System, apparatus, and method for performing cryptographic validity services

• US 6,973,571 B2
• Filed: 07/03/2001
• Issued: 12/06/2005
• Est. Priority Date: 07/03/2001
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Lee, Elizabeth L., Schlesinger, Phillip R.
• Primary Examiner(s): Zand, Kambiz
• Application Number:
  US09/897,450
• Publication Number:
  US 20030009665A1
• Time in Patent Office: 1,617 Days
• Field of Search: 713/168, 713/169, 713/170, 713/175, 713/176, 713/155, 713/156, 713/181
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Embodiments of the present invention described and shown in the specification and drawings facilitate electronic authentication services for banking and other industries. Authentication services, often using Public Key Infrastructure (PKI) technology, are used to confirm the identity of the sender of data and to ensure that the data that was received is identical to the data that was sent. Embodiments of the present invention provide authentication services that may be used by a variety of configurations of entities requesting data authentication and entities responding to those requests. Embodiments of the present invention also support compatibility with commercial data authentication standards, integration with third-party data authentication software such as Secude (for Identrus access), and systems to control data authentication risks.

Claims

1. A system for performing cryptographic validity services comprising:

a Distributed Storage Array comprising at least one Storage Device; and

a Distributed Processor Array couple to the Distributed Storage Array, the Distributed Processor Array comprising at least one Processor, and the Distributed Storage Array storing a Program for controlling the Distributed Processor Array, wherein the Program comprises a Relying Customer Service Engine in communication with a Relying Participant Service Engine; and

the Distributed Processor Array is operative with the Program to receive a Validation Request from a Relying Customer Interface;

formulate a Query responsive to the Validation Request;

transmit the Query to a Relying Participant Interface;

receive a Query Response from the Relying Participant Interface;

formulate a Validation Response responsive to the Query Response; and

transmit the Validation Response to the Relying Customer Interface; and

the Distributed Processor Array is operative with the Relying Customer Service Engine to

receive the Validation Request from the Relying Customer Interface, and

transmit the Validation Response to the Relying Customer Interface; and

the Distributed Processor Array is operative with the Relying Participant Service Engine to

formulate the Query responsive to the Validation Request,

transmit the Query to the Relying Participant Interface,

receive the Query Response from the Relying Participant Interface, and

formulate the Validation Response responsive to the Query Response.

2. The system for performing cryptographic validity services of claim 1, wherein the Distributed Processor Array is operative with the Relying Customer Service Engine to perform consistency checking on the Validation Request.

3. The system for performing cryptographic validity services of claim 1, wherein the Distributed Processor Array is further operative with the Relying Customer Service Engine and the Distributed Process Array is further operative with the Relying Participant Service Engine to establish a Communication Channel between the Relying Customer Service Engine and the Relying Participant Service Engine.

4. The system for performing cryptographic validity services of claim 3, wherein the Communication Channel comprises the Internet.

5. The system for performing cryptographic validity services of claim 3, wherein the Distributed Processor Array is further operative with the Relying Customer Service Engine to transmit the Validation Request to the Communication Channel and receive the Validation Response from the Communication Channel;

and the Distributed Processor Array is further operative with the Relying Participant Service Engine to receive the Validation Request from the Communication Channel and transmit the Validation Response to the Communication Channel.

6. The system for performing cryptographic validity services of claim 5, wherein the Distributed Processor Array is further operative with the Relying Customer Service Engine to expose a System Application Programming Interface.

7. The system for performing cryptographic validity services of claim 6, wherein configuration and control information for the Program is received through the System Application Programming Interface.

8. The system for performing cryptographic validity services of claim 5, wherein the Distributed Processor Array is further operative with the Relying Customer Service Engine to expose an Information Application Programming Interface.

9. The system for performing cryptographic validity services of claim 8, wherein the Relying Customer Interface comprises the Information Application Programming Interface.

