Method, system and computer program product for protection of identity information in electronic transactions using attribute certificates

• US 20040225614A1
• Filed: 05/09/2003
• Published: 11/11/2004
• Est. Priority Date: 05/09/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kuehr-McLaren, David G., Arnold, Gordon K.
• Granted Patent: US 7,065,509 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Parties involved in a particular transaction in an E-marketplace each identify and submit to the E-marketplace relevant characteristics related to that transaction. The identification of the party is not revealed with this submission. To achieve this, an attribute certificate is created which contains attributes related to a buyer or seller'"'"'s potential participation in a transaction. The attributes that are selected pertain to specifics of the transaction and not to the certificate holder. Each of the attributes are verified by a trusted authority (e.g., the E-marketplace acting as an intermediary for the transaction) so that when the attribute certificate is supplied to a party, the party is assured that the information it contains is accurate. In this manner, parties to a negotiation in a particular transaction are able to know immediately and with a high level of assurance that certain critical elements to the proposed transaction are met (or are capable of being met). This information is made available to all who wish to participate in the bidding/negotiating process (as opposed to being available only when specifically authorized by the certificate owner) but without the need to identify the certificate owner.

Claims

1. A method of conducting an electronic commerce transaction, comprising the steps of:

creating an attribute certificate for each prospective participant to said transaction;

submitting each of said attribute certificates to a third party;

validating each of said attribute certificates; and

making all validated attribute certificates available to each prospective participant to said transaction.

2. A method as set forth in claim 1, wherein each of said attribute certificates contains only transaction information.

3. A method as set forth in claim 2, wherein said validation step is conducted by said third party.

4. A method as set forth in claim 3, wherein said transaction information comprises one or more transaction elements and wherein said validation step comprises at least the steps of:

checking the accuracy of each transaction element; and

deleting from said attribute certificate those transaction elements that are inaccurate.

5. A method as set forth in claim 3, wherein said transaction information comprises one or more transaction elements and wherein said validation step comprises at least the steps of:

checking the accuracy of each transaction element; and

deleting any attribute certificate that contains an inaccurate transaction element.

6. A method as set forth in claim 3, wherein said third party comprises an E-marketplace.

7. A method as set forth in claim 2, further comprising the steps of:

reading each validated attribute certificate; and

identifying potential partners to said transaction based on said transaction information contained in each read validated attribute certificate.

8. A method as set forth in claim 7, further comprising the steps of:

selecting at least one business partner from said identified potential partners; and

generating a solicitation to said third party requesting that said identified potential partner(s) be advised of said selection.

19. A computer program product as set forth in claim 2, wherein said validation step is conducted by said third party.

20. A computer program product as set forth in claim 19, wherein said transaction information comprises one or more transaction elements and wherein said validation step comprises:

computer-readable means for checking the accuracy of each transaction element; and

computer-readable means for deleting from said attribute certificate those transaction elements that are inaccurate.

21. A computer program product as set forth in claim 19, wherein said transaction information comprises one or more transaction elements and wherein said validation step comprises:

computer-readable means for checking the accuracy of each transaction element; and

computer-readable means for deleting any attribute certificate that contains an inaccurate transaction element.

22. A computer program product as set forth in claim 19, wherein said third party comprises an E-marketplace.

9. A system for conducting an electronic commerce transaction, comprising:

means for creating an attribute certificate for each prospective participant to said transaction;

means for submitting each of said attribute certificates to a third party;

means for validating each of said attribute certificates; and

means for making all validated attribute certificates available to each prospective participant to said transaction.

10. A system as set forth in claim 9, wherein each of said attribute certificates contains only transaction information.

11. A system as set forth in claim 10, wherein said validation step is conducted by said third party.

12. A system as set forth in claim 11, wherein said transaction information comprises one or more transaction elements and wherein said validation step comprises at least:

means for checking the accuracy of each transaction element; and

means for deleting from said attribute certificate those transaction elements that are inaccurate.

13. A system as set forth in claim 11, wherein said transaction information comprises one or more transaction elements and wherein said validation step comprises at least:

means for checking the accuracy of each transaction element; and

deleting any attribute certificate that contains an inaccurate transaction element.

14. A system as set forth in claim 11, wherein said third party comprises an E-marketplace.

15. A system as set forth in claim 10, further comprising:

means for reading each validated attribute certificate; and

means for identifying potential partners to said transaction based on said transaction information contained in each read validated attribute certificate.

16. A system as set forth in claim 15, further comprising:

means for selecting at least one business partner from said identified potential partners; and

means for generating a solicitation to said third party requesting that said identified potential partner(s) be advised of said selection.

17. A computer program product for conducting an electronic commerce transaction recorded on computer-readable storage medium, comprising:

computer-readable means for creating an attribute certificate for each prospective participant to said transaction;

computer-readable means for submitting each of said attribute certificates to a third party;

computer-readable means for validating each of said attribute certificates; and

computer-readable means for making all validated attribute certificates available to each prospective participant to said transaction.

18. A computer program product as set forth in claim 17, wherein each of said attribute certificates contains only transaction information.

23. A computer program product as set forth in claim 18, further comprising:

computer-readable means for reading each validated attribute certificate; and

computer-readable means for identifying potential partners to said transaction based on said transaction information contained in each read validated attribute certificate.

24. A computer program product as set forth in claim 23, further comprising:

computer-readable means for selecting at least one business partner from said identified potential partners; and

computer-readable means for generating a solicitation to said third party requesting that said identified potential partner(s) be advised of said selection.