Method and system for conducting a transaction over a network

• US 7,085,744 B2
• Filed: 12/08/2000
• Issued: 08/01/2006
• Est. Priority Date: 12/08/2000
• Status: Expired due to Term

• Current Assignee: HCL Technologies Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Morrison, Michael C.
• Primary Examiner(s): Abdi, Kambiz
• Application Number:
  US09/733,494
• Publication Number:
  US 20020073047A1
• Time in Patent Office: 2,062 Days
• Field of Search: 713/171, 713 15-168, 713/181, 705/71, 705/44, 705 50- 52, 705/64, 705/75, 340/5.1, 380277-286
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A method and system for conducting a transaction over a network is disclosed. The network includes a first system and a second system. The method and system comprise initiating a transaction, comparing a value of the first system with a value of the second system and continuing the transaction based on the comparison. Through the use of the present invention, a client can download for-fee files as often as necessary in spite of potential lost connections. Consequently, the client can download files he or she has paid for with the assurance that he or she will pay just once because payment is not for the content, but for an encryption key that is capable of being utilized by the client system to subsequently decrypt the downloaded file.

Claims

1. A method for conducting a transaction between a first computer system and a second computer system, the method comprising the steps of:

(a) receiving in the second computer system a request from a user of the first computer system to download data from the second computer system, the data to be encrypted with an encryption key prior to being downloaded;

(b) determining by the second computer system whether the request represents a new transaction or an incomplete transaction by comparing a first value stored in the first computer system with a part of a second value stored in the second system, the first value being a portion of the encryption key, the second value being a whole portion of the encryption key; and

(c) if wherein the request represents an incomplete transaction indicated by the portion of the encryption key stored in the first computer not matching any part of the whole portion of the encryption key stored in the second computer, and completing the incomplete transaction, wherein the user is not charged duplicate fees associated with starting a new transaction completing the incomplete transaction.

2. The method of claim 1 wherein the first system comprises a client system and the second system comprises a server system.

3. The method of claim 2 wherein the first value of the client system is stored in a persistent client-side data file.

4. The method of claim 3 wherein the persistent client-side data file comprises a cookie.

5. The method of claim 4 wherein step b) further comprises:

b1) allowing the server system to compare the first value in the cookie with a part of the second value in the server system.

6. The method of claim 1, wherein the request represents a new transaction if the first value does not match a part of the second value, the method further comprising:

d) if the request represents a new transaction, generating a new encryption key by the second system, wherein the new encryption key is associated with the new transaction;

e) storing a first portion of the new encryption key in the first computer system as the first value; and

f) storing the whole new encryption key on the second computer system as the second value.

7. The method of claim 6 further comprising:

g) encrypting the requested data with the whole new encryption key;

h) transmitting the encrypted data from the second computer system to the first computer system; and

i) after the encrypted data has been transmitted, sending a remaining portion of the new encryption key from the second computer system to the first computer system,

wherein the first computer system combines the first portion and the remaining portion of the new encryption key to form the whole new encryption key and utilizes the whole new encryption key to decrypt the encrypted data.

8. The method of claim 7 further comprising:

j) after the encrypted data has been transmitted and prior to sending the remaining portion of the new encryption key, allowing the user to provide payment for the whole new encryption key.

9. The method of claim 1, wherein the first value is a first portion of an encryption key and the second value is a whole encryption key, and step c) further comprises:

c1) encrypting the requested data with the whole encryption key;

c2) transmitting the encrypted data from the second computer system to the first computer system; and

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key from the second computer system to the first computer system, whereby the first computer system combines the first portion and the remaining portion of the encryption key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted data.

10. The method of claim 9, wherein step (c) further comprises:

c4) after the encrypted data has been transmitted and prior to sending the remaining portion of the encryption key, allowing the user to provide payment for the whole encryption key.

