Patent EA-003620-B1 (EA)
Title: System and method for electronic transmission, storage and retrieval of authenticated documents
Inventor: BISBEE STEPHEN F
IPC: G06F21/64
Filed: 1999-05-04
Abstract: 1. A method of executing a transaction by transferring authenticated information objects having respective verifiable evidence trails, comprising the steps of: retrieving, by a first party from a trusted repository, an authenticated information object, wherein the authenticated information object includes a first digital signature of the first party, a first certificate relating at least an identity and a cryptographic key to the first party, date and time stamps and a second certificate applied by the trusted repository, and a digital signature of the trusted repository; the first digital signature and first certificate have been validated by the trusted repository; the second certificate relates at least an identity and a cryptographic key to the trusted repository; and the authenticated information object has been stored under the control of the trusted repository; attaching instructions to a retrieved authenticated object; transmitting the retrieved authenticated object and the attached instructions to a second party; receiving, by the second party, a transmitted retrieved authenticated object and attached instructions; presenting, by the second party to the trusted repository, a received transmitted retrieved authenticated object and attached instructions; and executing the transaction according to the instructions presented to the trusted repository. 2. The method of claim 1, wherein the instructions cause the trusted repository to transfer ownership of the authenticated information object from the first party to the second party. 3. The method of claim 2, wherein the trusted repository validates a digital signature of the second party included with the presented object, applies date and time stamps to the presented object, and signs the stamped presented object with its digital signature. 4. The method of claim 2, wherein the transfer of ownership of the authenticated information object includes formation of a second authenticated information object for evidencing payment in a verifiable evidence trail in a registry. 5. The method of claim 1, further comprising the step of transmitting the retrieved authenticated object and the attached instructions by the trusted repository to each of a plurality of second parties in accordance with the attached instructions. 6. The method of claim 5, wherein the attached instructions cause the trusted repository to take at least one of the following actions: accept a first-received response, accept a greatest-value response, accept a response greater than an amount, and accept a response presented before a closing date. 7. The method of claim 1, wherein the instructions provide a syndicated transaction. 8. The method of claim 7, wherein the syndicated transaction relates to a set of authenticated information objects, the instructions permit at least one second party to accept at least one authenticated information object in the set, and ownership of authenticated information objects not accepted by the at least one second party is retained by the first party. 9. The method of claim 8, wherein acceptance by the at least one second party transfers to the at least one second party rights to a revenue stream and a corresponding default risk. 10. The method of claim 1, wherein the first party applies a digital signature to the retrieved authenticated object and the instructions before they are transmitted to the second party. 11. The method of claim 1, wherein the executing step comprises the steps of: extracting instructions presented to the trusted repository from the received transmitted retrieved authenticated object and attached instructions; interpreting extracted instructions to determine at least one term of the transaction; and enforcing the at least one term in executing the transaction. 12. The method of claim 11, wherein the instruction conveys a term-of-use of the retrieved authenticated information object. 13. The method of claim 11, wherein the instruction authorizes the trusted repository to transfer a restricted right of ownership in the retrieved authenticated information object. 14. The method of claim 13, wherein the retrieved authenticated information object is at least one of a limited edition of information objects and has respective identification information. 15. The method of claim 14, wherein the instruction includes a term that conveys a purpose for creating a limited edition and a term that includes a restriction enforced when the object is accessed. 16. The method of claim 11, wherein the instruction causes to be performed an action of displaying an authenticated name conveyed in a certificate with an authenticated information object. 17. The method of claim 16, where the authenticated information object includes at least one digital signature. 18. The method of claim 1, wherein the instructions cause the trusted repository to transfer control of the authenticated information object from the trusted repository to a second trusted repository. 19. The method of claim 1, wherein the instructions cause the trusted repository to transfer possession of the authenticated information object to a second trusted repository. 20. The method of claim 1, wherein the trusted repository implements a subscriber-based membership system governing the granting of access authorization to an authenticated information object based on established assurance levels in identifying certificate holders and in business rule enforcement. 21. The method of claim 1, wherein the first party applies a digital signature to the retrieved authenticated object and the instructions before the second party presents the object and instructions to the trusted repository, thereby terminating further execution of the transaction. 22. The method of claim 1, wherein the second party presents further instructions to the trusted repository, and the second party digitally signs and applies a third certificate to the presented object and instructions. 23. The method of claim 22, further comprising the step of communicating, from the first party to the second party after the trusted repository receives the presented object and instructions, a response that includes the first digital signature and the first certificate. 24. The method of claim 23, wherein the first party and second party each communicate a plurality of responses before the transaction is executed. 25. A method of executing a transaction by transferring authenticated information objects having respective verifiable evidence trails, comprising the steps of: retrieving, by a first party from a trusted repository, an authenticated information object, wherein the authenticated information object includes a first digital signature of the first party, a first certificate relating at least an identity and a cryptographic key to the first party, date and time stamps and a second certificate applied by the trusted repository, and a digital signature of the trusted repository; the first digital signature and first certificate have been validated by the trusted repository; the second certificate relates at least an identity and a cryptographic key to the trusted repository; and the authenticated information object has been stored under the control of the trusted repository; attaching first instructions to a retrieved authenticated object; transmitting the retrieved authenticated object and the first instructions to a second party; receiving, by the second party, a transmitted retrieved authenticated object and first instructions; communicating, by the second party to the first party, a response to a received transmitted retrieved authenticated object and first instructions; sending second instructions from the first party to the trusted repository; and executing the transaction according to the second instructions. 26. The method of claim 25, wherein the instructions cause the trusted repository to transfer ownership of the authenticated information object from the first party to the second party. 27. The method of claim 26, wherein the transfer of ownership of the authenticated information object includes formation of a second authenticated information object for evidencing payment in a verifiable evidence trail in a registry. 28. The method of claim 25, wherein the first party applies a digital signature to the retrieved authenticated object and the instructions before they are transmitted to the second party. 29. The method of claim 25, wherein the first and second instructions provide a syndicated transaction. 30. The method of claim 29, wherein the syndicated transaction relates to a set of authenticated information objects, the first instructions permit at least one second party to accept at least one authenticated information object in the set, and ownership of authenticated information objects not accepted by the at least one second party is retained by the first party. 31. The method of claim 30, wherein acceptance by the at least one second party transfers to the at least one second party rights to a revenue stream and a corresponding default risk. 32. The method of claim 25, wherein the instructions cause the trusted repository to transfer control of the authenticated information object from the trusted repository to a second trusted repository. 33. The method of claim 25, wherein the instructions cause the trusted repository to transfer possession of the authenticated information object to a second trusted repository. 34. The method of claim 25, wherein the trusted repository implements a subscriber-based membership system governing the granting of access authorization to an authenticated information object based on established assurance levels in identifying certificate holders and in business rule enforcement. 35. The method of claim 25, wherein the second party's response includes third instructions, and the second party digitally signs and applies a third certificate to the response. 36. The method of claim 35, further comp