End to end real-time encrypting process of a mobile commerce WAP data transmission section and the module of the same

• US 6,937,731 B2
• Filed: 03/13/2001
• Issued: 08/30/2005
• Est. Priority Date: 03/13/2001
• Status: Expired due to Fees

• Current Assignee: Mitake Information Corp.
• Original Assignee: Mitake Information Corp.
• Inventors: Chiu, Hung-Che
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): HO, THOMAS M
• Application Number:
  US09/804,258
• Publication Number:
  US 20020131598A1
• Time in Patent Office: 1,631 Days
• Field of Search: 713/201, 705/79, 705/67, 709/203, 380/270
• US Class Current: 380/270
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

An end to end real-time encrypting process of a mobile commerce WAP data transmission section and the module of the same are disclosed. The wireless application environment (WAE) is used as a technical platform. An information encryption code security system matching a public key infrastructure is installed in the WML server end. This system includes a handset software encryption and decryption module, a cipher server, and a key management. The added cipher server dynamically downloads a public key using the HTTP service through a WAP gateway of WAN, GSM/GPRS/CDMA and other digital mobile system. When the user is desired to execute an M-commerce, the user may input commerce service according WML and then the input data is up-linked through an encryption and decryption process of the handset encryption and decryption module. After the information transfers to the WML server, it is decrypted by a public key.

Claims

1. An end to end real-time encrypting module of a mobile commerce WAP data transmission section, wherein the uppermost layer of the wireless application environment (WAE) is used as a developing platform and executing environment and is suitable for various communication networks, comprising at least one of GSM, PDC, CDPD, CDMA, TDMA, PHS, DECT, or GPRS and third generation mobile phone (3G) the real-time encrypting module comprising:

an information encryption code security system matching the public key infrastructure being installed in a WML server end of a current mobile server of a wireless service provider; and

the system includes a handset software encryption and decryption module, a cipher server, and a key management, said key management randomly generating an ideal key, said ideal key being stored and held secretly, said key management further generating a second set of keys which are in high demand and are frequently updated by a pseudo-random process, said key management further performing a secret sharing process wherein an original key is divided into a plurality of key shadows, said original key being restored only when a selected number of key shadows are combined, said original key being non-recoverable when said original key is lost or destroyed; and

,

a pre-compressor for compression of transmission data, said pre-compressor performing the pre-compression processing steps including;

a) dividing original data into a plurality of unit character strings, each said character string having 8 or 9 characters;

b) converting each said unit character string into a decimal value;

c) converting each said decimal value into a unit character string of hexadecimal characters;

d) dividing each said hexadecimal character into two unit character sets;

e) converting each said unit character set into a decimal character code between 0 and 255; and

,

f) converting each said character code into a respective ANSI character set.

2. The end to end real-time encrypting module of a mobile commerce WAP data transmission section as claimed in claim 1, wherein when an user registers into the WML server of WCP through a WAP network, the WML server will inform the cipher server to be responsible for actuating a public key remained in the handset software encryption and decryption module and the key management through the cipher server for the inter-process communication interface provided by operation systems of various computers;

the public key is downloaded to the client, comprising at least one of a mobile phone or a personal digital assistant, using HTTP service through a WAP gateway of WAN (wide area network), GSM/GPRS/CDMA and other digital mobile system.

3. The end to end real-time encrypting module of a mobile commerce WAP data transmission section as claimed in claim 1, wherein when it is desired to down-link personal commercial information, a user inputs a private key to be left in the stack memory of the mobile WAE environment as a standby key, further when the WML server transfers the personal commercial information to be down-linked to the cipher server, the WML server informs the cipher server to open the public key remaining in the handset software encryption and decryption module and key management for executing an encryption algorithm in the server end in advance;

further, the handset software encryption and decryption module and the encrypted data are down-linked to a client through the HTTP service;

then, the private key remaining in the WAE executing environment is used to decrypt the encryption data and then the decryption plain text is transferred to display the original form through a WML format document.

4. The end to end real-time encrypting module of a mobile commerce WAP data transmission section as claimed in claim 1, wherein in the security mechanism, the handset software encryption and decryption module are based on the WAE application layer, and thus are used to interpret wireless markup language and wireless markup script language.