Abstract: Techniques are described for facilitating use of sequences of invocable services in a configurable manner, including by providing a metering service that tracks the use of invocable services by other invocable services or applications. In at least some situations, the invocable services are fee-based Web services or other fee-based network-accessible services, and are made available by providers of the services for use by others in exchange for fees defined by the service providers. The described techniques facilitate use of a sequence of such invocable services by applications in a manner configured by the creators of the applications and providers of the services, including to allow the application creators to define pricing terms that will be used to determine fees that end users of the applications will be charged for use of the invocable services via the applications.

Abstract: A method of providing communication service, includes receiving user identification information and first communication service criteria. The user identification information identifies a user, while the first communication service criteria describe a first communication service requested by the user. The method also includes generating a first communication service order based on the first communication service criteria. The first communication service order includes the user identification information and the communication service criteria; The method further includes selecting premise equipment for the user and generating an equipment order, wherein the equipment order includes the user identification information and identifies the selected premise equipment. Additionally, the method includes transmitting the first communication service order to a first service provider and transmitting the equipment order to an equipment provider.

Abstract: In one embodiment, a technique for enhancing the inspection of data sent from a server is provided. By modifying a client request in an effort to prevent the transformation (e.g., encoding and/or compression) of data by the server, unencoded data may be received, which can be inspected without the overhead associated with first decoding the data. Further, in the event the data is encoded despite modifying the client request to prevent such encoding, the server may be untrustworthy and one or more appropriate actions may be taken.

Abstract: Computer-implemented system and methods for authenticating the identity of a person, for example a customer (1) of an E-Commerce web site (15). The web site or other verification “client” (110) contacts a verification engine (10, 100) (“Authentex”), which may be implemented as a web server (604). The verification engine (10), in turn, has limited access to a plurality of independent, third-party secure databases (21, 112) which are maintained by Trusted Validators (3, 610, 620, etc), which are entities such as banks that have a pre-existing relationship with customer (FIG. 4), and due to that relationship, acquire and maintain “out-of-wallet” data (4) that may be useful to authenticate the identity of the customer. That confidential customer data—held by the third-party “Trusted Validators”—is not disclosed.

Abstract: The present disclosure attempts to migrate from a first authenticator to a second authenticator. In the most preferred embodiment, the first step is to migrate the data that is not stored encrypted by a traditional replication or transformation between the datastores of the authenticators. The new authenticator is placed in position, while the old authenticator is maintained. When a user attempts to login, servlets check to see if the user's password exists within the datastore for the new authenticator. If not, then the user is sent to the old authenticator's sign-on page. When the user enters their authentication credentials into the old authenticator, a code snippet or second servlet will capture this information and, on confirmation from the old authenticator that the user is properly authenticated, use the captured information to populate the new datastore.

Abstract: A document distribution system transfers a document from a source computer to a destination computer in the form of a print file. The print file defines the appearance of the document in a code suitable for telling a printer how to print the document. The source computer executes “license stamper” software for embedding an encoded license stamp into the print file before it is sent to the destination computer. Viewer software executed by the source computer receives and parses the print file to determine whether it contains the license stamp. If so, the viewer may generate a video display of the document defined by the print file or may print the document by sending the print file to a printer. However if the viewer receives a print file not containing the embedded license stamp, the viewer refrains from displaying or printing the document.

Abstract: Redirection of streaming content is described. In an implementation, a method includes receiving a request at a client from another client, wherein the request is to redirect on-demand content being streamed from a head end to the other client and includes a bookmark that specifies a point in time during an output of the on-demand content by the second client. A communication is formed for being communicated to the head end to cause redirection of the streaming of the on-demand content to the client corresponding to the point in time specified by the bookmark.

Abstract: A method, system and device for sharing rights adapted to be associated with items, the method and system including generating at least one of usage rights and meta-rights for the items; defining, via the usage rights, a manner of use for the items; and defining, via the meta-rights, a manner of rights transfer for the items. The device including receiving at least one of usage rights and meta-rights for the items; interpreting, via the usage rights, a manner of use for the items; and interpreting, via the meta-rights, a manner of rights transfer for the items. The usage rights or the meta-rights include at least one state variable that is shared by one or more rights.

