Method and system for functionally connecting a personal device to a host computer

• US 20030087601A1
• Filed: 11/05/2002
• Published: 05/08/2003
• Est. Priority Date: 11/05/2001
• Status: Abandoned Application

• Current Assignee: Aladdin Knowledge Systems Limited (Thales SA)
• Original Assignee: Aladdin Knowledge Systems Limited (Thales SA)
• Inventors: Margalit, Yanki, Margalit, Dany, Agam, Leedor
• Application Number:
  US10/287,690
• Publication Number:
  US 20030087601A1
• Time in Patent Office: Days
• US Class Current: 455/39
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

In one aspect, the present invention is directed to an apparatus, system and method for communicating between a personal device and a host computer. The apparatus comprises means for wireless communication, for enabling communication with a personal device (which also comprises means for wireless communication) and means for wired communication for enabling communication with the host computer (which also comprises means for wired communication). A controller installed within the apparatus, controls the data transfer between the wireless and wired communication interfaces of the apparatus. The controller may perform additional computing operations, such as security related operations (e.g. digitally signing a document, ciphering, and so forth). The apparatus may further comprise a smartcard chip, for securely storing information, and also for performing the additional computing operations.

Implementations of the invention can be carried out in order to functionally connect a personal device, such as PDA, mobile phone, and so forth, to a host computer, or with an application executed on the host computer. The apparatus may be used to for security implementations, e.g. provision of PINs, keys, passwords, digitally signing of documents, and so forth. The personal device may also be used as input means for the apparatus, thereby enabling a large number of implementations, including applications with relevancy to cellular telephony.

Claims

1. An apparatus for enabling communication between a personal device coupled with a wireless proximity communication interface and a host computer coupled with a wired communication interface, comprising:

a wired communication interface, corresponding to said wired communication interface of said host computer, for enabling communication between said apparatus and said host computer;

a wireless proximity communication interface, corresponding to the wireless proximity communication interface of said personal device, for enabling communication between said apparatus and said personal device; and

a controller, for enabling communication between said wired interface of said apparatus and said wireless proximity communication interface of said apparatus.

2. An apparatus according to claim 1, wherein said wireless proximity communication is selected from a group comprising proximity radio signals and infrared signals.

3. An apparatus according to claim 2, wherein said proximity radio signal corresponds to a protocol selected from a group comprising Bluetooth protocol, ISO 14443 and RFID.

4. An apparatus according to claim 2, wherein said infrared signals correspond to IrDA protocol.

5. An apparatus according to claim 1, wherein said wired communication interface is selected from a group comprising USB, serial data communication and parallel data communication interfaces.

6. An apparatus according to claim 1, further comprising a processing device, for performing operations selected from a group comprising computing operations, secure computing operations, storing data, and securely storing data.

7. A apparatus according to claim 6, wherein said processing device is a smartcard chip.

8. An apparatus according to claim 7, wherein said secure computing operations are selected from a group comprising encryption, decryption, cipher, ECC, RSA, PKI, DES, MD5 and RC4.

9. An apparatus according to claim 1, wherein said computing operations enable converting between data that corresponds to said wireless proximity communication interface and data that corresponds to said wired communication interface.

10. A system for enabling communication between a personal device coupled with a wireless proximity communication interface and a host computer, the host computer being coupled with a wired communication interface, comprising:

apparatus for enabling communication between the personal device and the host computer, said apparatus comprising a wired communication interface, corresponding to the wired communication interface of said host computer, for enabling communication between said apparatus and said host computer;

a wireless proximity communication interface, corresponding to the wireless proximity communication interface of said personal device, for enabling communication between said apparatus and the personal device; and

a controller, for enabling communication between said wired interface of said apparatus and said wireless proximity interface of said apparatus; and

an agent, being executed by said host computer, for interacting with said wired communication interface and with at least one component of said host computer;

thereby enabling communicating of said personal device with said host computer.

11. A system according to claim 10, wherein said component is selected from a group comprising hardware elements and software elements.

12. A system according to claim 10, further comprising a processing device, being a part of said apparatus, for enabling the operations selected from a group comprising computing operations, secure computing operations, storing data, securely storing data, and security related operations.

13. A system according to claim 12, wherein said processing device is a smartcard chip.

14. A system according to claim 12, wherein said security related operations are selected from a group comprising ECC, RSA, PKI, DES, and digitally signing a document.

15. A system according to claim 10, wherein said agent is selected from a group comprising an EXE file, a script, a plug-in and an injected code within a third application.

16. A system according to claim 10, wherein said controller enables performing of computing operations.

17. A system according to claim 10, wherein said agent is used for the operations selected from a group comprising:

providing a PIN received from said personal device to said application, executing a third application, communicating with an application being executed by said host computer, retrieving and altering data stored within said host computer or accessible by said host computer, processing data received from said personal device, executing at least one request contained within said data, digitally signing a document.

18. A system according to claim 17, wherein executing said request is implemented using an application being executed by said host computer.

19. A system according to claim 17, wherein executing said request is implemented using a security-related application.

20. A system according to claim 10, wherein said agent executes code for accessing an application using a PIN received from said personal device.

21. A system according to claim 20, wherein said application is a logon-related application, thereby enabling secure logon using said personal device.

22. A method for functionally connecting a personal device to an application executed by a host computer system, comprising:

a) providing an apparatus for communicating between said personal device and said host computer, said apparatus comprising a wired communication interface, corresponding to the wired communication interface of the host computer, for enabling communication between said apparatus and the host computer;

a wireless proximity communication interface, corresponding to the wireless proximity communication interface of the personal device, for enabling communication between said apparatus and the personal device; and

a controller, for enabling communication between said wired interface of said apparatus and said wireless proximity interface of said apparatus;

b) holding a communication session between said apparatus and said host computer via the wireless communication means of said personal device and the wireless communication means of said apparatus, thereby conveying data between said personal device and said apparatus; and

c) holding a communication session between said apparatus and said host computer via the wired communication means of said apparatus and wired communication means of said host computer, thereby conveying data between said apparatus and said host computer;

23. A method according to claim 22, further comprising converting data received through the wireless communication session to a format suitable to said wired communication session.

24. A method according to claim 22, wherein said data is a PIN.

25. A method according to claim 22, wherein said data is pre-stored within said personal device and/or generated by said personal device.

26. A method according to claim 22, further comprising processing said data by processing means within said security token before said data reaches to said computer system.

27. A method according to claim 26, wherein said processing enables the operations selected from a group comprising security-related operations, PIN entry, secure PIN entry, logon to an application, secure logon to an application, digital signature, and authentication.