← Back to Patent Explorer
US5768385A Expired / Lapsed US ⏱️ 0.0 years remaining

Untraceable electronic cash

Assignee: Microsoft Technology Licensing LLC
•
Filing: 1995-08-29
•
Granted: 1998-06-16
•
Expires: 2015-08-29
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract An electronic cash protocol including the steps of using a one-way function f 1 (x) to generate an image f 1 (x 1 ) from a preimage x 1 ; sending the image f 1 (x 1 ) in an unblinded form to a second party; and receiving from the second party a note including a digital signature, wherein the note represents a commitment by the second party to credit a predetermined amount of money to a first presenter of the preimage x 1 to the second party.

Inventors

  • 👤 Daniel R. Simon

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-29 17:59
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/04; G06Q20/06; G06Q20/042; G06Q20/0425; G06Q20/22; G06Q20/24; G06Q20/30; G06Q20/36; G06Q20/367; G06Q20/3678; G06Q20/38; G06Q20/382; G06Q20/3825; G06Q20/383; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016

Claims Analysis

Total Claims: 38
Claim 1
Independent Claim 91 words
A method of implementing an electronic cash protocol comprising the steps of: using a one-way function f 1 (x) to generate an image f 1 (x 1 ) from a preimage x 1 ; sending the image f 1 (x 1 ) in an unblinded form to a second party; and receiving from the second party a note including a digital signature, said note representing a commitment by the second party to credit a predetermined amount of money to a first presenter of said preimage x 1 to the second party.
Claim 2
Independent Claim 91 words
A method of implementing an electronic cash protocol comprising the steps of: using a one-way function f 1 (x) to generate an image f 1 (x 1 ) from a preimage x 1 ; sending the image f 1 (x 1 ) in an unblinded form to a second party; and receiving from the second party a note including a digital signature, said note representing a commitment by the second party to credit a predetermined amount of money to a first presenter of said preimage x 1 to the second party.
Claim 3
Dependent Claim 28 words
The method of claim 1 further comprising sending the preimage x 1 to a third party as payment for purchase of goods or services from the third party.
Claim 4
Dependent Claim 105 words
The method of claim 1 further comprising: selecting a second preimage x 2 ; using a second one-way function f 2 (x)to generate a second image f 2 (x 2 ) from the second preimage x 2 ; sending the first preimage x 1 and the unblinded form of the second image f 2 (x 2 ) to the second party; and receiving from the second party a second note including a digital signature, said second note representing a commitment by the second party to credit said predetermined amount of money to a first presenter of said second preimage x 2 to the second party.
Claim 5
Dependent Claim 19 words
The method of claim 3 wherein functions f 1 (x) and f 2 (x) are identical to each other.
Claim 6
Dependent Claim 35 words
The method of claim 4 wherein the step of sending the first preimage x 1 and the unblinded form of the second image f 2 (x 2 ) to the second party is performed anonymously.
Claim 7
Dependent Claim 12 words
The method of claim 5 wherein the second party is a bank.
Claim 8
Dependent Claim 29 words
The method of claim 3 further comprising sending the second preimage x 2 to a third party as payment for purchase of goods or services from the third party.
Claim 9
Dependent Claim 59 words
The method of claim 1 further comprising: concatenating a signature key of a third party with the first preimage x 1 to form a block of information; encrypting the block of information by using an encryption key of the second party to generate an encrypted block of information; and sending the encrypted block of information to the third party.
Claim 10
Independent Claim 179 words
A method of implementing an electronic cash protocol comprising the steps of: receiving a first preimage x 1 from a first party, said preimage x 1 producing a first image f 1 (x 1 ) when processed by a first one-way function f 1 (x) and there being associated with said first preimage x 1 a commitment by a second party to credit a predetermined amount of money to a first presenter to the second party of said first preimage x 1 ; selecting a second preimage x 2 ; using a second one-way function f 2 (x)to generate a second image f 2 (x 2 ) from the second preimage x 2 ; sending the first preimage x 1 and an unblinded form of the second image f 2 (x 2 ) to the second party; and receiving from the second party a note including a digital signature, said note representing a commitment by the second party to credit said predetermined amount of money to a first presenter of said second preimage x 2 to the second party.
Claim 11
Independent Claim 179 words
