Encrypted data package record for use in remote transaction metered data system

• US 5,764,762 A
• Filed: 10/28/1996
• Issued: 06/09/1998
• Est. Priority Date: 06/08/1995
• Status: Expired due to Term

• Current Assignee: Wave Systems Corporation
• Original Assignee: Wave Systems Corporation
• Inventors: Michener, John R., Kazmierczak, Gregory J., Smith, Kathryn M.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/736,851
• Time in Patent Office: 589 Days
• Field of Search: 380/4, 380/9, 380/23, 380/25, 380/49, 380/50, 380/29, 380/21
• US Class Current: 705/52
• CPC Class Codes: G06F 21/1078 Logging; Metering
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

The disclosed system relates to metered use cryptographic systems, and particularly to a data package and system operation for effecting metered purchases of encrypted data from a local encrypted database. A local CD ROM encrypted database includes one or more data package records containing one or more message keys encrypted under a database key, and one or more data packages encrypted under said message keys. The user decrypts portions of the database, and the data used is metered locally and recorded as a stored data usage record. The local stored data usage record is reported by telephone modem or other telecommunications link from a remote user terminal, such as a host personal computer containing a remote cryptographic control unit, to a cryptographic operations center. A second embodiment of an encrypted database for use in accordance with the present invention includes a header containing a message key encrypted under said database key, one or more subunit message keys encrypted under said message key, and a subunit data package encrypted under each said subunit message key. The subunit message key is selected to save storage space. The present system further permits a remote transaction mode in which an on line purchase of data from the encrypted database is affected in real time. Flexible system mechanisms include controls over purchase price, start times and expiration times, permission to purchase data on line and off line, and a time window within which purchased data may be decrypted.

Claims

1. In a remote transaction metered data system including first and second terminals, for metered use of data from an encrypted database, said encrypted database having a database cryptographic key associated therewith for enabling said metered use of said encrypted database, said encrypted database being divided into separate encrypted portions individually available for separate purchase, said database encrypted by dividing said data into a plurality of data packages, individually encrypting each of said plurality of data packages under a respective plurality of data package cryptographic keys to form a plurality of encrypted data packages, encrypting each of said plurality of data package cryptographic keys under said database cryptographic key to form a plurality of encrypted data package cryptographic keys, each of said plurality of encrypted data package cryptographic keys associated with each said plurality of data packages respectively, and having a plurality of encrypted data package headers containing said data package cryptographic key encrypted under said database cryptographic key, each of said plurality of encrypted data package headers associated with each of said plurality of data packages respectively, said first and second terminals being connected via a telecommunications link, a method at said first terminal comprising:

selecting one of said plurality of encrypted data packages to form a selected data package and an associated encrypted data package header containing said data package cryptographic key encrypted under said database cryptographic key;

establishing a communication session between said first and second terminals over said telecommunications link;

transmitting a remote transaction request from said first terminal to said second terminal;

receiving a remote transaction approval from said second terminal at said first terminal; and

decrypting said selected data package.

2. A method in accordance with claim 1, wherein said step of decrypting said selected data package comprises:

decrypting said encrypted data package cryptographic key using said database cryptographic key to form a data package cryptographic key; and

decrypting said selected data package using said data package cryptographic key.

3. A method in accordance with claim 1, wherein said step of establishing a communication session between said first and second terminals over said telecommunications link is performed responsive to a lack of stored credit at said first terminal to purchase said selected data package.

4. A method in accordance with claim 1, wherein said step of establishing a communication session between said first and second terminals over said telecommunications link is performed responsive to the lack of a database cryptographic key associated with said selected data package at said first terminal.

6. A method in accordance with claim 1, wherein said step of transmitting said remote transaction request from said first terminal to said second terminal includes the step of transmitting a purchase log.

7. A method in accordance with claim 1, wherein said step of transmitting said remote transaction request from said first terminal to said second terminal includes the step of transmitting a purchase log message authentication code.

8. A method in accordance with claim 1, wherein said step of transmitting said remote transaction request from said first terminal to said second terminal includes the step of transmitting an encrypted contents of a credit register to provide an encrypted credit register value.

