System and method using information based indicia for securing and authenticating transactions

• US 8,255,694 B2
• Filed: 09/15/2006
• Issued: 08/28/2012
• Est. Priority Date: 08/04/2000
• Status: Expired due to Fees

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Sint Holdings LLC (Intellectual Ventures LLC)
• Inventors: Lincoln, Patrick D., Shankar, Natarajan
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US11/532,193
• Publication Number:
  US 20070011455A1
• Time in Patent Office: 2,174 Days
• Field of Search: 380/55, 713/176, 713/178, 713/179, 705/60, 705/62, 705/405, 726/33
• US Class Current: 713/179
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/0083 Postal data, e.g. postage, address, sender, machine ID, vendor
• CPC Class Codes: G07B 2017/00927 Certificates, e.g. X.509
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method, system, and apparatus for authenticating transactions and records is disclosed. An information-based indicium includes an article bearing a first identifier, wherein the first identifier substantially prevents a single user from accumulating multiple articles bearing the same first identifier, and a first digital certificate that is derived in part by encoding the first identifier, wherein the first digital certificate and the article may be presented together to authenticate the indicium by comparing the first digital certificate and the first identifier.

Claims

1. A method for authenticating an information-based indicium, comprising:

receiving, using a computing device, a first identifier and a second identifier independent from the first identifier, wherein the first identifier is configured to prevent a user from accumulating multiple articles, each of the multiple articles bearing the first identifier;

receiving, using the computing device, a digital certificate, the digital certificate derived at least in part from an encryption of the first identifier and the second identifier and configured to be decrypted with a public key, the digital certificate being authenticated without tracking using a database;

decrypting, using the computing device, the digital certificate; and

comparing the decrypted digital certificate and the first identifier to authenticate the information-based indicium.

2. The method of claim 1, further comprising:

receiving, using the computing device, a plurality of digital certificates, wherein each of the plurality of digital certificates is unique, derived at least in part from an encryption of the first identifier, configured;

decrypting, using the computing device, the plurality of digital certificates; and

comparing, using the computing device, each of the plurality of decrypted digital certificates and the first identifier to authenticate an information-based indicium.

3. The method of claim 1, further comprising:

receiving, using the computing device, a second digital certificate;

decrypting, using the computing device, the second digital certificate derived at least in part from an encryption of the second identifier; and

comparing the decrypted second digital certificate and the second identifier to authenticate the information-based indicium.

4. A system for encrypting an information-based indicium and for recertification of digital certificates, comprising:

an input configured to receive an identifier of an article, wherein the identifier is configured to prevent a user from accumulating multiple articles, each of the multiple articles bearing the identifier;

a computing device configured to generate a first digital certificate derived at least in part from an encryption of the identifier and a second digital certificate derived at least in part from an encryption of the identifier; and

an output configured to present collectively the identifier and one of the first digital certificate and the second digital certificate for an authentication of the information-based indicium, wherein the one of the first digital certificate and the second digital certificate other than the one of the first digital certificate and the second digital certificate used for the authentication is configured to become unusable after the authentication.

5. A method for encrypting an information-based indicium and for recertification of digital certificates, comprising:

receiving, using a computing device, an article bearing an identifier, wherein the identifier is configured to prevent a user from accumulating multiple articles, each of the multiple articles bearing the identifier;

generating, using the computing device, a first digital certificate derived at least in part from an encryption of the identifier;

generating, using the computing device, a second digital certificate derived at least in part from an encryption of the identifier; and

presenting, using the computing device, collectively the identifier and one of the first digital certificate and the second digital certificate for an authentication of the information-based indicium, wherein the one of the first digital certificate and the second digital certificate other than the one of the first digital certificate and the second digital certificate used for the authentication is configured to become unusable after the authentication.

6. A system for generating a digital certificate, comprising:

an input configured to receive a first identifier and a second identifier independent from the first identifier, wherein the first identifier is configured to prevent a user from accumulating multiple articles, each of the multiple articles bearing the first identifier;

a computing device configured to generate a digital certificate at least in part from an encryption of the first identifier and the second identifier; and

an output configured to produce the digital certificate, such that the digital certificate is configured to be decrypted with a public key, whereby the digital certificate is authenticated without tracking using a database.

7. The system of claim 6, for generating information-based indicia, comprising:

wherein the first identifier is received via an article prior to the derivation of the digital certificate and the article and the digital certificate are configured to be collectively presented as the information-based indicium.

8. The system of claim 7, further, comprising:

an input configured to receive the first identifier of a forgery-resistant commercial paper; and

an output configured to present the first identifier and the digital certificate collectively to authenticate the commercial paper transaction by comparing the first identifier with the digital certificate.

9. The system of claim 6, wherein the presenting device is a part of an electronic communications network.

10. The system of claim 6, wherein the input is configured to receive the first identifier via an electronic communications network.

11. A method for generating a digital certificate, comprising:

receiving, using a computing device, a first identifier and a. second identifier independent from the first identifier, wherein the first identifier is configured to prevent a user from accumulating multiple articles, each of the multiple articles bearing the first identifier; and

generating, using the computing device, a digital certificate at least in part from an encryption of the first identifier and the second identifier, such that the digital certificate is configured to be decrypted with a public key, the digital certificate being authenticated without tracking using a database.

12. The method of claim 11, wherein the first identifier comprises a datum.

13. The method of claim 12, wherein the datum is structured.

14. The method of claim 12, wherein the datum is numeric.

15. The method of claim 12, wherein the datum is non-numeric.

16. The method of claim 12, wherein the datum is alphanumeric.

17. The method of claim 12, wherein the datum is an image.

18. The method of claim 12, wherein the datum is a bar code.

19. The method of claim 11:

wherein the first identifier is received via an article prior to the derivation of the digital certificate and the article and the digital certificate are configured to be collectively presented as an information-based indicium.

20. The method of claim 19, further comprising:

providing, using the computing device, a second digital certificate derived at least in part from an encryption of the second identifier.

21. The method of claim 19, further comprising:

providing, using a computing device, a plurality of digital certificates wherein each of the plurality of digital certificates is unique, derived at least in part from an encryption of the first identifier.

22. A system for producing an information-based indicium, comprising:

a transmitter configured to transmit a first identifier and a second identifier independent from the first identifier to a remote device;

a receiver configured to receive a digital certificate from the remote device,

wherein the digital certificate is generated at least in part from an encryption of the first identifier and the second identifier and configured to be decrypted with a public key, whereby the digital certificate is authenticated without tracking using a database; and

an output configured to produce the information-based indicium wherein the information-based indicium is based at least in part on the first and second identifiers.

23. The system of claim 22, wherein the transmitter is configured to transmit the first identifier to the remote device via an electronic communications network.

24. A method for authenticating an information-based indicium for recertified digital certificates comprising:

receiving, using a computing device, an article bearing an identifier, wherein the identifier is configured to prevent a user from accumulating multiple articles, each of the multiple articles bearing the identifier;

receiving, using the computing device, a first digital certificate derived at least in part from an encryption of the identifier;

receiving, using the computing device, a second digital certificate derived at least in part from an encryption of the identifier;

decrypting, using the computing device, one of the first digital certificate and the second digital certificate; and

comparing the decrypted digital certificate and the identifier to authenticate the information-based indicium, wherein the one of the first digital certificate and the second digital certificate other than the one of the first digital certificate and the second digital certificate used for the authentication is configured to become unusable after the authentication.