System and method for transparently providing certificate validation and other services within an electronic transaction

• US 7,734,924 B2
• Filed: 01/26/2006
• Issued: 06/08/2010
• Est. Priority Date: 09/08/2000
• Status: Active Grant

• Current Assignee: IdenTrust, Inc. (Assa Abloy AB)
• Original Assignee: IdenTrust, Inc. (Assa Abloy AB)
• Inventors: Ahmed, Khaja E., Tallent, Guy S. Jr., Miller, Lawrence R.
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US11/341,078
• Publication Number:
  US 20060123227A1
• Time in Patent Office: 1,594 Days
• Field of Search: 173/156, 173/176, 705/44, 705/65, 705/26, 705/27
• US Class Current: 713/175
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification

Abstract

A system and method are disclosed for transparently providing certificate validation and other services without requiring a separate service request by either a relying customer or subscribing customer. In a preferred embodiment, after the subscribing customer digitally signs a document (e.g., a commercial document such as a purchase order), it forwards the document to a trusted messaging entity which validates the certificates of both the subscribing customer and relying customer and the respective system participants of which they are customers. If the certificates are valid, the trusted messaging entity appends a validation message to the digitally-signed document and forwards the document to the relying customer. A validation message is also preferably appended to a digitally-signed receipt from the relying customer and transmitted to the subscribing customer. In this way, both the relying customer and subscribing customer obtain certification of their respective counterparty to the transaction.

Claims

1. A method for providing at least one service via a communications network, said method comprising the steps of a trusted messaging entity:

receiving a first certificate that names a first participant and a second certificate that names a second participant, wherein a four-corner trust model comprises the first participant, the second participant and a root entity, said root entity being separately disposed from said first participant and said second participant, and comprising a root certification authority that issues digital certificates to the first participant and the second participant;

creating a first message, the first message comprising a validation request;

signing the first message with a private key associated with the first certificate;

transmitting the first message via the communications network to the second participant and the root entity, whereby the trusted messaging entity acts as an agent for the first participant, said first participant being a first disclosed principal of said agent;

creating a second message, the second message comprising a validation request;

signing the second message with a private key associated with the second certificate;

transmitting the second message via the communications network to the first participant and the root entity, whereby the trusted messaging entity acts as an agent for the second participant, said second participant being a second disclosed principal of said agent; and

receiving, from the root entity, at least one validation response to the first validation request.

2. A method for providing at least one service via a communications network, said method comprising the steps of a first participant:

providing a trusted messaging entity with a first certificate that names the first participant, said trusted messaging entity having received a second certificate that names a second participant, wherein a four-corner trust model comprises the first participant, the second participant and a root entity, said root entity being separately disposed from said first participant and said second participant, and comprising a root certification authority that issues digital certificates to the first participant and the second participant;

receiving, via the communications network, a message, said message comprising a validation request, said message having been created by the trusted messaging entity and signed by the trusted messaging entity with a private key associated with the second certificate, whereby the trusted messaging entity acts as an agent for the second participant, said second participant being a second disclosed principal of said agent; and

receiving, from the root entity, at least one validation response to the first validation request.