METHOD FOR AUTOMATICALLY VALIDATING A TRANSACTION, ELECTRONIC PAYMENT SYSTEM AND COMPUTER PROGRAM

• US 20070294183A1
• Filed: 05/24/2007
• Published: 12/20/2007
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Camenisch, Jan, Hohenberger, Susan
• Granted Patent: US 8,051,010 B2
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3255 using group based signatures, e.g. ring or threshold signatures

Abstract

A method, system and computer program product relating to automatically validating a transaction between an issuer having a signing key, an emitter having an emitter key, an acceptor having a unique identity and a limit on transactions and a validator.

Claims

1. A method for automatically validating a transaction between an issuer having a signing key, an emitter having an emitter key, an acceptor having an unique identity and a limit on transactions and a validator, comprising:

withdrawing a voucher from the issuer by the emitter, the voucher being computed using a first two-party protocol between the issuer and the emitter based on the signing key of the issuer and the emitter key of the emitter;

spending the voucher with the acceptor by the emitter, wherein a money laundering check value is computed using a second two-party protocol between the emitter and the acceptor based on the voucher, a transaction number between the emitter and the acceptor, a transaction challenge value generated by the acceptor and the unique identity of the acceptor;

depositing the voucher, the transaction challenge value and the money laundering check value with the validator by the acceptor; and

validating the transaction by the validator by verifying that the number of transactions between the emitter and the acceptor is below the limit on transactions of the acceptor by comparing the money laundering check value with money laundering check values already deposited with the validator in earlier transactions.

2. The method according to claim 1, wherein,

in the step of spending, a proof of knowledge is computed by the emitter and transmitted to the acceptor;

in the step of depositing, the proof is deposited with the validator; and

the step of validating further comprises verifying that the proof is valid with respect to the unique identity of the acceptor, the voucher and the money laundering check value.

3. The method according to claim 2, wherein:

in the step of validating, the validator verifies that the proof was computed based on the limit on transactions of the acceptor.

4. The method according to claim 1, wherein:

if the validator detects that a money laundering check value deposited with the validator in an earlier transaction is equal to the money laundering check value of the current transaction, the step of validating further comprises;

rejecting the voucher;

retrieving a transaction challenge value and a voucher used in the earlier transaction; and

if the transaction challenge value used in the earlier transaction and the transaction challenge value are different, an identity of the emitter is computed by the validator based on the vouchers used in the earlier and current transaction.

5. The method according to claim 1, wherein:

in the step of validating, the validator compares the voucher with a voucher deposited in an earlier transaction; and

if the issuer detects that a voucher deposited with the validator in an earlier transaction is equal to the voucher of the current transaction, the step of validating further comprises the steps of;

retrieving the transaction challenge value used in the earlier transaction;

if the transaction challenge value used in the earlier transaction and the transaction challenge value are equal, the voucher is rejected by the validator; and

if the transaction challenge value used in the earlier transaction and the transaction challenge value are different, an identity of the emitter is computed by the validator based on the vouchers used in the earlier and current transaction.

6. The method according to claim 4, wherein:

in the step of withdrawing, the emitter provides a proof of knowledge of a wallet secret to the issuer and the voucher is based on the wallet secret;

in the step of spending, a wallet check value is computed and transferred to the acceptor;

in the step of depositing, the wallet check value is deposited with the validator; and

in the step of validating, based on wallet check values of the current and earlier transactions, the wallet secret of the emitter is computed by the validator, if the issuer detects that the voucher or the money laundering check value have been deposited with the validator in an earlier transaction and the transaction challenge value of the current transaction is equal to the transaction challenge value used in the earlier transaction.

7. The method according to claim 1, wherein in the step of spending, the acceptor verifies that the transaction number is below the limit on transactions and abandons the transaction, if the transaction number is above the limit on transactions.

10. The computer program product according to claim 1, wherein,

the program instructions for spending includes program instructions for computing a proof of knowledge by the emitter and transmitted to the acceptor;

the program instructions for depositing include program instructions for depositing the proof with the validator; and

the program instructions for validating further comprises program instructions for verifying that the proof is valid with respect to the unique identity of the acceptor, the voucher and the money laundering check value.

11. The computer program product according to claim 10, wherein:

the program instructions for validating include program instructions for verifying by the validator that the proof was computed based on the limit on transactions of the acceptor.

8. An electronic payment system comprising:

a bank computer system for issuing coins of a predetermined denomination, the bank computer system including a signing key;

a user computer system for emitting the coins, a merchant computer system for accepting the coins, the user computer system including an emitter key;

an acceptor computer system including a unique identity and a limit on transactions; and

a validator computer system for validating the coins,

a data network connecting the bank computer system, the user computer system, the merchant computer system and the validator computer system; and

wherein the electronic payment system configured to;

withdraw a voucher from the bank computer system by the user computer system, the voucher being computed using a first two-party protocol between the bank computer system and the user computer system based on the signing key of the bank computer system and the emitter key of the user computer system;

spend the voucher with the acceptor by the user computer system, wherein a money laundering check value is computed using a second two-party protocol between the user computer system and the acceptor computer system based on the voucher, a transaction number between the user computer system and the acceptor computer system, a transaction challenge value generated by the acceptor computer system and the unique identity of the acceptor computer system;

deposit the voucher, the transaction challenge value and the money laundering check value with the validator computer system by the acceptor computer system; and

validate the transaction by the validator computer system by verifying that the number of transactions between the user computer system and the acceptor computer system is below the limit on transactions of the acceptor computer system by comparing the money laundering check value with money laundering check values already deposited with the validator computer system in earlier transactions.

