Patent US6105012A successfully refreshed from Google Patents.
US6105012A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security system and method for financial institution server and client web browser
Assignee: Oracle America Inc
•
Filing: 1997-04-22
•
Granted: 2000-08-15
•
Expires: 2017-04-22
Abstract
Abstract The financial transaction processing system includes at least one financial server connected through a public network to a number of users associated with client computers. Each user accesses the financial server through a web browser. The web browser is provided with the capabilities to generate encryption keys, to encrypt and decrypt HTML forms, and to digitally sign and timestamp HTML forms. The financial server transfers web pages including HTML forms representing financial transactions. The HTML forms contain extensions that specify the format of an incoming format and the format of a returned form. An HTML form can be transmitted in an encrypted format, in a format including a user's digital signature and timestamp, and in an encrypted format that contains the user's digital signature and timestamp. The financial server tracks each processed transaction through an audit trail including the user's account, the user's digital signature, the timestamp of the transaction, and the text of the transaction.
Inventors
- 👤 Sheueling Chang
- 👤 Stuart Marks
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 13:38
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; G06Q20/38; G06Q20/382; G06Q20/3825; G06Q20/389
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
148 words
A computer-implemented method for transmitting transactions between at least one client computer and at least one server computer interconnected by a communications link, the method comprising the steps of: (a) receiving one or more HTML documents at the client computer from the server computer, a subset of the documents including a header record and also including one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol; (b) receiving at the client computer input form data corresponding to the HTML FORM tag; (c) generating secure form data by applying the specified outgoing transmission security cryptographic protocol of the HTML FORM tag to the input form data; and (d) transmitting a return message including the secure form data to the server computer.
Claim 2
Dependent Claim
148 words
A computer-implemented method for transmitting transactions between at least one client computer and at least one server computer interconnected by a communications link, the method comprising the steps of: (a) receiving one or more HTML documents at the client computer from the server computer, a subset of the documents including a header record and also including one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol; (b) receiving at the client computer input form data corresponding to the HTML FORM tag; (c) generating secure form data by applying the specified outgoing transmission security cryptographic protocol of the HTML FORM tag to the input form data; and (d) transmitting a return message including the secure form data to the server computer.
Claim 3
Dependent Claim
54 words
The method of claim 1, wherein the specified outgoing transmission cryptographic protocol of the outformat field of the HTML FORM tag is selected from a set consisting of an encrypt protocol, a sign protocol including a digital signature and a timestamp, and an ensign protocol including encryption with a digital signature and a timestamp.
Claim 4
Dependent Claim
69 words
The method of claim 1, in accordance with the cryptographic protocol of the HTML FORM tag, said step (c) further including the steps of: (1) generating a first encryption key; (2) encrypting the input form data, including any inserted user related information, with the first encryption key; (3) affixing the first encryption key to the return message; and (4) encrypting the first encryption key with a second encryption key.
Claim 5
Dependent Claim
24 words
The method of claim 3, step (c)(1) further including the step of utilizing a random key sequence generator to generate the first encryption key.
Claim 6
Dependent Claim
40 words
The method of claim 3, wherein a third subset of the HTML FORM tags includes a key field; and said step (c)(4) further including the step of obtaining the second encryption key from the server computer using the key field.
Claim 7
Dependent Claim
43 words
The method of claim 3, said step (c)(1) further including the step of: prior to the generating step, storing a digital signature associated with a specified user in the return message in accordance with the cryptographic protocol specified in the HTML FORM tag.
Claim 8
Dependent Claim
31 words
The method of claim 6, step (c) further including the steps of: generating a digital signature and a digital signature verifier; and providing the server computer with the digital signature verifier.
Claim 9
Dependent Claim
31 words
The method of claim 1, step (c) further including the step of storing a timestamp in the return message, in accordance with the cryptographic protocol specified in the HTML FORM tag.
Claim 10
Dependent Claim
195 words
A web browser system for accessing data within a computer system including at least one client computer connected through a communications link with at least one server computer, the web browser system comprising: a memory for storing a plurality of HTML documents, one or more of the HTML documents including a header record and also having one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol for use in returning form data; a browsing mechanism for retrieving various ones of the HTML documents from the server and for inserting user related information in the form data which is included in a return message, the browsing mechanism including a cryptographic processing mechanism for generating secure form data by applying the specified outgoing transmission cryptographic protocol from the HTML FORM tag to the form data, the browsing mechanism for transmitting a return message including the secure form data from the client computer to the server computer to provide secure transmission of the return message transmitted to the server computer.