10. The system for performing cryptographic validity services of claim 9, wherein the Validation Request comprises and Electronic Signature, the Electronic Signature comprises a Digital Certificate and a Message Digest, wherein the Message Digest is responsive to Signed Data.

11. The system for performing cryptographic validity services of claim 1, wherein the Relying Participant Service Engine comprises a Policy Engine and the Validation Response is further responsive to the Policy Engine.

12. The system for performing cryptographic validity services of claim 1, wherein the Distributed Processor Array is operative with the Relying Participant Service Engine to perform consistency checking on the Validation Request.

13. A method for performing cryptographic validity services comprising:

receiving a Validation Request from a Relying Customer Interface;

formulating a Query responsive to the Validation Request;

transmitting the Query to a Relying Participant Interface;

receiving a Query Response from the Relying Participant Interface;

formulating a Validation Response responsive to the Query Response;

transmitting the Validation Response to the Relying Customer Interface; and

wherein receiving the Validation Request from the Relying Customer Interface and transmitting the Validation Request from the Relying Customer Interface are performed by a Relying Customer Service Engine;

wherein formulating the Query responsive to the Validation Request, transmitting the Query to the Relying Participant Interface, receiving the Query Response from the Relying Participant Interface, and formulating the Validation Response responsive to the Query Response are performed by a Relying Participant Service Engine; and

wherein the Relying Customer Service Engine is in communication with the Relying Participant Service Engine.

14. The method for performing cryptographic validity services of claim 13, further comprising performing consistency checking on the Validation Request and wherein performing consistency checking on the Validation Request is performed by the Relying Customer Service Engine.

15. The method of claim 14 for performing consistency checking on the Validation Request is performed by the Relying Customer Service Engine.

16. The method for performing cryptographic validity services of claim 15, wherein the Communication Channel comprises the Internet.

17. The method for performing cryptographic validity services of claim 15, further comprising transmitting the Validation Request to the Communication Channel, receiving the Validation Response from the Communication Channel, receiving the Validation Request from the Communication Channel, and transmitting the Validation Response to the Communication Channel;

wherein transmitting the Validation request to the Communication Channel and receiving the Validation Response from the Communication Channel are performed by the Relying Customer Service Engine; and

wherein receiving the Validation Request from the Communication Channel and transmitting the Validation Response to the Communication Channel are performed by the Relying Participant Service Engine.

18. The method for performing cryptographic validity services of claim 17, further comprising exposing, by the Relying Customer Service Engine, a System Application Programming Interface.

19. The method for performing cryptographic validity services of claim 18, further comprising receiving, by the Relying Customer Service Engine, configuration and control information through the System Application Programming Interface.

20. The method for performing cryptographic validity services of claim 17, further comprising exposing, by the Relying Customer Service Engine, an Information Application Programming Interface.

21. The method for performing cryptographic validity services of claim 20, wherein the Relying Customer Interface comprises the Information Application Programming Interface.

22. The method for performing cryptographic validity services of claim 21, wherein the Validation Request comprises an Electronic Signature, the Electronic Signature comprising a Digital Certificate and a Message Digest, wherein the Message Digest is responsive to Signed Data.

23. The method for performing cryptographic validity services of claim 13, wherein the Relying Participant Service Engine comprises a Policy Engine and the Validation Response is further responsive to the Policy Engine.

24. The method for performing cryptographic validity services of claim 13, further comprising performing, by the Relying Participant Service Engine, consistency checking on the Validation Request.

25. The method for performing cryptographic validity services comprising:

receiving a Validation Request from a Communication Channel;

formulating a Query responsive to the Validation Request;

transmitting the Query to a Relying Participant Interface;

receiving a Query Response from the Relying Participant Interface;

formulating a Validation Response responsive to the Query Response;

transmitting the Validation Response to the Communication Channel; and

wherein receiving the Validation Request from the Communication Channel, formulating the Query responsive to the Validation Request, transmitting the Query to the Relying Participant Interface, receiving the Query Response from the Relying Participant Interface, formulating the Validation Response responsive to the Query Response, and transmitting the Validation Response to the Communication Channel are performed by a Relying Participant Service Engine.

