Trusted and secure techniques, systems and methods for item delivery and execution

• US 7,587,369 B2
• Filed: 07/27/2007
• Issued: 09/08/2009
• Est. Priority Date: 02/13/1995
• Status: Expired due to Fees

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Ginter, Karl L., Weber, Robert P., Spahn, Francis J., Shear, Victor H., Van Wie, David M.
• Primary Examiner(s): Brown; Christopher J
• Application Number:
  US11/829,553
• Publication Number:
  US 20090030768A1
• Time in Patent Office: 774 Days
• Field of Search: 705/75, 705/50, 713/176
• US Class Current: 705/75
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/24 : Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/389 : Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 : Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

Documents and other items can be delivered electronically from sender to recipient with a level of trustedness approaching or exceeding that provided by a personal document courier. A trusted electronic go-between can validate, witness and/or archive transactions while, in some cases, actively participating in or directing the transaction. Printed or imaged documents can be marked using handwritten signature images, seal images, electronic fingerprinting, watermarking, and/or steganography. Electronic commercial transactions and transmissions take place in a reliable, “trusted” virtual distribution environment that provides significant efficiency and cost savings benefits to users in addition to providing an extremely high degree of confidence and trustedness. The systems and techniques have many uses including but not limited to secure document delivery, execution of legal documents, and electronic data interchange (EDI).

Claims

1. A method for facilitating a transaction between at least a first party and a second party, the method comprising the steps of:

obtaining one or more electronic control sets that specify two or more conditions that must be satisfied in order to complete the transaction, the electronic control sets being configured to be enforced by tamper-resistant hardware in a first computer system and/or software stored in a memory of the first computer system and being executed by a processor of the first computer system;

receiving a secure container containing an electronic version of a contract between the first party and the second party, wherein

the step of obtaining the one or more electronic control sets comprises generating the one or more electronic control sets based, at least in part, on the contract;

receiving a first electronic notification that a first condition has been satisfied;

receiving a second electronic notification that a second condition has been satisfied;

determining that the two or more conditions have been satisfied; and

securely notifying at least the first party and the second party that the two or more conditions have been satisfied, wherein at least the first electronic notification and the second electronic notification are digitally signed.

2. The method of claim 1, further comprising the step of communicating with a first remote entity to determine whether the first condition has been satisfied.

3. The method of claim 2, in which the first condition is selected from the group consisting of:

deposit of funds into an account;

approval of the transaction by a third party; and

fulfillment of one or more legal requirements for performing the transaction.

4. The method of claim 1, further comprising the step of sending, to a first remote entity, a request to satisfy the first condition.

5. The method of claim 4, further comprising the step of communicating with the first remote entity to determine whether the first condition has been satisfied.

6. The method of claim 4, further comprising the step of sending, to a second remote entity, a request to satisfy the second condition.

7. The method of claim 1, further comprising the step of issuing one or more instructions upon determining that the two or more conditions have been satisfied.

8. The method of claim 7, in which at least one of the one or more instructions is selected from the group consisting of:

an instruction to deposit funds into an account of the first party;

an instruction to make a payment to a third party;

an instruction to notarize an electronic document associated with the transaction; and

an instruction to file an electronic document associated with the transaction with a governmental authority.

9. The method of claim 1, in which at least the first electronic notification is received in a secure electronic container.

10. The method of claim 1, further comprising the step of issuing one or more notifications that the first condition has been satisfied.

11. The method of claim 1, further comprising the step of authenticating at least one of the first and second parties.

12. The method of claim 1, wherein the transaction is the transfer of real property, the contract is a real estate purchase agreement, the first party is the seller, and the second party is the buyer.

