System for secure transactions

• US 7,120,609 B1
• Filed: 10/25/1999
• Issued: 10/10/2006
• Est. Priority Date: 12/02/1998
• Status: Expired due to Fees

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Kerkdijk, Hendrikus
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Worjloh, Jalatee
• Application Number:
  US09/857,383
• Time in Patent Office: 2,542 Days
• Field of Search: 705 64- 80, 705/26, 713/155, 713/156, 713/150, 713/1
• US Class Current: 705/78
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 50/188 Electronic negotiation

Abstract

A multimedia network (1) with connected customer stations (2), merchant servers (3), and a payment server (5). Secure electronic transactions are performed using a secure electronic transactions protocol (SET), including exchange of digital certificates, managed by a Trusted Third Party Server (9). The customer stations comprise transactions management means (10), fit for performing said SET protocol and for managing said certificates for the customer station. A remote customer agent (13) represents the customer station in the negotiation and payment process. The customer station (2) comprises an agent interface (12), fit for transmission of codes, parameters and certificates between the customer agent (13) and the transactions management means (10). A remote merchant agent (14) represents the merchant station (3) in the negotiation and payment process with the customer agent (13) or the customer station (3), to have paid for the selected products in a secure way, under control of SET protocol.

Claims

1. A system for the execution of secure transactions in a multimedia network, the system comprising:

a multimedia network with customer stations, merchant servers, and a payment server connected to it, secure electronic transactions being performed using a secure electronic transactions protocol, comprising the exchange of digital certificates, uniquely identifying the relevant transaction participants and also attesting their privileges at the merchant server, said certificates being managed by a Trusted Third Party Server being connected to said multimedia network, said payment server being configured to validate the digital certificates presented and to process authorization concerning the payment, said customer stations comprising transaction management means for performing said secure electronic transactions protocol and for managing said certificates for the customer station, further comprising a remote customer agent, managed by agent parameters received from said customer station and thus, under the control of said parameters, representing the customer station in a negotiation process, including selecting products to be presented by the merchant server, payment for selected products being performed in a secure way, under control of said secure electronic transactions protocol and said certificates, the payment process being performed between said transactions management means and the merchant server,

wherein said customer station comprises an agent interface for transmission of codes, parameters and certificates between said customer agent and said transactions management means, the system further comprising a remote merchant agent, managed by agent parameters received from said merchant station and thus, under the control of said parameters, capable of representing the merchant station in a negotiation process, including presenting products to the customer agent or the customer station, and to have paid for products being selected by the customer agent or the customer station, in a secure way, under control of said secure electronic transactions protocol and said certificates, wherein said customer agent is configured to request said merchant agent to pay by credit card, the merchant agent is configured to inform said merchant server of the requested payment, while parallel to that the customer agent is configured to initialize said transactions management means;

wherein the transaction management means, the merchant server and the payment server are configured to perform a standard secure electronic transaction procedure; and

wherein after completion of the payment process, the merchant server is configured to inform the merchant agent of completion of the payment process, the merchant agent is configured to pass this message on to the customer agent, and the customer agent is configured to notify the customer station of the payment completion.

2. The system according to claim 1, wherein said negotiation and payment process by said customer agent and said remote merchant agent is performed within an agent negotiation server, connected to said multimedia network.

3. The system according to claim 1, wherein within said secure electronic transaction protocol, for authentication and authorization of said customer agent, a token is encapsulated, comprising an authorization code for opening up said transactions management means.

4. The system according to claim 3, wherein said token is stored within the customer agent in an encrypted form, using a random key, the random key being generated at the customer station for each new payment process.

5. The system according to claim 3, wherein both the customer station and the customer agent comprise a specific communication certificate, payment start messages being communicated to said transactions management means in encrypted form, using a random session key which, in turn, is sent over in encrypted form, using the customer station'"'"'s public key related to said communication certificate, said message being signed with the customer agent'"'"'s private key related to said communication certificate and a time stamp being added to said message in order to prevent replay by malicious parties.

