Methods and apparatus for securely encrypting data in conjunction with a personal computer

• US 5,815,577 A
• Filed: 03/24/1997
• Issued: 09/29/1998
• Est. Priority Date: 03/18/1994
• Status: Expired due to Fees

• Current Assignee: Innovonics, Inc. (Merchantonline.com, Inc.)
• Original Assignee: Innovonics, Inc. (Merchantonline.com, Inc.)
• Inventors: Clark, Dereck D.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/814,986
• Time in Patent Office: 554 Days
• Field of Search: 380/23, 380/24, 380/25, 380/49, 380/52, 705/16, 705/17, 705/18, 705/42, 705/43, 705/26, 705/27
• US Class Current: 380/52
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An encryption module for encrypting financial and other sensitive data may be conveniently interposed in series between a personal computer and the keyboard associated therewith. An application program designed to run on the PC is configured to prompt the user to enter his PIN or other confidential data into the encryption module; consequently the confidential data need not be transmitted in an unencrypted fashion, and need not reside on the PC hard drive in an unencrypted form.

Claims

1. A remote processing system, located at a first site, for interfacing with a host computer system located at a second site which is remote from said first site, the host computer system being of the type which includes a host modem and which is configured to facilitate financial transactions upon receipt from said remote processing system of a data packet including an encrypted data field, said remote processing system comprising:

a. a PC, comprising;

(1) a first memory sector configured to store an interactive software program;

(2) a first processor configured to execute said software program;

(3) an input port configured to communicate with said first processor;

(4) a second modem configured to transmit said data packet from said PC to the host modem in accordance with said software program; and

(5) a PC monitor having a two-dimensional, multi-line display;

b. a PC keyboard and a second input device;

c. an encryption module, configured to communicate with said second input device, connected in series between said PC keyboard and said input port, comprising;

(1) an integral acquisition means;

(2) a second processor configured to selectively encrypt data entered into said integral acquisition means and said second input device; and

d. a data link configured to maintain communication between said encryption module and said PC input port.

2. The remote processing system of claim 1, wherein said data link comprises a standard bi-directional interface bus.

3. The remote processing system of claim 1, wherein said data link comprises an IR data link.

4. A remote processing system, located at a first site, for interfacing with a host computer system located at a second site which is remote from said first site, the host computer system being of the type which includes a host modem and which is configured to facilitate financial transactions upon receipt from said remote processing system of a data packet including an encrypted data field, said remote processing system comprising:

a. a PC, comprising;

(1) a first memory sector configured to store an interactive software program;

(2) a first processor configured to execute said software program;

(3) an input port configured to communicate with said first processor;

(4) a second modem configured to transmit said data packet from said PC to the host modem in accordance with said software program; and

(5) a PC monitor having a two-dimensional, multi-line display;

(6) a PC keyboard;

b. a second input device for receiving input data;

c. an encryption module comprising;

(1) acquisition input means for receiving input data;

(2) an input port configured to interface with said second input device; and

(3) a processor adapted to selectively encrypt said input data received from said acquisition input means and said second input device;

d. a data link configured to maintain communication between said encryption module and said PC input port.

5. The remote processing system of claim 4, wherein said acquisition input means comprises an alphanumeric keypad.

6. The remote processing system of claim 4, wherein said acquisition input means comprises an apparatus configured to acquire biometric data.

7. The remote processing system of claim 4, wherein said acquisition input means comprises a magnetic stripe card reader.

8. The remote processing system of claim 4, wherein said acquisition input means comprises a smartcard reader.

9. The remote processing system of claim 4, wherein said input port is configured to interface with a PC mouse.

10. The remote processing system of claim 4, wherein said input port is configured to interface with an integrated circuit card reader.

11. The remote processing system of claim 4, wherein said input port is configured to interface with a means for scanning graphical codes.

12. The remote processing system of claim 4, wherein said input port is configured to interface with a magnetic stripe card reader.

13. The remote processing system of claim 4, wherein:

said remote processing system further comprises an output peripheral; and

said encryption module further comprises a second port configured to interface with said output peripheral.

14. The remote processing system of claim 13, wherein said output peripheral comprises a means for printing a graphical representation of said encrypted data.

15. The remote processing system of claim 13, wherein said output peripheral comprises a PC monitor having a two-dimensional, multi-line display.

16. The remote processing system of claim 13, wherein said output peripheral comprises a means for communicating with a financial transaction authorization host.

17. The remote processing system of claim 13, wherein said output peripheral comprises a standard computer printer.

18. The remote processing system of claim 13, wherein said encryption module further comprises a speaker unit for providing audio information output.

19. The remote processing system of claim 13, wherein said first processor is further configured to identify and accommodate said output peripheral.

20. The remote processing system of claim 13, wherein said output peripheral is integral with said encryption module.

21. The remote processing system of claim 4, wherein said encryption module further comprises an integral two-dimensional display screen.

22. The remote processing system of claim 4, wherein said first processor is further configured to identify and accommodate said second input device.

23. The remote processing system of claim 4, wherein said second input device is integral with said encryption module.