US 2003/0195857 A1 · Communication technique to verify and send information anonymously among many parties

Abstract

A communication networking technique is presented that allows sending parties to send information to receiving parties through a third party, in such a way that said third party determines whether a sending party is “eligible” to send information to receiving parties and whether the information to be sent is “valid,” and the receiving parties can determine whether the sender has been deemed eligible and the information has been deemed valid, but no receiving party and no third party is able to associate a specific eligible sender to specific valid information. The information can be associated to several types of transactions: it can encapsulate payment information when the technique is used in financial transactions; it can encapsulate expressions of interest or vote when the technique is used in election and recommendation systems; it can encapsulate information that individuals want to share, when the technique is used in file-sharing systems.

Drawings

Drawings are temporarily unavailable. Open the PDF at USPTO

Drawings

Claims8

Dependent claims

A method for transfer of information between sending parties and receiving parties through one third party, the method allowing a third party to deem a sending party “eligible” to transfer information to receiving parties and to give said sending party a “certificate of eligibility;” the method also allowing the third party to deem the information to be transferred by a sending party to receiving parties “valid,” and to give said sending party a “certificate of validity;” in such a way that each receiving party upon reception of the information transferred by the sending party can verify that the party sending the information has been deemed eligible by the third party, and that the information received has also been deemed valid by the third party, but neither the third party nor any of the receiving parties are able to associate a specific certificate of eligibility corresponding to a sending party to a certificate of validity corresponding to the information being transferred by said sending party;

the method comprising:
two or more sending parties each transferring a first message to a third party, each sending party transferring one such message;
each first message by a sending party being transferred from said sending party's first location, there preferably being as many first locations as sending parties;
each first location being any type of location from where information can be transferred (for example:
a certain computer, or a certain Internet Protocol address, or a certain post office);
each first location possibly being known or recognizable by other parties;
there being preferably no connection between the sending parties, their first locations, and their first messages;
each first message including a first object and a second object;
a first object being information that the third party needs to verify in order to determine whether the sending party of the first message which includes said first object can be deemed eligible by the third party to transfer information to receiving parties;
a second object being return information that the third party uses to return an answer to the sending party at the first location of the sending party of a first message;
the third party receiving two or more first messages, one said message from each sending party;
the third party using the first object contained in each received first message to determine whether the sending party of said message can be deemed eligible by the third party to transfer information to receiving parties;
the eligibility of each sending party to send information to receiving parties being judged by the third party;
the third party creating none, one, or more third objects, one third object for each sending party that the third party has deemed eligible to transfer information to receiving parties;
each third object for each sending party deemed eligible being unique;
the third party maintaining correspondences, for all third objects, between the eligible sending party for which a third object was created and said third object;
a third object corresponding to a sending party being a certificate of eligibility stating that said sending party has been deemed eligible by the third party to transfer information to receiving parties;
the third party transferring none, zero, or more second messages, one second message to each sending party that the third party has deemed eligible to send information to receiving parties;
each second message containing the third object corresponding to the sending party to whom said second message is being transferred;
each second message therefore being unique;
the third party using the second object contained in a first message transferred by a sending party deemed eligible in order to transfer a second message to said sending party;
each sending party deemed eligible by the third party receiving a second message;
each sending party that receives a second message then transferring a third message to the third party;
each third message by a sending party being transferred from said sending party's second location;
each second location being any type of location from where information can be transferred (for example:
a certain computer, or a certain Internet Protocol address, or a certain post office);
each second location potentially being known or recognizable by other parties;
the second location for a sending party being different from the first location for the same sending party;
the third party therefore not being able to associate a first message and a third message sent by the same party from the location alone;
the third party therefore not being able to associate the sending party of a first message and the sending party of a third message from the location alone;
each third message including a fourth object and a fifth object and a sixth object;