Abstract: A method and system to digitally sign a content license associated with content, and to distribute content via a network in a geographically controlled manner, commences when a content requester requests delivery of the encrypted content. A content delivery system performs a content to determine a geographic location associated with the content requester. The content requestor authorization process may also determine geographic access criteria associated with the content, and whether the geographic location complies with the geographic access criteria. The content delivery system will release the content for delivery to the content requestor if the content location complies with the geographic access criteria.

Abstract: A method and apparatus for executing electronic transactions using cryptographically-enabled accounts stores cryptographically-enabled account information and instructions, receives a cryptographically-encoded permission certificate, and processes the received permission certificate to execute the transactions.

Abstract: A method for providing a pay-direct-to-owner (PDO) online transaction monetization service, for products and services delivered by online download, email, postal service mail, commercial delivery service, pick-up or performance on-site, utilizing web-based server systems to interface with telecom, wireless, satellite and cable internet service provider (ISP) company systems, separately or in concert, to process and close sales transactions transferring absolute ownership rights, initiated from any online location or website using any internet connected device. This business method will protect and monetize downloadable digital files and other products offered for sale online by systematically collecting payment for online purchases from ISPs and directing those payments to a product owner through a third-party online transaction payment collection conduit.

Abstract: Extensible grammar-based rights expression system for processing rights expressions including an interpreter with plug-in subcomponents, a validator, and a framework. In another embodiment, system includes a framework having an extensible architecture with extensibility points for adding extensions to the grammar, and an interpreter, the extensions defining semantics and syntax of new rights expressions. A method for processing rights expressions is also provided having the steps of registering plug-in components, making a programmatic call, finding and invoking appropriate plug-in components, evaluating the request against the grant, and returning an authorization result. In another embodiment, method includes the steps of providing an extensible grammar-based rights expression system having an extensible architecture with an interpreter, evaluating the request against the grant using the interpreter, and returning an authorization result.

Abstract: Systems and methods for the dynamic processing of royalties are disclosed. Sales records are processed on a transaction basis rather than in batch mode. This process also allows correction of information retroactively, rather than delaying the entire processing of the information. One embodiment includes a system comprising a message broker in communication with a plurality of clients and services, a state machine, a processor and a time manager. The message broker interacts with the processor to execute a common service based on events produced by the state machine. Another embodiment includes a method comprising providing a rate matrix, receiving a sales record from a database and calculating a royalty payment using the sales record and the rate matrix.

Abstract: Customers make purchases from online merchants using personal information, such as payment and shipping information, stored with an online information service. The merchants may optionally report information about each customer's purchases back to the information service, which may incorporate the information into a history page that is accessible to the customer. The information service may also use the aggregated purchase history data to generate an “interests” profile for the customer, which may be disseminated to the merchants and used to customize their web sites. The web pages of the merchants may include a reference to an object, such as a graphic, that is served by the information service. For customers that are registered with the information service, this object may be customized with the name of the customer, and may be selectable by the customer to make single-action purchases.

Abstract: Subscriptions to stored data for different computer systems and mobile devices are generated based on distribution criteria and application data to control what portions of particular types of data should go to a particular computer system or mobile computing device, each of which may be identified as a data site. The particular type of data may include a business object type or a publication in a publish-and-subscribe model of data replication. The distribution criteria may include an attribute of the type of data to be distributed, or may be based on a relationship of data with an employee that uses a data site or on a responsibility of an employee that uses a data site. The distribution criteria also may include a query executable against portions of the application data or other types of complex processing logic.

Abstract: A method and system for purchased-based segmentation of potential customers employs the use of actual, observed purchases instead of presumptions and correlations to improve the accuracy of segmentation and involves collecting empirical data for a client on actual purchasing behavior of a group of customers and applying statistical modeling techniques to the empirical purchasing behavior data to identify segments or clusters of the customers that exhibit similar purchasing propensity characteristics. Thereafter, the segments or clusters are further differentiated from one another according to other factors having a tendency to directly affect actual purchasing behavior of the customers within the segments or clusters, and potential customers are then identified according to a correlation with the segments or clusters for customized marketing.

