ELECTRONIC TRANSACTION VERIFICATION

• US 20090313171A1
• Filed: 06/17/2008
• Published: 12/17/2009
• Est. Priority Date: 06/17/2008
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Yacobi, Yacov
• Application Number:
  US12/140,288
• Publication Number:
  US 20090313171A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Product registration of an electronic good (e.g., software) over the telephone is made easier by reducing the length of code that is communicated to the electronic good provider (e.g., software provider). More particularly, an electronic goods provider provides a product ID comprising a message and digital signature to a client purchasing their electronic good. The electronic good is registered over a telephone by providing only the digital signature portion of a product ID to a telephone registration server having the electronic good provider'"'"'s private key. The telephone registration server computes a message from the digital signature and private key. If the message has an expected structure (e.g., zeros in certain places) the software is authentic. Therefore, the verification method ensures software authenticity using only a portion of the product ID and thereby reducing the amount of information that needs to be transferred over the telephone to perform the registration process.

Claims

1. A method for verification of a digital good, comprising:

providing a product identification code (product ID) to a client, the product ID comprises a message and a digital signature signed with a digital good provider'"'"'s private key;

providing the digital good provider'"'"'s private key to a trusted verifier;

receiving the digital signature from the client to the trusted verifier by a telephone;

reconstructing the message from the digital good provider'"'"'s private key and the digital signature;

examining the message for an expected structure; and

communicating a registration code from the trusted verifier to the client if the expected structure is present.

2. The method of claim 1, reconstructing the message comprising multiplying the digital signature by the digital good provider'"'"'s private key.

3. The method of claim 2, comprising inputting the registration code into an electronic device to provide full operation of the digital good.

4. The method of claim 3, the trusted verifier segmenting the digital good provider'"'"'s private key into a plurality of shares and storing respective shares in a plurality of independent servers.

5. The method of claim 4, respective independent servers reconstructing respective shares of the message and communicating their respective shares of the message to one of the plurality of independent servers which performs a recovery of the message.

6. The method of claim 5, respective shares of the message from the entire plurality of independent servers are required to reconstruct the message.

7. The method of claim 5, respective shares of the message from a majority of the independent servers are required to reconstruct the message.

8. The method of claim 7, communicating the digital signature from the client to the trusted verifier comprising entering the digital signature on a touchtone keypad of the telephone.

9. The method of claim 5, the expected structure comprising zeroes in certain locations of the message.

10. The method of claim 5, comprising a verification option that comprises communicating the digital signature and the message to an un-trusted verifier who has a digital good provider'"'"'s first public key and a digital good provider'"'"'s second public key.

11. The method of claim 10, an untrusted verifier performing a verification comprising:

using a pairing function to map the digital good provider'"'"'s first public key and the message to a first number;

using the pairing function to map the digital good provider'"'"'s second public key and the digital signature to a second number; and

comparing the first and the second number and verifying the digital good'"'"'s authenticity if the first number and the second number are equal.

12. A system configured to verify product keys, comprising:

a telephone registration server comprising a software provider'"'"'s private key configured to receive a product ID code comprising a digital signature and a message from a client; and

a trusted verifier configured to receive the digital signature portion of the product ID from the client via a telephone and verify the authenticity of the digital signature according to a bi-linear pairing signature system.

13. The system of claim 12, the trusted verifier configured to verify the authenticity of the digital signature by reconstructing the message from the software provider'"'"'s private key and the digital signature and examining the message for an expected structure.

14. The system of claim 13, the trusted verifier configured to communicate a registration code from the trusted verifier to the client if the expected structure is present.

15. The system of claim 14, the trusted verifier comprising a plurality of independent servers, respective independent servers configured to store respective shares of the software provider'"'"'s private key and reconstruct respective shares of the message.

16. The system of claim 15, respective shares of the message from the entire plurality of independent servers are required to reconstruct the message.

17. The system of claim 15, respective shares of the message from a majority of the plurality of independent servers are required to reconstruct the message.

18. The system of claim 15, comprising an un-trusted verifier, the un-trusted verifier configured to:

receive the digital signature, the message, a first public key, and a second public key from the client;

calculate a pairing function that maps the first public key and the message to a first number;

calculate the pairing function that maps the second public key and the digital signature to a second number; and

compare the first and the second number and verifying the software'"'"'s authenticity if the first number and the second number are equal.

19. The system of claim 15, the length of the digital signature is substantially equal to half that of a digital signature algorithm (DSA) signature for a substantially equal strength encryption.

20. A method for verification of a software, comprising:

providing a product ID to a client, the product ID comprises a message and a digital signature signed with a software provider'"'"'s private key;

providing the software provider'"'"'s private key to a trusted verifier, the trusted verifier segmenting the software provider'"'"'s private key into a plurality of shares and storing respective shares in an independent server;

receiving the digital signature from the client to the trusted verifier by a telephone;

reconstructing the message from the software provider'"'"'s private key and the digital signature by multiplying the digital signature by the software provider'"'"'s private key;

examining the message for an expected structure comprising zeroes located in certain locations of the reconstructed message;

communicating a registration code from the trusted verifier to the client if the expected structure is present; and

inputting the registration code into an electronic device to provide full operation of the software.