FR2862170A1 - Confidential data transfer process for Internet network, involves executing encryption of data maintained at access provider and relative to user and inserting encrypted data in information service request to be sent to information provider - Google Patents

Abstract

The process involves intercepting an information service request based on an address of a recipient information provider (4). An encryption service of confidential data maintained at an access provider and relative to a user is executed. The encrypted data is inserted in the request, and the request is sent to the provider (4). The encrypted data in relation with an address of a transmitter user is extracted.

Description

2862170 1

  The present invention relates to a method for transferring confidential data in the core of networks. It finds application particularly in the areas of transactions using the Internet.

  In the technical field of teleinformatic communications, users who want to consult data contents via a computer network such as the Internet must, in most cases, obtain a connection resource from an access provider to the teleinformatic network. When the exchange of data connects content provider, for example with a web server with a user with a browser running on a terminal physically connected to the Internet, three different economic operators have developed: - suppliers network access; - content providers who offer the transfer of digital data files such as html pages or images or video sequences, and also offer for sale by means of such files, goods such as products or services to users; - the client users of these content providers who wish to consult the available digital content and, if necessary, carry out confidential transactions such as purchases with the content providers.

  The client users of the content providers need to have a first contract with an access provider to the teleinformatic network. Then, the data exchange takes place without real intervention of the network access provider.

  However, communications between their users and content providers increasingly contain confidential data.

  This is particularly the case of a commercial transaction in which a user directly controls a digital content or indirectly a good via the Internet using a credit card. It is most often led to exchange with the provider of the property of personal data that must receive protection treatment such as encryption or encryption, to be unusable by unauthorized third parties.

  To achieve this protection, it is already defined in the state of the art a secure transaction protocol type "HTTPs" that uses security layers associated with the conventional Internet protocol. In such transactions, the user must, each transaction, re-enter the confidential data of the secure transaction as the code of his credit card. However, particularly on some consultation terminals, such as mobile phones, such seizures are impractical.

  To remedy this drawback, it is already known by some content providers to install files defined in the teleinformatics standards such as "cookies" of the Internet protocol on the user's terminal and which contain copies of the confidential data transmitted. by the user. But this solution has several disadvantages. First of all, the protection treatment is carried out by the content provider without any possible control on the part of the user, without guarantee of data security. Then, the recording of the confidential data is done without the knowledge of the user who then holds a file whose contents he ignores with all the risks that such ignorance makes run to these data. Finally, this file is not exploitable by another content provider and must be reconstituted by the latter for its own account, which adds an entry under the responsibility of the user and 2862170 3 the existence of a new file ("cookie") which the latter is generally unaware of.

  To release the responsibility of content providers, it has been proposed to use a "trusted third party" to whom the user transmits once for all his confidential data. During a confidential communication with a user, the content provider addresses the trusted third party to securely obtain the confidential data of the user. The exchange with the trusted third party is done with a means of data protection which is not at the discretion of the content provider. But, to achieve the link between the user and the requesting provider, the trusted third party needs to file cookies files on the user's terminal and it is still necessary for the latter to register with the third party. trust. Finally, the trusted third party is also in possession of a large number of confidential data, which exposes it to the hackers' desires who can track secure transactions by accessing cookies signed by the trusted third party at least on the machines. users.

  In another state of the art, it is known that the trusted third party provides each user who requests it with software that makes it possible to store the confidential data of the user necessary to execute transactions with service providers. subscribed content for which the user has indicated his intention to access it and conduct transactions such as debit card.

  However, this solution is, for example in the case of the free Gator TM software for the user and remunerated by its acceptance of advertising banners and other promotional items sold by Gator. Moreover, such software is not compatible with Internet browsing software on mobile phones. In addition, software must be specially installed on the user's terminal. Finally, the registration operations must be service-by-service, that is, a new service for each new content provider to which a user wishes to connect.

