System and Method for Providing Data and Device Security Between External and Host Devices

• US 20080276302A1
• Filed: 03/05/2008
• Published: 11/06/2008
• Est. Priority Date: 12/13/2005
• Status: Abandoned Application

• Current Assignee: CUPP Computing AS
• Original Assignee: Yoggie Security Systems, Ltd. (CUPP Computing AS)
• Inventors: Touboul, Shlomo
• Application Number:
  US12/042,938
• Publication Number:
  US 20080276302A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: G06F 13/4282 on a serial bus, e.g. I2C bus, SPI bus on daisy chain buses G06F13/4247
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A secure data exchange system comprising a security device including a first external device plug, and a security engine operative to enforce a security policy on data transfer requests received from the host; an external device including a second external device plug; and a host including a first external device port operative to communicatively couple with the first external device plug, a second external device port operative to communicatively couple with the second external device plug, and a driver, e.g., a redirect driver, operative to transfer a data transfer request to the security device before executing the data transfer request.

Claims

1. A security device, comprising:

an external device plug operative to communicatively couple with a host;

an external device port operative to communicatively couple with an external device;

a processor; and

memory storing

an operating system,

an external device driver operative to control communication with the external device, and

a security engine operative to enforce a security policy on a data transfer request between the external device and the host.

2. The security device of claim 1, wherein the security device is operative with a driver on the host.

3. The security device of claim 1, wherein at least one of the external device plug and the external device port follows a USB standard.

4. The security device of claim 1, wherein at least one of the external device plug and the external device port includes a wireless connection.

5. The security device of claim 1, wherein the security engine protects against the transfer of at least one of viruses, spyware and adware.

6. The security device of claim 1, wherein the security engine protects against the unauthorized transfer of private data.

7. A secure data exchange system, comprising:

a security device including

a first external device plug; and

a security engine operative to enforce a security policy on data transfer requests received from the host;

an external device including

a second external device plug; and

a host including

a first external device port operative to communicatively couple with the first external device plug;

a second external device port operative to communicatively couple with the second external device plug; and

a redirect driver operative to transfer a data transfer request from the host to the security device before executing the data transfer request.

8. The secure data exchange system of claim 7, wherein the external device includes a USB drive.

9. The secure data exchange system of claim 7, wherein the external device includes one of a PDA or a cell phone.

10. The secure data exchange system of claim 7, wherein the host includes one of a laptop, desktop, PDA or cell phone.

11. The secure data exchange system of claim 7, wherein the host launches the redirect driver upon detecting connection of the secure device to the host.

12. A method comprising:

communicatively coupling a security device to a host;

communicatively coupling an external device to the security device;

receiving by the security device a data transfer request from the host; and

enforcing by the security device a security policy on the data transfer request before allowing the data transfer request to be performed.

13. The method of claim 12, wherein the communicatively coupling a security device to a host includes using a wired or wireless connection.

14. The method of claim 12, wherein the communicatively coupling an external device to the host includes using a wired or wireless connection.

15. The method of claim 12, wherein the data transfer request includes a request to transfer data from the host to the external device.

16. The method of claim 12, wherein the data transfer request includes a request to transfer data from the external device to the host.

17. The method of claim 12, wherein the enforcing includes reviewing the data being transferred for at least one of viruses, spyware and adware.

18. The method of claim 12, wherein the enforcing includes determining whether the data transfer request includes a request for private data.

19. The method of claim 18, wherein the enforcing includes requiring an additional security check before allowing the transfer of private data.

20. A method, comprising:

communicatively coupling a security device to a host;

communicatively coupling an external device to the host;

receiving by the host a data transfer request;

using a redirect driver on the host to redirect the data transfer request to the security device; and

enforcing by the security device a security policy on the data transfer request before allowing the data transfer request to be performed.

21. The method of claim 20, wherein the communicatively coupling a security device to a host includes using a wired or wireless connection.

22. The method of claim 20, wherein the communicatively coupling an external device to the host includes using a wired or wireless connection.

23. The method of claim 20, wherein the data transfer request includes a request to transfer data from the host to the external device.

24. The method of claim 20, wherein the data transfer request includes a request to transfer data from the external device to the host.

25. The method of claim 20, wherein the enforcing includes reviewing the data being transferred for at least one of viruses, spyware and adware.

26. The method of claim 20, wherein the enforcing includes determining whether the data transfer request includes a request for private data.

27. The method of claim 26, wherein the enforcing includes requiring an additional security check before allowing the transfer of private data.