Apparatus, method and system for a tunneling client access point

• US 7,861,006 B2
• Filed: 03/23/2004
• Issued: 12/28/2010
• Est. Priority Date: 03/23/2004
• Status: Active Grant

• Current Assignee: IOENGINE, LLC
• Original Assignee: Scott Mcnulty
• Inventors: McNulty, Scott
• Primary Examiner(s): Neurauter, Jr.; George C
• Assistant Examiner(s): BILGRAMI, ASGHAR H
• Application Number:
  US10/807,731
• Publication Number:
  US 20050213597A1
• Time in Patent Office: 2,471 Days
• Field of Search: 709/220, 709/250, 713/150
• US Class Current: 709/250
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The disclosure details the implementation of a tunneling client access point (TCAP) that is a highly secure, portable, power efficient storage and data processing mechanism. The TCAP “tunnels” data through an access terminal'"'"'s (AT) input/output facilities. In one embodiment, the TCAP has no user input or output peripherals. The TCAP connects to an access terminal and a user employs the AT'"'"'s user input peripherals for input, and views the TCAPs activities on the AT'"'"'s display. This enables the user to observe data stored on the TCAP without it being resident on the AT, which can be useful to maintain higher levels of data security. Also, the TCAP may tunnel data through an AT across a communications network to access remote servers. The disclosure teaches how to allow users to employ traditional large user interfaces that users are already comfortable with. The disclosure, also, teaches a plug-n-play virtual private network (VPN).

Claims

1. A portable tunneling storage and processing apparatus, comprising:

(a) a conduit for external communications configured to enable the transmission of a plurality of communications between the portable apparatus and a terminal comprising a terminal processor, a first input component, a first output component comprising a display device, and a network interface configured to enable the terminal to communicate with at least one network server, wherein the conduit for external communications is a universal serial bus conduit;

(b) a processor; and

(c) a memory configured to communicate with the portable apparatus processor, wherein the memory has a unique apparatus identifier and a plurality of processing instructions stored thereon, including;

(1) a first set of processing instructions, which when executed by the terminal processor, enables a user to employ the first input component and the terminal display device to interact with the portable apparatus and provides the portable apparatus with access to the terminal network interface;

(2) at least one processing instruction, which when executed, causes an interactive user interface to be presented on the terminal display device, wherein the interactive user interface is configured to enable the user to;

(i) cause the portable apparatus processor to execute a set of processing instructions stored on the portable apparatus memory; and

(ii) cause the portable apparatus to transmit a request to access a server; and

(3) at least one processing instruction, which when executed by the portable apparatus processor in response to receiving a command resulting from user interaction with the interactive user interface, (i) causes the portable apparatus processor to execute a second set of processing instructions stored on the portable apparatus memory and effect the display of processing activity of the second set of processing instructions on the terminal display device, and (ii) causes the portable apparatus to transmit a request to access a server;

wherein the portable apparatus is configured to communicate with the terminal and to communicate through the terminal network interface with a server, and

wherein the portable apparatus processor is configured to facilitate the storage of encrypted data on the portable apparatus memory, encrypt communications transmitted by the portable apparatus, and decrypt encrypted communications received by the portable apparatus.

5. The portable apparatus of claim 1, wherein the portable apparatus is configured to employ a security protocol to encrypt communications transmitted by the portable apparatus.

6. The portable apparatus of claim 5, wherein the security protocol is selected from the group consisting of checksum, Data Encryption Standard (DES), Elliptical Curve Encryption (ECC), International Data Encryption Algorithm (IDEA), Message Digest 5 (MD5) passwords, Rivest Cipher (RC5), Rijndael, RSA, Secure Hash Algorithm (SHA), Secure Socket Layer (SSL), Secure Hypertext Transfer Protocol (HTTPS) and the like.

7. The portable apparatus of claim 1, wherein the portable apparatus is configured to employ a cryptographic technique to encrypt communications transmitted by the portable apparatus.