  In another state of the art, which will be developed later, it has already been thought to use the solution to the problem of protecting the confidential data of the users of the access provider to the teleinformatic network. However, as will be described in more detail with the aid of FIG. 1, the user must still correspond with a third party supplier of the software in order to establish part of the transaction, in particular the banking part of the transaction when it implements a payment by credit card.

  The present invention provides a remedy for these disadvantages of the state of the art.

  In addition, on many occasions, Internet users, who use the services of an Internet access provider, exchange confidential data. Such data could be intercepted by people who might surprise the secret that the parties expect from a data exchange. This will be the case of a file containing professional data such as manufacturing secrets.

  To overcome this disadvantage, today there are software products that each party installs on their computer. Then, the sending party executes an encryption of the data which are then transmitted to the destination party to be decrypted. Such encryption guarantees the confidentiality of data and the integrity of data. However such encryption does not guarantee the authenticity of the encrypted data.

  The present invention provides a remedy for this other disadvantage of the state of the art.

  Indeed, it relates to a method of exchanging confidential data between at least one user who has received attributes of connection to a network held by a provider of access to a teleinformatic network such as the Internet and a content provider. The method of the invention consists: on the transmitting user's side: - to send a service request for a content constituted according to a predetermined protocol such as the HTTP protocol destined for a recipient content provider; then, on the side of the access provider to a teleinformatic network: - to intercept the request according to the address of the destination content provider io - to execute a confidential data encryption service maintained with the access provider and relating to to the user; - to insert the confidential data encrypted in said request; - to re-route the request to the recipient content provider of the request; then, at a content provider receiving the request: - to receive said request and; extracting the encrypted data in relation to the address of the sending user.

  According to one aspect of the invention, in a preparatory step at a provider of access to a teleinformatic network such as the Internet, the method consists in constituting a file of confidential data associated with a user at the same time as his account data. access to the teleinformatic network during a registration procedure.

  According to another aspect of the invention, in a preparatory step at a provider of access to a teleinformatic network such as the Internet, the method consists in constituting an authorization data file of at least one content provider that provides services requiring the communication of confidential data. These confidential data are, in advance, stored in a file of confidential data associated with a user requesting these services. During an authorization procedure, an authorization file containing data relating to the identification of the authorized content provider and, if appropriate, configuration data for preparing a transaction with at least one registered user is constituted by the Provider. access.

  According to another aspect of the invention, in a preparatory step at a provider of access to a teleinformatic network such as the Internet, the method consists of a transaction between a user registered with the access provider and a provider. content providing the service required by said user and enabled in the preparatory step, generating an object accessible on the user's terminal according to a plurality of predetermined object generation arguments; then monitoring a predetermined action of the user on said object accessible on the user's terminal, so that without further action, the confidential data of the file associated with said user and which correspond to the object generation arguments of said object accessible on the user's terminal and / or transaction configuration data in the authorization file of the content provider, are transmitted by means of a secure communication protocol of the user's registration file to a specific address on the teleinformatic network.

  According to another aspect of the invention, the method consists in using a service for intercepting the flow representative of a request as a HTTP request built at the level of a user to a content provider authorized for data confidential information is encrypted at the ISP based on the encryption information held in a database at the ISP and rerouted in encrypted form to the ISP.

  Other features and advantages of the present invention will be better understood with the aid of the description and appended drawings, in which: FIG. 1 represents a confidential data transaction procedure according to a state of the art; FIG. 2 is a flow chart showing a particular embodiment of the method of the invention; FIG. 3 is a block diagram of a system implementing the method of the invention; Figures 4 (a) and 4 (b) are database diagrams used in the method of the invention; Figure 5 is a block diagram of a system implementing another embodiment of the method of the invention.

  In Figure 1, there is shown an exemplary embodiment of the state of the art which has already been detailed in the preamble of the present application. The user terminal 1, which may be a desktop computer or a mobile phone, is connected to the teleinformatic network via a tele-computer network access provider 2. Such a connection is possible only if the User 1 is registered with the access provider 2. During this registration, the user indicates a certain number of confidential data determined by the access provider 2.

