Secure system for the issuance, acquisition, and redemption of certificates in a transaction network

• US 7,899,755 B2
• Filed: 03/14/2007
• Issued: 03/01/2011
• Est. Priority Date: 12/24/1998
• Status: Expired due to Fees

• Current Assignee: Buffalo Patents, LLC
• Original Assignee: SF IP Properties 59 LLC (Intellectual Ventures LLC)
• Inventors: Whitfield, Henry
• Primary Examiner(s): Reagan; James A
• Application Number:
  US11/686,239
• Publication Number:
  US 20070157021A1
• Time in Patent Office: 1,448 Days
• Field of Search: 705/64, 705/65, 705/75, 705/76, 705/27, 705/40, 705/52, 705/53, 705/54, 235/379, 340/825, 902/2
• US Class Current: 705/76
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0239 Online discounts or incentives

Abstract

A transaction network contains a networked certificate authority, by which one or more virtual certificates may be remotely defined and stored, such as by an issuer user through a issuer web portal interface. An acquirer user, through an acquirer web portal interface, may acquire one or more virtual certificates, which contain a secret public key portion, as well as a corresponding private key, which is established by the acquirer at the time of acquisition, and is stored at the certificate authority. At a redemption location associated with an acquired certificate, the acquirer (or an alternate recipient of an acquired certificate to whom the acquirer has communicated the established private key), submits the certificate information, along with the established private key, to redeem the certificate.

Claims

1. A computer certificate system, comprising:

a certificate authority connected to a network, said certificate authority comprising a first set of program instructions stored in a tangible computer readable medium, that when executed by a computing device, causes said certificate authority to;

display an issuer interface for receiving input, wherein said input defines a virtual certificate comprising a redemption denomination; and

associate a first public key identifier with said virtual certificate;

a certificate issuance module comprising a second set of program instructions stored in a tangible computer readable medium, that when executed by a computing device, causes said certificate issuance module to;

receive a private key identifier established by an acquirer; and

create an issued certificate said issued certificate comprising unique identifier information, wherein said unique identifier information comprises said redemption denomination, said private key identifier, and said first public key identifier, wherein said unique identifier information is stored at said certificate authority in association with said issued certificate; and

a certificate authentication module comprising a third set of program instructions stored in a tangible computer readable medium, that when executed by a computing device, causes said certificate authentication module to;

authorize a redemption of said issued certificate at a redemption location, based upon receiving said redemption denomination, said first public key identifier, and said private key identifier, and a matching comparison to said unique identifier information stored at said certificate authority; and

cancel further redemption of said issued certificate at said certificate authority.

2. The computer certificate system of claim 1, said issued certificate further comprising:

a single-use certificate comprising at least one design element, a denomination, at least one redemption rule, and identification information comprising human readable information, machine readable information, or both.

3. The computer certificate system of claim 1, wherein said second set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes said certificate issuance module to:

receive issuer input for at least one customized virtual certificate; and

direct said certificate authority to create said at least one customized virtual certificate for subsequent issuance at one or more acquirer terminals.

4. The computer certificate system of claim 3, wherein said first set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes the certificate authority to-display an issuer interface for control of modular design of one or more virtual certificates independently by:

selection of standard designs offered by said certificate authority;

an upload of one or more custom designs to said certificate authority in the form of at least one computer file;

or

a specification that a certificate be issued using a combination of stock elements uploaded through said issuer terminal.

5. The computer certificate system of claim 1, further comprising:

an issuer facility for authorization of construction of certificates through a web portal via a network;

said issuer facility comprising a certificate specification interface configured to receive input comprising-detailed specifications for virtual single-use certificates.

6. The computer certificate system of claim 1, wherein said certificates reflect sellable or distributable commodities comprising products, services, or both that are available for pick up at one or more redemption locations.

7. The computer certificate system of claim 1, wherein said second set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes said certificate issuance module to:

display an acquirer interface configured to receive input that identifies redemption locations for one or more products or services that are available as selectable virtual certificates; and

receive via the acquirer interface an indication to initiate a search via the acquirer interface and responsively display a browseable subset of an entire virtual inventory or of an aggregate inventory that matches search limiters received via said acquirer interface.

8. The computer certificate system of claim 1, wherein said second set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes the certificate issuance module to:

transmit a message indicating an acquisition transaction;

wherein a product or service that is to be received upon redemption is reserved;

wherein, if a product is reserved, a product within an inventory at a redemption location is placed on hold; and

wherein, for a designated service, acquisition information is usable to schedule personnel or equipment, or to limit further sale of the product or service.

9. The computer certificate system of claim 1, wherein said first set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes said certificate authority to:

receive issuer information;

receive denomination parameters for said virtual certificate in the form of any of a currency denomination or a code associated with a product, a service, a coupon, a voucher, or other instrument for which an acquired certificate is redeemable; and

authorize said certificate authority to issue certificates within a set range of selectable denominations or authorize creation of virtual certificates with a value received from said acquirer.

