US5521980A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Privacy-protected transfer of electronic information
Assignee: Radialpoint Inc
•
Filing: 1994-02-28
•
Granted: 1996-05-28
•
Expires: 2014-02-28
Abstract
Abstract Cryptographic apparatus and means are disclosed for each of three types of participants in an electronic system for privacy-protected transfer of certified information. This invention reveals protocols that improve efficiency and security in such systems, and allows a variety of useful extensions in functionality without difficulty. This is achieved by a restrictive blind signature protocol in combination with a testing protocol. The restrictive blind signature protocol allows the certifying party to encode data into certified information that it provides to a receiving party, such that it cannot be altered or modified by the receiving party. The testing protocol enables parties to prove a variety of characteristics about the encoded data in their certified information.
Inventors
- 👤 Stefanus A. Brands
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 21:58
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/04; G06Q20/06; G06Q20/30; G06Q20/36; G06Q20/367; G06Q20/3678; G06Q20/38; G06Q20/381; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; H; H04; H04L; H04L9/00; H04L9/30; H04L9/3006; H04L9/302; H04L9/3066; H04L9/32; H04L9/3247; H04L9/3257; G06F; G06F7/00; G06F7/60; G06F7/72; G06F7/724; G06F7/725; H04L2209/00; H04L2209/26; H04L2209/42; H04L2209/56
Claims Analysis
Total Claims: 59
Claim 1
Independent Claim
244 words
A method for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that a representation, known by the first party, of at least one number in the vector of numbers, contains the information to be certified, the method comprising the steps of: generating by the second party, a signal representative of a secret key and a corresponding public key, and providing a specification of the correspondence between the signals representative of the digital certificates and vectors of numbers with respect to the public key; randomly transforming by the first party, signals representative of the information to be certified, into a vector of numbers, such that the first party knows a representation of at least one number in the vector of numbers, and the representation contains the information to be certified; computing by the first party, challenge information, and transmitting signals representative of the challenge information to the second party; computing by the second party, response information based on at least the challenge information and the secret key, and transmitting signals representative of the response information to the first party; and computing by the first party, based on at least the received response information, a digital certificate corresponding to the vector of numbers.
Claim 2
Independent Claim
244 words
A method for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that a representation, known by the first party, of at least one number in the vector of numbers, contains the information to be certified, the method comprising the steps of: generating by the second party, a signal representative of a secret key and a corresponding public key, and providing a specification of the correspondence between the signals representative of the digital certificates and vectors of numbers with respect to the public key; randomly transforming by the first party, signals representative of the information to be certified, into a vector of numbers, such that the first party knows a representation of at least one number in the vector of numbers, and the representation contains the information to be certified; computing by the first party, challenge information, and transmitting signals representative of the challenge information to the second party; computing by the second party, response information based on at least the challenge information and the secret key, and transmitting signals representative of the response information to the first party; and computing by the first party, based on at least the received response information, a digital certificate corresponding to the vector of numbers.
Claim 3
Dependent Claim
41 words
A method as in claim 1, wherein the vector of numbers comprises the at least one number of which the first party knows a representation, and additional numbers, of each of which the first party knows a substantially randomly generated representation.
Claim 4
Dependent Claim
20 words
A method as in claim 1, wherein the information to be certified has previously been certified by the second party.
Claim 5
Dependent Claim
43 words
A method as in claim 2, wherein the information to be certified is a combination of information that has previously been certified by the second party and values by which the information that has previously been certified by the second party, is updated.
Claim 6
Dependent Claim
19 words
A method as in claim 1, wherein the vector of numbers represents a digital pseudonym of the first party.
Claim 7
Dependent Claim
18 words
A method as in claim 1, wherein the first party comprises a third party and a fourth party.
Claim 8
Dependent Claim
36 words
A method as in claim 1, wherein the specification provided by the second party is sufficient for the first party to compute digital certificates corresponding to vectors of numbers, without further assistance of the second party.
Claim 9
Dependent Claim
118 words
A method as in claim 1, wherein a representation of a number, m, is a vector of numbers, (a 1 , . . . , a k ; a k+1 ), such that m+Y 1 a .sbsp.1. . . Y k a .sbsp.k a v k+1 where k≧1, m is a number in a group, Z n *, where n is a product of at least two distinct prime numbers, Y 1 , . . . , Y k are numbers in Z n *, a 1 , . . . , a k are numbers in a ring, Z v , where v is a positive number, and a k+1 is a number in Z n *.
