Abstract

An Online Brokering Service provides user authentication and billing services to allow users to anonymously and securely purchase online services from Service Providers (SP) sites (e.g., World Wide Web sites) over a distributed public network, which may be an untrusted public network such as the Internet. Users and SP sites initially register with the Brokering Service, and are provided with respective client and server software components for using the Brokering Service. In one embodiment, when a user initially connects to an SP site, the SP site transmits a challenge message over the public network to the user computer, and the user computer generates and returns and cryptographic response message (preferably generated using a password of the user). The SP site then passes the response message to the Brokering Service, which in-turn looks up the user's password and authenticates the response message. If the response message is authentic, the Online Brokering Service transmits an anonymous ID to the SP site, which can be used for subsequently billing the user. In addition, the Online Brokering Service transmits user-specific access rights data to the SP site, allowing the SP site to customize its services for the particular user. Billing events generated by the SP sites are transmitted to the Brokering Service, which maintains a user-viewable bill that shows all charges from all SP sites accessed by the user. Advantageously, the payment information (e.g., credit card number) and other personal information of users are not exposed to the SP sites, and are not transmitted over the distributed network.

Other References

• Sirbu, Marvin A; "Internet Billing Service Design and Implementation" 1993
• Cox, Benjamin T. H.; "Maintaining Privacy in Electronic Transactions" Aug. 1994
• Sirbu, Marvin; J.D. Tygar; NetBill: An Internet Commerce System Optimized for Network Delivered Services, Mar. 1995
• Cox, Benjamin; Tygar, J.D.; Sirbu Marvin; "NetBill Security and Transaction Protocol" Jul. 1995
• Schneier, Bruce; "Applied Cryptography: protocols, algorithms, and source code", library of congress No. TX-4-216-579, Oct. 1995
• http://www.ini.cmu.edu/netbill/pubs.html, Apr. 1997
• PC Magazine; vol. 13; No. 18, p. 87; ISSN: 0888-8507; "Needed: A Fee-Based Internet"; Bill Machrone; Oct. 25, 1994
• Information Week; Client-Server; p. 84; "A Standard For Safety--Net Providers Strive For Encryption and Authentication"; Jan. 30, 1995
• Business Week; Cover Story; No. 3398; p. 88; "Shielding The Net From Cyber-Scoundrels"; Edward C. Baig and John Carey; Nov. 14, 1994
• Horizon House Publications Inc., Telecommunications; vol. 28, No. 11; p. 12; ISSN: 0278-4831; "CommerceNet Prefigures Explosion In Business Use Of The Internet"; Maureen Molloy; Nov. 1994 Byte; Cover Story; vol. 19; No. 10; p. 52; Don't Write Off The Internet; Oct. 1994
• InformationWeek; Top Of The Week; p. 12; "Digital Dollars-Microsoft-Intuit Deal Speeds The Day When Most Financial Transactions Will Be Online"; Clinton Wilder with Bruce Caldwell; Oct. 31, 1994
• PC Magazine; vol. 14; No. 4; p. 31; ISSN: 0888-8507; Cybermall Meets Digicash Feb. 21, 1995
• Internet World; "New Deals"; Gary Welz; Jun. 1995
• Network and Internetwork Security Principles and Practice; William Stallings, Ph.D; pp. 314-333; Copyright 199