System and method for transparently providing certificate validation and other services within an electronic transaction
A system and method are disclosed for transparently providing certificate validation and other services without requiring a separate service request by either a relying customer or subscribing customer. In a preferred embodiment, after the subscribing customer digitally signs a document (e.g., a commercial document such as a purchase order), it forwards the document to a trusted messaging entity which validates the certificates of both the subscribing customer and relying customer and the respective system participants of which they are customers. If the certificates are valid, the trusted messaging entity appends a validation message to the digitally-signed document and forwards the document to the relying customer. A validation message is also preferably appended to a digitally-signed receipt from the relying customer and transmitted to the subscribing customer. In this way, both the relying customer and subscribing customer obtain certification of their respective counterparty to the transaction.
1. A method for providing at least one service via a communications network, said method comprising the steps of a trusted messaging entity:
receiving a first certificate that names a first participant and a second certificate that names a second participant, wherein a four-corner trust model comprises the first participant, the second participant and a root entity, said root entity being separately disposed from said first participant and said second participant, and comprising a root certification authority that issues digital certificates to the first participant and the second participant;
creating a first message, the first message comprising a validation request;
signing the first message with a private key associated with the first certificate;
transmitting the first message via the communications network to the second participant and the root entity, whereby the trusted messaging entity acts as an agent for the first participant, said first participant being a first disclosed principal of said agent;
creating a second message, the second message comprising a validation request;
signing the second message with a private key associated with the second certificate;
transmitting the second message via the communications network to the first participant and the root entity, whereby the trusted messaging entity acts as an agent for the second participant, said second participant being a second disclosed principal of said agent; and
receiving, from the root entity, at least one validation response to the first validation request.
2. A method for providing at least one service via a communications network, said method comprising the steps of a first participant:
providing a trusted messaging entity with a first certificate that names the first participant, said trusted messaging entity having received a second certificate that names a second participant, wherein a four-corner trust model comprises the first participant, the second participant and a root entity, said root entity being separately disposed from said first participant and said second participant, and comprising a root certification authority that issues digital certificates to the first participant and the second participant;
receiving, via the communications network, a message, said message comprising a validation request, said message having been created by the trusted messaging entity and signed by the trusted messaging entity with a private key associated with the second certificate, whereby the trusted messaging entity acts as an agent for the second participant, said second participant being a second disclosed principal of said agent; and
receiving, from the root entity, at least one validation response to the first validation request.