US5703949A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for establishing secure communications among processing devices
Assignee: Citibank NA
•
Filing: 1996-10-23
•
Granted: 1997-12-30
•
Expires: 2016-10-23
Abstract
Abstract A system for open electronic commerce having a customer trusted agent securely communicating with a first money module, and a merchant trusted agent securely communicating with a second money module. Both trusted agents are capable of establishing a first cryptographically secure session, and both money modules are capable of establishing a second cryptographically secure session. The merchant trusted agent transfers electronic merchandise to the customer trusted agent, and the first money module transfers electronic money to the second money module. The money modules inform their trusted agents of the successful completion of payment, and the customer may use the purchased electronic merchandise. A first processing device generates an encryption key. A third processing device receives information from a second processing device by way of a fourth processing device, which information allows the third processing device to generate the encryption key. Thus, the first and third processing devices can securely communicate using the generated encryption key.
Inventors
- 👤 Sholom S. Rosen
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 02:57
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/0866; G06; G06Q; G06Q30/00; G06Q30/02; G06Q20/00; G06Q20/02; G06Q20/04; G06Q20/06; G06Q20/08; G06Q20/085; G06Q20/0855; G06Q20/10; G06Q20/105; G06Q20/12; G06Q20/20; G06Q20/204; G06Q20/209; G06Q20/22; G06Q20/26; G06Q20/30; G06Q20/36; G06Q20/367; G06Q20/3674; G06Q20/3676; G06Q20/3678; G06Q20/38; G06Q20/382; G06Q20/3821; G06Q20/3829; G06Q20/383; G06Q20/40; G06Q20/401; G06Q30/06; G06Q30/0601; G06Q50/00; G06Q50/10; G06Q50/18; G06Q50/188; G07F17/00; G07F17/16; H; H04; H04L; H04L63/00; H04L63/12; H04L63/123; H04L9/00; H04L9/32; H04L9/321; H04L9/3213; H04L9/3247; H04L9/3263; H04L2209/00; H04L2209/42; H04L2209/56
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
183 words
A method for enabling secure communications among processing devices, comprising the steps of: establishing a first cryptographically secure session between a first processing device and a second processing device, where said first processing device is remotely located from said second processing device; establishing a second cryptographically secure session between a third processing device and a fourth processing device, where said third processing device is remotely located from said fourth processing device, where said first processing device communicates with said third processing device over a first communications link, and where said second processing device communicates with said fourth processing device over a second communications link; in said first processing device; sending session key information stored in said second processing device to said third processing device via said second communications link and said second cryptographically secure session; generating said session key in said third processing device at least in part from said session key information; storing said session key in said third processing device; and establishing a third cryptographically secure session between said first processing device and said third processing device using said session key.
Claim 2
Independent Claim
183 words
A method for enabling secure communications among processing devices, comprising the steps of: establishing a first cryptographically secure session between a first processing device and a second processing device, where said first processing device is remotely located from said second processing device; establishing a second cryptographically secure session between a third processing device and a fourth processing device, where said third processing device is remotely located from said fourth processing device, where said first processing device communicates with said third processing device over a first communications link, and where said second processing device communicates with said fourth processing device over a second communications link; in said first processing device; sending session key information stored in said second processing device to said third processing device via said second communications link and said second cryptographically secure session; generating said session key in said third processing device at least in part from said session key information; storing said session key in said third processing device; and establishing a third cryptographically secure session between said first processing device and said third processing device using said session key.
Claim 3
Dependent Claim
81 words
The method of claim 1 wherein said: session key information comprises a second random number and where said step of generating a session key includes the substeps of: said first processing device generating a first random number; said second processing device generating said second random number and sending said second random number to said first processing device via said first cryptographically secure session; and said first processing device forming said session key by exclusive ORing said first and second random numbers.
Claim 4
Dependent Claim
53 words
The method of claim 2 further comprising the steps of: said first processing device sending said first random number to said third processing device via said first communications link; and establishing the presence of said session key in said third processing device by exclusive-ORing said first random number and said second random number.
Claim 5
Dependent Claim
146 words
The method of claim 3 further comprising the steps of: said first processing device sending said first random number to said second processing device via said first cryptographically secure session; said second processing device forming said session key by exclusive ORing said first random number and said second random number; said second processing device storing said session key; said second processing device sending said second random number to said fourth processing device via said second communications link; said first processing device sending said first random number to said fourth processing device via said first communications link and said second cryptographically secure session; said fourth processing device forming a session key by exclusive ORing said first and second random numbers; storing said session key in said fourth processing device; and establishing a fourth cryptographically secure session between said second and fourth processing devices using said session key.
Claim 6
Dependent Claim
23 words
The method of claim 1, wherein information passing through said second cryptographically secure session is further encrypted by said first cryptographically secure session.
