Data processing system and method for maintaining secure data blocks

• US 7,155,605 B1
• Filed: 03/31/1999
• Issued: 12/26/2006
• Est. Priority Date: 03/31/1999
• Status: Expired due to Term

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Cromer, Daryl Carvis, Locker, Howard, Ward, James Peter, Trotter, Andy Lloyd
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US09/281,852
• Time in Patent Office: 2,827 Days
• Field of Search: 713/151, 713/200, 713/201, 713/165, 713/167, 709/203, 709/225, 709/229, 380/277, 380/255, 707 9- 10, 726/3
• US Class Current: 713/151
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A data processing system and method are disclosed for maintaining a secure data block within the system. A block of data is established within the system. The block of data is associated with a particular user and a particular application. A hardware master key pair is established for the system. The hardware master key pair includes a master private key and a master public key. The hardware master key pair is associated with the system for which it was established so that the master private key is known to only that system. The block of data is encrypted utilizing the master public key. The master private key is required to decrypt the encrypted block of data. This data processing system is the only system capable of decrypting the encrypted block of data.

Claims

1. A method for protecting the security of a cookie stored within a data processing system, said method comprising:

storing a encryption key pair having a private key and a public key in a protected storage device within said data processing system;

in response to the receipt of a cookie generated by an application from a remote server, encrypting said cookie with said public key;

storing said encrypted cookie in a non-protected storage device within said data processing system;

in response to an access request for said encrypted cookie by a browser program executing within said data processing system, decrypting said encrypted cookie with said private key; and

sending said decrypted cookie to said browser program.

2. The method according to claim 1, wherein said non-protected storage device is a hard drive.

3. The method according to claim 1, further comprising providing an encryption device having an encryption engine and said protected storage device accessible only through said encryption engine.

4. The method according to claim 3, wherein said encrypting further include encrypting said cookie utilizing said encryption device.

5. The method according to claim 4, wherein said decrypting further includes decrypting said encrypted cookie utilizing said encryption device.

6. The method according to claim 5, wherein said sending further includes transmitting said decrypted cookie from said encryption device to said browser program.

7. The method according to claim 6, further comprising transmitting said decrypted cookie from said browser program to an application executing in a remote server.

8. A data processing system capable of protecting the security of a cookie stored within said data processing system, said data processing comprising:

a protected storage device for storing a encryption key pair having a private key and a public key in a protected storage device within said data processing system;

means for utilizing said public key to encrypt said cookie, in response to the receipt of a cookie generated by an application from a remote server;

a non-protected storage device within said data processing system for storing encrypted cookie;

means for utilizing said private key to decrypt said encrypted cookie, in response to an access request for said encrypted cookie by a browser program executing within said data processing system; and

means for sending said decrypted cookie to said browser program.

9. The data processing system according to claim 8, wherein said non-protected storage device is a hard drive.

10. The data processing system according to claim 8, further comprising an encryption device having an encryption engine and said protected storage device accessible only through said encryption engine.

11. The data processing system according to claim 10, wherein said means for utilizing said public key to encrypt said cookie is said encryption engine.

12. The data processing system according to claim 11, wherein said means for utilizing said private key to decrypt said encrypted cookie is said encryption device.

13. The data processing system according to claim 12, wherein said sending means further includes means for transmitting said decrypted cookie from said encryption device to said browser program.

14. The data processing system according to claim 13, further comprising means for transmitting said decrypted cookie from said browser program to an application executing in a remote server.