System and method for implementing an enhanced transport layer security protocol

A method for securely communicating between a mobile device and a server operating on a computer network, comprising the steps of:

• providing a security servlet operating on the computer network, wherein the security servlet communicates with the server via a secure link, and is identified by a unique location on the computer network;
• establishing a wireless connection between the mobile device and the computer network;
• establishing a secure connection between the mobile device and the server using a non-proprietary security protocol;
• sending a first encrypted service request from the mobile device to the server via the non-proprietary security protocol;
• sending a first encrypted response from the server to the mobile device that includes the unique location of the security servlet on the computer network;
• sending a second encrypted service request from the mobile device to the security servlet using the unique location of the security servlet;
• decrypting the second encrypted service request with the security servlet to generate a decrypted service request;
• transferring the decrypted service request from the security servlet to the server.

A secure server, comprising:

• a primary server operating on a computer network;
• a security servlet operating on the computer network and securely coupled to the primary server and configured to decrypt an encrypted service request received from the computer network to generate a decrypted service request;
• and
• a connection log coupled to the security servlet that stores one or more previous service requests received by the security servlet;
• wherein the security servlet first verifies that the encrypted service request is original by comparing the decrypted service request with the one or more previous service requests stored in the connection log, and then transfers the decrypted service request to the primary server.

An enhanced transport layer security (ETLS) system for a mobile device, comprising:

• a primary server operating on a computer network and configured to communicate over the computer network using a non-proprietary security protocol;
• an ETLS servlet operating on the computer network and securely coupled to the server, wherein the ETLS servlet is configured to communicate over the computer network using an ETLS security protocol;
• an ETLS software module operating on the mobile device that is configured to communicate over the computer network using either the nonproprietary security protocol or the ETLS security protocol;
• wherein the ETLS software module initially contacts the server over the computer network using the non-proprietary security protocol and subsequently contacts the server through the ETLS servlet using the ETLS security protocol.