Initiation of an electronic payment transaction

    公开(公告)号:AU7851401A

    公开(公告)日:2002-03-04

    申请号:AU7851401

    申请日:2001-07-28

    Abstract: The method involves receiving a payment request via a communications filter (Fl), modifying the request by adding a transaction identifier, passing it to a transaction server (WS), passing information with the identifier from the filter to a communications terminal (MS), passing a payment initialization with a further identifier from the terminal to the server, comparing the identifiers and transacting the payment if the identifiers agree. Independent claims are also included for the following: (1) a filter for a communications system (2) a transaction server (3) a computer program stored on a computer-readable medium

    METHOD FOR PROVISION OF ACCESS
    22.
    发明专利

    公开(公告)号:CA2526237C

    公开(公告)日:2012-10-23

    申请号:CA2526237

    申请日:2003-04-04

    Abstract: A method for provision of access for a data requesting entity (IRE) to data related to a principal is disclosed, comprising the steps of (i) creating an access granting ticket comprising an access specification specifying a permission for an access to data related to the principal, said data being available at a data providing entity (IPE1), and a principal identifier representing the principal towards the data providing entity (IPE1), (ii) encrypting the access granting ticket with an encryption key of the data providing entity (IPE1), (iii) communicating to the data requesting entity (IRE) the encrypted access granting ticket accompanied by an identifier of the data providing entity (IPE1), (iv) communicating from the data requesting entity (IRE) to the data providing entity (IPE1) a request comprising the encrypted access granting ticket, (v) decrypting the encrypted access granting ticket with a decryption key of the data providing entity (IPE1) corresponding to the encryption key, (vi) providing to the data requesting entity (IRE) access to data related to the principal identifier according to the access specification.

    24.
    发明专利
    未知

    公开(公告)号:DE60314871T2

    公开(公告)日:2008-03-13

    申请号:DE60314871

    申请日:2003-05-23

    Abstract: Methods, devices, and computer programs for an authentication of a user to a service of a service provider are disclosed. Access for the user to the service of the service provider is requested. One or more authentication security profiles are selected by the service provider for specifying an authentication security requirement of the service provider for the authentication of the user to the service. An indication of the one or more selected authentication security profiles and a user identity identifying the user to an identity provider are sent from the service provider to the identity provider for requesting the authentication of the user by the identity provider. The user is authenticated based on the user identity and one of the one or more selected authentication security profiles. An assertion indicating the authentication of the user to the service provider is sent to the service provider.

    25.
    发明专利
    未知

    公开(公告)号:DE60129951D1

    公开(公告)日:2007-09-27

    申请号:DE60129951

    申请日:2001-04-19

    Abstract: A method for the authorization of transactions is described, wherein a user equipment receives an authorization request with an identifier of a transaction and replies to the request with an authorization response. For an authorization request, an indication is determined which is output by the user equipment (UE). Preferably, the identifier is a hash value of the content which is to be authorized. After an input to approve or disapprove the authorization request, the identifier (H) is signed and the authorization response according to the input is sent, wherein an approving authorization response comprises the signed identifier (H). Devices and software programs adapted to the method are also described.

    26.
    发明专利
    未知

    公开(公告)号:DE60307275D1

    公开(公告)日:2006-09-14

    申请号:DE60307275

    申请日:2003-05-14

    Abstract: The invention relates to a method for providing information related to a client (C) to a first web server (WS1). The invention further relates to a proxy server, a program unit loadable into a proxy server, a web server, and a program unit loadable into a web server, all of them to perform the invented method. A second web server (WS2) stores the information related to the client (C), and the first web server (WS1) is connected to the client (C) via a proxy server (PS). The proxy server stores a cookie for the first web server (WS1), the cookie being related to the client (C) and the cookie comprising a network address of the second web server (WS2). The client (C) sends a message towards the first web server (WS1) via the proxy server (PS). The message is received in the proxy server (PS), that inserts the cookie into the message, and forwards the message to the first web server (WS1). The first web server (WS1) receives the message, retrieves the network address of the second web server (WS2) from the cookie, and requests the second web server (WS2) for the information related to the client (C). The second web server (WS2) sends information related to the client (C) to the first web server (WS1).

    METHOD FOR PROVISION OF ACCESS
    27.
    发明专利

    公开(公告)号:AU2003227565A1

    公开(公告)日:2004-10-25

    申请号:AU2003227565

    申请日:2003-04-04

    Abstract: A method for provision of access for a data requesting entity (IRE) to data related to a principal is disclosed, comprising the steps of (i) creating an access granting ticket comprising an access specification specifying a permission for an access to data related to the principal, said data being available at a data providing entity (IPE1), and a principal identifier representing the principal towards the data providing entity (IPE1), (ii) encrypting the access granting ticket with an encryption key of the data providing entity (IPE1), (iii) communicating to the data requesting entity (IRE) the encrypted access granting ticket accompanied by an identifier of the data providing entity (IPE1), (iv) communicating from the data requesting entity (IRE) to the data providing entity (IPE1) a request comprising the encrypted access granting ticket, (v) decrypting the encrypted access granting ticket with a decryption key of the data providing entity (IPE1) corresponding to the encryption key, (vi) providing to the data requesting entity (IRE) access to data related to the principal identifier according to the access specification.

    METHOD FOR AUTHENTICATING A USER TO A SERVICE OF A SERVICE PROVIDER

    公开(公告)号:AU2003245887A1

    公开(公告)日:2003-12-12

    申请号:AU2003245887

    申请日:2003-05-23

    Abstract: Methods, devices, and computer programs for an authentication of a user to a service of a service provider are disclosed. Access for the user to the service of the service provider is requested. One or more authentication security profiles are selected by the service provider for specifying an authentication security requirement of the service provider for the authentication of the user to the service. An indication of the one or more selected authentication security profiles and a user identity identifying the user to an identity provider are sent from the service provider to the identity provider for requesting the authentication of the user by the identity provider. The user is authenticated based on the user identity and one of the one or more selected authentication security profiles. An assertion indicating the authentication of the user to the service provider is sent to the service provider.

    Method and apparatus for personal information access control

    公开(公告)号:AU2002340554A1

    公开(公告)日:2003-05-06

    申请号:AU2002340554

    申请日:2002-10-11

    Abstract: For control of access of personal information in accordance with a privacy policy defined for a service provider, a method is disclosed, wherein the method comprises the steps of providing service provider request data from a service provider to an end user device, the service provider request data being indicative of personal information of a user of the end user device to be accessed by the service provider, providing to the service provider first user data including at least one of personal information of the user as requested by the service provider or rejections of personal information requested by the service provider, creating privacy receipt data including the first user data and data being indicative of the service provider, and providing the privacy receipt data to the end user device.

Patent Agency Ranking