System for ensuring that promises are kept in an anonymous system

• US 9,026,786 B1
• Filed: 12/07/2012
• Issued: 05/05/2015
• Est. Priority Date: 12/07/2012
• Status: Active Grant

• Current Assignee: Borealis Technical Limited Gibraltar Company Number 57884, HRL Laboratories LLC (The Boeing Co.)
• Original Assignee: HRL Laboratories LLC (The Boeing Co.)
• Inventors: Nogin, Aleksey, El Defrawy, Karim, Baron, Joshua
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US13/707,598
• Time in Patent Office: 879 Days
• Field of Search: 713/155
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Described is a system, method, and computer program product for ensuring that promises are kept in an anonymous system. A verifiable interaction is established between at least two users. Each user utilizes at least one pseudonym to protect their identity, which is verifiable by a third party. The pseudonyms are stored in an anonymous database controlled by the third party. The invention described herein ensures that at least one user in the verifiable interaction performs an action that is agreed upon between the users. If the user does not perform the action, then that user is prevented from establishing another verifiable interaction by the third party. In a desired aspect, the invention is utilized in an anonymous reputation system to ensure that actions that affect a user'"'"'s reputation, including those that negatively impact the user'"'"'s reputation, are performed as agreed upon.

Claims

1. A system for ensuring that promises are kept in an anonymous system, the system comprising:

one or more processors and a memory having instructions such that when the instructions are executed, the one or more processors perform operations of;

establishing a verifiable interaction between at least two users, each user having an identity, wherein each user utilizes at least one pseudonym to protect their identity, wherein the verifiable interaction is verifiable by a third party;

storing the at least one pseudonym of each user in an anonymous database controlled by the third party;

presenting at least one user in the verifiable interaction with a capability of performing an action that is agreed upon between the users;

wherein if the user does not perform the action, then the user is prevented from establishing another verifiable interaction by the third party; and

wherein the action comprises awarding at least one reputation point in a reputation system and in doing so the one or more processors perform operations of;

allowing a first user to award the least one reputation point to a second user, wherein accumulation of reputation points determines a user'"'"'s reputation in the reputation system; and

presenting the second user with the capability of registering the at least one reputation point received by the second user from the first user;

wherein if the second user does not register the at least one reputation point, then the second user is prevented from establishing another verifiable interaction by the third party.

2. The system as set forth in claim 1, wherein the identities of the at least two users are unknown to the third party.

3. The system as set forth in claim 1, wherein the one or more processors further perform an operation of allowing the second user to send the third party a blind permission to register the at least one reputation point, wherein the third party receives only a pseudonym of the second user and a reference number linked to the at least one reputation point.

4. The system as set forth in claim 1, wherein the one or more processors further perform operations of:

providing, to the first user, data identifying all of the pseudonyms stored for the second user in the anonymous database; and

allowing the first user to verify with the third party whether the second user has interacted with the third party since the verifiable interaction with the first user.

5. The system as set forth in claim 4, wherein the one or more processors further perform an operation of allowing the first user to request that the third party prevent the second party from establishing another verifiable interaction, if the first user verifies that the second user has interacted with the third party and has not registered the at least one reputation point.

6. A computer-implemented method for ensuring that promises are kept in an anonymous system, comprising an act of:

causing a data processor to execute instructions stored on a non-transitory memory such that upon execution, the data processor performs operations of;

establishing a verifiable interaction between at least two users, each user having an identity, wherein each user utilizes at least one pseudonym to protect their identity, wherein the verifiable interaction is verifiable by a third party;

storing the at least one pseudonym of each user in an anonymous database controlled by the third party;

presenting at least one user in the verifiable interaction with a capability of performing an action that is agreed upon between the users;

wherein if the user does not perform the action, then the user is prevented from establishing another verifiable interaction by the third party; and

wherein in the act of ensuring that at least one user in the verifiable interaction performs an action, the action comprises awarding at least one reputation point in a reputation system, wherein the method further comprises acts of causing a data processor to perform operations of;

allowing a first user to award the least one reputation point to a second user, wherein accumulation of reputation points determines a user'"'"'s reputation in the reputation system; and

presenting the second user with the capability of registering the at least one reputation point received by the second user from the first user;

wherein if the second user does not register the at least one reputation point, then the second user is prevented from establishing another verifiable interaction by the third party.

7. The method as set forth in claim 6, further comprising an act of causing a data processor to perform an operation of allowing the second user to send the third party a blind permission to register the at least one reputation point, wherein the third party receives only a pseudonym of the second user and a reference number linked to the at least one reputation point.

8. The method as set forth in claim 6, further comprising an act of causing a data processor to perform an operations of:

providing, to the first user, data identifying all of the pseudonyms stored for the second user in the anonymous database; and

allowing the first user to verify with the third party whether the second user has interacted with the third party since the verifiable interaction with the first user.

9. The method as set forth in claim 8, further comprising an act of causing a data processor to perform an operation of allowing the first user to request that the third party prevent the second party from establishing another verifiable interaction, if the first user verifies that the second user has interacted with the third party and has not registered the at least one reputation point.

14. The method as set forth in claim 6 wherein the identities of the at least two users are unknown to the third party.

10. A computer program product for ensuring that promises are kept in an anonymous system, the computer program product comprising computer-readable instructions stored on a non-transitory computer-readable medium that are executable by a computer having a processor for causing the processor to perform operations of:

establishing a verifiable interaction between at least two users, each user having an identity, wherein each user utilizes at least one pseudonym to protect their identity, wherein the verifiable interaction is verifiable by a third party;

storing the at least one pseudonym of each user in an anonymous database controlled by the third party;

presenting at least one user in the verifiable interaction with a capability of performing an action that is agreed upon between the users;

wherein if the user does not perform the action, then the user is prevented from establishing another verifiable interaction by the third party; and

wherein the action comprises awarding at least one reputation point in a reputation system, and wherein the computer program product further comprises instructions for causing a processor to perform operations of;

allowing a first user to award the least one reputation point to a second user, wherein accumulation of reputation points determines a user'"'"'s reputation in the reputation system; and

presenting the second user with the capability of registering the at least one reputation point received by the second user from the first user;

wherein if the second user does not register the at least one reputation point, then the second user is prevented from establishing another verifiable interaction by the third party.

11. The computer program product as set forth in claim 10, further comprising instructions for causing a processor to perform an operation of allowing the second user to send the third party a blind permission to register the at least one reputation point, wherein the third party receives only a pseudonym of the second user and a reference number linked to the at least one reputation point.

12. The computer program product as set forth in claim 10, further comprising instructions for causing a processor to perform operations of:

providing, to the first user, data identifying all of the pseudonyms stored for the second user in the anonymous database; and

allowing the first user to verify with the third party whether the second user has interacted with the third party since the verifiable interaction with the first user.

13. The computer program product as set forth in claim 12, further comprising instructions for causing a processor to perform an operation of allowing the first user to request that the third party prevent the second party from establishing another verifiable interaction, if the first user verifies that the second user has interacted with the third party and has not registered the at least one reputation point.

15. The computer program product as set forth in claim 10 wherein the identities of the at least two users are unknown to the third party.