9. An apparatus in accordance with claim 1, wherein said means for decrypting said selected data package comprises:

means for decrypting said encrypted data package cryptographic key using said database cryptographic key to form a data package cryptographic key; and

means for decrypting said selected data package using said data package cryptographic key.

10. An apparatus in accordance with claim 1, wherein said means for establishing a communication session between said first and second terminals over said telecommunications link is responsive to a lack of stored credit at said first terminal to purchase said selected data package.

11. An apparatus in accordance with claim 1, wherein said means for establishing a communication session between said first and second terminals over said telecommunications link is responsive to the lack of a database cryptographic key associated with said selected data package at said first terminal.

13. An apparatus in accordance with claim 1, wherein said means fore transmitting said remote transaction request from said first terminal to said second terminal includes the means for transmitting a purchase log.

14. An apparatus in accordance with claim 1, wherein said means for transmitting said remote transaction request from said first terminal to said second terminal includes the means for transmitting a purchase log message authentication code.

15. An apparatus in accordance with claim 1, wherein said means for transmitting said remote transaction request from said first terminal to said second terminal includes the means for transmitting an encrypted contents of a credit register to provide an encrypted credit register value.

5. A method in accordance with 1, wherein said step of establishing a communication session between said first and second terminals over said telecommunications link is performed responsive to a stored requirement of the vendor of said selected data package stored at said first terminal.

12. An apparatus in accordance with 1, wherein said means for establishing a communication session between said first and second terminals over said telecommunications link is responsive to a stored requirement of the vendor of said selected data package stored at said first terminal.

16. In a remote transaction metered data system including first and second terminals, for metered use of data from an encrypted database, said encrypted database having a database cryptographic key associated therewith for enabling said metered use of said encrypted database, said encrypted database being divided into separate encrypted portions individually available for separate purchase, said database encrypted by dividing said data into a plurality of data packages, individually encrypting each of said plurality of data packages under a respective plurality of data package cryptographic keys to form a plurality of encrypted data packages, encrypting each of said plurality of data package cryptographic keys under said database cryptographic key to form a plurality of encrypted data package cryptographic keys, each of said plurality of encrypted data package cryptographic keys associated with each said plurality of data packages respectively, and having a plurality of encrypted data package headers containing said data package cryptographic key encrypted under said database cryptographic key, each of said plurality of encrypted data package headers associated with each of said plurality of data packages respectively, said first and second terminals being connected via a telecommunications link, a method at said second terminal comprising:

establishing a communication session between said first and second terminals over said telecommunications link;

receiving a remote transaction request from said first terminal at said second terminal, said remote transaction request relating to a selected one of said plurality of encrypted data packages to form a selected data package and an associated encrypted data package header containing said data package cryptographic key encrypted under said database cryptographic key; and

transmitting a remote transaction approval from said second terminal to said first terminal, to permit said first terminal to decrypt said selected data package.

17. A method in accordance with claim 16, wherein said step of receiving said remote transaction request from said first terminal to said second terminal includes the step of receiving a purchase log.

18. A method in accordance with claim 16, wherein said step of receiving said remote transaction request from said first terminal to said second terminal includes the step of receiving a purchase log message authentication code.

19. A method in accordance with claim 16, wherein said step of receiving said remote transaction request from said first terminal to said second terminal includes the step of receiving an encrypted contents of a credit register to provide an encrypted credit register value.

20. In a remote transaction metered data system including first and second terminals, for metered use of data from an encrypted database, said encrypted database having a database cryptographic key associated therewith for enabling said metered use of said encrypted database, said encrypted database being divided into separate encrypted portions individually available for separate purchase, said database encrypted by dividing said data into a plurality of data packages, individually encrypting each of said plurality of data packages under a respective plurality of data package cryptographic keys to form a plurality of encrypted data packages, encrypting each of said plurality of data package cryptographic keys under said database cryptographic key to form a plurality of encrypted data package cryptographic keys, each of said plurality of encrypted data package cryptographic keys associated with each said plurality of data packages respectively, and having a plurality of encrypted data package headers containing said data package cryptographic key encrypted under said database cryptographic key, each of said plurality of encrypted data package headers associated with each of said plurality of data packages respectively, said first and second terminals being connected via a telecommunications link, a system method comprising:

