Patent ID: 7631180

Claim:
A method of securely communicating service requests from a mobile device to a server via a computer network, comprising: positioning a security servlet between the computer network and the server in order to protect the server from replay requests transmitted over the computer network, the servlet having an electronic address on the computer network; maintaining a connection log that stores one or more service requests received by the security servlet from the computer network; transmitting an encrypted service request from the mobile device to the security servlet using the electronic address of the servlet, the encrypted service request including information requesting a service from the server and specifying what content is to be retrieved and returned to the mobile device, the encrypted service request further including a timestamp; decrypting the encrypted service request at the security servlet to generate a decrypted service request; preventing replay requests from being transferred to the server by comparing the decrypted service request, which specifies what content is to be retrieved and returned to the mobile device, with one or more service requests stored in the connection log to determine if the decrypted service request is original or replayed, wherein the comparing includes determining if the timestamp is a match with a timestamp stored in the connection log; and if the decrypted service request is original, then transferring the decrypted service request from the security servlet to the server, wherein the service request only reaches the server if it is determined to be an original service request by the security servlet.