Electronic contracts

• US 7,085,926 B1
• Filed: 05/22/2000
• Issued: 08/01/2006
• Est. Priority Date: 05/22/1999
• Status: Expired due to Term

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Peach, Nicholas Anthony John
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US09/576,223
• Time in Patent Office: 2,262 Days
• Field of Search: 713/176, 713/187, 713/188, 713/200, 707/9, 707/237, 705/1, 705/45, 705/54, 705/57, 705/80, 705/52, 709/226, 380/3
• US Class Current: 713/160
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The invention provides a digital contract comprising a sealed package comprising: a header package comprising: rules defining any sealed packages to be included in said contract; a validating party who is to validate said header package; and a sealing party who is to seal said package; a body containing at least a portion of the content of the package; and a validating signature generated from said rules and said body according to a first key belonging to said validating party; any sealed packages defined in said rules; and a sealing signature generated from said header package and any of said sealed packages according to a first key belonging to said sealing party. Further provided is contract management software for generating, validating, exchanging and managing such contracts.

Claims

1. A digital file forming a contract comprising:

a header package having rules defining sealed packages produced by a sealing party, a body containing at least a portion of the content of the contract; and

a validating signature generated from said rules and said body according to a first key belonging to a validating party; and

a sealing signature generated from said header package and said sealed packages according to a second key belonging to said sealing party.

2. A digital file forming a contract according to claim 1 wherein said header package further comprises a unique header identifying a type of said sealed package and wherein said validating signature is generated from said rules, said body and said header.

3. A digital file forming a contract according to claim 1 wherein said sealed package comprises a unique number generated by said sealing party and said sealing signature is generated from said header package, any of said sealed packages and said unique number.

4. A digital file according to claim 1 wherein said rules define one or more unsealed packages to be included in said sealed package, said body comprises a HTML file and one of the unsealed packages defined in the rules contains data for a field in the HTML file.

5. A digital file according to claim 1 wherein said rules comprise a URL corresponding to the location for which each sealed package to be included in the contract can be obtained.

6. A digital contract according to claim 5 wherein said URL is a CGI script for commanding a remote server to generate said sealed package.

7. A digital contract according to claim 5 wherein said URL identifies the location of said sealed package.

8. A contract management apparatus for validating a digital file const contract, said digital file having a header package which includes rules defining sealed packages, a body containing at least a portion of the contract, and a validating signature, comprising:

means for reading said rules and for identifying a validating party and a sealing party which created a sealed file of said contract;

first means for obtaining a first key belonging to said validating party cooperable with said validating signature generated from said rules and body to validate said header package;

second means for obtaining a second key belonging to said sealing party cooperable with said sealing signature to validate said contract; and

means for iteratively validating any sealed packages contained in said contract using said second key and sealing signature.

9. A contract management apparatus as claimed in claim 8 wherein said iterative validating means returns any data stored in said sealed packages.

10. The contract management apparatus of claim 9 further comprising means for displaying said body contents and said returned data.

11. The contract management apparatus of claim 8, including one of a smartcard, a personal digital assistant, a personal computer, a terminal or an embedded system.

12. A contract management apparatus for generating a digital file constituting a contract comprising:

means for obtaining a header package for said contract;

means for reading rules defining sealed data packages, and for identifying a sealing party and any sealed packages to be included in said contract;

means for obtaining said identified sealed packages;

means for generating a sealing signature from said header package and any of said sealed packages according to a first key belonging to said sealing party; and

means for assembling said header package, sealed packages and said sealing signature into said digital file constituting a contract.

13. A computer product for storing instructions which are executed by a computer to validate a digital file having a header package which includes rules defining sealed packages, a body containing at least a portion of a contract and a validating signature, comprising:

reading said digital file and identifying a validating party and a sealing party which created a sealed package of said contract;

deriving a first key belonging to a validating party;

validating said header package using said first key and said validating signature;

deriving a second key belonging to said sealing party;

a sealing signature from said header package; and

validating said digital file using said second key and said sealing signature.

14. The computer product according to claim 13, further comprising instructions for deriving said sealing signature from a unique number contained in said header package.

15. A computer product for storing ins ons for a computer to execute the steps of:

storing rules to describe a data package;

creating from said rules a data package containing a digital data file;

merging said rules and said data package into a merged file;

creating a package validity signature from said merged file to prevent unauthorized use of said digital file; and

generating a unique number identifying said digital file;

merging said package validity signature, said merged file and said unique number;

creating a sealing signature from said merged files; and

sealing said merged files with said sealing signature to produce a sealed package.

16. A computer product according to claim 15 wherein said rules comprises a plurality of elements which point to a location on said computer containing a requited package.

17. The computer product according to claim 16 wherein said rules define a sealing signature for said sealed package.

18. The computer product according to claim 15 wherein said merged files are compressed as a single file.