Patent ID: 8589568

Claim:
A method for handling an end-to-end business transaction between a user and an e-Service provider consisting of at least one sales-entity and/or service provider via a TCP/IP controlled computer network and a server instance for managing the end-to-end business transaction, said method comprising: performing, by a computer device, a log-on of a user to an e-Network provider in response to the user having initiated an online session, wherein the e-Network provider, an e-Company, a server instance, and the e-Service provider are independently connected to an Internet, wherein a Network Access Server within the e-Network provider is connected to the Internet and to a database within the e-Company, wherein said performing the log-on of the user comprises said e-Network provider authenticating the user via use of information about the user stored in the database; after said performing the log-on of the user, selecting a first Internet Protocol (IP) address from a first pool of available IP addresses held by the e-Network provider and selecting a second IP address from a second pool of available IP addresses at the server instance; assigning the selected first IP address to the user and then connecting the user to the Internet via the Network Access Server; assigning the selected second IP address to the user and generating an IP tunneling connection that connects the user to the server instance via the Network Access Server and the Internet, wherein said generating the IP tunneling connection is based on the second IP address; generating a session context that includes the second IP address; said server instance receiving an authorization request from the e-Service provider when the end-to-end business transaction is initiated between the user and the e-Service provider; responsive to said receiving the authorization request, said server instance validating the user's authorization for the end-to-end business transaction, wherein said validating is based on only on the second IP address in the session context; and responsive to detection of a termination of the online session, invalidating the second IP address, invalidating the session context, and returning the second IP address to the second pool of available IP addresses.