Secure end-to-end transport through intermediary nodes
A communication network encrypts a first portion of a transaction associated with point-to-point communications using a point-to-point encryption key. A second portion of the transaction associated with end-to-end communications is encrypted using an end-to-end encryption key.
1. A system for processing a transaction, the system having one or more processors configured for:
receiving a username and a password from a first computer;
authenticating the username and the password with a user database;
issuing a token for the first computer, wherein a first point-to-point security association is negotiated with the first computer and a second point-to-point security association is negotiated with a second computer;
receiving a transaction message from the second computer, the transaction message comprising control data and payload data, wherein:
the control data provides authentication of a source of the transaction and includes the token; and
the token provides transaction routing information; and
transmitting the payload data to the first computer based on the token.
2. The system of claim 1 , wherein the token is issued to the first computer after authenticating the username and the password.
3. The system of claim 1 , wherein the second computer is a personal computer.
4. The system of claim 1 , wherein the transaction message has a third security association and the payload data is encrypted payload data.
5. The system of claim 1 , wherein the first computer is a first mobile device, and the first mobile device and the system are coupled over a mobile network.
6. The system of claim 5 , wherein the mobile network provides an Internet protocol (IP) infrastructure of a wireless service provider.
7. The system of claim 1 , wherein the transaction message is modified by the second computer based on the token.
8. The system of claim 1 , wherein the payload data is decrypted and displayed on the first computer.