Claim 10
Dependent Claim
131 words
A method as in claim 8, wherein the public key comprises a number, X, in Z n *, and a hash-function H; the secret key comprises the v th root modulo n of each of the numbers, X,Y 1 , . . . , Y k , or, alternatively, the prime factorization of the number, n; and the correspondence between a digital certificate and a vector of numbers with respect to the public key is specified according to b v =(Xm) c a or, alternatively, according to b v =Xm(a) c , where a and b are numbers in Z n *, and c denotes H(m,B 1 , . . . , B 1 ,a), where (m,B 1 , . . . , B 1 ) is the vector of numbers.
Claim 11
Dependent Claim
93 words
A method as in claim 1, wherein a representation of a number, m, is a vector of numbers, (a 1 , . . . ,a k ), such that m=g 1 a .sbsp.1. . . g k a .sbsp.k, where k≧2, m is a number in a group, G q , of order q, where q is a prime number, g 1 , . . . , g k are numbers in G q , and a 1 , . . . , a k are numbers in the ring, Z q .
Claim 12
Dependent Claim
121 words
A method as in claim 10, wherein the public key comprises two numbers, g and h, in G q , and a hash-function H; the secret key comprises the discrete logarithm, in Z q , of h with respect to g; and the correspondence between a digital certificate and a vector of numbers with respect to the public key is specified according to g r =(hm) c a or, alternatively, according to g r =hm(a) c , where a is a number in G q , c denotes H(m,B 1 , . . . ,B 1 ,a), where (m,B 1 , . . . ,B 1 ) is the vector of numbers, and r is a number in Z q .
Claim 13
Dependent Claim
136 words
A method as in claim 10, wherein the public key comprises two numbers, g and h, in G q , and a hash-function H; the secret key comprises the discrete logarithm, in Z q , of h with respect to g; and the correspondence between a digital certificate and a vector of numbers with respect to the public key is specified according to g r =h c a and m r =z c b, or, alternatively, according to g r =ha c and m r =za c , where z, a, and b, are numbers in G q , c denotes H(m,B 1 , . . . , B 1 ,a), where (m,B 1 , . . . , B 1 ) is the vector of numbers, and r is a number in Z q .
Claim 14
Independent Claim
214 words
A method for a first party which knows a first representation, where a first representation is a representation of at least one number in a vector of numbers with respect to a first function, to transmit to a third party a signal constituting a second representation, where a second representation is a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the first party having previously generated a signal representative of a digital certificate corresponding to the vector of numbers with respect to a public key of a second party, the method comprising the steps of: providing by the first party to the third party, signals representative of the vector of numbers and the digital certificate; computing by the first party, in response to challenge information, response information based on at least the challenge information and the second representation, and transmitting signals representative of the response information to the third party; and verifying by the third party, that the digital certificate corresponds to the vector of numbers with respect to the public key and that the response information corresponds to the challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 15
Independent Claim
214 words
A method for a first party which knows a first representation, where a first representation is a representation of at least one number in a vector of numbers with respect to a first function, to transmit to a third party a signal constituting a second representation, where a second representation is a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the first party having previously generated a signal representative of a digital certificate corresponding to the vector of numbers with respect to a public key of a second party, the method comprising the steps of: providing by the first party to the third party, signals representative of the vector of numbers and the digital certificate; computing by the first party, in response to challenge information, response information based on at least the challenge information and the second representation, and transmitting signals representative of the response information to the third party; and verifying by the third party, that the digital certificate corresponds to the vector of numbers with respect to the public key and that the response information corresponds to the challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 16
Dependent Claim
25 words
A method as in claim 13, wherein the second function is an identity function and the third function is the same as the first function.
Claim 17
Dependent Claim
19 words
A method as in claim 13, wherein the second and third functions determine a property of the first representation.
Claim 18
Dependent Claim
21 words
A method as in claim 13, wherein the challenge information is a one-way hashfunction of at least the vector of numbers.
Claim 19
Dependent Claim
45 words
A method as in claim 13, wherein knowing the correspondence between digital certificates and vectors of numbers with respect to the public key, is sufficient for the first party to compute digital certificates corresponding to vectors of numbers, without further assistance of the second party.
Claim 20
Dependent Claim
59 words
A method as in claim 13, wherein the first party also transmits to the third party a signal representative of an additional number, of which it knows a substantially random representation with respect to the third function; and the response information is a linear combination, determined by the challenge information, of the second representation and the substantially random representation.
