Methods and apparatus for secure electronic, certified, restricted delivery mail systems

• US 6,442,571 B1
• Filed: 10/24/2000
• Issued: 08/27/2002
• Est. Priority Date: 11/13/1997
• Status: Expired due to Term

• Current Assignee: Intellectual Ventures I LLC (Intellectual Ventures LLC)
• Original Assignee: HyperSpace Communications, Inc.
• Inventors: Clarke, Christopher D., Haff, Maurice W.
• Primary Examiner(s): RONES, CHARLES
• Application Number:
  US09/694,472
• Time in Patent Office: 672 Days
• Field of Search: 707/100, 707/10, 707/201, 707/203, 707/205, 705/410, 705/402, 705/403, 705/405, 380/24
• US Class Current: 380/244
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: H04L 2101/663 Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1063 Discovery through centralising entities
• CPC Class Codes: H04L 67/1078 Resource delivery mechanisms
• CPC Class Codes: H04L 67/1093 Some peer nodes performing special functions
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/162 involving adaptations of sockets based mechanisms secure socket layer H04L63/168
• CPC Class Codes: H04L 69/164 Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 69/326 : in the transport layer [OSI layer 4] H04L69/16 takes precedence
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: Y10S 707/922 : Communications
• CPC Class Codes: Y10S 707/99942 : Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 : Generating database or data structure, e.g. via user interface
• CPC Class Codes: Y10S 707/99945 : Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99952 : Coherency, e.g. same view to multiple users
• CPC Class Codes: Y10S 707/99953 : Recoverability

Abstract

A computer data signal embodied in a propagation medium is provided. The signal enables a variable number of data transfers and includes an initial connection source code segment and a data transfer source code segment. The initial connection source code segment establishes a connection between at least two devices via predetermined listening ports, with at least one predetermined listening port residing within each device. The initial connection source code segment also dynamically assigns a first data port within a first device, and transmits the address of the first data port to a remaining device via the predetermined listening ports. The data transfer source code segment is for each of the variable number of data transfer operations. The data transfer source code segment dynamically assigns a corresponding second data port within the remaining device and transfers data between the connected devices via the data ports so that the data is substantially simultaneously transferred between a variable number of devices via the data ports. Each pair of first and second data ports is established in response to each listening port connection.

Claims

1. A receiving data transfer device that receives data and data transfer attributes electronically transferred from at least one remote device originating a data transfer, the receiving data transfer device comprising:

a delivery receipt system that generates a delivery receipt comprising data transfer attributes verification after successfully verifying that the received data is the same as the data sent by the at least one remote device;

a certifying system that communicates with an independent certifying processing device that certifies delivery receipts, the independent certifying processing device sending receipt certification to at least one of the devices involved in the data transfer after processing a delivery receipt, which certification comprises authentication of the data transfer using a postmark of a postal authority which postmark is a unique digital characterization of the delivery receipt,

wherein at least one successful data transfer to the receiving data transfer device is certified by the independent certifying processing device.

2. The receiving data transfer device of claim 1, further comprising a data transfer system that transfers data and associated data transfer attributes electronically with the at least one remote device originating the data transfer.

3. The receiving data transfer device of claim 1, in which access to the data transferred to the receiving device is restricted to an intended recipient using public key cryptography, security being assured through user authentication and data encryption.

4. The receiving data transfer device of claim 1, in which data transferred is encrypted prior to transport to receiving devices using at least one public key associated with each destination, and received encrypted data can only be decrypted using the intended recipient'"'"'s private key, with data access control characteristic of standard public key cryptography.

5. The receiving data transfer device of claim 1, in which encrypted data is transferred to the receiving device, along with authenticated user identity and electronic finger print of the data transferred, without passing through the independent certifier or a security server.

6. The receiving data transfer device of claim 1, in which a delivery receipt is generated with no action required by the intended recipient.

7. The receiving data transfer device of claim 1, in which the certified delivery receipt further comprises a verifiable electronic postmark representation by a postal authority.

8. The receiving data transfer device of claim 7, in which the certified delivery receipt is uniquely identified and linked to a specific data transfer transaction by data transfer attribute elements and the electronic postmark of a postal authority.

9. The receiving data transfer device of claim 1, in which the unique digital characterization comprises digitally signing the delivery receipt, assuring at least in part tampering and modification detection.

