipient;

registering attempts to access the data by the recipient with the transaction archive; and

displaying the data to the recipient only after an attempt to access the data by the recipient is registered with the transaction archive.

20. A delivery system for secure delivery of electronic data from an issuer to a recipient in which the issuer and the recipient are linked by an electronic communication system for communicating electronic data there between, the system comprising:

a data packager for packaging selected data belonging to the issuer into an object for transmission to the recipient by the communication system;

the data packager including encryption means for encrypting the object so that an access code must be entered by the recipient prior to displaying the data; and

a transaction archive for registering the object being transmitted and for recording attempts to enter the access code.