Claim 7
Dependent Claim
11 words
The method of claim 1, wherein said processing devices are tamper-proof.
Claim 8
Dependent Claim
25 words
The method of claim 6, wherein said first and second processing devices are trusted agents and said third and fourth processing devices are money modules.
Claim 9
Independent Claim
334 words
A method for enabling secure communications among processing devices, comprising the steps of: establishing a first cryptographically secure session between a first processing device and a second processing device, where said first processing device is remotely located from said second processing device; establishing a second cryptographically secure session between a third processing device and a fourth processing device, where said third processing device is remotely located from said fourth processing device, where said first processing device communicates with said third processing device over a first communications link, and where said second processing device communicates with said fourth processing device over a second communications link; said first processing device generating a first random number; sending said first random number to said second processing device via said first cryptographically secure session and to said fourth processing device via said second communications link, whereby said first, second, and fourth processing devices store said first random number; said second processing device generating a second random number; sending said second random number to said first processing device via said first cryptographically secure session and to said third processing device via said first communications link, whereby said second, first, and third processing devices store said second random number; said fourth processing device sending said first random number to said third processing device via said second cryptographically secure session; said third processing device sending said second random number to said fourth processing device via said second cryptographically secure session; said first processing device forming a random session key from said first and second random numbers; said second processing device forming said random session key from said first and second random numbers; said third processing device forming said random session key from said first and second random numbers; said fourth processing device forming said random session key from said first and second random numbers; and where said first and third processing devices cryptographically communicate with said session key, and where said second and fourth processing devices cryptographically communicate with said session key.
Claim 10
Independent Claim
334 words
A method for enabling secure communications among processing devices, comprising the steps of: establishing a first cryptographically secure session between a first processing device and a second processing device, where said first processing device is remotely located from said second processing device; establishing a second cryptographically secure session between a third processing device and a fourth processing device, where said third processing device is remotely located from said fourth processing device, where said first processing device communicates with said third processing device over a first communications link, and where said second processing device communicates with said fourth processing device over a second communications link; said first processing device generating a first random number; sending said first random number to said second processing device via said first cryptographically secure session and to said fourth processing device via said second communications link, whereby said first, second, and fourth processing devices store said first random number; said second processing device generating a second random number; sending said second random number to said first processing device via said first cryptographically secure session and to said third processing device via said first communications link, whereby said second, first, and third processing devices store said second random number; said fourth processing device sending said first random number to said third processing device via said second cryptographically secure session; said third processing device sending said second random number to said fourth processing device via said second cryptographically secure session; said first processing device forming a random session key from said first and second random numbers; said second processing device forming said random session key from said first and second random numbers; said third processing device forming said random session key from said first and second random numbers; said fourth processing device forming said random session key from said first and second random numbers; and where said first and third processing devices cryptographically communicate with said session key, and where said second and fourth processing devices cryptographically communicate with said session key.
Claim 11
Dependent Claim
23 words
The method of claim 8, wherein information passing through said second cryptographically secure session is further encrypted by said first cryptographically secure session.
Claim 12
Dependent Claim
11 words
The method of claim 8, wherein said processing devices are tamper-proof.
Claim 13
Dependent Claim
25 words
The method of claim 10, wherein said first and second processing devices are trusted agents and said third and fourth processing devices are money modules.
References Cited (Backward Citations)
US4529870A
Cited
US4443027A
Cited
US4454414A
Cited
US4926480A
Cited
EP0172670A2
Cited
US4634807A
Cited
US4644493A
Cited
US4794644A
Cited
US5144663A
Cited
US4876716A
Cited
US5117457A
Cited
US4916738A
Cited
US4817140A
Cited
US5148534A
Cited
US5109413A
Cited
US5162989A
Cited
US4888800A
Cited
US4999806A
Cited
US4941173A
Cited
US4864615A
Cited
US4972175A
Cited
US5185717A
Cited
EP0380377B1
Cited
US5276311A
Cited
US4933971A
Cited
US4956863A
Cited
US5081678A
Cited
EP0419106A1
Cited
US4993069A
Cited
US5276736A
Cited
US5131039A
Cited
EP0474360A2
Cited
US5305200A
Cited
US5221838A
Cited
US5247578A
Cited
US5247576A
Cited
US5448638A
Cited
GB2257557A
Cited
US5177791A
Cited
WO1993008545A1
Cited
US5440634A
Cited
US5453601A
Cited
EP0569816A2
Cited
WO1994001825A1
Cited
US5301247A
Cited
US5319705A
Cited
US5416840A
Cited
US5539828A
Cited
US5473692A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-12-29 | 2001-06-30 | 2001-12-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-12-29 | 2005-06-30 | 2005-12-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-12-29 | 2009-06-30 | 2009-12-30 | $7700.00 | Window Closed / Lapsed |