Method for securing authorized data entry and the device to perform this method

A method for securing authorized data entry and securing the authenticity of such data when entering cryptographic operations which are performed by external tokens connected to a computer, the method comprising the following steps:

• an application in the computer, requiring authorized data entry, sends a specific command to a secure typing module which defines a template of input data intended to be cryptographically processed;
• the specific command switches the secure typing module over to a secure typing mode, where the secure typing module autonomously control typing of required data items of the data template by recording characters typed on a connected entry device;
• the recorded characters are arranged in required data structures defined by the input data template in an internal memory of the secure typing module;
• the thereby created data are sent by the secure typing module directly to a token where the requested cryptographic operation is called, the result of which is sent by the secure typing module to the computer;
• subsequently the secure typing module switches back to a transparent mode;
• wherein an integrity of the template of input data defined by the specific command is cryptographically protected;
• after reception of the specific command by the computer, the data template defined by the specific command is sent to the secure typing module and the secure typing module verifies the integrity of the data template using the cryptographic support of the token;
• in the event of successful integrity verification the secure typing module signals this event;
• and
• in the event of unsuccessful integrity verification the secure typing module switches back to the transparent mode,
• wherein prior to the sending of the created data to the token to perform a cryptographic operation, the authentication of the token's owner is performed by enforcing PIN code entry and its verification of such authentication in the token, if the token supports such operation, without the secure typing module transferring a PIN code value to an unreliable environment of the computer.

A device to secure authorized data entry and to secure the authenticity of such data comprising:

• a computer,
• a display device,
• a data entry device, and
• an external cryptographic token,
• wherein both the data entry device for data typing and the external cryptographic token are connected to the computer via a secure typing module which is standardly in a transparent mode when transferring data between the computer and one or more connected peripherals device, said peripherals device being selected from the group consisting of the data entry device and the external cryptographic token, without affecting the operation, and wherein a specific command sent from an application in the computer transfers a template of data defining requirements for the input data of cryptographic operations and the secure typing module is configured and arranged for switching over to a secure typing mode where the secure typing module autonomously controls data typing on the data entry device and cryptographic procession of the data in the external cryptographic token,
• wherein the integrity of the template of input data defined by the specific command is cryptographically protected,
• wherein after reception of the specific command by the computer, the data template defined by the specific command is sent to the secure typing module and the secure typing module verifies an integrity of the data template using the cryptographic support of the external cryptographic token,
• wherein in the event of successful integrity verification the secure typing module signals this event, and
• wherein in the event of unsuccessful integrity verification the secure typing module switches back to the transparent mode.