| Information security device of universal serial bus human interface device class and data transmission method for same -> Monitor Keywords |
|
Information security device of universal serial bus human interface device class and data transmission method for sameUSPTO Application #: 20070180507Title: Information security device of universal serial bus human interface device class and data transmission method for same Abstract: The present invention relates to an information security device of Universal Serial Bus (USB) Human Interface Device (HID) class and the data transmission method for the same. With a master chip that has a built-in HID descriptor and a USB interface chip connected to the master chip, the device of the present invention itself may be designed to be compact and easy to use, and provide powerful functions. With the USB HID interface, the device user does not need to install a driver and the user can use the device anywhere and anytime. And the user does not need to manage the driver whose version updates constantly, consider the compatibility of various product drivers, face the risk caused by the driver when running OS, and worry about the pollution to the system resulted from the installation and uninstallation of the driver. CPU, SCM or smart card chip used as the master chip ensures that the security of identity authentication is reliable. Moreover, the security of identity authentication device can be further improved by adding biometric identification module and/or the like. (end of abstract) Agent: Richard L. Wood 22nd Floor - Chicago, IL, US USPTO Applicaton #: 20070180507 - Class: 726 5 (USPTO) The Patent Description & Claims data below is from USPTO Patent Application 20070180507. Brief Patent Description - Full Patent Description - Patent Application Claims FIELD OF THE INVENTION [0001]The present invention relates to an information security device of Universal Serial Bus (USB) Human Interface Device (HID) class and the data transmission method for the same. BACKGROUND OF THE INVENTION [0002]With the popularity of the Internet and the rise of e-business and e-government, more and more people begin to try online transactions. Meanwhile, more and more personal privacy and business secrets information is transmitted over the network. However, the malicious threats, such as virus, hacker, and phishing fraud, bring a great challenge to the security of online transactions. Endless network crimes lead to a trust crisis to the identity on network. We have to focus on the problems on how to prove "who am I?" and how to prevent identify thefts again. It is urgent to safeguard identify authentication/recognition which is the primary problem in network security. The major identify authentication/recognition methods used in computer and network systems are username/password, ID card, dynamic password and USB Key (Token). [0003]Username/password is the commonest and simplest method for identity authentication, but the password is easy to be doped out by other people. In addition, the password is static data and is transmitted through computer memory and network during authentication, so it is easy to be captured by Trojan or listener on network. Therefore, it's not a good method for identity authentication. [0004]ID card authentication prevents user identity from being counterfeited as ID card cannot be duplicated. But the data read from ID card is also static and it is easy to be captured by memory scan or network listening. The security problems persist. [0005]Dynamic password is a technology that allows user password to change with time or the number of uses, and the password can be used only once. Since each password must be generated by dynamic token and the private hardware of dynamic token is held only by valid user, the user identity can be authenticated through password verification. But if the time or the number of uses between the client and the server is not synchronized properly, a valid user probably could not log in. And the user is required to enter a long string of ruleless password using keyboard each time the user logs in, once there is a typo, the user must enter the password again. Obviously, it is not easy to use. SUMMARY OF THE INVENTION [0006]The present invention overcomes above defects and provides a simple and secure information security device of the Universal Serial Bus (USB) Human Interface Device (HID) class, which is integrated with the features and advantages of both USB Key (Token) and HID devices, and the data transmission method for the device. [0007]The solution of the present invention to the technical problems is: an information security device of Universal Serial Bus (USB) Human Interface Device (HID) class, comprising a master chip with a built-in HID descriptor, and a USB interface module connected to the master chip. [0008]The information security device may comprise an additional authentication module, which is an intelligent authentication module including a biometric identification module or a card reader module. The USB interface module may be built in the master chip, or be a USB HID interface chip separated from the master chip. [0009]The master chip may be a microprocessor or smart card chip, comprising a Central Processing Unit (CPU), a Microcontroller Unit (MCU), or a Single Chip Micyoco (SCM). [0010]A data transmission method for the information security device, comprising the steps of: [0011]1) the host recognizing the information security device; [0012]2) the host sending control commands to the device; [0013]3) the device resolving and processing the control commands after receiving them; [0014]4) the device responding to the application and returning the execution results. [0015]The control commands are transmitted through HID instructions between the host and the information security device. [0016]The control commands may include PIN authentication, signature authentication, data downloading, file access, privilege management and/or read/write operation. [0017]The control commands may be transmitted in the form of cipher text after being encrypted. [0018]The HID instructions may include Set_Report and Get_Report commands. [0019]The algorithm used to encrypt the control commands is RSA, DES, 3DES, HMAC-MD5 or TEA, or the combination of some of them. [0020]The advantages of the present invention compared with existing technologies are: the information security device itself may be designed to be compact and easy to use, and provide powerful functions. With the USB HID interface, the device user does not need to install a driver and the user can use the device anywhere and anytime. And the user does not need to manage the driver whose version updates constantly, consider the compatibility of various product drivers, face the risk caused by the driver when running OS, and worry about the pollution to the system resulted from the installation and uninstallation of the driver. CPU, SCM or smart card chip used as the master chip ensures that the security of identity authentication is reliable. Moreover, the security of identity authentication device can be further improved by adding biometric identification module and/or the like. Continue reading... Full patent description for Information security device of universal serial bus human interface device class and data transmission method for same Brief Patent Description - Full Patent Description - Patent Application Claims Click on the above for other options relating to this Information security device of universal serial bus human interface device class and data transmission method for same patent application. Patent Applications in related categories: 20080172724 - Method and apparatus for authenticating terminal device, and terminal device - A receiving unit receives authentication information unique to a terminal device with identification information from the terminal device. An authenticating unit authenticates the terminal device based on the authentication information. An acquiring unit acquires setting information for relaying a communication between a plurality of terminal devices, which is associated with ... 20080172723 - System and method of collecting data in an access control system - A method of collecting data in a lock system. The method includes providing each user with a credential that contains user information, presenting the credential at an off-line access point, and reading the user information from the credential. The method also includes analyzing the user information at the first off-line ... 20080172725 - System, apparatus, and program for biometric authentication - A client apparatus transmits environmental information acquired from an environmental information acquisition device as well as a biometric authentication information matching result to a server apparatus. The server apparatus verifies the validity of the environmental information such as a luminance as well as the validity of the biometric authentication information ... ### 1. Sign up (takes 30 seconds). 2. Fill in the keywords to be monitored. 3. Each week you receive an email with patent applications related to your keywords. Start now! - Receive info on patent apps like Information security device of universal serial bus human interface device class and data transmission method for same or other areas of interest. ### Previous Patent Application: User-configurable video data service and interface Next Patent Application: Security system and method including individual applications Industry Class: ### FreshPatents.com Support Thank you for viewing the Information security device of universal serial bus human interface device class and data transmission method for same patent info. IP-related news and info Results in 4.35816 seconds Other interesting Feshpatents.com categories: Accenture , Agouron Pharmaceuticals , Amgen , AT&T , Bausch & Lomb , Callaway Golf |
||