Claim 21
Dependent Claim
82 words
A method as in claim 13, wherein the vector of numbers comprises the at least one number of which the first party knows a representation with respect to the first function, and additional numbers, of each of which the first party knows a substantially randomly generated representation with respect to the third function; and the response information is a linear combination, determined by the challenge information, of the second representation and the substantially randomly generated representation of one of the additional numbers.
Claim 22
Dependent Claim
18 words
A method as in claim 13, wherein the first party comprises a fourth party and a fifth party.
Claim 23
Dependent Claim
23 words
A method as in claim 13, wherein the first representation contains a set of credentials that has been certified by the second party.
Claim 24
Dependent Claim
125 words
A method as in claim 13, wherein a representation of a number, m, with respect to the third function is a vector of numbers, (a 1 , . . . , a k ; a k+1 ), such that m=Y 1 a .spsb.1. . . Y k a .spsb.k a k+1 v , where k≧0, m is a number in a group, Z n *, where n is a product of at least two distinct prime numbers, Y 1 , . . . , Y k are numbers in Z n *, a 1 , . . . , a k are numbers in a ring, Z v , where v is a positive number, and a k+1 is a number in Z n *.
Claim 25
Dependent Claim
110 words
A method as in claim 22, wherein the first function maps a vector of numbers, (b 1 , . . . , b j ; b j+1 ), to the number Z 1 b .sbsp.1 . . . Z j b .sbsp.j b j+1 v , for j≧1, where Z 1 , . . . Z j , are numbers in Z n * that have been determined by the second party, and each of the numbers, Y 1 , . . . , Y k , is a product of powers of numbers in the set, {Z 1 , . . . , Z j }, and their inverses.
Claim 26
Dependent Claim
101 words
A method as in claim 13, wherein a representation of a number, m, with respect to the third function is a vector of numbers, (a 1 , . . . , a k ), such that m=g 1 a .sbsp.1 . . . g k a .sbsp.k, where k≧1, m is a number in a group, G q , of order q, where q is a prime number, g 1 , . . . , g k are numbers in G q , and a 1 , . . . , a k are numbers in the ring, Z q .
Claim 27
Dependent Claim
102 words
A method as in claim 24 wherein the first function maps a vector of numbers, (b 1 , . . . , b j ), to the number e 1 b .sbsp.1 . . . e j b .sbsp.j, for j≧2, where e 1 , . . . , e j are numbers in G q that have been determined by the second party, and each of the numbers, g 1 , . . . , g k , is a product of powers of numbers in the set, {e 1 , . . . , e j }, and their inverses.
Claim 28
Independent Claim
458 words
A method for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that the information to be certified is contained in a representation known by the first party of at least one number in the vector of numbers with respect to a first function, and then to transmit to a third party a signal constituting a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the method comprising the steps of: generating by the second party, a signal representative of a first secret key and a corresponding first public key, and providing a specification of the correspondence between the signals representative of the digital certificates and vectors of numbers with respect to the first public key; randomly transforming by the first party, signals representative of the information to be certified, into a vector of numbers, such that the first party knows a first representation, where a first representation is a representation of at least one number in the vector of numbers with respect to the first function, and the first representation contains the information to be certified; computing by the first party, first challenge information, and transmitting signals representative of the first challenge information to the second party; computing by the second party, first response information based on at least the first challenge information and the first secret key, and transmitting signals representative of the first response information to the first party; computing by the first party, based on at least the received first response information, a digital certificate corresponding to the vector of numbers; transmitting by the first party to the third party, signals representative of the vector of numbers and the digital certificate; computing by the first party, in response to second challenge information, second response information based on at least the second challenge information and a second representation, where a second representation is a representation of the second representation is a representation of the second function of the at least one number in the vector of numbers with respect to the third function, and transmitting a signal representative of the second response information to the third party; and verifying by the third party, that the digital certificate corresponds to the vector of numbers with respect to the first public key and that the second response information corresponds to the second challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 29
Independent Claim
458 words
A method for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that the information to be certified is contained in a representation known by the first party of at least one number in the vector of numbers with respect to a first function, and then to transmit to a third party a signal constituting a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the method comprising the steps of: generating by the second party, a signal representative of a first secret key and a corresponding first public key, and providing a specification of the correspondence between the signals representative of the digital certificates and vectors of numbers with respect to the first public key; randomly transforming by the first party, signals representative of the information to be certified, into a vector of numbers, such that the first party knows a first representation, where a first representation is a representation of at least one number in the vector of numbers with respect to the first function, and the first representation contains the information to be certified; computing by the first party, first challenge information, and transmitting signals representative of the first challenge information to the second party; computing by the second party, first response information based on at least the first challenge information and the first secret key, and transmitting signals representative of the first response information to the first party; computing by the first party, based on at least the received first response information, a digital certificate corresponding to the vector of numbers; transmitting by the first party to the third party, signals representative of the vector of numbers and the digital certificate; computing by the first party, in response to second challenge information, second response information based on at least the second challenge information and a second representation, where a second representation is a representation of the second representation is a representation of the second function of the at least one number in the vector of numbers with respect to the third function, and transmitting a signal representative of the second response information to the third party; and verifying by the third party, that the digital certificate corresponds to the vector of numbers with respect to the first public key and that the second response information corresponds to the second challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 30
Dependent Claim
36 words
A method as in claim 26, wherein the specification provided by the second party is sufficient for the first party to compute digital certificates corresponding to vectors of numbers, without further assistance of the second party.
