Apparatus and Method for Securing Digital Data with a Security Token

• US 20140223183A1
• Filed: 04/07/2014
• Published: 08/07/2014
• Est. Priority Date: 08/07/2007
• Status: Abandoned Application

• Current Assignee: Redporte Incorporated
• Original Assignee: Redporte Incorporated
• Inventors: Niglio, Christophe, Flannery, Karen
• Application Number:
  US14/247,114
• Publication Number:
  US 20140223183A1
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A security token includes a wireless interface to communicate with a secured device. A cryptographic module generates cryptographic information, encrypts messages to the secured device, decrypts messages from the secured device and coordinates the encryption and decryption of data on the secured device.

Claims

1. A security token, comprising:

a wireless interface to communicate with a secured device and an additional security token; and

a cryptographic module to;

generate cryptographic information,

encrypt messages to the secured device,

decrypt messages from the secured device,

coordinate the encryption and decryption of data on the secured device, wherein movement of the security token beyond a range of the wireless interface to communicate with the secured device ceases coordination of decryption of data on the secured device such that the data on the secured device remains encrypted, wherein the wireless interface communication range with the secured device is limited by personal proximity; and

exchange encryption parameters with the secured device and the additional security token, wherein the secured device operates as a communication channel between the security token and the additional security token.

2. The security token of claim 1 wherein the personal proximity corresponds to Bluetooth technology range.

3. The security token of claim 1 wherein the personal proximity corresponds to RFID technology range.

4. The security token of claim 1 in combination with a secured device selected from a handheld device, a mobile telephone, a personal digital assistant, a smart telephone and a computer.

5. The security token of claim 1 wherein the encryption parameters are selected from cryptographic information, information associated with the secured device, data and applications on the secured device, information associated with users of the secured device and synchronizing information.

6. The security token of claim 1 wherein the cryptographic information is selected from symmetric keys and asymmetric keys.

7. The security token of claim 6 wherein the asymmetric keys are selected from Diffie-Helman compatible key pairs and RSA compatible key pairs.

8. The security token of claim 6 wherein the symmetric keys are AES compatible keys.

9. A method of operating a wireless security token to secure data on a secured device, comprising:

generating encryption information;

encrypting messages to the secured device;

decrypting messages from the secured device;

coordinating encryption and decryption of data on the secured device when the wireless security token is within a wireless interface communication range with the secured device, wherein the wireless interface communication range with the secured device is limited by personal proximity;

ceasing coordination of decryption of data on the secured device when the wireless security token is outside the wireless interface communication range with the secured device such that the data on the secured device remains encrypted; and

exchanging encryption parameters with the secured device and an additional security token, wherein the secured device operates as a communication channel between the security token and the additional security token.

10. The method of claim 9 further comprising using metadata to specify encryption parameters.

11. The method of claim 10 further comprising using the security token to synchronize metadata.

12. The method of claim 9 wherein operating the security token comprises using directives to control the security token.

13. The method of claim 9 further comprising utilizing private and public keys on the security token and the additional security token to guarantee secure token-to-token communication.

14. The method of claim 9 further comprising storing a message on the secured device until the additional security token is proximate to the secured device.

15. The method of claim 9 further comprising enrolling a party, wherein the party is selected from a user, a secured device, a security token and a software program.

16. The method of claim 15 further comprising authorizing an enrolled party for a designated purpose.

17. The method of claim 15 further comprising using the security token to exchange data between a first party and a second party.

18. The method of claim 9 further comprising using the security token to record a transaction.

19. The method of claim 9 further comprising using the security token to control a transaction.

20. The method of claim 19 wherein the transaction is a financial transaction.