for each third message, a fourth object containing the information that a sending party wants to transfer to a receiving party;
for each third message, a fifth object being an identifier associated to the fourth object included in the same message;
for each third message, a sixth object being return information that allows the third party to return an answer to the sending party of the third message at the second location of the sending party of said message;
the sixth object being different from the second object for each sending party;
the third party receiving none, one, or more third messages;
the third party creating one seventh object;
the seventh object being a list of all the fifth objects associated to fourth objects included in all third messages the third party has received;
the third party transferring one fourth message to each sending party that transferred a first message;
the fourth message being the same for all sending parties;
the third party using the second object included in each received first message in order to send the fourth message to each sending party;
each sending party receiving the fourth message;
each sending party verifying whether said party's fifth object is listed in the third party's seventh object included in the fourth message;
none, one, or more sending parties finding their fifth object listed in the third party's seventh object included in the fourth message;
each sending party that found said party's fifth object listed in the third party's seventh object included in the fourth message, now transferring a fifth message to the third party;
each fifth message including for each sending party the third object that said sending party has received from the third party in the second message it has received;
each fifth message also including the seventh object;
the third party receiving none, one, or more fifth messages;
the third party verifying it has received an equal number of third and fifth messages;
the third party verifying that the number of third objects in all the fifth messages it has received equals the number of fifth objects listed in the seventh object it created;
upon positive verification that the third party has received an equal number of third and fifth messages and that the number of third objects in all the fifth messages the third party has received equals the number of fifth objects listed in the seventh object the third party created, the third party creating one or more eighth objects, one eighth object for each received third message;
the third party maintaining correspondences, for all eighth objects, between the fourth object included in a third message and associated to a fifth object that was listed in the seventh object for which an eighth object was created, and said eighth object;
each correspondence being such that it can be observed by any other party;
an eighth object corresponding to a fourth object being a certificate of validity stating that the information included in said fourth object has been deemed valid by the third party to be transferred to receiving parties;
each eighth object for each received third message therefore being unique;
the third party transferring one or more sixth messages, one sixth message to each sending party that transferred a third message containing a fourth object associated to a fifth object that was listed in the seventh object, and therefore including information that the third party has deemed valid to be transferred to receiving parties;
each sixth message containing the eighth object corresponding to the fourth object included in a third message and associated to a fifth object that was listed in the seventh object for which an eighth object was created;
each sixth message therefore being unique;
the third party using the sixth object contained in the third message by a sending party in order to transfer a sixth message to said sending party;
the third party therefore also not being able to associate a second object and a sixth object sent by the same sending party;
the third party therefore also not being able to associate a sending party to which it transferred the second message and a sending party to which it transferred the fifth message;
the third party therefore also not being able to associate a specific certificate of eligibility corresponding to a sending party to a certificate of validity corresponding to the information being transferred by said sending party;
one or more sending parties that sent a third message each receiving a sixth message;
each sending party after receiving a sixth message now creating a seventh message;
each seventh message including the fourth object the sending party had sent in the third message and the eighth object the sending party received in the sixth message;
each sending party transferring from any location except the first location the seventh message to a receiving party;
each receiving party receiving the seventh message;
each receiving party being able to observe the correspondence between the fourth object and the eighth object included in a seventh message;
each receiving party therefore being able to recognize that the information the sending party wants to transfer to the receiving party has been deemed valid by the third party;
each receiving party therefore being also able to conclude that the sending party that sent the seventh message has been deemed eligible to transfer information to receiving parties by the third party;
no receiving party being able to associate the eighth object or the fourth object to the second object for the same sending party;
no receiving party therefore being able to associate a first location from which the sending party has sent the first messages and the additional second location from which the same said sending party has sent the seventh message;
no receiving party therefore being able to associate a specific certificate of eligibility corresponding to a sending party to a certificate of validity corresponding to the information being transferred by the same said sending party.