Abstract: Techniques are described for facilitating interactions between computing systems, such as by performing transactions between parties that are automatically authorized via a third-party transaction authorization system. In some situations, the transactions are programmatic transactions involving the use of fee-based Web services by executing application programs, with the transaction authorization system authorizing and/or providing payments in accordance with private authorization instructions previously specified by the parties. The authorization instructions may include predefined instruction rule sets that regulate conditions under which a potential transaction can be authorized, with the instruction rule sets each referenced by an associated reference token.

Abstract: An improved interactive network system is provided that allows the Network Operator to control the transfer of information to and from the network end users, the system preferably using triggers or markers embedded within the programming broadcast to users via the network. As a consequence of this system, the Network Operator is able to efficiently garner revenues from third parties transacting business over the network and to control the look and feel of programming offered to network users. Additionally the system can be used as a means of limiting network access, filtering programming, providing on-screen graphics or audible signals for particular programming types or providers, bookmarking programming, profiling network users, targeting advertising, and simplifying network transactions.

Abstract: Techniques are described for facilitating interactions between computing systems, such as by performing transactions between parties that are automatically authorized via a third-party transaction authorization system. In some situations, the transactions are programmatic transactions involving the use of fee-based Web services by executing application programs, with the transaction authorization system authorizing and/or providing payments in accordance with private authorization instructions previously specified by the parties. The authorization instructions may include predefined instruction rule sets that regulate conditions under which a potential transaction can be authorized, with the instruction rule sets each referenced by an associated reference token.

Abstract: A system, a method and a computer program product for tracking usage of digital content on user devices. A license to play digital content data is transmitted to a user. An user watermark is generated by the user device using watermarking instructions and usage rights associated with the digital content. The user watermark is separate from the water mark created outside the user device. Further, information is transmitted to a logging site whenever the content data is played by the content player or copied from the content player to an external medium so that usage of the licensed content data can be tracked.

Abstract: A method, apparatus, and computer instructions for leasing a unique digital item in a network data processing system. A listing request is received for a payment and a deposit in the account of a first party. A listing request is received for a unique digital item in the account of a second party. Responsive to receiving the listing requests, the respective digital properties are transferred to a temporary storage account in association with retrieval tags. Listings for the digital properties appear on a trusted third-party leasing service. A lease contract is drawn up between the parties. After all parties have signed the lease agreement, the payment is transferred to the second party and the unique digital item is transferred to the first party. The deposit is held by the trusted third-party leasing service until the unique digital item is returned.

Abstract: An apparatus, program product and method for determining unreturned standby resource usage. Unreturned standby resource data is monitored and stored separately from other standby resource data for billing and other accounting purposes.

Abstract: A method for performing a high-speed search for a content key associated with encrypted content for a key-separation-type content management method where content keys and pieces of encrypted content are correlated by ID information and stored in different recording media. An external recording medium stores content files including: pieces of encrypted content that are encrypted with different encryption keys; and content IDs, each associated with a corresponding piece of encryption content, and a semiconductor recording medium stores a list including: encryption key storage location information, each indicating where a corresponding encryption key is stored; and content IDs, the list sorted in accordance with the content IDs. When encrypted content is played back, the list is searched to find encryption key storage location information associated with content ID that matches the content ID of the encrypted content, and the encryption key is read based on the encryption key storage location information.

Abstract: The invention provides a method and system for locally tracking network usage and enforcing usage plans at a client device. In an embodiment of the invention, a unique physical key, or token, is installed at a client device of one or more networks. The key comprises a usage application and one or more access parameters designated the conditions and/or limits of a particular network usage plan. Upon initial connection to the network, the usage application grants or denies access to the network based on an analysis of the current values of the access parameters. Therefore, network usage tracking and enforcement is made simple and automatic without requiring any back-end servers on the network while still providing ultimate flexibility in changing billing plans for any number of users at any time.

