Systems and methods for providing secure communications for transactions

• US 8,886,813 B2
• Filed: 03/11/2013
• Issued: 11/11/2014
• Est. Priority Date: 03/21/2006
• Status: Active Grant

• Current Assignee: Japan Communications Inc.
• Original Assignee: Japan Communications Inc.
• Inventors: Sanda, Frank S., Fukuda, Naohisa, Winn, Marc, Okazaki, Mitsutera, Royer, Paul
• Primary Examiner(s): Rashid, Harunur
• Application Number:
  US13/794,552
• Publication Number:
  US 20130276073A1
• Time in Patent Office: 610 Days
• Field of Search: 709/227, 709/228, 709/229
• US Class Current: 709/227
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Embodiments of the present invention provide systems and methods for providing secure communications. One aspect of an embodiment of the invention creates a virtual private connection to a remote server or network utilizing a connection server and at least one direct connection between a client device and the remote server, without utilizing the Internet. In another aspect of an embodiment of the present invention, a client operating system is taken over by a vertical function operating system to service the communication with the remote server. Still another aspect of an embodiment of the present invention comprises a client device establishing a connection with a remote server through a connection server and at least one direct connection, shutting down a first operating system, starting up a second secure operating system, and launching an interface application with the second operating system to conduct electronic transactions with the remote server.

Claims

1. A method for providing secure communications for electronic transactions, comprising:

receiving an initiating connection signal from a client device at a connection server through a first direct connection that is between the client device and the connection server, wherein the client device and the connection server are addressable privately only, and the connection server comprising a session manager and a capacity management application for controlling a capacity of information traffic between the client device and a remote server to enable management of packets transmitted therebetween to selectively reduce cost of communication;

establishing a first communications link between the connection server and the client device through the first direct connection, wherein a first data transmission path for the first communications link is identifiable;

initiating a connection signal from the connection server to a remote server with the session manager application through a second direct connection that is between the connection server and the remote server;

establishing a second communications link between the connection server and the remote server through the second direct connection, wherein the remote server is addressable privately only and a second data transmission path for the second communications link is identifiable; and

creating a secure private connection between the client device and the remote server upon the client device being connected with the remote server to perform electronic transactions through the connection server and over the first direct connection and the second direct connection.

2. The method of claim 1, wherein the capacity management application manages an actual number of packets that flow between the client device and the remote server.

3. The method of claim 1, wherein the session manager authenticates the client device and an identity of a client device user before establishing the first communications link based on credentials for establishing the secure private connection between the client device and the remote server.

4. The method of claim 1, further comprising authenticating, by the connection server, the client device and an identity of a client device user.

5. The method of claim 1, further comprising launching, by the connection server, a transaction interface application on the client device.

6. The method of claim 1, wherein the first direct connection between the client device and the connection server is over a wireless network with one or more network end-points and intermediate points that are addressable privately only.

7. The method of claim 1, wherein the first direct connection includes a section of a wireless data transmission and the second direct connection includes a leased line connection.

8. A connection server comprising:

one or more processors;

one or more non-transitory computer-readable storage media having stored thereon executable instructions that, when executed by the one or more processors, cause the connection server to provide;

a session manager application for establishing a first communications link between the connection server and a client device through a first direct connection and for establishing a second communications link between the connection server and a remote server through a second direct connection, wherein the client device, the connection server, and the remote server are each addressable privately only, and a first data transmission path for the first communications link and a second data transmission path for the second communications link are each identifiable, and wherein the connection server creates a secure private connection between the client device and the remote server to perform electronic transactions through the first communications link and the second communications link; and

a capacity management application for controlling the capacity of information traffic between the client device and the remote server, which takes place across the first direct connection that is between the client device and the connection server, and the second direct connection that is between the connection server and the remote server to enable management of packets transmitted therebetween to selectively reduce cost of communication.

9. The connection server of claim 8, wherein the session manager application is adapted to authenticate the client device and an identity of a client device user.

10. The connection server of claim 8, wherein the second direct connection with the remote server is a leased line connection.

11. The connection server of claim 8, wherein the session manager application establishes the first communications link through the first direct connection with a telecommunications provider device, and wherein the client device is connected to the telecommunications provider device.

12. The connection server of claim 11, wherein the first direct connection with the telecommunications provider device includes a leased line connection.

13. The connection server of claim 8, wherein the capacity management application manages an actual number of packets that flow between the client device and the remote server.

14. The connection server of claim 8, wherein the first direct connection between the client device and the connection server is over a wireless network with one or more network end-points and intermediate points that are addressable privately only.

15. The connection server of claim 8, wherein the first direct connection includes a section of a wireless data transmission and the second direct connection includes a leased line connection.

16. A method for providing secure communications for electronic transactions, comprising:

receiving an initiating connection signal from a client device at a connection server through a first connection that is between the client device and the connection server, wherein the client device and the connection server are addressable privately only, and the connection server comprising a session manager and a capacity management application for controlling a capacity of information traffic between the client device and a remote server to enable management of packets transmitted therebetween to selectively reduce cost of communication;

establishing a first communications link between the connection server and the client device through the first connection, wherein a first data transmission path for the first communications link is identifiable;

initiating a connection signal from the connection server to a remote server with the session manager application through a second connection that is between the connection server and the remote server;

establishing a second communications link between the connection server and the remote server through the second connection, wherein the remote server is addressable privately only and a second data transmission path for the second connection is identifiable; and

creating a secure private connection between the client device and the remote server upon the client device being connected with the remote server to perform electronic transactions through the connection server and across the first connection and the second connection.

17. The method of claim 16, wherein the capacity management application manages an actual number of packets that flow between the client device and the remote server.

18. The method of claim 16, further comprising authenticating, by the connection server, the client device and an identity of a client device user.

19. The method of claim 16, wherein the first connection or the second connection is a direct connection.

20. The method of claim 16, wherein the first connection between the client device and the connection server is over a wireless network with one or more network end-points and intermediate points that are addressable privately only.

21. The method of claim 16, wherein the first connection includes a section of a wireless data transmission and the second connection includes a leased line connection.