Electronic transaction apparatus for electronic commerce

• US 7,028,187 B1
• Filed: 08/21/1998
• Issued: 04/11/2006
• Est. Priority Date: 11/15/1991
• Status: Expired due to Fees

• Current Assignee: Citibank (South Dakota) NA (Citigroup Incorporated)
• Original Assignee: Citibank (South Dakota) NA (Citigroup Incorporated)
• Inventors: Rosen, Sholom S.
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US09/138,459
• Time in Patent Office: 2,790 Days
• Field of Search: 705/35, 705/39, 705 40- 42, 705/64, 705/65, 705/56, 705/71, 713/194, 713/172, 713175-176, 713170-171, 713/189, 380/44, 380/46
• US Class Current: 713/175
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/26 Debit schemes, e.g. "pay now"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/381 Currency conversion
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07F 17/16 for devices exhibiting advertisements, announcements, pictures or the like
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A system for open electronic commerce having a customer trusted agent securely communicating with a first money module, and a merchant trusted agent securely communicating with a second money module. Both trusted agents are capable of establishing a first cryptographically secure session, and both money modules are capable of establishing a second cryptographically secure session. The merchant trusted agent transfers electronic merchandise to the customer trusted agent, and the first money module transfers electronic money to the second money module. The money modules inform their trusted agents of the successful completion of payment, and the customer may use the purchased electronic merchandise.

Claims

1. A tamper-proof electronic transaction device comprising:

an external interface;

an electronic processor in communication with said external interface;

a memory that stores a unique digital certificate associated only with said transaction device, where said digital certificate includes a unique identifier, a public key, and a digital signature;

a key generator that generates a public and private key pair, wherein said public key is included within said digital certificate; and

wherein said key generator includes a random number generator, said digital certificate includes a unique device identifier and said digital signature is provided by a security server which creates said digital certificates, and wherein the device is capable of using said key generator to generate a new private and public key pair to obtain an updated digital certificate from said security server.