Method and Apparatus for Securely Distributing Digital Vouchers

• US 20150220891A1
• Filed: 02/06/2014
• Published: 08/06/2015
• Est. Priority Date: 02/06/2014
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Karlsson, David
• Application Number:
  US14/366,591
• Publication Number:
  US 20150220891A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/0457 the tickets being sent electronically
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

A disclosed method is implemented by a voucher server for distributing digital vouchers. The voucher server stores a plurality of encrypted digital vouchers, each being encrypted with a respective one of a plurality of encryption keys and each having an associated identifier. The voucher server receives, from a computing device, a request for a digital voucher, the request including an identifier. The voucher server determines if the received identifier matches an identifier of any of the plurality of encrypted digital vouchers. If the received identifier matches an identifier for a given one of the encrypted digital vouchers, the voucher server transmits the given encrypted digital voucher to the computing device. The voucher server does not have access to the encryption key used to encrypt the given encrypted digital voucher.

Claims

1-14. -14. (canceled)

15. A method implemented by a voucher server of distributing digital vouchers, the method comprising:

storing a plurality of encrypted digital vouchers, each being encrypted with a respective one of a plurality of encryption keys and each having an associated identifier;

receiving, from a computing device, a request for a digital voucher, the request including an identifier;

determining if the received identifier matches an identifier of any of the plurality of encrypted digital vouchers; and

if the received identifier matches an identifier for a given one of the encrypted digital vouchers, transmitting the given encrypted digital voucher to the computing device;

wherein the voucher server does not have access to the plurality of encryption keys.

16. The method of claim 15, further comprising rejecting the request if the received identifier does not match an identifier of any of the encrypted digital vouchers.

17. The method of claim 15:

wherein each associated identifier is a computing device identifier;

wherein the received identifier is a unique, device-specific identifier that identifies only the computing device and does not identify other computing devices; and

wherein the device-specific identifier is the only computing device identifier that matches the given encrypted digital voucher.

18. A method implemented by a computing device of redeeming a digital voucher, the method comprising:

transmitting an identifier to a voucher server;

based on the transmitting, receiving an encrypted digital voucher matching the identifier;

decrypting the encrypted digital voucher using an encryption key stored in secure, limited-access memory of the computing device to obtain a decrypted digital voucher; and

transmitting the decrypted digital voucher to a redemption server to redeem the digital voucher;

wherein the voucher server does not have access to the encryption key.

19. The method of claim 18, wherein said decrypting the encrypted digital voucher is performed by an application which is the only application on the computing device that is able to access the encryption key.

20. The method of claim 18, wherein the encryption key is a device-specific encryption key that is not accessible to other computing devices of the same type as the computing device.

21. The method of claim 18, wherein the identifier is a unique, device-specific identifier that identifies only the computing device and does not identify other computing devices.

22. A voucher server operative to distribute digital vouchers, the voucher server comprising:

a memory circuit configured to store a plurality of encrypted digital vouchers, each being encrypted with a respective one of a plurality of encryption keys and each having an associated identifier; and

one or more processing circuits configured to;

receive, from a computing device, a request for a digital voucher, the request including an identifier;

determine if the received identifier matches an identifier of any of the plurality of encrypted digital vouchers; and

if the received identifier matches an identifier for a given one of the encrypted digital vouchers, transmit the given encrypted digital voucher to the computing device;

wherein the voucher server does not have access to the plurality of encryption keys.

23. The voucher server of claim 22, wherein the one or more processing circuits are further configured to reject the request if the received identifier does not match an identifier of any of the encrypted digital vouchers.

24. The voucher server of claim 22:

wherein each associated identifier is a computing device identifier;

wherein the received identifier is a unique, device-specific identifier that identifies only the computing device and does not identify other computing devices; and

wherein the device-specific identifier is the only computing device identifier that matches the given encrypted digital voucher.

25. A computing device operative to redeem a digital voucher, the computing device comprising:

secure, limited-access memory; and

one or more processing circuits configured to;

transmit an identifier to a voucher server;

based on the transmission, receive an encrypted digital voucher matching the identifier;

decrypt the encrypted digital voucher using an encryption key stored in the limited-access memory to obtain a decrypted digital voucher; and

transmit the decrypted digital voucher to a redemption server to redeem the digital voucher;

wherein the voucher server does not have access to the encryption key.

26. The method of claim 25, wherein to decrypt the encrypted digital voucher, the one or more processing circuits are configured to utilize a software application which is the only application on the computing device that is able to access the encryption key.

27. The method of claim 25, wherein the encryption key is a device-specific encryption key that is not accessible to other computing devices of the same type as the computing device.

28. The method of claim 25, wherein the identifier is a unique, device-specific identifier that identifies only the computing device and does not identify other computing devices.