Negotiated wireless peripheral security systems

Claim 2

1 . A negotiated wireless peripheral device comprising: a short-range wireless transceiver operative to support a position-dependent ecommerce session with a mobile unit; a negotiation module coupled to the short-range wireless transceiver, the negotiation module operative to engage in a handshaking sequence with the mobile unit to establish the position-dependent ecommerce session; a WAN gateway module operative to couple a traffic stream generated in the mobile unit and received via the short-range wireless transceiver to a wireline WAN connection, so that the mobile unit may maintain an end-to-end secure connection though the negotiated wireless peripheral device with a remote server coupled to the WAN; a peripheral augmentation system operative to redirect one or more I/O streams to/from the mobile unit to a set of one or more peripheral devices that support a non-area constrained user interface to the user of the mobile; and one or more protected memory segments that are provided for exclusive use by one or more I/O processes that support the non-area constrained user interface.

Claim 3

2 . The negotiated wireless peripheral of claim 1 , further comprising: an object that controls the non-area constrained user interface and maintains a point-to-point secure connection with the application so that all application data stored in the negotiated wireless peripheral is either in encrypted form or is in the protected memory area.

Claim 4

3 . The negotiated wireless peripheral of claim 2 , wherein the object further comprises: a program module that prevents other programs from accessing the protected memory segment.

Claim 5

4 . The negotiated wireless peripheral of claim 2 , wherein the object further comprises: a program module that monitors access to the memory segment and reports to a unauthorized access to the protected memory segment.

Claim 6

5 . For use in a mobile unit that communicates with a negotiated wireless peripheral (NWP) device, a method comprising: establishing via a wireless local area network air interface a position-dependent ecommerce session with the NWP device and contracting for the use of at least one peripheral that supports enhanced user interface capabilities; redirecting at least one input-output stream to the at least one peripheral supplied by the NWP device in order to allow an application program to deliver content using a non-area-constrained user interface; establishing via a wireless wide area network connection an end-to-end secure client-server session between the mobile unit and a remote server that provides an application service; and supplying a client-side and non-area constrained user interface to the user to allow the user to interact with the remote server using the at least one augmented peripheral.

Claim 7

5 . For use in a mobile unit that communicates with a negotiated wireless peripheral (NWP) device, a method comprising: establishing via a wireless local area network air interface a position-dependent ecommerce session with the NWP device and contracting for the use of at least one peripheral that supports enhanced user interface capabilities; redirecting at least one input-output stream to the at least one peripheral supplied by the NWP device in order to allow an application program to deliver content using a non-area-constrained user interface; establishing via a wireless wide area network connection an end-to-end secure client-server session between the mobile unit and a remote server that provides an application service; and supplying a client-side and non-area constrained user interface to the user to allow the user to interact with the remote server using the at least one augmented peripheral.

Claim 8

6 . The method of claim 5 , wherein the method further comprises: passing a remote object to the NWP device, whereby the remote object performs cipher processing and memory protection processing in the NWP device; and invoking an input and/or output method on a stub object that securely communicates commands and/or input/output data to the remote object.

Claim 9

7 . For use in a mobile unit that uses a wireless wide area network (wWAN) air interface to communicate via a wide area network (WAN) with one or more remote servers and a wireless local area network (wLAN) air interface to contract with a negotiated wireless peripheral (NWP) device, a method comprising: establishing via the wLAN air interface a position-dependent ecommerce session with the NWP device; redirecting at least one input-output stream to at least one peripheral supplied by the NWP device in order to allow an application program to deliver content to a non-area-constrained user interface, whereby the at least one peripheral includes an input device; establishing or redirecting a client-server packet stream via the wLAN and through the WAN to support an end-to-end secure session between the mobile unit and a selected remote server, whereby the mobile unit performs cipher processing using at least one security parameter from an end-to-end security association between the mobile unit and the selected remote server; storing in the mobile unit at least one secure information record for secure transmission to with the remote server; and securely passing the secure information record to the remote server without the need to type in the information stored in the secure information record into the input device supplied by the negotiated wireless peripheral.

Claim 10

7 . For use in a mobile unit that uses a wireless wide area network (wWAN) air interface to communicate via a wide area network (WAN) with one or more remote servers and a wireless local area network (wLAN) air interface to contract with a negotiated wireless peripheral (NWP) device, a method comprising: establishing via the wLAN air interface a position-dependent ecommerce session with the NWP device; redirecting at least one input-output stream to at least one peripheral supplied by the NWP device in order to allow an application program to deliver content to a non-area-constrained user interface, whereby the at least one peripheral includes an input device; establishing or redirecting a client-server packet stream via the wLAN and through the WAN to support an end-to-end secure session between the mobile unit and a selected remote server, whereby the mobile unit performs cipher processing using at least one security parameter from an end-to-end security association between the mobile unit and the selected remote server; storing in the mobile unit at least one secure information record for secure transmission to with the remote server; and securely passing the secure information record to the remote server without the need to type in the information stored in the secure information record into the input device supplied by the negotiated wireless peripheral.

Claim 11

8 . The method of claim 7 , wherein the input device is a computer keyboard.

