Systems, methods and devices for trusted transactions

• US 9,070,151 B2
• Filed: 03/12/2013
• Issued: 06/30/2015
• Est. Priority Date: 07/02/1996
• Status: Expired due to Fees

• Current Assignee: Wistaria Trading Inc.
• Original Assignee: Blue Spike, Inc.
• Inventors: Moskowitz, Scott A.
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US13/797,744
• Publication Number:
  US 20130198083A1
• Time in Patent Office: 840 Days
• Field of Search: 713/176, 380/231, 705/51, 705/52, 705/53, 705/54, 705/77, 726/28, 726/30, 726/31
• US Class Current: 1/1
• CPC Class Codes: G06F 1/266 Arrangements to supply power to external peripherals either directly from the computer or under computer control, e.g. supply of power through the communication port, computer controlled power-strips
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 7/582 Pseudo-random number generators
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0618 : Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04L 9/0643 : Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3228 : One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps

Abstract

The invention discloses a system for enhancing trust in transactions, most particularly in remote transactions between a plurality of transactional parties, for instance a seller and buyer(s) of goods and/or services over a public computer network such as the internet. Trust is disclosed to be a multivalent commodity, in that the trust that is to be enhanced relates to information about the subject matter of the transactions (e.g., the suitability of the goods and services sold), the bona fides of the supplier of the goods and services, the appropriateness of a pricing structure for a particular transaction or series of transactions, a quantum of additional transactional value that may be imparted to the transactional relationship, security of information exchange.

Claims

1. A transaction device, comprising:

a central processing unit (CPU) for processing data;

a power supply for powering said transaction device;

a transmitter for transmitting data;

a receiver for receiving data;

a converter consisting of one of (1) a transducer for transducing physical information to an analog information and an A/D converter for converting said analog information to digital format and (2) a transducer for transducing physical information to digital format;

a memory for storing data in non-transitory form;

wherein said memory stores, in non-transitory form, data related to identity of a device holder, and at least one steganographic or cryptographic key;

a number generator for generating numbers;

a cipher; and

wherein said transaction device is designed to respond to an action of said device holder of said device, by using said converter to convert physical information of said device holder to digital information of said device holder;

wherein said cipher is designed to use data comprising said key and said data related to identity of said device holder to generate ciphered output data;

wherein said cipher is designed to establish a hierarchical set of one time signatures; and

wherein said transmitter is designed to transmit said ciphered output data and one of said hierarchical set of one time signatures.

2. The device of claim 1, wherein said number generator comprises one of (1) a pseudo random number generator and (2) a random number generator.

3. The device of claim 1, wherein said data related to identity of said device holder is stored securely in said memory.

4. The device of claim 1, wherein said data related to identity of said device holder is stored in memory in encrypted, signed, hashed, scrambled, or ciphered form.

5. The device of claim 1, wherein said memory stores a cryptographic key transmitted to said device.

6. The device of claim 1, wherein said device is designed to provide dynamic authentication by serializing ciphering.

7. The device of claim 1, wherein said device is designed to execute a rule or function based upon said output data.

8. The device of claim 1 wherein said key is a private key of a public-private key pair.