  A content provider 4 is connected to the computer TV network 2. When registering, the content provider 4 indicates the type of confidential data that users who connect to his site could be led to exchange with him. When registering content providers, the access provider to the teleinformatic network determines the confidential data that it must ask its users during

  their first registration to the network.

  When the user 1 connects according to the path 5 to the content provider 4, the latter presents him, according to the path 2862170 8 10, requests tending to transmit to him confidential data held directly by the access provider 2.

  Once the authorization of transfer of confidential data granted by the user 1, the content provider 4 transmits a request 6 to a third party billing 3. The billing party 3 then transmits to the network access provider 2 a request transfer of confidential data associated with both the user 1 and the recipient 4.

  In return, after verifying the authorizations, the network access provider 2 consults the databases and extracts the confidential data relating to the user 1. It transmits, according to an encrypted procedure 8, the confidential data requested from the billing party. 3 which then transmits billing processing for the benefit of the digital content provider 4 under the user and which transmits an acknowledgment of the transaction to the content provider by means of a connection 9 return.

  Once the return acknowledgment received from the billing party 3, the content provider 4 informs its user 1 of the execution of the transaction constituted by the transfer of confidential data requested. It then transmits this information and / or the information requested via the confidential data, for example when they are purchased by the user according to the path 10 through the access provider 2.

  In Figure 2, there is shown a flow chart of an embodiment of the method of the invention.

  After a start step SI, which can be initiated as soon as a user and / or a content provider is detected, a BI loop is entered during which a preparatory step S2 is executed.

  In a preferred embodiment, depending on the type of connection, a step S21 for registering a new user is performed or a step S22 for enabling a new content provider is performed.

  2862170 9 If the user or content provider is not identified as registered or authorized, the registration or authorization phase begins. The enrollment phase makes it possible to constitute a file of confidential data associated with a user together with his account data for access to the teleinformatic network during a registration procedure maintained by the access provider to the teleinformatic network as the Internet network. Likewise, the authorization phase aims to constitute an authorization data file of at least one content provider. This content provider holds for example a website and offers services requiring the communication of confidential data of a user. Preferably, this user is registered with the Internet access provider and the confidential data requested by the content provider are recorded in the confidential data file associated with this user when he requires the services of the content provider. These services may be market services, the purchase of multimedia documents via the Internet, or indirectly products or services, for example sold by a multimedia catalog produced by the content provider. But these services may also not be market services and for example consist of the transmission of confidential data produced by the user for special treatment by the content provider.

  In another embodiment of the method of the invention, the confidential data is constituted by a data file returned by the content provider to the user. Especially in this case, two-key encryption key key exchanges are executed when updating the personal data of the registration and / or authorization procedures with the Internet Service Provider. The data file can be directly associated in an HTTP request, for example on a method called POST Method or under a form of a URL address or an indirect reference to a data file to be encrypted.

  During an authorization procedure for a new content provider, the entitlement file is constructed using an application owned by the Internet Service Provider on the basis of data relating to the identification of the content provider. provider of authorized content and, where appropriate, configuration data to prepare a transaction with at least one registered user. Thus, when a new user enters a registration procedure, or when an already registered user modifies his registration file, the access provider has an application that allows him to request the confidential data. required by the entitlement file of each content provider with which the user wishes to have a contact.

  If one of the partners, user or content provider is not registered, the access provider has an enrollment application or an entitlement application to enter the transfer service. confidential data of the invention.

  If either partner refuses, the service is interrupted (not shown).

  If both partners are recognized, respectively as a registered user and an authorized provider, the preparatory phase S2 is immediately terminated.

  It will be noted that here communication is described between a single user and a single content provider. It will be understood that more than one user may be connected in a preparatory phase, or a federation of content providers such as an Internet portal or a ring of webring-like providers may be in contact with a registered user.

