Personal encryption device

• US 8,516,609 B2
• Filed: 02/11/2011
• Issued: 08/20/2013
• Est. Priority Date: 02/11/2011
• Status: Active Grant

• Current Assignee: Bank Of America NA (Bank of America Corp.)
• Original Assignee: Bank of America Corp.
• Inventors: Woodward, Richard John, Adams, Amanda Jane
• Primary Examiner(s): SIMITOSKI, MICHAEL J
• Application Number:
  US13/025,507
• Publication Number:
  US 20120210122A1
• Time in Patent Office: 921 Days
• Field of Search: 713/150, 713/151, 713/192, 726/33, 705/55
• US Class Current: 726/33
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

A method and system for securing a handheld computing device is described. A personal encryption device may be physically connected to a handheld computing device. Responsive to the connection, a main screen user interface may be displayed on a display of the handheld computing device. The main screen user interface may include at least one cryptography option for a user of the handheld computing device. A user-defined input representative of selection of a first cryptography option of the at least one cryptography option may be received, and at least one cryptography process associated with the selected first cryptography option may be implemented by the handheld computing device and personal encryption device. The cryptography options may include encryption, decryption, digital signatures, and digital signature verification.

Claims

1. A method comprising:

receiving, at a handheld computing device from a personal encryption device, data for operating the handheld computing device with the personal encryption device, the data for operating the handheld computing device with the personal encryption device including a PK certificate of the personal encryption device;

physically connecting the personal encryption device to the handheld computing device;

responsive to the connecting, displaying a main screen user interface on a display of the handheld computing device, the main screen user interface including at least one cryptography option for a user of the handheld computing device;

receiving, at the handheld computing device, a user-defined input representative of selection of a first cryptography option of the at least one cryptography option;

implementing, by the handheld computing device and the personal encryption device, at least one cryptography process associated with the selected first cryptography option;

maintaining the PK certificate on the handheld computing device;

determining whether the personal encryption device has been disconnected from the handheld computing device; and

responsive to determining the personal encryption device has been disconnected from the handheld computing device, encrypting at least one of;

a document, a folder, and a directory with a key of the PK certificate of the personal encryption device maintained on the handheld computing device.

2. The method of claim 1, wherein the selected first cryptography option is an option to encrypt the at least one of:

a document, a folder, a directory, and an e-mail, the implementing including encrypting the at least one document, folder, directory, and e-mail.

3. The method of claim 1, wherein the selected first cryptography option is an option to decrypt the at least one of:

a document, a folder, a directory, and an e-mail, the implementing including decrypting the at least one document, folder, directory, and e-mail.

4. The method of claim 1, wherein the selected first cryptography option is an option to digitally sign a document or verify a digitally signed document, the implementing including digitally signing the document with a private key on the personal encryption device or verifying the digitally signed document from an external source.

5. The method of claim 4, wherein the implementing further comprising emailing, by the handheld computing device, the digitally signed document with a copy of the PK certificate of the personal encryption device.

6. The method of claim 1, wherein the selected first cryptography option is an option to enable a secure connection using a private key on the personal encryption device using one of an SSL connection or through a virtual private network, the implementing including validating the SSL connection or connecting to the virtual private network.

7. The method of claim 1, further comprising receiving, at the handheld computing device, a PK certificate of a recipient, wherein the selected first cryptography option is an option to encrypt an e-mail to the recipient, the implementing including encrypting the e-mail with a key of the PK certificate of the recipient.

8. An apparatus comprising:

at least one processor; and

at least one memory having stored therein computer executable instructions, that when executed by the at least one processor, cause the apparatus to perform a method of;

transmitting data for operating a handheld computing device with the apparatus, the handheld device being physically connected to the apparatus and the data including a PK certificate of the apparatus and instructions for rendering a main screen user interface on a display of the handheld computing device, the main screen user interface including at least one cryptography option for a user of the handheld computing device;

implementing, by the apparatus and the handheld computing device, at least one cryptography process associated with a selected first cryptography option of the at least one cryptography option;

maintaining the PK certificate on the handheld computing device;

determining whether the apparatus has been disconnected from the handheld computing device; and

responsive to determining that the apparatus has been disconnected from the handheld computing device, encrypting at least one of;

a document, a folder, and a directory with a key of the PK certificate of the apparatus maintained on the handheld computing device.

9. The apparatus of claim 8, wherein the selected first cryptography option is an option to encrypt or decrypt the at least one of:

a document, a folder, a directory, and an e-mail, the implementing including encrypting or decrypting the at least one document, folder, directory, and e-mail.

10. The apparatus of claim 8, wherein the selected first cryptography option is an option to digitally sign a document or verify a digitally signed document, the implementing including digitally signing the document with a private key on the apparatus or verifying the digitally signed document from an external source.

11. The apparatus of claim 8, wherein the selected first cryptography option is an option to enable a secure connection using a private key on the apparatus using one of an SSL connection or through a virtual private network, the implementing including validating the SSL connection or connecting to the virtual private network.

12. The apparatus of claim 8, the at least one memory having stored therein computer executable instructions, that when executed by the at least one processor, further cause the apparatus to perform transmitting a PK certificate of a recipient, wherein the selected first cryptography option is an option to encrypt an e-mail to the recipient, the implementing including encrypting the e-mail with a key of the PK certificate of the recipient.

13. One or more non-transitory computer-readable media storing computer-readable instructions that, when executed by at least one processor, cause the at least one processor to perform a method of:

transmitting data for operating a handheld computing device with the processor, the handheld computing device being physically connected to the processor and the data including a PK certificate of the processor and instructions for rendering a main screen user interface on a display of the handheld computing device, the main screen user interface including at least one cryptography option for a user of the handheld computing device;

implementing, by the processor and handheld computing device, at least one cryptography process associated with a selected first cryptography option of the at least one cryptography option;

maintaining the PK certificate on the handheld computing device;

determining whether the processor has been disconnected from the handheld computing device;

responsive to determining that the processor has been disconnected from the handheld computing device, encrypting at least one of;

a document, a folder, and a directory with a key of the PK certificate of the processor maintained on the handheld computing device.

14. The one or more non-transitory computer-readable media of claim 13, wherein the selected first cryptography option is an option to encrypt or decrypt the at least one of:

a document, a folder, a directory, and an e-mail, the implementing including encrypting or decrypting the at least one document, folder, directory, and e-mail.

15. The one or more non-transitory computer-readable media of claim 13, wherein the selected first cryptography option is an option to digitally sign a document or verify a digitally signed document, the implementing including digitally signing the document with a private key on the apparatus or verifying the digitally signed document from an external source.

16. The one or more non-transitory computer-readable media of claim 13, wherein the selected first cryptography option is an option to enable a secure connection using a private key on the apparatus using one of an SSL connection or through a virtual private network, the implementing including validating the SSL connection or connecting to the virtual private network.

17. The one or more non-transitory computer-readable media of claim 13, the computer executable instructions, that when executed by the at least one processor, further cause the processor to perform transmitting a PK certificate of a recipient, wherein the selected first cryptography option is an option to encrypt an e-mail to the recipient, the implementing including encrypting the e-mail with a key of the PK certificate of the recipient.