Patent ID: 8555062

Claim:
A method for preventing replay attacks on secure data transactions, said method comprising the steps of: a) establishing, at a first server, a communicative coupling with a device; b) receiving, at the first server, a signal from the device requesting a session identification number, the session identification number being used for only one secure data transaction between the first server and the device wherein the server correlates the session identification number with the device so that any future generation of the same session identification number for the same device is prevented; c) generating, at the first server, said session identification number and communicating said session identification number from the first server to the device; d) receiving, at the first server, a signal from said device, wherein said signal comprises a request for the secure data transaction with a second server and includes said session identification number, and comparing, at the first server, the received session identification number with the generated session identification number to determine whether to authorize the secure data transaction, e) provided said request is authorized, implementing the secure data transaction between the device and the second server.