Integrated on-line system with enhanced data transfer protocol

• US 20010037464A1
• Filed: 03/09/2001
• Published: 11/01/2001
• Est. Priority Date: 03/09/2000
• Status: Active Grant

• Current Assignee: Conrad G. Persels, Greg Pringle
• Original Assignee: Conrad G. Persels, Greg Pringle
• Inventors: Pringle, Greg, Persels, Conrad G.
• Granted Patent: US 7,065,547 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 51/23 Reliability checks, e.g. acknowledgments or fault reporting
• CPC Class Codes: H04L 51/234 for tracking messages
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

The integrated on-line system with enhanced data transfer protocol enables dissimilar computers to instantly interchange data and integrate applications over a transfer control protocol/internet protocol (TCP/IP) network. The system is based on a client-server architecture in which multiple clients exchange data through a data transfer server using the enhanced data transfer protocol. The server acts as a post office for transferring data and provides verification of the sender'"'"'s identity, the receiver'"'"'s identity, verification of data transfers, electronic mailbox facilities, an audit trail, and inquiry and reporting functions. The protocol implements a socket to socket data interchange protocol on a preassigned port. Communications require validation of a header and permit send and receive sessions, receive sessions, or and end to end session. Optionally, the system provides a dual key encryption system, including a header key and a data encryption key.

Claims

1. An integrated on-line system with an enhanced data transfer protocol for transferring data on a TCP/IP network, comprising at least one computer configured as a data transfer server connected to the network, the data transfer server having:

(a) a web server means for providing a plurality of clients with a browser-based interface with said data transfer server;

(b) a relational database, said web server communicating with the database for retrieving and recording information, said database having means for establishing and maintaining an electronic mailbox for a plurality of clients; and

(c) a data transfer protocol means for providing a socket to socket connection with a client for the transfer of data according to an enhanced data transfer protocol, said protocol means having;

(i) means for receiving data from a first client and a request to forward the data to a second client;

(ii) means for immediately transferring the data to the second client when the second client is connected to said data transfer server by a socket when the data is received by said data transfer server;

(iii) means for storing the data in an electronic mailbox when the second client is not connected to said data transfer server when the data is received by said data transfer server; and

(iv) means for recording the receipt and transfer of data in said relational database.

2. The integrated on-line system according to

claim 1

, further comprising means for registering a plurality of trading partners as clients permitted to use the system for transferring data.

3. The integrated on-line system according to

claim 1

, wherein said data transfer protocol means further comprises means for notifying the first client when the data transfer server receives the data sent by the first client.

4. The integrated on-line system according to

claim 1

, further comprising means for permitting a client to determine the status of a data transfer recorded in said relational database through said web server means.

5. The integrated on-line system according to

claim 1

, wherein said data transfer protocol means further comprises:

(a) means for permitting a client to connect to said data transfer protocol means for a send session, wherein the client transfers data to the server for transfer to a second client and the session ends;

(b) means for permitting a client to connect to said data transfer protocol means for a receive session, wherein the client receives data from the server sent by a second client and the session ends; and

(c) means for permitting a client to connect to said data transfer protocol means for an end-to-end session, wherein the client transfers data to the server for transfer to a second client and said data transfer server keeps the session open for an immediate response from the second client.

6. The integrated on-line system according to

claim 1

, wherein said data transfer protocol means further comprises means for validating a header sent by a client against information recorded in said relational database, the header including identification of a client'"'"'s electronic mailbox, and means for terminating a socket connection before receiving a data transfer upon failure of the validation.

7. The integrated on-line system according to

claim 1

, further comprising:

(a) a plurality of client computers connected to the network; and

(b) client software means residing on said client computers for communicating with said data transfer server according to said enhanced data transfer protocol, said client software means including means for establishing a socket to socket connection with said data transfer server for the transfer of data according to an enhanced data transfer protocol, said client software means further including means for sending a header to said data transfer server, the header encoding a type of session requested, an identification of the client'"'"'s electronic mailbox, and an optional identification of a recipient client'"'"'s electronic mailbox.

