Method and system for establishing a communication using privacy enhancing techniques

• US 20070106892A1
• Filed: 10/08/2004
• Published: 05/10/2007
• Est. Priority Date: 10/08/2003
• Status: Abandoned Application

• Current Assignee: Stephan Engberg
• Original Assignee: Stephan Engberg
• Inventors: Engberg, Stephan
• Application Number:
  US10/575,416
• Publication Number:
  US 20070106892A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates

Abstract

A method of establishing a communication path from a first legal entity in a data communication network comprises the steps of providing at least one private reference point comprised in the data communication network and establishing a communication path from the first legal entity to the private reference point. The method further comprises verifying the authentication of the first legal entity relative to the private reference point from the first legal entity and still further a method of establishing communication from the private reference point to a second legal entity through the data communication network without disclosing the identity of the first legal entity without disclosing the identity of the first legal entity.

Claims

1. A method of establishing a communication path from a first legal entity in a data communication network, comprising the steps of:

providing at least one private reference point comprised in said data communication network,

establishing a communication path from said first legal entity to said private reference point,

verifying the authentication of said first legal entity relative to said private reference point from said first legal entity and

establishing communication from said private reference point to a second legal entity through said data communication network without disclosing the identity of said first legal entity.

2. The method according to claim 1, further comprising a preliminary step of authenticating said first legal entity by registering data selected from the group consisting of biometrics, a signature, a code and any combinations thereof and comparing the registered data with correspondingly stored data.

3. The method according to claim 1 or 2, said first legal entity being an identity device.

4. The method according to claim 1 or 2, wherein said first legal entity comprises a card including encrypted data, said method further comprising:

said first legal entity receiving an encrypted key from said private reference point,

decrypting said encrypted key using a second stored key, and

decrypting said encrypted data using said key.

5. The method according to claim 1 or 2, said communication network being selected from the group consisting of a personal area network, local area network, a wide area network, a global area network, the Internet, a radio network, a PSTN, a GSM network, a CDMA network, a UMTS network and any combinations thereof.

6. The method according to claim 1 or 2, said private reference point being addressable by the authenticated holder of said first legal entity from a computer communicating with said data communication network.

7. The method according to claim 1 or 2, further comprising said first legal entity allowing or blocking access to said private reference point by a third legal entity.

8. The method according to claim 7, wherein said third legal entity is a party selected from the group consisting of a third party and said first legal entity.

9. The method according to claim 1 or 2, wherein said communication involves creating and negotiating an accountability path for this otherwise anonymous transaction dynamically adapted to the context risk profile.

10. The method according to claim 9, wherein said second legal entity establishes a procedure to identify a party selected from the group consisting of said first legal entity and the holder of said first legal entity.

11. The method according to claim 1 or 2, wherein said specific identification information is selected from the group consisting of at least one of biometrics, name, digital signature, and a code.

12. The method according to claim 1 or 2, further comprising:

providing an identity provider and a service provider,

establishing communication from said second legal entity to said service provider,

establishing communication from said service provider to said identity provider,

providing a fifth legal entity, constituted by a financial institution,

establishing communication from said service provider to said fourth legal entity,

transmitting information from said second legal entity to said service provider,

transmitting said information from said service provider to said identity provider,

transmitting said information from said identity provider to said fifth legal entity,

said fourth legal entity responding to said information by transmitting an payment accept to said identity provider,

said identity provider transmitting payment accept to said service provider, and

said service provider transmitting payment accept to said second legal entity.

13. A system for establishing a communication path from a first legal entity in a data communication network, comprising:

at least one private reference point comprised in said data communication network,

a communication path defined from said first legal entity to said private reference point,

the authentication of said first legal entity being verified relative to said private reference point from said first legal entity and

a path of communication established from said private reference point to a second legal entity through said data communication network without disclosing the identity of said first legal entity to said second legal entity.

14. The system according to claim 13, wherein said private reference point is stored on a server communicating with said data communication network.

15. The system according to claim 13 or 14, wherein said communication network is selected from the group consisting of a personal area network, a local area network, a wide area network, a radio network, a global area network, the Internet, a PSTN, a GSM network, a CDMA network, a UMTS network and any combinations thereof.

16. The system according to claim 13 or 14, wherein said first legal entity is an identity device.

17. The system according claim 13 or 14, wherein said first legal entity comprises a card including encrypted data for verifying the authenticity relative to said private reference point.

18. The system according to claim 13 or 14, wherein said authenticity of said first legal entity is obtained by use of data selected from the group consisting of at least one of biometrics and codes and digital signatures.

19. (canceled)