Secure electronic transactions using a trusted intermediary to perform electronic services

• US 6,145,079 A
• Filed: 03/06/1998
• Issued: 11/07/2000
• Est. Priority Date: 03/06/1998
• Status: Expired due to Term

• Current Assignee: Deloitte & Touche USA LLP (Deloitte & Touche)
• Original Assignee: Deloitte & Touche USA LLP (Deloitte & Touche)
• Inventors: Mitty, Todd Jay, Shoupp, Douglas Scott, Prabhu, Ajit Mathias, Cantone, Michael Robert
• Primary Examiner(s): Peeso, Thomas R.
• Assistant Examiner(s): JACK, TODD M
• Application Number:
  US09/036,280
• Time in Patent Office: 977 Days
• Field of Search: 705/64, 713/176, 713/170, 713/153, 380/37
• US Class Current: 713/170
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3827 Use of message hashing

Abstract

Secure electronic transactions using a trusted intermediary with non-repudiation of receipt and contents of message. A system of, and method for, securely transmitting a package from a sender to a recipient, via an intermediary, are described, as is a novel data arrangement, stored in a computer-readable medium. A sender encrypts the message to form an encrypted inner envelope. A waybill is formed that among other things identifies the recipient as the destination and includes information indicating various levels of services desired, e.g., electronic notarization. The waybill and inner envelope are used to form an encrypted outer envelope that is addressed to a trusted intermediary. The intermediary receives the package and decrypts the outer envelope. It is unable to decrypt the inner envelope, due to the keys employed during encryption. The service information is processed, and the package is used to form a second package addressed to the recipient. The recipient decrypts the package and confirms receipt thereof, using a digest of the message. In this way, receipt and opening of the message cannot be properly repudiated by the recipient. An extra level of encryption to form an outer envelope from the intermediary to the recipient may be included, and the various envelopes and confirmation digests may be signed so that the contents and identities may be authenticated.

Claims

1. A system for use with a communication network to securely transmit a message thereover from a sender to a recipient, via an intermediary capable of performing electronic services, comprising:

a transmitter having

first logic to receive the message from a user and to form an encrypted inner envelope using a first cryptographic algorithm, the encrypted inner envelope containing the message in an encrypted form decryptable by the recipient;

second logic to form a first information structure associated with the inner envelope, the first information structure containing data identifying the recipient as a destination and identifying desired electronic services;

third logic to form an encrypted first information structure using a second cryptographic algorithm, the encrypted first information structure containing the first information structure in an encrypted form decryptable by the intermediary;

fourth logic to receive the encrypted inner envelope and encrypted first information structure and to transmit them as a first package on the communication network;

an intermediary having

fifth logic to receive the first package and to decrypt the encrypted first information structure, using the second cryptographic algorithm, to determine the identifying data and the desired electronic services;

sixth logic to process the electronic services;

seventh logic to form a second package, the second package containing the encrypted inner envelope;

a receiver having

eighth logic to obtain the second package; and

ninth logic to decrypt the inner envelope, using the first cryptographic algorithm, to recover the message and to present it to the recipient.

2. The system of claim 1

wherein the sender includes logic to form a digest of the message and to include the digest in the first package;

wherein the recipient includes logic to form a digest of the decrypted message and to include the digest in a confirmation package addressed to the intermediary;

wherein the intermediary includes

logic, responsive to the desired services indicating electronic notary services as desired, to create a digest of the message received from the sender,

logic to form a value based on the created digest, the digest in the first package, and the digest in the confirmation package, and

logic to have the value time-stamped in a secure manner.

3. The system of claim 1

wherein the intermediary includes

a collection of information, including computer codes indicative of the security procedures underlying digital identities of the sender, the recipient, and other entities;

logic, responsive to the desired services indicating insurance services as desired, to gather the computer codes indicative of the security procedure underlying the digital identities of the sender and the recipient;

logic to analyze the computer codes of the recipient and the sender to form an insurance code value reflective of the security rankings so that the transmission of the message may be charged a corresponding insurance rate.

4. A method of securely transmitting a message from a sender to a recipient, via an intermediary capable of performing electronic services, the method comprising the steps of:

(a) receiving the message from the sender and forming an encrypted envelope using a first cryptographic algorithm, the encrypted inner envelope containing the message and decryptable by the recipient;

(b) forming a first information structure, associated with the inner envelope, the first information structure containing data identifying the recipient as an ultimate destination and identifying desired electronic services;

(c) forming an encrypted information structure using a second cryptographic algorithm, the encrypted first information structure being decryptable by the intermediary;

(d) receiving the encrypted inner envelope and encrypted first information structure and transmitting the inner envelope and encrypted first information structure as a first package on the communication network;

(e) receiving the first package and decrypting the encrypted first information structure, using the second cryptographic algorithm, to determine the identifying data and the desired electronic services;

(f) processing in accordance with the electronic services indicated;

(g) forming a second package, the second package containing the encrypted inner envelope and transmitting the second package on the network;

(h) receiving the second package; and

(i) decrypting the inner envelope, using the first cryptographic algorithm, to recover the message and to present it to the recipient.

5. The method of claim 4 further comprising the steps of

the sender forming a digest of the message and including the digest in the first package;

the recipient forming a digest of the decrypted message and including the digest in a confirmation package addressed to the intermediary;

wherein the intermediary

in response to the desired services indicating electronic notary services as desired, creates a digest of the message received from the sender,

forms a value based on the created digest, the digest in the first package, and the digest in the confirmation package,

has the value time-stamped in a secure manner.

6. The method of claim 5 wherein the intermediary includes a collection of information, including computer codes indicative of the security procedures underlying digital identities of the sender, the recipient, and other entities;

and wherein the intermediary

in response to the desired services indicating insurance services as desired, gathers the computer codes indicative of the security procedure underlying the digital identities of the sender and the recipient;

analyzes the computer codes of the recipient and the sender to form an insurance code value reflective of the security rankings so that the transmission of the message may be charged a corresponding insurance rate.

7. A system for use with a communication network to securely transmit a message thereover from a sender to a recipient, the system capable of performing electronic services, comprising:

first logic to receive a first package from the sender, wherein the first package includes at least;

an inner envelope encrypted using a first cryptographic algorithm, the encrypted inner envelope decryptable by the recipient; and

an encrypted first information structure associated with the inner envelope, the first information structure containing data identifying the recipient as a destination and identifying desired electronic services, the first information structure encrypted using a second cryptographic algorithm;

second logic to decrypt the encrypted first information structure, using the second cryptographic algorithm, to determine the identifying data and the desired electronic services;

third logic to process the electronic services; and

fourth logic to form a second package, the second package containing the encrypted inner envelope, wherein the receiver may obtain the second package and use the first cryptographic algorithm to recover the message.

8. A method of securely transmitting a message from a sender to a recipient, via an intermediary capable of performing electronic services, the method comprising the steps of:

receiving a first package from the sender wherein the first package includes at least;

an inner envelope encrypted using a first cryptographic algorithm, the encrypted inner envelope decryptable by the recipient; and

an encrypted first information structure associated with the inner envelope, the first information structure containing data identifying the recipient as a destination and identifying desired electronic services, the first information structure encrypted using a second cryptographic algorithm;

decrypting the encrypted first information structure, using the second cryptographic algorithm, to determine the identifying data and the desired electronic services;

processing the electronic services; and

forming a second package, the second package containing the encrypted inner envelope, wherein the receiver may obtain the second package and use the first cryptographic algorithm to recover the message.