# US 10,291,656 B2 · Systems and methods for providing network security using a secure digital device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,291,656 B2 - Document ID: US10291656B2 - Status: Granted - Kind: B2 - Application number: 15/701,365 - Filed: 2017-09-11 - Published: 2018-07-19 - Granted: 2019-05-14 - Earliest claimed: 2014-02-13 - Assignees: CUPP Computing AS - Applicants: CUPP Computing AS - Inventors: Omar Nathaniel Ely - Web page: https://patentgrep.com/patent/US10291656B2 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 63/14: {for detecting or protecting against malicious traffic} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system may include a traffic interception module configured to intercept network traffic of a host device. A traffic virtualization module may be configured to generate a virtual file on the host device containing the intercepted network traffic. A security system interface module may be configured to provide the virtual file to a secure digital security system over a virtualized file interface coupling the host device to the secure digital security system, and to receive instructions to allow or to deny the network traffic from the secure digital security system over the virtualized file interface. A traffic access management module may be configured to allow or to deny the network traffic based on the instructions. ## Claims ### Claim 1 A system comprising: at least one processor; a virtual file interface configured to assist in transferring file data at file transfer speeds to a secure digital security system, the secure digital security system including a security engine configured to conduct a security process on network data; and memory storing computer instructions, the computer instructions configured to cause the at least one processor to: intercept network traffic, the intercepted network traffic including one of incoming network traffic or outgoing network traffic; package the intercepted network traffic as one or more virtual files containing the intercepted network traffic, the one or more virtual files including header information, the header information indicating that the one or more virtual files contain intercepted network data and not file data; provide the one or more virtual files with the header information to the virtual file interface, the virtual file interface configured to assist in transferring the one or more virtual files with the header information as the file data at the file transfer speeds to the secure digital security system, the secure digital security system configured to use the header information to determine that the one or more virtual files contain intercepted network data, the secure digital security system further configured to conduct the security process on the intercepted network data contained in the one or more virtual files and to generate a security indication indicating whether the intercepted network data is deemed safe according to the security process; receive the security indication from the secure digital security system; and allow the system to process the intercepted network traffic when the security indication indicates that the intercepted network traffic is safe according to the security process. ### Claim 2 (depends on 1) The system of claim 1, wherein the system is a host computer. ### Claim 3 (depends on 1) The system of claim 1, wherein the secure digital security system is a secure digital (SD) card. ### Claim 4 (depends on 1) The system of claim 1, wherein the computer instructions configured to cause the at least one processor to intercept the network traffic include computer instructions configured to cause the at least one processor to monitor application-level processes. ### Claim 5 (depends on 4) The system of claim 4, wherein the computer instructions configured to cause the at least one processor to monitor the application-level processes include computer instructions configured to cause the at least one processor to monitor for network calls from one or more applications. ### Claim 6 (depends on 1) The system of claim 1, wherein the computer instructions configured to cause the at least one processor to intercept the network traffic include computer instructions configured to cause the at least one processor to monitor root-level processes. ### Claim 7 (depends on 1) The system of claim 1, wherein the computer instructions configured to cause the at least one processor to package the intercepted network traffic as the one or more virtual files include computer instructions configured to cause the at least one processor to use virtual private network (VPN) tables to package the intercepted network traffic as the one or more virtual files. ### Claim 8 (depends on 1) The system of claim 1, wherein the one or more virtual files include a plurality of data packets, and the header information is located within each packet. ### Claim 9 (depends on 1) The system of claim 1, wherein the computer instructions are further configured to cause the at least one processor to encrypt the one or more virtual files before the one or more virtual files are transferred to the secure digital security system. ### Claim 10 A method comprising: intercepting network traffic of a host system, the intercepted network traffic including one of incoming network traffic or outgoing network traffic; packaging the intercepted network traffic as one or more virtual files containing the intercepted network traffic, the one or more virtual files including header information, the header information indicating that the one or more virtual files contain intercepted network data and not file data; providing the one or more virtual files with the header information to a virtual file interface, the virtual file interface configured to assist in transferring file data at file transfer speeds to a secure digital security system, the secure digital security system including a security engine configured to conduct a security process on network data; assisting by the virtual file interface in transferring the one or more virtual files with the header information as the file data at the file transfer speeds to the secure digital security system, the secure digital security system configured to use the header information to determine that the one or more virtual files contain intercepted network data, the secure digital security system further configured to conduct the security process on the intercepted network data contained in the one or more virtual files, the secure digital security system further configured to generate a security indication indicating whether the intercepted network data is deemed safe according to the security process; receiving the security indication from the secure digital security system; and allowing the host system to process the intercepted network traffic when the security indication indicates that the intercepted network traffic is safe according to the security process. ### Claim 11 (depends on 10) The method of claim 10, wherein the method is performed by the host system. ### Claim 12 (depends on 10) The method of claim 10, wherein the secure digital security system is a secure digital (SD) card. ### Claim 13 (depends on 10) The method of claim 10, wherein the intercepting the network traffic includes monitoring application-level processes. ### Claim 14 (depends on 13) The method of claim 13, wherein the monitoring the application-level processes includes monitoring for network calls from one or more applications. ### Claim 15 (depends on 10) The method of claim 10, wherein the intercepting the network traffic includes monitoring root-level processes. ### Claim 16 (depends on 10) The method of claim 10, wherein the packaging the intercepted network traffic as the one or more virtual files includes using virtual private network (VPN) tables to package the intercepted network traffic as the one or more virtual files. ### Claim 17 (depends on 10) The method of claim 10, wherein the one or more virtual files include a plurality of data packets, and the header information is located within each packet. ### Claim 18 (depends on 10) The method of claim 10, further comprising encrypting the one or more virtual files before the one or more virtual files are transferred to the secure digital security system.