  At the end of the preparatory phase S2, a second loop B2 is initiated and, during an end-of-loop test T1 which ends the first loop B1, it is verified that the two partners are correctly recognized as well as described above.

  The method of the invention then comprises an operating step S3 which starts during a transaction between a user registered with the access provider and a content provider offering the service required by said user and authorized when the user preparatory stage.

  The second loop initiated at B2 is terminated by an end-of-loop test T2 which terminates the confidential data transfer service according to the invention, during a final step S4. It is understood that each loop B1 or B2 can be initiated by the detection of a preparatory phase opening request (registration or authorization) or an exploitation request (detection of a transaction request requesting the transfer of is confidential data) asynchronously. It is understood that the process of Figure 2 can be executed in multiple replications operating in parallel with a multi-channel communications system.

  The invention therefore applies to transactions of various types. In particular, a transaction according to the invention is established between a user and a transfer site of the web genre, but also other genres, such as WAP. Such a transaction always includes at least one encryption of confidential data executed in the heart of the network, and therefore an encryption that is not submitted neither to the user, nor to the transfer site, nor to a third party other than the provider of data. access to the teleinformatic network, and a transfer of encrypted confidential data. Such a transaction may relate directly to the digital content presented by the content provider or other non-digital content or non-IT products or services such as a Mail Order or similar service. It can be market or not, implement a financial transaction or bank.

  In the application of the invention to the payment of goods on the Internet, confidential data such as a credit card PIN code are provided in clear by the user, customer of the sales service, and encrypted at the heart of the network according to the method of the invention at each transaction. However, to simplify the intervention of the user, it is preferred to store these data and find them automatically as will be described below.

  In Figure 3, there is shown a block diagram of a system implementing the method of the invention. As already explained, the method of the invention brings together a network access provider 40 such as the Internet, at least one content provider 39 and at least one user 38 of said provider. At the ISP 40 there are: - a user registration database 20 in which each user account registered with the ISP 40 is maintained; A content provider authorization database 21 in which each authorization account is maintained for content providers authorized by the Internet Service Provider 40.

  The Internet Service Provider has one or more of the following resources which are: a user account registration or modification resource with the user registration database; a resource 24 for enabling or modifying an authorization account with the authorization database 21, an encryption resource C; an HTTP request divert resource D which makes it possible, in an HTTP channel 33, to take a request 31, 32 formulated on the user's Internet browser to present it to the encryption resource at the Internet Service Provider 40 ; a re-routing resource R of the HTTP request in which a portion 32 of plaintext or reference data X is available to enable the encryption executed by the resource C as a function of encryption data contained in the database of accounts and / or in the entitlement account database 21.

  At the browser installed at the user 38, the HTTP request is composed conventionally with a data generation mechanism in the HTTP request 31. Confidential data can be inserted as will be described later, at stolen by the Internet Service Provider without further intervention by the registered user.

  At the Server application installed at the Content Provider 39 the encrypted portion of data 35 in the request 34 as redirected by the R forwarding resource R and the X encrypted portion 35 can then be decrypted by a local resource of decryption and exploited by a local resource of use of the data X, in particular to produce an HTTP response (not shown) on the HTTP channel 33.

  FIG. 4 (a) shows the structure of a registration file 41 which comprises: registration data 42 needed to open a connection account to the ISP and otherwise known; confidential data 43 which can be defined by the user himself according to the different content providers to which he intends to subscribe and according to the type of personal data required by each authorized content provider.

  In FIG. 4 (b), the structure of an authorization file 45 of a content provider authorized by the Internet access provider is shown, and which comprises: - identification data 46 of the provider of authorized content; object generation data 47 which contains the object generation arguments enabling the application 25 (FIG. 3) to generate the object accessible to the user according to what has already been described; io - data defining the address of the destination site of the confidential data of the addressed registration file when the user has executed the action expected on the dot object accessible by the user.

