Electronic commerce with cryptographic authentication

Abstract

A method for facilitating an authentication related to an electronic transaction between a first and a second user is provided. Authentication data is received from the first user along with transaction data defining the first user and the electronic transaction to be authenticated. This authentication data is compared to enrollment authentication data associated with the first user in order to verify the identity of the first user. When the user is properly verified, access to at least one private cryptographic key stored on a secure server is available for use in securing the electronic transaction. The particular private cryptographic key need not be released from the secure server. Data indicating the status of the authentication may then be sent to one of either the first or second user.

Description

REFERENCE TO RELATED APPLICATION[0001]The present application claims priority benefit under 35 U.S.C. §119(e) from U.S. Provisional Application No. 60 / 154,734, filed Sep. 20, 1999, entitled “SECURE SITE FOR INTERNET TRANSACTIONS” and from U.S. Provisional Application No. 60 / 200,396, filed Apr. 27, 2000, entitled “SECURE SITE FOR INTERNET TRANSACTIONS.”.BACKGROUND OF THE INVENTION[0002]1. Field of the Invention[0003]The present invention relates to cryptographic authentication in electronic commerce. More specifically, the present invention relates to the use of cryptographic authentication to provide security to transactions in electronic commerce.[0004]2. Description of the Related Art[0005]With the continued increase in commercial and other transactions taking place across linked computer systems, it has become desirable to secure these transactions and the information related to these transactions. One form of security is to prevent access to systems which perform certain functio...

AI Technical Summary

Benefits of technology

The invention provides a method for securely authenticating transactions involving vendors and users using cryptographic keys and authentication data. The method ensures that the keys and data are not lost, stolen, or compromised, which helps avoid the need for constant re-issue and management. The method also allows users to use the same keys for multiple activities, vendors, or authentication requests. The trust engine performs most of the cryptographic processing on behalf of clients, which saves them computing resources. The authentication process allows for parallel processing of vendor and user activities, while also tracking failed access attempts and limiting malicious intruders. Additionally, the method includes a method for increasing the speed of the authentication process by performing various steps in parallel.

Problems solved by technology

According to another embodiment, the multiple depositories are geographically remote such that a rogue employee or otherwise compromised system at one depository will not provide access to a user's key or authentication data.

Images