A method of implementing an electronic cash protocol comprising the steps of: receiving a first preimage x 1 from a first party, said preimage x 1 producing a first image f 1 (x 1 ) when processed by a first one-way function f 1 (x) and there being associated with said first preimage x 1 a commitment by a second party to credit a predetermined amount of money to a first presenter to the second party of said first preimage x 1 ; selecting a second preimage x 2 ; using a second one-way function f 2 (x)to generate a second image f 2 (x 2 ) from the second preimage x 2 ; sending the first preimage x 1 and an unblinded form of the second image f 2 (x 2 ) to the second party; and receiving from the second party a note including a digital signature, said note representing a commitment by the second party to credit said predetermined amount of money to a first presenter of said second preimage x 2 to the second party.
Claim 12
Dependent Claim 19 words
The method of claim 9 wherein functions f 1 (x) and f 2 (x) are identical to each other.
Claim 13
Dependent Claim 35 words
The method of claim 9 wherein the step of sending the first preimage x 1 and the unblinded form of the second image f 2 (x 2 ) to the second party is performed anonymously.
Claim 14
Independent Claim 166 words
A method of implementing an electronic cash protocol comprising the steps of: receiving from a first party an encrypted block of information, wherein said block of encrypted information was generated by first concatenating a public signature key of a second party with a first preimage x 1 to form a block of information and then encrypting the block of information by using an encryption key of a third party; selecting a second preimage x 2 ; using a second one-way function f 2 (x) to generate an image f(x 2 ) from the preimage x 2 ; forming a message including the encrypted block of information along with the image f(x 2 ) in an unblinded form; sending the message to the third party; and receiving from the third party a signed note including a digital signature, said note representing a commitment by the third party to credit a predetermined amount of money to a first presenter of said preimage x 2 to the third party.
Claim 15
Independent Claim 166 words
A method of implementing an electronic cash protocol comprising the steps of: receiving from a first party an encrypted block of information, wherein said block of encrypted information was generated by first concatenating a public signature key of a second party with a first preimage x 1 to form a block of information and then encrypting the block of information by using an encryption key of a third party; selecting a second preimage x 2 ; using a second one-way function f 2 (x) to generate an image f(x 2 ) from the preimage x 2 ; forming a message including the encrypted block of information along with the image f(x 2 ) in an unblinded form; sending the message to the third party; and receiving from the third party a signed note including a digital signature, said note representing a commitment by the third party to credit a predetermined amount of money to a first presenter of said preimage x 2 to the third party.
Claim 16
Dependent Claim 19 words
The method of claim 12 wherein functions f 1 (x) and f 2 (x) are identical to each other.
Claim 17
Dependent Claim 40 words
The method of claim 12 further comprising signing the message before sending it to the third party, wherein the step of signing is performed using a private signature key corresponding to a public signature key possessed by the third party.
Claim 18
Dependent Claim 22 words
The method of claim 12 wherein the second party is the party receiving the encrypted block of information from the first party.
Claim 19
Independent Claim 89 words
A method of implementing an electronic cash protocol comprising the steps of: receiving from a first entity an unblinded form of an image f 1 (x 1 ) that was generated by applying a one-way function f 1 (x) to a preimage x 1 ; generating a message which contains a commitment to credit a predetermined amount of money to a first presenter of said preimage x 1 ; signing said message with a digital signature; and sending said message along with said digital signature to said first party.
Claim 20
Independent Claim 89 words
A method of implementing an electronic cash protocol comprising the steps of: receiving from a first entity an unblinded form of an image f 1 (x 1 ) that was generated by applying a one-way function f 1 (x) to a preimage x 1 ; generating a message which contains a commitment to credit a predetermined amount of money to a first presenter of said preimage x 1 ; signing said message with a digital signature; and sending said message along with said digital signature to said first party.
Claim 21
Dependent Claim 33 words
The method of claim 16 wherein the receiving party maintains an account for the first entity and wherein said protocol further comprises debiting the first party's account by the predetermined amount of money.
