Method and apparatus for encrypting data

• US 7,219,226 B2
• Filed: 10/11/2002
• Issued: 05/15/2007
• Est. Priority Date: 10/15/2001
• Status: Active Grant

• Current Assignee: Marqeta, Inc.
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Harrison, Keith Alexander
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Sandoval; Kristin D.
• Application Number:
  US10/270,039
• Publication Number:
  US 20030095661A1
• Time in Patent Office: 1,677 Days
• Field of Search: None
• US Class Current: 713/153
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3033 details relating to pseudo-prime or prime number generation, e.g. primality test

Abstract

A method for encrypting data comprising deriving a public key using a first data set that defines an instruction; encrypting a second data set with the public key; providing the encrypted third data set to a recipient; providing the public key to a third party such that on satisfaction of the instruction the third party provides an associated private key to the recipient to allow decryption of the encrypted second data set.

Claims

1. A method for encrypting data comprising:

encrypting a second data set with a public key comprising a first data set that defines a term of an agreement;

providing the encrypted second data set to a recipient;

providing the public key to a third party such that on satisfaction of the term of the agreement the third party provides an associated private key to the recipient to allow decryption of the encrypted second data set.

2. A method according to claim 1, wherein said term of the agreement that needs to be satisfied to allow release of the private key to the recipient is the making of a payment.

3. A method according to claim 1, wherein the second data set includes a nonce.

4. A computer system for encrypting data comprising a first computer entity for encrypting a second data set with a public key comprising a first data set that defines a term of an agreement;

communication means for providing the encrypted data to a second computer entity and the public key to a third computer entity;

wherein the third computer entity is arranged, on satisfaction of the term of the agreement, to provide an associated private key to the second computer entity to allow decryption of the encrypted second data set.

5. A computer apparatus for encrypting data comprising:

a processor arranged to encrypt a second data set using a public key;

arid

a communication arrangement for outputting the encrypted second data set for provision to a recipient;

wherein the public key comprises a first data set that defines a term of an agreement that is to be checked by a third party as being satisfied by said recipient before the third party provides the recipient with a private key for decrypting the encrypted second data set.