Transaction coordinator for digital certificate validation and other services

• US 8,818,903 B2
• Filed: 11/22/2006
• Issued: 08/26/2014
• Est. Priority Date: 09/10/1999
• Status: Expired due to Term

• Current Assignee: Charles Dulin, David Solo, Larry Nepomuceno, Mack Hicks, Mark Stirland
• Original Assignee: David Solo
• Inventors: Dulin, Charles, Solo, David, Hicks, Mack, Nepomuceno, Larry, Stirland, Mark
• Primary Examiner(s): KUCAB, JAMIE R
• Application Number:
  US11/603,755
• Publication Number:
  US 20070073621A1
• Time in Patent Office: 2,834 Days
• Field of Search: 705/50
• US Class Current: 705/64
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

System and methods for facilitating electronic commerce by securely providing certificate-related and other services, including certificate validation and warranty services. The system services include a certificate status check service and a warranty service. The certificate status check service allows a relying customer to validate a subscribing customer'"'"'s digital certificate. The warranty service allows the relying customer to receive a collateral-backed warranty that the subscribing customer'"'"'s digital certificate is valid, and also confirms the ability of the subscribing customer to pay. All participants and a root entity are provided with a transaction coordinator for combining services and operations into a single transaction having the qualities of atomicity, consistency, isolation, and durability. The transaction coordinator provides a single consistent interface for certificate-status messages and requests, as well as messages and requests relating to other services.

Claims

1. An apparatus for facilitating computerized transactions between at least a first entity and a second entity, the apparatus comprising:

a first server, said server comprising a first transaction coordinator associated with said first entity;

a second server, said server comprising a second transaction coordinator associated with said second entity and communicatively coupled to said first transaction coordinator via a communications network;

said first transaction coordinator comprising an interface module that communicates with said second transaction coordinator, said interface module comprising a transaction coordinator request manager component and a transport services component;

said first transaction coordinator further comprising, coupled to the interface module,

a set of service modules comprising a digital certificate status check module that validates digital certificates of said entities, a warranty service module that guarantees an identity of an entity that signs an electronic communication relating to a transaction, and a payment guarantee module that provides a first entity with confirmation of a second entity'"'"'s ability to fulfill a financial obligation; and

a set of core components comprising a logging component that provides non-repudiation and security auditing services, a billing component that creates and stores a transaction billing history for responses and requests received by the transaction coordinator, and a digital signature component that uses cryptographic processing to verify digital signatures.

2. The apparatus of claim 1 further comprising, coupled to the interface module, a transaction monitor that ensures that computerized transactions coordinated by the transaction coordinator exhibit atomicity;

wherein;

all actions required to complete a transaction succeed or all said actions fail; and

each transaction is an indivisible unit of work.

3. The apparatus of claim 1 wherein:

the transaction coordinator is a part of a public key infrastructure, and the transaction coordinator further comprises, coupled to the interface module, a transaction monitor that ensures that computerized transactions coordinated by the transaction coordinator exhibit consistency;

wherein;

after a transaction is executed, either the public key infrastructure is left in a correct stable state, or else the public key infrastructure returns to a state preceding initiation of the transaction.

4. The apparatus of claim 1 further comprising, coupled to the interface module, a transaction monitor that ensures that computerized transactions coordinated by the transaction coordinator exhibit isolation;

wherein;

each transaction is unaffected by other transactions executing concurrently.

5. The apparatus of claim 1 further comprising, coupled to the interface module, a transaction monitor that ensures that computerized transactions coordinated by the transaction coordinator exhibit durability;

wherein;

effects of each transaction are permanent after the transaction is performed.

6. The apparatus of claim 1 further comprising, coupled to the interface module, a component transaction monitor from the group of monitors consisting of Orbix OTM and BEA Weblogic.