Claim 31
Dependent Claim
84 words
A method as in claim 26, wherein the vector of numbers comprises the at least one number of which the first party knows a representation with respect to the first function, and additional numbers, of each of which the first party knows a substantially randomly generated representation with respect to the third function; and the second response information is a linear combination, determined by the second challenge information, of the second representation and the substantially randomly generated representation of one of the additional numbers.
Claim 32
Dependent Claim
14 words
A method as in claim 28, wherein there are at least two additional numbers.
Claim 33
Dependent Claim
30 words
A method as in claim 28, wherein the first party has a second secret key and a corresponding second public key, and the first representation contains the second secret key.
Claim 34
Dependent Claim
20 words
A method as in claim 26, wherein the information to be certified has previously been certified by the second party.
Claim 35
Dependent Claim
43 words
A method as in claim 26, wherein the information to be certified is a combination of information that has previously been certified by the second party and values by which the information that has previously been certified by the second party, is updated.
Claim 36
Dependent Claim
17 words
A method as in claim 26, wherein the information to be certified is a set of credentials.
Claim 37
Dependent Claim
22 words
A method as in claim 26, wherein the vector of numbers represents a pseudonym of the first party with the third party.
Claim 38
Dependent Claim
18 words
A method as in claim 26, wherein the first party comprises a fourth party and a fifth party.
Claim 39
Dependent Claim
26 words
A method as in claim 35, wherein the fourth party acts in the interest of the second party, and can only communicate with the fifth party.
Claim 40
Dependent Claim
20 words
A method as in claim 36, wherein the fifth party randomizes at least one number provided by the fourth party.
Claim 41
Dependent Claim
61 words
A method as in claim 26, wherein the first party also transmits to the third party a signal representative of an additional number, of which it knows a substantially random representation with respect to the third function; and the second response information is a linear combination, determined by the second challenge information, of the second representation and the substantially random representation.
Claim 42
Independent Claim
56 words
A method as in any one of claims 26 to 37 for implementing an electronic cash system, wherein the first party is a paying party, such as a consumer; the second party is a financial institution, such as a bank, that issues electronic cash; and the third party is a servicing organization, such as a shop.
Claim 43
Dependent Claim
32 words
A method as in claim 39, wherein the amount of electronic cash held by the first party is indicated by a counter held by, but not under control of, the first party.
Claim 44
Dependent Claim
126 words
A method as in claim 26, wherein a representation of a number, m, with respect to the first function is a vector of numbers, (a 1 , . . . , a k ; a k+1 ), such that m=Y 1 a .sbsp.1 . . . Y k a .sbsp.k a k+1 v , where k≧1, m is a number in a group, Z n *, where n is a product of at least two distinct prime numbers, Y 1 , . . . , Y k are numbers in Z n *, a 1 , . . . , a k are numbers in a ring, Z v , where v is a positive number, and a k+1 is a number in Z n *.
Claim 45
Dependent Claim
101 words
A method as in claim 26, wherein a representation of a number, m, with respect to the first function is a vector of numbers, (a 1 , . . . , a k ), such that m=g 1 a .sbsp.1 . . . g k a .sbsp.k, where k≧2, m is a number in a group, G q , of order q, where q is a prime number, g 1 , . . . , g k are numbers in G q , and a 1 , . . . , a k are numbers in the ring, Z q .
