Method and system for the supply of data, transactions and electronic voting

• US 9,794,236 B2
• Filed: 06/25/2010
• Issued: 10/17/2017
• Est. Priority Date: 11/06/2001
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Dare, Peter Roy, Owlett, John, Tyabji, Imran Faiz
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US12/823,877
• Publication Number:
  US 20100332839A1
• Time in Patent Office: 2,671 Days
• Field of Search: None
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity'"'"'s electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity'"'"'s electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Claims

1. A method of performing a transfer of an electronic property from a first entity to a second entity, comprising:

receiving a request at a first computing device of the first entity from a second computing device of the second entity, the request including a public key of the second entity;

generating by the first computing device an identification link from an identifier of an empowerment certificate and an identifier of the transfer of the electronic property;

storing by the first computing device the identification link in the electronic property;

encrypting by the first computing device the electronic property including the identification link using a session key;

encrypting by the first computing device the session key with the public key of the second entity;

encrypting the electronic property including the identification link with a private key of the first entity;

generating by the first computing device the empowerment certificate including the identification link and the encrypted session key; and

sending by the first computing device the empowerment certificate and the encrypted electronic property including the identification link to the second computing device.

2. The method of claim 1, wherein the identifier of the empowerment certificate is a bit-stream generated from a serial number of the empowerment certificate.

3. The method as claimed in claim 2, wherein the empowerment certificate has a validity period which begins earlier than a time of generation of the empowerment certificate.

4. The method as claimed in claim 3, wherein the empowerment certificate has a second validity period that limits a duration of the transfer of the electronic property.