A system and method for providing trusted browser verification services.
In a preferred embodiment, these services are provided within the context
of a four-corner trust model comprising a subscribing customer and a
relying customer, engaged in an on-line transaction. The subscribing and
relying customers are preferably customers of first and second financial
institutions, respectively, that issue to them hardware tokens for their
respective private keys and digital certificates. The buyer is preferably
provided with a Web browser to conduct electronic transactions. A
distinct-trusted verifier or other entity ensures in a verifiable manner
that the browser used by the subscribing customer does not contain any
code that is not trusted by verifying the digital signatures on each
running browser component of the subscribing customer's browser and
ensuring that the signature was applied by an entity that is authorized
to certify the trustworthiness of the component.