Secure encryption of data packets for transmission over unsecured networks

• US 7,047,222 B1
• Filed: 02/04/2000
• Issued: 05/16/2006
• Est. Priority Date: 08/06/1997
• Status: Expired due to Fees

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Bush, Ronald Roscoe
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Winter, John M.
• Application Number:
  US09/498,293
• Time in Patent Office: 2,293 Days
• Field of Search: 705/64, 705/1, 705/23, 705/24, 705/26, 705/27, 705/35, 705/40
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/208 Input by product or record sensing, e.g. weighing or scanner processing
• CPC Class Codes: G06Q 20/209 Specified transaction journal output feature, e.g. printed receipt or voice output
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/128 Check-book balancing, updating or printing arrangements
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher

Abstract

Pure random numbers from a sheet within a one-time pad are employed to encrypt the bytes of a source data packet and to order the encrypted bytes in a random order within the encrypted data packet. Pure random numbers fill remaining positions within the encrypted data packet. The resulting encrypted data packet is unconditionally secure (i.e., unbreakable). Sheets within the one-time pad are utilized only once, and the one-time pad is replaced when exhausted. For electronic checking applications, the one-time pad is distributed to the user stored in an electronic checkbook, with a copy retained by the bank. For cellular telephone applications, the one-time pad is stored in a replaceable memory chip within the mobile unit with a copy retained at a single, secured central computer. For client-server applications or applications involving sales over the Internet, the one-time pad may be provided to the user on a floppy disk or CD-ROM, with a copy retained by the vendor.

Claims

1. A method of processing an electronic check, comprising:

receiving an electronic check encrypted using a one-time pad at a business;

transmitting an encrypted first copy of said electronic check to a payor'"'"'s bank and an encrypted second copy of said electronic check to a payee'"'"'s bank;

decoding said encrypted first copy of said electronic check at said payor'"'"'s bank using a copy of said one-time pad;

authenticating said electronic check;

transmitting said encrypted first copy of said electronic check over an unsecure communication link to a clearinghouse with a payment authorization;

transmitting said encrypted second copy of said electronic check over an unsecure communication link to said clearinghouse;

comparing, at said clearinghouse, said encrypted first copy of said electronic check that has been transmitted over an unsecure communication link to said encrypted second copy of said electronic check that has been transmitted over an unsecure communication link; and

responsive to determining that said encrypted first copy of said electronic check matches said encrypted second copy of said electronic check and that the payment authorization has been received, processing, at said clearinghouse, a transaction transferring funds from said payor'"'"'s bank to said payee'"'"'s bank.