Executable digital cash for electronic commerce

• US 6,157,920 A
• Filed: 08/14/1998
• Issued: 12/05/2000
• Est. Priority Date: 11/19/1997
• Status: Expired due to Term

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.), Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation), RSA Security Incorporated (Symphony Technology Group LLC)
• Inventors: Jakobsson, Bjorn Markus, Juels, Ari
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Chung, Chang Y.
• Application Number:
  US09/134,012
• Time in Patent Office: 844 Days
• Field of Search: 705/37, 705/69, 235/380
• US Class Current: 705/69
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 50/188 Electronic negotiation

Abstract

The invention provides techniques for implementing secure transactions using an instrument referred to as "executable digital cash." In an illustrative embodiment, a first user generates a piece of digital cash representing an offer made by that user. The piece of digital cash includes a digital certificate authorizing the first user to make specified transfers, and an offer program characterizing the offer. The piece of digital cash is broadcast or otherwise transmitted to one or more additional users, utilizing a mobile agent or other suitable mechanism, such that a given one of these users can evaluate the offer using the offer program. For example, a second user could execute the offer program with a specific bid as an input to determine what that user would receive upon acceptance of his bid. If the result is acceptable to the second user, that user generates a bid capsule including the bid, the corresponding output of the offer program, and another certificate authorizing the second user to make the transfer specified in the bid. The bid capsule is submitted to an institution for processing in accordance with a policy which may be specified in the piece of digital cash. The institution selects one or more winning bids and implements the corresponding transactions. Digital signatures generated using secret keys associated with the certificates of the first and second users are utilized to ensure adequate security for the transmitted offer and bid information.

Claims

1. A method comprising the steps of:

generating a piece of digital cash representing an offer made by a first user, the piece of digital cash including;

(i) a digital certificate, and (ii) an offer program characterizing the offer, the offer program specifying for a given input a particular transfer to be made by the first user and authorized by the digital certificate; and

transmitting the piece of digital cash, whereby a second user can evaluate the offer by supplying a bid as input to the offer program, and if the bid is indicated as acceptable by the offer program the second user can bind the first user to make the corresponding transfer authorized by the digital certificate.

2. The method of claim 1 wherein the offer program takes as an input information regarding an item and outputs information regarding what the first user is willing to give for the item as part of the offer.

3. The method of claim 1 further including the step of executing the offer program via an institution associated with the first user to determine what the second user would receive upon acceptance of the offer.

4. The method of claim 1 further including the step of the second user executing the offer program to determine what the second user would receive upon acceptance of the offer.

5. The method of claim 1 wherein the transmitting step includes transmitting the piece of digital cash utilizing at least one of a mobile agent, an e-mail message, or an on-line bulletin board.

6. The method of claim 1 wherein the piece of digital cash further includes additional information specifying a policy for processing multiple bids received in response to the offer.

7. The method of claim 6 wherein the transmitting step includes broadcasting the piece of digital cash from the first user to a plurality of other users including the second user, and wherein an institution associated with the first user:

(i) utilizes the offer program to determine what the first user would receive upon acceptance of each of a plurality of bids received from the other users; and

(ii) utilizes the additional information specifying the policy for processing multiple bids to select one of the bids on behalf of the first user.

8. The method of claim 1 wherein the digital certificate is generated on a public key associated with the first user and authorizes the first user to make transfers using a corresponding secret key.

9. The method of claim 8 wherein the piece of digital cash further includes a digital signature on the offer program signed using the secret key associated with the digital certificate.

10. An apparatus comprising:

a processor operative to generate a piece of digital cash representing an offer made by a first user, the piece of digital cash including;

(i) a digital certificate, and (ii) an offer program characterizing the offer, the offer program specifying for a given input a particular transfer to be made by the first user and authorized by the digital certificate, whereby a second user receiving the piece of digital cash can evaluate the offer by supplying a bid as input to the offer program, and if the bid is indicated as acceptable by the offer program the second user can bind the first user to make the corresponding transfer authorized by the digital certificate; and

a memory coupled to the processor for at least temporarily storing at least a portion of the piece of digital cash.

11. The apparatus of claim 10 wherein the offer program takes as an input information regarding an item and outputs information regarding what the first user is willing to give for the item as part of the offer.

12. The apparatus of claim 10 wherein the digital certificate is generated on a public key associated with the first user and authorizes the first user to make transfers using a corresponding secret key.

13. The apparatus of claim 12 wherein the piece of digital cash further includes a digital signature on the offer program signed using the secret key associated with the digital certificate.

14. A computer-readable medium containing one or more programs, wherein the one or more programs when executed in a computer provide the steps of:

generating a piece of digital cash representing an offer made by a first user, the piece of digital cash including;

(i) a digital certificate, and (ii) an offer program characterizing the offer, the offer program specifying for a given input a particular transfer to be made by the first user and authorized by the digital certificate; and

transmitting the piece of digital cash, whereby a second user can evaluate the offer by supplying a bid as input to the offer program, and if the bid is indicated as acceptable by the offer program the second user can bind the first user to make the corresponding transfer authorized by the digital certificate.

15. The computer-readable medium of claim 14 wherein the piece of digital cash further includes a digital signature on the offer program signed using a secret key associated with the digital certificate.

16. A method comprising the steps of:

receiving a piece of digital cash representing an offer made by a first user, the piece of digital cash including;

(i) a digital certificate, and (ii) an offer program characterizing the offer, the offer program specifying for a given input a particular transfer to be made by the first user and authorized by the digital certificate; and

evaluating the offer by supplying a bid as input to the offer program, and if the bid is indicated as acceptable by the offer program the second user can bind he first user to make the corresponding transfer authorized by the digital certificate.

17. The method of claim 16 wherein the offer program takes as an input information regarding an item and outputs information regarding what the first user is willing to give for the item as part of the offer.

18. The method of claim 16 wherein the evaluating step further includes the step of executing the offer program via an institution associated with the first user to determine what a second user would receive upon acceptance of the offer.

19. The method of claim 16 wherein the evaluating step further includes the step of a second user executing the offer program to determine what the second user would receive upon acceptance of the offer.

20. The method of claim 16 wherein the evaluating step further includes the step of a second user processing a textual description associated with the offer program.

21. The method of claim 16 wherein the digital certificate is generated on a public key associated with the first user and authorizes the first user to make transfers using a corresponding secret key.

22. The method of claim 21 wherein the piece of digital cash further includes a digital signature on the offer program signed using the secret key associated with the digital certificate.

23. The method of claim 16 further including the step of a second user submitting a bid to an institution associated with the first user, wherein the second user determines what would be received upon acceptance of the bid by executing the offer program using the bid as an input.

24. The method of claim 23 wherein the bid includes a second digital certificate authorizing the second user to make specified transfers.

25. The method of claim 24 wherein the second digital certificate is generated on a public key associated with the second user and authorizes the second user to make transfers using a corresponding secret key.

26. The method of claim 25 wherein the bid includes a digital signature on the bid signed using the secret key associated with the second digital certificate.

27. The method of claim 23 wherein the bid includes an indication as to what the second user expects to receive from the first user upon acceptance of the bid.

28. A method comprising the steps of:

receiving a piece of digital cash representing an offer made by a user, the piece of digital cash including;

(i) a digital certificate, and (ii) an offer program characterizing the offer, the offer program specifying for a given input a particular transfer to be made by the first user and authorized by the digital certificate; and

executing the offer by supplying a bid as input to the offer program, wherein if the bid is indicated as acceptable by the offer program the user is bound to the corresponding transfer authorized by the digital certificate.