  Other data may be added to the two structures of Figures 4 (a) and 4 (b) without departing from the scope of the present invention.

  FIG. 5 shows an Internet communication system in a particular embodiment of the method of the invention in which the ISP Internet Service Provider control means will be specified on a transaction between a content provider. and a user in which confidential data is to be transmitted.

  The communication system operates in three parts: the user, the ISP client, the ISP ISP and at least one content provider site. The various means required are respectively: On the side of the user: a terminal 50 having a teleinformatic connection to the ISP access provider, a means for generating and receiving requests of the HTTP type, such as a browser and means to process digital content from content providers via the ISP's network; In the case of content providers: resources 52 for producing digital content, resources for generating and receiving HTTP requests with users connected to the Internet network by the ISP Internet Service Provider; On the ISP ISP side: a web server 53 to perform the preparatory step of user registration and content provider authorization, a proxy-cache device implementing an iCAP client 51, an iCAP implementing lo server. an iCAP service 55, a database 54 of the ISP users having subscribed to the confidential secure data transfer service of the invention, a database 56 of the authorization data of the content providers, partners of the access provider Internet FAI and who request to benefit from the confidential data of the users registered in the database 55.

  In particular for the techniques of proxy caching and the iCAP protocol implemented at the level of the ISP Internet access provider, reference may be made to the content of the patent application FR 2 823 044 of 30 March 2001 in the name of France Telecom.

  The means for producing and receiving requests of the HTTP type, such as a browser, is in other versions capable of generating and receiving requests on said network of various types other than the HTTP protocol. In particular, the invention is applicable to the Wireless Application Protocol (WAP) so that Mobile Terminals can access the Internet and allow them to consult e-mails and various Web sites or services. The invention is also applicable to the FTP protocol which allows a user to access a file server, the SMTP protocol for the transfer of electronic mail, and the Real Time Transfer Protocol (RTCP). The latter protocol is based on periodic transmission of control packets by all participants in a flow control session of another protocol called RTP protocol, for conveying basic information about the participants of a session, and on the quality of service, in particular during communications between several users and / or content providers, the latter actors being considered according to the point of view of the present invention.

  The data flows exchanged in the system of FIG. 5 will now be described on the basis of the method of the invention. During the preparatory phase, the user 50 fills the confidential data on a Web server 53 with a secure connection of the HTTPs or non-secure type. This connection can take place during the first connection to the ISP provider for user registration, or later during an update procedure. The confidential data are then hosted by a writing 62, or an update if necessary, at the database 54 of the ISP provider's users.

  The same procedure (not shown) is followed for the entitlement data of the ISP ISP partner database 56. Among the authorization data, however, there is a public encryption key to be implemented by the ISP provider in a public key encryption procedure when it transmits the confidential data required of a user, the provider of authorized content and ISP provider partner now secretes the private key for decryption.

  During the exploitation stage, the content provider to the website from which the user has connected through the ISP provider's proxy-cache has sent a webpage containing a transaction proposal with data transmission. confidential information held by the ISP provider on behalf of the user. By activation of the proposal, the user then transfers on the network a request 63 to perform a transaction as an online command. The proxy-cache 51, installed at the ISP provider, includes a means for intercepting the online purchase requests or any other HTTP request from the browser of a user registered with the ISP. The interception 64 takes place by means of the analysis of lists, called ACLs, which are part of the flow management functionalities of a proxy-cache. Having detected in the ACLs the presence of an online purchase request, the proxy-cache routes this request to a server implementing an interface supporting an HTTP stream transfer protocol such as an iCAP server implementing the iCAP service. transfer of confidential data defined in the method of the invention. The request reaching the server iCAP 55 is of the following form commented on in Table 1:

Table 1:

  ll Request header defined according to iCAP REQMOD icap: //xxx.xxx.xx. xxxxx / wwreqmod? Profile = Filtl ICAP / 1.0 Hast: xxx.xxx.xxx.xxx Encapsulated: req-hdr = 0, null-body = 394 X-Client-I P: yyy.yyy.yyy.yyy // En- request header defined according to HTTP GET HTTP://www.site. domain /? HTTP / 1.1 Host: www.site.domain Accept: image / gif, ....

