Gump: grand unified meta-protocol for simple standards-based electronic commerce transactions

Abstract

A method for facilitating two-party electronic commerce transactions between trading partners on an unsecure network, such as the Internet. In one example, a client makes application for registration by a financial institution in which the client has one or more accounts. The client submits satisfactory proof of identity and a public key portion for a digital signature to the financial institution. The financial institution may provide the client a one time secret by a secure route, such as conventional mail, which can then be used by the client to show proof of its identity. The financial institution authenticates the one time secret and combines it with the client's public key in a GUMP Relationship Certificate (GRC), which it issues to the client over the network. Once issued, the GRC can be used by the client to authenticate its right to access its account(s) or other products or services at the financial institution and when conducting other electronic transactions over the network. The client digitally signs any such transaction to authenticate its right to conduct the transaction. A delegate may be enlisted by the client to negotiate the purchase of goods from a seller or for other purposes, using a GUMP Delegate Certificate. The concept can be extended to other three party transactions, such as issuing an electronic Letter of Credit (LOC).