System and method for playing rich internet applications in remote computing devices

• US 7,650,390 B2
• Filed: 05/30/2007
• Issued: 01/19/2010
• Est. Priority Date: 06/01/2006
• Status: Active Grant

• Current Assignee: Ingenico (Ingenico Group SA)
• Original Assignee: ROAM Data Incorporated (Ingenico Group SA)
• Inventors: Lindsay, David, Arner, Michael, Rodley, John, Graylin, Will
• Primary Examiner(s): NGUYEN, PHUOC H
• Application Number:
  US11/755,079
• Publication Number:
  US 20070282858A1
• Time in Patent Office: 965 Days
• Field of Search: 709/203, 709/217, 709/227
• US Class Current: 709/217
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1014 based on the content of a request

Abstract

A system and a method of playing rich internet applications on remote computing devices by using a certifying player to invoke server-side web services through a single, secure, certifying intermediary server. The application player resides in the remote computing device and is configured to be executed by the remote computing device. The intermediary server is configured to communicate with the remote computing device via a network connection and to receive message requests from the application player and to send message responses to the application player. The intermediary server provides access of the RIA to the remote computing device by accessing an application server, where the RIA resides, via a single, secure and access-controlled network connection. The application player requests functionality of the RIA from the intermediary server via message requests and interprets the message responses received from the intermediary server. The message requests and responses may be Extensible Mark-up Language (XML) messages.

Claims

1. A system for playing one or more Rich Internet Applications (RIAs) on a remote computing device comprising:

an application player residing in said remote computing device and configured to be executed by said remote computing device;

an intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIAs to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIAs reside in said application server and wherein said access is controlled by an application privilege protocol and secured by an application security protocol; and

wherein said application privilege protocol is managed by said intermediary server and comprises a first table configured to associate Global Unique Identifiers (GUIDs) with said RIAs and a second table configured to associate RIAs authorized to be executed by said application player; and

wherein said application player requests functionality of said RIAs from said intermediary server via said message requests and interprets said message responses received from said intermediary server.

2. The system of claim 1 wherein said RIAs are configured to be displayed in said application player.

3. The system of claim 1 wherein business logic of said RIAs requiring data from a source outside of said remote computing device is configured to be executed in said application server.

4. The system of claim 1 wherein at least one of said RIAs comprises an XML document.

5. The system of claim 1 wherein at least one of said RIAs comprises a rich user interface (UI) configured to be displayed in said remote computing device and to receive input from a user via said UI.

6. The system of claim 1 wherein said application player is configured to access a plurality of web services via said intermediary server and wherein said access is controlled by a web service privilege protocol and secured by a web service security protocol;

and wherein said web service privilege protocol is managed by said intermediary server and comprises said first table being configured to associate Global Unique Identifiers (GUIDs) with said plurality of web services and said second table being configured to associate web services authorized to be executed by said application player.

7. The system of claim 6 wherein said security protocols comprise any of secure HTTP (S-HTTP), link encryption or web services security(WS-S).

8. The system of claim 6 wherein said intermediary server further provides a complete audit trail of interactions and communications between said remote computing device and said web services and RIAs.

9. The system of claim 6 wherein said intermediary server provides fine-grained access control to individual web service calls to said web services.

10. The system of claim 1 wherein said intermediary server comprises said first and second tables.

11. The system of claim 1 wherein said application player is configured to be certified by a certifying entity.

12. The system of claim 1 wherein said intermediary server is configured to be certified by a certifying entity.

13. The system of claim 1 wherein said remote computing device comprises a managed code environment and wherein said application player is executed within said managed code environment.

14. The system of claim 13 wherein said managed code environment comprises one of Small Technical Interoperability Platform Virtual Machine (STIP VM), J2ME, .NET, or Flash Lite.

15. The system of claim 1 wherein said remote computing device further comprises a secure payment module.

16. The system of claim 1 wherein said remote computing device further comprises one or more device drivers.

17. The system of claim 1 wherein said remote computing device comprises one of mobile phone, PDA, payment module, portable computer, robot, personal computer, server or a computing circuit.

18. The system of claim 1 wherein said message requests from said application player to said intermediary server comprise Extensible Mark-up Language (XML) messages embedded in Simple Object Access Protocol (SOAP) requests and said message responses from said intermediary server to said application player comprise XML messages embedded in SOAP responses.

19. The system of claim 1 wherein said message requests and message responses comprise one of ActionScript Message Format (AMF) or Secure Mobile Application Platform (SMAP) format.

20. The system of claim 1 wherein said intermediary server comprises a load balancing module for managing request from a plurality of remote computing devices.

21. The system of claim 1 wherein said intermediary server comprises a message cache.

22. The system of claim 1 wherein said intermediary server is configured to communicate with an application database, wherein said application database comprises a list of said available RIAs.

23. A system for playing a Rich Internet Application (RIA) on a remote computing device comprising:

an application player residing in said remote computing device and configured to be executed by said remote computing device;

an intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIA to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIA resides in said application server;

wherein said application player requests functionality of said RIA from said intermediary server via said message requests and interprets said message responses received from said intermediary server; and

wherein said remote computing device further comprises an offline application cache and said offline application cache comprises one or more applications previously downloaded by said application player.

24. The system of claim 23 wherein said remote computing device further comprises an offline data cache and said offline data cache comprises one or more stored web service calls saved for each of said applications for execution at a later time.

25. A system for playing a Rich Internet Application (RIA) on a remote computing device comprising:

an application player residing in said remote computing device and configured to be executed by said remote computing device;

an intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIA and web services to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIA resides in said application server;

wherein said application player requests functionality of said RIA from said intermediary server via said message requests and interprets said message responses received from said intermediary server; and

wherein said remote computing device is configured to combine multiple individual web service calls into a single chain and said intermediary server is configured to decompose said single chain into its constituent individual web service calls and place said individual web service calls.

