Fair payment protocol with semi-trusted third party

• US 9,563,881 B2
• Filed: 06/27/2008
• Issued: 02/07/2017
• Est. Priority Date: 06/27/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Shao, Jun, Feng, Min, Zhu, Bin B.
• Primary Examiner(s): Huang, Tsan-Yu J
• Application Number:
  US12/147,860
• Publication Number:
  US 20090327142A1
• Time in Patent Office: 3,147 Days
• Field of Search: 705/64, 705/75, 713/176
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Described is an optimistic fair payment protocol in electronic commerce that provides fair payment while resisting an unconscious double spending attack and other attacks. A buyer receives encrypted e-goods from a merchant, and sends payment to the merchant. If decryption information is not received in exchange for the payment, or the decryption information does not render the e-goods useable, the buyer launches a dispute with a third party dispute resolution service. If the decryption information is received and renders the e-goods useable, the buyer determines whether the e-goods are valid, according to a corresponding description. If not valid, the buyer launches a dispute and provides the e-goods and the description. The third party uses the description to evaluate the validity of the goods to determine whether to refund the payment to the buyer or release it to the merchant.

Claims

1. A computer-implemented method performed by a buyer apparatus, the computer-implemented method comprising:

receiving encrypted e-goods, a transaction agreement including a description of the e-goods, and a digital signature from a merchant as part of a transaction;

validating the transaction agreement including the description of the e-goods using the digital signature;

when the transaction agreement is validated, sending payment from the buyer apparatus to the merchant;

determining whether decryption data has been received from the merchant in exchange for the payment;

in a first instance, responsive to determining that the decryption data has not been received from the merchant, launching a dispute with a third party other than the merchant;

in a second instance, responsive to determining that the decryption data has been received from the merchant, determining whether the decryption data received from the merchant is sufficient for the buyer apparatus to decrypt the encrypted e-goods without obtaining further decryption data, and;

a) responsive to determining that the decryption data received from the merchant is not sufficient for the buyer apparatus to decrypt the e-goods, launching the dispute with the third party, or

b) responsive to determining that the decryption data is sufficient for the buyer apparatus to decrypt the encrypted e-goods, determining whether the e-goods received from the merchant are valid by decrypting the e-goods with the decryption data and comparing the e-goods to the description of the e-goods in the transaction agreement, and;

i) when the e-goods are not valid, launching the dispute with the third party; and

ii) when the e-goods are valid, terminating the transaction without launching the dispute,

wherein the payment is sent from the buyer apparatus to the merchant after the buyer apparatus receives the encrypted e-goods and before the buyer apparatus determines whether the decryption data has been received.

2. The method of claim 1, further comprising, in the first instance:

providing payment data corresponding to the payment to the third party, and receiving other decryption data sufficient to decrypt the encrypted e-goods from the third party.

3. The method of claim 2, further comprising:

using the other decryption data received from the third party to determine whether the e-goods received from the merchant are valid by decrypting the e-goods and comparing the e-goods to the description of the e-goods in the transaction agreement,

when the e-goods received from the merchant are determined using the other decryption data to be not valid, launching another dispute with the third party, including providing data corresponding to the e-goods to the third party and providing a description of the e-goods to the third party.

4. The method of claim 3 further comprising:

receiving a refund in response to the another dispute.

5. The method of claim 1, further comprising:

receiving other decryption data from the third party; and

using the other decryption data to determine whether the e-goods received from the merchant are valid by decrypting the e-goods using the other decryption data and comparing the e-goods to the description of the e-goods in the transaction agreement.

6. The method of claim 1, wherein the payment comprises e-coins.

7. The method of claim 3, further comprising:

receiving a refund in response to the another dispute.

8. The method of claim 1, further comprising:

providing the e-goods to the third party; and

providing the description of the e-goods to the third party.

9. The method of claim 8, further comprising:

receiving a refund in response to the dispute.

