SYSTEM AND METHOD FOR SECURELY ACCESSING DATA THROUGH WEB APPLICATIONS

• US 20140259105A1
• Filed: 03/06/2013
• Published: 09/11/2014
• Est. Priority Date: 03/06/2013
• Status: Active Grant

• Current Assignee: Nuesoft Technologies Incorporated (Global Payments Incorporated)
• Original Assignee: Nuesoft Technologies Incorporated (Global Payments Incorporated)
• Inventors: Alibakhsh, Massoud, Famorzadeh, Shahram
• Granted Patent: US 10,158,618 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic

Abstract

A system for providing information server security in a distributed computing environment achieved by injecting a proprietary mediating entity into the solicitation of service request process via web server between application servers and information servers. The system comprises a computer apparatus, a mediating entity, solicitation for service requests and responses to the solicitations for service requests. The mediating entity is comprised of an application server hosting a proprietary mediating entity client and a mediating entity server, where the proprietary mediating entity client comprises industry-recognized business organization selected security protocols. The information server comprises a database server and a database, the database comprises data that is extracted or stored based on the service request.

Claims

1. A system of providing information server security by injecting a proprietary mediating entity stored in a non-transitory computer readable medium into the solicitation of service request process via web server between application servers and information servers, the system comprising:

at least one computer apparatus, wherein the at least one computer apparatus transmits at least one solicitation of requests for service by at least one requestor via web browser;

a server network infrastructure, wherein the server network infrastructure is comprised of;

at least one mediating entity;

at least one application server;

at least one web server; and

at least one information server,

wherein the infrastructure, the plurality of servers, and the at least one mediating entity comprise a secure server network model wherein the secure server network model utilizes the at least one mediating entity as a secure communication intercessor amid the at least one application server and the at least one information server, thereby enabling secure communication initiated by the at least one solicitation for service request received by the at least one web server from the web browser by the at least one requestor between the at least one application server and the at least one information server;

a mediating entity, wherein the mediating entity strengthens standard information server security by adding at least one authentication layer comprised of;

proprietary software implemented in a non-transitory computer readable medium; and

proprietary security protocols.

2. The system of claim 1, wherein the at least one information server comprises a software platform implemented in a computer readable medium, and wherein the at least one information server integrates and extracts data responsive to the at least one solicitation for service request from the at least one requestors.

3. The system of claim 2, wherein the proprietary security protocols comprise at least one of a plurality of industry recognized authentication protocols selected by an organization.

4. A method of providing information server security by injecting a proprietary mediating entity stored in a non-transitory computer readable medium into the solicitation of service request process via web server between application servers and information servers, comprising the steps of:

configuring a secure network infrastructure, wherein the secure network infrastructure comprises;

a secure server network model, wherein the secure server network model comprises;

a server network infrastructure that comprises a configuration of;

at least one mediating entity;

at least one application server;

at

least one web server; and

at least one information server;

programming at least one of a plurality of industry recognized proprietary security protocols selected by at least one business organization into the mediating entity;

soliciting at least one service request by at least one requestor from at least one application server, via a web browser stored on a computer apparatus, wherein the at least one application server stores and extracts data for the at least one requestor from the at least one information server;

authenticating the at least one service request solicitation via the at least one of a plurality of business organization-selected proprietary security protocols programmed into the at least one mediating entity, wherein the at least one mediating entity comprises proprietary software implemented in a non-transitory computer readable medium, and proprietary security protocols, wherein the mediating entity is located amid the at least one application server and the at least one information server and strengthens standard information server security; and

obtaining the at least one solicited service from the at least one application server following authentication, wherein the at least one service requires storing and extracting data to and from the at least one information server.

5. The method of claim 4, wherein the at least one of a plurality of business organization-selected proprietary security protocols further perform the step of:

providing means of authentication and authorization for at least one of a plurality of requestors, wherein the at least one of a plurality of business organization-selected proprietary security protocols comprise at least one of a plurality of industry recognized authentication protocols.

6. The method of claim 5, wherein the at least one mediating entity further performs the step of:

providing a layer of security for the at least one information server against malicious attacks;

housing and implementing a plurality of industry recognized business organization-selected proprietary security protocols;

authenticating at least one of a plurality of requestors, wherein the authentication adheres to the industry recognized business organization-selected proprietary security protocols.

7. The method of claim 6, wherein the at least one information server further performs the step of:

integrating at least one of a plurality of the requestors'"'"' data into a computer readable medium; and

extracting the at least one of a plurality of requestors'"'"' data for the business organizations'"'"' services.