13. A computer-readable storage medium comprising program code, the program code being operable, when executed by an electronic appliance, to cause the electronic appliance to perform steps comprising:

obtaining one or more electronic control sets that specify two or more conditions that must be satisfied in order to complete a transaction between at least a first party and a second party, the electronic control sets being configured to be enforced by tamper-resistant hardware and/or software running on the electronic appliance;

receiving a secure container containing an electronic version of a contract between the first party and the second party;

generating the one or more electronic control sets based, at least in part, on the contract;

receiving a first electronic notification that a first condition has been satisfied;

receiving a second electronic notification that a second condition has been satisfied;

determining that the two or more conditions have been satisfied; and

securely notifying at least the first party and the second party that the two or more conditions have been satisfied, wherein at least the first electronic notification and the second electronic notification are digitally signed.

14. The computer-readable storage medium of claim 13, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of communicating with a first remote entity to determine whether the first condition has been satisfied.

15. The computer-readable medium storage of claim 14, in which the first condition is selected from the group consisting of:

deposit of funds into an account;

approval of the transaction by a third party; and

fulfillment of one or more legal requirements for performing the transaction.

16. The computer-readable storage medium of claim 13, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of sending, to a first remote entity, a request to satisfy the first condition.

17. The computer-readable storage medium of claim 16, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of communicating with the first remote entity to determine whether the first condition has been satisfied.

18. The computer-readable storage medium of claim 16, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of sending, to a second remote entity, a request to satisfy the second condition.

19. The computer-readable storage medium of claim 13, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of issuing one or more instructions upon determining that the two or more conditions have been satisfied.

20. The computer-readable storage medium of claim 19, in which at least one of the one or more instructions is selected from the group consisting of:

an instruction to deposit funds into an account of the first party;

an instruction to make a payment to a third party;

an instruction to notarize an electronic document associated with the transaction; and

an instruction to file an electronic document associated with the transaction with a governmental authority.

21. The computer-readable storage medium of claim 13, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of issuing one or more notifications that the first condition has been satisfied.

22. The computer-readable storage medium of claim 13, further including program code that is operable, when executed by the electronic appliance, to cause the electronic appliance to perform the step of authenticating at least one of the first and second parties.

23. A system for facilitating a transaction between at least a first party and a second party, the system comprising:

an electronic appliance for obtaining one or more electronic control sets that specify two or more conditions that must be satisfied in order to complete the transaction, and receiving and opening a secure container containing an electronic version of a contract between the first party and the second party, the electronic appliance including tamper-resistant hardware and/or tamper-resistant software stored in a memory of the electronic appliance and being executed by a processor of the electronic appliance, wherein

the electronic appliance further comprises means for generating the one or more electronic control sets based, at least in part, on the contract;

means for receiving and opening a secure container containing an electronic version of a contract between the first party and the second party

means for receiving a first electronic notification that a first condition has been satisfied;

means for receiving a second electronic notification that a second condition has been satisfied;

means for determining that the two or more conditions have been satisfied;

means for securely notifying at least the first party and the second party that the two or more conditions have been satisfied; and

means for verifying a first digital signature associated with the first electronic notification and a second digital signature associated with the second electronic notification.

24. The system of claim 23, further comprising means for communicating with a first remote entity to determine whether the first condition has been satisfied.

25. The system of claim 23, further comprising means for sending, to a first remote entity, a request to satisfy the first condition.

26. The system of claim 25, further comprising means for communicating with the first remote entity to determine whether the first condition has been satisfied.

27. The system of claim 25, further comprising means for sending, to a second remote entity, a request to satisfy the second condition.

28. The system of claim 23, further comprising means for issuing one or more instructions upon determining that the two or more conditions have been satisfied.

29. The system of claim 28, in which at least one of the one or more instructions is selected from the group consisting of:

an instruction to deposit funds into an account of the first party;

an instruction to make a payment to a third party;

an instruction to notarize an electronic document associated with the transaction; and

an instruction to file an electronic document associated with the transaction with a governmental authority.

30. The system of claim 23, further comprising means for opening a secure electronic container containing the first electronic notification.

31. The system of claim 23, further comprising means for issuing one or more notifications that the first condition has been satisfied.

32. The system of claim 23, further comprising means for authenticating at least one of the first and second parties.