Claim 11
Dependent Claim
195 words
A web browser system for accessing data within a computer system including at least one client computer connected through a communications link with at least one server computer, the web browser system comprising: a memory for storing a plurality of HTML documents, one or more of the HTML documents including a header record and also having one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol for use in returning form data; a browsing mechanism for retrieving various ones of the HTML documents from the server and for inserting user related information in the form data which is included in a return message, the browsing mechanism including a cryptographic processing mechanism for generating secure form data by applying the specified outgoing transmission cryptographic protocol from the HTML FORM tag to the form data, the browsing mechanism for transmitting a return message including the secure form data from the client computer to the server computer to provide secure transmission of the return message transmitted to the server computer.
Claim 12
Dependent Claim
39 words
The web browser system of claim 9, wherein the cryptographic processing mechanism includes an encryption processing mechanism for encrypting the return message and decrypting HTML documents in accordance with the specified cryptographic protocol format of the HTML FORM tag.
Claim 13
Dependent Claim
38 words
The web browser system of claim 9, wherein the cryptographic processing mechanism includes a digital signature processing mechanism for signing the return message and authenticating HTML documents when the specified outgoing transmission cryptographic protocol is a sign format.
Claim 14
Dependent Claim
28 words
The web browser system of claim 11, wherein the digital signature processing mechanism includes a timestamp processing mechanism responsive to the cryptographic protocol of the HTML FORM tag.
Claim 15
Dependent Claim
25 words
The web browser system of claim 9, wherein the cryptographic processing mechanism includes an encryption key generation mechanism for creating one or more encryption keys.
Claim 16
Dependent Claim
27 words
The web browser system of claim 13, wherein the encryption key generation mechanism includes a random key generation mechanism for creating one or more random session keys.
Claim 17
Dependent Claim
165 words
A computer program product for secure data transmission between a server computer and a client computer, the computer program product for use in conjunction with a computer system, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer program mechanism comprising: a web browser that receives one or more HTML documents from the server computer, a subset of the HTML documents including a header record and also including one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol, the web browser including a cryptographic processing mechanism for generating secure form data by applying the specified outgoing transmission security format from the HTML FORM tag to the form data, the web browser transmitting a return message including the secure form data from the client computer to the server computer.
Claim 18
Dependent Claim
165 words
A computer program product for secure data transmission between a server computer and a client computer, the computer program product for use in conjunction with a computer system, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer program mechanism comprising: a web browser that receives one or more HTML documents from the server computer, a subset of the HTML documents including a header record and also including one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol, the web browser including a cryptographic processing mechanism for generating secure form data by applying the specified outgoing transmission security format from the HTML FORM tag to the form data, the web browser transmitting a return message including the secure form data from the client computer to the server computer.
Claim 19
Dependent Claim
38 words
The computer program product of claim 15, wherein the cryptographic processing mechanism includes an encryption processing mechanism for decrypting HTML documents and encrypting the return message in accordance with the specified cryptographic protocol of the HTML FORM tag.
Claim 20
Dependent Claim
41 words
The computer program product of claim 15, the cryptographic processing mechanism includes a digital signature processing mechanism for signing the return message and authenticating the HTML documents in accordance with the specified outgoing transmission cryptographic protocol of the HTML FORM tag.
Claim 21
Dependent Claim
34 words
The computer program product of claim 17, wherein the digital signature processing mechanism includes a timestamp processing mechanism for use in conjunction with the specified outgoing transmission cryptographic protocol of the HTML FORM tag.
Claim 22
Dependent Claim
25 words
The computer program product of claim 15, wherein the cryptographic processing mechanism including an encryption key generation mechanism for creating one or more encryption keys.
Claim 23
Dependent Claim
27 words
The computer program product of claim 19, wherein the encryption key generation mechanism including a random key generation mechanism for creating one or more random session keys.