Claim 46
Independent Claim
286 words
An apparatus for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that a representation, known by the first party, of at least one number in the vector of numbers, contains the information to be certified, the apparatus comprising: first processing means for use by the first party; second processing means for use by the second party, the second processing means being beyond control of the first party; interface means between the first processing means and the second processing means; key generation means for generating a secret key and a corresponding public key for the second party; means within the first processing means for randomly transforming signals representative of the information to be certified, into a vector of numbers, such that the first processing means has access to a representation of at least one number in the vector of numbers, and the representation contains the information to be certified; means within the first processing means for computing challenge information; means within the first processing means for transmitting to the second processing means, signals representative of the challenge information; means within the second processing means for computing response information, based on at least the challenge information and the secret key; means within the second processing means for transmitting to the first processing means, signals representative of the response information; and means within the first processing means for computing, based on at least the received response information, a digital certificate corresponding to the vector of numbers.
Claim 47
Independent Claim
286 words
An apparatus for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that a representation, known by the first party, of at least one number in the vector of numbers, contains the information to be certified, the apparatus comprising: first processing means for use by the first party; second processing means for use by the second party, the second processing means being beyond control of the first party; interface means between the first processing means and the second processing means; key generation means for generating a secret key and a corresponding public key for the second party; means within the first processing means for randomly transforming signals representative of the information to be certified, into a vector of numbers, such that the first processing means has access to a representation of at least one number in the vector of numbers, and the representation contains the information to be certified; means within the first processing means for computing challenge information; means within the first processing means for transmitting to the second processing means, signals representative of the challenge information; means within the second processing means for computing response information, based on at least the challenge information and the secret key; means within the second processing means for transmitting to the first processing means, signals representative of the response information; and means within the first processing means for computing, based on at least the received response information, a digital certificate corresponding to the vector of numbers.
Claim 48
Dependent Claim
24 words
An apparatus as in claim 43, wherein the first processing means comprises a third processing means, a fourth processing means, and interface means therebetween.
Claim 49
Independent Claim
259 words
An apparatus for a first party which knows a first representation, where a first representation is a representation of at least one number in a vector of numbers with respect to a first function, to transmit to a third party a signal constituting a second representation, where a second representation is a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the first party having previously generated a signal representative of a digital certificate corresponding to the vector of numbers with respect to a public key of a second party, the apparatus comprising: first processing means for use by the first party; second processing means for use by the third party; interface means between the first processing means and the second processing means; means within the first processing means for transmitting to the second processing means, signals representative of the vector of numbers and the corresponding digital certificate; means within the first processing means for computing, in response to challenge information, response information based on at least the challenge information and the second representation; means within the first processing means for transmitting to the second processing means, signals representative of the response information; and means within the second processing means for verifying that the digital certificate corresponds to the vector of numbers with respect to the public key and that the response information corresponds to the challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 50
Independent Claim
259 words
An apparatus for a first party which knows a first representation, where a first representation is a representation of at least one number in a vector of numbers with respect to a first function, to transmit to a third party a signal constituting a second representation, where a second representation is a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the first party having previously generated a signal representative of a digital certificate corresponding to the vector of numbers with respect to a public key of a second party, the apparatus comprising: first processing means for use by the first party; second processing means for use by the third party; interface means between the first processing means and the second processing means; means within the first processing means for transmitting to the second processing means, signals representative of the vector of numbers and the corresponding digital certificate; means within the first processing means for computing, in response to challenge information, response information based on at least the challenge information and the second representation; means within the first processing means for transmitting to the second processing means, signals representative of the response information; and means within the second processing means for verifying that the digital certificate corresponds to the vector of numbers with respect to the public key and that the response information corresponds to the challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 51
Dependent Claim
24 words
An apparatus as in claim 45, wherein the first processing means comprises a third processing means, a fourth processing means, and interface means therebetween.
