System and method for a parallel world of security for non secure environments
OwnerNoam Camielinventor
Life of this patent
Estimating the term…
Abstract
A system and method is introduced for combining a secure device with a non secure user machine for using and sharing secure data seamlessly through the non secure user machine. The secure device runs in a separate, “parallel world” to the user machine so that the user machine cannot access secure data while it is being used. Even if the user machine is already compromised, the secure data and its usage remain protected from the likes of key logging and screen captures. The secure device authenticates secure data handling to the user so that the user is able to differentiate between a secure and a non secure data usage, as well as identify false imitations of the secure environment.
Claims33
A system for handling secure data within a secure device through the control of a user machine, the system comprising:
- said secure device for handling secure data separately from said user machine;
- said user machine sending said secure device commands for use of said secure data wherein input keyboard data for use of said secure data does not pass through said user machine;
- a video combiner for displaying said user machine and said secure device on a display wherein at least part of said secure device display does not pass through said user machine and the location of at least part of said secure device display in said display is controllable by said user machine;
- whereby said user machine commands the use of said secure data without at least part of said secure device display passing through said user machine and without said secure data passing through said user machine keeping said secure data separate from said user machine.
A secure device for handling secure data for use with a user machine through the control of said user machine the secure device comprising:
- input for receiving commands from said user machine wherein input keyboard data for use of said secure data does not pass through said user machine;
- a secure environment for handling said secure data separately from said user machine;
- an output for display data for directly displaying said secure data together with user machine display data on a display using a video combiner wherein at least part of said output for display data does not pass through said user machine and the location of at least part of said output for display data in said display is controllable by said user machine;
- whereby said user machine commands the use of said secure data without at least part of said output display passing through said user machine and without said secure data passing through said user machine.
A method of using secure data using a secure device through the use of a user machine the method comprising:
- a. requesting to use secure data through said user machine,
- b. using said requested secure data in said secure device according to said user machine command wherein input keyboard data for use of said secure data does not pass through said user machine,
- c. displaying output display of usage of said requested secure data handled in said secure device directly to said user without said output display passing through said user machine and location of at least part of said output display of usage of requested secure data in a display is controllable by said user machine.
A method of using secure data using a secure device through the use of a user machine the method comprising:
- a. requesting to use secure data through said user machine,
- b. using said requested secure data in said secure device according to said user machine command,
- c. displaying output display of usage of said requested secure data handled in said secure device directly to said user without said output display passing through said user machine and location of at least part of said output display of usage of requested secure data in a display is controllable by said user machine,
- d. sharing of said requested secure data with another user using said secure device for authorizing said secure data for use of another secure device belonging to said another user.
A method of using secure data on a cloud using a secure device on the cloud through the use of a user machine the method comprising:
- a. requesting to use said secure data on a cloud through said user machine,
- b. using said requested secure data in said secure device on the cloud according to said user machine command,
- c. displaying output display of usage of said requested secure data handled in said secure device directly to said user without said output display passing through said user machine and location of at least part of said output display of usage of requested secure data in a display is controllable by said user machine.
A system for using secure data on a cloud using a secure device through the control of a user machine, the system comprising:
- said secure device for controlling said secure data on a cloud separately from said user machine;
- said user machine sending said secure device commands for use of said secure data on a cloud;
- a video combiner for displaying said user machine and said secure device on a display wherein at least part of said secure device display does not pass through said user machine and the location of at least part of said secure device display in said display is controllable by said user machine;
- whereby said user machine commands the use of said secure data on a cloud through the control of said secure device without at least part of said secure device display passing through said user machine and without said secure data passing through said user machine keeping said secure data separate from said user machine.
Dependencies are inferred from the claim text.