selecting one of said plurality of encrypted data packages to form a selected data package and an associated encrypted data package header containing said data package cryptographic key encrypted under said database cryptographic key;

establishing a communication session between said first and second terminals over said telecommunications link;

transmitting a remote transaction request from said first terminal to said second terminal;

receiving said remote transaction request from said first terminal at said second terminal, said remote transaction request relating to said selected data package;

transmitting a remote transaction approval from said second terminal to said first terminal, to permit said first terminal to decrypt said selected data package;

receiving said remote transaction approval from said second terminal at said first terminal; and

decrypting said selected data package.

21. A method in accordance with claim 20, wherein said step of decrypting said selected data package comprises:

decrypting said encrypted data package cryptographic key using said database cryptographic key to form a data package cryptographic key; and

decrypting said selected data package using said data package cryptographic key.

22. A method in accordance with claim 20, wherein said step of establishing a communication session between said first and second terminals over said telecommunications link is performed responsive to a lack of stored credit at said first terminal to purchase said selected data package.

23. A method in accordance with claim 20, wherein said step of establishing a communication session between said first and second terminals over said telecommunications link is performed responsive to the lack of a database cryptographic key associated with said selected data package at said first terminal.

25. A method in accordance with claim 20, wherein said step of transmitting said remote transaction request from said first terminal to said second terminal includes the step of transmitting a purchase log.

26. A method in accordance with claim 20, wherein said step of transmitting said remote transaction request from said first terminal to said second terminal includes the step of transmitting a purchase log message authentication code.

27. A method in accordance with claim 20, wherein said step of transmitting said remote transaction request from said first terminal to said second terminal includes the step of transmitting an encrypted contents of a credit register to provide an encrypted credit register value.

24. A method in accordance with 20, wherein said step of establishing a communication session between said first find second terminals over said telecommunications link is performed responsive to a stored requirement of the vendor of said selected data package stored at said first terminal.

28. In a remote transaction metered data system including first and second terminals, for metered use of data from an encrypted database, said encrypted database having a database cryptographic key associated therewith for enabling said metered use of said encrypted database, said encrypted database being divided into separate encrypted portions individually available for separate purchase, said database encrypted by dividing said data into a plurality of data packages, individually encrypting each of said plurality of data packages under a respective plurality of data package cryptographic keys to form a plurality of encrypted data packages, encrypting each of said plurality of data package cryptographic keys under said database cryptographic key to form a plurality of encrypted data package cryptographic keys, each of said plurality of encrypted data package cryptographic keys associated with each said plurality of data packages respectively, and having a plurality of encrypted data package headers containing said data package cryptographic key encrypted under said database cryptographic key, each of said plurality of encrypted data package headers associated with each of said plurality of data packages respectively, said first and second terminals being connected via a telecommunications link, an apparatus at said first terminal comprising:

means for selecting one of said plurality of encrypted data packages to form a selected data package and an associated encrypted data package header containing said data package cryptographic key encrypted under said database cryptographic key;

means for establishing a communication session between said first and second terminals over said telecommunications link;

means for transmitting a remote transaction request from said first terminal to said second terminal;

means for receiving a remote transaction approval from said second terminal at said first terminal; and

means for decrypting said selected data package.

29. In a remote transaction metered data system including first and second terminals, for metered use of data from an encrypted database, said encrypted database having a database cryptographic key associated therewith for enabling said metered use of said encrypted database, said encrypted database being divided into separate encrypted portions individually available for separate purchase, said database encrypted by dividing said data into a plurality of data packages, individually encrypting each of said plurality of data packages under a respective plurality of data package cryptographic keys to form a plurality of encrypted data packages, encrypting each of said plurality of data package cryptographic keys under said database cryptographic key to form a plurality of encrypted data package cryptographic keys, each of said plurality of encrypted data package cryptographic keys associated with each said plurality of data packages respectively, and having a plurality of encrypted data package headers containing said data package cryptographic key encrypted under said database cryptographic key, each of said plurality of encrypted data package headers associated with each of said plurality of data packages respectively, said first and second terminals being connected via a telecommunications link, an apparatus at said second terminal comprising:

