Systems and methods for conducting transactions and communications using a trusted third party

• US 9,672,514 B2
• Filed: 08/28/2015
• Issued: 06/06/2017
• Est. Priority Date: 04/20/2001
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Pinkas, Binyamin, Sander, Tomas, Horne, William G.
• Primary Examiner(s): Cheung, Mary
• Application Number:
  US14/839,125
• Publication Number:
  US 20160155119A1
• Time in Patent Office: 648 Days
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Systems and methods are provided for performing transactions and managing communications using a trusted third party. In one embodiment, a sender transfers an encrypted version of a file (such as a digitally encoded audio track, movie, document, or the like) to someone who wishes to receive it. The receiver computes a first hash of at least a portion of the encrypted data content, and sends the first hash to a third party configured to compare at least a portion of the first hash to at least a portion of a second hash. The receiver receives a file decryption key from the third party, and decrypts at least the portion of the received encrypted data content with the decryption key. In some cases, multiple hashes of the encrypted data content may be computed, each using a different portion of the encrypted data content.

Claims

1. A method performed by a first computer system associated with a first party, the first computer system comprising a processor and a memory encoded with program instructions that, when executed by the processor, cause the processor to perform the method, the method comprising:

receiving a first hash of a first message from a second computer system associated with a second party, the first hash being generated by the second computer system, the first message comprising content encrypted by a third party with a first key associated with the third party,

receiving an encrypted message from the second computer system, the encrypted message being generated by the third party and comprising a second hash of the first message and the first key, the encrypted message being encrypted using a second key associated with the first party by the third party;

decrypting the encrypted message using the second key to generate a decrypted second hash and decrypted first key;

determining that the first hash and the decrypted second hash are equal; and

based on the determination, sending an indication to a third computer system associated with the third party that the content was received by the second party.

2. The method of claim 1, wherein the first key comprises a key randomly selected by the third party.

3. The method of claim 1, wherein the second key comprises a public encryption key associated with the first party.

4. The method of claim 1, wherein the method further comprises sending, based on the determination, the decrypted first key to the second computer system.

5. The method of claim 4, wherein the method further comprises sending, based on the determination, an indication to the third computer system that the decrypted first key was received by the second party.

6. The method of claim 4, wherein the method further comprises receiving, from the second computer system, an indication that the decrypted first key was received by the second party.

7. The method of claim 4, wherein the method further comprises determining that an indication from the second computer system has not been received within a predefined time period indicating that the decrypted first key was received by the second party and, in response, sending an indication to the second computer system that the decrypted first key was sent.

8. The method of claim 7, wherein the method further comprises resending the decrypted first key to the second computer system in response to determining that the indication from the second computer system has not been received within a predefined time period.

9. The method of claim 1, wherein the content comprises an electronic mail message.

10. A non-transitory computer-readable storage medium storing instructions that, when executed by a processor included in a first computer system associated with a first party, cause the processor to perform a method comprising:

receiving a first hash of a first message from a second computer system associated with a second party, the first hash being generated by the second computer system, the first message comprising content encrypted by a third party with a first key associated with the third party,

receiving an encrypted message from the second computer system, the encrypted message being generated by the third party and comprising a second hash of the first message and the first key, the encrypted message being encrypted using a second key associated with the first party by the third party;

decrypting the encrypted message using the second key to generate a decrypted second hash and decrypted first key;

determining that the first hash and the decrypted second hash are equal; and

based on the determination, sending an indication to a third computer system associated with the third party that the content was received by the second party.

11. The non-transitory computer-readable storage medium of claim 10, wherein the first key comprises a key randomly selected by the third party.

12. The non-transitory computer-readable storage medium of claim 10, wherein the second key comprises a public encryption key associated with the first party.

13. The non-transitory computer-readable storage medium of claim 10, wherein the method further comprises sending, based on the determination, the decrypted first key to the second computer system.

14. The non-transitory computer-readable storage medium of claim 13, wherein the method further comprises sending, based on the determination, an indication to the third computer system that the decrypted first key was received by the second party.

15. The non-transitory computer-readable storage medium of claim 13, wherein the method further comprises receiving, from the second computer system, an indication that the decrypted first key was received by the second party.

16. The non-transitory computer-readable storage medium of claim 13, wherein the method further comprises determining that an indication from the second computer system has not been received within a predefined time period indicating that the decrypted first key was received by the second party and, in response, sending an indication to the second computer system that the decrypted first key was sent.

17. The non-transitory computer-readable storage medium of claim 16, wherein the method further comprises resending the decrypted first key to the second computer system in response to determining that the indication from the second computer system has not been received within a predefined time period.

18. The non-transitory computer-readable storage medium of claim 10, wherein the content comprises an electronic mail message.