Systems and methods for providing secure communications for transactions

• US 20070226350A1
• Filed: 09/07/2006
• Published: 09/27/2007
• Est. Priority Date: 03/21/2006
• Status: Active Grant

• Current Assignee: Japan Communications Inc.
• Original Assignee: Japan Communications Inc.
• Inventors: Fukuda, Naohisa, Royer, Paul, Okazaki, Mitsutera, Sanda, Frank S., Winn, Marc
• Granted Patent: US 8,533,338 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Embodiments of the present invention provide systems and methods for providing secure communications. One aspect of an embodiment of the invention creates a virtual private connection to a remote server or network utilizing a connection server and at least one direct connection between a client device and the remote server, without utilizing the Internet. In another aspect of an embodiment of the present invention, a client operating system is taken over by a vertical function operating system to service the communication with the remote server. Still another aspect of an embodiment of the present invention comprises a client device establishing a connection with a remote server through a connection server and at least one direct connection, shutting down a first operating system, starting up a second secure operating system, and launching an interface application with the second operating system to conduct electronic transactions with the remote server.

Claims

1. A method for providing secure communications for electronic transactions, the method comprising:

receiving an initiating connection signal from a client device at a connection server, the connection server comprising a session manager application;

establishing a communications link between the connection server and the client device through a direct connection;

initiating a connection signal from the connection server to a remote server with the session manager application;

establishing a communications link between the connection server and the remote server through a direct connection; and

creating a secure private network between the client device and the remote server to perform electronic transactions through the connection server.

2. The method of claim 1, further comprising authenticating the client device and an identity of a client device user by the connection server.

3. The method of claim 1, further comprising launching a transaction interface application on the client device by the connection server.

4. The method of claim 1, wherein the connection server further comprises a capacity management application;

and

controlling information traffic between the client device and the remote server using the capacity management application.

5. The method of claim 1, wherein the direct connection between connection server and the remote server is a leased line connection.

6. The method of claim 1, wherein the communications link between the connection server and the client device includes a telecommunications provider server and the direct connection is between the connection server and the telecommunications provider server.

7. The method of claim 6, wherein the direct connection between the connection server and the telecommunications provider server is a leased line connection.

8. A connection server comprising:

a session manager application, the session manager application adapted to establish a communications link through a direct connection with a remote server and through a direct connection with a client device; and

wherein the connection server creates a secure private network between the client device and the remote server to perform electronic transactions.

9. The connection server of claim 8, wherein the session manager application is adapted to authenticate the client device and an identity of a client device user.

10. The connection server of claim 8, wherein the direct connection with the remote server is a leased line connection.

11. The connection server of claim 8, further comprising a capacity management application for controlling information traffic between the client device and the remote server.

12. The connection server of claim 8,

wherein the session manager application establishes a communications link through a direct connection with a telecommunications provider device;

and

wherein the client device is connected to the telecommunications provider device.

13. The connection server of claim 12, wherein the direct connection with the telecommunications provider device is a leased line connection.

14. The connection server of claim 8, wherein the session manager application is executable code.

15. The connection server of claim 14, further comprising a processor for executing the session manager application.

16. A system for providing secure communications for electronic transactions, the system comprising:

a remote server;

a client device in communication with the remote server through a connection server, the client device comprising an access engine for controlling the connection with the remote server and at least one operating system;

a connection server connected to the remote server through a direct connection, the connection server comprising a session manager application adapted to establish a communications link through a direct connection with the remote server and through a direct connection with the client device; and

wherein the connection server creates a secure private network between the client device and the remote server to perform electronic transactions.

17. The system of claim 16, further comprising:

a telecommunications provider device in communication with the client device and the connection server, wherein the session manager application establishes a communications link through a direct connection with the telecommunications provider device.

18. The system of claim 16, wherein the connection server restricts applications running on the client device to only those designated for access to the remote server.

19. The system of claim 16, further comprising a communication path between the remote server and client device, wherein the connection server controls the communication path.

20. The system of claim 16, wherein the session manager application is adapted to authenticate the client device and an identity of a client device user.

21. The system of claim 16, wherein the connection server comprises a capacity management application for controlling information traffic between the client device and the remote server.

22. A method for providing secure communications with a network, the method comprising:

providing a client device for connecting to the network, the client device comprising a first operating system, a second operating system, and an access engine for controlling the connection to the network;

connecting to the network using the first operating system;

performing electronic transactions through the network connection using the second operating system.

23. The method of claim 22, further comprising:

shutting down the first operating system; and

starting the second operating system.

24. The method of claim 23, further comprising:

receiving a command from the network device through the network connection to shut down the first operating system; and

receiving a command from the network device through the network connection to start the second operating system.

25. The method of claim 23, further comprising:

using the access engine to shut down the first operating system; and

using the access engine to start the second operating system.

26. The method of claim 22, wherein the second operating system is a more secure operating system than the first operating system.

27. The method of claim 22, further comprising:

operating the second operating system; and

providing selected applications of the first operating system during operation of the second operating system.

28. The method of claim 22, further comprising:

placing the first operating system in sleep mode; and

starting the second operating system.

29. The method of claim 28, further comprising:

receiving a command from the network device through the network connection to place the first operating system in sleep mode; and

receiving a command from the network device through the network connection to start the second operating system.

30. The method of claim 28, further comprising:

using the access engine to place the first operating system in sleep mode; and

using the access engine to start the second operating system.