Claim 12

9 . The method of claim 7 , wherein the method further comprises: passing an object to the negotiated wireless peripheral device, whereby the object maintains a point-to-point secure connection with the application and controls the storage of input-output data into a protected memory segment in the negotiated wireless peripheral device to inhibit a rouge processes from intercepting information from the non-area constrained user interface.

Claim 13

10 . The method of claim 7 , wherein the method further comprises: passing a remote object to the negotiated wireless peripheral, whereby the remote object performs cipher processing and memory protection processing in the negotiated wireless peripheral; and invoking an input and/or output method on a stub object that securely communicates commands and/or input/output data to the remote object.

Claim 14

11 . For use in a mobile unit that uses a wireless wide area network (wWAN) air interface to communicate via a wide area network (WAN) with one or more remote servers and a wireless local area network (wLAN) air interface to contract with a negotiated wireless peripheral (NWP) device, a method comprising: establishing via the wLAN air interface a position-dependent ecommerce session with the NWP device; establishing or redirecting a client-server packet stream via the wLAN and through the WAN to support an end-to-end secure session between the mobile unit and a selected remote server, whereby the mobile unit performs cipher processing using at least one security parameter from an end-to-end security association between the mobile unit and the selected remote server; and projecting a non-area constrained user interface image on a projection-display surface in order to supply a display area in support of a non-area constrained.

Claim 15

11 . For use in a mobile unit that uses a wireless wide area network (wWAN) air interface to communicate via a wide area network (WAN) with one or more remote servers and a wireless local area network (wLAN) air interface to contract with a negotiated wireless peripheral (NWP) device, a method comprising: establishing via the wLAN air interface a position-dependent ecommerce session with the NWP device; establishing or redirecting a client-server packet stream via the wLAN and through the WAN to support an end-to-end secure session between the mobile unit and a selected remote server, whereby the mobile unit performs cipher processing using at least one security parameter from an end-to-end security association between the mobile unit and the selected remote server; and projecting a non-area constrained user interface image on a projection-display surface in order to supply a display area in support of a non-area constrained.

Claim 16

12 . The method of claim 11 , wherein the method further comprises: storing in the mobile unit at least one secure information record for secure transmission to the remote server; and securely passing the secure information record to the remote server without the need to enter the information stored in the secure information record into an input peripheral supplied by the NWP device.

Claim 17

13 . The method of claim 11 , wherein the projecting involves a scanned laser image.

Claim 18

14 . The method of claim 11 , wherein the projecting involves an LCD-based optical projector.

Claim 19

15 . The method of claim 11 , wherein the method further comprises: accepting a power input from the wireless negotiated peripheral device to supply power to the mobile unit.

Claim 20

16 . The method of claim 11 , wherein the method further comprises: passing an object to the negotiated wireless peripheral device, whereby the object maintains a point-to-point secure connection with the application and controls the storage of input-output data into a protected memory segment in the negotiated wireless peripheral device to inhibit a rouge processes from intercepting information from the non-area constrained user interface.

Claim 21

17 . The method of claim 11 , wherein the method further comprises: passing a remote object to the negotiated wireless peripheral, whereby the remote object performs cipher processing and memory protection processing in the negotiated wireless peripheral; and invoking an input and/or output method on a stub object that securely communicates commands and/or input/output data to the remote object.

Claim 22

18 . A mobile unit comprising: a set of peripherals that in total support an area-constrained user interface and a non-area constrained user interface; and a display projector that projects a non-area constrained user interface display onto a display surface; whereby the set of peripherals includes a pointing and selection device capable of controlling a cursor image on the projected non-area constrained user interface and making selections based on interactive portions of the projected non-area constrained user interface.

Claim 23

18 . A mobile unit comprising: a set of peripherals that in total support an area-constrained user interface and a non-area constrained user interface; and a display projector that projects a non-area constrained user interface display onto a display surface; whereby the set of peripherals includes a pointing and selection device capable of controlling a cursor image on the projected non-area constrained user interface and making selections based on interactive portions of the projected non-area constrained user interface.

Claim 24

19 . The mobile unit of claim 18 , further comprising: a short range wireless transceiver; and an input configuration module capable of reconfiguring the mobile unit to accept a user interface input from an input device supplied by the short range wireless transceiver and to display this user input onto the projected non-area constrained user interface.

Claim 25

20 . The mobile unit of claim 19 , further comprising the input device, whereby the input device comprises a lightweight portable keyboard.

Claim 26

21 . The mobile unit of claim 20 , whereby the display projector is physically built into the lightweight portable keyboard.

Claim 27

22 . The mobile unit of claim 21 , whereby the lightweight portable keyboard further comprises a frame buffer and a graphics control circuit used to provide a data source to the display projector.

Claim 28

23 . The mobile unit of claim 22 , whereby display projector comprises a laser projector that draws out a UI image.

Claim 29

24 . The mobile unit of claim 22 , whereby the laser projector comprises a plurality of lasers of different colors to provide a color UI image.

Claim 30

25 . The mobile unit of claim 22 , whereby display projector comprises a laser projector that uses raster scanning to project a UI image.

Claim 31

26 . The mobile unit of claim 25 , whereby the laser projector comprises a plurality of lasers of different colors to provide a color UI image.