METHOD OF PROCESSING REQUESTS FOR DIGITAL SERVICES

• US 20150288671A1
• Filed: 11/02/2012
• Published: 10/08/2015
• Est. Priority Date: 11/02/2012
• Status: Active Grant

• Current Assignee: Silverlake Mobility Ecosystem Sdn Bhd
• Original Assignee: Silverlake Mobility Ecosystem Sdn Bhd
• Inventors: Chan, Tong Yap, Yeong, Chi Long
• Granted Patent: US 9,450,936 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 9/00 Arrangements for program control, e.g. control units program control for peripheral devices G06F13/10
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/567 Integrating service provisioning from a plurality of service providers
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A method of processing requests for different digital services hosted by respective service entities is disclosed. The method including steps of receiving a request packet from a communication device, the request packet includes source and destination identifiers, determining which one of the different digital services the communication device is requesting a service, based on the destination identifier, authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the determined digital service, and if the access permission is granted, modifying the request packet and forwarding the modified request packet based on the destination identifier to the determined digital service for processing.

Claims

1. A method of processing requests for different digital services hosted by respective service entities, the method comprises:

receiving a request packet from a communication device, the request packet includes source and destination identifiers;

determining which one of the different digital services the communication device is requesting a service, based on the destination identifier;

authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the determined digital service; and

if the access permission is granted, modifying the request packet and forwarding the modified request packet based on the destination identifier to the determined digital service for processing;

wherein

authenticating the request packet includes comparing the source identifier and the destination identifier with access mapping rules having granularity levels based on a destination component and its related function, and wherein the access mapping rules are configurable to allow dynamic user access.

2. The method of claim 1, wherein the communication device is a mobile communication device.

3. The method of claim 1, wherein the communication device is a wired communication device.

4. The method of claim 1, further comprises:

generating an error code, if the access permission is not granted; and

forwarding an error packet, which includes the error code, to the communication device.

5. The method of claim 1, further comprises retrieving device profile information from the communication device.

6. The method of claim 1, further comprises retrieving information corresponding to a location of the communication device from the communication device.

7. The method of claim 1, further comprises logging information associated with processing of the request packet.

8. The method of claim 1, further comprises:

receiving a response packet from a system associated to the destination identifier, in response to the forwarded request packet;

processing the response packet to extract associated data information; and

forwarding the extracted data information to the communication device, wherein processing the response packet includes performing corresponding steps for analysing the extracted data information.

9. The method of claim 8, wherein the corresponding steps are selected from a group consisting of logging an error message and sending an associated error packet if the extracted data information includes the error message, and logging a success message and sending an associated success packet if the extracted data information includes the success message.

10. The method of claim 1, wherein the service entities provide the different digital services selecting from a group comprising finance, logistic, retail, media, healthcare, infotainment, security, education, and tourism.

11. A processor for processing requests for different digital services hosted by respective service entities, the processor comprising:

an aggregator module for receiving a request packet from a communication device, the request packet includes source and destination identifiers, and for determining which one of the different digital services the communication device is requesting a service, based on the destination identifier; and

an authentication module for authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the determined digital service,

wherein if the access permission is granted, the aggregator module modifies the request packet and forwards the modified request packet based on the destination identifier to the determined digital service for processing; and

wherein the aggregator module includes a provisioning sub module arranged to compare the source identifier and the destination identifier with access mapping rules having granularity levels based on a destination component and its related function, and wherein the access mapping rules are configurable to allow dynamic user access.

13. The processor of claim 11, wherein the aggregator module includes an identity and access sub module configured to perform identity management of the communication device,

wherein identity management includes providing authentication, authorisation and accounting.

14. The processor of claim 11, wherein the aggregator module includes a transaction logging sub module configured to log information relating to the request packet received by the aggregator module.

15. A middleware system for enabling digital transactions between communication devices and server systems, the middleware system comprising the processor of claim 11.

12. (canceled)