APPLIQUÉ PROVIDING A SECURE DEPLOYMENT ENVIRONMENT (SDE) FOR A WIRELESS COMMUNICATIONS DEVICE

• US 20130104232A1
• Filed: 10/25/2012
• Published: 04/25/2013
• Est. Priority Date: 10/25/2011
• Status: Active Grant

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Johnson, Noel E., Buibish, Anne-Marie
• Granted Patent: US 9,098,696 B2
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A security appliqué provides a secure deployment environment (SDE) for a wireless communications device. The Security appliqué isolates the security features, requirements, and information security boundaries such that no hardware modifications are required to a wireless communications device. Rather, a security module thin client is provided to the wireless communications device to provide the Secure Deployment Environment (SDE). The wireless communications device is coupled to the security appliqué via the standard connection interface. Through the standard connection interface, the security appliqué provides the SDE for the wireless communications device without implementing modifications to the wireless communications device.

Claims

3-1. The wireless device of claim 1 further including a communication interface, the processor providing intercepted encrypted messages to a separate and discrete security device through the communication interface.

4. A security appliqué

, comprising;

a standard interface for connecting to a wireless communications device;

a processor, coupled to the interface, to provide a secure deployment environment (SDE) to manage security operations for the wireless communications device without implementing modifications to the wireless communications device.

5. The security appliqué

of claim 4 further comprising a programmable crypto application device, coupled to the processor, to implement the security operations managed by the processor.

6. The security appliqué

of claim 5, wherein the programmable crypto application device is coupled to a programmable crypto application engine to provide core security functions implemented by the programmable crypto application device.

7. The security appliqué

of claim 4 further comprising a battery management and charging module for managing primary battery power, a power conditioning and distribution module to distribute power having a predetermined quality, an anti-tamper functions module to prevent malicious code from making alterations to code executed by the processor, and a hold-up battery to provide power to predetermined internal components when the primary battery is in a discharged state or is temporarily removed, a secure data store to store sensitive information received by the wireless communications device and a receptacle for storing security keys.

8. The security appliqué

of claim 4 further comprising a secure sandbox to implement a secure environment for running security applications.

9. The security appliqué

of claim 8 further comprising a virtual network computing (VNC) server running in the secure sandbox to present applications running on the VNC server for display on the wireless communications device.

10. The security appliqué

of claim 9 further comprising a network router, coupled to the secure sandbox, the VNC server and a standard communications interface, for providing the data from the VNC server to the standard communications interface for routing to the wireless communications device.

11. The security appliqué

of claim 5, wherein the programmable crypto application device provides secure voice and data using NIST and NSA approved algorithms.

12. The security appliqué

of claim 4, wherein the security operations include protection for data at rest, in process, and in transmit, a two factor authentication, key management, anti-tamper protection, TEMPEST protection, and secure communications over existing wireless networks.

13. The security appliqué

of claim 4, wherein the processor provides separation of sensitive data processing from the wireless mobile device, device re-imaging for the wireless communications device separating the certification of the security appliqué

from the wireless communications device.

14. The security appliqué

of claim 4, wherein the processor provides a trusted boot process and a user distress login code to the wireless communications device, wherein the security operations include using smart device honey-pot data to set deception traps for attackers.

15. The security appliqué

of claim 4, wherein the processor to determine an operating system of the wireless communications device and executing the determined operation system for providing the secure deployment environment (SDE) for managing security operations for the wireless communications device.

16. The security appliqué

of claim 4 further comprises a hardware trust anchor (HTA) to protect a virtual environment provided by the wireless communications device from threats by firmly grounding the virtual machine to the programmable crypto application device, wherein the HTA further provides a mechanism for asserting fidelity of the underlying platform provided by the programmable crypto application device and informs the user of the current trust-state.

17. A secure system, comprising:

a security appliqué

to provide a standard connection interface and to provide a secure deployment environment (SDE) to manage security operations; and

a wireless communications device coupled to the security appliqué

via the standard connection interface, the wireless communication device including a client application for interfacing with the security appliqué

;

wherein the security appliqué

provides the SDE for the wireless communications device without implementing modifications to the wireless communications device, and wherein the security appliqué

communicates with the wireless communications device using the standard connection interface.

18. The secure system of claim 17, wherein the security appliqué

comprises a dongle or a sleeve.

19. A method for providing security operations to a wireless communications device, comprising:

implementing a secure deployment environment (SDE) on a security appliqué

for the wireless communications device;

providing a standard interface to the security appliqué

for communicating with the wireless communications device; and

managing security operations for the wireless communications device through the linking of the SDE on the security appliqué

to the wireless communications device without implementing modifications to the wireless communications device.

20. The method of claim 19, wherein the managing security operations further comprises:

determining an operating system of the wireless communications device;

executing the determined operating system on the security appliqué

;

implementing a secure sandbox on the security appliqué

to provide a secure environment for running security applications for the security appliqué

;

providing a virtual network computing (VNC) server running in the secure sandbox to present applications running on the VNC server for display on the wireless communications device; and

providing a network router for providing data from the VNC server to a standard communications interface for routing to the wireless communications device for presenting the applications running on the VNC server on the wireless communications device.