# US 2014/0195813 A1 · Secure digital communications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0195813 A1 - Document ID: US20140195813A1 - Status: Published application - Kind: A1 - Application number: 14/202,533 - Filed: 2014-03-10 - Published: 2014-07-10 - Earliest claimed: 2011-09-08 - Assignees: Dts Steering Group AB - Applicants: Dts Steering Group AB - Inventors: Niclas LINDBERG; Anders ORRE; Ilio VIRGILI - Web page: https://patentgrep.com/patent/US20140195813A1 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] - G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems - H04L 9/3247: {involving digital signatures} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/126: {the source of the received data} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 2221/032: Protect output to user by software means - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A method of performing a transaction between a first device and a second device, the first device having an established trusted communication relation with a first trusted device and the second device having an established trusted communication relation with a second trusted device, the first and the second trusted device each having an established trusted communication relation with a fourth trusted device, comprises the steps of the first device sending, to the first trusted device, first input data, and the second device sending, to the second trusted device, second input data, the first trusted device confirming the originality of the first device and sending the first input data to the fourth trusted device, and the second trusted device confirming the originality of the second device and sending the second input data to the fourth trusted device, the fourth trusted device, upon receipt of the first and the second input data, sending to the first trusted device a first receipt message comprising the first and the second input data, and sending to the second trusted device a second receipt message comprising the first and the second input data, the first trusted device sending, to the first device, the first receipt message, and the second trusted device sending, to the second device, the second receipt message. ## Claims ### Claim 1 A method of performing a transaction between a first device and a second device, the first device having an established trusted communication relation with a first trusted device and the second device having an established trusted communication relation with a second trusted device, the first and the second trusted device each having an established trusted communication relation with a fourth trusted device, the first and the second device being aware of a policy for the transaction specifying a role definition for the first and the second devices, comprising the steps of the first device sending, to the first trusted device, first input data, and the second device sending, to the second trusted device, second input data, the first trusted device confirming the originality of the first device, validating that the first device is acting in the role defined by the policy, and sending the first input data to the fourth trusted device, and the second trusted device confirming the originality of the second device, validating that the second device is acting in the role defined by the policy and sending the second input data to the fourth trusted device, the fourth trusted device, upon receipt of the first and the second input data, sending to the first trusted device a first receipt message comprising the first and the second input data, and sending to the second trusted device a second receipt message comprising the first and the second input data, the first trusted device sending, to the first device, the first receipt message and the second trusted device sending, to the second device, the second receipt message. ### Claim 2 (depends on 1) The method according to claim 1, wherein the step of confirming the originality of the first device further comprises the first trusted device adding, to the first input data, first reference information, and the step of confirming the originality of the second device further comprises the second trusted device adding, to the second input data, second reference information, and wherein the first and second receipt messages further comprise the first and second reference information. ### Claim 3 (depends on 1, 2) The method according to claim 1 or 2, further comprising the step of the first device receiving a first invitation message comprising information pertaining to first input data that the first device is requested to provide, and the second device receiving a second invitation message comprising information pertaining to second input data that the second device is requested to provide. ### Claim 4 The method according to any of the preceding claims, wherein the first input data comprises information pertaining to securely communicating with the first device, and the second input data comprises information pertaining to securely communicating with the second device. ### Claim 5 (depends on 4) The method according to claim 4 wherein the first input data comprises a signature key of the first device, and the second input data comprises a signature key of the second device. ### Claim 6 (depends on 5) The method according to claim 5, wherein the first reference information comprises a signature key of the first trusted device and the second reference information comprises a signature key of the second trusted device. ### Claim 7 (depends on 4, 5, 6) The method according to any of claims 4-6, wherein the first input data comprises an encryption key of the first device, and/or the second input data comprises an encryption key of the second device. ### Claim 8 (depends on 5, 6, 7) The method according to any of claims 5-7, further comprising the steps of the second device executing the signature key of the second device on a message to form a second device signed message, the second trusted device receiving the second device signed message from the second device, the second trusted device validating and adding a time stamp to the second device signed message, the second trusted device executing the signature key of the second trusted device on the second device signed message to form a second trusted and second device signed message, the first device receiving the second trusted and second device signed message. ### Claim 9 (depends on 8) The method according to claim 8, further comprising the step of the second trusted device sending the second trusted and second device signed message to the first device, or the second trusted device sending the second trusted and second device signed message to the second device and the second device sending the second trusted and second device signed message to the first device. ### Claim 10 (depends on 4, 5, 6, 7, 8, 9) The method according to any of claims 4-9, wherein the second device has an established trusted communication relation with a third device, and the third device has an established trusted communication relation with a third trusted device, further comprising the steps of the second device creating a digital delegation instruction allowing the third device to act on the second device's behalf in a transaction, the digital delegation instruction specifying a signature key of the third device and a signature key of the third trusted device, the second device sending the digital delegation instruction to the second trusted device for registration, and the second device sending the digital delegation instruction to the third device. ### Claim 11 (depends on 10) The method of claim 10, wherein the step of creating the digital delegation instruction comprises including the signature key of the first device and the signature key of the first trusted device in the digital delegation instruction. ### Claim 12 (depends on 10, 11) The method of claim 10 or 11, further comprising the steps of the third