INFORMATION SECURITY DEVICE OF UNIVERSAL SERIAL BUS HUMAN INTERFACE DEVICE CLASS AND DATA TRANSMISSION METHOD FOR SAME

• US 20070208949A1
• Filed: 09/25/2006
• Published: 09/06/2007
• Est. Priority Date: 01/27/2006
• Status: Active Grant

• Current Assignee: Feitian Technologies Company Limited
• Original Assignee: Feitian Technologies Company Limited
• Inventors: Lu, Zhou, Yu, Huazhang
• Granted Patent: US 8,386,795 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

The present invention relates to an information security device of Universal Serial Bus (USB) Human Interface Device (HID) class and the data transmission method for the same. With a master chip that has a built-in HID descriptor and a USB interface chip connected to the master chip, the device of the present invention itself may be designed to be compact and easy to use, and provide powerful functions. With the USB HID interface, the device user does not need to install a driver and the user can use the device anywhere and anytime. And the user does not need to manage the driver whose version updates constantly, consider the compatibility of various product drivers, face the risk caused by the driver when running OS, and worry about the pollution to the system resulted from the installation and uninstallation of the driver. CPU, SCM or smart card chip used as the master chip ensures that the security of identity authentication is reliable. Moreover, the security of identity authentication device can be further improved by adding biometric identification module and/or the like.

Claims

1. An information security device of Universal Serial Bus (USB) Human Interface Device (HID) class, wherein comprising

a master chip with a built-in HID descriptor;

and

a USB interface module connected to the master chip.

2. The information security device of Universal Serial Bus (USB) Human Interface Device (HID) class according to claim 1, wherein further comprising an authentication module which is an intelligent authentication module comprising a biometric identification module or a card reading module.

3. The information security device of Universal Serial Bus (USB) Human Interface Device (HID) class according to claim 1, wherein the USB interface module is built into the master chip or is a USB HID interface chip separated from the master chip.

4. The information security device of Universal Serial Bus (USB) Human Interface Device (HID) class according to claim 2, wherein the USB interface module is built into the master chip or is a USB HID interface chip separated from the master chip.

5. The information security device of Universal Serial Bus (USB) Human Interface Device (HID) class according to claim 1, wherein the master chip is a microprocessor or smart card chip, comprising a Central Processing Unit (CPU), a Microcontroller Unit (MCU), or a Single Chip Micyoco (SCM).

6. The information security device of Universal Serial Bus (USB) Human Interface Device (HID) class according to claim 2, wherein the master chip is a microprocessor or smart card chip, comprising a Central Processing Unit (CPU), a Microcontroller Unit (MCU), or a Single Chip Micyoco (SCM).

7. A data transmission method for the information security device according to claim 1, wherein comprising the steps of:

1) the host recognizing the information security device;

2) the host sending control commands to the device;

3) the device resolving and processing the control commands after receiving them;

4) the device responding to the application and returning the execution results; and

the control commands are transmitted through HID instructions between the host and the information security device.

8. The data transmission method for the information security device according to claim 7, wherein the control commands include PIN authentication, signature authentication, data downloading, file access, privilege management and/or read/write operation.

9. The data transmission method for the information security device according to claim 7, wherein the control commands are transmitted in the form of cipher text after being encrypted.

10. The data transmission method for the information security device according to claim 7, wherein the HID instructions include Set_Report and Get_Report commands.

11. The data transmission method for the information security device according to claim 8, wherein the HID instructions include Set_Report and Get_Report commands.

12. The data transmission method for the information security device according to claim 9, wherein the HID instructions include Set_Report and Get_Report commands.

13. The data transmission method for the information security device according to claim 9, wherein the algorithm used to encrypt the control commands is RSA, DES, 3DES, HMAC-MD5 or TEA, or the combination of some of them.