Home server including a proxy facility, for executing an authentication and an encryption process instead of a user terminal, in an electronic commercial transaction

• US 7,275,158 B2
• Filed: 04/10/2001
• Issued: 09/25/2007
• Est. Priority Date: 11/21/2000
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Akama, Katsuaki
• Primary Examiner(s): Moise; Emmanuel L.
• Assistant Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US09/829,674
• Publication Number:
  US 20020062440A1
• Time in Patent Office: 2,359 Days
• Field of Search: 713/201, 713/200, 713/176, 713/175, 713/155, 713/185, 713/171, 705/67, 705/70, 705/64, 726/9, 380/278
• US Class Current: 713/171
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A home server includes a proxy facility and is provided between a user terminal and an electronic market server for executing authentication and encryption to the electronic market server, instead of the user terminal, in an electronic commercial transaction. The proxy facility includes: an establishing unit for establishing an encrypted communication session between the user terminal and the home server, using public/secret keys of the user terminal and an electronic signature both transmitted from the user terminal; a proxy unit for executing authentication of a certificate and exchanging a common key between the home server and the electronic market server, using public/secret keys of the electronic market server; and an information unit for informing the common key to the user terminal through the encrypted communication session; wherein an encrypted communication is executed between the user terminal and the electronic market server by using the common key that was exchanged between the home server and the electronic market server.

Claims

1. A proxy server, provided between a user terminal and an electronic market server, including a proxy facility for executing authentication and encryption to the electronic market server, instead of the user terminal, in an electronic commercial transaction, comprising:

an establishing means for establishing an encrypted communication session between the user terminal and the proxy server, using public and secret keys of the user terminal and an electronic signature both transmitted from the user terminal;

a proxy means for executing authentication of a certificate and exchanging a common key X between the proxy server and the electronic market server, using public and secret keys of the electronic market server;

an informing means for informing the common key X to the user terminal through the encrypted communication session, which common key X is encrypted by using a common key X′

that is exchanged between the user terminal and the proxy server; and

a home card including an encryption managing means for executing the electronic signature and authentication of the certificate in order to execute authentication and exchange of the common key to the electronic market server, said home card cooperating with an access card connected to said user terminal to establish said encrypted communication session and to exchange said common key X′

,

wherein the home card further includes a logic circuit which enables an access by using a first password input from the user terminal; and

a security releasing means for releasing the security for the proxy means by using a second password input from the user terminal, after establishment of the encrypted communication session to the user terminal in which an access was permitted,

whereby an encrypted communication is executed directly between the user terminal and the electronic market server by using the common key X that is exchanged between the proxy server and the electronic market server.

2. A proxy server including a proxy facility as claimed in claim 1, wherein the home card comprises an informing means for recording decision information regarding an electronic money in the home card and for informing the recorded decision information to a mail address of the user terminal.

3. A proxy server including a proxy facility as claimed in claim 2, wherein the home card comprises a cancel means for canceling the decision information in the home card based on an authentication information for canceling the decision, and for adding electronic money subtracted by the decision to the electronic money in the home card.

4. A proxy server including a proxy facility as claimed in claim 1, wherein the home card comprises a re-supplement means for supplementing the electronic money by adding supplementary electronic money, which was requested by the user terminal, to the electronic money in the home card, based on the authentication information in an electronic money managing facility provided in the proxy facility.

5. An access card used in an electronic commercial transaction constituted by a user terminal, a proxy server and an electronic market server;

the access card being connected to the user terminal; and

the proxy server including a proxy facility being provided between the user terminal and the electronic market server for executing authentication and encryption to the electronic market server, instead of the user terminal;

the access card comprising;

an establishment means for establishing an encrypted communication session between the user terminal and the proxy server including the proxy facility; and

an encrypted communication means far receiving a common key X, which is exchanged between the proxy server and the electronic market server after an authentication process for the electronic market server and is encrypted by using a common key X′

that is exchanged between the user terminal and the proxy server, from the proxy server trough the encrypted communication session, and for executing the encrypted communication with the electronic market server directly by using the common key X, wherein

said proxy server comprises a home card including an encryption managing means for executing the electronic signature and authentication of the certificate in order to execute authentication and exchange of the common key to the electronic market server, said home card cooperating with the access card connected to said user terminal to establish said encrypted communication session and to exchange said common key X′

, wherein the home card further includes a logic circuit which enables an access by using a first password input from the user terminal; and

a security releasing means for releasing the security for the proxy means by using a second password input from the user terminal, after establishment of the encrypted communication session to the user terminal in which an access was permitted.