11. A system for conducting a transaction between a first computer system and a second computer system, the system comprising:

means in the second computer system for receiving a request from a user of the first computer system to download data from the second computer system, the data to be encrypted with an encryption key prior to being downloaded;

means for determining by the second computer system whether the request represents a new transaction or an incomplete transaction by comparing a first value stored in the first computer system with a cart of a second value stored in the second system, the first value being a portion of the encryption key, the second value being a whole portion of the encryption key; and

means for completing the incomplete transaction if the request represents an incomplete transaction, the incomplete transaction being indicated by the portion of the encryption key stored in the first computer not matching any part of the whole portion of the encryption key stored in the second computer,

wherein the user is not charged duplicate fees associated with starting a new transaction completing the incomplete transaction.

12. The system of claim 11 wherein the first system comprises a client system and the second system comprises a server system.

13. The system of claim 12 wherein the first value of the client system is stored in a persistent client-side data file.

14. The system of claim 13 wherein the persistent client-side data file comprises a cookie.

15. The system of claim 14 wherein the means for determining further comprises:

means for allowing the server system to compare the first value in the cookie with a part of the second value in the server system.

16. The system of claim 11 wherein the request represents a new transaction if the first value does not match a part of the second value and wherein the system further comprises:

means in the second system for generating a new encryption key, wherein the new encryption key is associated with the new transaction;

means in the second system for storing a first portion of the new encryption key in the first computer system as the first value; and

means in the second system for storing the whole new encryption key on the second computer system as the second value.

17. The system of claim 16 further comprising:

means for encrypting the requested data with the whole new encryption key;

means in the second computer system for transmitting the encrypted data from the second computer system to the first computer system; and

means in the second computer system for sending a remaining portion of the new encryption key from the second computer system to the first computer system, whereby the first computer system combines the first portion and the remaining portion of the new encryption key to form the whole new encryption key and utilizes the whole new encryption key to decrypt the encrypted data.

18. The system of claim 17 further comprising:

means for allowing the user to provide payment for the whole new encryption key after the encrypted data has been transmitted and prior to sending the remaining portion of the new encryption key.

19. The system of claim 11, wherein the first value is a first portion of an encryption key and the second value is a whole encryption key, and the means for completing the incomplete transaction comprises:

means for encrypting the requested data with the whole encryption key;

means in the second computer system for transmitting the encrypted data from the second computer system to the first computer system; and

means in the second computer system for sending a remaining portion of the encryption key from the second computer system to the first computer system,

whereby the first computer system combines the first portion and the remaining portion of the encryption key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted information.

20. The system of claim 19 wherein the means for completing the incomplete transaction further includes means for allowing the user to provide payment for the whole encryption key after the encrypted data has been transmitted and prior to sending the remaining portion of the encryption key.

21. A computer readable medium containing program instructions for conducting a transaction between a first computer system and a second computer system, the program instructions for:

(a) receiving in the second computer system a request from a user of the first computer system to download data from the second computer system, the data to be encrypted with an encryption key prior to being downloaded;

(b) determining by the second computer system whether the request represents a new transaction or an incomplete transaction by comparing a first value stored in the first computer system with a part of a second value stored in the second system, the first value being a portion of the encryption key, the second value being a whole portion of the encryption key; and

(c) if wherein the request represents an incomplete transaction indicated by the portion of the encryption key stored in the first computer not matching any part of the whole portion of the encryption key stored in the second computer, and completing the incomplete transaction, wherein the user is not charged duplicate fees associated with starting a new transaction completing the incomplete transaction.

22. The computer readable medium of claim 21 wherein the first system comprises a client system and the second system comprises a server system.

23. The computer readable medium of claim 22 wherein the first value of the client system is stored in a persistent client-side data file.

24. The computer readable medium of claim 23 wherein the persistent client-side data file comprises a cookie.

25. The computer readable medium of claim 24 wherein instruction b) further comprises:

b1) allowing the server system to compare the first value in the cookie with a part of the second value in the server system.

26. The computer readable medium of claim 21, wherein the request represents a new transaction if the first value does not match a part of the second value, the method further comprising:

d) if the request represents a new transaction, generating a new encryption key by the second system, wherein the new encryption key is associated with the new transaction;

e) storing a first portion of the new encryption key in the first computer system as the first value; and

f) storing the whole new encryption key on the second computer system as the second value.