8. The portable apparatus of claim 7, wherein the cryptographic technique is selected from the group consisting of digital certificates, digital signatures, dual signatures, enveloping, password access protection, public key management and the like.

9. The portable apparatus of claim 1, wherein the portable apparatus is configured to employ the unique apparatus identifier to encrypt communications transmitted by the portable apparatus.

10. The portable apparatus of claim 1, wherein the portable apparatus memory is configured to store user authentication information.

11. The portable apparatus of claim 10, wherein the plurality of processing instruction stored on the portable apparatus memory includes a fourth set of processing instructions, which when executed, performs user authentication based on a comparison of user authentication information inputted by a user and user authentication information stored on the portable apparatus memory.

12. The portable apparatus of claim 1, wherein the terminal comprises a video memory and the display of the processing activity of the second set of processing instructions on the terminal display device occurs directly on the terminal video memory.

2. The portable apparatus of 1, wherein the plurality of processing instructions stored on the portable apparatus memory includes a third set of processing instructions, which when executed, presents the interactive user interface on the terminal display device.

3. The portable apparatus of claim 2, wherein the third set of processing instructions is executed by the portable apparatus processor.

4. The portable apparatus of claim 2, wherein the third set of processing instructions is executed by the terminal processor.

13. A method implemented on a portable apparatus comprising a processor, a memory having a unique apparatus identifier and a plurality of processing instructions stored thereon, and a universal serial bus conduit for enabling the transmission of a plurality of communications between the portable apparatus and a terminal comprising a terminal processor, an input component, an output component comprising a display device, and a network interface configured to enable the terminal to communicate with at least one network server, the method comprising:

(a) providing the terminal with access to a first set of processing instructions stored on the portable apparatus memory, which when executed by the terminal processor, enables a user to employ the first input component and the terminal display device to interact with the portable apparatus and provides the portable apparatus with access to the terminal network interface;

(b) executing at least one processing instruction stored on the portable apparatus memory to cause an interactive user interface to be presented on the terminal display device, wherein the interactive user interface is configured to enable the user to;

(1) cause the portable apparatus processor to execute a second set of processing instructions stored on the portable apparatus memory; and

(2) cause the portable apparatus to transmit a request to access a server;

(c) executing a second set of processing instructions stored on the portable apparatus memory in response to receiving a command resulting from user interaction with the interactive user interface;

(d) transmitting a communication through the terminal network interface to request access to a server in response to receiving a command resulting from user interaction with the interactive user interface;

(e) effecting the display of processing activity of the second set of processing instructions on the terminal display device;

(f) facilitating the storage of encrypted data on the portable apparatus memory;

(g) encrypting communications transmitted by the portable apparatus; and

(h) decrypting encrypted communications received by the portable apparatus.

14. The method of claim 13, further comprising executing a third set of processing instructions stored on the portable apparatus memory to present the interactive user interface on the terminal display device.

15. The method of claim 14, further comprising executing the third set of processing instructions on the portable apparatus processor.

16. The method of claim 14, further comprising executing the third set of processing instructions on the terminal processor.

17. The method of claim 13, further comprising employing a security protocol to encrypt communications transmitted by the portable apparatus.

18. The method of claim 13, further comprising employing a cryptographic technique to encrypt communications transmitted by the portable apparatus.

19. The method of claim 13, further comprising employing the unique apparatus identifier to encrypt communications transmitted by the portable apparatus.

