METHOD AND SYSTEM FOR EXCHANGE OF DATA BETWEEN REMOTE SERVERS

• US 20090119364A1
• Filed: 11/07/2008
• Published: 05/07/2009
• Est. Priority Date: 11/07/2007
• Status: Abandoned Application

• Current Assignee: Oberthur Technologies SA (Advent International Corporation)
• Original Assignee: Oberthur Technologies SA (Advent International Corporation)
• Inventors: Guillon, Gerard
• Application Number:
  US12/266,850
• Publication Number:
  US 20090119364A1
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability

Abstract

A method and a system for exchanging data between a first server (131) housed in an electronic unit (130) linked to a programmable device (100) and a second remote server (110). The first and second servers are each individually addressable by the programmable device via respective target addresses and the method including the following steps:

• • reception (208) by the programmable device of a response to a first request, the response including the data and one of the target addresses;
  • execution (216) of the response by a browser (107) implemented on the programmable device in such a manner as to cause the transmission (218) of the data to the target address. The invention is notably applicable to transactions between servers.

Claims

1. Method for exchange of data between a first server (131) housed in an electronic unit (130) linked to a programmable device (100) and a second remote server (110), said first and second servers being each individually addressable by the programmable device via respective target addresses, the method comprising the following steps:

a. reception (208) by the programmable device of a response to a first request, said response comprising the data and one of said target addresses;

b. execution (216) of said response by a browser (107) implemented on the programmable device in such a manner as to cause the transmission (218) of the data to said target address.

2. Method according to claim 1, in which the steps a) and b) are reiterated, and said transmission (218) of an iteration comprises the transmission of said first request of the following iteration.

3. Method according to claim 1, in which said first and second servers are HTTP servers implementing the HTTP protocol for the transmission of said response and the transmission of said data to the target address.

4. Method as claimed in claim 3, in which said response comprises an HTML page for verification of a user PIN code.

5. Method according to claim 1, in which said response comprises a command designed to be executed by said browser (107).

6. Method according to claim 1, in which said command comprises said target address.

7. Method according to claim 1, in which said command comprises a command for sending an HTTP request.

8. Method according to claim 7, in which said send command comprises an external link to an HTTP server.

9. Method according to claim 5, in which said command designed to be executed by said browser comprises a local command according to the ISO 7816 standard designed to be executed on the data destination server, and said data are passed as parameters of the local command.

10. Method according to claim 1, in which said transmission (218) of the data comprises the transmission of a request, the method comprising a step for converting said request into a command compatible with communication means provided in said electronic unit.

11. Method according to claim 1, in which said electronic unit (130) is designed to be connected in a removable manner to said programmable device (100), and the method comprises an initial step for connection of said electronic unit to said programmable device so as to form a communications link.

12. Method according to claim 1, in which said electronic unit (130) comprises a mobile telephony card.

13. Method according to claim 1, in which said programmable device (100) is a mobile telephone.

14. Method according to claim 1, in which said second remote server (110) and said programmable device (100) communicate over at least one mobile telecommunications network (120).

15. Method according to claim 1, in which at least one of said addresses comprises an IP address.

16. Method according to claim 1, in which said data are banking transaction data.

17. Method for authentication between a first and a second server, comprising a token exchange based on a Challenge-Response mechanism by the exchange of data according to claim 1.

18. System for exchange of data between a first and a second server, the system comprising a first server (131) housed in an electronic unit (130) linked to a programmable device (100) and a second remote server (110), said first and second servers being each individually addressable by the programmable device (100) via respective target addresses, the programmable device comprising:

means for receiving a response to a first request, said response comprising the data and one of the target addresses; and

a browser (107) designed to execute said response in such a manner as to cause the transmission of the data to said target address.

19. System according to claim 18, in which said browser is designed to transmit said data in the form of a request, said system comprising means for converting said request into a command compatible with communication means provided in said electronic unit.

20. Method for transmission of data from a remote server (110) to a destination server (131) housed in an electronic unit (130) addressable via a target address by a programmable device (100) implementing a browser (107), characterized by a step for transmission (304), in response to a first request, by the remote server and destined for the programmable device, of a response readable by the browser (107) and comprising the data, the target address and an instruction to redirect the data to the target address.

21. Method according to claim 20, in which the redirection instruction comprises a command designed to be executed by said browser.

22. Method according to claim 21, in which said command comprises a local command capable of being executed by the electronic unit.

23. Method according to claim 22, in which said local command complies with the ISO 7816 standard.

24. Server (110) comprising transmission means designed to transmit, in response to a first request and destined for a programmable device implementing a browser, a response readable by the browser and comprising data, a target address of a second server housed in an electronic unit linked to said programmable device and an instruction to redirect the data to the target address.

25. Method for transmission of data from a first server (131) housed in an electronic unit (130) linked to a programmable device (100) implementing a browser (107), to a second remote destination server (110) having a target address, characterized by a step for transmission (304), in response to a first request, by said first server (131) and destined for the programmable device (100), of a response readable by the browser (107) and comprising the data, the target address and an instruction to redirect the data to the target address.

26. Method according to claim 25, comprising an initial processing step carried out by said electronic unit so as to generate said data.

27. Electronic unit (130) comprising a first server (131) and connection means (134) to a programmable device (100) implementing a browser (107), said first server comprising:

transmission means designed to transmit, in response to a first request and destined for the programmable device, a response readable by the browser and comprising data, a target address of a second remote server and an instruction to redirect the data to the target address.

28. Electronic unit (130) according to claim 27, in which said connection means comprise an interface according to the ISO 7816 standard.

29. Electronic unit (130) according to claim 27, comprising cryptographic means and an associated encryption key designed to generate said data.