System and method for creating, vaulting, transferring and controlling transferable electronic records with unique ownership

• US 7,340,608 B2
• Filed: 06/17/2003
• Issued: 03/04/2008
• Est. Priority Date: 06/17/2002
• Status: Active Grant

• Current Assignee: Silanis Technology Inc. (OneSpan, Inc.)
• Original Assignee: Silanis Technology Inc. (OneSpan, Inc.)
• Inventors: Laurie, Michael, Al-Jaar, Robert, Savchenko, Oleksiy
• Primary Examiner(s): Barron; Gilberto
• Assistant Examiner(s): LEMMA, SAMSON B
• Application Number:
  US10/463,646
• Publication Number:
  US 20040111619A1
• Time in Patent Office: 1,722 Days
• Field of Search: 713/176, 713/175, 713/193, 713/181, 705/76, 705/75
• US Class Current: 713/176
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

A system for securely vaulting, auditing, controlling and transferring electronic transferable records (TRs) with unique ownership, including at least one registry for registering the electronic transferable record with unique ownership in a TR registry record; at least one secure storage manager (SSM) associated with the registry, the SSM storing the transferable record registered in the registry as an authoritative copy, the secure storage manager being distinct from said registry. The transferable record can be transferred in a transaction between an originating party and a receiving party with a transaction descriptor including information about the parties involved in the transaction and an identification of the TR being transferred. The transaction descriptor is initially signed by the originating party with the TR, subsequently verified and countersigned by the registry and signed by said accepting party. The transaction descriptor, upon completion of the transaction, is stored in the TR registry record and serves to identify the authoritative copy of the TR.

Claims

1. A system for securely vaulting, auditing, controlling and transferring electronic transferable records (TRs) with unique ownership, said electronic transferable record having been created with a secure document creation system, wherein said system comprises:

at least one registry for registering said electronic transferable record with unique ownership in a TR registry record;

at least one secure storage manager associated with said registry, said Secure-Storage Manager (SSM) storing said transferable record registered in said registry as an authoritative copy, said secure storage manager being distinct from said registry;

means for registering participants with said system, said participants including said registry, said SSM and a plurality of secured parties, each of said secured parties being represented by at least one representative, each of said participants being provided with an access key pair;

wherein said transferable record can be transferred in a transaction between an originating party and a receiving party with a transaction descriptor, said transaction descriptor including information about the parties involved in said transaction and an identification of said TR being transferred, said transaction descriptor being initially signed by said originating party with said TR, subsequently verified and countersigned by said registry and signed by said accepting party, said transaction descriptor, upon completion of said transaction, being stored in said TR registry record, an owner of a TR, being the only party authorized by said registry to transfer a document;

wherein said system is adapted to display a rendered view of said TR, said TR being identified as said authoritative copy of said TR only when rendered to said owner accessing said TR in said SSM through said system, and said TR being otherwise identified as not being said authoritative copy;

wherein said authoritative copy of a TR includes;

a hash of the transferable record and the unique ID that is assigned to that TR upon its initial registration with said system;

an indication of a Secure Storage Manager where the TR is stored;

a source of the provenance of said TR including said Secure Storage Manager and a custodian ID; and

a TR Chain of Ownership, represented by an up-to-date TR registry record.

2. A system according to claim 1, wherein said system further includes means for uniquely and securely identifying said participants, said means including a Transfer Control Key pair and a Transfer Control Certificate.

3. A system according to claim 2, wherein said Transfer Control Key is a private key and said Transfer Control Certificate includes a public key, and wherein information relating to said party is associated and made part of said Transfer Control Certificate, and said private key and said public key form a cryptographic key pair.

4. A system according to claim 1, wherein said TR registry record includes a TR transaction evidence for each transaction.

5. A system according to claim 1, wherein said system further includes an interface for permitting secured parties to transfer, view, verify, control, transferable records that they own.

6. A system according to claim 1, wherein critical information exchanged between said registry, said secure storage manager and said secured parties is encrypted.

7. A system according to claim 6, wherein said information exchanged between said registry, said secure storage manager and said secured parties is exchanged electronically using SSL.

8. A system according to claim 1, wherein said transaction includes transfer in;

transfer ownership;

transfer registry;

transfer custody;

transfer ownership and registry;

transfer ownership and custody;

transfer registry and custody;

transfer ownership, registry and custody;

transfer end;

transfer out; and

transfer to paper.

9. A system according to claim 3, wherein said private part of the Transfer Control Key is encrypted with a representative access key and stored in said registry.

10. A system according to claim 4, wherein said TR transaction evidence includes type and status of transactions such as a TR origination evidence;

a TR transfer evidence and a TR transfer pending evidence.

11. A system according to claim 1, wherein said TR chain of ownership is constructed with all TR transaction evidence records and stored in said registry.

12. A system according to claim 1, wherein said secured parties communicate with said system through a portal.

13. A system according to claim 1, wherein an owner of a TR is the only person authorized by said registry to transfer a document, said owner being identified by the TR control key of said owner, compared with data in said transaction record.

14. A system according to claim 1, wherein said system is further adapted to verify an ownership of said authoritative copy for a selected TR.

15. A system according to claim 1, wherein said system includes a plurality of said at least one registry and a plurality of said at least one secure storage manager.

16. A system according to claim 1, wherein said transaction descriptor uses a nested hierarchical structure.

17. A system according to claim 1, wherein said registry includes an administration module.