Space efficient method of verifying electronic payments

• US 6,021,399 A
• Filed: 11/25/1996
• Issued: 02/01/2000
• Est. Priority Date: 11/25/1996
• Status: Expired due to Term

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Spitznagel, Bridget A., Want, Roy, Greene, Daniel H., Demers, Alan J.
• Primary Examiner(s): Voeltz, Emanuel Todd
• Assistant Examiner(s): Morgan, George D.
• Application Number:
  US08/758,136
• Time in Patent Office: 1,163 Days
• Field of Search: 705/309, 705/41, 705/44, 380/24, 380/25, 380/30, 235/379, 235/380
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

A method of verifying electronic payments generated using a key unknown to the verifier. In anticipation of accepting electronic payments, a seller requests and receives from a bank a conversation key and a first set of electronic verifiers for a first set of electronic payments from a customer. Each verifier allows authentication of an associated electronic payment without revealing the private key used by the customer to generate the electronic payments. Prior to initiating a transaction or series of transactions, the customer requests payment information from the seller for use, along with the master key, in generating electronic payments Afterward, when the customer pays with an electronic payment, the seller authenticates the electronic payment using one of the verifiers. The seller responds to the buyer'"'"'s request if the electronic payment is authenticated.

Claims

1. A method of using a machine to verify electronic payments generated by a customer using a private key, the machine including a memory storing instructions of the method in machine readable form, the method comprising:

receiving from a bank a first set of k electronic verifiers for a first set of k electronic payments from the customer and a conversation key, each verifier allowing authentication of its associated electronic payment without revealing the private key;

selecting from the verifiers a random subset of verifiers and storing only the random subset of verifiers;

transmitting payment information to the customer for use in generating electronic payments;

the payment information including an initializing payment and a first value of a payment index, each value of the payment index associating an electronic payment with a verifier;

receiving a request from the customer and an electronic payment associated with a second value of the payment index;

authenticating the electronic payment using one of the verifiers by;

determining whether the electronic payment will be authenticated by searching the memory for a verifier having an associated value of the payment index matching the value of the payment index for the electronic payment, and

comparing a first hash of a first string including the electronic payment to a verifier having an associated value of the payment index equal to the second value of the payment index; and

responding to the request if the electronic payment is authenticated.

2. The method of claim 1, wherein the seller receives the random subset of verifiers from the bank.

3. A method of using a machine to verify electronic payments generated by a customer using a private key, the machine including a memory storing instructions of the method in machine readable form, the method comprising:

receiving from a bank a first set of k electronic verifiers for a first set of k electronic payments from the customer and a conversation key, each verifier allowing authentication of its associated electronic payment without revealing the private key;

receiving from the bank a summary verifier for a second group of electronic payments;

transmitting payment information to the customer for use in generating electronic payments;

the payment information including an initializing payment and a first value of a payment index, each value of the payment index associating an electronic payment with a verifier;

receiving a request from the customer and an electronic payment;

receiving from the customer along with the electronic payment having a second value of the payment index a verifier having a third value of the payment index, the third value being greater than the second value;

storing the verifier;

authenticating the electronic payment using one of the verifiers by comparing a first hash of a first string including the electronic payment to a verifier having an associated value of the payment index equal to the second value of the payment index; and

responding to the request if the electronic payment is authenticated.

4. The method of claim 3 further comprising:

after receiving the second set of verifiers from the customer determining whether the second set of verifiers are authentic by comparing the summary verifier to a second hash of a second string including the second set of verifiers;

if the second set of verifiers are authentic verifying subsequent electronic payments received from the customer using a one of the second set of verifiers.

5. An article of manufacture comprising:

a memory; and

instructions stored in the memory in machine readable form for a method of verifying electronic payments generated by a customer using a private key, the method comprising;

receiving from a bank a first set of electronic verifiers for a first set of electronic payments from the customer, each verifier allowing authentication of an associated electronic payment without revealing the private key;

selecting from the first set of verifiers a random subset of verifiers and storing in the memory only the random subset of verifiers;

transmitting to the customer payment information for use in generating electronic payments;

receiving a request from the customer and an electronic payment;

determining whether the electronic payment will be authenticated by searching the memory for an associated verifier;

authenticating the electronic payment using an associated verifier; and

responding to the request if the electronic payment is authenticated.

6. The article of manufacture of claim 5 wherein the instructions further comprise the seller receiving the random subset of verifiers from the bank.

7. An article of manufacture comprising:

a memory; and

instructions stored in the memory in machine readable form for a method of verifying electronic payments generated by a customer using a private key, the method comprising;

receiving from a bank a first set of electronic verifiers for a first set of electronic payments from the customer, each verifier allowing authentication of an associated electronic payment without revealing the private key;

receiving from the bank a summary verifier for a second group of electronic payments;

transmitting to the customer payment information for use in generating electronic payments;

receiving a request from the customer and an electronic payment;

receiving from the customer along with the electronic payment a verifier for a third electronic payment;

storing the verifier in the memory;

authenticating the electronic payment using an associated verifier; and

responding to the request if the electronic payment is authenticated.

8. The article of manufacture of claim 7 wherein the instructions further comprise:

after receiving the second set of verifiers from the customer determining whether the second set of verifiers are authentic by comparing the summary verifier to a first hash of a first string including the second set of verifiers;

if the second set of verifiers are authentic verifying subsequent electronic payments received from the customer using a one of the second set of verifiers.