Claim 22
Dependent Claim 56 words
The method of claim 16 further comprising: subsequently receiving the preimage x 1 from a third party; checking a database for the preimage x 1 ; if the preimage x 1 is not found in said database, crediting the third party with said predetermined amount of money; and adding the preimage x 1 to said database.
Claim 23
Dependent Claim 110 words
The method of claim 16 further comprising: subsequently receiving the preimage x 1 and an unblinded image f 2 (x 2 ) from a third party, wherein the unblinded image f 2 (x 2 ) was generated by applying a one-way function f 2 (x) to a preimage x 2 ; checking a database for the preimage x 1 ; if the preimage x 1 is not found in said database, generating a signed note including a digital signature, said note representing a commitment to credit said predetermined amount of money to a first presenter of said preimage x 2 ; and adding the preimage x 1 to said database.
Claim 24
Dependent Claim 19 words
The method of claim 19 wherein functions f 1 (x) and f 2 (x) are identical to each other.
Claim 25
Dependent Claim 154 words
The method of claim 16 further comprising: receiving a message from a second party, wherein said message was generated by concatenating an encryption key of a third party with a first preimage x 1 to form a block of information, by encrypting the block of information by using a first encryption key to generate an encrypted first block, and by concatenating an unblinded image f 2 (x 2 ) to the encrypted first block of information, wherein said unblinded image f 2 (x 2 ) was generated by using a one-way function f 2 (x) to generate an image f 2 (x 2 ) from a preimage x 2 ; decrypting the encrypted first block of information; generating a note including a digital signature, said note representing a commitment to credit a predetermined amount of money to a first presenter of said preimage x 2 ; and sending said note to the second party.
Claim 26
Dependent Claim 19 words
The method of claim 21 wherein functions f 1 (x) and f 2 (x) are identical to each other.
Claim 27
Dependent Claim 41 words
The method of claim 21 further comprising: checking a database for the preimage x 1 ; generating the signed note only if the preimage x 1 is not found in said database; and adding the preimage x 1 to said database.
Claim 28
Independent Claim 149 words
A method of implementing an electronic cash protocol comprising the steps of: obtaining a first image f(x 1 ) and a first preimage x 1 , wherein said first preimage x 1 has a predetermined monetary value associated therewith; selecting a second preimage x 2 ; using a second one-way function f 2 (x)to generate a second image f 2 (x 2 ) from the second preimage x 2 ; sending the first preimage x 1 and an unblinded form of the second image f 2 (x 2 ) to the second party; and receiving from the second party a note including a digital signature, said note representing a commitment by the second party to credit a predetermined amount of money to a first presenter of said second preimage x 2 to the second party, wherein said predetermined amount of money is no greater than said predetermined monetary value.
Claim 29
Independent Claim 149 words
A method of implementing an electronic cash protocol comprising the steps of: obtaining a first image f(x 1 ) and a first preimage x 1 , wherein said first preimage x 1 has a predetermined monetary value associated therewith; selecting a second preimage x 2 ; using a second one-way function f 2 (x)to generate a second image f 2 (x 2 ) from the second preimage x 2 ; sending the first preimage x 1 and an unblinded form of the second image f 2 (x 2 ) to the second party; and receiving from the second party a note including a digital signature, said note representing a commitment by the second party to credit a predetermined amount of money to a first presenter of said second preimage x 2 to the second party, wherein said predetermined amount of money is no greater than said predetermined monetary value.
Claim 30
Dependent Claim 18 words
The method of claim 24 wherein said predetermined amount of money is less than said predetermined monetary value.
Claim 31
Dependent Claim 13 words
The method of claim 24 wherein fx 1 (x) equals f 2 (x).
Claim 32
Independent Claim 210 words
