System and method for securing data through a PDA portal

• US 7,945,516 B2
• Filed: 04/03/2007
• Issued: 05/17/2011
• Est. Priority Date: 02/26/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Ariff, Fauziah B, Voltmer, Theodore S, Neemann, Trey, Bishop, Fred
• Primary Examiner(s): Kucab, Jamie
• Application Number:
  US11/695,911
• Publication Number:
  US 20070179895A1
• Time in Patent Office: 1,505 Days
• Field of Search: 705 51- 59, 380201-204, 726 1- 36, 715/733, 715/742, 709/217, 709/230
• US Class Current: 705/50
• CPC Class Codes: B01J 23/6562 Manganese
• CPC Class Codes: B01J 23/8913 Cobalt and noble metals
• CPC Class Codes: B01J 37/0205 in several steps
• CPC Class Codes: B01J 37/0226 Oxidation of the substrate, e.g. anodisation
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0226 Incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Consumers may utilize computing devices to assist in the purchase and/or loyalty process, and in particular, the consumer may utilize a PDA to facilitate the purchase and/or loyalty process. During the purchase and/or loyalty process, the consumer may need to insure that any content downloaded or used in association with the PDA is secure in how it is collected, assembled, and delivered to the PDA device. This system and method secures the data from its source to when it is actually viewed or used by the authorized user. The PDA may have direct access to an Internet web site portal that offers secure personal content from a content provider, such as, for example, an on-line banking or financial institution. Using the web site portal, the content provider may offer personal or confidential data, such as financial information, to PDA users in a secure (e.g., encrypted) environment. The exemplary system and method may establish a PDA portal link to the web site for collecting specified information for a user and transmitting the information to the remote device. To receive the information, the PDA contacts the portal and establishes a connection, authenticates itself to the network, and allows the user to complete secured transactions or transmissions over the network.

Claims

1. A system comprising:

a tangible, non-transitory memory communicating with a processor for securing content from a source to a remote recipient, wherein said content includes first content and second content,

said tangible, non-transitory memory having instructions stored thereon that, in response to execution by said processor, cause said processor to perform operations comprising;

retrieving, by said processor, said first content, wherein said first content is encrypted;

decrypting, by said processor, said first content;

locating, by said processor, an embedded link within said first content, wherein said embedded link includes navigation information for retrieving said second content, and wherein said embedded link does not display any address to said recipient upon receipt from said processor when viewed through a browser;

encrypting, by said processor, said first content;

retrieving, by said processor, said second content from a remote host associated with said embedded link, wherein said second content is retrieved prior to transmitting said first content to said recipient;

transmitting, by said processor, said first content to said recipient; and

transmitting, by said processor, said second content to said recipient.

2. The system of claim 1, wherein said embedded link, said first content, and said second content is received from an encryption device.

3. The system of claim 1, further programmed to transmit said embedded link, said first content, and said second content to said recipient for storage when said content has been collected from at least one of said source, wherein said first content and said second content remains encrypted at said recipient.

4. The system of claim 1, wherein said first content is encrypted with an encryption key of said recipient.

5. The system of claim 1, wherein at least one of:

said first content and said second content is received over a secure connection that is established by using a negotiated encryption key.

6. The system of claim 1, further configured to transmit said embedded link, said first content, and said second content to said recipient.

7. The system of claim 1, further programmed to receive a signal from said recipient indicating a portion of said content to be at least one of refreshed and downloaded.

8. The system of claim 1, further programmed to identify said recipient.

9. The system of claim 1, further programmed to interrogate said source containing said content to determine when secure content is included in said content.

10. The system of claim 1, further programmed to connect to an encryption device.

11. The system of claim 1, wherein said recipient is a personal digital assistant.

12. The system of claim 1, wherein said second content is encrypted.

13. The system of claim 1, further programmed to identify a plurality of embedded links within at least one of:

said first content and said second content.

14. A method including:

retrieving said first content, by a processor for securing content from a source to a remote recipient, wherein said content includes first content and second content, wherein said first content is encrypted;

decrypting, by said processor, said first content;

identifying, by said processor, an embedded link in said first content, wherein said embedded link includes navigational information for retrieving said second content, and wherein said embedded link does not display any address to said recipient upon receipt from said processor when viewed through a browser;

encrypting, by said processor, said first content;

retrieving, by said processor, said second content from a remote host associated with said embedded link, wherein said second content is retrieved prior to transmitting said first content to said recipient;

transmitting, by said processor, said first content to said recipient; and

transmitting, by said processor, said second content to said recipient.

15. The method of claim 14, wherein said step of receiving said second content includes receiving encrypted second content.

16. The method of claim 14, wherein said identifying step includes identifying a plurality of embedded links within said encrypted content.

17. The method of claim 14, further including receiving said embedded link, said first content, and said second content from an encryption device.

18. The method of claim 14, further including transmitting said embedded link, said first content, and said second content to said recipient for storage when said content has been collected from at least one of said source, wherein said first content and said second content remains encrypted at said recipient.

19. The method of claim 14, further including encrypting said first content with an encryption key of said recipient.

20. The method of claim 14, further including receiving encrypted content which is an encrypted portion of said first content.

21. The method of claim 14, further including decrypting encrypted content to form said decrypted content.

22. A non-transitory tangible computer readable storage medium having stored thereon a plurality of computer executable instructions that perform operations, in response to execution by a computer for securing content from a source to a remote recipient, wherein said content includes first content and second content, comprising:

retrieving, by said computer, encrypted content which is an encrypted portion of said first content;

decrypting, by said computer, said encrypted content to form decrypted content;

analyzing, by said computer, said decrypted content to identify an embedded link, wherein said embedded link includes navigation information for retrieving said second content, and wherein said embedded link does not display any address to said recipient upon receipt from said computer when viewed through a browser;

encrypting, by said computer, said decrypted content to form said encrypted content;

retrieving, by said computer, said second content from a remote host associated with said embedded link, wherein said second content is retrieved prior to transmitting said encrypted content to said recipient;

transmitting, by said computer, said encrypted content to said recipient; and

transmitting, by said computer, said second content to said recipient.