Peripheral device with integrated security functionality

• US 6,088,802 A
• Filed: 06/04/1997
• Issued: 07/11/2000
• Est. Priority Date: 06/04/1997
• Status: Expired due to Term

• Current Assignee: SPEX Technologies, Inc.
• Original Assignee: Spyrus, Inc.
• Inventors: Housley, Russell D., Bialick, William P., Rowland, Thomas K., Dolphin-Peterson, Janet L., Sutherland, Mark J., Skeba, Kirk W.
• Primary Examiner(s): HUA, LY
• Application Number:
  US08/869,305
• Time in Patent Office: 1,133 Days
• Field of Search: 395/188.01, 395/187.01, 395/186, 380/4, 380/25, 380/49, 713/200, 713/201, 713/202
• US Class Current: 726/3
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

The invention enables a peripheral device to communicate with a host computing device to enable one or more security operations to be performed by the peripheral device on data stored within the host computing device, data provided from the host computing device to the peripheral device (which can then be, for example, stored in the peripheral device or transmitted to yet another device), or data retrieved by the host computing device from the peripheral device (e.g., data that has been stored in the peripheral device, transmitted to the peripheral device from another device or input to the peripheral device by a person). In particular, the peripheral device can be adapted to enable, in a single integral peripheral device, performance of one or more security operations on data, and a defined interaction with a host computing device that has not previously been integrated with security operations in a single integral device. The defined interactions can provide a variety of types of functionality (e.g., data storage, data communication, data input and output, user identification). The peripheral device can also be implemented so that the security operations are performed in-line, i.e., the security operations are performed between the communication of data to or from the host computing device and the performance of the defined interaction. Moreover, the peripheral device can be implemented so that the security functionality of the peripheral device is transparent to the host computing device.

Claims

1. A peripheral device, comprising:

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device;

means for enabling communication between the security means and the target means;

means for enabling communication with a host computing device;

means for operably connecting the security means and/or the target means to the host computing device in response to an instruction from the host computing device; and

means for mediating communication of data between the host computing device and the target means so that the communicated data must first pass through the security means.

2. A peripheral device as in claim 1, wherein the target means comprises means for non-volatilely storing data.

3. A peripheral device as in claim 1, wherein the target means comprises means for enabling communication between the host computing device and a remote device.

4. A peripheral device as in claim 1, wherein the target means comprises a biometric device.

5. A peripheral device as in claim 1, wherein the target means comprises means for communicating with a smart card.

6. A peripheral device, comprising:

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device;

means for enabling communication between the security means and the target means,

means for enabling communication with a host computing device;

means for operably connecting the security means and/or the target means to the host computing device in response to an instruction from the host computing device; and

means for providing to a host computing device, in response to a request from the host computing device for information regarding the type of the peripheral device, information regarding the function of the target means.

7. A peripheral device as in claim 6, wherein the target means comprises means for non-volatilely storing data.

8. A peripheral device as in claim 6, wherein the target means comprises means for enabling communication between the host computing device and a remote device.

9. A peripheral device as in claim 6, wherein the target means comprises a biometric device.

10. A peripheral device as in claim 6, wherein the target means comprises means for communicating with a smart card.

11. A peripheral device, comprising:

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device;

means for enabling communication between the security means and the target means;

means for enabling communication with a host computing device; and

means for mediating communication of data between the host computing device and the target means so that the communicated data must first pass through the security means.

12. A peripheral device as in claim 11, wherein the target means comprises means for non-volatilely storing data.

13. A peripheral device as in claim 12, wherein the means for non-volatilely storing data further comprises a solid-state disk storage device.

14. A peripheral device as in claim 13, wherein the solid-state disk storage device comprises an ATA format flash disk drive.

15. A peripheral device as in claim 11, wherein the target means comprises means for enabling communication between the host computing device and a remote device.

16. A peripheral device as in claim 15, wherein the means for enabling communication between the host computing device and a remote device further comprises wireless communication means.

17. A peripheral device as in claim 16, wherein the wireless communication means comprises a wireless modem.

18. A peripheral device as in claim 16, wherein the wireless communication means comprises a wireless LAN transceiver.

19. A peripheral device as in claim 11, wherein the target means comprises a biometric device.

20. A peripheral device as in claim 19, wherein the biometric device comprises a fingerprint scanning device.

21. A peripheral device as in claim 19, wherein the biometric device comprises a retinal scanning device.

22. A peripheral device as in claim 11, wherein the target means comprises means for communicating with a smart card.

23. A peripheral device, comprising:

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device;

means for enabling communication between the security means and the target means;

means for enabling communication with a host computing device;

means for mediating communication of data between the host computing device and the target means so that the communicated data must first pass through the security means; and

means for providing to a host computing device, in response to a request from the host computing device for information regarding the type of the peripheral device, information regarding the function of the target means.

24. A peripheral device, comprising:

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device;

means for enabling communication between the security means and the target means;

means for enabling communication with a host computing device; and

means for providing to a host computing device, in response to a request from the host computing device for information regarding the type of the peripheral device, information regarding the function of the target.

25. A peripheral device as in claim 24, wherein the target means comprises means for non-volatilely storing data.

26. A peripheral device as in claim 25, wherein the means for non-volatilely storing data further comprises a solid-state disk storage device.

27. A peripheral device as in claim 26, wherein the solid-state disk storage device comprises an ATA format flash disk drive.

28. A peripheral device as in claim 24, wherein the target means comprises means for enabling communication between the host computing device and a remote device.

29. A peripheral device as in claim 28, wherein the means for enabling communication between the host computing device and a remote device further comprises wireless communication means.

30. A peripheral device as in claim 29, wherein the wireless communication means comprises a wireless modem.

31. A peripheral device as in claim 29, wherein the wireless communication means comprises a wireless LAN transceiver.

32. A peripheral device as in claim 24, wherein the target means comprises a biometric device.

33. A peripheral device as in claim 32, wherein the biometric device comprises a fingerprint scanning device.

34. A peripheral device as in claim 32, wherein the biometric device comprises a retinal scanning device.

35. A peripheral device as in claim 24, wherein the target means comprises means for communicating with a smart card.

36. A data security system, comprising:

a host computing device including one or more device interfaces adapted to enable communication with another device;

a peripheral device, comprising;

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device; and

means for enabling communication between the security means and the target means;

means for enabling communication with a host computing device; and

means for mediating communication of data between the host computing device and the target means so that the communicated data must first pass through the security means.

37. A data security system, comprising:

a host computing device including one or more device interfaces adapted to enable communication with another device;

a peripheral device, comprising;

security means for enabling one or more security operations to be performed on data;

target means for enabling a defined interaction with a host computing device; and

means for enabling communication between the security means and the target means;

means for enabling communication with a host computing device; and

means for providing to a host computing device, in response to a request from the host computing device for information regarding the type of the peripheral device, information regarding the function of the target means.

38. For use in a peripheral device adapted for communication with a host computing device, performance of one or more security operations on data, and interaction with a host computing device in a defined way, a method comprising the steps of:

receiving a request from a host computing device for information regarding the type of the peripheral device; and

providing to the host computing device, in response to the request, information regarding the type of the defined interaction.

39. For use in a peripheral device adapted for communication with a host computing device, performance of one or more security operations on data, and interaction with a host computing device in a defined way, a method comprising the steps of:

communicating with the host computing device to exchange data between the host computing device and the peripheral device;

performing one or more security operations and the defined interaction on the exchanged data; and

mediating communication of the exchanged data between the host computing device and the peripheral device so that the exchanged data must first sass through means for performing the one or more security operations.