Secure gateway processing for handheld device markup language (HDML)

• US 6,334,056 B1
• Filed: 05/28/1999
• Issued: 12/25/2001
• Est. Priority Date: 05/28/1999
• Status: Expired due to Term

• Current Assignee: Qwest Communications International Incorporated (Lumen Technologies, Inc.)
• Original Assignee: Qwest Communications International Incorporated (Lumen Technologies, Inc.)
• Inventors: Holmes, Wayne L., Olander, David C.
• Primary Examiner(s): Trost, William
• Assistant Examiner(s): TRAN, CONGVAN
• Application Number:
  US09/322,723
• Time in Patent Office: 942 Days
• Field of Search: 455/445, 455/410, 455/411, 455/412, 455/418, 455/419, 455/424, 455/425, 455/426, 455/428, 455/433, 455/422, 370/351, 370/352, 370/328, 370/353, 370/355
• US Class Current: 455/445
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

Secure access is provided for a limited access data network (intranet) to handheld electronic devices which include the functionality to process alphanumeric information and process information received in handheld device markup language (HDML). A handheld device user may first establish a connection with a data network such as the World Wide Web. Through use of a uniform resource locator (URL) request made over this data network, a connection is made to an intranet. At the firewall for the intranet, an identification process is performed to determine that the URL request originated from a handheld device. Such a request is routed through a socket designated for such requests and received by a proxy server. The proxy server provides the necessary security steps in order to provide access to applications within the intranet, and once validation has been confirmed, connection to the application is established. The proxy server further includes the functionality to convert information received from the applications into HDML, so that it may be processed by the handheld device.

Claims

1. A wireless communication system comprising:

a first data network in connection with a wireless transceiver device which receives wireless communication signals from at least one handheld wireless communications device, where the at least one handheld wireless communication device includes functionality to receive, display, and transmit alphanumeric information, said transceiver device converts, processes and transmits the communications signals received from both the wireless communications device and the first data network; and

a second data network in connection with the first data network which receives and transmits the communications signals, the second network comprising;

a router device configured to act as an interface with the first data network to receive and process signals from a plurality of data sources, wherein said router device is further configured to identify the communications signals received from the at least one wireless communications device and to direct the communications within the second data network based on the identification; and

a proxy server configured receives the communications signals from the at least one wireless communication device and to perform particular security operations to determine the validity of the at least one wireless communications device, and if the validity of the at least one wireless communications device is established, providing access to applications in the second data network specially configured to communicate with the at least one handheld wireless communications device.

2. The system of claim 1 wherein the wireless device is a handheld telephone which provides for entry and display of alphanumeric information.

3. The system of claim 1 wherein the first data network is the Worldwide Web.

4. The system of claim 1 wherein the first data network is a private fast packet network.

5. The system of claim 1 wherein the communication signals are encoded in handheld markup language (HDML).

6. The system of claim 1 wherein the router device includes the functionality to identify types of traffic received and route the traffic to an appropriate socket.

7. The system of claim 1 wherein the transceiver device is a server programmable to establish a connection with the first network based on the communications signals received from the at least one wireless communicating device.

8. A network interface system, comprising:

a router device in connection with a first data network which provides for the receipt and transmission of traffic over the first data network, wherein the router device is configured to identify communications signals within the traffic which originate from at least one handheld wireless communication device and to direct the communications signals to a particular socket based on the identification; and

a proxy server device connectable to the router device which may receive the communications signals directed through the particular socket and perform an analysis to determine the authenticity of the at least one handheld wireless communications device from which the communications signals originate, which includes transmitting at least one request to the at least one handheld wireless communications device to enter information relating to the authenticity of at least one handheld wireless communications device, and once authenticity is determined, establishing a line of communication between the at least one handheld wireless communications device and selected applications which are specially configured to communicate with the at least one handheld wireless communications device.

9. The system of claim 8 wherein the router device and the proxy server device are incorporated includable in an intranet.

10. The system of claim 8 wherein the source is a wireless communications devices.

11. The system of claim 10 wherein the wireless communications device is a wireless telephone which provides for entry and display of alphanumeric information.

12. The system of claim 8 wherein the public data network is the worldwide web.

13. The system of claim 8 wherein the public data network is a private fast packet data network.

14. The system of claim 8 wherein the proxy server is adaptable to convert traffic to and from handheld device markup language (HDML).

15. The system of claim 8 wherein the traffic includes uniform resource locator (URL) requests.

16. A method of providing access for a wireless communications device to an intranet comprising the steps of:

providing a network interface configured to identify communications signals received from at least one handheld wireless communications device over a public data network;

distinguishing the communications signals received from the at least one handheld wireless communications device from all other communications signals;

transmitting data signals to the at least one handheld wireless communications device requesting validation and verification information;

upon receiving the validation and verification information processing said validation and verification information to determine whether access will be granted to the limited access network; and

if access is granted, directing the wireless communications device user to at least one application specially configured to communicate with the at least one handheld wireless communications device within the intranet.

17. The method of claim 16 further comprising the step of converting the data signals generated by the applications to HDML for transmission to the wireless communication device.

18. The method of claim 16 wherein the wireless communications device is a wireless telephone or other electronic device.

19. The method of claim 16 wherein the communication signals include a URL.

20. The method of claim 16 wherein the step of validation and verification includes at least one of:

requesting a user identification from the operator of the wireless communications device and requesting a password.