device executing the signature key of the third device on the digital delegation instruction and content data to be transferred from the third device to the first device to form a third device signed message, the third device sending the third device signed message to the third trusted device, the third trusted device validating the signature of the third device in the third device signed message, the third trusted device executing the signature key of the third trusted device on the third device signed message to form a third trusted and third device signed message, the third device receiving the third trusted and third device signed message, the first device receiving the third trusted and third device signed message from the third device, the first device extracting the digital delegation instruction from the third trusted and third device signed message and sending the digital delegation instruction to the second trusted device, the second trusted device validating the registration of the digital delegation instruction at the second trusted device and executing the signature key of the second trusted device on the digital delegation instruction to form a second trusted device signed digital delegation instruction, the first device receiving second trusted device signed digital delegation instruction from the second trusted device, the first device validating the second trusted device signature of the second trusted device signed digital delegation instruction, the first device validating, on basis of the digital delegation instruction, the third device signature of the third trusted and third device signed message and/or third trusted device signature of the third trusted and third device signed message. ### Claim 13 (depends on 8, 9, 10, 11, 12) The method of any of claims 8-12, further comprising the steps of the second device creating a digital delegation instruction allowing a third device to act on the second device's behalf in a transaction with the first device, the digital delegation instruction including a specification of reference information, to be provided by a third trusted device, having an established trusted communication relation with the third device, when a trusted communication relation between the first device and the third device is established, for the third device to be allowed to act on the second device's behalf in a transaction, the second device sending the digital delegation instruction to the second trusted device for registration, the third device receiving the digital delegation instruction from the second device, the first device and the third device establishing a trusted communication relation wherein the first device receives third reference information from the third trusted device, the third device sending a message including to the digital delegation instruction to the first device, the first device validating that the reference information specified in the digital delegation instruction corresponds to third reference information, the first device validating the registration of the digital delegation instruction at the second trusted device, the third device performing a transaction with the first device on the second device's behalf. ### Claim 14 (depends on 6) The method according to claim 6, wherein the information pertaining to first input data that the first device is requested to provide, and the information pertaining to second input data that the second device is requested to provide comprise a reference to a policy which specifies the form and content of the first and second input data, the form and content of the first and second reference information and a specification of which of the devices in transaction which may receive a receipt message. ### Claim 15 The method according to any of the preceding claims, further comprising the step of the first trusted device sending, to the fourth trusted device, a first confirmation message indicating that the first receipt message was received by the first trusted device, and the second trusted device sending, to the fourth trusted device, a second confirmation message indicating that the second receipt message was received by the second trusted device. ### Claim 16 (depends on 15) The method according to claim 15, further comprising the step of the fourth trusted device sending to the first and the second trusted device, upon receipt of the first and the second confirmation message, a confirmation complete message indicating that the first and the second confirmation message has been received by the fourth trusted device. ### Claim 17 (depends on 16) The method according to claim 16, further comprising the step of the first trusted device sending the confirmation complete message to at least one of: a first trusted device archive associated with the first trusted device, a first device archive associated with the first device, or the first device and/or the second trusted device sending the confirmation complete message to at least one of: a second trusted device archive associated with the second trusted device, a second device archive associated with the second device, or the second device. ### Claim 18 The method according to any of the preceding claims, further comprising the step of the first trusted device sending the first receipt message to at least one of: a first trusted device archive associated with the first trusted device, a first device archive associated with the first device, or the first device. and/or the second trusted device sending the second receipt message to at least one of: a second trusted device archive associated with the second trusted device, a second device archive associated with the second device or the second device. ### Claim 19 (depends on 18) The method according to claim 18, further comprising the step of the first trusted device archive, upon receipt of the first receipt message, sending an archiving complete message to the first trusted device, and/or the first device archive, upon receipt of the first receipt message, sending an archiving complete message to the first trusted device and/or the second trusted device archive, upon receipt of the second receipt message, sending an archiving complete message to the second trusted device, and/or the second device archive, upon receipt of the second receipt message, sending an archiving complete message to the second trusted device. ### Claim 20 The method according to any of the preceding claims, wherein the first trusted device serves also as the fourth trusted device and/or wherein the second trusted device serves also as fourth trusted device, and/or wherein the first trusted device serves also as the second trusted device. ### Claim 21 A method in a first trusted device of performing a transaction between first device and a second device, the first device having an established trusted communication relation with the first trusted device, the first trusted device having an established trusted communication relation with a fourth trusted device, comprising the steps of the first trusted device receiving, from the first device, first input data, the first trusted device confirming the originality of the first device, validating that the first device is acting in a role specified by a policy for the transaction, and sending the first input data to the fourth trusted device, the first trusted device receiving, from the fourth trusted device, a first receipt message comprising the first input data and second input data received by the fourth device, the first trusted device sending, to the first device, the receipt message. ### Claim 22 (depends on 21) The method according to claim 21, wherein the step of confirming the originality of the first device further comprises the first trusted device adding, to the first input data, first reference information, and wherein the first receipt message further comprises the first reference information and second reference information received by the fourth device.