8. The integrated on-line system according to

claim 7

, wherein said client software means is platform independent for integration into any application residing on said client computer.

9. The integrated on-line system according to

claim 1

, further comprising encryption means for encrypting data sent to and from said data transfer server.

10. The integrated on-line system according to

claim 1

, further comprising:

(a) data encryption means for encrypting data based upon a data key; and

(b) header encryption means for encrypting header data based upon a header key, the header data including the data key.

11. The integrated on-line system according to

claim 10

, further comprising means for changing the header key from session to session, including means for initializing and re-initializing the header key.

12. A computerized method for enchanced data transfer between a plurality of clients through a data transfer server in a TCP/IP network, comprising the steps of:

(a) providing the server with a web server and a relational database;

(b) registering a plurality of trading partners as clients through said web server, including establishing an electronic mailbox, assigning a unique mailbox ID, and a password for each client and recording the mailbox ID and password in said relational database;

(c) listening for a client on a port dedicated to providing enhanced data transfer service;

(d) receiving a header from a client, the header containing at least the client'"'"'s mailbox ID and password and a session request;

(e) validating the mailbox ID and password against said relational database;

(f) creating a socket to socket connection with the client upon validating the mailbox ID and password;

(g) when the session request is for receiving at least one data transfer, transferring the data to the client and recording the transfer in said relational database;

(h) when the session request is for sending at least one data transfer, receiving a data transfer including a header, the header having a receiving client'"'"'s mailbox ID;

(i) sending the client an acknowledgement that the server has received the data transfer;

(k) determining whether the receiving client is currently connected to the server, and if so, notifying the receiving client of a pending data transfer and transferring the data to the receiving client immediately and before disconnecting with the receiving client;

(l) saving the data transfer in the receiving client'"'"'s mailbox when the receiving client is not currently connected to the server;

(m) recording the server'"'"'s receipt of the data transfer, the server'"'"'s transfer of data to a receiving client, and the server s mailbox storing of a data transfer in said relational database; and

(n) terminating the socket to socket connection with the client.

13. The method according to

claim 12

, further comprising the step of permitting a client to query said relational database through said web server concerning status of data transfers to and from the client.

14. The method according to

claim 12

, further comprising the steps of notifying the receiving client that a response is requested, keeping the socket to socket connection open pending a response, and transferring a response to the client when an end-to-end session is requested.

15. The method according to

claim 12

, further comprising the steps of:

(a) prior to step (d), negotiating a header encryption key between client and server;

(b) before step (e), decrypting the header using the header encryption key, the header further comprising an encrypted portion having a second header encryption key for use in a client'"'"'s next session, and when the session request is for a sending session, an encrypted data key for transfer to a receiving client.

16. The method according to

claim 15

, further comprising the step of transmitting an encrypted header containing the data key for decrypting the data transfer prior to transferring the data in step (g).

17. A computerized method for transferring encrypted data between a sending client, a receiving client, and a server in a TCP/IP network, comprising the steps of:

(a) negotiating a sender'"'"'s initial header key between the sending client and the server;

(b) negotiating a receiver'"'"'s initial header key between the receiving client and the server;

(c) the server receiving a header from a sending client having header data encrypted based upon the sender'"'"'s header key, the header data having a data key;

(d) the server decrypting the header and transmitting an acknowledgement to the sending client;

(e) the server receiving a data transfer from the sending client, the data transfer being encrypted based upon the data key;

(f) the server transmitting a second header to the receiving client, the second header having header data encrypted based upon the receiver'"'"'s header key, the header data having the data key; and

(g) the server transmitting the data transfer to the receiving client, the data transfer being encrypted based upon the data key

whereby the data key is passed from the sending client to the server encrypted by the sending client'"'"'s header key and from the server to the receiving client encrypted by the receiving client'"'"'s header key, the data encrypted by the data key being transferred from the sending client to the receiving client without decryption by the server.

18. The method according to

claim 17

, further comprising the step of updating the sending client'"'"' header key, the sending client encoding a new header key in the encrypted header data received by the server in step (c).