Method and system for the supply of data, transactions and electronic voting

• US 10,015,149 B2
• Filed: 09/12/2012
• Issued: 07/03/2018
• Est. Priority Date: 11/06/2001
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Dare, Peter Roy, Owlett, John, Tyabji, Imran Faiz
• Primary Examiner(s): Kucab, Jamie
• Application Number:
  US13/611,967
• Publication Number:
  US 20130007444A1
• Time in Patent Office: 2,120 Days
• Field of Search: None
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity'"'"'s electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity'"'"'s electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Claims

1. A system for providing a digital signature based on a digital certificate, comprising one or more non-transitory computer readable hardware storage devices having program code embodied therewith, the program code executable by one or more computing devices to cause the one or more computing devices to:

receive, from a computer network via a messaging system, signed data generated with the digital signature using a private key corresponding to a public key, the signed data including one or more attributes identifying the digital certificate to be generated; and

generate, based on the signed data received, the digital certificate signed with an electronic signature of a signing entity, the digital certificate including;

one or more attributes of a described entity which are sufficient to obtain the public key;

one or more attributes of the digital certificate which include one or more attributes identifying a signing entity; and

an indicated period of validity of the digital certificate which begins earlier than a time of generation of the digital certificate

wherein the period of validity of the digital certificate is a short period during which the digital signature was generated.

2. The system of claim 1, wherein the signed data comprises multiple objects each signed with a respective digital signature identifying the digital certificate.

3. The system of claim 1, wherein the one or more attributes identifying the digital certificate to be generated given in the digital signature include a serial number.

4. The system of claim 3, wherein the serial number is a lowest available serial number which can be used for the next digital certificate to be generated.

5. The system of claim 1, wherein data indicated in the digital certificate includes confirmation of a payment or debt due from the described entity identified in the digital certificate to a relying entity identified in the digital certificate.

6. The system of claim 1, wherein the digital certificate includes:

an indication of data relating to the described entity which is to be supplied;

an indication of one or more sources for the data to be supplied; and

one or more attributes identifying one or more relying entities to which the data is to be supplied.

7. The system of claim 1, wherein the digital certificate includes an indication of identification data.

8. The system of claim 7, wherein the digital certificate includes a confirmation of a voter'"'"'s right to vote.

9. The system of claim 8, wherein the identification data includes information selected from the group consisting of a name, an address, a date of birth, a nationality, a length of residence, and a non-membership of prohibited classes of the voter.

10. The system of claim 1, wherein the one or more attributes of the described entity are selected from the group consisting of a name, a date of birth and an address.

11. The system of claim 1, wherein the digital certificate is linked to property.

12. The system of claim 11, wherein the digital signature provides ownership of the property.

13. The system of claim 12, wherein the link is carried with the property.

14. The system of claim 5, wherein the digital certificate authorizes the relying entity to obtain the data relating to the described entity.