Systems, methods and devices for trusted transactions

• US 9,830,600 B2
• Filed: 03/24/2015
• Issued: 11/28/2017
• Est. Priority Date: 07/02/1996
• Status: Expired due to Fees

• Current Assignee: Wistaria Trading Inc.
• Original Assignee: Wistaria Trading Inc.
• Inventors: Moskowitz, Scott A.
• Primary Examiner(s): Smithers, Matthew
• Assistant Examiner(s): Callahan, Paul
• Application Number:
  US14/666,754
• Publication Number:
  US 20150193770A1
• Time in Patent Office: 980 Days
• CPC Class Codes: G06F 1/266 Arrangements to supply power to external peripherals either directly from the computer or under computer control, e.g. supply of power through the communication port, computer controlled power-strips
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 7/582 Pseudo-random number generators
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0618 : Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04L 9/0643 : Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3228 : One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps

Abstract

The invention discloses a system for enhancing trust in transactions, most particularly in remote transactions between a plurality of transactional parties, for instance a seller and buyer(s) of goods and/or services over a public computer network such as the internet. Trust is disclosed to be a multivalent commodity, in that the trust that is to be enhanced relates to information about the subject matter of the transactions (e.g., the suitability of the goods and services sold), the bona fides of the supplier of the goods and services, the appropriateness of a pricing structure for a particular transaction or series of transactions, a quantum of additional transactional value that may be imparted to the transactional relationship, security of information exchange, etc.

Claims

1. A transaction device, comprising:

a central processing unit (CPU) for processing data;

a power supply for powering said transaction device;

a transmitter for transmitting data;

a receiver for receiving data;

a converter consisting of one of (1) a transducer for transducing physical information to an analog information and an A/D converter for converting said analog information to digital format and (2) a transducer for transducing physical information to digital format;

a memory for storing data in non-transitory form;

wherein said memory stores, in non-transitory form, data related to identity of said device holder, and at least one key;

a number generator for generating numbers;

a cipher; and

said cipher utilizing data comprising a key and data related to identity of a device holder to generate ciphered output data; and

where the cipher is utilized to establish a hierarchical set of one time signatures; and

where a transmitter transmits ciphered output data and a one-time signatures.

2. The device of claim 1 wherein said key is private key of a public-private key pair.

3. The device of claim 1 wherein said key is a steganographic key.

4. The device of claim 1 wherein said key is a cryptographic key.

5. A method for using a transaction device for dynamic authentication, wherein said transaction device comprises a central processing unit (CPU) for processing data;

a power supply for powering said transaction device;

a transmitter for transmitting data;

a receiver for receiving data;

a converter consisting of one of (1) a transducer for transducing physical information to an analog information and an A/D converter for converting said analog information to digital format and (2) a transducer for transducing physical information to digital format;

a memory for storing data in non-transitory form;

wherein said memory stores, in non-transitory form, data related to identity of said device holder, and at least one key;

a number generator for generating numbers;

a cipher; and

said method comprising;

said cipher utilizing data comprising a key and data related to identity of a device holder to generate ciphered output data and establishing a hierarchical set of one time signatures; and

said transmitter transmitting ciphered output data and a one-time signature.

6. The method of claim 5 wherein said key is private key of a public-private key pair.

7. The method of claim 5 wherein said key is a steganographic key.

8. The method of claim 5 wherein said key is a cryptographic key.

9. A method for conducting a transaction between at least two parties, comprising:

establishing, using a trusted transaction device, a cipher for identifying information, wherein the cipher is governed by at least the following elements;

a predetermined key, a predetermined message, and a predetermined carrier signal;

establishing, using the trusted transaction device and the cipher, a hierarchical set of one time signatures;

exchanging, using the trusted transaction device, information with at least one other party to the transaction;

identifying, using the trusted transaction device, information received from at least one other party to the transaction, as being associated with the transaction.

10. The method of claim 9 wherein said step of exchanging comprising transmitting a different one of said hierarchical set of one time signatures with said information.

11. A method for secure transaction, comprising:

receiving a request to process a transaction;

establishing, using a trusted transaction device, a cipher, wherein the cipher is governed by at least the following elements;

a predetermined key, a predetermined message, and a predetermined carrier signal;

establishing, using the trusted transaction device and the cipher, a hierarchical set of one time signatures;

identifying, using the trusted transaction device, the source of the request;

uniquely identifying, using the trusted transaction device, at least one term of the request, wherein the term is associated with one of price, service, selection or combinations thereof; and

storing the identification of the source of the request and the at least one term of the request, in non-transient memory of the trusted transaction device.

12. The method of claim 11 further comprising transmitting to said source of said request, one of said hierarchical set of one time signatures in association with information associated with said transaction.

13. A device for conducting trusted transactions between at least two parties, comprising:

a controller for receiving input data or outputting output data;

at least one input/output connection;

a microchip;

a cipher; and

a ciphered software application;

an analog to digital converter; and

memory storing a device identification code;

wherein said ciphered software application has been subject to a cipher for serialization;

wherein said device is configure to use said cipher to generate a hierarchical set of one time signatures;

wherein the device is configured so that said cipher receives output data, ciphers said output data using a key, to define ciphered output data, and transmits said ciphered output data to said at least one input/output connection.

14. The device of claim 13, wherein the device is configured so that said device transmits at least one of one time signatures with said ciphered output data.

15. A transaction device, comprising:

a central processing unit (CPU) for processing data;

a power supply for powering said transaction device;

a transmitter for transmitting data;

a receiver for receiving data;

a converter consisting of one of (1) a transducer for transducing physical information to an analog information and an A/D converter for converting said analog information to digital format and (2) a transducer for transducing physical information to digital format;

a memory for storing data in non-transitory form;

wherein said memory stores, in non-transitory form, data related to identity of a device holder, and at least one key;

a number generator for generating numbers; and

a cipher; and

wherein said transaction device is designed to respond to an action of said device holder of said device, by using said converter to convert physical information of said device holder to digital information of said device holder;

wherein said cipher is designed to use data comprising said key and said data related to identity of said device holder to generate ciphered output data;

wherein said cipher is designed to establish a hierarchical set of one time signatures; and

wherein said transmitter is designed to transmit said ciphered output data.

16. The device of claim 15, wherein the device is configured so that said device transmits at least one of one time signatures with said ciphered output data.