Method and system for establishing a communications pipe between a personal security device and a remote computer system

Abstract

A method and a system is provided for establishing a communications path over a communications network between a personal security device (PSD) and a remote computer system without requiring the converting of high-level messages such as API-level messages to PSD-formatted messages such as APDU-formatted messages (and inversely) to be installed on a local client device in which the PSD is connected.

1 .- 16 . (canceled) 
     
     
         17 . A method for establishing a communications pipe between at least one personal security device (PSD) and at least one remote computer system over a network using at least one client device, comprising:
 encapsulating the PSD-formatted request message with a packet-based communications protocol, thus producing an encapsulated PSD-formatted request message;   transmitting via the network the encapsulated PSD-formatted request message, using the packet-based communications protocol, from the at least one remote computer system to the at least one client device;   extracting the PSD-formatted request message from the encapsulated PSD-formatted request message;   transmitting the PSD-formatted request message from the at least one client device to the at least one PSD; producing a PSD-formatted response message by processing the PSD-formatted request message;   transmitting the PSD-formatted response message from the at least one PSD to the at least one client device;   encapsulating the PSD-formatted response message with the packet-based communications protocol, thus producing an encapsulated PSD-formatted response message;   transmitting the encapsulated PSD-formatted response message, using the packet-based communications protocol, from the at least one client device to the at least one remote computer system via the network; extracting the PSD-formatted response message from the encapsulated PSD-formatted response message; and   processing the response message in the at least one remote computer system.   
     
     
         18 . A method, according to  claim 17 , further comprising:
 encrypting the PSD-formatted request message in the at least one remote computer system;   decrypting the PSD-formatted request message in the at least one PSD;   encrypting the PSD-formatted response message in the at least one PSD; and   decrypting the PSD-formatted response message in the at least one remote computer system.   
     
     
         19 . A method, according to  claim 18 , wherein the at least one PSD includes unique identification information. 
     
     
         20 . A method, according to  claim 19 , further comprising:
 cross-referencing the unique identification information with a look-up table in order to select at least one cryptographic device for encrypting and decrypting the PSD-formatted request message and encrypting and decrypting the PSD-formatted response message.   
     
     
         21 . A method, according to  claim 17 , further comprising:
 initiating the communications pipe automatically upon connection of the at least one PSD to said at least one client device.   
     
     
         22 . A method, according to  claim 17 , further comprising:
 initiating the communications pipe upon an initial request generated by the at least one client device.   
     
     
         23 . A method, according to claim  1 , further comprising:
 initiating the communications pipe upon an initial request generated by at least one remote computer system.   
     
     
         24 . A method, according to  claim 17 , further comprising:
 establishing the communications pipe in the background.   
     
     
         25 . A method, according to  claim 17 , wherein the high-level messaging format is an API-level format, and wherein the PSD-formatted messages are APDU-formatted messages.