SECURE E-PAYMENTS

• US 20090119215A1
• Filed: 11/07/2007
• Published: 05/07/2009
• Est. Priority Date: 11/07/2007
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Chen, Yuqun, Yacobi, Yacov
• Application Number:
  US11/936,259
• Publication Number:
  US 20090119215A1
• Time in Patent Office: Days
• US Class Current: 705/53
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07F 7/0826 Embedded security module

Abstract

Systems and methods that supply a fair transaction when a user (e.g., buyer) obtains digital content that is ordered from a merchant. A trusted component associated with a device of a user can compute a cryptographic hash value for the digital content (e.g., during a download thereof), wherein such hash value cannot be altered (e.g., tampered) by the user. Accordingly, the subject innovation implements a trusted agent on a user'"'"'s device, wherein such agent itself can further be downloaded to the user device as part of the transaction.

Claims

1. A computer implemented system comprising:

a repository that stores digital content; and

a trusted component that facilitates download of the digital content into a user'"'"'s device via computation of a cryptographic hash for the digital content.

2. The computer implemented system of claim 1, the cryptographic hash computed on the user'"'"'s device for transfer to a third party.

3. The computer implemented system of claim 2 further comprising a transaction log that includes the cryptographic hash.

4. The computer implemented system of claim 3 further comprising a key associated with the cryptographic hash.

5. The computer implemented system of claim 3 further comprising a logging component that maintains a log for the digital content and supplies a comparison between a log viewed by the user device and a log used on a server associated with the third party.

6. The computer implemented system of claim 3, the trusted component downloadable to the user'"'"'s device.

7. The computer implemented system of claim 6 further comprising an artificial intelligence component that infers download of the digital content based on classifiers.

8. The computer implemented system of claim 4, the digital content further comprising a manifest that contains a list of files that make up the digital content.

9. A computer implemented method comprising:

downloading a digital content to a user device;

computing a hash for the digital content via a trusted component; and

verifying payment for the digital content and proper download thereof on to the user device.

10. The computer implemented method of claim 9 further comprising supplying a key for the hash.

11. The computer implemented method of claim 10 further comprising supplying payment for the digital content to a trusted third party.

12. The computer implemented method of claim 10 further comprising looking up published list of hash values to determine existence of a match with the hash.

13. The computer implemented method of claim 11 further comprising comparing a log for download of digital content as viewed by the trusted third part and the user device.

14. The computer implemented method of claim 11 further comprising checking mapping of hash values to ascertain user'"'"'s receipt of the digital content.

15. The computer implemented method of claim 11 further comprising intelligently downloading the digital content via classifiers.

16. The computer implemented method of claim 11 further comprising assembling parts of the digital content on the user device.

17. The computer implemented method of claim 11 further comprising downloading the trusted component on the user device.

18. The computer implemented method of claim 11 further comprising including the hash as part of a transaction log.

19. The computer implemented method of claim 11 further comprising comparing the hash with values published by a supplier of the digital content.

20. A computer implemented system comprising:

storing means for storing digital content; and

computing means for computing a cryptographic hash that combines purchase of the digital content with payment thereof.