26. The method for performing cryptographic validity services of claim 25, wherein the Relying Participant Service Engine comprises a Policy Engine and the Validation Response is further responsive to the Policy Engine.

27. The method for performing cryptographic validity services of claim 25, further comprising performing, by the Relying Participant Service Engine, consistency checking on the Validation Request.

28. An apparatus for performing cryptographic validity services comprising:

a Validation Request Receiver, wherein a Validation Request is received from a Relying Customer Interface;

a Query Formulator, in communication with the Validation Request Receiver, wherein a Query is formulated responsive to the Validation request;

a Query Transmitter, in communication with the Query Formulator, wherein the Query is transmitted to a Relying Participant Interface;

a Query Response Receiver, wherein the Query Response is received from the Relying Participant Interface;

a Validation Response Formulator, in communication with the Query Response Receiver, wherein a Validation Response is formulated responsive to the Query Response;

a Validation Response Transmitter, in communication with the Validation Response Formulator, wherein the Validation Response is transmitted to the Relying Customer Interface; and

a Relying Customer Service Engine in communication with a Relying Participant Service Engine, wherein the Relying Customer Service Engine comprises the Validation Request Receiver and the Validation Response Transmitter, and wherein the Relying Participant Service Engine comprises the Query Formulator, the Query Transmitter, the Query Response Receiver, and the Validation Response Formulator.

29. The apparatus for performing cryptographic validity services of claim 28, wherein the Validation Request Receiver comprises a Consistency Checker and wherein the Consistency Checker performs consistency checking on the Validation Request.

30. The apparatus for performing cryptographic validity services of claim 28, further comprising a Communication Channel in communication with the Relying Customer Service Engine and in communication with the Relying Participant Service Engine.

31. The apparatus for performing cryptographic validity services of claim 30, wherein the Communication Channel comprises the Internet.

32. The apparatus for performing cryptographic validity services of claim 30, wherein the Validation Request Receiver transmits the Validation Request to the Communication Channel, the Query Formulator receives the Validation Request from the Communication Channel, the Validation Response Formulator transmits the Validation Response to the Communication Channel, and the Validation Response Transmitter receives the Validation Response from the Communication Channel.

33. The apparatus for performing cryptographic validity services of claim 32, wherein the Relying Customer Service Engine exposes a System Application Programming Interface.

34. The apparatus for performing cryptographic validity services of claim 33, wherein configuration and control information is received through the System Application Programming Interface.

35. The apparatus for performing cryptographic validity services of claim 32, wherein the Relying Customer Service Engine exposes an Information Application Programming Interface.

36. The apparatus for performing cryptographic validity services of claim 35, wherein the Relying Customer Interface comprises the Information Application Programming Interface.

37. The apparatus for performing cryptographic validity services of claim 36, wherein the Validation Request comprises an Electronic Signature, the Electronic Signature comprising a Digital Certificate and a Message Digest, wherein the Message Digest is responsive to Signed Data.

38. The apparatus for performing cryptographic validity services of claim 28, wherein the Validation Response Formulator comprises a Policy Engine and the Validation Response is further responsive to the Policy Engine.

39. The apparatus for performing cryptographic validity services of claim 28, wherein the Query Formulator comprises a Consistency Checker and wherein the Consistency Checker performs consistency checking on the Validation Request.