  Referer: HTTP: //www.site.domain/ Accept-Language: xx // language code Accept-Encoding: gzip, deflate User-Agent: Mozilla / 4.0 (compatible; list) X-Forwarded-For: yyy.yyy. yyy.yyy in which request: - xxx.xxx.xxx.xxx is the IP Internet address of the iCAP 55 service; - yyy.yyy.yyy.yyy is the url's Internet address of the detected user and HTTP: //www.site.domain/ is the address of the detected content provider's website; The other fields of the query of the form of Table 1 make it possible to determine the resources available for the generation of the object accessible to the user.

  The iCAP server 55 which receives the request of Table 1 implements an iCAP service implementing the processing part of the operating step of the method of the invention according to the teachings presented in particular in the French patent application FR 2 823 044 filed in the name of France Telecom to which we will refer for the details of realization.

  The iCAP service then performs a step 66 to establish the correspondence between the Internet IP address of the X-Client-IP field allocated to the user for the current session and which is in the HTTP request header and an identifier of the user contained in his database of registered users 54.

  The iCAP service then executes a step to check the agreement of the user for the transmission of his confidential data to the partner site during a step 67. If this agreement is detected by analysis of the data entered in relation with the connected user in the database 54, the iCAP server 55 exports 68 these confidential data necessary for the online purchase of the user database 54 to the iCAP server 55.

  The iCAP service then executes a step of querying the database of the authorized suppliers (partners) 56 to know the public key of the declared provider and, if necessary if this data is missing, to determine the address of the destination site confidential data, here defined in the request in the destination IP address confidential data field (host field Table 1) in stream 69.

  The flow exchange steps 68 and 69 can be performed simultaneously to speed up the service.

  In another embodiment, the stream exchange step 69 is executed first and then only after those of the streams 66 and 67. In fact, in the case where a partner needs information about the user who is different from other partners, one may need to consult the empowering database first to find out which parameters to look for in the user database.

  The iCAP server 55 then executes an encryption step with the appropriate public key from stream 70 and inserts them into a particular field, which could be normalized and which is titled EncryptedData, internal to the HTTP request which returns the good public key.

  The iCAP server 55 then executes a step of retransmitting the modified request in stream 72 to proxycache 51. The modified request then becomes according to Table 2:

Table 2:

  l / Request header defined according to iCAP REQMOD icap: //xxx.xxx.xx. xxxxx / wwregmod? Profile = Filtl ICAP / 1.0 Host: xxx.xxx.xx.xxxxx Encapsulated: req-hdr = 0, null-body = 394 X-Client-I P: yy.yyy.yyy.yyy // En - request header defined according to HTTP GET HTTP://www.site. domain /? HTTP / 1.1 Host: www.site.domain Accept: imagelgif, ....

  Referer: HTTP: //www.site.domain/ Accept-Language: xx // language code Accept-Encoding: gzip, deflate User-Agent: Mozilla / 4.0 (compatible; list) X-Forwarded-For: yy.yyy. yyy.yyy VIA: 1.0 c-icache (NetCache NetApp / 5.2.1 R1 D9) Encrypted-Data: zzzzzzzzzzzzzzz in which query we added the last two lines to the initial Query which are: 2862170 20 - the line VIA defining the resource iCAP of the proxy-cache responsible for transmitting the modified request to the site of the authorized partner receiving provider of the encoded data; the Encrypted-Data line containing the encrypted data stream.

  The proxy-cache then performs a transmission step 73 to the site of the host concerned by the online purchase. The encryption of the user data is done on the ICAP server 55 and the insertion of these encrypted data is performed in a field of the request received in the stream 65 by the ICAP server and retransmitted by the stream 72.

