Palmsource Inc.

Access Company, Ltd.

Gabe Dalbec

Robert Lennie

Carl Chen

Greg Arnold

A method and apparatus for authenticating and authorizing online transactions. An authentication cookie is transmitted to a client system. The authentication cookie includes a user encryption key and an encrypted buffer that contains user identification data and a profile code. Subsequent requests for the particular service use the authentication cookie to generate a query that includes the encrypted buffer and user identification data entered by the user. Portions of the query are encrypted using the user encryption key. Queries received at each authentication and authorization server are authenticated by reconstructing the user encryption key using information transmitted in the clear and decrypting the query using both the reconstructed user encryption key and the secret key. The user identification data entered by the user is then compared with the user identification data in the encrypted buffer for further authentication. The profile code is analyzed for determining authorization. If the query is authenticated and authorized, the authentication and authorization server forwards the request to a server that provides the desired service.

Secure authentication for authorization for transaction processing

A method and system for pushing electronic messages to a wireless device using an Internet NPS server with standard electronic mail interface. The NPS server, in one embodiment, mimics a SMTP mail server on the front end to generate pushed email notifications and pushed content packets in response to received emails addressed to a recognized device user. In one embodiment, the wireless devices receive notifications containing a subset of the email messages sent to the server and may alert the user when they are received. The NPS server functions to monitor the SMTP communication between its own mail server and the email sender to format a received email message into a 15 notification. The original email message is stored or its pathway recorded. Once received by the wireless device, the user may select the notification, causing the remainder of the corresponding email message to be wirelessly downloaded to the device.

Method and system for pushing electronic messages to a wireless portable device using a standard mail server interface

Secure authentication and authorization for transaction processing

Method and apparatus for generating queries for secure authentication and authorization of transactions

Growing community of inventors

San Jose, CA, United States of America

Gabe Dalbec