System and method for a secure environment that authenticates secure data handling to the user
OwnerNoam Camielinventor
Life of this patent
Estimating the term…
Abstract
A system and method is introduced for combining a secure device with a non secure user machine for using and sharing secure data seamlessly through the non secure user machine. The secure device runs in a separate, “parallel world” to the user machine so that the user machine cannot access secure data while it is being used. Even if the user machine is already compromised, the secure data and its usage remain protected from the likes of key logging and screen captures. The secure device authenticates secure data handling to the user so that the user is able to differentiate between a secure and a non secure data usage, as well as identify false imitations of the secure environment.
Claims34
A secure system for authenticating secure handling of data to a user, the secure system comprising:
- a secure device configured at least partially for handling secure data;
- a video combiner for displaying at least part of output from said secure device directly to said user on a display with at least part of output from a user machine wherein the location of at least part of output of said secure device on said display is controllable by said user machine;
- a secret totem recognized by said user wherein said totem is secured using said secure device;
- whereby said secret totem is presented to said user directly through said display for authenticating of said secure system to said user thereby said user handles data securely using said authenticated secure system.
A method of authenticating a secure system to a user for handling secure data the method comprising:
- a. preparing a secret totem for said user to be recognized by said user,
- b. securing said secret totem using said secure system,
- c. presenting said secret totem to said user using said secured totem by said secure system for authentication of said secure system to said user wherein location of at least part of said secure system in a display is controllable by a user machine,
- d. prompting said user for handling secure data using said secure system following authentication of said secure system to said user.
A system for handling secure data and non-secure data through a common interface while allowing a user to identify secure handling of secure data, the system comprising:
- at least one secure device for handling secure data;
- at least one non-secure device for handling non-secure data;
- a video combiner for displaying output of at least part of said at least one non-secure device and for directly displaying output of at least part of said at least one secure device on a display wherein location of output of at least part of said at least one secure device in said display is controllable by said common interface;
- a secret totem recognized by said user wherein said secret totem is secured using said at least one secure device;
- whereby said secret totem is presented to said user by said at least one secure device directly through said display to let said user identify secure data handling on said display.
A system for handling secure data and non-secure data through a common interface while allowing a user to identify secure handling of secure data and to securely share secure data with another user, the system comprising:
- at least one secure device for handling secure data wherein said at least one secure device is configured for sharing secure data with another secure device for authorizing said secure data for use of another secure device belonging to said another user;
- at least one non-secure device for handling non-secure data;
- a video combiner for displaying output of at least part of said at least one non-secure device and for directly displaying output of at least part of said at least one secure device on a display wherein location of output of at least part of said at least one secure device in said display is controllable by said common interface;
- a totem recognized by said user wherein said totem is protected by said at least one secure device;
- whereby said totem is presented to said user directly through said display to let said user identify secure data handling on said display.
Dependencies are inferred from the claim text.