Apparatus for Securely Enabling a Smart Device to Accept Incoming Messages

Abstract

Methods, apparati, and computer readable media for enabling a Smart Device ( 102 ) to securely validate an incoming message emanating from an external source ( 906 ). A method embodiment comprises the steps of a SPARC Internet Security Corporation (SISC 900 ) verifying ( 912 ) that the incoming message contains a pre-stored validity identifier ( 901 ). When the incoming message contains the correct validity identifier ( 901 ), SISC ( 900 ) appends ( 914 ) a SSD Unsolicited Transaction Identifier (SSD UT ID) to the message. The SSD UT ID comprises a unique security device ( 104 ) identifier and an optional message count. SISC ( 900 ) then sends ( 915 ) the message and the SSD UT ID to the Smart Device 102 . The security device ( 104 ) is a device separate and apart from the Smart Device ( 102 ), and works in conjunction with the Smart Device ( 102 ) to securely process Smart Device ( 102 ) transactions, without the need for encryption, PINs, or passwords. In an embodiment of the invention, Smart Device ( 102 ) is not allowed to communicate directly with external networks ( 506 ), but rather must do so via SSD ( 104 ). This removes the security burden from Smart Device ( 102 ), speeding and simplifying transactions.

1 . Apparatus for securely enabling a smart device to accept an incoming message originating from an external source, said apparatus comprising:
 coupled to the smart device and to the external source, a security coordination module comprising:   a processor;   coupled to the processor, a contamination detector adapted to determine whether the incoming message contains a validity identifier that is pre-stored in a first UT register; and   coupled to the processor, a register containing addresses of valid security devices that have been authorized to operate with the smart device and with the security coordination module; wherein   the smart device is not enabled to process transactions involving the external source without the consent of a security device whose address is contained within said register of valid security devices.   
     
     
         2 . The apparatus of  claim 1  wherein the first UT register is contained within the security coordination module. 
     
     
         3 . The apparatus of  claim 1  further comprising a second UT register; wherein
 the contents of the second UT register are moved into the first UT register upon an interruption in message flow.