70 more elements

A method for transfer of information between sending parties and receiving parties through one third party that enables the eligibility of some sending parties to send certain messages to some receiving parties to be verified by a third party, and enables the third party to verify the validity of the messages, and then enables the sending parties to send each a message to one or more receiving parties, in such a way that each receiving party knows that the eligibility of the sender or senders of the message or messages that the receiving party has received has been verified by the third party and that the validity of the message or messages has been also verified by the third party, but neither the third party nor any of the receiving parties are able to associate a specific message to the sending party that has sent that message;

the method comprising:
the sending parties are numbered 1 to N and the receiving parties are numbered 1 to M;
each sending party sends a first message to a third party containing information that the third party needs to know to verify the eligibility of the third party to send a message to one or many of the receiving parties, and a return information that the third party needs to know in order to reply to each sender of such first message, such as a return address. The information that the third party need to know in order to verify the eligibility of the sending party could for example include the real identity of the sending party;
the third party verifies the eligibility of each sending party to send a message to one or more receiving parties, where the eligibility depends on the context in which the method is used, and for each sending party which is deemed eligible, the third party uses the information included in the first message sent by that sending party in order to send to such sending party a second message, containing a unique receipt of eligibility that proves that the sending party is eligible to send a message to the receiving party or parties, where the receipt of eligibility is a message that shows that the sender has been deemed eligible by the third party to send out a message, and each receipt of eligibility is unique and is not repeated for any other sending party, and is associated to the return information included in the first message in the sense that every other party could recognize that a certain receipt of eligibility has been created for a certain return information (for example, because the receipt of eligibility could also include the return information);
parties 1 to N send each a third message to the third party, each third message containing the final message that the sending parties want to send anonymously to the receiving party or parties, and a new return information that allows the third party to contact each sender of the third message, where the return information contained in each third message is different from the return information contained in each first message and has no association or link with it, so that the third party is not able to associate the first and third messages originated from the same sending party, and therefore the third party is not able to associate the receipt of eligibility that it has created to the final message that each sending party wants to send to a receiving party and that is contained in the third message. For example, the first and third messages of a same sending party could be sent by postal mail, posted from different locations, and reporting different return addresses;
the third party selects T of the N third messages that it has received, where T is less or equal to N, and compiles a list of these T messages and associates each of those messages to an unique identifier created for the list, and then sends to all N parties a fourth message using the return information contained in the N first messages that it has received, the fourth message containing a list with the T third messages that the third party has selected and the unique identifier for the list;
parties 1 to N receive the fourth message, and each of the T parties that finds that its third message is contained in the list whose unique identifier is reported inside the fourth message, replies to the third party by sending a fifth message, each fifth message containing the unique receipt of eligibility that the party has received from the third party with the second message and also containing the unique identifier for the list, but each fifth message not containing any return information that would allow the third party to contact each sender of the fifth message or to associate him to the senders of the previous messages, so that the third party is not able to link the first and third and fifth messages originated from the same sending party, and therefore cannot associate the receipt of eligibility to the final message contained in the third message that each sending party wants to send to a receiving party or parties;
the third party, upon receiving exactly T fifth messages each containing a unique receipt of eligibility and the unique identifier for the list containing the T third messages that it has selected, creates T receipts of validation for the T selected messages, where each receipt of validation is a message that shows that the third message has been deemed valid by the third party, and each receipt of validation is unique and is not repeated for any other sending party, and is associated to the third message in a way that every other party could recognize that a certain receipt of validation has been created for a certain third message (for example because the receipt of validation also contains a certain third message), and then the third party sends the unique receipts of validation to T parties in a sixth message, using the return information contained in each of the T selected third messages. If the third party does not receive exactly T unique receipts of eligibility, the third party selects a new set of T third messages and repeats the method from the point where it sends the fourth messages to the new T parties that it has selected;
upon reception of the receipts of validation, each sending party creates a seventh message, each seventh message containing the third message, which in turns contains the final message that the sending party wants to send to the receiver, and also containing the receipts of validation associated to that third message that the sending party has received from the third party inside the sixth message, and sends this seventh message to the receiver party, which is one or more of 1 . . . M.

6 more elements

Dependencies are inferred from the claim text.

Description5,198 words

Summary2,237 words

#NOT APPLICABLE

#The present invention relates generally to communication techniques. More particularly, the invention provides a method and system for allowing sending parties to send information to receiving parties through a third party, in such a way that said third party determines whether a sending party is “eligible” to send information to receiving parties and whether the information to be sent is “valid,” according to criteria set by the third party. A sending party deemed eligible is associated to a “certificate of eligibility” and the information deemed valid is associated to a “certificate of validity.” A party receiving information through this method can verify that the information has been deemed valid by the third party and can conclude that the sender of the information has been deemed eligible. Preferably, the communication is anonymous, in the sense that neither the third party nor any of the receiving parties are able to recognize any correspondence between a certificate of eligibility associated to a sending party and a certificate of validity associated to the information sent by that sending party. Merely by way of example, the present invention is applied to a wide area network environment such as the Internet. But it would be recognized that the invention can be applied to other networks such as local area networks, enterprise networks, physical networks, wireless networks (e.g., local and cellular), any combination of these and the like.

Detailed description2,961 words

#According to the present invention, techniques for improved communications over networks are provided. More particularly, the invention provides a method and system for allowing sending parties to send information to receiving parties through a third party, in such a way that said third party determines whether a sending party is “eligible” to send information to receiving parties and whether the information to be sent is “valid,” according to criteria set by the third party. A sending party deemed eligible is associated to a “certificate of eligibility” and the information deemed valid is associated to a “certificate of validity.” A party receiving information through this method can verify that the information has been deemed valid by the third party and can conclude that the sender of the information has been deemed eligible. Merely by way of example, the present invention is applied to a wide area network environment such as the Internet. But it would be recognized that the invention can be applied to other networks such as local area networks, enterprise networks, physical networks, wireless networks (e.g., local and cellular), any combination of these and the like. Additionally, the invention can be applied to other forms of transactions such as information flow, other forms of economic transactions, anonymous information flow, voting, file sharing, and the like. The invention can be applied to industries such as financial transactions, gaming, entertainment, information sharing, file distributions, customized services for high-net worth individuals, electronic voting, electronic trading, and the like.

#Exemplary Embodiment Zero

#A set of sending parties exists, numbered 1 to N, and a set of receiving parties, numbered 1 to M. The following steps compose the process:

Communication technique to verify and send information anonymously among many parties

Life of this patent

Communication technique to verify and send information anonymously among many parties

Life of this patent

Life of this patent

Abstract

Drawings

Drawings

Claims8

Description5,198 words

Classification5 codes

Life of this patent

Drawings

Description5,198 words