Method for acquiring and revalidating an electronic credential
Patent 5642419 Issued on June 24, 1997. Estimated Expiration Date: December 19, 2015. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.
A system for open electronic commerce having a customer trusted agent securely communicating with a first money module, and a merchant trusted agent securely communicating with a second money module. Both trusted agents are capable of establishing a first cryptographically secure session, and both money modules are capable of establishing a second cryptographically secure session. The merchant trusted agent transfers electronic merchandise to the customer trusted agent, and the first money module transfers electronic money to the second money module. The money modules inform their trusted agents of the successful completion of payment, and the customer may use the purchased electronic merchandise.
Other References
"Online Cash Checks", Chaum, D.; Advances in Cryptology EUROCRYPT '89, Qiusquarter & J. Vandewalle (Eds.) Springer-Verlag, pp. 288-293
"Achieving Electronic Privacy", Chaum, D.; Scientific American, Aug. 1992, pp. 96-101
"Value Exchange Systems Enabling Security and Unobservability", Burk H., et al., Computers & Security, 9 (1990), pp. 715-721
"Proxy-Based Authorization and Accounting for Distributed Systems", Neuman, B. Clifford; Proceedings of the 13th International Conference on Distributed Computing Systems, Pittsburgh, May 1993
"Le paiement electronique", P. Remery, J.C. Pailles and F. Lay, L'Echo des RECHERCHES, No. 134 4 trimester 1988 (with English-language translation)
"Padlock", D. Everett, Computer Bulletin, Mar. 1985, pp. 16-17
"ABYSS: A Trusted Architecture for Software Protection", S.R. White and L. Comerford, IEEE, 1987
"Public Protection of Software", A. Herzberg and S.S. Pinter, ACM Transactions on Computer Systems, vol. 5, No. 4, Nov. 1987, pp. 371-393
"Security Without Identification: Card Computers To Make Big Brother Obsolete", D. Chaum, 1987
"Internet Billing Service Design and Prototype Implementation", Marvin A Sirbu, IMA Intellectual Property Project Proceedings, vol. 1, Issue 1, Jan. 1994
"Dyad: A System for Using Physically Secure Coprocessors", J.D. Tygar and B. Yee, School of Computer Science, Carnegie Mellon Univ., Pittsburgh, PA
"Trusted Devices as applied to Corporate Key Escrow", F. Sudia, Jan. 14, 1994, Bankers Trust Co
"Wavemeter Chip Provides Digital Money", M. Slater, Microprocessor Report, vol. 8, No. 5, Apr. 18, 1994
"Limitations of the Kerberos Authentication System", Steven M. Bellovin and Michael Merritt, USENIX--Winter '91 (1-15)
"Applied Cryptography: Protocols, Algorithms, and Source Code in C", Bruce Schneier, John Wiley & Sons, Inc. (417-429) ISBN 0-471-59756-2; QA76.9.A25S35 1993
"Proxy-Based Authorization and Accounting for Distributed Systems", B. Clifford Neuman, Information Sciences Institute, Univ. of Southern Calif.; The 13th International Conference on Distributed Computing Systems, May 25-28, 1993, Pittsburgh, PA; IEEE Computer Society Press
"An Architecture for Practical Delegation in a Distributed System", Morrie Gasser, Ellen McDermott, IEEE Computer Society Press, IEEE Computer Society Symposium on Research in Security and Privacy, May 7-9, 1990
"Practical Uses of Synchronized Clocks in Distributed Systems", Barbara Liskov, ACM Press, 10th Annual ACM Symposium on Principles of Distributed Computing, Aug. 19-21, 1991, ISBN 0-89791-439-2
"SPX: Global Authentication Using Public Key Certificates", Joseph J. Tardo and Kannan Alagappan, IEEE 1991 (CH2986-8/91/0000/0232)
"The Digital Distributed System Security Architecture", Morrie Gasser, et al., Nat'l. Inst. of Standards and Tech./Nat'l Computer Security Ctr., 12th National Computer Security Conferences, Baltimore, MD Oct. 10-13, 1989
"Data Networks and Open System Communications Directory / Information Technology--Open Systems Interconnection--The Directory: Authentication Framework", ITU-T Recommendation X.509, Nov. 199