US5596718A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure computer network using trusted path subsystem which encrypts/decrypts and communicates with user through local workstation user I/O devices without utilizing workstation processor
Assignee: McAfee LLC
•
Filing: 1992-07-10
•
Granted: 1997-01-21
•
Expires: 2012-07-10
Abstract
Abstract A method and apparatus for ensuring secure communication over an unsecured communications medium between a user working on an unsecured workstation or computer and a host computer. A secure user interface is created by inserting a trusted path subsystem between input/output devices to the workstation and the workstation itself. Data transferred from the input/output devices is intercepted, encrypted and transmitted in packets to the host computer. Packets of screen display data from the host computer are decrypted and presented within a user-defined screen overlay.
Inventors
- 👤 William E. Boebert
- 👤 Mark H. Hanson
- 👤 Thomas R. Markham
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 02:22
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/606; G06F21/30; G06F21/31; G06F21/42; G06F21/50; G06F21/52; G06F21/54; G06F21/70; G06F21/82; G06F21/83; G06F21/84; G07; G07F; G07F7/00; G07F7/08; G07F7/0806; G07F7/0813; G07F7/0826; G06F2211/00; G06F2211/007; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2149; G06F2221/2153
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
97 words
A secure computing network, comprising: a network computer, wherein the network computer comprises a trusted subsystem including a cryptographic entity; communications means, connected to the network computer, for transferring data between the network computer and another computer; an input/output device; a workstation connected to the communications means, wherein the workstation comprises an input/output device port and an auxiliary data port; and a trusted path subsystem, connected to the input/output device, the input/output device port and the auxiliary data port, wherein the trusted path subsystem comprises encryption means for encrypting and decrypting data transferred over said communications means.
Claim 2
Dependent Claim
97 words
A secure computing network, comprising: a network computer, wherein the network computer comprises a trusted subsystem including a cryptographic entity; communications means, connected to the network computer, for transferring data between the network computer and another computer; an input/output device; a workstation connected to the communications means, wherein the workstation comprises an input/output device port and an auxiliary data port; and a trusted path subsystem, connected to the input/output device, the input/output device port and the auxiliary data port, wherein the trusted path subsystem comprises encryption means for encrypting and decrypting data transferred over said communications means.
Claim 3
Dependent Claim
28 words
The secure computing network of claim 1 wherein said network computer is a multilevel secure computer capable of recognizing data of varying sensitivity and users of varying authorizations.
Claim 4
Dependent Claim
14 words
The secure computing network of claim 1 wherein said input/output device comprises a keyboard.
Claim 5
Dependent Claim
15 words
The secure computing network of claim 1 wherein said input/output device comprises a display device.
Claim 6
Dependent Claim
15 words
The secure computing network of claim 1 wherein said input/output device comprises a pointing device.
Claim 7
Dependent Claim
115 words
A secure computing network comprising: a network computer, wherein the network computer comprises a trusted subsystem including a cryptographic entity; communications means, connected to the network computer, for transferring data between the network computer and another computer; an input/output device; a workstation comprising: an input/output device port; and a workstation communications port; and a trusted path subsystem, connected to said input/output device said input/output device port, said workstation communications port and said communications means, wherein the trusted path subsystem comprises encryption means for encrypting and decrypting data transferred over said communications means and network interface means, connected to the communication means, for transferring the encrypted data between the trusted path subsystem and the trusted subsystem.
Claim 8
Dependent Claim
115 words
A secure computing network comprising: a network computer, wherein the network computer comprises a trusted subsystem including a cryptographic entity; communications means, connected to the network computer, for transferring data between the network computer and another computer; an input/output device; a workstation comprising: an input/output device port; and a workstation communications port; and a trusted path subsystem, connected to said input/output device said input/output device port, said workstation communications port and said communications means, wherein the trusted path subsystem comprises encryption means for encrypting and decrypting data transferred over said communications means and network interface means, connected to the communication means, for transferring the encrypted data between the trusted path subsystem and the trusted subsystem.
Claim 9
Dependent Claim
28 words
The secure computing network of claim 6 wherein said network computer is a multilevel secure computer capable of recognizing data of varying sensitivity and users of varying authorizations.
Claim 10
Dependent Claim
14 words
The secure computing network of claim 6 wherein said input/output device comprises a keyboard.
Claim 11
Dependent Claim
15 words
The secure computing network of claim 6 wherein said input/output device comprises a display device.
Claim 12
Dependent Claim
15 words
The secure computing network of claim 6 wherein said input/output device comprises a pointing device.
