Method for establishing secure communications among processing devices

• US 5,703,949 A
• Filed: 10/23/1996
• Issued: 12/30/1997
• Est. Priority Date: 04/28/1994
• Status: Expired due to Term

• Current Assignee: Citibank (South Dakota) NA (Citigroup Incorporated)
• Original Assignee: Citibank (South Dakota) NA (Citigroup Incorporated)
• Inventors: Rosen, Sholom S.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): SAYADIAN, HRAYR
• Application Number:
  US08/730,158
• Time in Patent Office: 433 Days
• Field of Search: 380/21, 380/23, 380/24, 380/25, 380/46, 380/49
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/209 Specified transaction journal output feature, e.g. printed receipt or voice output
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 50/188 : Electronic negotiation
• CPC Class Codes: G07F 17/16 : for devices exhibiting advertisements, announcements, pictures or the like
• CPC Class Codes: G07F 7/0866 : by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: H04L 2209/42 : Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3213 : using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A system for open electronic commerce having a customer trusted agent securely communicating with a first money module, and a merchant trusted agent securely communicating with a second money module. Both trusted agents are capable of establishing a first cryptographically secure session, and both money modules are capable of establishing a second cryptographically secure session. The merchant trusted agent transfers electronic merchandise to the customer trusted agent, and the first money module transfers electronic money to the second money module. The money modules inform their trusted agents of the successful completion of payment, and the customer may use the purchased electronic merchandise. A first processing device generates an encryption key. A third processing device receives information from a second processing device by way of a fourth processing device, which information allows the third processing device to generate the encryption key. Thus, the first and third processing devices can securely communicate using the generated encryption key.

Claims

1. A method for enabling secure communications among processing devices, comprising the steps of:

establishing a first cryptographically secure session between a first processing device and a second processing device, where said first processing device is remotely located from said second processing device;

establishing a second cryptographically secure session between a third processing device and a fourth processing device, where said third processing device is remotely located from said fourth processing device, where said first processing device communicates with said third processing device over a first communications link, and where said second processing device communicates with said fourth processing device over a second communications link;

in said first processing device;

sending session key information stored in said second processing device to said third processing device via said second communications link and said second cryptographically secure session;

generating said session key in said third processing device at least in part from said session key information;

storing said session key in said third processing device; and

establishing a third cryptographically secure session between said first processing device and said third processing device using said session key.

2. The method of claim 1 wherein said:

session key information comprises a second random number and where said step of generating a session key includes the substeps of;

said first processing device generating a first random number;

said second processing device generating said second random number and sending said second random number to said first processing device via said first cryptographically secure session; and

said first processing device forming said session key by exclusive ORing said first and second random numbers.

3. The method of claim 2 further comprising the steps of:

said first processing device sending said first random number to said third processing device via said first communications link; and

establishing the presence of said session key in said third processing device by exclusive-ORing said first random number and said second random number.

4. The method of claim 3 further comprising the steps of:

said first processing device sending said first random number to said second processing device via said first cryptographically secure session;

said second processing device forming said session key by exclusive ORing said first random number and said second random number;

said second processing device storing said session key;

said second processing device sending said second random number to said fourth processing device via said second communications link;

said first processing device sending said first random number to said fourth processing device via said first communications link and said second cryptographically secure session;

said fourth processing device forming a session key by exclusive ORing said first and second random numbers;

storing said session key in said fourth processing device; and

establishing a fourth cryptographically secure session between said second and fourth processing devices using said session key.

5. The method of claim 1, wherein information passing through said second cryptographically secure session is further encrypted by said first cryptographically secure session.

6. The method of claim 1, wherein said processing devices are tamper-proof.

7. The method of claim 6, wherein said first and second processing devices are trusted agents and said third and fourth processing devices are money modules.

8. A method for enabling secure communications among processing devices, comprising the steps of:

establishing a first cryptographically secure session between a first processing device and a second processing device, where said first processing device is remotely located from said second processing device;

establishing a second cryptographically secure session between a third processing device and a fourth processing device, where said third processing device is remotely located from said fourth processing device, where said first processing device communicates with said third processing device over a first communications link, and where said second processing device communicates with said fourth processing device over a second communications link;

said first processing device generating a first random number;

sending said first random number to said second processing device via said first cryptographically secure session and to said fourth processing device via said second communications link, whereby said first, second, and fourth processing devices store said first random number;

said second processing device generating a second random number;

sending said second random number to said first processing device via said first cryptographically secure session and to said third processing device via said first communications link, whereby said second, first, and third processing devices store said second random number;

said fourth processing device sending said first random number to said third processing device via said second cryptographically secure session;

said third processing device sending said second random number to said fourth processing device via said second cryptographically secure session;

said first processing device forming a random session key from said first and second random numbers;

said second processing device forming said random session key from said first and second random numbers;

said third processing device forming said random session key from said first and second random numbers;

said fourth processing device forming said random session key from said first and second random numbers; and

where said first and third processing devices cryptographically communicate with said session key, and where said second and fourth processing devices cryptographically communicate with said session key.

9. The method of claim 8, wherein information passing through said second cryptographically secure session is further encrypted by said first cryptographically secure session.

10. The method of claim 8, wherein said processing devices are tamper-proof.

11. The method of claim 10, wherein said first and second processing devices are trusted agents and said third and fourth processing devices are money modules.