Secure end-to-end transport through intermediary nodes
View Patent ↗A communication network encrypts a first portion of a transaction associated with point-to-point communications using a point-to-point encryption key. A second portion of the transaction associated with end-to-end communications is encrypted using an end-to-end encryption key.
1. A non-transitory computer-readable storage medium storing instructions to be implemented by a first computer having a processor, wherein the instructions, when executed by the processor, cause the first computer to perform steps comprising:
receiving a token issued by an intermediary server; and
transmitting a transaction message comprising payload data to the intermediary server, wherein the payload data is transmitted to a second computer by the intermediary server based on the token and the intermediary server is coupled to the second computer over a mobile network.
2. The non-transitory computer-readable storage medium of claim 1 , wherein the payload data has a security association that is not known to the intermediary server.
3. The non-transitory computer-readable storage medium of claim 2 , wherein the transaction message further comprises control data having a security association.
4. The non-transitory computer-readable storage medium of claim 3 , wherein the control data comprises the token.
5. The non-transitory computer-readable storage medium of claim 4 , wherein the intermediary server identifies and authenticates the transaction message based on the token.
6. The non-transitory computer-readable storage medium of claim 5 , wherein the token provides transaction routing information to the intermediary server.
7. The non-transitory computer-readable storage medium of claim 1 , wherein the token is issued in response to a registration of a user to the intermediary server.
8. The non-transitory computer-readable storage medium of claim 7 , wherein the registration comprises authenticating a received username and password by the intermediary server to a user database.
9. The non-transitory computer-readable storage medium of claim 1 , wherein mobile network provides an Internet protocol (IP) infrastructure of a wireless service provider.
10. The non-transitory computer-readable storage medium of claim 1 , wherein the transaction message further comprises control data having a security association.
11. The non-transitory computer-readable storage medium of claim 10 , wherein the control data comprises the token.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the intermediary server identifies and authenticates the transaction message based on the token.
13. The non-transitory computer-readable storage medium of claim 12 , wherein the token provides transaction routing information to the intermediary server.
14. A method implemented on a first computer, the method comprising:
receiving a token issued by an intermediary server; and
transmitting a transaction message comprising payload data to the intermediary server, wherein the payload data is transmitted to a second computer by the intermediary server based on the token and the intermediary server is coupled to the second computer over a mobile network.
15. The method of claim 14 , wherein the payload data has a security association that is not known to the intermediary server.
16. The method of claim 15 , wherein the transaction message further comprises control data having a security association.
17. The method of claim 16 , wherein the control data comprises the token.
18. The method of claim 17 , wherein the intermediary server identifies and authenticates the transaction message based on the token.
19. The method of claim 18 , wherein the token provides transaction routing information to the intermediary server.
20. The method of claim 14 , wherein the token is issued in response to a registration of a user to the intermediary server.
21. The method of claim 20 , wherein the registration comprises authenticating a received username and password by the intermediary server to a user database.
22. The method of claim 14 , wherein the transaction message further comprises control data having a security association.
23. The method of claim 22 , wherein the control data comprises the token.
24. The method of claim 23 , wherein the intermediary server identifies and authenticates the transaction message based on the token.
25. The method of claim 24 , wherein the token provides transaction routing information to the intermediary server.
26. A first computer having a processor configured for:
receiving a token issued by an intermediary server; and
transmitting a transaction message comprising payload data to the intermediary server, wherein the payload data is transmitted to a second computer by the intermediary server based on the token and the intermediary server is coupled to the second computer over a mobile network.
27. The first computer of claim 26 , wherein the transaction message further comprises control data having a security association.
28. The first computer of claim 27 , wherein the control data comprises the token.
29. The first computer of claim 28 , wherein the intermediary server identifies and authenticates the transaction message based on the token.
30. The first computer of claim 29 , wherein the token provides transaction routing information to the intermediary server.