US6560581B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for secure electronic commerce transaction
Assignee: Visa International Service Association
•
Filing: 1998-06-08
•
Granted: 2003-05-06
•
Expires: 2018-06-08
Abstract
Abstract An electronic commerce system facilitates secure electronic commerce transactions among multiple participants. Each electronic commerce transaction involves at least one commerce document defining the transaction and at least one commerce instrument defining a payment for the transaction. The electronic commerce system has a credential binding server at a trusted credential authority, multiple computing units at associated participants, and a communication system interconnecting the credential binding server and the multiple computing units. The electronic commerce system operates in two phases: a registration phase and a transaction phase. During the registration phase, each of the computing units generate and send a registration packet over the communication system to the credential binding server. Unique credentials are produced by the credential binding server based upon the registration packets sent back to the computing units. During the transaction phase, an originating computing unit initially requests, receives, and verifies the credentials of expected recipient computing units to ensure communication between authenticate participants. Thereafter, the originating computing unit signs and encrypts the commerce document(s) and the commerce instrument(s) in a manner which ensures that only the intended recipients can decrypt them. The originating computing unit then sends both the commerce document(s) and instrument(s) over the communication system to a first recipient computing unit. The first recipient computing unit decrypts and verifies the commerce document (s) and/or instruments intended for it. The first recipient computing unit then passes the balance of the encrypted commerce document(s) and/or instrument(s) over the communication system to a second recipient computing unit, which decrypts and verifies the commerce document(s) and/or instrument(s) intended for it. This process is continued until all commerce documents and commerce instruments are distributed, decrypted, and verified by their intended recipients.
Inventors
- 👤 Barbara L. Fox
- 👤 Lester L. Waters
- 👤 Jeffrey F. Spelman
- 👤 Robert B. Seidensticker
- 👤 Matthew W. Thomlinson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 10:47
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/38; G06Q20/382; G06Q20/3829; G06Q20/02; G06Q20/08; G06Q20/085; G06Q20/0855; G06Q20/10; G06Q20/12; G06Q20/3823; G06Q20/40; G06Q20/401; G06Q20/4014; G06Q30/00; G06Q30/018; G06Q30/06; G06Q30/0601; G06Q30/0609; H; H04; H04N; H04N21/00; H04N21/20; H04N21/25; H04N21/254; H04N21/2543; H04N21/40; H04N21/47; H04N21/478; H04N21/47805
Claims Analysis
Total Claims: 32
Claim 1
Independent Claim
190 words
A method for conducting an electronic transaction involving at least a document related to the transaction and at least an instrument describing a mode of payment for the transaction, the method comprising: encrypting the document and the instrument at a first participant; sending the encrypted document and the encrypted instrument from the first participant to a second participant; and decrypting only one of the document or the instrument at the second participant; wherein said encrypting further comprises: supplying the document and the instrument to a cryptographic application program interface (CAPI) resident at the first participant; selecting a cryptography service provider (CSP) for encrypting the document and the instrument; establishing communication between the CAPI and the CSP; verifying, at the CAPI, an authenticity of the CSP; passing the document and the instrument from the CAPI to the CSP; encrypting the document and the instrument at the CSP using at least one encryption key maintained by the CSP to produce an encrypted document and an encrypted instrument; and passing the encrypted document and the encrypted instrument from the CSP back to the CAPI without exposing the encryption key in its non-encrypt form.
Claim 2
Independent Claim
190 words
A method for conducting an electronic transaction involving at least a document related to the transaction and at least an instrument describing a mode of payment for the transaction, the method comprising: encrypting the document and the instrument at a first participant; sending the encrypted document and the encrypted instrument from the first participant to a second participant; and decrypting only one of the document or the instrument at the second participant; wherein said encrypting further comprises: supplying the document and the instrument to a cryptographic application program interface (CAPI) resident at the first participant; selecting a cryptography service provider (CSP) for encrypting the document and the instrument; establishing communication between the CAPI and the CSP; verifying, at the CAPI, an authenticity of the CSP; passing the document and the instrument from the CAPI to the CSP; encrypting the document and the instrument at the CSP using at least one encryption key maintained by the CSP to produce an encrypted document and an encrypted instrument; and passing the encrypted document and the encrypted instrument from the CSP back to the CAPI without exposing the encryption key in its non-encrypt form.
Claim 3
Dependent Claim
63 words
A method as recited in claim 1 further comprising: encrypting the document and the instrument at the CSP using a symmetric key; encrypting the symmetric key with a private key from an asymmetric pair of private and public keys unique to the first participant; passing the encrypted symmetric key to the CAPI; and retaining the asymmetric private key in confidence within the CSP.
Claim 4
Dependent Claim
32 words
A method as recited in claim 1 wherein the verifying comprises: attaching a digital signature of a trusted credential authority to the CSP; and validating the digital signature to authenticate the CSP.