20. A non-transitory computer readable medium containing a plurality of processing instructions to be executed by a computer system comprising a portable device and a terminal, the portable device comprising a universal serial bus conduit for enabling the transmission of a plurality of communications between the portable apparatus and the terminal, a processor and a memory configured to communicate with the processor, and the terminal comprising a terminal processor, an input component, an output component comprising a display device, and a network interface configured to enable the terminal to communicate with at least one network server, the plurality of processing instructions comprising:

(a) a first set of processing instructions, which when executed by the terminal processor, enables a user to employ the first input component and the terminal display device to interact with the portable apparatus and provides the portable apparatus with access to the terminal network interface;

(b) at least one processing instructions, which when executed, causes an interactive user interface to be presented on the terminal display device, wherein the interactive user interface is configured to enable the user to;

(1) cause the portable apparatus processor to execute a set of processing instructions stored on the portable apparatus memory; and

(2) cause the portable apparatus to transmit a request to access a server;

(c) at least one processing instruction, which when executed by the portable apparatus processor in response to receiving a command resulting from user interaction with the interactive user interface, (1) causes the portable apparatus processor to execute a second set of processing instructions stored on the portable apparatus memory and effect the display of processing activity of the second set of processing instructions on the terminal display device, and (2) causes the portable apparatus to transmit a request to access a server; and

(d) at least one processing instruction, which when executed by the portable apparatus processor, facilitates the storage of encrypted data on the portable apparatus memory, encrypts communications transmitted by the portable apparatus, and decrypts encrypted communications received by the portable apparatus.

21. The non-transitory computer readable medium of claim 20, wherein the at least one processing instructions, which when executed, causes an interactive user interface to be presented on the terminal display device comprises a third set of processing instructions, which when executed, presents the interactive user interface on the terminal display device.

22. The non-transitory computer readable medium of claim 21, wherein the third set of processing instructions is executed by the portable apparatus processor.

23. The non-transitory computer readable medium of claim 21, wherein the third set of processing instructions is executed by the terminal processor.

24. A tunneling, storage and processing system implementing a terminal having a terminal processor, an input device, an output device comprising a display device, and a network interface configured to enable the terminal to communicate with at least one network server, the system comprising:

(a) a server comprising a storage device; and

(b) a portable apparatus comprising a universal serial bus conduit for enabling the transmission of a plurality of communications between the portable apparatus and the terminal, a processor and a memory configured to communicate with the processor, wherein the memory has a unique apparatus identifier and a plurality of processing instructions stored thereon, the portable device configured to;

(1) provide the terminal with access to a first set of processing instructions stored on the portable apparatus memory, which when executed by the terminal processor, enables a user to employ the first input component and the terminal display device to interact with the portable apparatus and provides the portable apparatus with access to the terminal network interface;

(2) execute at least one processing instruction stored on the portable apparatus memory to cause an interactive user interface to be presented on the terminal display device, wherein the interactive user interface is configured to enable the user to;

(i) cause the portable apparatus processor to execute a second set of processing instructions stored on the portable apparatus memory; and

(ii) cause the portable apparatus to transmit a request to access a server;

(3) execute a second set of processing instructions stored on the portable apparatus memory in response to receiving a command resulting from user interaction with the interactive user interface;

(4) transmit a communication through the terminal network interface to request access to a server in response to receiving a command resulting from user interaction with the interactive user interface;

(5) effect the display of processing activity of the second set of processing instructions on the terminal display device;

(6) facilitate the storage of encrypted data on the portable apparatus memory;

(7) encrypt communications transmitted by the portable apparatus; and

(8) decrypt encrypted communications received by the portable apparatus.

25. The tunneling, storage and processing system of claim 24, wherein the portable apparatus is configured to execute a third set of processing instructions stored on the portable apparatus memory to present the interactive user interface on the terminal display device.

26. The tunneling, storage and processing system of claim 24, wherein the portable apparatus is configured to cause the terminal processor to execute a third set of processing instructions stored on the portable apparatus memory to present the interactive user interface on the terminal display device.

27. The tunneling, storage and processing system of claim 24, wherein the portable apparatus is further configured to employ a security protocol to encrypt communications transmitted by the portable apparatus.

28. The tunneling, storage and processing system of claim 24, wherein the portable apparatus is further configured to employ a cryptographic technique to encrypt communications transmitted by the portable apparatus.

29. The tunneling, storage and processing system of claim 24, wherein the portable apparatus is further configured to employ the unique apparatus identifier to encrypt communications transmitted by the portable apparatus.