Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
  • H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
  • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
  • H04L2209/80—Wireless

Definitions

• the present invention relates to a procedure as defined in the preamble of claim 1 and to a system as defined in the preamble of claim 7 for reliable and safe identification of a contracting party in various contracts, deeds, offers, and deals requiring authen- tication by a notary and in other corresponding applications .
• a notariate, notary public or a corresponding functionary verifies that the con- tracting party really is the person he/she purports to be and in whose name he/she is signing the agreement.
• There is no known identification method based on an electronic signature identifying a person on the basis of an electronic signature would make things considerably easier because in this case the electronic signature could be sent over a telecommunica- tion network to a notariate, a notary public or a reliable third party for verification.
• the object of the present invention is to eliminate or at least to significantly reduce the problems described above.
• a specific object of the present invention is to disclose a new type of method and procedure for re- liable and safe identification of contracting parties.
• a further object of the invention is to disclose a system for reliably and acceptably implementing the identification of contracting parties as stipulated by law by making use of a telecommunication network.
• the telecommunication network used may be a mobile communication network, public telephone network, data network or a combination of these.
• the terminals used in the procedure may be any terminal devices compatible with the telecommunication network.
• a first contracting party is authenticated by means of a first terminal.
• the authentication may be accomplished using any method.
• the essential point is that the authentication is implemented in conformity with the standards apply- ing to electronic signature.
• a verification request is sent to a reliable third party for verification of the identity of the first contracting party.
• the verification request is preferably sent via the first terminal, which is also used for the authentication.
• the identity of the first party is confirmed for a second party by sending the second party an identification message given by the reliable third party.
• the invention makes it possible to implement a service corresponding to a notarial service in a flexible and advantageous manner.
• the invention allows easy introduction of electronic signature in conjunction with the use of mobile telephones and other suitable terminal devices. This makes it possible to use a mobile tele- phone as an instrument of payment, as a credit card or equivalent .
• the second party e.g. in the case of a real estate deal, is identified in the same way as the first party.
• the second party is also authenticated by means of a second terminal.
• the second party may use the first party's first terminal for his/her own identification.
• the second party uses his/her own subscription or other information individualising the second party in conjunction with the first terminal.
• Another possibility is to establish separate service points provided with terminal equipment for subscriber identification, which is utilised by both contracting parties for giving an electronic sample signature and for identification of the other party.
• the second contracting party is identified after the second party has received an identification and verification message concerning the first contracting party. Identify- ing the second party is useless unless the first party can be reliably identified.
• the verification request is saved to a verification database.
• This verification database may be a database server managed by a reliable party, such as a public authority.
• the record in question preferably contains information indicating the party who sent the verification request, the party to whom the verification and identification message is sent, the matter or contract to which the verification is related and the point of time of the event. The same information is preferably comprised in the verification requests sent by the first and second contracting parties .
• the system of the invention for reliable and safe identification of contracting parties comprises a telecommunication network and a terminal device connected to it and compatible with it.
• the telecommunication network may be a combination of a mobile communication network and a telephone network and the ter- minal device may be a mobile telephone.
• the telecommunication network may also be a data network, in which case the terminal device is preferably a computer or other terminal compatible with the data network.
• the system comprises means connected to a first terminal for authentication of a first contracting party.
• the system also comprises a reliable database apparatus or a corresponding application server, to which the verification request of the first contracting party is sent.
• This server or database may be under the management of a third party known to be reliable, and it may be connected e.g. via a data-secure link to the telecommunication network used for the operations.
• the database or server in question preferably comprises means for sending a verification and identification message to the second contracting party on the basis of identification by the reliable third party.
• the system can be used to identify and verify the second contracting party's identity for the first contracting party. It is also possible for each contracting party to be identified by a different reliable third party. This may be pos- sible in cases where the contracting parties are citizens of different countries or otherwise have established their identification data with different third parties .
• the advantages of the system of the invention reference is made to the advantages of the procedure of the invention.
• the system comprises a verification database server connected to an identification database server of a reliable third party.
• a record concerning the verification request and verification can be saved by the identification database server to allow examination and tracing at a later time.
• Fig. 1 represents a preferred system according to the present invention.
• Fig. 2 presents a block diagram representing an embodiment of the procedure of the invention.
• the system presented in Fig. 1 comprises a telecommunication network 1, which in this example is a combination of a mobile telephone network and the public telephone network.
• the system involves the use of two terminals TE1, TE2 , which are mobile stations and connected to a mobile communication network GSM and further to the public telephone network PSTN.
• the mobile stations are consistent with the current GSM standard, but, as is obvious to the skilled person, other applicable mobile stations can also be used.
• an identification and verification system TTP of a reliable third party is connected to the telecommunication network 1 .
• This identification and verification system comprises a first verification server TTP1 and a second verification server TTP2. These servers are connected via a suitable link to the telecommunication network, over which they communicate with the terminals TE1, TE2.
• the verification servers TTP1 and TTP2 are con- nected to a central storage server TTP3 , to which the verification servers write records concerning the verification and identification actions they have carried out.
• a first and a second contracting party are making a deal which requires verification of the identity of the contracting parties by a notary public.
• the first contracting party is first authenticated using his/her electronic signature, which may consist of e.g. a PIN code in a mobile station.
• the PIN code must be entered when the mobile station TE1 is activated. Therefore, upon receiving the correct PIN code, a mo- bile station belonging to a subscriber can send an electronic signature message to an address selected by the subscriber.
• Authentication is represented by block 21.
• the first contracting party sends a verification request to a verification server TTP1, block 22.
• the verification server receives the subscriber's request and checks the validity of the electronic signature supplied by the subscriber by comparing it with its own information about the subscriber, block 23.
• the verification server discovers the sub- scriber's identity and finds that the identification was successful, it sends an identification and verification message to the second contracting party to a 7
• a verification procedure for establishing the identity of the second contracting party is started.
• the second party is authenticated, whereupon he/she sends a confirmation and verification request to his/her own reliable third party, in this example to verification server TTP2 , block 27.
• verification server TTP2 verifies the identity of the second contracting party, block 28, and if the identity is found to be right, then an identification message is sent to the first contracting party, block 29. If the identification of the second contracting party in block 28 fails, then the procedure goes on to block 29 and the identification process is ended.

Priority Applications (4)

Applications Claiming Priority (2)

Publications (1)

Family

ID=8551296

Family Applications (1)

Country Status (7)

Cited By (6)

Families Citing this family (4)

Citations (5)

• 1998
  • 1998-03-17 FI FI980591A patent/FI980591A/fi not_active Application Discontinuation
• 1999
  • 1999-03-17 WO PCT/FI1999/000208 patent/WO1999048242A1/fi not_active Application Discontinuation
  • 1999-03-17 EP EP99908986A patent/EP1064753A1/en not_active Withdrawn
  • 1999-03-17 JP JP2000537340A patent/JP2002507812A/ja not_active Withdrawn
  • 1999-03-17 CA CA002324240A patent/CA2324240A1/en not_active Abandoned
  • 1999-03-17 AU AU28385/99A patent/AU751923B2/en not_active Ceased
  • 1999-03-17 CN CN 99804083 patent/CN1297636A/zh active Pending

Patent Citations (5)

Also Published As

Similar Documents

Legal Events