Virtual Token for Transparently Self-Installing Security Environment

• US 20110145592A1
• Filed: 08/13/2008
• Published: 06/16/2011
• Est. Priority Date: 08/13/2007
• Status: Abandoned Application

• Current Assignee: SafeNet Data Security (Israel) Ltd.
• Original Assignee: SafeNet Data Security (Israel) Ltd.
• Inventors: Greiner, Asaf
• Application Number:
  US12/673,295
• Publication Number:
  US 20110145592A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services

Abstract

A virtual token for use in a virtual computer environment to implement the secure cryptographic facilities of a hardware security token within a computer without requiring custom installation or administrator privileges. The hardware security token contains an automatic installer for the virtual environment and the virtual token with the computer'"'"'s operating system. When plugged into the computer the hardware security token automatically performs dynamic installation as necessary, providing secure cryptographic services to standard application programs already installed in the computer. The installation is transparent to the user, and requires no user attention or special access privileges. After the session is completed and the security token is removed from the computer, the virtual environment is effectively uninstalled from the host computer, also transparently to the user, without any user attention, and without making any modifications to the computer'"'"'s operating system.

Claims

1. A virtual token for providing a security service to an application program running in a virtual environment within a computer operating system, the virtual environment containing a virtual cryptographic services provider layer for serving the application program, the virtual token comprising:

an interface to the virtual cryptographic services provider layer;

a protocol formatter, for formatting data received from said interface and for formatting data sent to said interface; and

a hardware security token coupled to the computer and configured to provide the security service via said protocol formatter.

2. The virtual token of claim 1, wherein said protocol formatter is compatible with a device driver selected from a group consisting of:

a mass storage device;

a human-interface device.

3. The virtual token of claim 1, wherein the security service is selected from a group consisting of

privacy;

access control;

authentication/validation;

data protection;

encryption/decryption/hashing;

digital signature creation/verification;

digital certificate creation/verification;

challenge/response;

username/password/PIN/access code presentation;

one-time password generation;

sensitive data storage.

4. A security token for providing a security service to an application program in a computer operating system, the security token comprising:

a bi-directional data interface to the computer, for exchanging data therewith;

a virtual environment loader, configured for loading a virtual environment into the operating system, and wherein said virtual environment includes a virtual cryptographic services provider layer; and

an installation script, for installing a virtual token into said virtual environment, wherein said virtual token includes;

an interface to said virtual cryptographic services provider layer, for communicating with the application program; and

a protocol formatter, for formatting data received from said bi-directional data interface and for formatting data sent to said bi-directional data interface.

5. The security token of claim 4, further comprising a flash memory, and wherein at least part of said loading a virtual environment is performed via loading from said flash memory.

6. The security token of claim 4, further comprising at least one of:

a Universal Resource Locator of a resource on a computer network; and

an Internet Protocol address of said resource on said computer network;

and wherein at least part of said loading a virtual environment is performed via downloading from said resource.