SYSTEM AND METHOD OF PERFORMING ELECTRONIC TRANSACTIONS

• US 20140165145A1
• Filed: 11/27/2013
• Published: 06/12/2014
• Est. Priority Date: 11/19/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Baentsch, Michael, Hermann, Reto, Kramp, Thorsten, Weigold, Thomas D., Buhler, Peter, Eirich, Thomas, Visegrady, Tamas
• Granted Patent: US 9,313,201 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06Q 20/08 Payment architectures
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/01 Protocols

Abstract

A system and method of performing electronic transactions between a server computer and a client computer. The method implements a communication protocol with encrypted data transmission and mutual authentication between a server and a hardware device via a network, performs a decryption of encrypted server responses, forwards the decrypted server responses from the hardware device to the client computer, displays the decrypted server responses on a client display, receives requests to be sent from the client computer to the server, parses the client requests for predefined transaction information by the hardware device, encrypts and forwards client requests, displays the predefined transaction information upon detection, forwards and encrypts the client request containing the predefined transaction information to the server if a user confirmation is received, and cancels the transaction if no user confirmation is received.

Claims

1. A hardware device for controlling electronic transactions, the hardware device comprising a user interface for presenting information to a user and a hardware device interface unit for coupling the hardware device to a client computer, said hardware device comprising:

a proxy application;

a processor device configured for loading said proxy application on the client computer via the hardware device interface unit, wherein the proxy application on said client computer is configured to forward client requests received from a browser application executing at the client computer to the hardware device; and

,

wherein the proxy application is further configured to;

forward client requests from the hardware device via a communication network to a server computer, and, forward server responses received from the server computer to the hardware device and from the hardware device to the browser application on said client computer.

2. The hardware device according to claim 1, wherein the proxy application configures a processor device to read and write a virtual file on the hardware device.

3. A computer pointer device for a computer system, operable in communication with said computer system for receiving communications there from, said computer pointer device comprising:

at least one processor device for operating in a first operating mode and a second operating mode, wherein the at least one processor device is configured for performing electronic transactions with a server computer by means of a first communication protocol in said second operating mode;

one or more button or key means for responding to information displayed by the pointer device; and

a means for displaying from said device, readable transaction information to a user.

4. The computer pointer device according to claim 3, wherein said processor is operable in a first sub-mode of the second operating mode and a second sub-mode of the second operating mode,

wherein said processor is configured in the first sub-mode to exchange messages between the client computer and the server computer that do not comprise any predefined transaction information while concurrently providing at least a part of the functionality of the first operating mode, and,

wherein said processor is configured in the second sub-mode to interrupt the functionality of the first mode upon detection of predefined transaction information and to present the predefined transaction information by its display means to prompt for user confirmation.

5. The computer pointer device of claim 3, wherein the at least one processor comprises a switch that is controlled by the client computer, wherein the switch controls whether the pointer device operates in said first operating mode or said second operating mode.

6. The computer pointer device of claim 5, wherein the switch is actuated by said proxy application executing in the client computer.

7. The computer pointer device of claim 3, wherein the at least one processor runs a Secure Sockets Layer (SSL) protocol or a Transport Layer Security (TLS) protocol after switching into the second operating mode.

8. A method for executing a secure transaction between a client computer and a server computer via a communication network, said client computer having an associated pointer device operable in a first mode of operation and a second mode of operation, said method comprising:

running, in the second operating mode, a communication protocol with encrypted data transmission and mutual authentication between the pointer device and the server computer;

scanning in a first sub-mode of the second operating mode messages to be exchanged between the client computer and the server computer via the pointer device for predefined transaction information;

switching into a second sub-mode of the second operating mode upon detection of predefined transaction information;

presenting the predefined transaction information in the second sub-mode to the user by the pointer device to prompt for a user confirmation;

forwarding the predefined transaction information to the server computer if a user confirmation is received.

9. The method according to claim 8, further comprising:

providing by the pointer device in the first sub-mode of the second operating mode at least a part of the functionality of the first mode,

interrupting, in the second sub-mode of the second operating mode, the functionality of the first mode,

returning to the first sub-mode of the second operating mode upon said user confirmation.