Trusted message storage and transfer protocol and system

• US 9,071,444 B2
• Filed: 09/17/2010
• Issued: 06/30/2015
• Est. Priority Date: 09/17/2009
• Status: Expired due to Fees

• Current Assignee: Loyalty Pays Holdings Corporation (Nanopay Corporation)
• Original Assignee: Royal Canadian Mint/Monnaie Royale Canadienne
• Inventors: Everett, David
• Primary Examiner(s): Su, Sarah
• Application Number:
  US13/496,769
• Publication Number:
  US 20120233470A1
• Time in Patent Office: 1,747 Days
• Field of Search: 713/168, 713/170, 713/176, 709/206, 709/232
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An electronic content storage and exchange system includes an interface configured to send and receive messages; a database and a controller. The database includes a plurality of records, each record representing a respective virtual storage media and including at least: a respective unique identifier assigned to the virtual storage media; a respective Private key and certificate assigned to the virtual storage media; a current content value, and a log of content transfers. The controller executes transfer-in and transfer-out processes in respect of each of the virtual storage media. The transfer-in process includes steps of: receiving a content transfer message including at least a message content to be transferred and the respective identifier assigned to a recipient virtual storage media; accessing the record representing the recipient virtual storage media; and storing the message content in the current content of the recipient virtual storage media. The transfer-out process includes steps of: receiving a content transfer request message including at least at least a message content to be transferred and the respective identifier assigned to a sending virtual storage media; accessing the record representing the sending virtual storage media; removing the message content from the current content; generating a content transfer message including the message content; and returning the content transfer message.

Claims

1. A storage media server of an electronic content storage and exchange system, the storage media server comprising:

an interface configured to send and receive content transfer messages to convey the content between respective ones of a plurality of storage media, wherein content being conveyed by a respective content transfer message is stored only in that content transfer message;

a database comprising a plurality of records, each record representing a respective virtual storage medium and including;

a respective unique identifier of the virtual storage medium;

a respective Private key and certificate assigned to the virtual storage medium;

a respective current content value of the virtual storage medium; and

a respective log including information of each content transfer message sent or received by the virtual storage medium; and

a controller configured to;

execute a transfer-in process including steps of;

receiving, via the interface, a first content transfer message including a first content to be transferred and the respective unique identifier of a recipient virtual storage medium to which the first content is to be transferred;

accessing, in the database, the respective record representing the recipient virtual storage medium, based on the unique identifier in the first content transfer message;

determining whether or not the first content transfer message is a duplicate of a previously received content transfer message based on the information stored in the log of the record representing the recipient virtual storage medium; and

responsive to determination that the first content transfer message is not a duplicate, storing the first content in the respective current content value of the record representing the recipient virtual storage medium, and responsive to determination that the first content transfer message is a duplicate, discarding the content transfer message; and

execute a transfer-out process including steps of;

receiving, via the interface, a content transfer request message including information identifying a second content to be transferred, and the respective unique identifier of a sending virtual storage medium from which the second content is to be transferred;

accessing, in the database, the respective record representing the sending virtual storage medium based on the unique identifier in the content transfer request message;

removing the second content from the current content value of the respective record representing the sending virtual storage medium;

generating a second content transfer message including the second content; and

returning the second content transfer message.

2. The storage media server as claimed in claim 1, wherein storing the first content comprises adding the first content to the current content value of the respective record representing the recipient virtual storage medium.

3. The storage media server as claimed in claim 1, wherein storing the first content comprises incrementing the current content value of the respective record representing the recipient virtual storage medium by a predetermined value.

4. The storage media server as claimed in claim 1, wherein the first content transfer message comprises at least a certificate assigned to a second storage media, and a nonce generated by the second storage media, and wherein the transfer-in process comprises:

determining whether the first content transfer message is a duplicate of a previously received content transfer message, based on at least the certificate and the nonce; and

discarding the first content transfer message if it is a duplicate.

5. The storage media server as claimed in claim 1, wherein the first content transfer message comprises at least a digital signature generated by a second storage media and a certificate assigned to the second storage media, and wherein the transfer-in process comprises:

determining whether the digital signature is valid; and

discarding the first content transfer message if the digital signature is not valid.

