System and method of performing electronic transactions

• US 9,313,201 B2
• Filed: 11/27/2013
• Issued: 04/12/2016
• Est. Priority Date: 11/19/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Baentsch, Michael, Hermann, Reto, Kramp, Thorsten, Weigold, Thomas D., Buhler, Peter, Eirich, Thomas, Visegrady, Tamas, Hoering, Frank, Kuyper-Hammond, Michael P.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US14/092,556
• Publication Number:
  US 20140165145A1
• Time in Patent Office: 867 Days
• Field of Search: 726/3, 709/249
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/08 Payment architectures
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/01 Protocols

Abstract

A system and method of performing electronic transactions between a server computer and a client computer. The method implements a communication protocol with encrypted data transmission and mutual authentication between a server and a hardware device via a network, performs a decryption of encrypted server responses, forwards the decrypted server responses from the hardware device to the client computer, displays the decrypted server responses on a client display, receives requests to be sent from the client computer to the server, parses the client requests for predefined transaction information by the hardware device, encrypts and forwards client requests, displays the predefined transaction information upon detection, forwards and encrypts the client request containing the predefined transaction information to the server if a user confirmation is received, and cancels the transaction if no user confirmation is received.

Claims

1. A hardware device for controlling electronic transactions, the hardware device comprising a user interface for presenting information to a user and a hardware device interface unit for coupling the hardware device to a proxy application on a client computer, said hardware device comprising:

a memory storing a program; and

a processor device configured for executing the program and interacting with said proxy application on the client computer via the hardware device interface unit, wherein the proxy application on said client computer is configured to forward client requests received from a browser application executing at the client computer to the hardware device; and

wherein the proxy application is further configured to;

forward client requests from the hardware device via a communication network to a server computer, and forward server responses received from the server computer to the hardware device and from the hardware device to the browser application on said client computer;

wherein the memory of the hardware device is fused such as to prevent any further programs from being loaded and run on the hardware device.

2. The hardware device according to claim 1, wherein the proxy application configures a processor device to read and write a virtual file on the hardware device.