Method and communications and communication network intrusion protection methods and intrusion attempt detection system

• US 7,865,732 B2
• Filed: 02/10/2009
• Issued: 01/04/2011
• Est. Priority Date: 05/17/1999
• Status: Expired due to Fees

• Current Assignee: Invicta Networks, Inc.
• Original Assignee: Invicta Networks, Inc.
• Inventors: Sheymov, Victor I
• Primary Examiner(s): Lipman; Jacob
• Application Number:
  US12/368,348
• Publication Number:
  US 20100042513A1
• Time in Patent Office: 693 Days
• Field of Search: 713/172
• US Class Current: 713/172
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 2463/141 Denial of service attacks against endpoints in a network
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1458 Denial of Service

Abstract

A method, system and computer readable medium for secure e-commerce communications, including an e-commerce system, including a private system for maintaining confidential information; and a public system for maintaining non-confidential information. The private system provides variable cyber coordinates to authorized parties for secure communications with the private system, and the public system provides cyber coordinates to the general public for communications with the public system.

Claims

1. A secure e-commerce communications system, the system comprising:

an e-commerce system, including;

a private system for maintaining confidential information; and

a public system for maintaining non-confidential information,

wherein the private system provides variable cyber coordinates to authorized parties for secure communications with the private system,

the public system provides cyber coordinates to the general public for communications with the public system,

information regarding an e-commerce transaction is maintained in a register separate from the private system by a public server,

the register is periodically reviewed by a secure server handling financial transactions and belonging to the private system,

the financial transactions server, having received pending transaction data based on review of the register, communicates with a device performing the e-commerce transaction and provides short-term temporary access to the financial transactions server for completing the e-commerce transaction,

the device performing the e-commerce transaction is allowed access to the financial transactions server just long enough to communicate corresponding financial data,

the financial transactions server, after sending a transaction confirmation to the device performing the e-commerce transaction, terminates communications with the device, and

after the termination of the communications with the device performing the e-commerce transaction, the financial transactions server is moved to a new variable cyber coordinate.

2. The system of claim 1, wherein the non-confidential information for the general public includes a company catalog related to the e-commerce system.

3. The system of claim 1, wherein the public system comprises a public server with the cyber coordinates comprising a fixed IP address.

4. The system of claim 1, wherein the transaction information includes terms and price of a corresponding sale.

5. The system of claim 1, wherein the public server does not know a current variable cyber coordinate of the financial transactions server.

6. The system of claim 1, wherein the financial data includes a credit card number.

7. The system of claim 1, wherein, after the termination of the communications with the device performing the e-commerce transaction, the device is diverted back to the public server.

8. The system of claim 1, wherein the cyber coordinates include at least one of a an IP address, a computer port number or designator, a telephone number, a file name or designator, a telephone number, and an access number or code.

9. A method for secure e-commerce communications, the method comprising:

configuring an e-commerce system to include a private system for maintaining confidential information, and a public system for maintaining non-confidential information;

providing via the private system variable cyber coordinates to authorized parties for secure communications with the private system; and

providing via the public system cyber coordinates to the general public for communications with the public system,

wherein information regarding an e-commerce transaction is maintained in a register separate from the private system by a public server,

the register is periodically reviewed by a secure server handling financial transactions and belonging to the private system,

the financial transactions server, having received pending transaction data based on review of the register, communicates with a device performing the e-commerce transaction and provides short-term temporary access to the financial transactions server for completing the e-commerce transaction,

the device performing the e-commerce transaction is allowed access to the financial transactions server just long enough to communicate corresponding financial data,

the financial transactions server, after sending a transaction confirmation to the device performing the e-commerce transaction, terminates communications with the device, and

after the termination of the communications with the device performing the e-commerce transaction, the financial transactions server is moved to a new variable cyber coordinate.

10. The method of claim 9, wherein the non-confidential information for the general public includes a company catalog related to the e-commerce system.

11. The method of claim 9, wherein the public system comprises a public server with the cyber coordinates comprising a fixed IP address.

12. The method of claim 9, wherein the transaction information includes terms and price of a corresponding sale.

13. The method of claim 9, wherein the public server does not know a current variable cyber coordinate of the financial transactions server.

14. The method of claim 9, wherein the financial data includes a credit card number.

15. The method of claim 9, wherein, after the termination of the communications with the device performing the e-commerce transaction, the device is diverted back to the public server.

16. The method of claim 9, wherein the cyber coordinates include at least one of a an IP address, a computer port number or designator, a telephone number, a file name or designator, a telephone number, and an access number or code.

17. A computer program product for secure e-commerce communications, and including one or more computer readable instructions embedded on a computer readable medium and configure to cause one or more computer processors to perform the step of:

configuring an e-commerce system to include a private system for maintaining confidential information, and a public system for maintaining non-confidential information;

providing via the private system variable cyber coordinates to authorized parties for secure communications with the private system; and

providing via the public system cyber coordinates to the general public for communications with the public system,

wherein information regarding an e-commerce transaction is maintained in a register separate from the private system by a public server,

the register is periodically reviewed by a secure server handling financial transactions and belonging to the private system,

the financial transactions server, having received pending transaction data based on review of the register, communicates with a device performing the e-commerce transaction and provides short-term temporary access to the financial transactions server for completing the e-commerce transaction,

the device performing the e-commerce transaction is allowed access to the financial transactions server just long enough to communicate corresponding financial data,

the financial transactions server, after sending a transaction confirmation to the device performing the e-commerce transaction, terminates communications with the device, and

after the termination of the communications with the device performing the e-commerce transaction, the financial transactions server is moved to a new variable cyber coordinate.

18. The computer program product of claim 17, wherein the non-confidential information for the general public includes a company catalog related to the e-commerce system.

19. The computer program product of claim 17, wherein the public system comprises a public server with the cyber coordinates comprising a fixed IP address.

20. The computer program product of claim 17, wherein the transaction information includes terms and price of a corresponding sale.

21. The computer program product of claim 17, wherein the public server does not know a current variable cyber coordinate of the financial transactions server.

22. The computer program product of claim 17, wherein the financial data includes a credit card number.

23. The computer program product of claim 17, wherein, after the termination of the communications with the device performing the e-commerce transaction, the device is diverted back to the public server.

24. The computer program product of claim 17, wherein the cyber coordinates include at least one of a an IP address, a computer port number or designator, a telephone number, a file name or designator, a telephone number, and an access number or code.