Method of processing requests for digital services

• US 9,450,936 B2
• Filed: 11/02/2012
• Issued: 09/20/2016
• Est. Priority Date: 11/02/2012
• Status: Active Grant

• Current Assignee: Silverlake Mobility Ecosystem Sdn Bhd
• Original Assignee: Silverlake Mobility Ecosystem Sdn Bhd
• Inventors: Chan, Tong Yap, Yeong, Chi Long
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): LYNCH, SHARON S
• Application Number:
  US14/435,573
• Publication Number:
  US 20150288671A1
• Time in Patent Office: 1,418 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 9/00 Arrangements for program control, e.g. control units program control for peripheral devices G06F13/10
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/567 Integrating service provisioning from a plurality of service providers
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A method of processing requests for different digital services hosted by respective service entities is disclosed. The method including steps of receiving a request packet from a communication device, the request packet includes source and destination identifiers, determining which one of the different digital services the communication device is requesting a service, based on the destination identifier, authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the determined digital service, and if the access permission is granted, modifying the request packet and forwarding the modified request packet based on the destination identifier to the determined digital service for processing.

Claims

1. A method of processing requests for different digital services hosted by respective service entities, the method comprising:

providing a processor including an aggregator module and an authentication module, a communication device connected to the processor;

receiving a request packet from the communication device, the request packet including a source identifier and a destination identifier;

determining, based on the destination identifier, which one of the different digital services the communication device is requesting a service from;

authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the one of the different digital services the communication device is requesting a service from;

wherein authenticating the request packet includes comparing the source identifier and the destination identifier with access mapping rules having granularity levels based on a destination component and a related function, and wherein the access mapping rules are configurable to allow dynamic user access;

when the access permission is granted, modifying the request packet and forwarding the modified request packet based on the destination identifier to the one of the different digital services for processing;

wherein modifying the request packet includes mapping the request packet to a corresponding client code and a newly generated session-ID;

the client code being associated to the session-ID, which is timed to expire after a predetermined period;

when the one of the different digital services is not available, present or a response is not received within the predetermined period, sending an error packet back to the communication device; and

receiving from a trace helper a trace log to facilitate debugging and decipher runtime unknown exceptions including a trace timestamp, server identification, thread identification, and trace message.

2. The method of claim 1, wherein the communication device is a mobile communication device.

3. The method of claim 1, wherein the communication device is a wired communication device.

4. The method of claim 1 further comprises:

generating an error code, when the access permission is not granted; and

forwarding an error packet, which includes the error code, to the communication device.

5. The method of claim 1 further comprises retrieving device profile information from the communication device.

6. The method of claim 1 further comprises retrieving information corresponding to a location of the communication device from the communication device.

7. The method of claim 1 further comprises logging information associated with processing of the request packet.

8. The method of claim 1 further comprises:

receiving a response packet from a system associated with the destination identifier, in response to the forwarded request packet;

processing the response packet to extract associated data information; and

forwarding the extracted data information to the communication device,

wherein processing the response packet includes performing corresponding steps for analyzing the extracted data information.

9. The method of claim 8, wherein the corresponding steps are selected from a group consisting of logging an error message and sending an associated error packet when the extracted data information includes the error message, and logging a success message and sending an associated success packet when the extracted data information includes the success message.

10. The method of claim 1 wherein the service entities provide the different digital services selecting from a group comprising finance, logistic, retail, media, healthcare, infotainment, security, education, and tourism.

11. A processor for processing requests for different digital services hosted by respective service entities, the processor comprising:

an aggregator module for receiving a request packet from a communication device, the request packet including a source identifier and a destination identifier, and for determining, based on the destination identifier, which one of the different digital services the communication device is requesting a service from; and

an authentication module for authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the one of the different digital services the communication device is requesting a service from,

wherein the aggregator module includes a provisioning sub module arranged to compare the source identifier and the destination identifier with access mapping rules having granularity levels based on a destination component and a related function, and wherein the access mapping rules are configurable to allow dynamic user access; and

wherein when the access permission is granted, the aggregator module modifies the request packet and forwards the modified request packet based on the destination identifier to the one of the different digital services for processing; and

wherein modifying the request packet includes mapping the request packet to a corresponding client code and a newly generated session-ID;

the client code associated to the session-ID which is timed to expire after a predetermined period; and

wherein when the one of the different digital services is not available, present or a response is not received within the predetermined period, the aggregator module sends an error packet back to the communication device; and

a trace helper for providing a trace log to facilitate debugging and decipher runtime unknown exceptions including a trace timestamp, server identification, thread identification, and trace message.

12. The processor of claim 11 wherein the aggregator module includes an identity and access sub module configured to perform identity management of the communication device,

wherein identity management includes providing authentication, authorisation and accounting.

13. The processor of claim 11 wherein the aggregator module includes a transaction logging sub module configured to log information relating to the request packet received by the aggregator module.

14. A middleware system for enabling digital transactions between communication devices and server systems, the middleware system comprising:

a processor for processing requests for different digital services hosted by respective service entities, the processor comprising;

an aggregator module for receiving a request packet from a communication device, the request packet including a source identifier and a destination identifier, and for determining, based on the destination identifier, which one of the different digital services the communication device is requesting a service from; and

an authentication module for authenticating the request packet based on the source identifier to determine an access permission of the communication device for accessing the one of the different digital services,

wherein the aggregator module includes a provisioning sub module arranged to compare the source identifier and the destination identifier with access mapping rules having granularity levels based on a destination component and a related function, and wherein the access mapping rules are configurable to allow dynamic user access; and

wherein when the access permission is granted, the aggregator module modifies the request packet and forwards the modified request packet based on the destination identifier to the one of the different digital services for processing; and

wherein modifying the request packet includes mapping the request packet to a corresponding client code and a newly generated session-ID;

the client code associated to the session-ID which is timed to expire after a predetermined period; and

wherein when the one of the different digital services is not available, present or a response is not received within the predetermined period, the aggregator module sends an error packet back to the communication device; and

a trace helper for providing a trace log to facilitate debugging and decipher runtime unknown exceptions including a trace timestamp, server identification, thread identification, and trace message.