Claim 52
Independent Claim
529 words
An apparatus for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that the information to be certified is contained in a representation known by the first party of at least one number in the vector of numbers with respect to a first function, and then to transmit to a third party a signal constituting a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the apparatus comprising: first processing means for use by the first party; second processing means for use by the second party and beyond control of the first party; third processing means for use by the third party; first interface means between the first processing means and the second processing means; second interface means between the first processing means and the third processing means; key generation means for generating a signal representative of a secret key and a corresponding public key for the second party; means within the first processing means for randomly transforming signals representative of the information to be certified, into a vector of numbers, such that the first processing means has access to a first representation, where a first representation is a representation of at least one number in the vector of numbers with respect to the first function, and the first representation contains the information to be certified; means within the first processing means for computing first challenge information; means within the first processing means for transmitting to the second processing means, a signal representative of the first challenge information; means within the second processing means for computing first response information based on at least the first challenge information and the secret key; means within the second processing means for transmitting to the first processing means, a signal representative of the first response information; means within the first processing means for computing, based on at least the first response information, a digital certificate corresponding to the vector of numbers; means within the first processing means for transmitting to the third processing means, signals representative of the vector of numbers and the digital certificate; means within the first processing means for computing, in response to second challenge information, second response information based on at least the second challenge information and a second representation, where a second representation is a representation of the second function of the at least one number in the vector of numbers with respect to the third function; means within the first processing means for transmitting to the third processing means, a signal representative of the second response information; and means within the third processing means for verifying that the digital certificate corresponds to the vector of numbers with respect to the public key and that the second response information corresponds to the second challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 53
Independent Claim
529 words
An apparatus for a first party to have information certified by a second party by generating a signal representative of a digital certificate corresponding to a vector of numbers, wherein the signals representative of the vector of numbers and the digital certificate are hidden from the second party, yet the second party is ensured that the information to be certified is contained in a representation known by the first party of at least one number in the vector of numbers with respect to a first function, and then to transmit to a third party a signal constituting a representation of a second function of the at least one number in the vector of numbers with respect to a third function, the apparatus comprising: first processing means for use by the first party; second processing means for use by the second party and beyond control of the first party; third processing means for use by the third party; first interface means between the first processing means and the second processing means; second interface means between the first processing means and the third processing means; key generation means for generating a signal representative of a secret key and a corresponding public key for the second party; means within the first processing means for randomly transforming signals representative of the information to be certified, into a vector of numbers, such that the first processing means has access to a first representation, where a first representation is a representation of at least one number in the vector of numbers with respect to the first function, and the first representation contains the information to be certified; means within the first processing means for computing first challenge information; means within the first processing means for transmitting to the second processing means, a signal representative of the first challenge information; means within the second processing means for computing first response information based on at least the first challenge information and the secret key; means within the second processing means for transmitting to the first processing means, a signal representative of the first response information; means within the first processing means for computing, based on at least the first response information, a digital certificate corresponding to the vector of numbers; means within the first processing means for transmitting to the third processing means, signals representative of the vector of numbers and the digital certificate; means within the first processing means for computing, in response to second challenge information, second response information based on at least the second challenge information and a second representation, where a second representation is a representation of the second function of the at least one number in the vector of numbers with respect to the third function; means within the first processing means for transmitting to the third processing means, a signal representative of the second response information; and means within the third processing means for verifying that the digital certificate corresponds to the vector of numbers with respect to the public key and that the second response information corresponds to the second challenge information, the second function of the at least one number in the vector of numbers, and the third function.
Claim 54
Dependent Claim
25 words
An apparatus as in claim 47, wherein the first processing means comprises a fourth processing means, a fifth processing means, and third interface means therebetween.
Claim 55
Dependent Claim
27 words
An apparatus as in claim 48, wherein the fourth processing means is tamper-resistant and can only communicate with the fifth processing means, through the third interface means.
Claim 56
Dependent Claim
22 words
An apparatus as in claim 49, wherein the fifth processing means randomizes at least one number provided by the fourth processing means.
Claim 57
Independent Claim
56 words
An apparatus as in any one of claims 47 to 50 for implementing an electronic cash system, wherein: the first party is a paying party, such as a consumer; the second party is a financial institution, such as a bank, that issues electronic cash; and the third party is a servicing organization, such as a shop.
Claim 58
Dependent Claim
36 words
An apparatus as in claim 47 for implementing an electronic cash system, wherein the first processing means is tamper-resistant, and further comprises counter means for indicating the amount of electronic cash held by the first party.
Claim 59
Dependent Claim
35 words
An apparatus as in either claim 49 or 50 for implementing an electronic cash system, wherein the fourth processing means comprises counter means for indicating the amount of electronic cash held by the first party.
References Cited (Backward Citations)
US4529870A
Cited
US4759063A
Cited
US4926480A
Cited
US4759064A
Cited
US4868877A
Cited
US5005200A
Cited
US5214702A
Cited
US4914698A
Cited
US4949380A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-05-28 | 1999-11-27 | 2000-05-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-05-28 | 2003-11-27 | 2004-05-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-05-28 | 2007-11-27 | 2008-05-28 | $7700.00 | Window Closed / Lapsed |