A method of implementing an electronic cash protocol comprising the steps of: obtaining a first image f(x 1 ) and a first preimage x 1 , wherein said first preimage x 1 has a predetermined monetary value associated therewith; selecting a plurality of preimages x i , wherein I is an integer index that runs from 1 to n, where n is a positive integer; using a second one-way function f 2 (x) to generate a plurality of images f 2 (x i ) from the second preimages x i ; sending the first preimage x 1 and an unblinded form of all of the images f 2 (x i ) to the second party; and receiving from the second party a plurality of each including a digital signature, said plurality of notes equal in number to the plurality of images f 2 (x i ) and representing a plurality of predetermined amounts, each of said plurality of notes representing a commitment by the second party to credit a corresponding different one of said plurality of predetermined amounts of money to a first presenter of the corresponding preimage x i to the second party, wherein the total of said plurality of predetermined amounts of money equals said predetermined monetary value.
Claim 33
Independent Claim 210 words
A method of implementing an electronic cash protocol comprising the steps of: obtaining a first image f(x 1 ) and a first preimage x 1 , wherein said first preimage x 1 has a predetermined monetary value associated therewith; selecting a plurality of preimages x i , wherein I is an integer index that runs from 1 to n, where n is a positive integer; using a second one-way function f 2 (x) to generate a plurality of images f 2 (x i ) from the second preimages x i ; sending the first preimage x 1 and an unblinded form of all of the images f 2 (x i ) to the second party; and receiving from the second party a plurality of each including a digital signature, said plurality of notes equal in number to the plurality of images f 2 (x i ) and representing a plurality of predetermined amounts, each of said plurality of notes representing a commitment by the second party to credit a corresponding different one of said plurality of predetermined amounts of money to a first presenter of the corresponding preimage x i to the second party, wherein the total of said plurality of predetermined amounts of money equals said predetermined monetary value.
Claim 34
Independent Claim 91 words
A method of implementing an electronic cash protocol comprising the steps of: obtaining a first image f(x 1 ) and a first preimage x 1 , wherein said first preimage x 1 has a predetermined monetary value associated therewith; concatenating a signature key of a second party with the first preimage x 1 to form a block of information; encrypting the block of information by using an encryption key of a third party to generate an encrypted block of information; and sending the encrypted block of information to the third party.
Claim 35
Independent Claim 91 words
A method of implementing an electronic cash protocol comprising the steps of: obtaining a first image f(x 1 ) and a first preimage x 1 , wherein said first preimage x 1 has a predetermined monetary value associated therewith; concatenating a signature key of a second party with the first preimage x 1 to form a block of information; encrypting the block of information by using an encryption key of a third party to generate an encrypted block of information; and sending the encrypted block of information to the third party.
Claim 36
Dependent Claim 30 words
The method of claim 28 further comprising concatenating other information with the signature key of a second party and the first preimage x 1 to form the block of information.
Claim 37
Independent Claim 111 words
A method of implementing an electronic cash protocol comprising the steps of: sending an unblinded image f 2 (x 2 ) to a second party, wherein the unblinded image f 2 (x 2 ) was generated by applying a one-way function f 2 (x) to a preimage x 2 ; receiving a signed note from the second party, said unblinded note including a digital signature, said unblinded note representing a commitment to credit said predetermined amount of money to a first presenter of said preimage x 2 ; and in response to receiving the unblinded note from the second party, authorizing the delivery of goods or services to a third party.
Claim 38
Independent Claim 111 words
A method of implementing an electronic cash protocol comprising the steps of: sending an unblinded image f 2 (x 2 ) to a second party, wherein the unblinded image f 2 (x 2 ) was generated by applying a one-way function f 2 (x) to a preimage x 2 ; receiving a signed note from the second party, said unblinded note including a digital signature, said unblinded note representing a commitment to credit said predetermined amount of money to a first presenter of said preimage x 2 ; and in response to receiving the unblinded note from the second party, authorizing the delivery of goods or services to a third party.

References Cited (Backward Citations)

US4947430A Cited
US4914698A Cited
US4987593A Cited
US4949380A Cited
US4991210A Cited
US4996711A Cited
US5131039A Cited
US5276736A Cited
US5373558A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2001-06-15 2001-12-15 2002-06-16 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2005-06-15 2005-12-15 2006-06-16 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2009-06-15 2009-12-15 2010-06-16 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag