Methods and apparatus for interfacing an encryption module with a personal computer

• US 5,517,569 A
• Filed: 03/18/1994
• Issued: 05/14/1996
• Est. Priority Date: 03/18/1994
• Status: Expired due to Fees

• Current Assignee: Innovonics, Inc. (Merchantonline.com, Inc.)
• Original Assignee: Innovonics, Inc. (Merchantonline.com, Inc.)
• Inventors: Clark, Dereck B.
• Primary Examiner(s): Buczinski, Stephen C.
• Application Number:
  US08/210,200
• Time in Patent Office: 788 Days
• Field of Search: 380/24, 380/23, 380/25, 380/52
• US Class Current: 380/52
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: G06F 3/021 Arrangements integrating additional peripherals in a keyboard, e.g. card or barcode reader, optical scanner
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An encryption module for encrypting financial and other sensitive data may be conveniently interposed in series between a personal computer and the keyboard associated therewith. An application program designed to run on the PC is configured to prompt the user to enter his PIN or other confidential data into the encryption module; consequently the confidential data need not be transmitted in an unencrypted fashion, and need not reside on the PC hard drive in an unencrypted form.

Claims

1. A remote processing system, located at a first site, for interfacing with a host computer system located at a second site which is remote from said first site, the host computer system being of the type which includes a host modem and which is configured to facilitate financial transactions upon receipt from said remote processing system of a data packet including an encrypted data field, said remote processing system comprising:

a. a PC, comprising;

(1) a first memory sector configured to store an interactive software program;

(2) a first processor configured to execute said software program

(3) an input port configured to communicate with said first processor; and

(4) a second modem configured to transmit said data packet from said PC to the host modem in accordance with said software program;

b. an input device; and

c. an encryption module connected in series between said input device and said input port, comprising;

(1) a keypad;

(2) a second processor configured to encrypt data entered onto said keypad; and

(3) a data link configured to maintain communication between said encryption module and said PC input port.

2. The remote processing system of claim 1, wherein said input port comprises a keyboard input port.

3. The remote processing system of claim 1, wherein said input port comprises a mouse port.

4. The remote processing system of claim 3 wherein said remote processing system further comprises a mouse, and said encryption module is connected in series between said mouse and said PC.

5. The remote processing system of claim 2, wherein said second processor is configured to transmit said encrypted data to said input port in a manner which emulates the transmission of keyboard input data.

6. The remote processing system of claim 1, wherein said data entered onto said keypad corresponds to a PIN.

7. The remote processing system of claim 1, wherein said PC further comprises a screen, and said first processor is configured to generate a data entry prompt on said screen in accordance with said software program.

8. The remote processing system of claim 1, wherein said encryption module further comprises a peripheral device useful in electronically entering data into said encryption module.

9. The remote processing system of claim 8, wherein said peripheral device comprises a magnetic head card reader.

10. The remote processing system of claim 8, wherein said peripheral device comprises an integrated circuit card reader.

11. The remote processing system of claim 8, wherein said peripheral device comprises a bar code reader.

12. The remote processing system of claim 1 further comprising a magnetic card reader, said magnetic card reader formed integrally with said encryption module.

13. The remote processing system of claim 1 further comprising a smart card reader, said smart card reader formed integrally with said encryption module.

14. The remote processing system of claim 1 wherein said second processor of said encryption module comprises a random access memory, a read only memory, and an electronically programmable read only memory for providing additional security for said encryption module.

15. A data encryption module configured for connection to a PC, the PC being of the type which includes a keyboard, a keyboard input port, and a connector having a first end connected to said keyboard and a second end configured for connection to said keyboard input port, said module comprising:

a. a keypad;

b. a processor adapted to encrypt data entered onto said keypad;

c. an interface connector extending from said module for receipt within said keyboard input port; and

d. an interface port configured to receive said second end of said connector.

16. The encryption module of claim 15, further comprising an input data transducer for entering data into said module other than through said keypad.

17. The module of claim 16, wherein said transducer comprises at least one of a magnetic head card reader, an integrated circuit card reader, a bar code reader, a voice recognition device, and a scanner.

18. The module of claim 15, further comprising a housing within which said processor is disposed, and wherein said keypad is disposed substantially integral with a surface of said housing.

19. A remote processing system for interfacing with a host computer system including a host modem, the host computer system being configured to facilitate financial transactions upon receipt from said remote processing system of a data packet including an encrypted data field, said remote processing system comprising:

a. a PC, comprising;

(1) a PC housing;

(2) a first processor, disposed within said PC housing, configured to execute a software program;

(3) an input port accessible from outside of said PC housing and configured to communicate with said first processor; and

(4) a PC modem configured to transmit said data packet from said PC to the host modem in accordance with said software program; and

b. an encryption module, comprising;

(1) a module housing;

(2) a keypad accessible from outside of said module housing;

(3) a second processor disposed within said module housing and configured to encrypt data entered onto said keypad;

(4) a data link configured to maintain communication between said encryption module and said PC input port.

(5) a second input port configured to receive an input from a keyboard of said PC.

20. The remote processing system of claim 19, wherein:

a. said input port comprises a keyboard input port;

b. said PC further comprises a keyboard, and said encryption module is connected in series between said keyboard and said keyboard input port; and

c. said second processor is configured to transmit said encrypted data to said input port in a manner which emulates the transmission of keyboard input data.

21. A method for transmitting confidential data between a PC at a first site and a host computer located at a site remote from said first site comprising the steps of:

providing a PC comprising a first processor configured to execute a software program, and a PC modem configured to transmit data from said PC to the host computer in accordance with said software program;

providing a keyboard or mouse for communicating with said PC;

providing a self-contained, secure encryption module independent from said PC and connected in series between said PC and said keyboard or mouse, said module comprising a keypad for inputting a confidential data directly into said encryption module and a second processor for encrypting said confidential data within said module;

transmitting said encrypted data to said first processor within said PC; and

transmitting said encrypted data from said PC to said host computer via said PC modem.