Electronic transaction system

• US 4,885,777 A
• Filed: 04/11/1988
• Issued: 12/05/1989
• Est. Priority Date: 09/04/1985
• Status: Expired due to Term

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Takaragi, Kazuo, Kurashiki, Nobuhiro, Sasaki, Ryoichi, Shiraishi, Takayoshi
• Primary Examiner(s): Buczinski, Stephen C.
• Assistant Examiner(s): Gregory, Bernarr Earl
• Application Number:
  US07/180,050
• Time in Patent Office: 603 Days
• Field of Search: 380/18, 380/49, 380/50, 380/51, 380/55, 364/200, 364/900
• US Class Current: 380/30
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An electronic transaction in which in order to improve a reliability of message certification by digital signature and enable the use of the digital signature in a formal transaction in place of conventional signature or seal, the following procedures are implemented utilizing the fact that, in a public key cryptograph system represented by an RSA system, a first encoded message derived by encoding a first decoded message by using a public key of a first transacting party is equal to a second encoded message derived by encoding a second decoded message by using a public key of a second transacting party: (a) Check sender/receiver; (b) Add content certification function; (c) Double check the person by the possession of a secret key and the response by a terminal; (d) Add a grace period to the electronic seal; and (e) Send back a tally impression from the receiver to the sender.

Claims

1. An electronic transaction system for electronically sending and receiving digital signatures concerning a transaction message M between a first terminal for a first transacting party and a second terminal for a second transacting party, comprising:

A. in said first terminal;

first means for generating a Hash total h'"'"'(M) of the transaction message M derived by compression-encoding said transaction message M and a Hash total h(M) different from said Hash total h'"'"'(M);

second means for preparing a digital signature T(A) by encoding data including at least first data containing the Hash total h'"'"'(M) and a first certificate not containing the transaction message M by using a secret key of the first transacting party, based on a public key cryptograph system;

third means coupled to the output of said second means for sending the prepared digital signature T(A) from said first terminal to said second terminal;

B. in said second terminal;

fourth means for preparing a digital signature S(B) by encoding data including at least second data containing the Hash total h(M) different from the Hash total h'"'"'(M) and a second certificate not containing the transaction message M by using a secret key of the second transacting party, based on said public key cryptograph system;

fifth means coupled to the output of said fourth means for sending the digital signature S(B) from said second terminal to said first terminal; and

C. in said first terminal;

sixth means responsive to reception of the digital signature S(B) from said second terminal for encoding data including at least third data containing the Hash total h(M) and a first certificate not containing the transaction message M by using the secret key of the first transacting party, based on said public key cryptograph system to obtain a digital signature S(A) and for sending the digital signature S(A) from said first terminal to said second terminal.

2. An electronic method for electronically sending and receiving digital signatures concerning a transaction message M between a first terminal for a first transacting party and a second terminal for a second transacting party, comprising the steps:

A. in said first terminal;

(1) generating a Hash total h'"'"'(M) of the transaction message M derived by compression-encoding said transaction message M and a Hash total h(M) different from said Hash total h'"'"'(M);

(2) preparing a digital signature T(A) by encoding data including at least first data containing the Hash total h'"'"'(M) and a first certificate not containing the transaction message M by using a secret key of the first transacting party, based on a public key cryptograph system;

(3) sending the prepared digital signature T(A) obtained in said step A(2) from said first terminal to said second terminal;

B. in said second terminal;

(1) preparing a digital signature S(B) by encoding data including at least second data containing the Hash total h(M) different from the Hash total h'"'"'(M) and a second certificate not containing the transaction message M by using a secret key of the second transacting party, based on the public key cryptograph scheme;

(2) sending the digital signature S(B) obtained in said step B(1) from said second terminal to said first terminal; and

C. in said first terminal;

after receiving of the digital signature S(B) from said second terminal, encoding data including at least third data containing the Hash total h(M) and a first certificate not containing the transaction message M by using the secret key of the first transacting party, based on the public key cryptograph scheme to obtain a digital signature S(A), and sending the digital signature S(A) from said first terminal to said second terminal.

3. An electronic transaction method according to claim 2, wherein each of the first and second certificates includes data representing acceptance of a transaction message derived by modifying information representing transaction status and data representing a grace period for permitting an opposition to the transaction.

4. An electronic transaction system according to claim 3, wherein said grace period is determined by a time required to prepare and check the certificate of the transacting party, and invalidation of the certificate issued by the transacting party is assured by an authentication organization by declaring the termination of the transaction to the authentication organization within the grace period when one of the first and second transacting parties has an opposition to the certificate of the other transacting party.