10. The computer certificate system of claim 1, wherein said first set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes the certificate authority to:

receive redemption rules comprising any of an expiration date, any exclusion of redemption on a basis of geographic location, or other redemption rules.

11. The computer certificate system of claim 1, wherein said first set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes the certificate authority to:

receive issuance restrictions for-limiting a number of acquired certificates to be issued by said certificate authority on behalf of at least one issuer.

12. The computer certificate system of claim 1, wherein said first set of program instructions stored in a tangible computer readable medium, when executed by a computing device, further causes the certificate authority to:

receive input defining a format for a unique certificate supplementary public key identification; and

select or specify a unique certificate public key identification that corresponds to existing product codes, inventory, or existing issuer certificate systems.

13. A process, comprising:

defining a virtual certificate, said defined virtual certificate comprising a redemption denomination;

associating a first public key identifier with said defined virtual certificate;

receiving a private key identifier established by an acquirer;

creating an issued certificate in response to acquisition of said defined virtual certificate by an acquirer, said issued certificate comprising unique identifier information, wherein said unique identifier information comprises said redemption denomination, said private key identifier, and said first public key identifier, wherein said unique identifier information is stored at certificate authority in association with said issued certificate;

authorizing a redemption of said issued certificate at a redemption location to a holder of said issued certificate, based upon receiving said redemption denomination, said private key identifier, and said first public key identifier from said holder, and a matching comparison to said unique identifier information stored at said certificate authority; and

disabling further redemption of said issued certificate at said certificate authority.

14. The process of claim 13, said issued certificate further comprising:

a single-use certificate comprising at least one design element, a denomination, at least one redemption rule, and identification information comprising human readable information, machine readable information, or both.

15. The process of claim 13, further comprising receiving issuer input for at least one customized virtual certificate;

and

directing said certificate authority to create said at least one customized virtual certificate for subsequent issuance at one or more acquirer terminals.

16. The process of claim 13, further comprising:

providing an issuer facility for authorization of construction of certificates through a web portal via a network, wherein said issuer facility connects to said certificate authority; and

said issuer facility further comprising a certificate specification interface for receiving input that defines detailed specifications for virtual single-use certificates.

17. The method of claim 13, further comprising:

controlling modular design of one or more virtual certificates independently, either by selecting standard designs offered by said certificate authority, by uploading one or more custom designs to said certificate authority in the form of one or more computer files, or by specifying that a certificate be issued using a combination of stock elements uploaded through said issuer terminal.

18. The process of claim 13, further comprising:

receiving input from one or more redemption locations for one or more products or services which are available as selectable virtual certificates; and

receiving an indication to initiate a search, as well as one or more search limiters for the search, and responsively initiating display of a browseable subset of a virtual inventory or of an aggregate inventory which matches said one or more search limiters.

19. The process of claim 13, further comprising:

said certificate authority communicating an acquisition transaction;

wherein a product or service that is to be received upon redemption is reserved;

wherein, if a product is reserved, a product within an inventory at a redemption location is placed on hold; and

wherein acquisition information is usable to schedule personnel or equipment, or to limit further sale of the product or service.

20. The process of claim 13, further comprising:

receiving issuer information;

receiving denomination parameters for a virtual certificate in the form of any of a currency denomination or a code associated with a product, a service, a coupon, a voucher, or other instrument for which an acquired certificate is redeemable; and

—

receiving authorization to issue certificates within a set range of selectable denominations, or to create virtual certificates with a value received from said acquirer.

21. The process of claim 13, further comprising:

receiving redemption rules comprising at least one of an expiration date, any exclusion of redemption on a basis of geographic location, or other redemption rules unique to said issuer.

22. The process of claim 13, further comprising:

receiving issuance restrictions at said certificate authority for any of limiting a number of acquired certificates to be issued by said certificate authority on behalf of an issuer, for any of a specified time frame, within a geographic region, or on a basis of other criteria unique to said issuer.

23. The process of claim 13, further comprising:

receiving input that defines a format for a unique certificate supplementary public key identification;

wherein said unique certificate supplementary public key identification corresponds to existing product codes, inventory, or existing issuer certificate systems.

24. An article of manufacture including a computer-readable medium having instructions stored thereon that, if executed by a computing device, cause the computing device to perform operations comprising:

receiving data for creating a virtual certificate, said virtual certificate comprising a redemption denomination, wherein said data for creating said virtual certificate is received via an issuer interface;

associating a public key identifier with said virtual certificate;

receiving a private key identifier established by an acquirer;

receiving a certificate request and responsively creating an issued certificate of said virtual certificate, said issued certificate including said redemption denomination, said private key identifier, and said public key identifier;

storing said redemption denomination, said private key identifier, and said public key identifier in association with said issued certificate;

receiving a redemption request for said issued certificate from a holder of said issued certificate and responsively authorizing a redemption of said issued certificate to said holder, wherein said redemption is authorized based upon receipt of said redemption denomination, said private key, and said public key identifier, and a matching comparison of said redemption denomination, said private key identifier, and said public key identifier stored at said computer certificate system; and

canceling further redemption of said issued certificate.