Abstract: A system and method for the real-time management of a device, and more particularly to the allocation of electronic wallets that are associated with one or more devices and various controls that enable at least two entities to manage how the device is utilized for various activities and to pay for goods and services. Each device is associated with at least two electronic wallets, a user wallet and an administrator wallet. The administrator can establish rules that designate how and when the device can be used and which wallet will be used to pay for goods and services desired by the user, but in the event the user wallet is depleted or low on funds, the administrator wallet can serve as a backup funding source for specified types of goods and/or services.

Abstract: A method and system for sharing online user information in an anonymous manner. The system associates an identifier with anonymized information of the user, and sends the anonymized user information to a receiving party. In one embodiment, the system receives a temporary id with personally identifiable information from a Web site, uses the personally identifiable information as a key to obtain the anonymized information from a data source, and sends the temporary id with the anonymized information to the receiving party. The receiving party uses the temporary id, previously received by the Web site, as a key to obtain the anonymized information of the user. In another embodiment, the system receives a temporary id from a Web site with a cookie from the user, uses the cookie as a key to obtain the anonymized information from a data source, and sends the temporary id with the anonymized information to the receiving party.

Abstract: Metadata driven methods and systems utilized to process financial data include a method to generate a plurality of first acquirer dependent software components based on a first acquirer settlement metadata file that corresponds to a first acquirer. The first acquirer dependent software components are used to generate an acquirer settlement file based on financial data. The acquirer settlement file is communicated to the first acquirer that is included in an automatic clearing house system that processes the financial data. In addition, the metadata driven methods and systems utilized to process financial data include a method to generate a plurality of first acquirer dependent software components based on a first acquirer return metadata file that corresponds to a first acquirer. The first acquirer dependent software components are used to process an acquirer return file that is received from the first acquirer and includes financial data. The first acquirer is included in an automatic clearing house system.

Abstract: This invention uses probabilistic correlation techniques to increase sensitivity, reduce false alarms, and improve alert report quality in intrusion detection systems. In one preferred embodiment, an intrusion detection system includes at least two sensors to monitor different aspects of a computer network, such as a sensor that monitors network traffic and a sensor that discovers and monitors available network resources. The sensors are correlated in that the belief state of one sensor is used to update or modify the belief state of another sensor. In another embodiment of this invention, probabilistic correlation techniques are used to organize alerts generated by different sensors in an intrusion detection system.

Abstract: Systems and methods for resource provisioning. Resources for which provisioning could be performed might include, for example, software, devices, directories, and/or databases. Where performance of an operation involved in provisioning requires interface with a resource, various operations might be performed to achieve such interface. The operations involved in a particular provisioning procedure could, for example, be defined by a system administrator and/or other user. Provisioning procedure execution might be monitored and/or affected. Further, such execution might be checked for compliance with one or more established business rules.

Abstract: The present invention relates to a method for a cell phone based dating service. The method uses telecommunication in the form of phones, cell phones or email. The invention proposes a method or way to exchange the information of two people in a fast way by the Internet or telephone or cell phones, making it possible divide peoples personal information in small portions and to give out these portions step by step. In the invention proposes a system-administrator, the system, will coordinate the exchange of information between the meeting people. The invention uses a computer based partner service system in which a participant can order the system to give out its personalized information in defined modifications.

Abstract: A currency distribution system and method. In accordance with the invention, a first transaction is facilitated by which currency is transferred electronically between a first entity and a second entity, and whereby a first balance of currency is maintained by said second entity. A second transaction is facilitated by which at least a portion of the first balance of currency is transferred electronically between the second entity and a third entity. In particular, the second transaction is facilitated by a processor that includes code for ascertaining data with respect to the third entity, the data pertaining to goods or services unrelated to the currency, and providing a qualification in response thereto. A second processor included for enabling the second transaction in response to the qualification. A database is employed and a query is made to determine the qualification for the second transaction.

Abstract: A management apparatus, a charging object apparatus and a management system and method by which a product of an object of use can be used in an efficiency as high as possible when it is used commonly by a plurality of people.

Abstract: Aspects of the present disclosure are directed to a method that includes receiving a plurality of paper financial items, scanning each of the paper financial items, and for each paper financial item, generating a plurality of data sets based on the scanning. For each data set, it may be determined whether the associated paper financial item is a bank of first deposit (BOFD) item or a non-BOFD item. Also, for each data set, the data set may be modified depending upon whether the associated paper financial item is determined to be a BOFD item or a non-BOFD item. Further aspects are directed to systems that perform the above method.

