Secure data exchange technique

• US 9,544,284 B1
• Filed: 04/30/2013
• Issued: 01/10/2017
• Est. Priority Date: 07/27/2012
• Status: Active Grant

• Current Assignee: Daniel A. Dooley, Peter M. Rice
• Original Assignee: Daniel A. Dooley, Peter M. Rice
• Inventors: Rice, Peter M., Dooley, Daniel A
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US13/874,476
• Time in Patent Office: 1,351 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/4411 Configuring for operating with peripheral devices; Loading of device drivers
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/227 characterised in that multiple accounts are available, e.g. to the payer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A technique for the secure exchange of data between multiple entities that use compatible business management systems utilizes serializable data transfer objects to transfer business data over a secure communication path. These serializable data transfer objects are used to share business data over a secure communication path, eliminating the need for an active user connection between entities wishing to exchange data. The data contained within the transfer objects can be used by any participating entity to update existing records related to the transaction, or to create new records relating to the transaction. Serializable objects link all data relating to a given business transaction. An interface allows users to view data contained in or referenced by an object, and to create or modify transaction records based on the data.

Claims

1. A processor implemented method of securely exchanging accounting data between a first digital general ledger stored and managed via a first client-server system and a second digital general ledger stored and managed via a second client-server system, the first client-server system operating independently and securely on an objected-oriented platform, the second client-server system operating independently and securely on an object-oriented platform, the method comprising the acts of:

providing an object-oriented application programming interface for a first client-server system and a second client-server system;

receiving a data input related to a transaction, the transaction necessitating an update to at least a first digital general ledger stored, at least in part, on a database corresponding to the first client-server system;

associating the update to the first digital general ledger with a second digital general ledger stored, at least in part, on a database corresponding to the second client-server system;

building a first data transfer object, on the first client-server system, corresponding to the update to the first digital general ledger, the first data transfer object configured to operate on the object-oriented application programming interface and to leverage the means specified by the object-oriented application programming interface;

encrypting the first data transfer object, at a server tier of the first client-server system, such that access is restricted to the first client-server system, the second client-server system, and to any other client-server system associated with the update to the first digital general ledger by restricting access to a corresponding encryption routine such that a client tier of the first client-server system cannot access the corresponding encryption routine;

alerting the second client-server system of the first data transfer object;

transmitting, to a server tier of the second client-server system, the first data transfer object such that the second digital general ledger can be updated based at least in part on the update to the first digital general ledger; and

building a second data transfer object, on the second client-server system, the second data transfer object corresponding to an update to the second digital general ledger, based at least in part on the update to the first digital general ledger, and referencing the first data transfer object, the second data transfer object configured to operate on the object-oriented application programming interface and to leverage the means specified by the object-oriented application programming interface;

wherein, the processor implemented method has the proviso that any transmitting of the first data transfer object or second data transfer object, between the first client-server system and the second client-server system does not involve a remote-user connection between any of the client tier or the server tier of either the first client-server system or the second client-server system.

2. The processor implemented method of claim 1, wherein the act of receiving a data input related to a transaction comprises the act of receiving data for a record type that is at least a part of the first digital general ledger.

3. The processor implemented method of claim 2, wherein the act of associating the update to the first digital general ledger with a second digital general ledger comprises the act of querying other digital general ledgers for a record type that is related, based at least on accounting principles, to the record type of the received data of the act of receiving a data input related to a transaction.

4. The processor implemented method of claim 1, wherein the act of receiving a data input related to a transaction comprises the act of receiving data that facilitates associating the update to the first digital general ledger with another digital general ledger.

5. The processor implemented method of claim 4, wherein the act of receiving data that facilitates associating the update to the first digital general ledger with another digital general ledger comprises the act of receiving an identifier of a client corresponding to the second client-server system.

6. The processor implemented method of claim 5, wherein the act of transmitting the first data transfer object to the server tier of the second client-server system comprises the act of making available a corresponding de-encryption routine to the server tier of the second client-server system and restricting access to the corresponding de-encryption routine such that a client tier of the second client-server system cannot access the corresponding de-encryption routine.

7. A system for securely exchanging accounting data between a first digital general ledger stored and managed via a first client-server system and a second digital general ledger stored and managed via a second client-server system, the system comprising:

a database

a client; and

a server built on a system comprising;

a memory element; and

a processor communicatively coupled to the memory element, the database, and the client, the processor, in response to executing program instructions contained in the memory element, being configured to;

provide an object-oriented application programming interface;

receive a data input related to a transaction, the transaction necessitating an update to at least a first digital general ledger stored, at least in part, on a database corresponding to the first client-server system;

associate an update to the first digital general ledger stored, at least in part, on the database with a second digital general ledger stored, at least in part, on a database corresponding to the second client-server system;

build a first data transfer object corresponding to the update to the first digital general ledger, the first data transfer object configured to operate on the object-oriented application programming interface and to leverage the means specified by the object-oriented application programming interface;

encrypt the first data transfer object such that access is restricted to the first client-server system, the second client-server system, and to any other client-server system associated with the update to the first digital general ledger;

alert the second client-server system of the first data transfer object;

make available, to a server tier of the second client-server system, the first data transfer object such that the second digital general ledger can be updated based at least in part on the update to the first digital general ledger; and

receive notice of a second data transfer object built by the second client-server system, the second data transfer object corresponding to an update to the second digital general ledger, based at least in part on the update to the first digital general ledger, and referencing the first data transfer object, the second data transfer object configured to operate on the object-oriented application programming interface and to leverage the means specified by the object-oriented application programming interface;

with the proviso that any transmission of the first data transfer object or second data transfer object, between the first client-server system and the second client-server system does not involve a remote-user connection between any of the client tier or the server tier of either the first client-server system or the second client-server system;

restrict access to an encryption routine that encrypts the first data transfer object such that a client tier of the first client-server system cannot access the corresponding encryption routine;

wherein the first client-server system operates independently and securely on an objected-oriented platform, and the second client-server system operates independently and securely on an object-oriented platform.

8. The system of claim 7, wherein the processor of the server is additionally configured to receive data for an accounting record type that is at least a part of the first digital general ledger, the received data necessitating an update to at least the first digital general ledger.

9. The system of claim 8, wherein the processor of the server is additionally configured to query other digital general ledgers for a record type that is related to the accounting record type based at least in part on a common accounting link.

10. The system claim 7, wherein the processor of the server is additionally configured to:

make available a corresponding de-encryption routine to the server tier of the second client-server system; and

restrict access to the corresponding de-encryption routine such that a client tier of the second client-server system cannot access the corresponding de-encryption routine.