Electronic deposit box system

• US 7,441,277 B2
• Filed: 06/12/2001
• Issued: 10/21/2008
• Est. Priority Date: 06/12/2000
• Status: Expired due to Term

• Current Assignee: BiP Solutions Ltd. (B.I.P. (Holdings) Ltd.)
• Original Assignee: BiP Solutions Ltd. (B.I.P. (Holdings) Ltd.)
• Inventors: Burges, Ronald Llewellyn, Smith, Scott Allan, Groundwater, David Sean
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US09/879,734
• Publication Number:
  US 20020046188A1
• Time in Patent Office: 2,688 Days
• Field of Search: 713/156, 713/201, 705/26, 726 26- 30
• US Class Current: 726/29
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

There is disclosed a secure electronic deposit box system 25 and a related method of controlling access to electronic information, particularly suitable for use in electronic tendering or the like. The method comprises the steps of providing:

• • at least one user apparatus 5;
  • a remote server 10;
  • a communications link 15 between the at least one user apparatus 5 and the remote server 10;
  • allocating disk storage space 20 on the remote server 10 unique to the at least one user apparatus 5;
  • allowing the at least one user access to the storage space 20 via secure encryption of data sent to/from the user apparatus 5 and the server 10 and username/password login to the server. By this arrangement, the at least one user apparatus 15 can send data in the form of documentation to the disk storage space 20, and can also access the documentation on the disk storage space 20.

Claims

1. A method of controlling access to electronic information comprising the steps of:

providing at least one user apparatus;

a remote server; and

a communications link between the at least one user apparatus and the remote server;

allocating disk storage space on the remote server unique to the at least one user apparatus;

allowing at least one user access to the storage space via usemame and password login to the server and via secure encryption of data sent to or from the user apparatus from or to the server; and

allowing at least one further user access to the data storage space and wherein the further users access to the data storage space can be managed by the at least one user with regard to times and dates when the at least one further user can write to and/or read from the data storage space, wherein access to the data storage space by the at least one user is inhibited when the access to the data storage space by the further users is allowed.

2. A method of controlling access to electronic information as claimed in claim 1, wherein the secure encryption comprises:

transactions involving access to the storage space being protected by a requirement for a user to present a digital certificate.

3. A method of controlling access to electronic information as claimed in claim 2, wherein the digital certificate is required whenever the user attempts to write to or read from the storage space.

4. A method of controlling access to electronic information as claimed in claim 3, wherein data sent by a user apparatus is encrypted by public key in the case of SSL transactions and additionally by private key via presentation of a digital certificate in the case of accessing the data storage space.

5. A method of controlling access to electronic information as claimed in claim 4, wherein data received by the server is decrypted via private key in the case of SSL transactions and by public key in the case of digital certificate verification accessing the data storage space.

6. A method of controlling access to electronic information as claimed in claim 2, wherein the secure encryption further comprises transactions between user and server being encrypted using Secure Socket Layer (SSL).

7. A method of controlling access to electronic information as claimed in claim 1, wherein each said at least one further user is allowed access to the data storage space upon presentation of a further digital certificate.

8. A method of controlling access to electronic information as claimed claim 1, wherein the communications link comprises the Internet.

9. A method of controlling access to electronic information as claimed in claim 1, wherein managing of the at least one further users access to the data storage space by the at least one user involves the at least one user setting at least one date and at least one time period for access by the at least one further users.

10. A method of providing an account-based Internet/Intranet service which allows an at least one account holder to:

create at least one secure electronic deposit box on a centralised server in which box or boxes store documentation in a secure environment;

manage timeframes for invited participants to access said documentation and/or for the invited participants to upload to the centralised server further documentation, wherein

the method utilizes a method of controlling access to electronic information as claimed in claim 1.

11. A method as claimed in claim 10, wherein the method further allows the at least one account holder to track activity relating to each said at least one electronic deposit box.

12. A programmed computer or server adapted to implement the method of claim 11.

13. A programmed computer or server adapted to implement the method of claim 10.

14. A programmed computer or server adapted to implement the method of claim 1.

15. An electronic safety deposit system or tender box system comprising:

at least one user apparatus;

a remote server;

a communications link between the at least one user apparatus and the remote server;

disk storage space allocated on the remote server unique to the at least one user apparatus;

means for allowing at least one user access to the storage space via username and password login and via secure encryption of data sent to or from the user apparatus from or to the server;

means for allowing at least one further user access to the data storage space; and

means for managing the further users access to the data storage space by the at least one user with regard to times and dates when the at least one further user can write to and/or read from the data storage space, and further

means for inhibiting access to the data storage space by the at least one user when the access to the data storage space by the further users is allowed.

16. An electronic safety deposit system or tender box system as claimed in claim 15, wherein the secure encryption comprises transactions involving access to the storage space being further protected by a requirement for a user to present a digital certificate, in use.

17. A secure electronic deposit or tender box system comprising an account-based Internet or Intranet server system with a worldwide web (HTTP) interface for uploading and downloading documentation onto a centralised server in a secure environment, using digital certificates to ensure data confidentiality, data integrity, data authentication, non-repudiation and proof of origin and receipt, the system using an electronic safety deposit system as claimed in claim 15.