Claim 5
Dependent Claim
224 words
An electronic system comprising: an first computing unit at a first participant; a second computing unit at a second participant; a third computing unit at a third participant; at least one communication system interconnecting the first computing unit, the second computing unit, and the third computing unit; an encryption device provided at the first computing unit to encrypt a document related to a transaction and an instrument describing a mode of payment for the transaction; the first computing unit sending the encrypted document and the encrypted instrument over the communication system to the second computing unit at the second participant; a first decrypting device provided at the second computing unit to decrypt one of the document or the instrument; the second computing unit passing the other of the document or the instrument over the communication system to the third computing unit at the third participant; and a second decrypting device provided at the third computing unit to decrypt the other of the document or the instrument; wherein communication among the first and second computing units is conducted using a tag-length-value data structure, the tag-length-value data structure comprising: a fixed-sized identifier field to define commerce data contained in the data structure; a variable-sized length field containing a length of the commerce data in the data structure; and a variable-sized value field containing the commerce data.
Claim 6
Dependent Claim
224 words
An electronic system comprising: an first computing unit at a first participant; a second computing unit at a second participant; a third computing unit at a third participant; at least one communication system interconnecting the first computing unit, the second computing unit, and the third computing unit; an encryption device provided at the first computing unit to encrypt a document related to a transaction and an instrument describing a mode of payment for the transaction; the first computing unit sending the encrypted document and the encrypted instrument over the communication system to the second computing unit at the second participant; a first decrypting device provided at the second computing unit to decrypt one of the document or the instrument; the second computing unit passing the other of the document or the instrument over the communication system to the third computing unit at the third participant; and a second decrypting device provided at the third computing unit to decrypt the other of the document or the instrument; wherein communication among the first and second computing units is conducted using a tag-length-value data structure, the tag-length-value data structure comprising: a fixed-sized identifier field to define commerce data contained in the data structure; a variable-sized length field containing a length of the commerce data in the data structure; and a variable-sized value field containing the commerce data.
Claim 7
Dependent Claim
14 words
An interactive television system incorporating an electronic system as recited in claim 4 .
Claim 8
Dependent Claim
258 words
An electronic system comprising: an originating computing unit at an originating participant; a first recipient computing unit at a first recipient participant; a second recipient computing unit at a second recipient participant; at least one application executing on each of the computing units to facilitate transfer of a document related to a commerce transaction and an instrument describing a mode of payment for the commerce transaction; each of the computing units having a cryptography system to support the application, the cryptography system comprising: a cryptographic application program interface (CAPI) to interface with the application when the application requests encryption/decryption of the document and the instrument; at least one cryptography service provider (CSP) dynamically accessible by the CAPI, the CSP receiving the document and the instrument from the CAPI and encrypting or decrypting the messages using encryption keys, the CSP managing and protecting the encryption keys to prevent exposure of the encryption keys in a non-encrypted form to the CAPI; the originating computing unit using its cryptography system to encrypt the document and the instrument and then sending the encrypted document and the encrypted instrument to the first recipient computing unit at the first recipient participant; the first recipient computing unit using its cryptography system to decrypt one of the document or the instrument; the first recipient computing unit passing the other of the document or the instrument to the second recipient computing unit at the second recipient participant; and the second recipient computing unit using its cryptography system to decrypt the other of the document or the instrument.
Claim 9
Dependent Claim
258 words
An electronic system comprising: an originating computing unit at an originating participant; a first recipient computing unit at a first recipient participant; a second recipient computing unit at a second recipient participant; at least one application executing on each of the computing units to facilitate transfer of a document related to a commerce transaction and an instrument describing a mode of payment for the commerce transaction; each of the computing units having a cryptography system to support the application, the cryptography system comprising: a cryptographic application program interface (CAPI) to interface with the application when the application requests encryption/decryption of the document and the instrument; at least one cryptography service provider (CSP) dynamically accessible by the CAPI, the CSP receiving the document and the instrument from the CAPI and encrypting or decrypting the messages using encryption keys, the CSP managing and protecting the encryption keys to prevent exposure of the encryption keys in a non-encrypted form to the CAPI; the originating computing unit using its cryptography system to encrypt the document and the instrument and then sending the encrypted document and the encrypted instrument to the first recipient computing unit at the first recipient participant; the first recipient computing unit using its cryptography system to decrypt one of the document or the instrument; the first recipient computing unit passing the other of the document or the instrument to the second recipient computing unit at the second recipient participant; and the second recipient computing unit using its cryptography system to decrypt the other of the document or the instrument.
Claim 10
Dependent Claim
24 words
An electronic system as recited in claim 6 wherein the CSP is digitally signed with a digital signature unique to a credential binding authority.
