Patent ID: 9628473
Date: 2017-04-18
CPC Classifications: G06F,G06Q,G11B,H04L

Claim:
1. A system comprising: an authentication server a hardware platform in communication with said authentication server, said platform comprising: a platform processor physically associated, and in communication, with memory; and a data storage physically separate from said memory and readable by said platform processor, wherein said data storage is operative to store, in non-volatile storage, a vault which secures data and at least one executable wrap which secures an executable controller and secures an executable sensor, wherein said at least one wrap includes instructions executable by said platform processor to (a) contact a remote server separate from said platform to prompt said remote server to transmit an executable authentication driver to said platform, (b) install said authentication driver into said memory and authenticate said platform using said authentication driver, and (c) only when said platform is authenticated using said authentication driver, install said executable sensor to said memory, wherein said authentication driver in said memory cooperates with said executable controller in said data storage to automatically and continuously permit or deny access by said platform processor to only permit said platform processor to access said secure data protected by said vault when both said authentication driver in said memory and said executable controller in said data storage are accessible and to otherwise deny access, wherein said platform processor can execute only said authentication driver and is prevented by said at least one wrap from executing said executable controller directly, and wherein said executable sensor is operative to monitor at least one of said platform and said data storage for anomalies and, upon detecting an anomaly, deny access to said secure data secured by said vault by said executable sensor deleting said authentication driver from said memory upon detecting an anomaly thereby rendering said secure data inaccessible to said platform processor; an application server in communication with said platform having an application server processor operative to execute program instructions to conduct the steps of: receiving a transaction request from said platform, wherein said data secured by said wrap includes instructions for said platform to transmit said transaction request from said platform to said application server authenticating said platform; generating a transaction code after authenticating said platform; opening an application server port identified by an application server port address; reconnecting to said authenticated platform via said application server port at said application server port address; and communicating between said application server and said authenticated platform via said application server port; an authorization server in communication with said application server, said authorization server having an authorization server processor operative to execute program instructions to conduct the steps of: receiving said transaction code from said application server; and authenticating said transaction code received from said application server; at least one custodian server in communication with said application server, said custodian server having a custodian server processor operative to execute program instructions to conduct the steps of: receiving said transaction request from said application server after said authorization server has authenticated said transaction code; verifying said transaction request; generating a transaction authorization key after verifying said transaction request; and transmitting said transaction authorization key to said application server authorizing said transaction request after verifying said transaction request; and a data server in communication through a connection with said at least one custodian server and said application server, said data server comprising: a data server processor; a data server communication device controlled by said data server processor and operative for selective communication with said at least one custodian server and said application server; and a data server data storage readable by said data server processor, wherein said data server data storage is operative to store, in non-volatile storage, at least one account, an account history for each said account, and program instructions executable by said data server processor to conduct the steps of: conducting a transaction for at least one account in response to said transaction request; and recording said transaction in said account history for said account.