System and method for secure transactions over a network

• US 7,010,590 B1
• Filed: 09/15/2000
• Issued: 03/07/2006
• Est. Priority Date: 09/15/1999
• Status: Expired due to Term

• Current Assignee: First Data Merchant Services LLC (Fiserv Incorporated)
• Original Assignee: Datawire Communications Networks, Inc.
• Inventors: Munshi, Anees
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US09/662,975
• Time in Patent Office: 1,999 Days
• Field of Search: 713150-153, 713201-202, 713/154, 713/200, 713160-167, 713/178, 713187-189, 713/194, 705/64, 705/70, 705/71, 705/75, 705/77, 705/79, 380/228, 380/259, 380/264, 380/273, 709238-239, 709223-224, 345733-740, 370241-254
• US Class Current: 709/224
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

The public Internet is the world'"'"'s largest system of inter-networked computers. Adequate security means for protecting sensitive data communicated over the Internet is not, however, provided. The present invention, therefore, provides a system and method for performing secure transactions over an insecure packet-switched communication network. This is achieved by interconnecting a number of master nodes over the insecure communication network. The master nodes are capable of transmitting encrypted data packets over the insecure network via pseudo-random communication paths. The master nodes are further capable of returning to any state in a secure transaction in the event of a network failure. The master nodes are also capable of using new keys to encrypt each data packet.

Claims

1. A method of providing reliable transactions over a communication network comprising the steps of:

determining a need in a node in a transaction network to update a transmission path capacity indicator between the node and a destination node in the transaction network;

formulating an application layer transaction request message comprising an electronic transaction request message in the node as a probe for the purposes of updating the transmission path capacity indicator wherein the electronic transaction message is a credit card charge authorization message;

selecting one of a plurality of output ports on the node for transmitting the probe packet to the destination node;

transmitting the probe packet to an adjacent node;

receiving an application layer transaction response message from the adjacent node correlated with the probe jacket using a message identifier number;

determining a time duration in the node based on a first time associated with the transmission of the probe packet and a second time associated with the receipt of the application layer transmission response message; and

updating the transmission path capacity indicator based on the time duration.

2. A method of providing reliable transactions over a communication network comprising the steps of:

determining a need in a node in a transaction network to update a transmission path capacity indicator between the node and a destination node in the transaction network;

formulating an application layer transaction request message comprising an electronic transaction request message in the node as a probe packet for the purposes of updating the transmission path capacity indicator wherein the electronic transaction message debits a bank account;

selecting one of a plurality of output ports on the node for transmitting the probe packet to the destination node;

transmitting the probe packet to an adjacent node;

receiving an application layer transaction response message from the adjacent node correlated with the probe packet using a message identifier number;

determining a time duration in the node based on a first time associated with the transmission of the probe packet and a second time associated with the receipt of the application layer transaction response message; and

updating the transmission path capacity indicator based on the time duration.

3. A method of providing reliable transactions over a communication network comprising the steps of:

determining a need in a node in a transaction network to update a transmission path capacity indicator between the node and a destination node in the transaction network;

formulating an application layer transaction request message comprising an electronic transaction request message as a probe packet for the purposes of updating the transmission path capacity indicator wherein the electronic transaction request message is a debit card authorization request in the node;

selecting one of a plurality of output ports on the node for transmitting the probe packet to the destination node;

transmitting the probe packet to an adjacent node;

receiving an application layer transaction response message from the adjacent node correlated with the probe packet using a message identifier number;

determining a time duration in the node based on a first time associated with the transmission of the probe packet and a second time associated with the receipt of the application layer transaction response message; and

updating the transmission path capacity indicator based on the time duration.

4. A method of providing reliable transactions over a communication network comprising the steps of:

determining a need in a node in a transaction network to update a transmission path capacity indicator between the node and a destination node in the transaction network wherein the destination node is operatively connected to a credit card transaction server;

formulating an application layer transaction request message comprising an electronic transaction request message in the node as a probe packet for the purposes of updating the transmission path capacity indicator;

selecting one of a plurality of output ports on the node for transmitting the probe packet to the destination node;

transmitting the probe packet to an adjacent node;

receiving an application layer transaction response message from the adjacent node correlated with the probe packet using a message identifier number;

determining a time duration in the node based on a first time associated with the transmission of the probe packet and a second time associated with the receipt of the application layer transaction response message; and

updating the transmission path capacity indicator based on the time duration.