Protecting sensitive information using a trusted device

• US 9,654,452 B2
• Filed: 11/10/2014
• Issued: 05/16/2017
• Est. Priority Date: 11/11/2013
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wang, Xi Qing, Yang, Zhen Xiang, Zhao, Shiwan, Li, Qining, Yan, Yan
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): BEHESHTI SHIRAZI, SAYED ARESH
• Application Number:
  US14/537,272
• Publication Number:
  US 20160352704A1
• Time in Patent Office: 918 Days
• Field of Search: 713171, 726 3, 726 4, 726 6
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

The invention relates to information processing field, and discloses a method for protecting sensitive information, comprising: receiving first information transmitted by an untrusted device, where the first information enables the sensitive information to be transmitted from a trusted device to a server; receiving the sensitive information input by a user; generating second information based on the first information and the sensitive information; encrypting at least the sensitive information in the second information with a first secret key, wherein the first secret key meets one of the following: the untrusted device does not know the first secret key; and the untrusted device knows the first secret key but is unable use the first secret key to decrypt the encrypted sensitive information; and transmitting the second information containing the encrypted sensitive information to the untrusted device for forwarding to the server indicated by the first information.

Claims

1. A method for protecting sensitive information, the method comprising:

receiving first information transmitted by an untrusted device, where the first information enables the sensitive information to be transmitted from a trusted device to a server;

receiving the sensitive information input by a user;

generating second information based on the first information and the sensitive information;

encrypting at least the sensitive information in the second information with a first secret key;

transmitting the second information containing the encrypted sensitive information to the untrusted device for forwarding to the server indicated by the first information;

receiving an authentication identification originated from the server and forwarded by the untrusted device;

decrypting the authentication identification; and

transmitting the decrypted authentication identification to the untrusted device to enable the untrusted device to use the authentication identification to communicate with the server;

wherein the first secret key meets one of the following;

the untrusted device does not know the first secret key; and

the untrusted device knows the first secret key but is unable use the first secret key to decrypt the encrypted sensitive information.

2. The method according to claim 1, further comprising:

establishing a connection with the server;

wherein the first secret key includes a secret key of a symmetric encryption algorithm determined during the process of establishing a connection with the server.

3. The method according to claim 1, further comprising:

receiving a public key of the server transmitted by the untrusted device;

wherein the first secret key includes the public key of the server.

4. A trusted device for protecting sensitive information, the trusted device comprising one or more hardware processors configured to execute the following program instructions:

first program instructions programmed to receive first information transmitted by an untrusted device, where the first information enables the sensitive information to be transmitted from a trusted device to a server;

second program instructions programmed to receive the sensitive information input by a user;

third program instructions programmed to generate second information based on the first information and the sensitive information;

fourth program instructions programmed to encrypt at least the sensitive information in the second information with a first secret key;

fifth program instructions programmed to transmit the second information containing the encrypted sensitive information to the untrusted device for forwarding to the server indicated by the first information;

sixth program instructions programmed to receive an authentication identification originated from the server and forwarded by the untrusted device;

seventh program instructions programmed to decrypt the authentication identification; and

eighth program instructions programmed to transmit the decrypted authentication identification to the untrusted device to enable the untrusted device to use the authentication identification to communicate with the server;

wherein the first secret key meets one of the following;

the untrusted device does not know the first secret key; and

the untrusted device knows the first secret key but is unable use the first secret key to decrypt the encrypted sensitive information.

5. The trusted device according to claim 4, further comprising:

sixth program instructions programmed to establish a connection with the server;

wherein the first secret key includes a secret key of a symmetric encryption algorithm determined during the process of establishing a connection with the server.

6. The trusted device according to claim 4, further comprising:

sixth program instructions programmed to receive a public key of the server transmitted by the untrusted device;

wherein the first secret key includes the public key of the server.

7. A computer system for protecting sensitive information, the computer system comprising:

an untrusted device; and

a trusted device;

wherein the trusted device comprises modules configured to execute the following program instructions;

first program instructions programmed to receive first information transmitted by the untrusted device, where the first information enables the sensitive information to be transmitted from the trusted device to a server;

second program instructions programmed to receive the sensitive information input by a user;

third program instructions programmed to generate second information based on the first information and the sensitive information;

fourth program instructions programmed to encrypt at least the sensitive information in the second information with a first secret key;

fifth program instructions programmed to transmit the second information containing the encrypted sensitive information to the untrusted device for forwarding to the server indicated by the first information;

sixth program instructions programmed to receive an authentication identification originated from the server and forwarded by the untrusted device;

seventh program instructions programmed to decrypt the authentication identification; and

eighth program instructions programmed to transmit the decrypted authentication identification to the untrusted device to enable the untrusted device to use the authentication identification to communicate with the server; and

wherein the first secret key meets one of the following;

the untrusted device does not know the first secret key; and

the untrusted device knows the first secret key but is unable use the first secret key to decrypt the encrypted sensitive information.

8. The computer system according to claim 7, further comprising:

sixth program instructions programmed to establish a connection with the server;

wherein the first secret key includes a secret key of a symmetric encryption algorithm determined during the process of establishing a connection with the server.

9. The computer system according to claim 7, further comprising:

sixth program instructions programmed to receive a public key of the server transmitted by the untrusted device;

wherein the first secret key includes the public key of the server.