Secure service network and user gateway

• US 20060107036A1
• Filed: 10/19/2004
• Published: 05/18/2006
• Est. Priority Date: 10/25/2002
• Status: Active Grant

• Current Assignee: WMR E-Pin, LLC
• Original Assignee: WMR E-Pin, LLC
• Inventors: Orkis, Randall E., Randle, William M.
• Granted Patent: US 8,719,562 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A secure service network (SSN) comprising an IP network infrastructure wherein the access of one participant to another participant in the network is controlled by a secure service gateway (SSG) in which a point of origination universal identifier (PoUID) represents a unique identifier for the participant within a participant'"'"'s internal network domain and the interconnection of the SSGs within the SSN as a precondition of access creates a bilaterally secure peer to peer service connection. Participants in the network are service providers, service requesters, or both. A global secure service gateway (GSSG) may be interconnected in the SSN to provide a central access authority and management services.

Claims

1. A secure service network (SSN) comprising an IP network infrastructure wherein the access of one participant to another participant in the network is controlled by a secure service gateway (SSG) in which a point of origination universal identifier (PoUID) represents a unique identifier for the participant within a participant'"'"'s internal network domain and the interconnection of the SSGs within the SSN as a precondition of access creates a bilaterally secure peer to peer service connection.

2. The SSN of claim 1 where the SSG is an access point on the network that includes a security infrastructure comprised of SSGs and an optional global secure service gateway (GSSG) separate and distinct from the service implementation of a participant whereby the design, development, and deployment of services in a secure environment over the SSN is established consistently across all services as a result of the SSN infrastructure.

3. The SSN of claim 1 where security is comprised of authentication, authorization, non-repudiation, privacy, and encryption for all services and participants on the SSN.

4. The SSN of claim 1 including the interconnection of two or more participants each of whom connect to an IP network through a SSG and an optional GSSG connected to that same IP network infrastructure wherein a SSN administers one or more than one user domains, service domains with access privileges defined for all services, domains, and participants on the SSN.

5. The SSN of claim 1 wherein security proxies within the SSGs administer global hybrid governance permitting local data access control with global enforcement in the SSN.

6. The SSN of claim 1 wherein security proxies within the SSGs administer global hybrid governance preclude local data access control and global access enforcement is administered by a global SSG.

7. The SSN of claim 1 wherein an SSG provides a means to create secure services for the execution of internal business functions within a participant'"'"'s network or domain where the secure service of the participant is the exposed to a domain of at least one other participant on the SSN.

8. The SSN of claim 1 where the SSG provides a means for mutual authentication among multiple SSGs on the SSN.

9. The SSN of claim 1 where the SSG supports out of band communications to the GSSG for security and administration functions.

10. The SSN of claim 1 wherein at least two participants having a relationship secured by the SSG acknowledgement of the participants'"'"' PoUIDs are connected in the network and share information in one or more service domains.

11. The network of claim 1 wherein information is shared in one of real time, a single transmission, bulk file transfer and batch data transfer support.

12. The SSN of claim 11 wherein information is one of participant verification, identity authentication, image exchange, and network based image archiving.

13. The SSN of claim 1 wherein a participant is one of a business entity, a government, a healthcare provider, a manufacturer, a retailer, and a utility.

14. The SSN of claim 1 wherein each gateway comprises 1) a security proxy (a) administering an authentication and encryption protocol permitting an authorization allowing data access to a participant and (b) creating a log of each instance of data access, and 2) a services interface comprising a request processor, a service invoker, a service implementation, a resource adapter, a data access link, and an HTTP/SSL proxy.

15. The SSN of claim 1 wherein data access is effected through the SSG upon receipt of a message containing at least 1) a unique name identifier assigned by a SSN to the services interface, 2) a request universal identifier that uniquely identifies a request from the SSG, and 3) a PoUID for the participant originating the request wherein the point of origination for a request for data access originates from one of the SSG and a system behind one or more SSGs.

16. The SSN of claim 1 wherein an agreed to policy between a participant requesting data and a participant providing data determines the requesting participant'"'"'s access to the providing participant'"'"'s SSG and the policy determines a fulfillment processing flow for the data that may be altered based on the policy related to the service request.

17. The SSN of claim 16 wherein the data returned my include a literal data response or an interpreted data response to protect the privacy of information maintained by the service provider.

18. The SSN of claim 1 comprising a GSSG linked to the SSN, said GSSG comprising 1) a directory of services on the SSN, 2) a system-of-record to create and store information regarding participant connectivity;

3) a compilation of service statistics;

     4) means for payment and verification;

     5) means for document and or image exchange;

     6) means for identity authentication;

     7) a transaction audit logging function; and

     8) an activity billing function.

19. The SSN of claim 1 wherein the secure service domain comprises a set of participant domains providing data sharing securely over an IP infrastructure to participants having a relationship defined as one of one to one, one to many, and many to many.

20. The SSN of claim 1 wherein access to information is determined using trust relationships for high level domain partitioning and access control for low level partitioning.

21. The SSN of claim 1 wherein participant access is effected by access control lists (ACL) and certificate (CA) management.

22. The SSN of claim 1 wherein a hierarchical structure establishes service and participant domains on the SSN.

23. The SSN of claim 16 wherein the same request may be fulfilled differently based on a level of risk associated with information derived or correlated to one or more data indicia contained in the request or one or more data indicia about the requestor.

24. The SSN of claim 1 wherein where authentication is performed through a mutual authentication based on a PKI certificate hierarchy managed by a GSSG and wherein the SSGs mutually authenticate with each other as a prerequisite to authorization.

25. The SSN of claim 24 wherein authentication is performed through a mutual authentication based on a PKI certificate hierarchy managed by a GSSG and wherein the private keys associated with the PKI infrastructure are distributed in or out of band.

26. The SSN of claim 24 where secure virtual service network connections are established based on domain definitions in a PKI certificate hierarchy.

27. The SSN of claim 24 where service requests are fulfilled wherein participant authentication and request authorization is based on a combination of a PKI certificate hierarchy and an ACL hierarchy.

28. The SSN of claim 1 where secure virtual service network connections are established based on a combination of a PKI certificate hierarchy and an ACL hierarchy.

29. The SSN of claim 1 including firewall filtering at a participant or global level.

30. The SSN of claim 21 wherein trust relationships are established between and or among the domains of participants upon the establishment of a root CA that signs one or more intermediate CA which in turns signs one or more subordinate CA.

31. The SSN of claim 21 wherein access is determined by first determining that a requestor is listed in a global ACL and then determining that the requestor is listed in a local ACL that may optionally override the global access listing.

32. The SSN of claim 1 where a service provider on an SSN can deliver a service to a requestor that may include the aggregation of one or more service requests it makes to its service providers where the requestor has no knowledge of the relationships of the provider.

33. The SSN of claim 32 wherein billing and reporting for participants is based on a participant'"'"'s PoUID which is denominated to establish an end to end accounting of a service that uses aggregation where the unique relationships between a requestor and a service provider are maintained and reported as unique relationships between the provider and its related service providers that are used to fulfill the request