Encryption bridge system and method of operation thereof

Abstract

A self-authenticating encryption bridge, and method of operation thereof, including: a user input module for remaining locked until a user has been authenticated; an encryption/decryption control module responsive to the user input module for encrypting or decrypting data when the user has been authenticated; a first communication channel for transferring encrypted data from a mass storage device to the encryption/decryption control module; and a second communication channel for transferring clear data to a computer from the encryption/decryption control module.

What is claimed is: 
     
         1 . A method of operation of a self-authenticating encryption bridge comprising:
 locking a user input module until a user has been authenticated;   encrypting or decrypting data in an encryption/decryption control module when the user has been authenticated in the user input module;   transferring encrypted data from a mass storage device to the encryption/decryption control module in a first communication channel; and   transferring clear data to a computer from the encryption/decryption control module in a second communication channel.   
     
     
         2 . The method as claimed in  claim 1  further comprising:
 not encrypting or decrypting data in the encryption/decryption control module when the user is unable to be authenticated in the user input module. 
 
     
     
         3 . The method as claimed in  claim 1  further comprising:
 containing an authentication parameter for authenticating the user inside of the self-authenticating encryption bridge; and 
 containing an encryption key for encrypting and decrypting clear data in the encryption/decryption control module. 
 
     
     
         4 . The method as claimed in  claim 1  further comprising:
 containing a plurality of authentication parameters for authenticating a plurality of users inside of the self-authenticating encryption bridge; and 
 containing an encryption key for encrypting and decrypting clear data in the encryption/decryption control module. 
 
     
     
         5 . The method as claimed in  claim 1  further comprising:
 containing an authentication parameter for authenticating the user inside of the self-authenticating encryption bridge; and 
 containing a plurality of encryption keys for providing a plurality of ways of encrypting and decrypting clear data in the encryption/decryption control module. 
 
     
     
         6 . A method comprising:
 locking a user input module until a user has been authenticated;   unlocking the user input module when the user has been authenticated;   allowing a mass storage device to become accessible to a computer when the user has been authenticated in the user input module and the user input module has been unlocked;   transferring encrypted data wirelessly or by wire to and from a mass storage device to and from the encryption/decryption control module in a first communication channel;   encrypting or decrypting data in the encryption/decryption control module when the user has been authenticated in the user input module and the user input module has been unlocked;   decrypting encrypted data to the computer from the mass storage device in the encryption/decryption control module when and the user input module has been unlocked and the mass storage device is accessible to the computer;   transferring clear data wirelessly or by wire to and from a computer to and from the encryption/decryption control module in a second communication channel; and   encrypting clear data from the computer to the mass storage device in the encryption/decryption control module when and the user input module has been unlocked and the mass storage device is accessible to the computer.   
     
     
         7 . The method as claimed in  claim 6  further comprising:
 not encrypting or decrypting data in the encryption/decryption control module when the user is unable to be wirelessly or by wire authenticated in the user input module and the user input module is locked. 
 
     
     
         8 . The method as claimed in  claim 6  further comprising:
 powering the user input module from the second communication channel; and 
 powering the encryption/decryption control module from the second communication channel. 
 
     
     
         9 . The method as claimed in  claim 6  further comprising:
 powering the user input module and the encryption/decryption control module from a power source in the self-authenticating encryption bridge. 
 
     
     
         10 . The method as claimed in  claim 6  further comprising:
 containing a plurality of authentication parameters for authenticating a plurality of users in the self-authenticating encryption bridge; and 
 containing an encryption key for encrypting and decrypting clear data in the encryption/decryption control module. 
 
     
     
         11 . A self-authenticating encryption bridge comprising:
 a user input module for remaining locked until a user has been authenticated;   an encryption/decryption control module responsive to the user input module for encrypting or decrypting data when the user has been authenticated;   a first communication channel for transferring encrypted data from a mass storage device to the encryption/decryption control module; and   a second communication channel for transferring clear data to a computer from the encryption/decryption control module.   
     
     
         12 . The self-authenticating encryption bridge as claimed in  claim 11  wherein:
 the encryption/decryption control module is responsive to the user input module for not encrypting or decrypting data when the user is unable to be authenticated. 
 
     
     
         13 . The self-authenticating encryption bridge as claimed in  claim 11  wherein:
 the self-authenticating encryption bridge contains an authentication parameter for authenticating the user; and 
 the encryption/decryption control module contains an encryption key for encrypting and decrypting clear data. 
 
     
     
         14 . The self-authenticating encryption bridge as claimed in  claim 11  wherein:
 the self-authenticating encryption bridge contains a plurality of authentication parameters for authenticating a plurality of users; and 
 the encryption/decryption control module contains an encryption key for encrypting and decrypting clear data. 
 
     
     
         15 . The self-authenticating encryption bridge as claimed in  claim 11  wherein:
 the self-authenticating encryption bridge contains an authentication parameter for authenticating the user; and 
 the encryption/decryption control module contains a plurality of encryption keys for providing a plurality of ways of encrypting and decrypting clear data. 
 
     
     
         16 . The self-authenticating encryption bridge as claimed in  claim 11  wherein:
 the encryption/decryption control module is responsive to the user input module for allowing the mass storage device to become accessible to the computer when the user has been authenticated; 
 the encryption/decryption control module is for encrypting clear data from the computer to the mass storage device when the mass storage device is accessible to the computer wirelessly or by wire over a first channel; and 
 the encryption/decryption control module is for encrypting or decrypting data to the computer from the mass storage device when the mass storage device is accessible to the computer wirelessly or by wire over a second channel. 
 
     
     
         17 . The self-authenticating encryption bridge as claimed in  claim 16  wherein:
 the encryption/decryption control module is responsive to the user input module for not encrypting or decrypting data when the user is unable to be wirelessly or by wire authenticated. 
 
     
     
         18 . The self-authenticating encryption bridge as claimed in  claim 16  wherein:
 the user input module is powered from the second communication channel; and 
 the encryption/decryption control module is powered from the second communication channel. 
 
     
     
         19 . The self-authenticating encryption bridge as claimed in  claim 16  further comprising:
 a power source in the self-authenticating encryption bridge for powering the user input module and the encryption/decryption control module. 
 
     
     
         20 . The self-authenticating encryption bridge as claimed in  claim 16  wherein:
 the self-authenticating encryption bridge contains a plurality of authentication parameters for authenticating a plurality of users; and 
 the encryption/decryption control module contains an encryption key for encrypting and decrypting clear data.