Bifurcated transaction system in which nonsensitive information is exchanged using a public network connection and sensitive information is exchanged after automatically configuring a private network connection

• US 6,058,250 A
• Filed: 06/19/1996
• Issued: 05/02/2000
• Est. Priority Date: 06/19/1996
• Status: Expired due to Fees

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Kimmeth, Thomas, Nusbaum, Kurt, Harwood, Jonathan P.
• Primary Examiner(s): Treat, William M.
• Assistant Examiner(s): Caldwell, Andrew
• Application Number:
  US08/667,524
• Time in Patent Office: 1,413 Days
• Field of Search: 395/200.57, 395/200.58, 395/200.5, 395/200.51, 395/200.52, 395/653, 395/186, 395/187.01, 395/188.01, 705/26, 705/35, 705/39, 705/40, 705/44
• US Class Current: 709/227
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 7/12 for working between exchanges having different types of switching equipment, e.g. power-driven and step by step or decimal and non-decimal

Abstract

A method is disclosed for providing an enhanced level of security for sensitive or proprietary information associated with information transactions in a public network, such as the Internet. In carrying out that method, an on-line information transaction is bifurcated between a generalized information access portion of such a transaction and an exchange of sensitive user information. With such a bifurcation, the generalized information access portion of the transaction, which generally would constitute the more substantial (in terms of network resources) portion of the transaction, would be handled via a non-secure network, usually a public network such as the Internet. The portion of the transaction involving sensitive user information, on the other hand, would be handled by a separate secure connection, such as a private network, or intranetwork. An important characteristic of this bifurcation arrangement is the provision of a means for automated reconfiguration of a user terminal as between accessing the generalized information via the non-secure network and access to the secure communications network for the exchange of sensitive user information. Such an automated reconfiguration will be carried out without the necessity for any action on the part of the user, and indeed will be largely invisible to the user.

Claims

1. A method for managing a transaction via a communications path between a terminal device and a serving node in a data network, said method comprising the steps of:

establishing an initial communications path via a first connection between said terminal device and a serving node in a first data network;

receiving information from said serving node in said first data network for effecting a reconfiguration of said communications path for said transaction from said first connection in said first data network to a second connection in a second data network; and

automatically connecting said terminal device to a serving node in said second data network via said second connection;

wherein said step of automatically connecting includes the step of automatically disconnecting said first connection prior to implementation of said second connection.

2. The method for managing a transaction of claim 1 including the further step of

recognizing a signal to reconfigure said communications path from said first connection to said second connection.

3. The method for managing a transaction of claim 1 wherein said serving nodes in said first and said second data networks are manifested in a common node.

4. The method for managing a transaction of claim 1 wherein said step of receiving information includes the further step of effecting said reconfiguration of said communications path.

5. The method for managing a transaction of claim 1 including the further steps of:

automatically disconnecting said second connection in response to a user signal; and

reconfiguring said terminal device to enable, in response to user instruction, an implementation of a connection via an identified data network.

6. The method for managing a transaction of claim 5 wherein said step of automatically reconfiguring said terminal device includes the step of effecting said implementation of said connection via said identified data network.

7. A method for managing a transaction via a communications path between a terminal device and a serving node in a data network, said method comprising the steps of:

establishing an initial communications path via a first connection between said terminal device and a serving node in a first data network;

selecting at least one information item from a data base of said information items provided at said serving node in said first data network;

causing said selected information items to be downloaded to said terminal device via said first connection;

receiving information from said serving node in said first data network for effecting a reconfiguration of said communications path for said transaction from said first connection in said first data network to a second connection in a second data network; and

automatically connecting said terminal device to a serving node in said second data network via said second connection;

wherein said step of automatically connecting includes the step of automatically disconnecting said first connection prior to implementation of said second connection.

8. The method for managing a transaction of claim 7 including the further step of

recognizing a signal to reconfigure said communications path from said first connection to said second connection.

9. The method for managing a transaction of claim 7 wherein said serving nodes in said first and said second data networks are manifested in a common node.

10. The method for managing a transaction of claim 7 wherein said step of causing said selected information items to be downloaded includes the further step of causing said selected information items to be displayed at said terminal device.

11. The method for managing a transaction of claim 10 wherein said displayed selected items can be edited by a user at said terminal device.

12. The method for managing a transaction of claim 10 wherein display characteristics for said displayed selected items can be controlled at said terminal device.

13. The method for managing a transaction of claim 7 wherein said step of receiving information includes the further step of effecting said reconfiguration of said communications path.

14. The method for managing a transaction of claim 7 wherein said step of automatically connecting includes the step of uploading said selected information items from said terminal device to said serving node in said second data network via said second connection.

15. The method for managing a transaction of claim 7 including the further steps of:

automatically disconnecting said second connection in response to a user signal; and

reconfiguring said terminal device to enable, in response to user instruction, an implementation of a connection via an identified data network.

