System and method for a parallel world of security for non secure environments
AssigneeNoam Camiel
InventorNoam Camiel
Life of this patent
Estimating the term…
Abstract
A system and method is introduced for combining a secure device with a non secure user machine for using and sharing secure data seamlessly through the non secure user machine. The secure device runs in a separate, “parallel world” to the user machine so that the user machine cannot access secure data while it is being used. Even if the user machine is already compromised, the secure data and its usage remain protected from the likes of key logging and screen captures. The secure device authenticates secure data handling to the user so that the user is able to differentiate between a secure and a non secure data usage, as well as identify false imitations of the secure environment.
Claims20
A system for handling secure data within a secure device through the control of a user machine, the system comprising:
- said secure device for handling secure data separately from said user machine;
- said user machine sending said secure device commands for use of said secure data;
- display for displaying said user machine and said secure device wherein said secure device display does not pass through said user machine;
- whereby said user machine commands the use of secure data without the output display and without secure data passing through said user machine keeping said secure data separate from said user machine.
A secure device for handling secure data for use with a user machine through the control of said user machine the secure device comprising:
- input for receiving commands from said user machine;
- a secure environment for handling secure data separately from said user machine;
- an output for display data for directly displaying secure data together with user machine display data wherein said output of display data does not pass through said user machine;
- whereby said user machine commands the use of secure data for use by a user without the output display or secure data passing through said user machine.
A method of using secure data using a secure device through the use of a user machine the method comprising:
- d. requesting to use secure data through said user machine,
- e. using said requested secure data in said secure device according to said user machine commands,
- f. displaying output display of usage of said requested secure data handled in said secure device directly to said user without said output display passing through said user machine.
Dependencies are inferred from the claim text.