Secure variable storage for internet applications

• US 6,282,618 B1
• Filed: 05/11/1998
• Issued: 08/28/2001
• Est. Priority Date: 11/28/1997
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Flenley, John Martin
• Primary Examiner(s): Yoo, Do Hyun
• Assistant Examiner(s): MCLEAN MAYO, KIMBERLY N
• Application Number:
  US09/075,736
• Time in Patent Office: 1,205 Days
• Field of Search: 705/64-79, 705/70, 705/42, 705/43, 709/171, 709/172, 709/213, 709/201, 709/203, 711/147, 711/151, 711/154, 711/156, 380/4, 380/25, 707/9, 707/10, 707/203, 707/206, 713/201, 713/200
• US Class Current: 711/147
• CPC Class Codes: G06F 9/5016 the resource being the memory
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs

Abstract

A memory controller component (10, 30, 40) for an Internet application such as a bank, airline or supermarket web site is disclosed. The component is instantiated from a web page (Page_—1.htm..Page_—3.htm) in the application and exposes a number of methods. A connect method checks if a pre-determined area of named shared memory has been allocated, and responsive to the named shared memory not being allocated, allocates named shared memory. A setVariable method allocates an area in the shared memory for a variable and stores the variable. A getVariable method locates the variable in shared memory. Corresponding get and set encrypted variable methods are also disclosed. Furthermore, an ATM running an Internet browser enabling a user to swap between web sites at an ATM is disclosed.

Claims

1. A memory controller component operable by a plurality of Internet applications, each Internet Application comprising one or more web pages, said component being adapted to be instantiated from any one of the or each web pages and comprising:

connect means adapted to check if a pre-determined area of memory shareable by more than one web page has been allocated by another instance of said component instantiated from a different web page, said different web page belonging to another Internet application than that comprising the page which instantiated said component, and responsive to said shared memory not being allocated to allocate said shared memory;

variable setting means adapted to allocate an area in said shared memory for a variable and to store said variable; and

variable retrieval means adapted to locate said variable in said shared memory.

2. A memory controller according to claim 1, wherein said controller includes:

encryption key setting means adapted to store one or more encryption keys;

variable encryption means adapted to allocate an area in shared memory for a variable and to store said variable in an encrypted format according to a pre-determined encryption key; and

variable decryption means adapted to locate said variable in shared memory and to decrypt said variable according to said pre-determined encryption key.

3. A memory controller according to claim 1 wherein said pre-determined area of shared memory is named shared memory.

4. A memory controller according to claim 1 wherein said Internet Application is adapted to run on a computer running Internet browser software, and said controller is an ActiveX control adapted to be stored on said computer.

5. A memory controller according to claim 2 wherein said controller includes means for encrypting one encryption key with another encryption key.

6. A memory controller according to claim 2 wherein said encryption key setting means is adapted to store said encryption keys in volatile memory on a computer running said Internet Application.

7. A memory controller according to claim 1 wherein said shared memory comprises a control block structure comprising plurality of objects, each object having a variable name attribute, a length of variable data attribute, and an internal offset pointer attribute adapted to indicate an offset from the start of said shared memory to said variable data.

8. A memory controller according to claim 7 wherein said control block structure includes an attribute whose contents can be set and read by said connect means to determine the state of said structure.