  The content provider 62 hosting the online purchase site extracts from the HTTP header (Encrypted-Data line) during a step 74 that it decrypts with its own private key and processes the online purchase of the user, his own client.

  The content provider 62 then executes: if the confidential data transmitted is bank data (blue card, debit account number), a user billing step is performed by the content provider; - if the confidential data transmitted are identification data of a client of the content provider, a billing step of the client is performed and transmitted with this identifier to the ISP access provider who can then perform the rebilling of his own client user 50.

  A response step 76 containing the confirmation of the transaction to proxy-cache 51 is then performed.

  Then, the proxy-cache 51 executes a routing step 77 of the transaction confirmation to the user 50.

  We thus note the essential advantages of the invention. First, the identification operations during the purchase procedures are transparent to the user, the customer's 2862170 21 content provider. Then, the ISP ISP may offer a service to hide the identity of its users by assigning them a unique identifier and encrypted reatachable to this single client. The result is: 1. The actual identity of the customer is hidden from the content provider which preserves the anonymity of the customer when purchasing; such a characteristic makes it possible in particular to reduce the involuntary dissemination of the name of the users in commercial files which in return produce mailings of unwanted commercial solicitations (spamming in particular); 2. The bank details of the registered user no longer transit the network which enhances the security of confidential data; 3. The ISP Internet Service Provider then acts as a billing party and may implement an economic business compensation model.

  Finally, the invention provides assurance to any content provider authorized by the Internet Service Provider ISP the veracity of the identity of its user since the latter is authenticated by its access.

Claims (13)

