APPARATUS AND METHOD FOR SECURING DIGITAL DATA WITH A SECURITY TOKEN

• US 20090044260A1
• Filed: 08/01/2008
• Published: 02/12/2009
• Est. Priority Date: 08/07/2007
• Status: Active Grant

• Current Assignee: Christophe Niglio, Karen Flannery
• Original Assignee: Christophe Niglio, Karen Flannery
• Inventors: Niglio, Christophe, Flannery, Karen
• Granted Patent: US 8,694,787 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A security token includes a wireless interface to communicate with a secured device. A cryptographic module generates cryptographic information, encrypts messages to the secured device, decrypts messages from the secured device and coordinates the encryption and decryption of data on the secured device.

Claims

1. A security token, comprising:

a wireless interface to communicate with a secured device; and

a cryptographic module to;

generate cryptographic information,

encrypt messages to the secured device,

decrypt messages from the secured device, and

coordinate the encryption and decryption of data on the secured device.

2. The security token of claim 1 in combination with a secured device selected from a handheld device, a mobile telephone, a personal digital assistant, a smart telephone and a computer.

3. The security token of claim 1 further comprising a rechargeable power storage element.

4. The security token of claim 1 configured to receive power from an external source.

5. The security token of claim 1 wherein the wireless interface communication range with the secure device is up to 2 meters.

6. The security token of claim 1 further comprising a metadata module to specify encryption parameters.

7. The security token of claim 1 wherein the cryptographic information is selected from symmetric keys and asymmetric keys.

8. The security token of claim 1 wherein the asymmetric keys are selected from Diffie-Helman compatible key pairs and RSA compatible key pairs.

9. The security token of claim 7 wherein the symmetric keys are AES compatible keys.

10. A method of operating a wireless security token to secure data on a secured device, comprising:

generating encryption information;

encrypting messages to the secured device;

decrypting messages from the secured device; and

coordinating encryption and decryption of data on the secured device.

11. The method of claim 10 further comprising using metadata to specify encryption parameters.

12. The method of claim 11 further comprising using the security token to synchronize metadata.

13. The method of claim 10 wherein operating the security token comprises using directives to control the security token.

14. The method of claim 10 further comprising utilizing the security token to control additional security tokens.

15. The method of claim 10 further comprising enrolling a party.

16. The method of claim 15 wherein the party is selected from a user, a secured device, a security token and a software program.

17. The method of claim 15 further comprising authorizing an enrolled party for a designated purpose.

18. The method of claim 10 further comprising using the security token to exchange data between users.

19. The method of claim 10 further comprising using the security token to record a transaction.

20. The method of claim 10 further comprising controlling security token metadata and directives.