6. A server being able to communicate with a user terminal and the opposing server having an authentication facility to authenticate the user terminal in accordance with predetermined procedures in an electronic commercial transaction to perform encrypted communication with the user terminal directly, comprising:

a reception unit to receive an identification information and a request for executing an authentication process, from an access card connected to the user terminal;

a decision means for determining whether or not the identification information is stored in an internal or external memory;

a proxy means for executing a part, or all, communication in accordance with the predetermined procedures when the identification information is stored in the memory;

an informing means for informing a common key X to the user terminal through the encrypted communication session, which common key X is encrypted by using a common key X′

that is exchanged between the user terminal and the server; and

a home card including an encryption managing means for executing the electronic signature and authentication of the certificate in order to execute authentication and exchange of the common key to the electronic market server, said home card cooperating with said access card to establish an encrypted communication session, to receive said request, and to exchange said common key X′

, wherein the home card further includes a logic circuit which enables an access by using a first password input from the user terminal; and

a security releasing means for releasing the security for the proxy means by using a second password input from the user terminal, after establishment of the encrypted communication session to the user terminal in which an access was permitted.

7. A storage media storing a predetermined program used in a first server being able to communicate with a user terminal and a second server having an authentication facility to authenticate the user terminal in accordance with predetermined procedures in an electronic commercial transaction to perform encrypted communication with the user terminal directly, comprising:

a first step of receiving an identification information and a request for executing an authentication process, from an access card connected to the user terminal;

a second step of determining whether or not the identification information is stored in an internal or external memory;

a third step of executing a part, or all, communication in accordance with the predetermined procedures when the identification information is stored in the memory; and

a fourth step of informing a common key X to the user terminal through an encrypted communication session, which common key X is encrypted by using a common key X′

that is exchanged between the user terminal and the first server, wherein

said first server comprises a home card including an encryption managing means for executing the electronic signature and authentication of the certificate in order to execute authentication and exchange of the common key to the electronic market server, said home card cooperating with said access card to establish said encrypted communication session, to receive said request, and to exchange said common key X′

, wherein the home card further includes a logic circuit which enables an access by using a first password input from the user terminal; and

a security releasing means for releasing the security for the proxy means by using a second password input from the user terminal, after establishment of the encrypted communication session to the user terminal in which an access was permitted.

8. A user terminal being able to communicate with a first server and a second server;

wherein the first server includes a proxy facility for executing authentication with the second server instead of the user terminal, when receiving an identification information and a request for executing an authentication process from an access card connected to the user terminal; and

the second server has an authentication facility to authenticate the user terminal in accordance with predetermined procedures and to provide a secret key X for an authorized destination as a result of authentication to perform encrypted communication with the user terminal directly;

wherein the user terminal comprises a transmitting unit to transmit the identification information used for identifying its own terminal and the request for executing the authentication process, to the first server, and a receiving unit to receive the secret key X from the first server, which secret key X is encrypted by using a common key X′

that is exchanged between the user terminal and the first server; and

wherein said first server comprises a home card including an encryption managing means for executing the electronic signature and authentication of the certificate in order to execute authentication and exchange of the common key to the electronic market server, said home card cooperating with said access card to establish an encrypted communication session, receive said request, and exchange said common key X′

, wherein the home card further includes a logic circuit which enables an access by using a first password input from the user terminal; and

a security releasing means for releasing the security for the proxy means by using a second password input from the user terminal, after establishment of the encrypted communication session to the user terminal in which an access was permitted.