US 8,302,174 B2Granted

System, device and method for secure provision of key credential information

AssigneeJames A. McAlear

InventorJames A McAlear

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system for secure provision of key credential information is provided. The system comprises secure logic circuitry for being disposed in a host computer. The secure logic circuitry detects a message received from a remote computer connected to the host computer and indicative of a request for provision of the key credential information; generates a message for prompting a user for provision of the key credential information; receives the key credential information; and provides the key credential information to the remote computer absent processing using circuitry of the host computer. The system further comprises a secure user interface connected to the secure logic circuitry for receiving the key credential information from the user and providing the same to the secure logic circuitry.

Claims17

Dependent claims

A system for use with a host computer for securing key credential information provided by a user of the host computer against any malware resident in a motherboard of the host computer, the host computer configured for network communications with a remote computer through a communications network interface, the system comprising secure logic circuitry configured for connection between the communications network interface and the motherboard and a secure user interface configured for connection to the secure logic circuitry, wherein:

(a) the secure logic circuitry is configured for:
(i) detecting a request message indicative of a request for the key credential information;
(ii) upon detection of the request message, generating a prompt message for transmission to the secure user interface for prompting the user to provide the key credential information;
and,
(iii) absent processing by the motherboard, receiving and providing the key credential information to the remote computer through the communications network interface while not providing the key credential information to the motherboard;
and,
(b) the secure user interface is configured for:
(i) using the prompt message to alert the user to provide the key credential information;
(ii) receiving the key credential information from the user;
and,
(iii) providing the key credential information to the secure logic circuitry;
wherein the key credential information received by the secure user interface and provided to the secure logic circuitry is blocked from transmission to the motherboard and secured against any malware resident in the motherboard.

9 more elements

A method for securing a host computer user's key credential information against malware resident in a motherboard of the host computer following a request for the key credential information from a remote computer with which the host computer is configured for communicating over a network, the method comprising:

(a) providing a secure user interface configured for receiving the key credential information from the user;
(b) detecting the request for the key credential information;
(c) upon detecting the request, alerting the user to provide the key credential information to the secure user interface;
(d) blocking transmission to the motherboard of the key credential information provided to the secure user interface;
and
(e) while blocking transmission of the key credential information to the motherboard and absent processing by the motherboard, receiving the key credential information from the secure user interface and providing the received key credential information to the remote computer, thereby securing the key credential information against any mal ware resident in the motherboard.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/140,383Filed 14 Dec 2009 · continuation
Priority: CA 265016318 Dec 2008
Published: US 2012/0131651 A124 May 2012
Granted: 30 Oct 2012
Term ends: Not estimatedThe source records don’t support an estimate.

Classification3 codes

G06F 21/85
Protecting input, output or interconnection devices: interconnection devices, e.g. bus-connected or in-line devices
G06F 21/83
Protecting input, output or interconnection devices: input devices, e.g. keyboards, mice or controllers thereof
G06F
Computing and data processing