10. The receiving data transfer device of claim 1, in which the data transfer attributes verification is independent of data access by an intended data transfer recipient.

11. The receiving data transfer device of claim 1, wherein the data comprises at least one file.

12. A data transfer system comprising:

an originating data transfer device originating a transfer of data and data transfer attributes;

an independent certifying processing device that sends a data transfer certification to at least one device involved in the data transfer after processing a delivery receipt, which certification comprises authentication of the data transfer using a postmark of a postal authority which postmark is a unique digital characterization of the delivery receipt;

a receiving data transfer device that receives the data and data transfer attributes, verifies that the received data is the same as the data sent by an at least one remote device, processes the delivery receipt comprising data transfer attribute verification, which indicates successful receipt of the data, after successful receipt of the data transferred, and communicates with the independent certifying processing device;

wherein at least one data transfer to the receiving data transfer device is certified when successful by the independent certifying processing device.

13. The data transfer system of claim 12, further comprising a first data transfer system, the independent certifying processing device comprising a second data transfer system, and the receiving data transfer device comprising a third data transfer system.

14. The data transfer system of claim 12, in which access to the data transferred to the receiving device is restricted to the intended recipient using public key cryptography, security being assured through user authentication and data encryption.

15. The data transfer system of claim 12, in which data transferred is encrypted prior to transport to receiving devices using at least one public key associated with each destination, and received encrypted data can only be decrypted using an intended recipient'"'"'s private key, with data access control characteristic of standard public key cryptography.

16. The data transfer system of claim 12, in which encrypted data is transferred to the receiving device, along with authenticated user identity and electronic finger print of the data transferred, without passing through the independent certifier or a security server.

17. The receiving data transfer system of claim 12, in which a delivery receipt is generated with no action required by an intended recipient.

18. The data transfer system of claim 12, in which the certified delivery receipt further comprises a verifiable electronic postmark representation by a postal authority.

19. The data transfer system of claim 18, in which the certified delivery receipt is uniquely identified and linked to a specific data transfer by data transfer attribute elements and the electronic postmark of a postal authority.

20. The data transfer system of claim 12, in which the unique digital characterization comprises digitally signing the delivery receipt, assuring at least in part tampering and modification detection.

21. The data transfer system of claim 12, in which the data transfer attributes verification is independent of data access by an intended data transfer recipient.

22. The data transfer system of claim 12, wherein the data comprises at least one file.

23. A computer readable medium that stores a data transfer program for receiving data and data transfer attributes and certifying successful receipt of a data transfer electronically transferred from at least one device involved in a transaction to a receiving device, the medium comprising:

a delivery receipt source code segment that generates a delivery receipt comprising data transfer attributes verification after successfully verifying that the received data is the same as the data sent by an at least one remote device;

a certifying source code segment that communicates with an independent certifying processing device that certifies delivery receipts, the independent certifying processing device providing certification to at least one of the devices involved in the data transfer after processing the delivery receipt, which certification comprises authentication using a postmark of a postal authority which postmark is a unique digital characterization of the delivery receipt,

wherein at least one successful data transfer is certified by the independent certifying processing device.

24. The medium of claim 23, in which access to the data transferred to the receiving device is restricted to an intended recipient using public key cryptography, security being assured through user authentication and data encryption.

25. The medium of claim 23, in which data transferred is encrypted prior to transport to receiving devices using public keys associated with each destination, and received encrypted data can only be decrypted using an intended recipient'"'"'s private key, with data access control characteristic of standard public key cryptography.

26. The medium of claim 23, in which encrypted data is transferred to the receiving device, along with authenticated user identity and electronic finger print of the data transferred, without passing through the independent certifier or a security server.

27. The medium of claim 23, in which a delivery receipt is generated with no action required by an intended recipient.

28. The medium of claim 23, in which the delivery receipt further comprises a verifiable electronic postmark representation by a postal authority.

29. The medium of claim 23, in which the delivery receipt is uniquely identified and linked to a specific data transfer by data transfer attribute elements and the electronic postmark of the postal authority.

30. The medium of claim 23, in which the unique digital characterization further comprises digitally signing the delivery receipt, assuring at least in part tampering and modification detection.

31. The medium of claim 23, in which the data transfer attributes verification is independent of data access by an intended data transfer recipient.

