Accessing information on a network using an extended network universal resource locator

• US 7,334,128 B2
• Filed: 05/31/2005
• Issued: 02/19/2008
• Est. Priority Date: 12/23/1999
• Status: Expired due to Fees

• Current Assignee: Checkfree Corporation (Fiserv Incorporated)
• Original Assignee: Checkfree Corporation (Fiserv Incorporated)
• Inventors: Hobday, Kenneth, Ganesan, Ravi, Lewis, Matt
• Primary Examiner(s): NGUYEN, MINH DIEU T
• Application Number:
  US11/139,512
• Publication Number:
  US 20050222953A1
• Time in Patent Office: 994 Days
• Field of Search: 713/168, 713/193, 705/40, 705/53, 705/77, 709/217
• US Class Current: 713/168
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

To facilitate access to information on a network, an extended network universal resource locator is generated. The generated extended network universal resource locator has (i) a network address, such as an Internet URL, at which stored information, such as detailed bill information, can be accessed on a network, (ii) identity information associated with a first network entity and an integrity value corresponding to the identity information, and (iii) voucher information indicating that a third network entity has authenticated the first network entity and that transmission of the extended network universal resource locator by the third network entity to the first network entity occurred at a particular time. The identity information could, for example, include an identification of the stored information and an account number associated with the first network entity. The integrity value could, for example, be a hash of the identity information. The identity information and the integrity value are encrypted with a first crypto-key of a second network entity. The voucher information is encrypted with a second crypto-key of the third network entity. The transmission time information is preferably a timestamp. The extended network universal resource locator is transmitted via the network to facilitate access, by the first entity, to the information stored at the network address.

Claims

1. A method for facilitating access to information on a network, comprising:

generating an extended network universal resource locator having (i) a network address at which stored information can be accessed on a network, (ii) identity information associated with a first network entity and an integrity value corresponding to the identity information, the identity information and the integrity value being encrypted with a first crypto-key of a second network entity, and (iii) voucher information indicating that a third network entity has authenticated the first network entity and that transmission of the extended network universal resource locator by the third network entity to the first network entity occurred at a particular time, the voucher information being encrypted with a second crypto-key of the third network entity; and

transmitting the extended network universal resource locator via the network to facilitate access, by the first network entity, to the information stored at the network address;

wherein the extended network universal resource locator is generated to also have relationship information indicating that the encrypted identity information and integrity value were received by a fourth network entity from the second network entity and transmitted by the fourth network entity to the third network entity, the relationship information being encrypted with a third crypto-key of the fourth network entity.

2. The method according to claim 1, wherein:

the first crypto-key is a symmetric crypto-key known only to the second network entity;

the second crypto-key is a first non-symmetric crypto-key associated with the third network entity; and

the third crypto-key is a second non-symmetric crypto-key associated with the fourth network entity.

3. The method according to claim 2, wherein;

the first non-symmetric crypto-key is one of a private crypto-key or a public crypto-key of a joint private-public crypto-key pair associated with the third network entity; and

the second non-symmetric crypto-key is one of a private crypto-key or a public crypto-key of a joint private-public crypto-key pair associated with the fourth network entity.

4. The method according to claim 1, wherein:

the stored information is detailed bill information;

the network address is an Internet URL;

the identity information includes an identification of the stored information and an account number associated with the first network entity;

the integrity value is a hash of the identity information; and

the transmission time information is a timestamp.

5. The method according to claim 1, wherein:

the second network entity controls access to the stored information;

the fourth network entity controls access to other information which is transmitted with the extended network universal resource locator by the third network entity to the first network entity; and

the third network entity controls access by the first network entity to other network entities.

6. The method according to claim 5, wherein:

the stored information is detailed bill information associated with the first entity; and

the other information is summary bill information associated with the first network entity.

7. An article of manufacture for facilitating access to information on a network, comprising:

a memory; and

computer programming stored on the memory, wherein the stored computer programming is configured to be readable from the memory and thereby cause a computer to operate so as to;

generate an extended network universal resource locator having (i) a network address at which stored information can be accessed on a network, (ii) identity information associated with a first network entity and an integrity value corresponding to the identity information, the identity information and the integrity value being encrypted with a first crypto-key of a second network entity, and (iii) voucher information indicating that a third network entity has authenticated the first network entity and that transmission of the extended network universal resource locator by the third network entity to the first network entity occurred at a particular time, the voucher information being encrypted with a second crypto-key of the third network entity; and

transmit the extended network universal resource locator via the network to facilitate access, by the first network entity, to the information stored at the network address;

wherein the extended network universal resource locator is generated to also have relationship information indicating that the encrypted identity information and integrity value were received by a fourth network entity from the second network entity and transmitted by the fourth network entity to the third network entity, the relationship information being encrypted with a third crypto-key of the fourth network entity.

8. The article of manufacture according to claim 7, wherein:

the first crypto-key is a symmetric crypto-key known only to the second network entity;

the second crypto-key is a first non-symmetric crypto-key associated with the third network entity; and

the third crypto-key is a second non-symmetric crypto-key associated with the fourth network entity.

9. The article of manufacture according to claim 8, wherein:

the first non-symmetric crypto-key is one of a private crypto-key or a public crypto-key of a joint private-public crypto-key pair associated with the third network entity; and

the second non-symmetric crypto-key is one of a private crypto-key or a public crypto-key of a joint private-public crypto-key pair associated with the fourth network entity.

10. The article of manufacture according to claim 7, wherein:

the stored information is detailed bill information;

the network address is an Internet URL;

the identity information includes an identification of the stored information and an account number associated with the first network entity;

the integrity value is a hash of the identity information; and

the transmission time information is a timestamp.

11. The article of manufacture according to claim 7, wherein:

the second network entity controls access to the stored information;

the fourth network entity controls access to other information which is transmitted with the extended network universal resource locator by the third network entity to the first network entity; and

the third network entity controls access by the first network entity to other network entities.

12. The article of manufacture according to claim 11, wherein:

the stored information is detailed bill information associated with the first network entity; and

the other information is summary bill information associated with the first network entity.