Claim 11
Dependent Claim
27 words
An electronic system as recited in claim 7 wherein the CAPI verifies an authenticity of the CSP by validating the digital signature of the credential binding authority.
Claim 12
Dependent Claim
40 words
An electronic system as recited in claim 6 wherein the CSP digitally signs the document and instrument with a digital signature unique to the participant and passes the signed encrypted document and the signed encrypted instrument back to the CAPI.
Claim 13
Dependent Claim
46 words
An electronic system as recited in claim 9 wherein the cryptography system further comprises a private application program interface (PAPI) to interface the CSP with the participant, the PAPI enabling the participant to confirm or reject attaching the digital signature to the document and the instrument.
Claim 14
Dependent Claim
18 words
An electronic system as recited in claim 6 wherein the CSP stores at least one unique encryption key.
Claim 15
Dependent Claim
20 words
An electronic system as recited in claim 6 wherein the CSP generates the encryption keys used to encrypt the messages.
Claim 16
Dependent Claim
18 words
An electronic system as recited in claim 6 wherein the CSP destroys the encryption keys following their use.
Claim 17
Dependent Claim
40 words
An electronic system as recited in claim 6 wherein the CSP assigns handles to the encryption keys, the handles being made available to the application through the CAPI, but the encryption keys remaining hidden from the application and the CAPI.
Claim 18
Dependent Claim
27 words
An electronic system as recited in claim 6 wherein the CSP is implemented in software as a dynamically linked library which is executable on the computing units.
Claim 19
Dependent Claim
41 words
An electronic system as recited in claim 6 wherein the cryptography system further comprises a private application program interface (PAPI) to interface the CSP with the participant, the PAPI presenting an explanation of the document and the instrument to the participant.
Claim 20
Dependent Claim
45 words
An electronic system as recited in claim 6 wherein the cryptography system further comprises a private application program interface (PAPI) to interface the CSP with the participant, the PAPI verifying an authenticity of the participant prior to enabling access to the application through the CSP.
Claim 21
Dependent Claim
38 words
An electronic system as recited in claim 6 wherein the cryptography system is implemented as a service layer for an operating system on which the application runs, further comprising an application program interface (API) to the cryptography system.
Claim 22
Dependent Claim
64 words
An electronic system as recited in claim 18 wherein the originating participant is a consumer and the API is a consumer API constructed for the consumer, the application being configured to communicate with the consumer API to request at least one task selected from a group comprising: creating a registration credential; processing a credential registration response; creating a transaction; and processing a transaction receipt.
Claim 23
Dependent Claim
75 words
An electronic system as recited in claim 18 wherein the first recipient participant is a merchant and the API is a merchant API constructed for the merchant, the application being configured to communicate with the merchant API to request at least one task selected from a group comprising: creating a registration credential; processing a credential registration response; processing a transaction; creating a transaction authorization request; processing a transaction authorization response; and creating a transaction receipt.
Claim 24
Dependent Claim
72 words
An electronic system as recited in claim 18 wherein the second recipient participant is an acquirer and the API is an acquirer API constructed for the acquirer, the application being configured to communicate with the acquirer API to request at least one task selected from a group comprising: (1) creating a registration credential; (2) processing a credential registration response; (3) processing a transaction authorization request; and (4) creating a transaction authorization response.
Claim 25
Dependent Claim
62 words
An electronic system as recited in claim 18 further comprising a binder with whom the participants register, wherein the API is a binder API constructed for the binder, the application being configured to communicate with the binder API to request at least one task selected from a group comprising: (1) processing a registration credential request; and (2) creating a credential registration response.
Claim 26
Dependent Claim
75 words
A computer program product comprising: code for encrypting a document related to a transaction and an instrument describing a mode of payment for the transaction in a manner which enables a recipient to decrypt one of the document or the instrument, but not the other of the document or the instrument; code for sending both the encrypted document and the encrypted instrument to the recipient; and a computer readable storage medium for holding the codes.
Claim 27
Dependent Claim
75 words
A computer program product comprising: code for encrypting a document related to a transaction and an instrument describing a mode of payment for the transaction in a manner which enables a recipient to decrypt one of the document or the instrument, but not the other of the document or the instrument; code for sending both the encrypted document and the encrypted instrument to the recipient; and a computer readable storage medium for holding the codes.
Claim 28
Dependent Claim
24 words
A computer program product as recited in claim 23 , further comprising: code for signing the document and the instrument with a digital signature.
Claim 29
Dependent Claim
77 words
A computer program product comprising: code for receiving an encrypted document related to a transaction and an encrypted instrument describing a mode of payment for the transaction from an originator; code for decrypting one of the document or the instrument, but not the other of the document or the instrument; code for sending the other of the document or the instrument in encrypted form to another party; and a computer readable storage medium for holding the codes.
