System and method for securely transmitting, and improving the transmission of, tag based protocol files containing proprietary information

• US 20050010764A1
• Filed: 06/23/2004
• Published: 01/13/2005
• Est. Priority Date: 06/26/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dakar, Bernard, Collet, Jean-Luc, Marmigere, Gerard, Picon, Joaquin
• Application Number:
  US10/874,596
• Publication Number:
  US 20050010764A1
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A system and a method for securely transmitting a tag based protocol file comprising proprietary data from a Web Server to a Client Web Browser. The proprietary data is extracted from the tag based protocol file, locally stored and replaced by references and/or calls to a data insert function. The modified tag based protocol file may be sent according to a standard communication protocol. The Client Web Browser can send a request to the Web Server for retrieving extracted proprietary data, which is transmitted by the Web Server according to a secure communication protocol. The proprietary data may also be extracted from the tag based protocol files, encrypted and replaced by calls to data insert functions whose parameters are decryption functions having encrypted data as parameters. Calls to a data insert function associated with the decryption function allow the Client Web Browser to send a request to the Web Server for the decryption key. The request for the decryption key and its transfer are done according to a secure communication protocol.

Claims

1. A method for securely transmitting a tag based protocol file comprising proprietary data from a server to a client device, the method comprising the steps of:

identifying the proprietary data within the tag based protocol file,

extracting and storing locally the proprietary data;

inserting at least one reference to the locally stored proprietary data in the tag based protocol file to provide a modified tag based protocol file;

transmitting the modified tag based protocol file using a standard communication protocol; and

,

upon request of the client device, transmitting the locally stored proprietary data according to a secure communication protocol, the request comprising the at least one reference to the locally stored proprietary data.

2. The method of claim 1, further comprising the step of inserting at least one call to a data insert function in the tag based protocol file, the parameters of the data insert function comprising the at least one reference to the locally stored proprietary data.

3. The method of claim 1, wherein the proprietary data is delimited by tags.

4. The method of claim 1, further comprising the step of inserting a path determining a location wherein the proprietary data is locally stored, the at least one reference being used in conjunction with the path.

5. The method of claim 2, wherein the at least one reference and the at least one call to a data insert function comprise a JavaScript.

6. The method of claim 1, wherein the tag based protocol file is selected from the group consisting of:

a Hyper Text Markup Language (HTML) file and a Wireless Markup Language (WML) file.

7. An apparatus comprising means adapted for carrying out the method according to claim 1.

8. A computer readable medium comprising instructions for carrying out the method according to claim 1.

9. A method for securely transmitting a tag based protocol file comprising proprietary data from a server to a client device, the method comprising the steps of:

identifying the proprietary data within the tag based protocol file,

extracting and encrypting the proprietary data according to an encryption key;

inserting the encrypted proprietary data in the tag based protocol file;

transmitting the modified tag based protocol file using a standard communication protocol; and

,

upon request of the client device, transmitting the decryption key corresponding to the encryption key, according to a secure communication protocol.

10. The method of claim 9, further comprising the step of inserting a call to a decryption function in the tag based protocol file, a parameter of the decryption function comprising the encrypted proprietary data.

11. The method of claim 9, further comprising the step of inserting a call to a data insert function in the tag based protocol file, the parameters of the data insert function comprising a call to a decryption function and the parameters of the decryption function comprising the encrypted proprietary data.

12. The method of claim 11, wherein the insert function is of the form of a JavaScript.

13. The method of claim 10, wherein the decryption function is of the form of Java Applet.

14. The method of claim 13, further comprising the step of inserting a path determining a location wherein code of the Java Applet is available.

15. The method of claim 9, wherein the proprietary data is delimited by tags.

16. The method of claim 9, wherein the tag based protocol file is selected from the group consisting of:

a Hyper Text Markup Language (HTML) file and a Wireless Markup Language (WML) file.

17. An apparatus comprising means adapted for carrying out the method according to claim 9.

18. A computer readable medium comprising instructions for carrying out the method according to claim 9.