Claim 13
Independent Claim
148 words
A method of securely transferring data in a network comprising an unsecured workstation connected to a secure computer server, wherein the unsecured workstation includes a workstation processing unit and an input/output device and wherein the workstation processing unit includes an input/output device port and an auxiliary data port, the method comprising the steps of: providing a secure server having a trusted subsystem, wherein the trusted subsystem includes encryption means for encrypting and decrypting data transferred to and from the trusted subsystem; providing a trusted path subsystem, wherein the trusted path subsystem includes a trusted path subsystem processor and an input/output device manager; and inserting the trusted path subsystem between the input/output device and the workstation processing unit, wherein the step of inserting includes the steps of: connecting the input/output device port to the input/output device manager; and connecting the auxiliary data port to the trusted path subsystem processor.
Claim 14
Independent Claim
148 words
A method of securely transferring data in a network comprising an unsecured workstation connected to a secure computer server, wherein the unsecured workstation includes a workstation processing unit and an input/output device and wherein the workstation processing unit includes an input/output device port and an auxiliary data port, the method comprising the steps of: providing a secure server having a trusted subsystem, wherein the trusted subsystem includes encryption means for encrypting and decrypting data transferred to and from the trusted subsystem; providing a trusted path subsystem, wherein the trusted path subsystem includes a trusted path subsystem processor and an input/output device manager; and inserting the trusted path subsystem between the input/output device and the workstation processing unit, wherein the step of inserting includes the steps of: connecting the input/output device port to the input/output device manager; and connecting the auxiliary data port to the trusted path subsystem processor.
Claim 15
Independent Claim
210 words
A method for providing secure file transfer capability over a network from an unsecured workstation to a second computer, wherein the workstation comprises an input/output device and a workstation processing unit, wherein the workstation processing unit includes an auxiliary data port and an input/output device port and wherein the second computer comprises a trusted subsystem and encryption means for encrypting and decrypting data transferred between the unsecured workstation and the trusted subsystem, the method comprising the steps of: providing a trusted path subsystem, said trusted path subsystem including an input/output device manager and a trusted path subsystem processor capable of executing a secure electronic mail program; inserting the trusted path subsystem between the input/output device and the workstation processing unit, wherein the step of inserting includes the steps of: connecting the input/output device port to the input/output device manager; and connecting the auxiliary data port to the trusted path subsystem processor; downloading from the workstation processing unit to the trusted path subsystem processor a file to be transferred to the second computer; displaying, on the input/output device, a representation of the file to be transferred; if the file is as expected, transferring the file to the second computer; and if the file is not as expected, generating an error message.
Claim 16
Independent Claim
210 words
A method for providing secure file transfer capability over a network from an unsecured workstation to a second computer, wherein the workstation comprises an input/output device and a workstation processing unit, wherein the workstation processing unit includes an auxiliary data port and an input/output device port and wherein the second computer comprises a trusted subsystem and encryption means for encrypting and decrypting data transferred between the unsecured workstation and the trusted subsystem, the method comprising the steps of: providing a trusted path subsystem, said trusted path subsystem including an input/output device manager and a trusted path subsystem processor capable of executing a secure electronic mail program; inserting the trusted path subsystem between the input/output device and the workstation processing unit, wherein the step of inserting includes the steps of: connecting the input/output device port to the input/output device manager; and connecting the auxiliary data port to the trusted path subsystem processor; downloading from the workstation processing unit to the trusted path subsystem processor a file to be transferred to the second computer; displaying, on the input/output device, a representation of the file to be transferred; if the file is as expected, transferring the file to the second computer; and if the file is not as expected, generating an error message.
Claim 17
Dependent Claim
33 words
The method according to claim 12 wherein the step of generating an error message includes the steps of displaying the error message on the input/output device and opening the file for secured processing.
References Cited (Backward Citations)
US4177510A
Cited
US3956615A
Cited
US4104721A
Cited
US4227253A
Cited
US4238854A
Cited
US4264782A
Cited
US4442484A
Cited
US4438824A
Cited
US4575797A
Cited
US4578530A
Cited
EP0096628A2
Cited
US4648031A
Cited
US4825050A
Cited
US4629872A
Cited
US4621321A
Cited
US4652698A
Cited
US4998279A
Cited
US4713753A
Cited
US5018096A
Cited
US4918653A
Cited
US4885789A
Cited
US4980913A
Cited
US4888801A
Cited
US4965568A
Cited
US5065429A
Cited
EP0443423A2
Cited
US5070528A
Cited
US5283828A
Cited
US5148479A
Cited
WO1992017958A1
Cited
US5272754A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-01-21 | 2000-07-22 | 2001-01-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-01-21 | 2004-07-22 | 2005-01-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-01-21 | 2008-07-22 | 2009-01-21 | $7700.00 | Window Closed / Lapsed |