SECURE TRANSMISSION AND EXCHANGE OF STANDARDIZED DATA

• US 20100064349A1
• Filed: 07/18/2009
• Published: 03/11/2010
• Est. Priority Date: 10/25/2002
• Status: Active Grant

• Current Assignee: Randall E. Orkis, William M. Randle
• Original Assignee: Randall E. Orkis, William M. Randle
• Inventors: RANDLE, William M., ORKIS, Randall E.
• Granted Patent: US 8,020,196 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Standardized transmission of digital data with trusted and untrusted connections by translating non-native requests and or non-native responses to and from a normalized format or to a format needed for processing the request and or response configured in hub and spoke, star, direct, peer to peer or hybrid connections. Encryption is provided at multiple layers to establish non-repudiation for a security service that integrates external security applications into a single service.

Claims

1. A system providing standardized transmission of data between and among digital devices using a single sign-on from a user comprising:

a digital device adapter to provide an interface to one or more user and a provider of digital services, said adapter translating either or both of a non-native request and/or a non-native response to the request to and from a normalized format or to a format needed for processing the request and or response and further comprising;

formatting an electronic request by translating data contained in the request, said request transmitted from one or more user;

preserving a communication infrastructure of the user,

producing an object recognizable by one or more platform of one or more non-affiliated user;

automatically building one or more connection for one or more platform used by the user to communicate with the platform of the non-affiliated user;

transmitting at least one of one or more request and one or more response generating a session;

creating a map of the session;

generating at least one unique identifier for each request and response;

logging the identifiers;

generating one or more unique session object, said object associated with the user non-accessible to the non-affiliated user, said object associated with the non-affiliated user non-accessible to the user, said object facilitating switching from one or more than one application based on the request; and

creating one or more file selected from the group consisting of a log, a journal, and an error report based on the object.

2. The system of claim 1 wherein the system securely integrates multiple disparate applications that may or may not be controlled or owned by the same entity through the exposure of normalized services that provide access to business functions residing in disparate systems including:

one or more internet protocol packet switched networks;

an adapter associated with each user and each provider that acts as a secure on ramp and integration point to the secure network wherein the adapter comprises a digital processor for providing;

a communication protocol that provides a delivery channel that communicates via a different protocol to communicate with the network platform;

a proxy for the channel device enabling a channel device to be integrated into the environment without changing the device'"'"'s communication infrastructure;

a translation mechanism to convert channel specific syntax and encoding to and from equivalent XML representations such that a channel device is integrated into the environment without changing the native data representations and encoding used;

a family of services that are accessed through the secure network via a normalized format that may be owned or created by any participant connected to the network and offered to users of the network; and

a unique identifier assigned to each and every interaction with the network that is unique and specific to the entry and exit points for a request into and out of the network allowing end to end tracking and security for all interactions with the network.

4. The system of claim 1 wherein the adapter creates one or more file selected from the group consisting of a log, a journal, and an error report based on the object.

5. The system of claim 1 wherein no user has access to the object of another user.

6. The system of claim 1 configured in hub and spoke, star, direct, peer to peer or hybrid connections to allow multiple communication configurations between participants connected via an adapter.

8. The system of claim 1 wherein a user generates a connection ID if an external system does not generate one, the adapter using said connection ID to proxy the session to one or more second user.

9. The system of claim 1 wherein the adapter uses the object to validate one or more than one subsequent interaction with a device associated with the user or an interface point.

10. The system of claim 9 wherein the validation determines one or more than one level of authorization.

11. The system of claim 1 wherein the adapter manages authorization for one or more than one user, device, request, interface, and response.

12. The system of claim 1 wherein the adapter caches the object.

13. The system of claim 1 wherein the adapter stores one or more object in a central location to support fail over.

14. The system of claim 12 wherein the cache or store comprises information concerning role and or one or more rule associated with the session.

15. The system of claim 1 wherein the adapter links one or more session to manage the dialog of the session in real time and or off line.

16. The system of claim 1 wherein the adapter interfaces between providers and trusted and or untrusted users and comprises one or more than one function of authorization, authentication, secure communications, and non-repudiation.

17. The system of claim 1 wherein translation occurs between and among 1) a request being made, 2) a device the request is being made from, 3) an owner of the device making the request, 4) an agent device, service provider or infrastructure making the request, 5) a credential and or a security element presented, and 6) the service provider and or owner of the system or systems containing the information of record for the request.

19. The system of claim 1 wherein the security management application is one or more than one of a biometrics, a digital certificate, a PKI, an LDAP, and a smart card.

3. A system providing standardized point to point transmission of data between and among digital devices using a single sign-on from a user wherein the system securely integrates multiple disparate applications that may or may not be controlled or owned by the same entity through the exposure of normalized services that provide access to business functions residing in disparate systems including:

one or more internet protocol packet switched networks;

an adapter associated with each user and each provider that acts as a secure on ramp and integration point to the secure network wherein the adapter comprises a digital processor for providing;

a communication protocol that provides a delivery channel that communicates via a different protocol to communicate with the network platform;

a proxy for the channel device enabling a channel device to be integrated into the environment without changing the device'"'"'s communication infrastructure;

a translation mechanism to convert channel specific syntax and encoding to and from equivalent XML representations such that a channel device is integrated into the environment without changing the native data representations and encoding used;

a family of services that are accessed through the secure network via a normalized format that may be owned or created by any participant connected to the network and offered to users of the network; and

a unique identifier assigned to each and every interaction with the network that is unique and specific to the entry and exit points for a request into and out of the network allowing end to end tracking and security for all interactions with the network;

wherein the adapter provides an interface to one or more user and a provider of digital services, said adapter translating either or both of a non-native request and/or a non-native response to the request to and from a normalized format or to a format needed for processing the request and or response and

     1) formats an electronic request by translating data contained in a request transmitted from one or more user;

     2) preserves a communication infrastructure of the user;

     3) produces an object recognizable by one or more platform of one or more non-affiliated user;

     4) builds one or more connection for one or more platform used by the user to communicate with the platform of the non-affiliated user;

     5) transmits at least one of one or more request and one or more response;

     6) generates a session;

     7) creates a map of the session;

     8) generates one or more unique session object associated with the user; and

     9) maintains a log of activity occurring with respect to all interactions within the network.

7. The system of claim 3 configured in hub and spoke, star, direct, peer to peer or hybrid connections to allow multiple communication configurations between participants connected via an adapter.

18. The system of claim 3 wherein translation occurs between and among 1) a request being made, 2) a device the request is being made from, 3) an owner of the device making the request, 4) an agent device, service provider or infrastructure making the request, 5) a credential and or a security element presented, and 6) the service provider and or owner of the system or systems containing the information of record for the request.

20. The system of claim 3 including a security management application comprising one or more than one of a biometrics, a digital certificate, a PKI, an LDAP, and a smart card.