Simultaneous electronic transactions with subscriber verification

• US 6,141,750 A
• Filed: 09/29/1997
• Issued: 10/31/2000
• Est. Priority Date: 03/21/1995
• Status: Expired due to Term

• Current Assignee: Silvio Micali
• Original Assignee: Silvio Micali
• Inventors: Micali, Silvio
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/939,959
• Time in Patent Office: 1,128 Days
• Field of Search: 705/78, 705/75, 705/67, 713/168-170
• US Class Current: 713/168
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 51/23 Reliability checks, e.g. acknowledgments or fault reporting
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An electronic communication in the presence of a trusted party enables an exchange of unpredictable values in which a second party receives a first value produced by a first party and unpredictable to the second party if and only if the first party receives a second value produced by the second party and unpredictable to the first party. The communication includes exchanging a first set of communications between the first and second parties without participation of the trusted party to attempt completion of the exchange of unpredictable values. If the exchange of unpredictable values is not completed using the first set of communications between the first and second parties, the trusted party takes action to complete the exchange. At least one party is authenticated to belong to a group of parties that exchanges unpredictable values. The group may be a group of subscribers. The at least one party may be authenticated by a digital signature. The digital signature may be produced by the trusted party. The digital signature may also authenticate a key of the at least one party.

Claims

1. An electronic communication method between a first and second party, in the presence of a trusted party, enabling an exchange of unpredictable values in which the second party receives a first value produced by the first party and unpredictable to the second party if and only if the first party receives a second value produced by the second party and unpredictable to the first party, comprising:

(a) exchanging a first set of communications between the first and second parties without participation of the trusted party to attempt completion of the exchange of unpredictable values; and

(b) if the exchange of unpredictable values is not completed using the first set of communications between the first and second parties, having the trusted party take action to complete the exchange, wherein at least one party is authenticated to belong to a group of parties that exchange unpredictable values.

2. A method according to claim 1, wherein the group is a group of subscribers.

3. A method according to claim 1, wherein the at least one party is authenticated by a digital signature.

4. A method according to claim 3, wherein the digital signature is produced by the trusted party.

5. A method according to claim 3, wherein the digital signature also authenticates a key of the at least one party.

6. A method according to claim 5, wherein the key is an encryption key.

7. A method according to claim 5, wherein the key is a digital signature key.

8. A method according to claim 1, wherein the at least one party verifies that an other one of the parties belongs to the group.

9. A method according to claim 1, wherein the at least one party provides an other one of the parties with data authenticating that the at least one party belongs to the group.

10. A method according to claim 1, wherein the trusted party takes action only if the first party belongs to the group.

11. A method according to claim 1, wherein the trusted party takes action only if the second party belongs to the group.

12. A method according to claim 1, wherein the trusted party takes a first type of action if the first party belongs to the group and a second type of action otherwise.

13. A method according to claim 12, wherein the first type of action includes payment of a first fee and the second type of action includes payment of a second fee.

14. A method according to claim 1, wherein the trusted party takes action only if the second party belongs to the group.

15. A method according to claim 1, wherein the trusted party takes a first type of action if the second party belongs to the group and a second type of action otherwise.

16. A method according to claim 15, wherein the first type of action includes payment of a first fee and the second type of action includes payment of a second fee.

17. A method according to claim 1, wherein the trusted party takes action if and only if both first and second parties belong to the group.

18. An electronic communication method between a first and second party, in the presence of a trusted party, enabling an exchange in which the second party receives a message produced by the first party if and only if the first party receives a receipt produced by the second party, comprising:

(a) exchanging a first set of communications between the first and second parties without participation of the trusted party to attempt completion of the exchange of the message and the receipt; and

(b) if the exchange is not completed using the first set of communications between the first and second parties, having the trusted party take action to complete the exchange, wherein at least one party is authenticated to belong to a group of parties that exchange messages and receipts.

19. A method according to claim 18, wherein the group is a group of subscribers.

20. A method according to claim 18, wherein the at least one party is authenticated by a digital signature.

21. A method according to claim 20, wherein the digital signature is produced by the trusted party.

22. A method according to claim 20, wherein the digital signature also authenticates a key of the at least one party.

23. A method according to claim 22, wherein the key is an encryption key.

24. A method according to claim 22, wherein the key is a digital signature key.

25. A method according to claim 18, wherein the at least one party verifies that an other one of the parties belongs to the group.

26. A method according to claim 18, wherein the at least one party provides an other one of the parties with data authenticating that the at least one party belongs to the group.

27. A method according to claim 18, wherein the trusted party takes action only if the first party belongs to the group.

28. A method according to claim 18, wherein the trusted party takes action only if the second party belongs to the group.

29. A method according to claim 18, wherein the trusted party takes a first type of action if the first party belongs to the group and a second type of action otherwise.

30. A method according to claim 29, wherein the first type of action includes payment of a first fee and the second type of action includes payment of a second fee.

31. A method according to claim 18, wherein the trusted party takes action only if the second party belongs to the group.

32. A method according to claim 18, wherein the trusted party takes a first type of action if the second party belongs to the group and a second type of action otherwise.

33. A method according to claim 32, wherein the first type of action includes payment of a first fee and the second type of action includes payment of a second fee.

34. A method according to claim 18, wherein the trusted party takes action if and only if both first and second parties belong to the group.

35. A method by which first and second parties and a trusted party effect a certified mail transaction, each of the parties having secret keys, and wherein the first party desires to send a message to the second party and obtain a message receipt to thereby complete the certified mail transaction comprising:

(a) having the first party generate and send the second party a data string including an encryption, decryptable with a secret key known to the trusted party, of information that prevents the second party from obtaining the first party'"'"'s message without the first party obtaining the message receipt;

(b) upon receipt by the second party of the data string, having the second party generate and send to the first party the message receipt;

(c) upon receipt by the first party of the message receipt, having the first party send to the second party information that enables the second party to retrieve the message;

(d) having the second party attempt to verify whether the message was received; and

(e) if the message was not received, having the second party send information to the trusted party for further processing, wherein the information includes the data string and wherein at least one party is authenticated to belong to a group of parties that effect certified mail transactions.

36. A method according to claim 35, wherein the group is a group of subscribers.

37. A method according to claim 35, wherein the at least one party is authenticated by a digital signature.

38. A method according to claim 37, wherein the digital signature is produced by the trusted party.

39. A method according to claim 37, wherein the digital signature also authenticates a key of the at least one party.

40. A method according to claim 39, wherein the key is an encryption key.

41. A method according to claim 39, wherein the key is a digital signature key.

42. A method according to claim 35, wherein the at least one party verifies that an other one of the parties belongs to the group.

43. A method according to claim 35, wherein the at least one party provides an other one of the parties with data authenticating that the at least one party belongs to the group.

44. A method according to claim 35, wherein the trusted party takes action only if the first party belongs to the group.

45. A method according to claim 35, wherein the trusted party takes action only if the second party belongs to the group.

46. A method according to claim 35, wherein the trusted party takes a first type of action if the first party belongs to the group and a second type of action otherwise.

47. A method according to claim 46, wherein the first type of action includes payment of a first fee and the second type of action includes payment of a second fee.

48. A method according to claim 35, wherein the trusted party takes action only if the second party belongs to the group.

49. A method according to claim 35, wherein the trusted party takes a first type of action if the second party belongs to the group and a second type of action otherwise.

50. A method according to claim 49, wherein the first type of action includes payment of a first fee and the second type of action includes payment of a second fee.

51. A method according to claim 35, wherein the trusted party takes action if and only if both first and second parties belong to the group.