Apparatus and Method for Securing Digital Data with a Security Token

Abstract

A security token includes a wireless interface to communicate with a secured device. A cryptographic module generates cryptographic information, encrypts messages to the secured device, decrypts messages from the secured device and coordinates the encryption and decryption of data on the secured device.

What is claimed is: 
     
         1 . A security token, comprising:
 a wireless interface to communicate with a secured device and an additional security token; and   a cryptographic module to:
 generate cryptographic information, 
 encrypt messages to the secured device, 
 decrypt messages from the secured device, 
 coordinate the encryption and decryption of data on the secured device, wherein movement of the security token beyond a range of the wireless interface to communicate with the secured device ceases coordination of decryption of data on the secured device such that the data on the secured device remains encrypted, wherein the wireless interface communication range with the secured device is limited by personal proximity; and 
 exchange encryption parameters with the secured device and the additional security token, wherein the secured device operates as a communication channel between the security token and the additional security token. 
   
     
     
         2 . The security token of  claim 1  wherein the personal proximity corresponds to Bluetooth technology range. 
     
     
         3 . The security token of  claim 1  wherein the personal proximity corresponds to RFID technology range. 
     
     
         4 . The security token of  claim 1  in combination with a secured device selected from a handheld device, a mobile telephone, a personal digital assistant, a smart telephone and a computer. 
     
     
         5 . The security token of  claim 1  wherein the encryption parameters are selected from cryptographic information, information associated with the secured device, data and applications on the secured device, information associated with users of the secured device and synchronizing information. 
     
     
         6 . The security token of  claim 1  wherein the cryptographic information is selected from symmetric keys and asymmetric keys. 
     
     
         7 . The security token of  claim 6  wherein the asymmetric keys are selected from Diffie-Helman compatible key pairs and RSA compatible key pairs. 
     
     
         8 . The security token of  claim 6  wherein the symmetric keys are AES compatible keys. 
     
     
         9 . A method of operating a wireless security token to secure data on a secured device, comprising:
 generating encryption information;   encrypting messages to the secured device;   decrypting messages from the secured device;   coordinating encryption and decryption of data on the secured device when the wireless security token is within a wireless interface communication range with the secured device, wherein the wireless interface communication range with the secured device is limited by personal proximity;   ceasing coordination of decryption of data on the secured device when the wireless security token is outside the wireless interface communication range with the secured device such that the data on the secured device remains encrypted; and   exchanging encryption parameters with the secured device and an additional security token, wherein the secured device operates as a communication channel between the security token and the additional security token.   
     
     
         10 . The method of  claim 9  further comprising using metadata to specify encryption parameters. 
     
     
         11 . The method of  claim 10  further comprising using the security token to synchronize metadata. 
     
     
         12 . The method of  claim 9  wherein operating the security token comprises using directives to control the security token. 
     
     
         13 . The method of  claim 9  further comprising utilizing private and public keys on the security token and the additional security token to guarantee secure token-to-token communication. 
     
     
         14 . The method of  claim 9  further comprising storing a message on the secured device until the additional security token is proximate to the secured device. 
     
     
         15 . The method of  claim 9  further comprising enrolling a party, wherein the party is selected from a user, a secured device, a security token and a software program. 
     
     
         16 . The method of  claim 15  further comprising authorizing an enrolled party for a designated purpose. 
     
     
         17 . The method of  claim 15  further comprising using the security token to exchange data between a first party and a second party. 
     
     
         18 . The method of  claim 9  further comprising using the security token to record a transaction. 
     
     
         19 . The method of  claim 9  further comprising using the security token to control a transaction. 
     
     
         20 . The method of  claim 19  wherein the transaction is a financial transaction.