  A method of transferring confidential data between at least one user (1) having received attributes of connection to a network held by a provider of access to a teleinformatic network such as the Internet network (2) and a content provider, characterized in what it consists: on the side of the user transmitting confidential data: to issue a service request for a content content io according to a predetermined protocol such as the HTTP protocol intended for a recipient content provider; then, on the side of the access provider to a teleinformatic network (2): intercepting the request according to the address of the recipient content provider (4); executing an encryption service for confidential data maintained with the access provider and relating to the user; to insert the encrypted confidential data into said request; - To re-route the request to the content provider recipient of the request and then to a recipient content provider (4) of the request: - to receive said request and; extracting the encrypted data in relation to the address of the sending user.   2 Process according to claim 1, characterized in that it also comprises a preparatory step (B1, S2), in at least one access provider to a teleinformatic network such as the Internet network (2): - to constitute a file ( 20) confidential data associated with a user at the same time as his data access account data during a registration procedure; constituting a file (21) of authorization data of at least one content provider offering services requiring the communication of confidential data stored in a file of confidential data associated with a user requesting these services, during a procedure of the authorization, said authorization file containing data relating to the identification of the authorized content provider and, where appropriate, of configuration data to prepare a transaction with at least one registered user.   3 Method according to one of the preceding claims characterized in that it is executed by various means which are respectively: - on the side of the user: a terminal (50) with a teleinformatic connection to the ISP (ISP) ), means for generating and receiving requests on said network of HTTP, WAP, FTP, SMTP, RTCP or other type as a browser and means for processing digital content from content providers via the provider's network. 'Internet access; on the content provider side: resources (52) for producing digital content, resources for generating and receiving HTTP, WAP, FTP, SMTP, RTCP or other type requests with users connected to the Internet network by the provider of content; network access such as the Internet (ISP); on the side of the network access provider such as the Internet (ISP): a web server (53) to execute the preparatory step of user registration and authorization of content providers, a proxy-caching device implementing an iCAP client (51), an iCAP server implementing an iCAP service (55), a database (54) 2862170 24 of the ISP users having subscribed to the secure confidential data transfer service of the invention, a database (56) authorization data from the content providers, partners of the Internet Service Provider (ISP) and who request to benefit from the confidential data of the users registered in the database (55).   4 Method according to claim 3, characterized in that, during the preparatory phase, the user (50) informs the confidential data on a Web server (53) by a secure connection as a HTTPs type connection, especially when the first connection to the ISP ISP for registering the user, or later during an update procedure, the confidential data being then hosted by a write (62), or an update the case If applicable, at the database level (53) of the ISP provider's users, the same procedure is followed for the database authorization data (56) of the ISP's ISP partner content providers.     Method according to claim 4, characterized in that among the authorization data, there is a public encryption key to be implemented by the ISP network access provider in a public key encryption procedure when it transmits the confidential data required of a user, the authorized content provider and ISP provider partner now secretes the private key for decryption.   6 Method according to claim 5, characterized in that by activation of a transaction proposal, the user then transfers on the network a request (63) to perform a transaction as an online command, the proxy-cache (51) , installed at the ISP provider, with a means to intercept online purchase requests by means of ACQ filter analysis on regular expression, so that, having detected in the ACLs the presence of a query request d On-line purchase, the proxy-cache 2862170 25 route this request to the iCAP server implementing the confidential data transfer service iCAP, and in that it also includes a step of inserting in the request header a line (X-Client-IP) identifying the access of the user and a line s (Host) identifying the access of the content provider.   Method according to claim 6, characterized in that the iCAP server (55) receiving the request (Table 1) implements an iCAP service which then executes a step (66) to establish the correspondence between the Internet IP address of the X-field. The IP-client-IP allocated to the user for the current session and which is in the HTTP request header and a user identifier contained in its database of registered users 54.   Method according to claim 7, characterized in that the iCAP service then performs a step to check the agreement of the user for the transmission of his confidential data to the partner site in a step (67), so that if this agreement is detected by analysis of the data entered in relation with the user logged in the database (54), the iCAP server (55) exports (68) these confidential data necessary for the online purchase of the database users (54) to the iCAP server (55).   9 - Process according to claim 8, characterized in that the iCAP service then executes a step of querying the database of the authorized suppliers (partners) (56) to know the public key of the supplier declared from the address of the destination site and to determine the address of the destination site of the confidential data, here defined in the request in the destination IP address field of the confidential data (host field Table 1) in the stream (69).   A method according to claim 9, characterized in that the iCAP server (55) then executes an encryption step with the appropriate public key in the stream (70) and inserts them into a special field of the header of the the HTTP request of the data encoded in the stream (71).   Method according to claim 10, characterized in that the iCAP server (55) then executes a step of retransmitting the modified request in the stream (72) to the proxy-cache (51), in which request is added to the Initial request an Encrypted-Data line containing the encrypted data stream.   A method according to claim 11, characterized in that the proxycache then executes a transmission step (73) to the site of the host concerned by the online purchase and in that the iCAP service then waits for an acknowledgment of receipt. confidential data encrypted by the content provider hosting the online purchasing site that it extracts from the HTTP header (Encrypted-Data line) during a step (74) that it decrypts using of his own private key and deals with the online purchase of the user, his own client.   13 Method according to claim 12, characterized in that the iCAP service then executes: if the transmitted confidential data are bank data (blue card, collection account number), a user billing step is performed by the provider content; if the confidential data transmitted is identification data of a client of the content provider, a billing step of the customer is performed and transmitted with this identifier to the ISP access provider who can then perform the rebilling of his own user client (50) and in that a response step (76) containing confirmation of the transaction to the proxy-cache (51) is then performed, and then the proxy-cache (51) performs a routing step (77). ) from the transaction confirmation to the user (50).   Method according to one of the preceding claims, characterized in that it also comprises a step in which the ISP ISP provides a service for masking the identity of its users by assigning them a unique identifier and encrypted reatachable to this customer alone.     Method according to one of the preceding claims, characterized in that the Internet Service Provider ISP acts as billing third party and sets up an economic model of remuneration on commercial exchanges.