means for establishing a communication session between said first and second terminals over said telecommunications link;

means for receiving a remote transaction request from said first terminal at said second terminal, said remote transaction request relating to a selected one of said plurality of encrypted data packages to form a selected data package and an associated encrypted data package header containing said data package cryptographic key encrypted under said database cryptographic key; and

means for transmitting a remote transaction approval from said second terminal to said first terminal, to permit said first terminal to decrypt said selected data package.

30. An apparatus in accordance with claim 29, wherein said means for receiving said remote transaction request from said first terminal to said second terminal includes the means for receiving a purchase log.

31. An apparatus in accordance with claim 29, wherein said means for receiving said remote transaction request from said first terminal to said second terminal includes the means for receiving a purchase log message authentication code.

32. An apparatus in accordance with claim 29, wherein said means for receiving said remote transaction request from said first terminal to said second terminal includes the means for receiving an encrypted contents of a credit register to provide an encrypted credit register value.

33. In a remote transaction metered data system including first and second terminals, for metered use of data from an encrypted database, said encrypted database having a database cryptographic key associated therewith for enabling said metered use of said encrypted database, said encrypted database being divided into separate encrypted portions individually available for separate purchase, said database encrypted by dividing said data into a plurality of data packages, individually encrypting each of said plurality of data packages under a respective plurality of data package cryptographic keys to form a plurality of encrypted data packages, encrypting each of said plurality of data package cryptographic keys under said database cryptographic key to form a plurality of encrypted data package cryptographic keys, each of said plurality of encrypted data package cryptographic keys associated with each said plurality of data packages respectively, and having a plurality of encrypted data package headers containing said data package cryptographic key encrypted under said database cryptographic key, each of said plurality of encrypted data package headers associated with each of said plurality of data packages respectively, said first and second terminals being connected via a telecommunications link, a system apparatus comprising:

means for selecting one of said plurality of encrypted data packages to form a selected data package and an associated encrypted data package header containing said data package cryptographic key encrypted under said database cryptographic key;

means for establishing a communication session between said first and second terminals over said telecommunications link;

means for transmitting a remote transaction request from said first terminal to said second terminal;

means for receiving said remote transaction request from said first terminal at said second terminal, said remote transaction request relating to said selected data package;

means for transmitting a remote transaction approval from said second terminal to said first terminal, to permit said first terminal to decrypt said selected data package;

means for receiving said remote transaction approval from said second terminal at said first terminal; and

means for decrypting said selected data package.

34. An apparatus in accordance with claim 33, wherein said means for decrypting said selected data package comprises:

means for decrypting said encrypted data package cryptographic key using said database cryptographic key to form a data package cryptographic key; and

means for decrypting said selected data package using said data package cryptographic key.

35. An apparatus in accordance with claim 33, wherein said means for establishing a communication session between said first and second terminals over said telecommunications link is responsive to a lack of stored credit at said first terminal to purchase said selected data package.

36. An apparatus in accordance with claim 33, wherein said means for establishing a communication session between said first and second terminals over said telecommunications link is responsive to the lack of a database cryptographic key associated with said selected data package at said first terminal.

38. An apparatus in accordance with claim 33, wherein said means for transmitting said remote transaction request from said first terminal to said second terminal includes the means for transmitting a purchase log.

39. An apparatus in accordance with claim 33, wherein said means for transmitting said remote transaction request from said first terminal to said second terminal includes the means for transmitting a purchase log message authentication code.

40. An apparatus in accordance with claim 33, wherein said means for transmitting said remote transaction request from said first terminal to said second terminal includes the means for transmitting an encrypted contents of a credit register to provide an encrypted credit register value.

37. An apparatus in accordance with 33, wherein said means for establishing a communication session between said first and second terminals over said telecommunications link is responsive to a stored requirement of the vendor of said selected data package stored at said first terminal.