32. The medium of claim 23, wherein the data comprises at least one file.

33. A method for receiving data and data transfer attributes and certifying successful receipt of a data transfer electronically transferred from at least one originating remote device to a receiving device, the method comprising:

generating a delivery receipt comprising data attributes verification after successfully verifying that the received data is the same as the data sent by the at least one remote device;

communicating with an independent certifying processing device that verifies delivery receipts; and

sending certification from the independent certifying processing device to at least one device involved in the data transfer after processing the delivery receipt, which certification comprises authentication using a postmark of a postal authority which postmark is a unique digital characterization of the delivery receipt,

wherein the independent certifying processing device certifies at least one successful data transfer to the receiving device.

34. The method of claim 33, transferring data and associated data transfer attributes electronically with at least one remote device originating a data transfer.

35. The method of claim 33, in which access to the data transferred to the receiving device is restricted to an intended recipient using public key cryptography, security being assured through user authentication and data encryption.

36. The method of claim 33, in which data transferred is encrypted prior to transport to receiving devices using public keys associated with each destination, and received encrypted data can only be decrypted using an intended recipient'"'"'s private key, with data access control characteristic of standard public key cryptography.

37. The method of claim 33, in which encrypted data is transferred to the receiving device, along with authenticated user identity and electronic finger print of the data transferred, without passing through the independent certifier or a security server.

38. The method of claim 33, in which a delivery receipt is generated with no action required by an intended recipient.

39. The method of claim 33, in which the delivery receipt further comprises a verifiable electronic postmark representation by a postal authority.

40. The method of claim 39, in which the delivery receipt is uniquely identified and linked to a specific data transfer by data transfer attributes and the electronic postmark of the postal authority.

41. The method of claim 33, in which the unique digital characterization comprises digitally signing the delivery receipt, assuring at least in part tampering and modification detection.

42. The method of claim 33, in which the data transfer attributes verification is independent of data access by an intended data transfer recipient.

43. The method of claim 33, wherein the data comprises at least one file.

44. A method for transfer of data electronically over shared communication pathways from at least one remote device originating the transfer to a receiving device, the method comprising:

authenticating an identity of each intended party to the data transfer;

generating data transfer attributes characterizing the data transferred;

encrypting the data to restrict access to intended recipients of the data transferred;

sending the data transfer attributes and the encrypted data to the at least one receiving device;

receiving the data transfer attributes and the encrypted data by the at least one receiving device;

verifying received data transfer attributes providing verification that the received data is the same as the data sent by the at least one remote device;

processing a delivery receipt comprising data attributes verification after successfully verifying that the received data is the same as the data sent by the at least one remote device;

communicating with an independent certifying processor that certifies delivery receipts, the certification comprising authentication using a postmark of a postal authority which postmark is a unique digital characterization of a delivery receipt; and

sending certification from the independent certifying processor to at least one device involved in the data transfer after certifying the delivery receipt,

wherein the independent certifying processing device certifies at least one successful data transfer to the receiving device.

45. The method of claim 44, in which access to the data transferred to the receiving device is restricted to an intended recipient using public key cryptography, security being assured through user authentication and data encryption.

46. The method of claim 44, in which data transferred is encrypted prior to transport to receiving devices using public keys associated with each destination, and received encrypted data can only be decrypted using an intended recipient'"'"'s private key, with data access control characteristic of standard public key cryptography.

47. The method of claim 44, in which encrypted data is transferred to the receiving device, along with authenticated user identity and electronic finger print of the data transferred, without passing through the independent certifier or a security server.

48. The method of claim 44, in which a delivery receipt is generated with no action required by an recipient.

49. The data transfer device of claim 44, in which the delivery receipt further comprises a verifiable electronic postmark representation by a postal authority.

50. The method of claim 49, in which the certified delivery receipt is uniquely identified and linked to a specific data transfer by data transfer attribute elements and the electronic postmark of the postal authority.

51. The method of claim 44 in which the unique digital characterization comprises digitally signing the delivery receipt, assuring at least in part tampering and modification detection.

52. The method of claim 44, in which the data transfer attributes verification is independent of data access by an intended data transfer recipient.

53. The method of claim 44, further comprising communicating with at least the originating remote device to certify successful data transfer.

54. The method of claim 53, wherein the data comprises at least one file.