Secure web based transactions

A computer program embodied on a non-transitory computer readable medium comprising computer program code means which when said program is run on a computer, is adapted to:

• perform authentication of a user at a first web server;
• provide a first web page to the user from the first web server, the first web page comprising a link to a second web page provided by the second web server;
• receive a user input at the first web server, the user input identifying a user input variable entered by the user;
• establish a first communication link between the first web server and the second web server;
• securely transmit user data from the first web server to the second web server over the first communication link prior to completion of a transaction between the user and one of the first and second web servers;
• establish, at the first web server, a second communication link between the first web server and the second web server following completion of the transaction;
• and
• securely receive transaction data at the first web server from the second web servers over the second communication link,
• wherein the steps of performing authentication, providing a first web page and establishing a first communication link are performed within a single web session.

A system for secure web based transactions comprising a first web server and a second web server, wherein the first web server is arranged to:

• perform authentication of a user;
• provide a first web page to the user, the first web page comprising a link to a second web page provided by the second web server;
• receive a user input at the first web server, the user input identifying a user input variable entered by the user;
• establish a first communication link between the first web server and the second web server;
• securely transmit user data from the first web server to the second web server over the first communication link prior to completion of a transaction between the user and one of the first and second web servers;
• establish a second communication link between the first web server and the second web server following completion of the transaction;
• and
• securely receive transaction data at the first web server from the second web servers over the second communication link.