System and method for cryptographic-chain-based verification of postage transaction records

Patent metadata

Field	Value
Publication number	US-11966912-B2
Application number	US-201715633692-A
Country	US
Kind code	B2
Filing date	Jun 26, 2017
Priority date	Jun 26, 2017
Publication date	Apr 23, 2024
Grant date	Apr 23, 2024

Abstract

In certain embodiments, cryptographic-chain-based verification of postage transaction records may be facilitated. In some embodiments, a customer computer system may obtain a customer private key associated with a customer from a secure local storage at the customer computer system. The customer computer system may obtain (i) a first vendor digital signature derived from a first postage transaction record and (ii) a second postage transaction record. The customer computer system may create a customer digital signature based on (i) the customer private key, (ii) the first vendor digital signature, and (iii) the second postage transaction record. The customer computer system may provide the customer digital signature to a vendor computer system associated with the postage vendor, and, in response, obtain a second vendor digital signature from the vendor computer system, wherein the second vendor digital signature is based on (i) a vendor private key associated with the postage vendor and (ii) the customer digital signature.

First claim

What is claimed is:

1. A method of facilitating cryptographic-chain-based verification of postage transaction records, the method being implemented by a customer computer system associated with a customer of a postage vendor, the customer computer system comprising one or more processors executing computer program instructions that, when executed, perform the method, the method comprising:
obtaining a customer private key associated with the customer from a secure local storage at the customer computer system;
obtaining a first vendor digital signature derived from a first postage transaction record, the first postage transaction record relating to a previously executed transaction;
responsive to a purchase request, completing a current purchase transaction for a product associated with the postage vendor and storing information associated with the purchase transaction as at least part of a second postage transaction record, the completing being performed without communicating with a vendor computer system;
creating a customer digital signature using (i) the customer private key, (ii) the first vendor digital signature, and (iii) the second postage transaction record;
providing validation of the completed current purchase transaction to the vendor computer system associated with the postage vendor by transmitting the customer digital signature to the vendor computer system;
responsive to transmitting the customer digital signature, obtaining a second vendor digital signature from the vendor computer system, the second vendor digital signature being different from the first vendor digital signature and being created using (i) a vendor private key associated with the postage vendor and (ii) the customer digital signature; and
storing the second vendor digital signature to be used in a subsequent transaction.

2. The method of claim 1 , wherein the first vendor digital signature is created at a first time based on (i) the vendor private key associated with the postage vendor and (ii) a prior customer digital signature created at a second time prior to the first time.

3. The method of claim 2 , further comprising:
creating the prior customer digital signature based on (i) the customer private key, (ii) the first postage transaction record, and (iii) a prior vendor digital signature.

4. The method of claim 3 , further comprising:
prior to the second time, creating combined first information based on (i) the first postage transaction record and (ii) the prior vendor digital signature; and
wherein creating the prior customer digital signature comprises using the customer private key to sign the combined first information to create the prior customer digital signature.

5. The method of claim 4 , wherein creating the prior customer digital signature comprises:
hashing at least the combined first information to create a first hash; and
encrypting the first hash based on the customer private key to create the prior customer digital signature.

6. The method of claim 2 , wherein the vendor private key is used to sign at least the prior customer digital signature to create the first vendor digital signature at the first time.

7. The method of claim 6 , wherein the signing of the prior customer digital signature is performed by (i) encrypting the prior customer digital signature based on the vendor private key or (ii) encrypting a hash of at least the prior customer digital signature based on the vendor private key.

8. The method of claim 1 , further comprising:
performing, based on a vendor public key corresponding to the vendor private key, verification of the second vendor digital signature obtained from the vendor computer system; and
storing, based on the verification indicating that the second vendor digital signature is valid, the second vendor digital signature at the customer computer system in association with a next postage transaction record relating to the subsequent transaction.

9. The method of claim 8 , wherein performing the verification of the second vendor digital signature comprises:
hashing at least the customer digital signature to create a reference hash;
decrypting the second vendor digital signature based on the vendor public key to create a decrypted version of the second vendor digital signature; and
determining whether the reference hash matches the decrypted version of the second vendor digital signature, the verification indicating that the second vendor digital signature is valid based on the reference hash matching the decrypted version of the second vendor digital signature.

10. The method of claim 1 , wherein the postage vendor is a vendor for one or more postal carriers.

11. A system for facilitating cryptographic-chain-based verification of postage transaction records, the system comprising: a customer computer system that comprises:
one or more processors; and
memory storing computer program instructions that, when executed by the one or more processors, cause the customer computer system to perform operations comprising:
obtaining a customer private key associated with a customer from a secure local storage at the customer computer system;
obtaining (i) a first vendor digital signature derived from a first postage transaction record the first postage transaction record relating to a previously executed transaction and (ii) a second postage transaction record different from the first postage transaction record and relating to a subsequent transaction;
creating a customer digital signature based on (i) the customer private key, (ii) the first vendor digital signature, and (iii) the second postage transaction record;
providing the customer digital signature to a vendor computer system associated with a postage vendor; and
responsive to providing the customer digital signature, obtaining a second vendor digital signature from the vendor computer system, the second vendor digital signature being based on (i) a vendor private key associated with the postage vendor and (ii) the customer digital signature.

12. The system of claim 11 , wherein the first vendor digital signature is created at a first time based on (i) the vendor private key associated with the postage vendor and (ii) a prior customer digital signature created at a second time prior to the first time.

13. The system of claim 12 , wherein the vendor private key is used to sign at least the prior customer digital signature to create the first vendor digital signature at the first time.

14. The system of claim 13 , wherein the signing of the prior customer digital signature is performed by (ii) encrypting the prior customer digital signature based on the vendor private key or (ii) encrypting a hash of at least the prior customer digital signature based on the vendor private key.

15. The system of claim 11 , wherein the operations further comprise:
performing, based on a vendor public key corresponding to the vendor private key, verification of the second vendor digital signature obtained from the vendor computer system; and
storing, based on the verification indicating that the second vendor digital signature is valid, the second vendor digital signature at the customer computer system in association with a next postage transaction record.

16. The system of claim 15 , wherein performing the verification of the second vendor digital signature comprises:
hashing at least the customer digital signature to create a reference hash;
decrypting the second vendor digital signature based on the vendor public key to create a decrypted version of the second vendor digital signature; and
determining

Assignees

• Stamps Com Inc
• Auctane Inc

Inventors

• Lu Yang
• Biswas Michael

Classifications

• G06Q20/382 Primary

  insuring higher security of transaction · CPC title

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title

• G06Q20/3825

  Use of electronic signatures · CPC title

• G06Q2250/05

  using cryptography · CPC title