Information protection device

A method for communication, comprising:

• coupling an information protection device to communicate via a local interface with a local computer operated by a user, the information protection device having an input transducer associated therewith;
• establishing a physical communication link over a network between the local computer and a remote computer;
• setting up a secure tunnel between the remote computer and the information protection device via the physical communication link and through the local computer, such that information transmitted through the secure tunnel is encrypted and can be decrypted only using a key that is unavailable to the local computer;
• receiving data input by the user to the information protection device via the input transducer;
• and
• encrypting and transmitting the data from the information protection device to the remote computer via the secure tunnel.

A system for authenticating a user of a local computer, the system comprising:

• a remote computer, which is configured to communicate over a network with the local computer;
• an input transducer, which is coupled to receive an access code that is input by the user;
• and
• an information protection device, which comprises:
• a communication interface for communicating with a local interface of the local computer;
• and
• an encryption processor, which is configured to encrypt the access code using an encryption key held by the information protection device and to convey the encrypted access code via the local interface to the local computer for transmission by the local computer to the remote computer over the network,
• wherein the remote computer authenticates the user by decrypting the encrypted access code.

A system for communication by a user of a

• local computer, the system comprising:
• a remote computer, which is configured to establish a physical communication link with the local computer over a network;
• an input transducer, which is coupled to receive data that are input by the user;
• and
• an information protection device, which comprises:
• a communication interface for communicating with a local interface of the local computer;
• and
• a processor, which is configured to set up a secure tunnel to the remote computer over the physical communication link via the local computer, and to encrypt the received data for transmission via the secure tunnel to the remote computer such that the encrypted data transmitted through the secure tunnel can be decrypted only using a key held by the remote computer that is unavailable to the local computer.

An information protection device, for authenticating a user of a local computer on a remote computer, the device comprising:

• a communication interface for communicating with a local interface of the local computer;
• an input transducer, which is coupled to receive an access code that is input by the user;
• a memory, which is configured to hold an encryption key;
• and
• an encryption processor, which is configured to encrypt the access code using the encryption key and to convey the encrypted access code via the local interface to the local computer, so as to cause the encrypted access code to be conveyed via the local computer over a network to the remote computer, for authentication of the user by decryption of the encrypted access code.

An information protection device for use by a user of a local computer, which is in communication with a remote computer via a physical communication link over a network the device comprising:

• a communication interface for communicating with a local interface of the local computer;
• an input transducer, which is coupled to receive data that are input by the user;
• and
• a processor, which is configured to set up a secure tunnel to the remote computer over the physical communication link via the local computer, and to encrypt the received data for transmission via the secure tunnel to the remote computer such that the encrypted data transmitted through the secure tunnel can be decrypted only using a key held by the remote computer that is unavailable to the local computer.

An information protection device, for authenticating a user of a local computer on a remote computer, the device comprising:

• a communication interface for communicating with a local interface of the local computer;
• an input connector, which is configured to receive an output connector of an input transducer, which is operable by the user to input an access code;
• a memory, which is configured to hold an encryption key;
• and
• an encryption processor, which is configured to encrypt the access code using the encryption key and to convey the encrypted access code via the local interface to the local computer, so as to cause the encrypted access code to be conveyed via the local computer over the network to the remote computer, for authentication of the user by decryption of the encrypted access code.

An information protection device, for authenticating a user of a local computer on a remote computer, the device comprising:

• a communication interface for communicating with a local interface of the local computer;
• an input connector, which is configured to receive an output connector of an input transducer, which is operable by the user to input data;
• and
• a processor, which is configured to set up a secure tunnel to the remote computer over a physical communication link via the local computer, and to encrypt the received data for transmission via the secure tunnel to the remote computer such that the encrypted data transmitted through the secure tunnel can be decrypted only using a key held by the remote computer that is unavailable to the local computer.