Storage and authentication of data transactions

• US 8,656,166 B2
• Filed: 06/12/2012
• Issued: 02/18/2014
• Est. Priority Date: 07/02/2002
• Status: Expired due to Term

• Current Assignee: The Ascent Group, Ltd.
• Original Assignee: The Ascent Group, Ltd.
• Inventors: Jacobs, Michael
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US13/494,272
• Publication Number:
  US 20120260098A1
• Time in Patent Office: 616 Days
• Field of Search: 713/171, 713/176
• US Class Current: 713/169
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 51/23 Reliability checks, e.g. acknowledgments or fault reporting
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Data is transmitted between a first user and a second user via an information technology communications network, in a method comprising the steps of:

• • generating a first hash value for a selected one of the data items;
  • digitally signing and encrypting the first hash value with a secret identifier associated with the first user;
  • transmitting to a second user the encrypted first hash value;
  • receiving and storing the transmitted encrypted first hash value for audit purposes and generating a second hash value for the received encrypted first hash value;
  • encrypting the second hash value with a private identifier associated with a second user and a public identifier associated with the first user; and
  • returning the encrypted second hash value to the first user.

Claims

1. A computer implemented method of transmitting data between a first user and a second user via an information technology communications network, the computer implemented method comprising the steps of:

generating a first hash value for a selected data item;

digitally signing and encrypting said first hash value with a secret identifier associated with the first user;

transmitting to a second user said encrypted first hash value;

receiving and storing said transmitted encrypted first hash value for audit purposes and generating a second hash value for said received encrypted first hash value;

encrypting the second hash value with a private identifier associated with a second user and a public identifier associated with the first user;

returning the encrypted second hash value to be received by the first user;

decrypting said received encrypted second hash value with the private identifier associated with said second user and the public identifier associated with said first user to derive a further hash value therefrom;

comparing the further hash value with the second hash value generated for said received encrypted first hash value to confirm digital identity of the second user;

and in response to the comparing of the further hash value to confirm digital identity of the second user, encrypting the secret identifier associated with the first user and transmitting to the second user the encrypted secret identifier associated with the first user for decryption and subsequent use in decrypting said encrypted first hash value, wherein the steps of the computer implemented method are performed by at least one computer.

2. A computer implemented method according to claim 1, wherein:

the encrypted first hash value is stored remotely from said first and second end users by a third party.

3. A computer implemented method according to claim 1 wherein:

the secret identifier is encrypted with a key that is obtained through transactions between said second user and a third party.

4. A computer implemented method of transmitting data between a first user and a second user via an information technology communications network, comprising the steps of:

generating a first hash value for a selected data item;

digitally signing and encrypting said first hash value with a secret identifier associated with the first user;

transmitting to a second user said encrypted first hash value;

receiving and storing said transmitted encrypted first hash value for audit purposes and generating a second hash value for said received encrypted first hash value;

encrypting the second hash value with a private identifier associated with a second user and a public identifier associated with the first user;

returning the encrypted second hash value to be received by the first user;

decrypting said received encrypted second hash value with the private identifier associated with said second user and the public identifier associated with said first user to derive a further hash value therefrom;

comparing the further hash value with the second hash value generated for said received encrypted first hash value to confirm digital identity of the second user; and

in response to a failure to confirm digital identity of the second user, denying the second user access to the encrypted first hash value by omission of transmitting to the second user the encrypted secret identifier associated with the first user, wherein the steps of the computer implemented method are performed by at least one computer.

5. A computer implemented method according to claim 4, wherein:

the secret identifier is encrypted with a key that is obtained through transactions between said second user and a third party.

6. A computer implemented method according to claim 4, wherein:

at least one of said transactions between said second user and said third party is recorded and time stamped by said third party.

7. A computer implemented method according to claim 4, wherein:

the encrypted first hash value is stored remotely from said first and second end users, by a third party.