27. The computer readable medium of claim 26 further comprising:

g) encrypting the requested data with the whole new encryption key;

h) transmitting the encrypted data from the second computer system to the first computer system; and

i) after the encrypted data has been transmitted, sending a remaining portion of the new encryption key from the second computer system to the first computer system,

wherein the first computer system combines the first portion and the remaining portion of the new encryption key to form the whole new encryption key and utilizes the whole new encryption key to decrypt the encrypted data.

28. The computer readable medium of claim 27 further comprising:

j) after the encrypted data has been transmitted and prior to sending the remaining portion of the new encryption key, allowing the user to provide payment for the whole new encryption key.

29. The computer readable medium of claim 21 wherein the first value is a first portion of an encryption key and the second value is a whole encryption key, and instruction c) further comprises:

c1) encrypting the requested data with the whole encryption key;

c2) transmitting the encrypted data from the second computer system to the first computer system; and

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key from the second computer system to the first computer system, whereby the first computer system combines the first portion and the remaining portion of the encryption key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted data.

30. The computer readable medium of claim 29, wherein instruction (c) further comprises:

c4) after the encrypted data has been transmitted and prior to sending the remaining portion of the encryption key, allowing the user to provide payment for the whole encryption key.

31. A method for conducting a transaction between a first computer system and a second computer system, the method comprising the steps of:

(a) receiving in the second computer system a request from a user of the first computer system to download data from the second computer system;

(b) determining by the second computer system whether the request represents a new transaction or an incomplete transaction by comparing a first value stored in the first computer system with a part of a second value stored in the second system; and

(c) if the request represents an incomplete transaction, completing the incomplete transaction, wherein the user is not charged duplicate fees associated with starting a new transaction completing the incomplete transaction;

wherein the first value is a first portion of an encryption key and the second value is a whole encryption key, and step c) further comprises;

c1) encrypting the requested data with the whole encryption key;

c2) transmitting the encrypted data from the second computer system to the first computer system; and

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key from the second computer system to the first computer system, whereby the first computer system combines the first portion and the remaining portion of the encryption key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted data.

32. A system for conducting a transaction between a first computer system and a second computer system, the system comprising:

means in the second computer system for receiving a request from a user of the first computer system to download data from the second computer system;

means for determining by the second computer system whether the request represents a new transaction or an incomplete transaction by comparing a first value stored in the first computer system with a part of a second value stored in the second system; and

means for completing the incomplete transaction if the request represents an incomplete transaction, wherein the user is not charged duplicate fees associated with starting a new transaction completing the incomplete transaction;

wherein the first value is a first portion of an encryption key and the second value is a whole encryption key, and the means for completing the incomplete transaction comprises;

means for encrypting the requested data with the whole encryption key;

means in the second computer system for transmitting the encrypted data from the second computer system to the first computer system; and

means in the second computer system for sending a remaining portion of the encryption key from the second computer system to the first computer system,

whereby the first computer system combines the first portion and the remaining portion of the encryption key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted information.

33. A computer readable medium containing program instructions for conducting a transaction between a first computer system and a second computer system, the program instructions for:

(a) receiving in the second computer system a request from a user of the first computer system to download data from the second computer system;

(b) determining by the second computer system whether the request represents a new transaction or an incomplete transaction by comparing a first value stored in the first computer system with a part of a second value stored in the second system; and

(c) if the request represents an incomplete transaction, completing the incomplete transaction, wherein the user is not charged duplicate fees associated with starting a new transaction completing the incomplete transaction;

wherein the first value is a first portion of an encryption key and the second value is a whole encryption key, and instruction c) further comprises;

c1) encrypting the requested data with the whole encryption key;

c2) transmitting the encrypted data from the second computer system to the first computer system; and

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key from the second computer system to the first computer system, whereby the first computer system combines the first portion and the remaining portion of the encryption key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted data.