Systems and Methods for Performing File Distribution and Purchase

• US 20090216680A1
• Filed: 08/22/2008
• Published: 08/27/2009
• Est. Priority Date: 02/26/2008
• Status: Abandoned Application

• Current Assignee: Battelle Energy Alliance LLC (Battelle Memorial Institute)
• Original Assignee: Battelle Energy Alliance LLC (Battelle Memorial Institute)
• Inventors: Turner, Aaron R., McCown, Steven H.
• Application Number:
  US12/196,669
• Publication Number:
  US 20090216680A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A secure computing module (SCM) is configured for connection with a host device. The SCM includes a processor for performing secure processing operations, a host interface for coupling the processor to the host device, and a memory connected to the processor wherein the processor logically isolates at least some of the memory from access by the host device. The SCM generates a secure digital signature for a financial transaction and enables controlled content received through the host device. File distribution is performed from a content provider to a buyer or from a reseller to a buyer. The file distribution includes a financial transaction using secure digital signatures and possibly message encryption. The digital signatures and transaction details are communicated to appropriate financial organizations to authenticate the transaction parties and complete the transaction. The controlled content is transferred to the buyer from either the content provider or the reseller.

Claims

1. A secure computing module for operable coupling to a host device, comprising:

a processor for performing secure processing operations;

a host interface for operably coupling the processor to the host device; and

a memory operably coupled to the processor wherein the processor logically isolates at least some of the memory from access by the host device;

wherein the secure computing module is configured to;

generate a secure digital signature for a message including financial transaction details;

direct the host device to communicate the financial transaction details and the secure digital signature to a financial organization associated with a user of the secure computing module; and

enable controlled content received through the host device.

2. The secure computing module of claim 1, wherein the secure digital signature comprises a secure hash function generated using a secret key on a message comprising the financial transaction details and a transaction number identifier.

3. The secure computing module of claim 1, wherein the secure computing module is further configured to encrypt the financial transaction details, the secure digital signature, or combination thereof in isolation from the host device and prior to directing the host device to communicate the financial transaction details and the secure digital signature.

4. The secure computing module of claim 3, wherein the encryption is performed with a symmetric encryption process using a secret key known by the secure computing module and the financial organization associated with the user.

5. The secure computing module of claim 3, wherein the encryption is performed with an asymmetric encryption process using a public key associated with the financial organization.

6. The secure computing module of claim 1, wherein the host device is selected from the group consisting of cell phones, smartphones, pagers, Personal Digital Assistants, handheld computing platforms, wrist-worn computing systems, mobile computing systems, and desktop computing systems.

7. The secure computing module of claim 1, wherein the secure computing module is further configured to decrypt the controlled content for use by the host device.

8. The secure computing module of claim 1, further comprising a proximate-field wireless communicator operably coupled to the processor and configured for communication with another secure computing module associated with another host device when within a proximate-field range of the other secure computing module.

9. The secure computing module of claim 8, wherein the proximate-field wireless communicator is configured to communicate using available radio frequencies, infrared frequencies, 802.1 a/b/g/n type wireless connections, Bluetooth, RFID, WiFi, WiMax, or combinations thereof.

10. The secure computing module of claim 8, wherein the secure computing module uses the proximate-field wireless communicator to communicate the financial transaction details and the secure digital signature to the other secure computing module.

11. A method of performing file distribution, comprising:

selecting controlled content to be received from a content provider acting as a seller;

sending financial transaction details for the controlled content to a buyer;

signing the financial transaction details with a buyer'"'"'s secure digital signature using a buyer'"'"'s secure computing module;

signing the financial transaction details with a seller'"'"'s secure digital signature using a seller'"'"'s secure computing module, wherein the financial transaction details, the buyer'"'"'s secure digital signature, and the seller'"'"'s secure digital signature comprise a financial transaction package;

communicating the financial transaction package between the buyer and the seller;

communicating the financial transaction package to a seller'"'"'s financial organization;

communicating the financial transaction package to a buyer'"'"'s financial organization;

from the seller'"'"'s financial organization;

verifying the seller'"'"'s secure digital signature and the financial transaction details; and

sending a seller approval to the buyer'"'"'s financial organization; and

from the buyer'"'"'s financial organization;

verifying the buyer'"'"'s secure digital signature and the financial transaction details;

sending a buyer approval to the seller'"'"'s financial organization; and

performing a fund transfer from the buyer'"'"'s financial organization to the seller'"'"'s financial organization; and

communicating the controlled content from the content provider to the buyer'"'"'s secure computing module.

12. The method of claim 11, further comprising preventing the performing the fund transfer when the verifying the buyer'"'"'s secure digital signature and the financial transaction details is not successful or when the verifying the seller'"'"'s secure digital signature and the financial transaction details is not successful.

13. The method of claim 11, further comprising encrypting the financial transaction details, the buyer'"'"'s secure digital signature, the seller'"'"'s secure digital signature, or combinations thereof prior to at least one of the communicating acts.

14. The method of claim 11, further comprising decrypting the controlled content after the communicating the controlled content.

15. The method of claim 11, wherein verifying the financial transaction details comprise verifying a transaction amount, a buyer'"'"'s credentials, a seller'"'"'s credentials, or a combination thereof.

