IP Library Granted Patent US 10,867,326
Granted Patent B2
US 10,867,326 · App. 14/652,737 · Granted Dec 15, 2020

Reputation system and method

Inventors: Gisela Meister (Munich, DE); Dirk Wacker (Munich, DE); Katharina Wallhausser (Finsing, DE)
Assignee: GIESECKE+DEVRIENT MOBILE SECURITY GMBH
G06Q30/0609G06Q10/02G06Q20/385G06Q20/4014H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,867,326
App. No.
14/652,737
Granted
Dec 15, 2020
Kind
B2
Abstract

A method for securing a transaction in a reputation system includes the following steps: authenticating a user vis-à-vis an end device by means of an electronic proof of identity for releasing authentication data for the digital identity that are stored on the end device, and authenticating the digital pseudonym assigned to the user vis-à-vis the reputation system by means of the end device while employing the stored authentication data pertaining to the digital pseudonym. The electronic proof of identity can be present as an electronic identity card in the form of a portable data carrier.

Claims (25)

1. A method for securing a transaction system using a reputation system, an end device having a security module, and a portable data carrier, the method comprising the steps of:

receiving, by the security module, data from the portable data carrier that proofs a digital identity stored in the security module;

storing, by the security module, authentication data and the digital identity, wherein the digital identity is associated with one or more digital pseudonyms;

accessing, by the security module, at least one digital pseudonym using the authentication data;

sending, by the security module, the digital identity or at least one digital pseudonym to the reputation system;

mutually authenticating with the portable data carrier by the security module and based on the mutual authentication creating a channel between the portable data carrier and the end device;

authenticating, by the security module, a user of the end device through the channel using the authentication data;

based on the authenticating of the user, sending, by the security module, the authentication data to the reputation system;

identifying, by the reputation system, a transaction associated with the user;

based on the identified transaction, updating, by the reputation system, a reputation value; and

sending, by the reputation system, the reputation value to the security module, wherein the reputation value is a rating of the user or of the reputation system, and

wherein the reputation value is stored in the security module.

2. The method according to claim 1 , wherein for authentication of the digital pseudonym with respect to the reputation system the following steps are carried out:

establishing the digital identity assigned to the digital pseudonym and, checking the digital identity.

3. The method according to claim 2 , wherein within the context of the authentication with respect to the reputation system the following further steps are carried out:

establishing the reputation value assigned to the digital identity, and

assigning the reputation value to the digital pseudonym.

4. The method according to claim 1 , wherein the authentication data pertaining to the digital pseudonym are stored on the end device and/or on the portable data carrier, and checking the digital identity and assigning the reputation value are carried out by the reputation system.

5. The method according to claim 1 , wherein authenticating with respect to the reputation system is effected by a central entity of the reputation system when the reputation system comprises such a central entity, and a further security module of an arbitrary participant of the reputation system when the reputation system comprises no central entity.

6. The method according to claim 1 , wherein the end device and/or security module of the user derives a user-individual key from an electronic proof of identity stored in the portable data carrier within the context of authenticating the user, and within the context of authentication the following further steps are carried out:

transferring the user-individual key to the reputation system together with the authentication data pertaining to the digital identity by the end device, and

checking the assignment of the digital identity to the user-individual key by the reputation system.

7. The method according to claim 1 , further comprising:

forming a reputation profile of the user while taking into account different reputation values pertaining to digital identities of the user and respectively relating to different reputation systems.

8. The method according to claim 1 , wherein the reputation value is supplied by the security module of the user, a further security module and/or the central entity.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 18, 2017
From: GIESECKE & DEVRIENT GMBH
To: GIESECKE+DEVRIENT MOBILE SECURITY GMBH
Reel/Frame 043230/0485 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2015
From: MEISTER, GISELA; WACKER, DIRK; WALLHAUSSER, KATHARINA
To: GIESECKE & DEVRIENT GMBH
Reel/Frame 035921/0877 →
Priority Claims (1)
DE 10 2012 024 831 · Dec 17, 2012 · national
Continuity (1)
Related Publication 20150332361A1 · Nov 19, 2015