Abstract: A transaction network contains a networked certificate authority, by which one or more virtual certificates may be remotely defined and stored, such as by an issuer user through a issuer web portal interface. An acquirer user, through an acquirer web portal interface, may acquire one or more virtual certificates, which contain a secret public key portion, as well as a corresponding private key, which is established by the acquirer at the time of acquisition, and is stored at the certificate authority. At a redemption location associated with an acquired certificate, the acquirer (or an alternate recipient of an acquired certificate to whom the acquirer has communicated the established private key), submits the certificate information, along with the established private key, to redeem the certificate.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device. Modern communication devices are capable of many things, including making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. Depending on who is using the communication device, such as a child or an employee, there may be a need or desire to regulate how that communication device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: An integrated, modular array of administrative and support services are provided for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting transaction-related capabilities over electronic networks, and can also be adapted to the specific needs of electronic commerce value chains. In one embodiment a Distributed Commerce Utility having a secure, programmable, distributed architecture provides these administrative and support services. The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many of its participants. Different support functions can be collected together in hierarchical and/or networked relationships to suit various business models or other objectives.

Abstract: An integrated, modular array of administrative and support services are provided for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting transaction-related capabilities over electronic networks, and can also be adapted to the specific needs of electronic commerce value chains. In one embodiment a Distributed Commerce Utility having a secure, programmable, distributed architecture provides these administrative and support services. The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many of its participants. Different support functions can be collected together in hierarchical and/or networked relationships to suit various business models or other objectives.

Abstract: A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users.

Abstract: An aspect of the present invention includes a protocol for conveying data during an e-commerce session with a polymorphic response, comprising initiating a session with a message from a buyer application to a broker application and a session identifier assigned by the broker application; conducting the session between the buyer application and a supplier application; and concluding the session with a additional message which includes a schema identifier for the additional message, resolvable in a context of a system identifier; and a polymorphic response comprising a type and a version, wherein the polymorphic response includes additional data elements corresponding to values assigned to the type and version.

Abstract: With the payment system 02 of the present invention, a customer 06 may conduct a private and secure payment transaction (i) with a merchant 08 using a wireless device 12, (ii) with a merchant using a payment card 100, (iii) with a merchant using a bank card 130 (iv), with a merchant using any one of the wireless device 12, a payment card 100 or a bankcard 130 (v) with a private party using a wireless device 12 and (vi) withdraw cash from an ATM machine using a wireless device 12. In all of these embodiments, a customer does not share his identity, personal sensitive data and purchasing habits with the merchants, the banks or the private party. In many of these embodiments, a customer need not carry his bankcards and or personal checks bearing personal and sensitive data with him/her avoiding the risks of theft or loss.

Abstract: Following the insertion of a trial key or a license key into a port, authentication thereof is executed (S4, S22); if the trial key authentication is successful, a trial time limit is obtained by adding a trial permission period to a current time and is stored into a nonvolatile memory (S25); if the current time exceeds the trial time limit (S12, S13), or the license key authentication is successful, the trial state information is changed to indicate “trailed” (S4); if the license key authentication is successful (S14), or the trial key authentication is successful (S15) and the trial state information does not indicate “trialed” (S16), an optional routine is executed following an instruction from a control panel. In that routine, if the trial state information does not indicate “trialed”, the trial time limit is displayed on a control panel.

Abstract: A system for distributing electronic content may include a content repository including one or more electronic content items. The content repository may be in communication with one or more content databases. The system may include a user interface in communication with the content repository. The user interface may be configured to receive a selection from a content administrator of one or more electronic content items available from the one or more content databases, and one or more end users to whom the selected electronic content items are assigned. The system may include one or more end user devices in communication with the content repository. Each end user device may be associated with an end user and an end user account. Each end user device may be configured to receive the selected electronic content items that are assigned to the corresponding end user from the content repository.

