SYSTEM AND METHOD FOR REGISTERING AND CERTIFYING ACTIVITY AND/OR COMMUNICATION BETWEEN TERMINALS

• US 20090119192A1
• Filed: 12/18/2006
• Published: 05/07/2009
• Est. Priority Date: 12/19/2005
• Status: Abandoned Application

• Current Assignee: Universidad de Zaragoza
• Original Assignee: Consejo Superior de Investigaciones Científicas,, Universidad de Zaragoza
• Inventors: Guillen, Pedro Bueso, Gregorio, Juan Ignacio Garces, Cinca, Carlos Serrano, Munoz Soro, Jose Felix, Villa, Jose Antonio Lazaro
• Application Number:
  US12/278,232
• Publication Number:
  US 20090119192A1
• Time in Patent Office: Days
• US Class Current: 705/30
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

The invention relates to a system and method for registering and certifying activity and/or communication between terminals, of the type in which a registry and certification service provider registers the telematic content exchanged between a user and a service provider during a transaction using a registry and certification server and issues an electronic certification upon completion of the service. According to the invention, the registry and certification server is connected to an official time server in order to obtain reliable time stamps and to a client capture module which is installed in the user terminal in order to register periodic captures of the interface of the user terminal and data relating to the connections established thereby and to include same in the electronic certification document together with the reliable time stamps. The electronic certification document is authenticated using an electronic signature provided by the registry and certification service provider.

Claims

1. System for registering and certifying activity and/or communication between a user terminal and a service provider during a transaction, characterised in that it comprises a Registration and Certification Server, belonging to a Registration and Certification Service Provider, which collects the electronic actions carried out during a transaction and issues an electronic certification document when the transaction is completed, with the Registration and Certification Server being connected to:

an official time server, through a network, in order to obtain reliable time stamps; and

a Client Capture Module installed on the user terminal, through a secure connection, in order to register on the Registration and Certification Server the periodic captures of the user terminal'"'"'s interface, in addition to data of the connections established by said user terminal, so that the electronic certification document includes such connection data and said captures of the user terminal'"'"'s interface together with the time stamps that certify the moment of each operation, and an advanced electronic signature of the Registration and Certification Service Provider.

2. Procedure for registering and certifying the activity and/or communication between a user terminal and a service provider during a transaction, carried out in accordance with the system of claim 1, characterised in that it comprises the following stages of:

installing a Client Capture Module on the user'"'"'s terminal through a secure connection;

the user'"'"'s terminal requesting a registration and certification service from the Registration and Certification Server, establishing a secure connection if there isn'"'"'t one;

the Registration and Certification Server consulting the time with the time server;

opening an electronic record file and sending an acknowledgement to the user'"'"'s terminal;

a registration cycle during which, after obtaining the IP of the providers to which the user'"'"'s terminal connects, a periodic capture is made of the images shown on the user terminal'"'"'s screen in graphic format, in addition to the entries made by the user using the keyboard and the mouse and exchanged multimedia content, periodic security checks are made of the Client Capture Module and the information capture is sent to the Registration and Certification server, which in turn periodically consults the time server in order to insert times in the electronic certification document together with the captured data in order to establish the time at which the data was captured;

the user'"'"'s terminal requesting the registration and certification service to end;

signing the electronic certification document using the advanced electronic signature of a Registration and Certification Service Provider;

issuing and storing the electronic certification document;

the user'"'"'s terminal acknowledging receipt; and

closing the connection with the user'"'"'s terminal.

3. Procedure according to claim 2, characterised in that when the service provider to which the user terminal connects uses secure protocols, the Registration and Certification Server connects with a certification authority and/or a certification services provider in order to verify the identity of the service provider, with a view to including this authentication in the electronic certification document.

4. Procedure according to claim 2 characterised in that the Registration and Certification Server verifies the authenticity of the user'"'"'s terminal by means of a password or certificate.

5. Procedure according to claim 2 characterised in that the captures of the user'"'"'s interface, consist at least of:

the capture in graphic format of the images shown on the user'"'"'s screen or monitor;

the capture of the actions carried out with the mouse if there is one, with the coordinates;

the capture of taps on the keyboard;

the capture of any type of multimedia information, such as sound messages, received or sent by the user'"'"'s terminal; and

the capture of any information regarding the correspondence between each different connection made by the user'"'"'s terminal and the areas of the user'"'"'s screen that display the session window or windows.

7. Procedure according to claim 2, characterised in that the electronic certification document is structured as a film that shows sequentially the captures made and their time stamps.

8. Procedure according to claim 2 characterised in that the user'"'"'s terminal functions without any connection to any service provider, by gathering and certifying the electronic certification document using solely the user'"'"'s activity on his own terminal.