Back to results
US 2002/0162021 A1Published application
Method and system for establishing a remote connection to a personal security device
OwnerYves Louis Gabriel Audebert, Olivier Clemotinventors
Life of this patent
Estimating the term…
Abstract
System and method for establishing a remote connection over a network with a personal security device connected to a local client without using a local APDU interface or local cryptography.
Claims41
A system for establishing a remote communications pipe between a PSD and a remote computer system over a network using a client as a host to said PSD, said system comprising:
- at least one local client further comprising means for functionally connecting to a PSD Interface and said network, wherein said client is functionally communicating over said network with said remote computer system and further comprising;
- client communications means for transmitting and receiving messages over said network using a packet based communications protocol, and for transmitting and receiving APDUs through said PSD Interface;
- first client data processing means for receiving incoming messages using said client communications means and separating encapsulated APDUs from said incoming message packets and routing said APDUs through said PSD Interface;
- and
- second client data processing means for encapsulating said APDUs received through said PSD Interface into outgoing message packets and transmitting said outgoing message packets over said network using said client communications means.
2 more elements
A system for establishing a secure remote communications pipe between a PSD and a remote computer system over a network using a client as a host to said PSD, said system comprising:
- at least one local client further comprising means for functionally connecting to a PSD Interface, wherein said client is functionally communicating over said network with said remote computer system;
- and further comprising;
- client communications means for transmitting and receiving messages over said network using a packet based communications protocol, and for transmitting and receiving APDUs through said PSD Interface;
- and
- first client data processing means for receiving incoming messages using said client communications means and separating encapsulated APDUs from said incoming message packets and routing said APDUs through said PSD Interface;
- and
- second client data processing means for encapsulating said APDUs received through said PSD Interface into outgoing message packets and transmitting said outgoing message packets over said network using said communications means.
4 more elements
A method of establishing a communications pipe between a PSD and a remote computer system over a network using a client as a host to said PSD, wherein said client and said remote computer system are in functional communications using a packet based communications protocol over said network, said method comprising:
- generating a request to access said PSD on said remote computer system, wherein said request is in a non-native protocol for communicating with said PSD and said request is generated by an API Level Program,
- converting said request from said non-native protocol to an APDU formatted protocol using a first server data processing means,
- encapsulating said APDU formatted protocol into said packet based communications messages producing an encapsulated APDU message, using a second server data processing means,
- transmitting said encapsulated message over said network using said packet based communications protocol,
- receiving said encapsulated message sent over said network by said client, processing said message using a first data processing means to separate said encapsulated APDU message,
- routing said APDU message through a hardware device port assigned to a PSD Interface, wherein said PSD Interface is in processing communication with said PSD,
- receiving said APDU message through said PSD Interface by said PSD and processing said APDU message using a first internal PS1 data processing means,
- generating a response message in APDU format by said PSD using a second internal PSD data processing means and transmitting said response through said PSD Interface,
- receiving said APDU response message through said PSD Interface by said client and encapsulating said APDU response message into said packet based communications message producing an encapsulated APDU message, using a second data processing means,
- transmitting said encapsulated message over said network using said packet based communications protocol,
- receiving said encapsulated message sent over said network by said remote computer system, processing said message using a third server data processing means to separate said encapsulated APDU message,
- converting said response message from said APDU formatted protocol using a forth server data processing means, and forwarding said response to at least one API Level Program.
9 more elements
A method of establishing a secure communications pipe between a PSD and a remote computer system over a network using a client as a host to said PSD, wherein said client and said remote computer system are in functional communications using a packet based communications protocol over said network, said method comprising:
- generating a request to access said PSD on said remote computer system, wherein said request is in a non-native protocol for communicating with said PSD and said request is generated by an API Level Program,
- converting said request from said non-native protocol to an APDU formatted protocol using a first server data processing means, and sending said APDU formatted protocol to a cryptography data processing means,
- receiving and encrypting said APDUs formatted protocol using cryptography data processing means and sending the encrypted APDUs to said second server data processing means, wherein said encryption method is pre-established,
- encapsulating said encrypted APDUs into said packet based communications messages producing an encapsulated and encrypted APDU message, using a second server data processing means,
- transmitting said encapsulated message over said network using said packet based communications protocol,
- receiving said encapsulated message sent over said network by said client, processing said message using a first data processing means to separate said encapsulated and encrypted APDU message,
- routing said APDU message through a hardware device port assigned to a PSD Interface, wherein said PSD Interface is in processing communication with said PSD,
- receiving said APDU message through said PSD Interface by said PSD and decrypting said APDU message using an internal PSD data cryptography means, wherein said cryptography means is pre-established, and sending decrypted APDU messages to a first internal PSD data processing means,
- receiving said APDU message from said internal PSD data cryptography means and processing said APDU message using said first internal PSD data processing means,
- generating a response message in APDU format by said PSD using a second internal PSD data processing means, encrypting the APDU response message using said internal PSD data cryptography means and transmitting said response through said PSD Interface,
- receiving said APDU response message through said PSD Interface by said client and encapsulating said APDU response message into said packet based communications message producing an encapsulated APDU message, using a second data processing means,
- transmitting said encapsulated message over said network using said packet based communications protocol,
- receiving said encapsulated message sent over said network by said remote computer system, processing said message using a third server data processing means to separate said encapsulated and encrypted APDU message,
- decrypting said encrypted APDUs receiving from said third server data processing means using said cryptography data processing means and sending the decrypted APDUs to said forth server data processing means,
- converting said response message from said APDU formatted protocol using a forth server data processing means, and forwarding said response to at least one API Level Program.
12 more elements
Dependencies are inferred from the claim text.