Abstract: A system and method for the real-time management of a device, and more particularly to the allocation of electronic wallets that are associated with one or more devices and various controls that enable at least two entities to manage how the device is utilized for various activities and to pay for goods and services. Each device is associated with at least two electronic wallets, a user wallet and an administrator wallet. The administrator can establish rules that designate how and when the device can be used and which wallet will be used to pay for goods and services desired by the user, but in the event the user wallet is depleted or low on funds, the administrator wallet can serve as a backup funding source for specified types of goods and/or services.

Abstract: An on-line service manages downloads of purchased digital content. Information regarding the digital content items that are purchased by each user and the terms of use of those purchased items is maintained. Information regarding the formats of digital content items that each device is adapted to receive is maintained. Upon determining that a user wishes to download a digital content item, the requested digital content is downloaded in an appropriate format for a particular digital device provided the recorded information indicates the content item has been purchased by the user and the download is within the quantity of downloads authorized by the terms of the purchase.

Abstract: A system and method of managing external content that is used within a software product or software development process is disclosed. In some approaches, the system and method manages and tracks the use of external content, as well an approval process for determining whether the external content is to be used or incorporated. The system and method manages and tracks compliance with terms and restrictions of the external content.

Abstract: A software brokering method and framework are presented. The software brokering method includes a step of establishing a use-based pricing scheme for a set of software modules that are utilized at a customer's site. By pricing software according to its use rather than a set fee, flexible pricing is facilitated for meeting the broad spectrum of customers needs. The software modules are distributed to customers. The software modules are preferably downloaded from an e-commerce site, but may also be mailed or distributed from conventional retail outlets. Use of the software at a customer's site is monitored by processes integrated into the deployment and execution components of a software module integration platform residing at the customer's site. Customers are charged based upon their actual use of the software modules, as registered by the software module integration platform, in view of the software pricing scheme established for the downloaded software modules.

Abstract: In accordance with one embodiment, apparatus are provided that comprise a user interface, a rendering device, a clearinghouse communicator, and an enable mechanism. The user interface includes a digital work choosing mechanism to choose a digital work for rendering. At least one repository holds digital works and includes the chosen digital work. The rendering device obtains a representation of the chosen digital work from the repository and renders the chosen digital work. A clearinghouse communicator electronically sends rights criteria to a remote clearinghouse and receives rights defining information from the clearinghouse. The enable mechanism enables the rendering device to render the chosen digital work in accordance with the rights defining information.

Abstract: A method of generating a model for performing account-level fraud detection is disclosed, and includes obtaining a plurality of candidate rules for referrals of financial transactions, calculating a savings density for each of the plurality of rules, selecting a rule from the plurality of rules having the maximum savings density, iteratively rebalancing savings densities for the remaining rules of the plurality of rules and selecting a next rule until a volume constraint is satisfied, and applying the selected rules to one or more financial transactions.

Abstract: A network of nodes caches replicated datasets in which dataset changes are efficiently propagated as a set of changes even under failure conditions. A master node and a plurality of subordinate nodes in the network each maintain a copy of the dataset and a change log storing change events in the dataset in that node. The change log further includes a rename chain having a plurality of linked rename records created in response to a new master gaining control of the dataset. The master node computes and propagates dataset changes to the subordinate nodes as a set of change events. If the master node fails, one of the subordinate nodes becomes temporary master and continues to propagate dataset changes using its dataset and its change log in response to update requests from other nodes where the update request contains information from the change log of the requestor node.

Abstract: An electronic commerce process that facilitates online transactions among multiple participants, that prevents consumer fraud due to pirated payment card numbers, with calculated risk, involving at least one trusted payment card host (3), where buyer's payment card number is registered and corresponding secret keys are set up. The buyer (1b) initiates an online transaction by selecting a host from a list of hosts that served by the seller's web server (2a). Then, the buyer participant (1a) sends an order online (4), SSL encrypted. The seller participant (2a) receives and decrypts the order, confirms the availability of ordered items, assigns an orderID to the order, and sends a response (5a), SSL encrypted, to the buyer participant (1a) with the assigned orderID. The buyer participant (1a) encrypts and notifies the selected host (3) of this order and orderID, and authorizes the payment (6a) using secret keys.