9. A computer program product embodied in computer readable medium for automatically validating a transaction between an issuer having a signing key, an emitter having an emitter key, an acceptor having an unique identity and a limit on transactions, and a validator, the computer program product comprising program instructions executable by at least one processor of a computer system, the program instructions including instructions for:

withdrawing a voucher from the issuer by the emitter, the voucher being computed using a first two-party protocol between the issuer and the emitter based on the signing key of the issuer and the emitter key of the emitter;

spending the voucher with the acceptor by the emitter, wherein a money laundering check value is computed using a second two-party protocol between the emitter and the acceptor based on the voucher, a transaction number between the emitter and the acceptor, a transaction challenge value generated by the acceptor and the unique identity of the acceptor;

depositing the voucher, the transaction challenge value and the money laundering check value with the validator by the acceptor; and

validating the transaction by the validator by verifying that the number of transactions between the emitter and the acceptor is below the limit on transactions of the acceptor by comparing the money laundering check value with money laundering check values already deposited with the validator in earlier transactions.

12. The computer program product according to claim 9, wherein:

if the validator detects that a money laundering check value deposited with the validator in an earlier transaction is equal to the money laundering check value of the current transaction, the program instructions for validating further program instructions for;

rejecting the voucher;

retrieving a transaction challenge value and a voucher used in the earlier transaction; and

if the transaction challenge value used in the earlier transaction and the transaction challenge value are different, computing an identity of the emitter by the validator based on the vouchers used in the earlier and current transaction.

13. The computer program product according to claim 9, wherein:

program instructions for validating includes program instructions for comparing by the validator the voucher with a voucher deposited in an earlier transaction; and

if the issuer detects that a voucher deposited with the validator in an earlier transaction is equal to the voucher of the current transaction, the program instructions for validating further comprise program instructions for;

retrieving the transaction challenge value used in the earlier transaction;

if the transaction challenge value used in the earlier transaction and the transaction challenge value are equal, the voucher is rejected by the validator; and

if the transaction challenge value used in the earlier transaction and the transaction challenge value are different, an identity of the emitter is computed by the validator based on the vouchers used in the earlier and current transaction.

14. The computer program product according to claim 13, wherein:

the program instructions for withdrawing include program instructions for providing by the emitter a proof of knowledge of a wallet secret to the issuer and the voucher is based on the wallet secret;

the program instructions for spending include program instructions for computing and transferring a wallet check value to the acceptor;

the program instructions for depositing include program instructions for depositing the wallet check value with the validator; and

the program instructions for validating include program instructions for computing, based on wallet check values of the current and earlier transactions, the wallet secret of the emitter by the validator, if the issuer detects that the voucher or the money laundering check value have been deposited with the validator in an earlier transaction and the transaction challenge value of the current transaction is equal to the transaction challenge value used in the earlier transaction.

15. The computer program product according to claim 9, wherein the program instructions for spending include program instructions for verifying by the acceptor that the transaction number is below the limit on transactions and abandons the transaction, if the transaction number is above the limit on transactions.

16. An issuer for issuing a voucher, in particular a coin, to an emitter, the issuer computing the voucher using a first two-party protocol between the issuer and the emitter based on a signing key of the issuer and an emitter key of the emitter.

17. An acceptor for accepting vouchers, in particular coins, from an emitter, the vouchers being computed using a first two-party protocol between an issuer and the emitter based on a signing key of the issuer and an emitter key of the emitter, the acceptor being provided for computing a money laundering check value by using a second two-party protocol between the emitter and the acceptor based on the voucher, a transaction number between the emitter and the acceptor, a transaction challenge value generated by the acceptor and the unique identity of the acceptor;

and

depositing the voucher, the transaction challenge value and the money laundering check value with a validator.

18. A validator for validating transactions between an issuer having a signing key, an emitter having an emitter key, an acceptor having an unique identity and a limit on transactions, the validator being provided for:

verifying that the number of transactions between the emitter and the acceptor is below the limit on transactions of the acceptor by comparing a money laundering check value with money laundering check values already deposited with the validator in earlier transactions.

19. An emitter provided for:

withdrawing a voucher from an issuer, the voucher being computed using a first two-party protocol between the issuer and the emitter based on a signing key of the issuer and an emitter key of the emitter;

spending the voucher with an acceptor, wherein a money laundering check value is computed using a second two-party protocol between the emitter and the acceptor based on the voucher, a transaction number between the emitter and the acceptor, a transaction challenge value generated by the acceptor and a unique identity of the acceptor.