40. An apparatus for performing cryptographic validity services comprising:

means for receiving a Validation Request from a Relying Customer Interface;

means, in communication with the means for receiving a Validation Request from a Relying Customer Interface, for formulating, responsive to the Validation Request, a Query;

means, in communication with the means for formulating a Query, for transmitting the Query to a Relying Participant Interface;

means for receiving a Query Response from the Relying Participant Interface;

means, in communication with the means for receiving a Query Response from the Relying Participant Interface, for formulating, responsive to the Query Response, a Validation Response;

means, in communication with the means for formulating a Validation Response, for transmitting the Validation Response to the Relying Customer Interface; and

a Relying Customer Service Engine in communication with a Relying Participant Service Engine, wherein the Relying Customer Service Engine comprises the means for receiving the Validation Request from the Relying Customer Interface and the means for transmitting the Validation Response to the Relying Customer Interface, and wherein the Relying Participant Service Engine comprises the means for formulating a Query, the means for transmitting the Query to the Relying Participant Interface, the means for receiving the Query Response from the Relying Participant Interface, and the means for formulating the Validation Response.

41. The apparatus for performing cryptographic validity services of claim 40, wherein the means for receiving the Validation Request from the Relying Customer Interface comprises means for performing consistency checking on the Validation Request.

42. The apparatus for performing cryptographic validity services of claim 40, further comprising a Communication Channel in communication with the Relying Customer Service Engine and in communication with the Relying Participant Service Engine.

43. The apparatus for performing cryptographic validity services of claim 42, wherein the Communication Channel comprises the Internet.

44. The apparatus for performing cryptographic validity services of claim 42, wherein the means for receiving the Validation Request from the Relying Customer Interface comprises means for transmitting the Validation Request to the Communication Channel, the means for formulating the Query comprises means for receiving the Validation Request from the Communication Channel, the means for formulating the Validation Response comprises means for transmitting the Validation Response to the Communication Channel, and the means for transmitting the Validation Response to the Relying Customer Interface comprises means for receiving the Validation Response from the Communication Channel.

45. The apparatus for performing cryptographic validity services of claim 44, wherein the Relying Customer Service Engine further comprises means for exposing a System Application Programming Interface.

46. The apparatus for performing cryptographic validity services of claim 45, wherein configuration and control information is received through the System Application Programming Interface.

47. The apparatus for performing cryptographic validity services of claim 44, wherein the Relying Customer Service Engine has means for exposing an Information Application Programming Interface.

48. The apparatus for performing cryptographic validity services of claim 47, wherein the Relying Customer Interface comprises the Information Application Programming Interface.

49. The apparatus for performing cryptographic validity services of claim 48, wherein the Validation Request comprises an Electronic Signature, the Electronic Signature comprising a Digital Certificate and a Message Digest, wherein the Message Digest is responsive to Signed Data.

50. The apparatus for performing cryptographic validity services of claim 40, wherein the means for formulating the Validation Response comprises a Policy Engine and the Validation Response is further responsive to the Policy Engine.

51. The apparatus for performing cryptographic validity services of claim 40, wherein the means for formulating a Query comprises means for performing consistency checking on the Validation Response.

52. An apparatus for performing cryptographic validity services comprising;

means for receiving a Validation Request from a Communication Channel;

means, in communication with the means for receiving a Validation Request from a Communication Channel, for formulating, responsive to the Validation Request, a Query;

means, in communication with the means for formulating a Query, for transmitting the Query to a Relying Participant Interface;

means for receiving a Query Response from the Relying Participant Interface;

means, in communication with the means for receiving a Query Response from the Relying Participant Interface, for formulating, responsive to the Query Response, a Validation Response;

response, for Transmitting the Validation Response to the Communication Channel; and

a Relying Participant Service Engine, wherein the Relying Participant Service Engine comprises the means for receiving the Validation Request from the Communication Channel, the means for formulating the Query, the means for transmitting the Query to the Relying Participant Interface, the means for receiving the Query Response from the Relying Participant Interface, the means for formulating the Validation Response, and the means for transmitting the Validation Response to the Communication Channel.

53. The apparatus for performing cryptographic validity services of claim 52, wherein the means for formulating the Validation Response comprises a Policy Engine and the Validation Response is further responsive to the Policy Engine.

54. The apparatus for performing cryptographic validity services of claim 53, wherein the means for formulating the Query comprises means for performing consistency checking on the Validation Request.