Claim 30
Dependent Claim
77 words
A computer program product comprising: code for receiving an encrypted document related to a transaction and an encrypted instrument describing a mode of payment for the transaction from an originator; code for decrypting one of the document or the instrument, but not the other of the document or the instrument; code for sending the other of the document or the instrument in encrypted form to another party; and a computer readable storage medium for holding the codes.
Claim 31
Dependent Claim
178 words
For execution in an electronic system having multiple computing units interconnected by a network, a computer program product having computer-executable instructions for execution at the computing units, said product comprising: code for encrypting, at an originating computing unit, a document related to a transaction and an instrument describing a mode of payment for the transaction in a manner which enables a first recipient computing unit to decrypt one of the document or the instrument and a second recipient computing unit to decrypt the other of the document or the instrument; code for sending the encrypted document and the encrypted instrument from the originating computing unit to the first recipient computing unit; code for decrypting, at the first recipient computing unit, said one of the document or the instrument; code for sending the other of the document or the instrument from the first recipient computing unit onto the second recipient computing unit; code for decrypting, at the second recipient computing unit, said other of the document or the instrument; and a computer readable storage medium for holding the codes.
Claim 32
Dependent Claim
178 words
For execution in an electronic system having multiple computing units interconnected by a network, a computer program product having computer-executable instructions for execution at the computing units, said product comprising: code for encrypting, at an originating computing unit, a document related to a transaction and an instrument describing a mode of payment for the transaction in a manner which enables a first recipient computing unit to decrypt one of the document or the instrument and a second recipient computing unit to decrypt the other of the document or the instrument; code for sending the encrypted document and the encrypted instrument from the originating computing unit to the first recipient computing unit; code for decrypting, at the first recipient computing unit, said one of the document or the instrument; code for sending the other of the document or the instrument from the first recipient computing unit onto the second recipient computing unit; code for decrypting, at the second recipient computing unit, said other of the document or the instrument; and a computer readable storage medium for holding the codes.
References Cited (Backward Citations)
GB1293259A
Cited
US4305059A
Cited
GB2102606A
Cited
US4578530A
Cited
GB2109966A
Cited
US4755940A
Cited
US4734858A
Cited
US4734858B1
Cited
US4812628A
Cited
EP0200343A2
Cited
EP0200343B2
Cited
GB2177245A
Cited
US4876592A
Cited
US4922521A
Cited
US4775935A
Cited
US4799156A
Cited
US4827508A
Cited
US4935870A
Cited
US4795890A
Cited
EP0325564A1
Cited
US5060153A
Cited
EP0410036A1
Cited
EP0344672A1
Cited
US5025373A
Cited
US5347632A
Cited
EP0446500A1
Cited
US4947028A
Cited
US4947028B1
Cited
US5247575A
Cited
US4982346A
Cited
US5077607A
Cited
US4992940A
Cited
US4977595A
Cited
EP0416482A2
Cited
EP0416482B1
Cited
EP0426542A1
Cited
WO1991007725A2
Cited
US5220501A
Cited
US5251324A
Cited
EP0479982B1
Cited
EP0479982A1
Cited
US5623547A
Cited
WO1991017530A1
Cited
WO1991020046A1
Cited
WO1992004679A1
Cited
GB2248370A
Cited
WO1992006438A1
Cited
GB2251098A
Cited
US5351186A
Cited
EP0512702A2
Cited
WO1993002422A1
Cited
US5383113A
Cited
GB2258749A
Cited
WO1993011494A1
Cited
WO1994015428A1
Cited
US5305195A
Cited
EP0584454A1
Cited
US5336870A
Cited
US5341429A
Cited
US5351293A
Cited
US5321751A
Cited
US5311594A
Cited
WO1994023383A1
Cited
WO1994028497A1
Cited
GB2282510A
Cited
US5414833A
Cited
US5604802A
Cited
US6205437B1
Cited
WO1995016971A1
Cited
US5420926A
Cited
WO1995026535A1
Cited
US5642419A
Cited
US5621797A
Cited
US5557518A
Cited
EP0729246A1
Cited
US5826241A
Cited
US5596643A
Cited
US5596642A
Cited
WO1996013013A1
Cited
US5590197A
Cited
WO1996038799A1
Cited
WO1996041286A1
Cited
US5790677A
Cited
WO1997003423A1
Cited
WO1997016897A1
Cited
WO1997022191A1
Cited
EP0779587A2
Cited
EP0793186A2
Cited
WO1997049053A2
Cited
EP0817414A2
Cited
EP0822535A2
Cited
EP0833469A1
Cited
WO1999016029A1
Cited
EP1065634A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-05-05 | 2006-11-04 | 2007-05-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-05-05 | 2010-11-04 | 2011-05-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-05-05 | 2014-11-04 | 2015-05-06 | $7700.00 | Window Closed / Lapsed |