System and Method for Providing Data and Device Security Between External and Host Devices

Abstract

A secure data exchange system comprising a security device including a first external device plug, and a security engine operative to enforce a security policy on data transfer requests received from the host; an external device including a second external device plug; and a host including a first external device port operative to communicatively couple with the first external device plug, a second external device port operative to communicatively couple with the second external device plug, and a driver, e.g., a redirect driver, operative to transfer a data transfer request to the security device before executing the data transfer request.

1 . A security device, comprising:
 an external device plug operative to communicatively couple with a host;   an external device port operative to communicatively couple with an external device;   a processor; and   memory storing
 an operating system, 
 an external device driver operative to control communication with the external device, and 
 a security engine operative to enforce a security policy on a data transfer request between the external device and the host. 
   
   
   
       2 . The security device of  claim 1 , wherein the security device is operative with a driver on the host. 
   
   
       3 . The security device of  claim 1 , wherein at least one of the external device plug and the external device port follows a USB standard. 
   
   
       4 . The security device of  claim 1 , wherein at least one of the external device plug and the external device port includes a wireless connection. 
   
   
       5 . The security device of  claim 1 , wherein the security engine protects against the transfer of at least one of viruses, spyware and adware. 
   
   
       6 . The security device of  claim 1 , wherein the security engine protects against the unauthorized transfer of private data. 
   
   
       7 . A secure data exchange system, comprising:
 a security device including
 a first external device plug; and 
 a security engine operative to enforce a security policy on data transfer requests received from the host; 
   an external device including
 a second external device plug; and 
   a host including
 a first external device port operative to communicatively couple with the first external device plug; 
 a second external device port operative to communicatively couple with the second external device plug; and 
 a redirect driver operative to transfer a data transfer request from the host to the security device before executing the data transfer request. 
   
   
   
       8 . The secure data exchange system of  claim 7 , wherein the external device includes a USB drive. 
   
   
       9 . The secure data exchange system of  claim 7 , wherein the external device includes one of a PDA or a cell phone. 
   
   
       10 . The secure data exchange system of  claim 7 , wherein the host includes one of a laptop, desktop, PDA or cell phone. 
   
   
       11 . The secure data exchange system of  claim 7 , wherein the host launches the redirect driver upon detecting connection of the secure device to the host. 
   
   
       12 . A method comprising:
 communicatively coupling a security device to a host;   communicatively coupling an external device to the security device;   receiving by the security device a data transfer request from the host; and   enforcing by the security device a security policy on the data transfer request before allowing the data transfer request to be performed.   
   
   
       13 . The method of  claim 12 , wherein the communicatively coupling a security device to a host includes using a wired or wireless connection. 
   
   
       14 . The method of  claim 12 , wherein the communicatively coupling an external device to the host includes using a wired or wireless connection. 
   
   
       15 . The method of  claim 12 , wherein the data transfer request includes a request to transfer data from the host to the external device. 
   
   
       16 . The method of  claim 12 , wherein the data transfer request includes a request to transfer data from the external device to the host. 
   
   
       17 . The method of  claim 12 , wherein the enforcing includes reviewing the data being transferred for at least one of viruses, spyware and adware. 
   
   
       18 . The method of  claim 12 , wherein the enforcing includes determining whether the data transfer request includes a request for private data. 
   
   
       19 . The method of  claim 18 , wherein the enforcing includes requiring an additional security check before allowing the transfer of private data. 
   
   
       20 . A method, comprising:
 communicatively coupling a security device to a host;   communicatively coupling an external device to the host;   receiving by the host a data transfer request;   using a redirect driver on the host to redirect the data transfer request to the security device; and   enforcing by the security device a security policy on the data transfer request before allowing the data transfer request to be performed.   
   
   
       21 . The method of  claim 20 , wherein the communicatively coupling a security device to a host includes using a wired or wireless connection. 
   
   
       22 . The method of  claim 20 , wherein the communicatively coupling an external device to the host includes using a wired or wireless connection. 
   
   
       23 . The method of  claim 20 , wherein the data transfer request includes a request to transfer data from the host to the external device. 
   
   
       24 . The method of  claim 20 , wherein the data transfer request includes a request to transfer data from the external device to the host. 
   
   
       25 . The method of  claim 20 , wherein the enforcing includes reviewing the data being transferred for at least one of viruses, spyware and adware. 
   
   
       26 . The method of  claim 20 , wherein the enforcing includes determining whether the data transfer request includes a request for private data. 
   
   
       27 . The method of  claim 26 , wherein the enforcing includes requiring an additional security check before allowing the transfer of private data.