SYSTEM AND METHOD FOR CREATING, VAULTING, TRANSFERRING AND CONTROLLING TRANSFERABLE ELECTRONIC RECORDS WITH UNIQUE OWNERSHIP

• US 20080133940A1
• Filed: 02/06/2008
• Published: 06/05/2008
• Est. Priority Date: 06/17/2002
• Status: Active Grant

• Current Assignee: Silanis Technology Inc. (OneSpan, Inc.)
• Original Assignee: Silanis Technology Inc. (OneSpan, Inc.)
• Inventors: LAURIE, Michael, Savchenko, Oleksiy, Al-Jaar, Robert
• Granted Patent: US 8,307,218 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

A system for securely vaulting, auditing, controlling and transferring electronic transferable records (TRs) with unique ownership, including at least one registry for registering the electronic transferable record with unique ownership in a TR registry record; at least one secure storage manager (SSM) associated with the registry, the SSM storing the transferable record registered in the registry as an authoritative copy, the secure storage manager being distinct from said registry. The transferable record can be transferred in a transaction between an originating party and a receiving party with a transaction descriptor including information about the parties involved in the transaction and an identification of the TR being transferred. The transaction descriptor is initially signed by the originating party with the TR, subsequently verified and countersigned by the registry and signed by said accepting party. The transaction descriptor, upon completion of the transaction, is stored in the TR registry record and serves to identify the authoritative copy of the TR.

Claims

1. A system for the secure creation, registration and storage of an authoritative copy of an electronic transferable record (TR), said system comprising:

an originator system for generating said authoritative copy of a TR, the originator system further generating TR origination evidence attesting to an ownership of said authoritative copy;

a secure storage manager for storing said authoritative copy of a TR generated by the originator system; and

a registry architecturally separate from the secure storage manager for registering said authoritative copy of a TR in a TR registry record, said TR registry record comprising;

a chain of ownership of said authoritative copy of a TR, said chain of ownership comprising at least said TR origination evidence; and

the secure storage manager storing said authoritative copy of a TR.

2. The system according to claim 1, wherein the originator system comprises:

electronic signature components for generating said TR and TR transaction evidence; and

an authoritative copy module collaborating with the secure storage manager and registry for establishing said TR stored in the secure storage manager as the authoritative copy thereof.

3. The system according to claim 1, wherein the originator system generates ancillary documents associated with the TR.

4. The system according to claim 1, wherein the secure storage manager comprises:

a registry interface for establishing secure communication with the registry; and

a TR repository manager for storing and retrieving said authoritative copy of a TR from a TR repository.

5. The system according to claim 1, wherein the TR registry record further comprises a hash of said TR.

6. The system according to claim 1, wherein the chain of ownership further comprises TR transfer evidence attesting to a change of ownership of said authoritative copy.

7. The system according to claim 1, wherein the TR registry record further comprises electronic signature tokens applied to said authoritative copy of the TR.

8. The system according to claim 1, further comprising a portal providing a secure access to each of said originator system, registry and secure storage manager.

9. A system for the joint storage of an authoritative copy of an electronic transferable record (TR) and ancillary documents in a repository, said system comprising:

a secure storage manager managing access to said authoritative copy of a TR in said repository;

a registry architecturally separate from the secure storage manager for registering said authoritative copy of a TR in a TR registry record, said TR registry record comprising;

a chain of ownership of said authoritative copy of a TR; and

a storage location of said authoritative copy of a TR; and

wherein the authoritative copy of a TR is accessible uniquely through said registry and said storage manager, the ancillary documents being separately accessible.

10. The system according to claim 9, wherein the secure storage manager comprises:

a registry interface for establishing secure communication with the registry; and

a repository manager for storing and retrieving said authoritative copy of a TR from the repository.

11. The system according to claim 9, wherein said storage location of the authoritative copy of a TR comprises information about the repository storing said authoritative copy of a TR.

12. The system according to claim 9, comprising accessing means for providing access to said authoritative copy of a TR uniquely through said registry and said storage manager, and for providing access to said ancillary documents directly.

13. The system according to claim 12, wherein the accessing means include a portal providing a secure access to each of said registry, secure storage manager and repository.

14. The system according to claim 13, wherein the portal provides a direct access to the repository for providing said separate access to the ancillary documents.

15. The system according to claim 13, wherein the accessing means further comprise an access path to said repository separate from the portal, said access path providing said separate access to the ancillary documents.

16. The system according to claim 12, wherein the accessing means further provide direct access to a non-authoritative copy of a TR, said non-authoritative copy being identified as not being the authoritative copy of a TR.