16. The method of claim 11, wherein signing the financial transaction details with the buyer'"'"'s secure digital signature comprises performing a secure hash function using a buyer'"'"'s secret key on a message comprising the financial transaction details and a buyer'"'"'s transaction number identifier.

17. The method of claim 11, wherein signing the financial transaction details with the seller'"'"'s secure digital signature comprises performing a secure hash function using a seller'"'"'s secret key on a message comprising the financial transaction details and a seller'"'"'s transaction number identifier.

18. The method of claim 11, further comprising communicating a transaction results to at least one of a buyer'"'"'s host device or a seller'"'"'s host device.

19. The method of claim 11, wherein communicating the controlled content comprises communicating an access authorization token.

20. The method of claim 19, further comprising communicating the access authorization token from the buyer'"'"'s secure computing module to an admittance controller to enable admittance of the buyer.

21. A method of performing file distribution, comprising:

selecting controlled content to be received from a reseller;

determining financial transaction details including a transaction amount and a content owner for the controlled content;

sending the financial transaction details for the controlled content to a buyer;

signing the financial transaction details with a buyer'"'"'s secure digital signature using a buyer'"'"'s secure computing module;

signing the financial transaction details with a reseller'"'"'s secure digital signature using a reseller'"'"'s secure computing module, wherein the financial transaction details, the buyer'"'"'s secure digital signature, and the reseller'"'"'s secure digital signature comprise a financial transaction package;

communicating the financial transaction package between the buyer and the reseller;

communicating the financial transaction package to a buyer'"'"'s financial organization;

communicating the financial transaction package to a content owner'"'"'s financial organization;

from the content owner'"'"'s financial organization;

verifying the financial transaction details and sending a seller approval to the buyer'"'"'s financial organization

from the buyer'"'"'s financial organization;

verifying the buyer'"'"'s secure digital signature and the financial transaction details;

sending a buyer approval to the content owner'"'"'s financial organization; and

performing a fund transfer from the buyer'"'"'s financial organization to the content owner'"'"'s financial organization; and

communicating the controlled content from the reseller'"'"'s secure computing module to the buyer'"'"'s secure computing module.

22. The method of claim 21, further comprising:

communicating the financial transaction package to a reseller'"'"'s financial organization;

from the reseller'"'"'s financial organization;

verifying the reseller'"'"'s secure digital signature and the financial transaction details; and

sending a reseller'"'"'s approval to the buyer'"'"'s financial organization; and

performing another fund transfer from the buyer'"'"'s financial organization to the reseller'"'"'s financial organization.

23. The method of claim 21, further comprising preventing the performing the fund transfer when the verifying the buyer'"'"'s secure digital signature and the financial transaction details is not successful.

24. The method of claim 21, further comprising encrypting the financial transaction details, the buyer'"'"'s secure digital signature, the reseller'"'"'s secure digital signature, or combinations thereof prior to at least one of the communicating acts.

25. The method of claim 21, wherein determining the financial transaction details comprises determining a transaction amount, a buyer'"'"'s credentials and a reseller'"'"'s credentials.

26. The method of claim 21, wherein signing the financial transaction details with the buyer'"'"'s secure digital signature comprises performing a secure hash function using a buyer'"'"'s secret key on a message comprising the financial transaction details and a buyer'"'"'s transaction number identifier.

27. The method of claim 21, wherein signing the financial transaction details with the reseller'"'"'s secure digital signature comprises performing a secure hash function using a reseller'"'"'s secret key on a message comprising the financial transaction details and a reseller'"'"'s transaction number identifier.

28. The method of claim 21, wherein communicating the financial transaction package between the buyer and the reseller comprises communicating between the buyer'"'"'s secure computing module and the reseller'"'"'s secure computing module via a proximate-field wireless communication channel.

29. The method of claim 28, wherein communicating via the proximate-field wireless communication channel comprises communicating using available radio frequencies, infrared frequencies, 802.1 a/b/g/n type wireless connections, Bluetooth, RFID, WiFi, WiMax, or combinations thereof.

30. The method of claim 21, further comprising communicating a transaction results to at least one of a buyer'"'"'s host device, a content owner'"'"'s host device, or a reseller'"'"'s host device.

31. The method of claim 21, wherein communicating the controlled content comprises communicating an access authorization token.

32. The method of claim 31, further comprising communicating the access authorization token from the buyer'"'"'s secure computing module to an admittance controller to enable admittance of the buyer.

33. A system for performing file distribution, comprising:

a first host device associated with a buyer of controlled content and including a first secure computing module operably coupled thereto, the first secure computing module configured to;

generate a buyer'"'"'s secure digital signature for a message including financial transaction details;

direct the first host device to communicate the financial transaction details and the secure digital signature to a buyer'"'"'s financial organization and to a second secure computing module; and

communicate the controlled content to the second secure computing module; and

a second host device associated with a seller of the controlled content and including the second secure computing module operably coupled thereto, the second secure computing module configured to;

generate a seller'"'"'s secure digital signature for the message;

direct the second host device to communicate the financial transaction details and the secure digital signature to a seller'"'"'s financial organization and to the first secure computing module; and

receive the controlled content from the second secure computing module.