# US 2014/0196107 A1 · Secure digital communications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0196107 A1
- Document ID: US20140196107A1
- Status: Published application
- Kind: A1
- Application number: 14/202,508
- Filed: 2014-03-10
- Published: 2014-07-10
- Earliest claimed: 2011-09-08
- Assignees: Dts Steering Group AB
- Applicants: Dts Steering Group AB
- Inventors: Niclas LINDBERG; Anders ORRE; Ilio VIRGILI
- Web page: https://patentgrep.com/patent/US20140196107A1

## CPC

- H04L 63/00: {Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00)}
- G06Q 20/405: {Establishing or using transaction specific rules}
- H04L 9/3247: {involving digital signatures}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Policies are used when performing a transaction between a first and a second device, the first device having an established trusted communication relation with a first trusted device and the second device having an established trusted communication relation with a second trusted device, and the first and the second trusted device each having an established trusted communication relation with a third trusted device. A policy defines a set of constructs for creating rules to control the boundaries of a transaction. The policy defines role definition stipulating what interacting identities must have been validated as for the transaction to occur. The policy also defines a set of digest method algorithms or data referral methods to be used in the transaction.

## Claims

### Claim 1

A method of performing a transaction between a first device and a second device, the first device having an established trusted communication relation with a first trusted device and the second device having an established trusted communication relation with a second trusted device,
the first and the second trusted device each having an established trusted communication relation with a third trusted device,
comprising the steps of
a) the first device selecting, from a set of policies known to the devices, a policy for the transaction, wherein the selected policy comprises
a first role definition comprising
form and content of first input data, if any, to be provided by the first device, and
form and content of first reference data, if any, pertaining to the first device and which is to be provided by the first trusted device,
a second role definition comprising
form and content of second input data, if any, to be provided by the second device, and
form and content of second reference data, if any, pertaining to the second device and which is to be provided by the second trusted device,
a referral method definition pertaining to at least one referral method to be used by the devices for processing respective input data and reference data,
b) the second device receiving an invitation message comprising information indicating the selected policy,
c) the second device accessing the selected policy to obtain the roles definition and the referral method definition,
d) the second device processing the second input data according to the referral method to form a second representative value, and the first device processing the first input data according to the referral method to form a first representative value,
e) the first trusted device receiving, from the first device, the first representative value, and the second trusted device receiving, from the second device, the second representative value,
f) the first trusted device confirming the originality of the first device, processing the first reference information according to the referral method, validating that the first input data is according to the policy and including the first representative value to form a first referenced representative value,
g) the second trusted device processing the second reference information according to the referral method, and including the second representative value to form a second referenced representative value,
h) the third trusted device receiving the first referenced representative value from the first trusted device, and the second referenced representative value from the second trusted device,
i) the third trusted device validating first and second referenced representative value against the policy,
j) the first trusted device and the second trusted device receiving, from the third trusted device, a transaction receipt comprising the first and second referenced representative value,
k) the first trusted device validating the second referenced representative value in the received transaction receipt against the second role definition, and the second trusted device validating the first referenced representative value in the received transaction receipt against the first role definition.

### Claim 2

The method of any of the preceding claims, wherein at least one of the first and the second role definitions comprises a device enumeration restriction specification specifying a minimum and/or maximum number of devices allowed for a role definition during a specific transaction.

### Claim 3 (depends on 1)

The method of claim 1, wherein at least one of the first and the second role definition further comprises at least one input data restriction specifying a set of allowed options for the input data specified in at least one of the first and second role definition.

### Claim 4 (depends on 1)

The method of claim 1, wherein at least one of the first and second role definition further comprises at least one reference data restriction specifying a set of allowed options for the reference data specified in at least one of the first and second role definition.

### Claim 5 (depends on 3, 4)

The method of claim 3 or 4, wherein at least one input data restriction and/or at least one reference data restriction specifies a set of allowed options for any device acting in any role defined in the role definition.

### Claim 6 (depends on 3, 4)

The method of claim 3 or 4, wherein at least one input data restriction and/or at least one reference data restriction specifies a set of allowed options for any device acting in a specified role defined in the role definition.

### Claim 7 (depends on 3, 4)

The method of claim 3 or 4, wherein at least one input data restriction and/or at least one reference data restriction specifies a set of allowed options for a specified device acting in a specified role defined in the role definition.

### Claim 8

The method of any of the preceding claims, further comprising defining a first role and a second role, wherein the second role is defined by a reference to the first role, such that the second role inherits at least part of a definition of the first role.

### Claim 9

The method of any of the preceding claims, wherein the policy further comprises a restriction regarding a communications technology to be used for transferring data during the transaction.

### Claim 10

The method according to any of the preceding claims, wherein the policy further comprises a specification of which roles or devices may receive the receipt message of the transaction.

### Claim 11

The method according to any of the preceding claims, wherein the policy further comprises information pertaining to the ability for a device in a role to delegate its participation in the transaction.