Claim 24
Dependent Claim
194 words
A computer network for financial transaction processing, the network comprising: a plurality of client computers, each client computer associated with one or more users; at least one financial server comprising: a memory for storing a plurality of HTML documents representing financial transactions, each HTML document including form data, a subset of the HTML documents including a header record and also including one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol, for use in exchanging financial transactions between the client computers and the server computer; one or more cryptographic processing mechanisms for use in encoding form data and decoding each received HTML document; and a server mechanism for managing communications from the client computers, a subset of the communications including a return message including the form data, the server mechanism including instructions to interpret the HTML FORM tags that include the cryptographic protocol associated with each received return message and to process each received return message in accordance with one or more corresponding cryptographic protocol mechanisms.
Claim 25
Dependent Claim
194 words
A computer network for financial transaction processing, the network comprising: a plurality of client computers, each client computer associated with one or more users; at least one financial server comprising: a memory for storing a plurality of HTML documents representing financial transactions, each HTML document including form data, a subset of the HTML documents including a header record and also including one or more HTML FORM tags, the one or more HTML FORM tags being distinct from the header record, a first subset of the HTML FORM tags having an outformat field indicating a specified outgoing transmission cryptographic protocol, for use in exchanging financial transactions between the client computers and the server computer; one or more cryptographic processing mechanisms for use in encoding form data and decoding each received HTML document; and a server mechanism for managing communications from the client computers, a subset of the communications including a return message including the form data, the server mechanism including instructions to interpret the HTML FORM tags that include the cryptographic protocol associated with each received return message and to process each received return message in accordance with one or more corresponding cryptographic protocol mechanisms.
Claim 26
Dependent Claim
121 words
The network of claim 21, the cryptographic processing mechanism including: an encryption processing mechanism for encrypting the form data and decrypting the HTML documents; a user information database that includes user public key information associated with each user registered to exchange confidential information with the financial server; a digital signature verification mechanism for verifying a digital signature in each digitally signed communication received from a client computer in accordance with the corresponding digital signature, if any, stored in the user information database; and an audit trail for storing records of digitally signed communications received from client computers sufficient to prove that such each received communication was digitally signed by a respective user registered to exchange confidential information with the financial server.
Claim 27
Dependent Claim
26 words
The network of claim 22, the cryptographic protocol selected from the set consisting of encryption, digital signature and timestamp, and encryption with digital signature and timestamp.
Claim 28
Dependent Claim
20 words
The network of claim 22, each client computer including a web browser for accessing HTML documents from the financial server.
Claim 29
Dependent Claim
36 words
The network of claim 24, the web browser including a cryptographic processing mechanism for encrypting form data and decrypting the accessed HTML documents in accordance with the specified cryptographic protocol format of the HTML FORM tag.
Claim 30
Dependent Claim
34 words
The network of claim 24, the web browser including a digital signature processing mechanism for signing the return message and authenticating HTML documents when the specified outgoing transmission cryptographic protocol is a sign format.
Claim 31
Dependent Claim
26 words
The network of claim 26, the digital signature processing mechanism further including a timestamp processing mechanism responsive to the cryptographic protocol of the HTML FORM tag.
Claim 32
Dependent Claim
21 words
The network of claim 24, the web browser including an encryption key generation mechanism for creating one or more encryption keys.
Claim 33
Dependent Claim
23 words
The method of claim 1 wherein a third subset of the HTML FORM tags have a request field indicating the type of form.
Claim 34
Dependent Claim
36 words
The method of claim 29 wherein the request field indicates that a registration HTML form is being sent to the client, the registration form for transmitting a client public key from the client to the server.
Claim 35
Dependent Claim
30 words
The method of claim 1 wherein a fourth subset of the HTML FORM tags have a key field that is used to indicate a public key associated with the server.
References Cited (Backward Citations)
US5319710A
Cited
US5509071A
Cited
US5809144A
Cited
US5671279A
Cited
US5862325A
Cited
US5751813A
Cited
US5848161A
Cited
US5890171A
Cited
US5897622A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-08-15 | 2004-02-14 | 2004-08-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-08-15 | 2008-02-14 | 2008-08-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-08-15 | 2012-02-14 | 2012-08-15 | $7700.00 | Window Closed / Lapsed |