Method and system for the secure transmission of a portion of a web page over a computer network

• US 20030159030A1
• Filed: 02/15/2002
• Published: 08/21/2003
• Est. Priority Date: 02/15/2002
• Status: Abandoned Application

• Current Assignee: iMetrikus, Inc.
• Original Assignee: iMetrikus, Inc.
• Inventors: Evans, Junius A.
• Application Number:
  US10/077,082
• Publication Number:
  US 20030159030A1
• Time in Patent Office: Days
• US Class Current: 713/154
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method of transmitting data over a network in a secure manner while keeping overhead low is described. Various components for a web page are retrieved and a web page is formed. The web page has some components in which sensitive data is stored in XML data islands. It is then determined which of the XML data islands contains sensitive data, such as health or medical data or financial data that is specific to an individual. These XML data islands are encrypted using an appropriate encryption routine, not limited to SSL. Once the data islands containing the sensitive data are encrypted they are transmitted over a network. The encryption routine used to secure the sensitive data is chosen based on the level of security desired before sending the data over the network and the amount of overhead resulting from the encryption that the user is willing to accept. The overhead can be reduced by using a less rigorous encryption routine and thereby increasing performance and speed. If the data requires a high degree of security, a powerful encryption routine can be used while increasing the overhead of the data when sending the data over a network.

Claims

1. A method of transmitting data over a network, the method comprising:

retrieving a web page, the web page having one or more XML data islands;

selecting which of the one or more XML data islands stores data to be secured before transmitting over the network;

encrypting the one or more selected data islands; and

transmitting the web page with the encrypted data islands and the unencrypted data over the network.

2. A method as recited in claim 1 further comprising receiving a request at a server to retrieve a web page, the web page containing HTML, images, and interactive data.

3. A method as recited in claim 1 wherein selecting which of the one or more XML data islands stores data to be secured before transmitting over the network further comprises determining with data is interactive database data.

4. A method as recited in claim 1 wherein encrypting the one or more data islands further comprises using any suitable encryption routine, wherein the encryption routine is selected based on the level of security desired and a reduction in the amount of overhead.

5. A method as recited in claim 1 wherein the web page is placed in XML format in a device being utilized to receive and transmit between two sources.

6. A method as recited in claim 1 further comprising a computer receiving the web page with the encrypted data and decrypting the data in the XML data islands.

7. A method as recited in claim 1 further comprising adding sensitive data to the web page and wrapping the sensitive data in XML format.

8. A method as recited in claim 7 further comprising encrypting one or more XML data islands of the sensitive data after being placed in XML format.

9. A method of sending secure data over a network, the method comprising:

determining which data needs to be secured before transmitting over a network;

storing the data in an XML data island;

using an encryption routine to encrypt the data stored in the XML data island;

combining the encrypted data with non-encrypted data before transmitting the encrypted data over the network, whereby overhead data as a result of encryption is significantly reduced.