26. A method for playing one or more Rich Internet Applications (RIAs) on a remote computing device comprising:

installing an application player in said remote computing device, wherein said application player is configured to be executed by said remote computing device;

providing an intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIAs to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIAs resides in said application server and wherein said access is controlled by an application privilege protocol and secured by an application security protocol, and wherein said privilege protocol is managed by said intermediary server and comprises a first table configured to associate Global Unique Identifiers (GUIDs) with said RIAs and a second table configured to associate RIAs authorized to be executed by said application player; and

executing said application player in said remote computing device;

sending a message request from said application player to said intermediary server, wherein said message requests functionality of said RIAs;

sending a message response from said intermediary server to said application player, wherein said message responses comprises said requested RIAs functionality; and

playing said RIAs in said remote computing device by said application player.

27. The method of claim 26 wherein said RIAs are configured to be displayed in said application player.

28. The method of claim 26 wherein business logic of said RIAs requiring data from a source outside of said remote computing device is configured to be executed in said application server.

29. The method of claim 26 wherein at least one of said RIAs comprises an XML document.

30. The method of claim 26 wherein at least one of said RIA comprises a rich user interface (UI) configured to be displayed in said remote computing device and to receive input from a user via said UI.

31. The method of claim 26 wherein said application player is configured to access a plurality of web services via said intermediary server and wherein said access is controlled by a web service privilege protocol and secured by a web service security protocol;

and wherein said web service privilege protocol is managed by said intermediary server and comprises said first table configured to associate Global Unique Identifiers (GUIDs) with said plurality of web services and said second table configured to associate web services authorized to be executed by said application player.

32. The method of claim 31 wherein said security protocols comprise any of secure HTTP (S-HTTP), link encryption, or web services security.

33. The method of claim 26 wherein said intermediary server comprises said first and second tables.

34. The method of claim 26 wherein said application player is configured to be certified by a certifying entity.

35. The method of claim 26 wherein said intermediary server is configured to be certified by a certifying entity.

36. The method of claim 26 wherein said remote computing device comprises a managed code environment and wherein said application player is executed within said managed code environment.

37. The method of claim 36 wherein said managed code environment comprises one of Small Technical Interoperability Platform Virtual Machine (STIP VM), J2ME, .NET, or Flash Lite.

38. The method of claim 26 wherein said remote computing device further comprises a secure payment module.

39. The method of claim 26 wherein said remote computing device further comprises one or more device drivers.

40. The method of claim 26 wherein said remote computing device comprises one of mobile phone, PDA, payment module, portable computer, personal computer, robot, server, or computing circuit.

41. The method of claim 26 wherein said message request from said application player to said intermediary server comprises an XML message embedded in Simple Object Access Protocol (SOAP) request and said message response from said intermediary server to said application player comprises and XML message embedded in SOAP response.

42. The method of claim 26 wherein said message request and message response comprise one of ActionScript Message Format (AMF) or Secure Mobile Application Platform (SMAP) format.

43. The method of claim 26 wherein said intermediary server comprises a load balancing module for managing request from a plurality of remote computing devices.

44. The method of claim 26 wherein said intermediary server comprises a message cache.

45. The method of claim 26 wherein said intermediary server is configured to communicate with an application database, wherein said application database comprises a list of said available RIAs.

46. The method of claim 26 wherein said intermediary server further provides a complete audit trail of interactions and communications between said remote computing device and said web services and RIAs.

47. The method of claim 26 wherein said intermediary server provides fine-grained access control to individual web service calls to said web services.

48. A method for playing a Rich Internet Application (RIA) on a remote computing device comprising:

installing an application player in said remote computing device, wherein said application player is configured to be executed by said remote computing device;

providing an intermediary server intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIA to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIA resides in said application server; and

executing said application player in said remote computing device;

sending a message request from said application player to said intermediary server, wherein said message requests functionality of said RIA;

sending a message response from said intermediary server to said application player, wherein said message responses comprises said requested RIA functionality; and

playing said RIA in said remote computing device by said application player; and

wherein said remote computing device further comprises an offline application cache and said offline application cache comprises one or more applications previously downloaded by said application player.

49. The method of claim 48 wherein said remote computing device further comprises an offline data cache and said offline data cache comprises one or more stored web service calls saved for each of said applications for execution at a later time.

50. A method for playing a Rich Internet Application (RIA) on a remote computing device comprising:

installing an application player in said remote computing device, wherein said application player is configured to be executed by said remote computing device;

providing an intermediary server intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIA to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIA resides in said application server; and

executing said application player in said remote computing device;

sending a message request from said application player to said intermediary server, wherein said message requests functionality of said RIA;

sending a message response from said intermediary server to said application player, wherein said message responses comprises said requested RIA functionality; and

playing said RIA in said remote computing device by said application player; and

wherein said remote computing device is configured to combine multiple individual web service calls into a single chain and said intermediary server is configured to decompose said single chain into its constituent individual web service calls and place said individual web service calls.

51. A system for playing a Rich Internet Application (RIA) on a remote computing device comprising:

an application player residing in said remote computing device and configured to be executed by said remote computing device;

an intermediary server configured to communicate with said remote communication device via a first network connection and to receive message requests from said application player and to send message responses to said application player and to provide access of said RIA to said remote computing device by accessing an application server via a single, secure and access-controlled second network connection, wherein said RIA resides in said application server;

wherein said application player requests functionality of said RIA from said intermediary server via said message requests and interprets said message responses received from said intermediary server; and

wherein said intermediary server further provides a complete audit trail of interactions and communications between said remote computing device and said RIA.