Method and apparatus for preserving customer identity in on-line transactions

• US 7,603,319 B2
• Filed: 04/30/2003
• Issued: 10/13/2009
• Est. Priority Date: 08/28/2000
• Status: Expired due to Term

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Wu, Hsi-Cheng, Raley, Michael, Ta, Thanh, Chen, Daniel
• Primary Examiner(s): CHEUNG, MARY DA ZHI WANG
• Application Number:
  US10/425,827
• Publication Number:
  US 20030200468A1
• Time in Patent Office: 2,358 Days
• Field of Search: 705 26- 27, 705/44, 705 64- 67, 705 74- 79, 713155-156, 713164-170, 713182-185, 713200-202, 379/201, 379/210, 707 9- 10
• US Class Current: 705/64
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/1083 Partial license transfers
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04N 21/632 using a connection between clients on a wide area network, e.g. setting up a peer-to-peer communication via Internet for retrieving video segments from the hard-disk of other client devices broadcast-related systems characterised by transmission among terminal devices H04H60/80; distributed application using peer-to-peer [P2P] networks H04L67/104

Abstract

A method and apparatus for managing and accomplishing on-line transactions while preserving the privacy of user information. User information is stored at a trusted Web site. A user logs on to a transacting Web site with a user device and requests a transaction from the transacting Web site. The user is verified through the trusted Web site using an anonymous identifier corresponding to the user information and the transaction is accomplished between the user device and the transacting Web site using the anonymous identifier without transferring the user information to the transacting Web site.

Claims

1. A method for managing and accomplishing transactions while preserving the privacy of user information:

storing user information at a trusted server;

issuing via the trusted server to a user device a security module with an anonymous identification,

wherein the security module functions to enforce usage rights;

logging on to a transacting server with the user device;

requesting a transaction from the transacting server,

wherein the transaction is a content use transaction based on said usage rights specifying a permitted manner of use of the content;

verifying the user through the trusted server using the anonymous identifier corresponding to the security module;

accomplishing the transaction between the user device and the transacting server using the anonymous identifier without transferring the user information to the transacting server; and

using the security module to create a protected instance of a rendering engine for securely rendering the content on the user device based on the usage rights.

2. The method of claim 1, wherein the user information is at least one of personal and credit information relating to the user.

3. The method of claim 1, wherein the trusted server is a transaction aggregator.

4. The method of claim 3, further comprising accumulating plural transactions at the transaction aggregator and aggregating the plural transactions into a single charge.

5. The method of claim 1, wherein said requesting step comprises sending the anonymous identifier and an identification of desired content.

6. The method of claim 1, wherein the anonymous identifier is established between the trusted server and the user device.

7. The method of claim 1, wherein the trusted server comprises a repository that maintains specific information related to one or more authorized users.

8. A system for managing and accomplishing transactions while preserving the privacy of user information:

means for storing user information at a trusted server;

means for issuing via the trusted server to a user device a security module with an anonymous identification,

wherein the security module functions to enforce usage rights;

means for logging on to a transacting server with the user device;

means for requesting a transaction from the transacting server,

wherein the transaction is a content use transaction based on said usage rights specifying a permitted manner of use of the content;

means for verifying the user through the trusted server using the anonymous identifier corresponding to the security module;

means for accomplishing the transaction between the user device and the transacting server using the anonymous identifier without transferring the user information to the transacting server; and

means for using the security module to create a protected instance of a rendering engine for securely rendering the content on the user device based on the usage rights.

9. The system of claim 8, wherein the user information is at least one of personal and credit information relating to the user.

10. The system of claim 8, wherein the trusted server is a transaction aggregator.

11. The system of claim 10, further comprising means for accumulating plural transactions at the transaction aggregator and aggregating the plural transactions into a single charge.

12. The system of claim 8, wherein said means for requesting comprises means for sending the anonymous identifier and an identification of desired content.

13. The system of claim 8, wherein the anonymous identifier is established between the trusted server and the user device.

14. The system of claim 8, wherein the trusted server comprises a repository that maintains specific information related to one or more authorized users.

15. The system of claim 8, wherein said means for storing, said means for logging in, said means for requesting, said means for verifying, and said means for accomplishing comprise devices of a computer system.

16. The system of claim 8, wherein said means for storing, said means for logging in, said means for requesting, said means for verifying, and said means for accomplishing comprise computer readable instructions recorded on a medium.