METHOD AND SYSTEM FOR THE SUPPLY OF DATA, TRANSACTIONS AND ELECTRONIC VOTING

• US 20100332839A1
• Filed: 06/25/2010
• Published: 12/30/2010
• Est. Priority Date: 11/06/2001
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: OWLETT, John, TYABJI, Imran Faiz, DARE, Peter Roy
• Granted Patent: US 9,794,236 B2
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity'"'"'s electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity'"'"'s electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Claims

1. A system for transfer of ownership of electronic property, comprising:

an electronic property signed with an electronic signature by a first entity;

a digital certificate generated and signed with an electronic signature by the first entity, the digital certificate including an indication of a second entity to which the electronic property is transferred, and an indication of data which is to be supplied to the second entity from a source or the data itself, wherein the electronic property and the digital certificate include a link means connecting the electronic property with the digital certificate.

2. The system as claimed in claim 1, wherein the link means is a bit-stream generated from a serial number of the digital certificate and an identifier referencing the transfer, the bit-stream being included in the electronic property and the bit-stream or an indication of it being included in the digital certificate.

3. The system as claimed in claim 1, wherein the link means is a digital watermark with a watermark key, wherein the watermark is included in the electronic property and the watermark key or an indication of it is included in the digital certificate.

4. The system as claimed in claim 1, wherein the electronic property is signed by the first entity using a private key of a public/private key pair and the corresponding public key or an indication of it is provided in the digital certificate.

5. The system as claimed in claim 1, wherein the electronic property is encrypted by the first entity using the public key of a public/private key pair of the second entity.

6. The system as claimed in claim 5, wherein the electronic property is encrypted by the first entity using a symmetrical cipher with a session key and the session key is encrypted using the public key of a private/public key pair of the second entity.

7. The system as claimed in claim 1, wherein the digital certificate has a validity period which begins earlier than the time of generation of the digital certificate.

8. The system as claimed in claim 1, wherein the digital certificate has a second validity period relating to the period for the duration of which the rights in the electronic property are transferred.

9. The system as claimed in claim 1, wherein a second digital certificate is provided, signed with an electronic signature by a third entity and including:

an indication of the first entity;

an indication of the second entity;

an indication of the third entity; and

data to be supplied.

10. The system as claimed in claim 1, wherein the data to be supplied includes the public key of a private/public key pair of the first entity.

11. The system as claimed in claim 1, wherein the transfer of electronic property is tracked by each entity having an account identified by the electronic property, an account being incremented or decreased by a unit upon transfer of the electronic property.

12. The system as claimed in claim 11, wherein the account is identified by a hash of the electronic property.

13. A method for transfer of ownership of electronic property from a first entity to a second entity, comprising:

the first entity signing an electronic property with an electronic signature; and

generating a digital certificate signed with an electronic signature by the first entity and including an indication of the second entity and an indication of data which is to be supplied to the second entity from a source or the data itself, wherein the electronic property and the digital certificate include a link means connecting the electronic property with the digital certificate.

14. The method as claimed in claim 13, wherein the method includes the first entity sending the electronic property and the digital certificate to the second entity.

15. The method as claimed in claim 13, wherein the link means is a bit-stream generated from a serial number of the digital certificate and an identifier referencing the transfer, the bit-stream being included in the electronic property and the bit-stream or an indication of it being included in the digital certificate.

16. The method as claimed in claim 13, wherein the link means is a digital watermark with a watermark key, wherein the watermark is included in the electronic property and the watermark key or an indication of it is included in the digital certificate.

17. The method as claimed in claim 13, wherein the method includes the first entity signing the electronic property using a private key of a public/private key pair and the corresponding public key or an indication of it is provided in the digital certificate.

18. The method as claimed in claim 13, wherein the method includes the first entity encrypting the electronic property using the public key of a public/private key pair of the second entity.

19. The method as claimed in claim 18, wherein the method includes the first entity encrypting the electronic property using a symmetrical cipher with a session key and encrypting the session key with the public key of a private/public key pair of the second entity.

20. The method as claimed in claim 13, wherein the digital certificate has a validity period which begins earlier than the time of generation of the digital certificate.

21. The method as claimed in claim 13, wherein the digital certificate has a second validity period relating to the period for the duration of which the rights in the electronic property are transferred.

22. The method as claimed in claim 13, wherein the method includes the second entity obtaining a second digital certificate, signed with an electronic signature by a third entity and including:

an indication of the first entity;

an indication of the second entity;

an indication of the third entity; and

data to be supplied.

23. The method as claimed in claim 13, wherein the data to be supplied includes the public key of a private/public key pair of the first entity.

24. The method as claimed in claim 13, wherein the transfer of electronic property is tracked by each entity having an account identified by the electronic property, an account being incremented or decreased by a unit upon transfer of the electronic property.

25. The method as claimed in claim 24, wherein the account is identified by a hash of the electronic property.

26. A computer program product stored on a computer readable storage medium comprising computer readable program code means for performing the steps of:

the first entity signing an electronic property with an electronic signature; and

generating a digital certificate signed with an electronic signature by the first entity and including an indication of the second entity and an indication of data which is to be supplied to the second entity from a source or the data itself, wherein the electronic property and the digital certificate include a link means connecting the electronic property with the digital certificate.