SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Open Market (OMKT) -- Ignore unavailable to you. Want to Upgrade?


To: GRC who wrote (567)8/28/1998 3:49:00 PM
From: GRC  Read Replies (1) | Respond to of 2004
 
More claim analysis of patents.

Following up on my earlier post about the claims, independent claim 6 also claims the client (buyer) computers. Thus, claim 6 (and claims 7-17 which depend from it) are not infringed by most e-commerce vendors.

Claim 18, below, is a method claim. This claim appears to be broader, and the buyer's computers aren't part of the infringement, rather use of them is part of the infringement. Also, I think the language is structured so that the seller infringes, not the buyer. That's important since buyer's wouldn't pay a license, and you can't effectively sue the buyers.

Generally the claim relates to buying something over the internet with a charge card or bank debit. The important issue is will e-commerce will require real-time authorization of credit card charges (as opposed overnight or an hour delayed)? Why?

Also, the claim has some security language. I don't know enough about SSL to know if that works as the claim describes. Could someone explain the way SSL works?

My comments follow each claim paragraph.

18. A method of effecting sales over a network sales system comprising a plurality of buyer computers and a plurality of merchant computers
interconnected by a public packet switched communications network, said method providing for real-time authorization of purchase transactions and comprising the steps of:

COMMENT: This just sets up the environment in which the method occurs. It doesn't matter who owns the computers, anyone who performs the method infringes. It does require real-time approval. Thus, one way around this would be delayed, i.e. not real time debiting. One question is how important is real time authorization? If shipping occurs the following day, why not wait and authorizing over night? Does anyone have an idea as to how important real time is to e-commerce? It may be important for downloads, but what about real goods?

CLAIM
storing digital advertisements in a database;

receiving a user inquiry at one of said buyer computers and, in response to said user inquiry, selecting one of said merchant computers, and transmitting a network request from said one of said buyer computers thereto over said public packet switched communications network;

COMMENT: All these 2 steps require is storing data and having the user request be sent over the internet. It seems all e-commerce would meet this limitation.

CLAIM
communicating one of said digital advertisements from one of said merchant computers to said one of said buyer computers over said public packet switched communications network in response to said network request from said buyer computer;

COMMENT: This requires the ad to be sent to the buyer, again, all e-coomerce would do this.

CLAIM
displaying said one of said digital advertisements at said one of said
buyer computers, and, in response to a user request, transmitting over said public packet switched communications network from said one of said buyer computers to one of said merchant computers a purchase message, and causing a payment request, comprising a payment amount, to be transmitted over said public packet switched communications network into a payment system comprising a financial authorization network external to said public packet switched communications network, in order to initiate authorization of purchase of a product having real monetary value advertised in said one of said digital advertisements and in order to initiate recordation of information pertaining to said payment request and an authorization in a
settlement database; and

COMMENT: The buyer sees the ad (web page), and a purchase request is sent (an order form). The seller sends a payment request in response to the order form. The payment request goes over the net to a private network (such as a banks). This initiates settlement (money transfer).

CLAIM
receiving said purchase message at one of said merchant computers, and
causing said product to be sent to a party conditioned on said purchase transaction having been authorized in real time by said financial authorization network external to said public packet switched communications network, based on an external credit card account or an external demand deposit account having sufficient credit or funds of real monetary value available to a principal making said payment, and conditioned on at least one message transmitted over said public packet switched communications network in connection with said purchase transaction not being a replay of a message previously transmitted over said public packet switched communications network;

COMMENT: The seller sends the product to the buyer if the payment was authorized in real time. This seems to be one way around, not real time authorization. Also, there is a redundancy check to make sure the same order isn't processed twice.

CLAIM
said payment request comprising at least one digital signature of
components that include components derived from said payment request, at least one of which digital signatures protects said payment request from forgery, including authenticating an identity of one of a plurality of principals as an originator of said payment request, at least one of which digital signatures protects said payment request from replay attack, and at least one of which digital signatures is computed based on a principal-specific secret key.

COMMENT: SSL - does SSL meet this definition? If so, most vendors would meet it. If not, then any vendor using SSL would avoid infringement.

Any comments are welcome, particularly on the real-time and SSL issues.