Method and apparatus for establishing a secure connection over a one-way data path

A method for transmitting data in a secure manner from a server to a client, said method comprising the acts of:

• exchanging security information between the client and the server over a two-way channel between the client and the server;
• encrypting data to be transmitted from the server to the client based on the security information;
• and
• transmitting the encrypted data from the server to the client over a one-way channel between the client and the server that carries data from the server to the client,
• wherein the two-way channel is a wideband channel, and the one-way channel is a narrowband channel.

A method for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said method comprising the acts of:

• connecting the client and server over the wideband channel;
• exchanging security information between the client and server over the wideband channel;
• signing data to be transmitted from the server to the client based on the security information, and
• transmitting the signed data from the server to the client over the narrowband channel.

A wireless communication system, comprising:

• a wired network having a plurality of server computers;
• a wireless carrier network operatively connected to said wired network, said wireless carrier network supporting a narrowband channel and a wideband channel;
• a network gateway coupled between said wired network and said wireless carrier network, said network gateway includes a secure connection processor that establishes a secure connection over the narrowband channel by exchanging security information over the wideband channel;
• and
• a plurality of wireless mobile devices that can exchange data with the server computers on said wired network via said wireless carrier network and said network gateway,
• wherein messages are supplied from said network gateway to said wireless mobile devices over the secure connection established over the narrowband channel.

A mobile device capable of connecting to a network of computers through a wireless link, said mobile device comprising:

• a display screen that displays graphics and text;
• a message buffer that temporarily stores a message from a computer on the network of computers, the message having a service identity associated therewith;
• an application that utilizes the message received from the computer on the network of computers;
• and
• a cryptographic controller that controls encryption or signature of outgoing messages and controls the decryption or authentication of incoming messages, said cryptographic controller operates to establish a secure connection over which it receives the incoming messages by using a narrowband channel, wherein a companion wideband channel is used to exchange security information needed to establish the secure connection over the narrowband channel.

A computer readable medium including computer program code for securely transmitting data between a client and a server over a narrowband channel, where the client and server are connectable by not only the narrowband channel but also by a wideband channel, said computer readable medium comprises:

• computer program code for connecting the client and server over the wideband channel;
• computer program code for exchanging security information between the client and server over the wideband channel;
• computer program code for cryptographically processing data to be transmitted using the security information;
• and
• computer program code for transmitting the cryptographically processed data from the server to the client over the narrowband channel.

A computer readable medium including computer program code for transmitting data in a secure manner from a server to a client, said computer readable medium comprising:

• computer program code for exchanging security information between the client and the server over a wireless, wideband channel between the client and the server;
• computer program code for cryptographically processing data to be transmitted from the server to the client based on the security information;
• and
• computer program code for transmitting the cryptographically processed data from the server to the client over a wireless, narrowband channel between the client and the server that carries data from the server to the client.