Secure Transmission System and Method

• US 20100275007A1
• Filed: 07/08/2010
• Published: 10/28/2010
• Est. Priority Date: 05/03/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Skype Limited (Microsoft Corporation)
• Inventors: Hiir, Tanel, Kutt, Andres
• Granted Patent: US 8,705,565 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/762 at the source reformatting of additional data in video distribution servers H04N21/2355
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks

Abstract

A method is provided for transmitting information from a user to a first network entity over a communications network. The user enters information into a browser executed at a user terminal. The browser generates a first message comprising the information using a first communication protocol for despatch over the network via a network port, the first message including an identifier of the first network entity. A client executed at the user terminal receives the first message before the first message reaches the network port. The first message is wrapped in a second message of a second communication protocol used for transmitting messages between the client and a second network entity. The second message is transmitted to the second network entity over the communications network. The first message is unwrapped from the second message at the second network entity, the identifier of the first network entity translated to a network address of the first network entity and the first message is transmitted to the first network entity over the communications network.

Claims

1. A method of transmitting information from a user to a first network entity over a communications network, comprising the steps of:

the user entering information into a browser executed at a user terminal;

the browser generating a first message comprising the information using a first communication protocol for despatch over the network via a network port, the first message including an identifier of the first network entity;

receiving the first message at a client executed at the user terminal before the first message reaches the network port;

wrapping the first message in a second message of a second communication protocol used for transmitting messages between the client and a second network entity;

transmitting the second message to the second network entity over the communications network; and

unwrapping the first message from the second message at the second network entity, translating the identifier of the first network entity to a network address of the first network entity and transmitting the first message to the first network entity over the communications network.

2. A method according to claim 1, further comprising the step of encrypting the information in the first message after receiving the first message at the client.

3. A method according to claim 2, further comprising the step of receiving the first message transmitted by the second network entity at the first network entity.

4. A method according to claim 3, further comprising the step of decrypting the information in the first message, after it is received at the first network entity.

5. A method according to claim 2, wherein the step of encrypting is performed using an encryption key provided by the first network entity.

6. A method according to claim 5, further comprising the step of the first network entity periodically transmitting the encryption key to the second network entity.

7. A method according to claim 1, further comprising the steps of:

transmitting a third message to the second network entity from the first network entity, responsive to receiving the first message;

receiving the third message at the second network entity and, responsive thereto, fetching a webpage from a server;

wrapping the webpage in a fourth message of the second communication protocol;

transmitting the fourth message to the client over the communications network;

unwrapping the webpage from the fourth message at the client and passing the webpage to the browser; and

displaying the webpage to the user in the browser.

8. A method according to claim 7, wherein the third message is a redirect message.

9. A method according to claim 1, wherein the step of wrapping the first message in a second message of a second communication protocol comprises the step of adding a header and a footer to the first message.

10. A method according to claim 1, wherein the first communication protocol is a hypertext transfer protocol.

11. A method according to claim 1, wherein the first network entity is a payment service provider.

12. A method according to claim 1, wherein the communications network is the Internet.

13. A method according to claim 1, wherein the second network entity is a Skype backend server.

14. A method according to claim 1, wherein the information is payment information.

34. A computer program product comprising program code means which when loaded into a computer controls the computer to carry out the method of claim 1.

15. A system for transmitting information from a user to a first network entity over a communications network, comprising:

a browser executed at a user terminal, the browser comprising means for receiving information entered by the user, and means for generating a first message comprising the information using a first communication protocol for despatch over the network via a network port, the first message including an identifier of the first network entity;

a client executed at the user terminal comprising means for receiving the first message at the client before the first message reaches the network port, means for wrapping the first message in a second message of a second communication protocol used for transmitting messages between the client and a second network entity, and means for transmitting the second message to the second network entity over the communications network; and

the second network entity comprising means for unwrapping the first message from the second message at the second network entity, means for translating the identifier of the first network entity to a network address of the first network entity, and means for transmitting the first message to the first network entity over the communications network.

16. A system according to claim 15, wherein the client further comprises means for encrypting the information in the first message after receiving the first message at the client.

17. A system according to claim 16, wherein the first network entity further comprises means for receiving the first message transmitted by the second network entity.

18. A system according to claim 17, wherein the first network entity further comprises means for decrypting the information in the first message, after it is received at the first network entity.

19. A system according to claim 16, wherein the encryption is performed using an encryption key provided by the first network entity.

20. A system according to claim 19, wherein the first network entity further comprises means for periodically transmitting the encryption key to the second network entity.

21. A system according to claim 15, wherein the first network entity further comprises means for transmitting a third message to the second network entity, responsive to receiving the first message.

22. A system according to claim 21, wherein the second network entity further comprises means for receiving the third message and, responsive thereto, fetching a webpage from a server, means for wrapping the webpage in a fourth message of the second communication protocol, and means for transmitting the fourth message to the client over the communications network.

23. A system according to claim 22, wherein the client further comprises means for unwrapping the webpage from the fourth message and passing the webpage to the browser.

24. A system according to claim 23, wherein the browser further comprises means for displaying the webpage to the user.

25. A system according to claim 21, wherein the third message is a redirect message.

26. A system according to claim 15, wherein the means for wrapping the first message in a second message of a second communication protocol comprises means for adding a header and a footer to the first message.

27. A system according to claim 15, wherein the first communication protocol is a hypertext transfer protocol.

28. A system according to claim 15, wherein the first network entity is a payment service provider.

29. A system according to claim 15, wherein the communications network is the Internet.

30. A system according to claim 15, wherein the second network entity is a Skype backend server.

31. A system according to claim 15, wherein the information is payment information.

32. A user terminal comprising:

a browser executed at the user terminal, the browser comprising means for receiving information entered by a user, and means for generating a first message comprising the information using a first communication protocol for despatch over a communications network via a network port, the first message including an identifier of a first network entity; and

a client executed at the user terminal comprising means for receiving the first message at the client before the first message reaches the network port, means for wrapping the first message in a second message of a second communication protocol used for transmitting messages between the client and a second network entity, and means for transmitting the second message to the second network entity over the communications network.

33. A network entity comprising:

means for unwrapping a first message of a first communication protocol from a second message of a second communication protocol transmitted by a client executed at a user terminal to the network entity over a communications network, the first message including an identifier of a further network entity;

means for translating the identifier of the further network entity to a network address of the further network entity; and

means for transmitting the first message to the further network entity over the communications network.