16. The method for managing a transaction of claim 15 wherein said step of automatically reconfiguring said terminal device includes the step of effecting said implementation of said connection via said identified data network.

17. A method for managing a transaction via a communications path between a terminal device and a serving node in a data network, said method comprising the steps of:

establishing an initial communications path via a first connection between said terminal device and a serving node in a first data network;

identifying at least one data network application from a data base of said data network applications provided at said serving node in said first data network;

receiving information from said serving node in said first data network for reconfiguring said terminal device for implementation of a communication path via an alternate connection between said terminal device and at least one of said identified data network applications in a second data network; and

in response to a selection signal from a user, automatically connecting said terminal device to a selected one of said identified data network applications via said alternate connection;

wherein said step of automatically connecting includes the step of automatically disconnecting said first connection prior to implementation of said alternate connection.

18. The method for managing a transaction of claim 17 wherein said selected data network application is operated at a serving node in said second data network.

19. The method for managing a transaction of claim 18 wherein serving nodes in said first and said second data networks are manifested in a common node.

20. The method for managing a transaction of claim 17 including the further steps of:

automatically disconnecting said alternate connection in response to a user signal; and

reconfiguring said terminal device to enable implementation of a pre-selected connection between said terminal device and an identified data network.

21. The method for managing a transaction of claim 20 wherein said step of automatically reconfiguring said terminal device includes the further step of effecting said implementation of said pre-selected connection.

22. A method for managing a transaction via a communications path between a terminal device and a serving node in a data network, said method comprising the steps of:

establishing an initial communications path via a first connection between said terminal device and a serving node in a first data network;

selecting an off-line form application from a data base provided at said serving node in said first data network;

receiving information from said serving node in said first data network for reconfiguring said terminal device for implementation of a communication path via a second connection between said terminal device and said selected off-line form application in a second data network; and

in response to a selection signal from a user, automatically connecting said terminal device to said selected off-line form applications;

wherein said step of automatically connecting includes the step of automatically disconnecting said first connection prior to implementation of said second connection.

23. The method for managing a transaction of claim 22 including the further step of downloading from said serving node in said first data network to said terminal device of an off-line form related to said off-line form application.

24. The method for managing a transaction of claim 22 including the further step of uploading said downloaded off-line form from said terminal device to said selected off-line form application, after processing by a user.

25. The method for managing a transaction of claim 22 including the further steps of:

automatically disconnecting said connection to said selected off-line form application in response to a user signal; and

reconfiguring said terminal device to enable implementation of a pre-selected connection between said terminal device and an identified data network.

26. The method for managing a transaction of claim 25 wherein said step of automatically reconfiguring said terminal device includes the further step of effecting said implementation of said pre-selected connection.

27. The method for managing a transaction of claim 22 wherein said selected off-line form application is operated at a serving node in said second data network.

28. The method for managing a transaction of claim 27 wherein serving nodes in said first and said second data networks are manifested in a common node.

29. A method for managing connections between a terminal device and at least one information source/processor wherein at least two of said connections are implemented via separate communications networks, comprising the steps of:

recognizing a signal for connection to an information source/processor via a communications network other than a communications network for which a predetermined connection is configured, said recognizing step occurs at a point when said terminal device is connected to a given source/processor;

causing said terminal device to implement a connection to said information source/processor via said other communications network;

upon termination of said information source/processor connection via said other communications network, automatically reconfiguring a connection criteria in said terminal device to enable said terminal device to implement, in response to user instruction, a connection via an alternative one of said communications networks; and

causing the other source/processor to download to said terminal device configuration data for enabling said step of automatically restoring a prior connection criteria in said terminal device.

30. The method for managing connections of claim 29 including the further step of causing said given source/processor to download to said terminal device configuration data for enabling said step of causing said terminal device to implement a connection to said other information source/processor.

31. The method for managing connections of claim 29 wherein information items may be selected by a user at said terminal device from said given source/processor, and including the further step of causing said selected information items to be downloaded from said source/processor to said terminal device.

32. The method for managing connections of claim 31 wherein said step of causing said terminal device to implement a connection includes the further step of uploading said selected information items from said terminal device to said other information source/processor.

33. The method for managing connections of claim 32 wherein said selected information items are processed by said user at said terminal device prior to uploading to said other information source/processor.

34. A method for enhancing security of certain data in an on-line information transaction comprising the steps of:

bifurcating said information transaction into a first portion comprising said certain data and a remaining portion, wherein said remaining portion is carried out via a public on-line communications connection between a terminal device and a public information server;

causing said first portion to be carried out via a secure private on-line communications connection between said terminal device and a private information server;

automatically reconfiguring network access means in said terminal device to switch between said public connection and said private connection; and

automatically disconnecting said public connection prior to implementation of said private connection.