System and method for enabling a secure e-commerce server

• US 20030055872A1
• Filed: 08/03/2001
• Published: 03/20/2003
• Est. Priority Date: 08/03/2001
• Status: Abandoned Application

• Current Assignee: WizSoft Ltd.
• Original Assignee: WizSoft Ltd.
• Inventors: Oren, Zbeida, Meidan, Abraham
• Application Number:
  US09/920,956
• Publication Number:
  US 20030055872A1
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A mechanism for ensuring secure e-commerce transactions, which includes the process of writing a limited server that can only perform those actions that are required. This server may optionally be a single function server, enabled to implement one or more commands only. Alternative actions are simply not coded into the program. In this way the server is intentionally limited, in that it is programmed to handle the limited set of commands that are relevant for the specific field in which it operates.

Claims

1. A mechanism for enabling secure information transfer in a network, comprising:

i. a server for processing and serving user requests in a network; and

ii. a dedicated server component for processing and serving user requests from said server, such that said dedicated server is a special-function server.

2. The mechanism of claim 1, further comprising a program for transferring requests from said server to said dedicated Server.

3. The mechanism of claim 1, further comprising a network, for connecting a plurality of client computers to said server, for the purpose of transferring data between said server and said client computers in said network.

4. The mechanism of claim 1, wherein said special-function server is a single-function server.

5. The mechanism of claim 4, wherein said single-function server is an e-commerce transaction server.

6. A method for securing e-commerce transactions, comprising:

i. writing a server to execute at least one specific function;

ii. processing at least one request for said at least one specific function;

iii. in the case where said at least one request is for at least one alternative function, denying said at least one request.

7. A method for securing e-commerce transactions, comprising:

i. writing a server for processing at least one specific e-commerce transaction;

ii. processing at least one request for at least one specific e-commerce transaction;

iii. in the case where said at least one request is for at least one alternative function, denying said request.