10. The method according to claim 1, wherein the buyer apparatus and the merchant communicate directly without involving the third party to perform at least:

the receiving the encrypted e-goods, transaction agreement, and digital signature,

the validating the transaction agreement, and

the sending payment,

before the buyer apparatus or the merchant involve the third party.

11. The method according to claim 10, wherein the buyer apparatus only communicates with the third party provided the dispute is launched.

12. The method according to claim 1, wherein the transaction agreement identifies the merchant, the third party, the e-goods, a transaction time, and an agreed price for the e-goods, the method further comprising validating the merchant, the third party, the e-goods, the transaction time, and the agreed price before sending the payment to the merchant.

13. The method according to claim 1, wherein the transaction agreement identifies one or more of the merchant, the third party, the e-goods, a transaction time, or an agreed price for the e-goods, the method further comprising validating at least one of the merchant, the third party, the transaction time, or the agreed price before sending the payment to the merchant.

14. A device comprising:

a processor, and

a memory storing computer readable instructions which, when executed by the processor, cause the processor to perform;

receiving encrypted e-goods, a transaction agreement including a description of the e-goods, and a digital signature from a merchant as part of a transaction;

validating the transaction agreement including the description of the e-goods using the digital signature;

when the transaction agreement is validated, sending payment to the merchant;

determining whether decryption data has been received from the merchant in exchange for the payment;

in a first instance when the decryption data has not been received from the merchant, launching a first dispute with a third party other than the merchant;

in a second instance when the decryption data is received from the merchant but is not sufficient to decrypt the encrypted e-goods without obtaining further decryption data, launching a second dispute with the third party other than the merchant;

in a third instance when the decryption data is sufficient to decrypt the encrypted e-goods but the e-goods do not match the description of the e-goods in the transaction agreement, launching a third dispute with the third party other than the merchant; and

in a fourth instance when the decryption data is sufficient to decrypt the encrypted e-goods and the e-goods match the description of the e-goods in the transaction agreement, terminating the transaction without launching any dispute,

wherein the payment is sent to the merchant after the encrypted e-goods are received and before determining whether the decryption data has been received.

15. The computing device of claim 14, wherein the computer readable instructions cause the processor to perform:

receiving an encrypted encryption key from the merchant before sending the payment to the merchant; and

validating another signature of the encrypted encryption key before sending the payment to the merchant.

16. The computing device of claim 15, wherein the decryption data comprises a decrypted copy of the encryption key.

17. The computing device of claim 15, wherein launching the second dispute comprises sending the transaction agreement, the encrypted encryption key, and proof of payment to the third party.

18. A hardware computer readable storage media storing computer readable instructions which, when executed by a computer, cause the computer to perform acts comprising:

receiving encrypted e-goods, a transaction agreement including a description of the e-goods, and a digital signature from a merchant as part of a transaction;

validating the transaction agreement including the description of the e-goods using the digital signature;

when the transaction agreement is validated, sending payment to the merchant;

determining whether decryption data has been received from the merchant in exchange for the payment;

in a first instance when the decryption data has not been received from the merchant, launching a first dispute with a third party other than the merchant;

in a second instance when the decryption data has been received from the merchant and the decryption data is not sufficient to successfully decrypt the encrypted e-goods, launching a second dispute with the third party other than the merchant;

in a third instance when the decryption data is received from the merchant, is used to successfully decrypt the encrypted e-goods, and the e-goods do not match the description of the e-goods in the transaction agreement, launching a third dispute with the third party other than the merchant; and

in a fourth instance when the decryption data is received from the merchant, is used to successfully decrypt the encrypted e-goods, and the e-goods match the description of the e-goods in the transaction agreement, terminating the transaction without launching any dispute,

wherein the payment is sent to the merchant after receiving the encrypted e-goods and before determining whether the decryption data has been received.

19. The hardware computer readable storage media of claim 18, the acts further comprising:

in the third instance, receiving a certificate from the third party; and

using the certificate to recover the payment.

20. The hardware computer readable storage media of claim 19, wherein the payment comprises e-coins.