6. In a system comprising a multimedia network with customer stations, merchant servers, and a payment server connected thereto, secure electronic transactions being performed using a secure electronic transactions protocol, comprising the exchange of digital certificates, uniquely identifying the relevant transaction participants and also attesting their privileges at the merchant server, said certificates being managed by a Trusted Third Party Server being connected to said multimedia network, said payment server being configured to validate the digital certificates presented and to process authorization concerning the payment, said customer stations comprising transactions management means for performing said secure electronic transactions protocol and for managing said certificates for the customer station, moreover, comprising a remote customer agent, managed by agent parameters received from said customer station and thus, under the control of said parameters, representing the customer station in a negotiation process, including selecting products to be presented by the merchant server, while payment for selected products takes place in a secure way, under control of said secure electronic transactions protocol and said certificates, the payment process being performed between said transactions management means and the merchant server, while, moreover, said customer station comprises an agent interface for transmission of codes, parameters and certificates between said customer agent and said transactions management means, and, besides, a remote merchant agent, managed by agent parameters received or to be received from said merchant station and thus, under the control of said parameters, representing the merchant station in a negotiation process, including presenting products to the customer agent or the customer station, and to have paid for products being selected by the customer agent or the customer station, in a secure way, under control of said secure electronic transactions protocol and said certificates, a method for the execution of secure transactions in a multimedia network:

in a first step, said customer agent requests said merchant agent to pay by credit card, and the merchant agent then informs said merchant server of the requested payment, while parallel to that the customer agent initializes said transactions management means;

in a second step, a standard secure electronic transaction procedure is performed by the transactions management means, the merchant server and the payment server; and

in a third, final step, after completion of the payment process, the merchant server informs the merchant agent of completion of the payment process, and the merchant agent passes this message on to the customer agent, which notifies the customer station of the payment completion.

7. A data processing device for execution of secure transactions in a multimedia network, the multimedia network comprising merchant servers and a payment server configured to validate digital certificates presented and to process authorization concerning a payment, connected to it, said data processing device comprising:

transaction management means for performing a secure electronic transaction protocol, comprising the exchange of digital certificates, uniquely identifying the relevant transaction participants and also attesting their privileges at the merchant server, said certificates being managed by a Trusted Third Party Server being connected to said multimedia network, and for managing said certificates for said data processing device, said data processing device being configured to manage a remote customer agent by transmitting agent parameters to the remote customer agent for representing the data processing device in a negotiation process under the control of said parameters, including selecting products to be presented by the merchant server, payment for selected products being performed in a secure way, under control of said secure electronic transactions protocol and said certificates, the transaction management means being configured to perform the payment process with the merchant server,

wherein said data processing device further comprises an agent interface for transmission of codes, parameters and certificates between said customer agent and said transactions management means, the multimedia network further comprising a remote merchant agent, managed by agent parameters received from said merchant station and thus, under the control of said parameters, capable of representing the merchant station in a negotiation process, including presenting products to the customer agent or the data processing device, and to have paid for products being selected by the customer agent or the data processing device, in a secure way, under control of said secure electronic transactions protocol and said certificates, said customer agent being configured to request said merchant agent to pay by credit card, the merchant agent informing said merchant server of the requested payment, whereby said transactions management means being configured to be initialized by the customer agent;

wherein the transactions management means is configured to perform a standard secure electronic transaction procedure with the merchant server and the payment server; and

wherein after completion of the payment process and after receiving information of completion of the payment process from the merchant server, the merchant agent being configured to pass this message on to the customer agent, the data processing device is configured to receive a notification of the payment completion from the customer agent.

8. A data processing device for execution of secure transactions in a multimedia network, the multimedia network comprising a customer station, merchant servers, and a payment server connected to it, secure electronic transactions being performed using a secure electronic transactions protocol, comprising the exchange of digital certificates, uniquely identifying the relevant transaction participants and also attesting their privileges at the merchant server, said certificates being managed by a Trusted Third Party Server being connected to said multimedia network, said payment server being configured to validate the digital certificates presented and to process authorization concerning the payment, said customer station comprising transaction management means for performing said secure electronic transactions protocol and for managing said certificates for the customer station, said data processing device comprising:

a remote customer agent, managed by agent parameters received from said customer station and thus, under the control of said parameters, representing the customer station in a negotiation process, including selecting products to be presented by the merchant server, payment for selected products being performed in a secure way, under control of said secure electronic transactions protocol and said certificates, the payment process being performed between said transactions management means and the merchant server, said customer station comprising an agent interface for transmission of codes, parameters and certificates between said customer agent and said transactions management means, the multimedia network further comprising a remote merchant agent, managed by agent parameters received from said merchant station and thus, under the control of said parameters, capable of representing the merchant station in a negotiation process, including presenting products to the customer agent or the customer station, and to have paid for products being selected by the customer agent or the customer station, in a secure way, under control of said secure electronic transactions protocol and said certificates,

wherein said customer agent is configured to request said merchant agent to pay by credit card, the merchant agent informing said merchant server of the requested payment, while parallel to that the customer agent is configured to initialize said transactions management means; and

wherein after completion of a standard secure electronic transaction procedure being performed by the transactions management means, the merchant server and the payment server and after receiving information of completion of the payment process from the merchant server, the merchant agent being configured to sass this message on to the customer agent, the customer agent is configured to notify the customer station of the payment completion.