Method and apparatus for secure browser-based information service

• US 20040236962A1
• Filed: 05/19/2003
• Published: 11/25/2004
• Est. Priority Date: 05/19/2003
• Status: Abandoned Application

• Current Assignee: Hugh Phu Nguyen, Ping Wah Wong
• Original Assignee: Hugh Phu Nguyen, Ping Wah Wong
• Inventors: Nguyen, Hugh Phu, Wong, Ping Wah
• Application Number:
  US10/440,787
• Publication Number:
  US 20040236962A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

An end-to-end secure web-based information system is disclosed. The system uses an information server to obtain information from at least one information source. The information is organized into information pages by a page server. A cryptographic engine provides encryption and decryption capabilities for information page addresses corresponding to the hyperlinks on the information pages served by the page server. The information pages are transmitted to client browsers using an encrypted communications protocol, hence the page contents are encrypted during transmission. This system is compatible with client browsers without any additional software or plug-in on the client side. The system is end-to-end secure because both the information page contents and the page addresses are encrypted during transmission.

Claims

1. A method of providing a secure browser-based information service comprising the following steps:

i. providing an information server for obtaining information from at least one information source,

ii. providing a storage means for storing said information,

iii. providing a page server for formatting said information into at least one information page,

iv. providing a cryptographic engine for encrypting the information page addresses associated with hyperlinks in said information page into encrypted information page addresses before transmitting said information page to a client, and for decrypting said encrypted information page address from a page request received from said client.

2. The method of claim 1 wherein an encrypted communication protocol is used for transmitting said information page to said client.

3. The method of claim 1 wherein said cryptographic engine uses at least one client dependent cryptographic key.

4. The method of claim 1 wherein said cryptographic engine embeds at least one client dependent identification tag into said encrypted page address.

5. The method of claim 1 wherein said secure browser-based information service comprises a secure browser-based news service, and said information comprises newsgroups and news articles.

6. The method of claim 1 wherein said secure browser-based information service comprises at least one secure electronic bulletin board service.

7. The method of claim 6 wherein said secure electronic bulletin board service further comprises at least one secure customer support service.

8. The method of claim 1 wherein said secure browser-based information service comprises a secure product information database service.

9. A secure browser-based information system comprising

i. an information server for obtaining information from at least one information source,

ii. a storage means for storing said information,

iii. a page server for formatting said information into at least one information page,

iv. a cryptographic engine for encrypting the information page addresses associated with hyperlinks in said information page into encrypted information page addresses before transmitting said information page to a client, and for decrypting said encrypted information page address from a page request received from said client.

10. The method of claim 9 wherein an encrypted communication protocol is used for transmitting said information page to said client.

11. The method of claim 9 wherein said cryptographic engine uses at least one client dependent cryptographic key.

12. The method of claim 9 wherein said cryptographic engine embeds at least one client dependent identification tag into said encrypted page address.

13. The method of claim 9 wherein said secure browser-based information system comprises a secure browser-based news system, and said information comprises newsgroups and news articles.

14. The method of claim 9 wherein said secure browser-based information system comprises at least one secure electronic bulletin board system.

15. The method of claim 14 wherein said secure electronic bulletin board system further comprises at least one secure customer support system.

16. The method of claim 9 wherein said secure browser-based information system comprises a secure product information database system.

17. A secure web-based news system comprising

i. a news server for obtaining news information from at least one newsfeed,

ii. a storage means for storing said news information,

iii. a web server for formatting said news information into at least one web page,

iv. a cryptographic engine for encrypting the Uniform Resource Locators (URL'"'"'s) associated with hyperlinks in said web page into encrypted URL'"'"'s before transmitting said web page to a client, and for decrypting said encrypted URL from a page request received from said client.

18. The system of claim 17 wherein SSL is used for transmitting said web page to said client.

19. The system of claim 17 wherein said cryptographic engine uses at least one client dependent cryptographic key.

20. The system of claim 17 wherein said cryptographic engine embeds at least one client dependent identification tag into said encrypted URL'"'"'s.