6. The storage media server as claimed in claim 1, wherein removing the second content comprises subtracting the second content from the current content value of the respective record representing the sending virtual storage medium.

7. The storage media server as claimed in claim 1, wherein removing the second content comprises decrementing the current content value of the respective record representing the sending virtual storage medium by a predetermined value.

8. The storage media server as claimed in claim 1, wherein the transfer-out process comprises:

determining whether the current content value of the respective record representing the sending virtual storage medium is less than the second content; and

discarding the content transfer request if the determined current content value is less than the second content.

9. The storage media server as claimed in claim 1, wherein generating a second content transfer message comprises:

generating a digital signature in respect of the second content transfer message, based on the Private Key of the sending virtual storage medium; and

applying the digital signature and the certificate of the sending virtual storage medium to the second content transfer message.

10. A method of storing and exchanging content, the method comprising:

providing a storage media server including;

an interface configured to send and receive content transfer messages to convey the content between respective ones of a plurality of storage media, wherein content being conveyed by a respective content transfer message is stored only in that content transfer message;

a database comprising a plurality of records, each record representing a respective virtual storage medium and including;

a respective unique identifier of the virtual storage medium;

a respective Private key and certificate assigned to the virtual storage medium;

a respective current content value of the virtual storage medium, and

a respective log including information of each content transfer message sent or received by the virtual storage medium; and

a controller;

executing, by the controller, a transfer-in process including steps of;

receiving, via the interface, a first content transfer message including a first content to be transferred and the respective unique identifier of a recipient virtual storage medium to which the first message content is to be transferred;

accessing, in the database, the respective record representing the recipient virtual storage medium, based on the unique identifier in the first content transfer message;

determining whether or not the first content transfer message is a duplicate of a previously received content transfer message based on the information stored in the log of the record representing the recipient virtual storage medium; and

responsive to determination that the first content transfer message is not a duplicate, storing the first content in the respective current content value of the record representing the recipient virtual storage medium and responsive to determination that the first content transfer message is a duplicate, discarding the content transfer message; and

executing, by the controller, a transfer-out process including steps of;

receiving, via the interface, a content transfer request message including information identifying a second content to be transferred and the respective unique identifier of a sending virtual storage media medium from which the second content is to be transferred;

accessing, in the database, the respective record representing the sending virtual storage media based on the unique identifier in the content transfer request message;

removing the second content from the current content value of the respective record representing the sending virtual storage medium;

generating a second content transfer message including the second content; and

returning the second content transfer message.

11. The method as claimed in claim 10, wherein storing the first content comprises adding the first content to the current content value of the respective record representing the recipient virtual storage medium.

12. The method as claimed in claim 10, wherein storing the first content comprises incrementing the current content value of the respective record representing the recipient virtual storage medium by a predetermined value.

13. The method as claimed in claim 10, wherein the first content transfer message comprises at least a certificate assigned to a second storage media, and a nonce generated by the second storage media, and wherein the transfer-in process comprises:

determining whether the first content transfer message is a duplicate of a previously received content transfer message, based on at least the certificate and the nonce; and

discarding the first content transfer message if it is a duplicate.

14. The method as claimed in claim 10, wherein the first content transfer message comprises at least a digital signature generated by a second storage media and a certificate assigned to the second storage media, and wherein the transfer-in process comprises:

determining whether the digital signature is valid; and

discarding the first content transfer message if the digital signature is not valid.

15. The method as claimed in claim 10, wherein removing the second content comprises subtracting the second content from the current content value of the respective record representing the sending virtual storage medium.

16. The method as claimed in claim 10, wherein removing the second content comprises decrementing the current content value of the respective record representing the sending virtual storage medium by a predetermined value.

17. The method as claimed in claim 10, wherein the transfer-out process comprises:

determining whether the current content is less than the second content; and

discarding the content transfer request if the determined current content value is less than the second content.

18. The method as claimed in claim 10, wherein generating a second content transfer message comprise:

generating a digital signature in respect of the second content transfer message, based on the Private Key of the sending virtual storage medium; and

applying the digital signature and the certificate of the sending virtual storage medium to the second content transfer message.