Method and apparatus for connection to virtual private networks for secure transactions

• US 8,676,916 B2
• Filed: 06/22/2012
• Issued: 03/18/2014
• Est. Priority Date: 07/23/2001
• Status: Expired due to Fees

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Inventors: Bellovin, Steven Michael, Killian, Thomas Joseph, LaRose, Bruce, Rubin, Aviel D., Schryer, Norman Loren
• Primary Examiner(s): Daftuar, Saket K
• Application Number:
  US13/531,012
• Publication Number:
  US 20130163757A1
• Time in Patent Office: 634 Days
• Field of Search: 709/201, 709/203, 709/205, 709/207, 709/208, 709/217, 709/218, 709/219, 709/220, 709/223, 709/225, 709/226, 709/227, 709/229, 709/230, 709/231, 705/35, 705/37, 705/38, 705/39, 705/36, 705/26.1, 705/75, 705/1.1, 705/2, 705/50, 705/64, 705/27.1, 705/40, 705/51, 705/44, 705/80, 705/41, 705/26.35, 455/412.1, 455/455, 455/73, 455/550.1, 455/557, 455/558, 455/403, 455/405, 455/406, 455/407, 707/999.104, 707/999.107, 707/999.1, 707/999.103, 707/999.001, 707/999.01, 707/E17.001, 707/E17.032, 707/656, 707/609, 707/640, 707/655, 370/331, 370/310, 370/328, 370/329, 370/335, 370/231, 370/229, 370/230, 370/351, 370/389, 370/400, 370/401, 370/392, 726/1, 726/2, 726/3, 726/4, 726/7, 726/10, 726/11, 726/12, 726/13, 726/26
• US Class Current: 709/209
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5061 Pools of addresses
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/9994 Distributed or remote access
• CPC Class Codes: Y10S 707/99941 Database schema or data structure
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99948 Application of database or data structure, e.g. distributed, multimedia, or image

Abstract

A system and method are provided for use in establishing secure end-to-end communication links over a VPN gateway via a network interface unit. Illustrative embodiments include establishing and providing secure communication relationships between users (customers) and companies for e-commerce and other business purposes. Each company'"'"'s data and linkage to users remaining private and secure from the other participating companies as well as from the general public over the Internet. Login by user with network interface units, addressing, authentication, and other configuration operations achieved using a web page-based GUI are applied in establishing tunnels from LAN clients to desired VPN destinations. Required authentication exchanges and required encryption key exchanges facilitate the secure communications. Financial arrangements regarding the provisioning and use of network interface units are also disclosed.

Claims

1. A system for establishing a private communication relationship between a consumer communication device and a first company, the system comprising:

a network interface to be communicatively coupled to the consumer communication device, the network interface to receive an identifier associated with a consumer;

a server to configure the network interface to establish a first private communication relationship between the consumer communication device and a company communication device associated with the first company using the identifier associated with the consumer; and

a security manager, implemented by a computer processor, to provide the first company with information related to a second private communication relationship established between a second company and the consumer in response to the security manager receiving a request from the consumer for the first private communication relationship with the first company,

the security manager to receive a message from the first company indicating whether the request is to be granted, wherein the security manager is to cause the first company to agree to a statement of privacy for a private communication between the consumer and the first company.

2. A system as defined in claim 1, further comprising a secure portal assigned to the company communication device by the security manager, the secure portal having a first key, the network interface having a second key, wherein the security manager is to manage the first and second keys.

3. A system as defined in claim 2, wherein the network interface comprises a plurality of randomly generated strings to be used to generate the first and second keys.

4. A system as defined in claim 1, wherein the security manager is to support network interfaces of a plurality of consumers and secure portals of a plurality of companies.

5. A system as defined in claim 4, wherein supporting the network interfaces comprises:

supplying first and second keys; and

establishing a key session.

6. A system as defined in claim 1, wherein the network interface comprises a web-browser.

7. A system as defined in claim 1, wherein the first company is to distribute information identifying private communication relationship networks.

8. A system as defined in claim 1, wherein more than one private communication relationship exists between the network interface and the company communication device.

9. A system as defined in claim 1, wherein the consumer requests a third private communication relationship with a third company that is not registered with the system to conduct private communication relationships;

and

the security manager is to determine whether the third company desires to participate in private communication relationships with a plurality of consumers which are registered with the security manager.

10. A system as defined in claim 1, wherein the information provided to the first company by the security manager identifies an amount of private communication relationships associated with the consumer.

11. A system as defined in claim 1, wherein the statement of privacy is accessible on a web site associated with the security manager.

12. A system for establishing one or more private communication relationships between a consumer and one or more companies, the system comprising:

a web page served by a server capable of configuring a network interface at a consumer device associated with the consumer to establish one or more private communication relationships between the consumer and the one or more companies, the web page being accessible by the network interface via a web-browser programmed with a web address corresponding to the server using a consumer identifier assigned to the network interface, the web page including a list of companies, respectively represented by company identifications, available for private communication relationships; and

a security manager, implemented by a computer processor, to receive a selection from the list of companies on the web page indicating a request by the consumer for a first private communication relationship with a first company, the security manager to provide the first company with information about a second private communication relationship between the consumer and a second company, the security manager to receive a response to the information from the first company informing the security manager whether the request is to be granted, the security manager to request the first company to agree to a statement of privacy for a private communication between the consumer and the first company.

13. A system as defined in claim 12, further comprising a registration prompt to prompt the consumer to register with the companies in the list by accessing a respective web site and providing consumer identifying information.

14. A system as defined in claim 12, further comprising an end-to-end tunnel established between the network interface and a portal of the first company based on the response from the first company.

15. A system as defined in claim 12, wherein more than one private communication relationship between the network interface and a third company is facilitated by the security manager.

16. A system as defined in claim 12, wherein the consumer identifier comprises a password and at least one of a name, a user name, a telephone number, an e-mail address, or a social security number.

17. A system as defined in claim 12, wherein the selection corresponds to an unregistered company;

and

the security manager is to determine whether the unregistered company desires to participate in private communication relationships established and managed by the security manager.

18. A system as defined in claim 12, wherein the information provided to the first company by the security manager identifies an amount of private communication relationships associated with the consumer.

19. A system as defined in claim 12, wherein the statement of privacy is accessible on a web site associated with the security manager.

20. A computer implemented method to establish a private communication relationship between a consumer communication device and a first company, comprising:

configuring a network interface associated with a consumer communication device to establish the private communication relationship between the consumer communication device and a company communication device associated with the first company using an identifier associated with the consumer;

providing the first company with information related to a second private communication relationship established between a second company and the consumer in response to a request from the consumer for the private communication relationship with the first company; and

requesting the first company to agree to a statement of privacy for a private communication between the consumer and the first company.