A method for facilitating two-party electronic commerce transactions between
trading
partners on an unsecure network, such as the Internet. In one example, a client
makes application for registration by a financial institution in which the client
has one or more accounts. The client submits satisfactory proof of identity and
a public key portion for a digital signature to the financial institution. The
financial institution may provide the client a one time secret by a secure route,
such as conventional mail, which can then be used by the client to show proof of
its identity. The financial institution authenticates the one time secret and combines
it with the client's public key in a GUMP Relationship Certificate (GRC), which
it issues to the client over the network. Once issued, the GRC can be used by the
client to authenticate its right to access its account(s) or other products or
services at the financial institution and when conducting other electronic transactions
over the network. The client digitally signs any such transaction to authenticate
its right to conduct the transaction. A delegate may be enlisted by the client
to negotiate the purchase of goods from a seller or for other purposes, using a
GUMP Delegate Certificate. The concept can be extended to other three party transactions,
such as issuing an electronic Letter of Credit (LOC).