US5822435A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Trusted path subsystem for workstations
Assignee: McAfee LLC
•
Filing: 1996-09-18
•
Granted: 1998-10-13
•
Expires: 2016-09-18
Abstract
Abstract A method and apparatus for ensuring secure communication over an unsecured communications medium between a user working on an unsecured workstation or computer and a host computer. A secure user interface is created by inserting a trusted path subsystem between input/output devices to the workstation and the workstation itself. Data transferred from the input/output devices is intercepted, encrypted and transmitted in packets to the host computer. Packets of screen display data from the host computer are decrypted and presented within a user-defined screen overlay.
Inventors
- 👤 William E. Boebert
- 👤 Mark H. Hanson
- 👤 Thomas R. Markham
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 21:38
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/606; G06F21/30; G06F21/31; G06F21/42; G06F21/50; G06F21/52; G06F21/54; G06F21/70; G06F21/82; G06F21/83; G06F21/84; G07; G07F; G07F7/00; G07F7/08; G07F7/0806; G07F7/0813; G07F7/0826; G06F2211/00; G06F2211/007; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2149; G06F2221/2153
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
126 words
A trusted path subsystem comprising: a processor, wherein the processor includes a communications port; an input data manager connected to the processor, wherein the input data manager includes an input data switch; a display manager connected to the processor, wherein the display manager includes a display switch; wherein the input data switch operates in trusted path mode to intercept data received by the input data manager and transfer the intercepted data to the processor; wherein the processor operates in trusted path mode to encrypt the intercepted data and transfer the encrypted intercepted data to the communications port; and wherein the display switch operates in trusted path mode to modify display information transferred by the display manager as a function of display information created by the processor.
Claim 2
Dependent Claim
126 words
A trusted path subsystem comprising: a processor, wherein the processor includes a communications port; an input data manager connected to the processor, wherein the input data manager includes an input data switch; a display manager connected to the processor, wherein the display manager includes a display switch; wherein the input data switch operates in trusted path mode to intercept data received by the input data manager and transfer the intercepted data to the processor; wherein the processor operates in trusted path mode to encrypt the intercepted data and transfer the encrypted intercepted data to the communications port; and wherein the display switch operates in trusted path mode to modify display information transferred by the display manager as a function of display information created by the processor.
Claim 3
Dependent Claim
23 words
The trusted path subsystem according to claim 1 wherein the processor further includes a cryptographic entity used to selectively encrypt and decrypt data.
Claim 4
Dependent Claim
16 words
The trusted path subsystem according to claim 1 wherein the subsystem further includes a network interface.
Claim 5
Dependent Claim
17 words
The trusted path subsystem according to claim 1 wherein the input data switch comprises keyboard manager logic.
Claim 6
Dependent Claim
123 words
The trusted path subsystem according to claim 1 wherein the display switch includes: a video multiplexer having first and second video multiplexer input ports and a video multiplexer output port, wherein the video multiplexer output port generates an output video signal used to drive a video display; a video data memory; converter means, connected to the video data memory and the second video multiplexer input port, for converting data read from said video data memory into a trusted video signal representative of that data and for applying the trusted video signal to the second video multiplexer input port; and a video synchronization circuit, connected to the video data memory and the video multiplexer, for controlling the video data memory and the video multiplexer.
Claim 7
Dependent Claim
17 words
The trusted path subsystem according to claim 5 wherein the input data switch comprises keyboard manager logic.
Claim 8
Dependent Claim
33 words
The trusted path subsystem according to claim 5 wherein the video synchronization circuit includes means for inserting a trusted window overlay into a video signal received at the first video multiplexer input port.
Claim 9
Dependent Claim
17 words
The trusted path subsystem according to claim 7 herein the input data switch comprises keyboard manager logic.
Claim 10
Dependent Claim
221 words
A trusted path subsystem comprising: a processor, wherein the processor includes a communications port; an input data manager connected to the processor, wherein the input data manager includes a data input port, a data output port and an input data switch, wherein the input data switch is connected to the processor, the data input port and the data output port; a display manager connected to the processor, wherein the display manager includes a display input port, a display output port and a display switch, wherein the display switch is connected to the processor, the display input port and the display output port; wherein the input data switch operates in normal mode to transfer data received at the data input port to the data output port and in trusted path mode to intercept the data received at the data input port and transfer the intercepted data to the processor; wherein the processor operates in trusted path mode to encrypt the intercepted data and transfer the encrypted intercepted data to the communications port; and wherein the display switch operates in normal mode to transfer display information received at the display input port to the display output port and in trusted path mode to modify the display information received at the data input port as a function of display information received from the processor.
Claim 11
Dependent Claim
221 words
A trusted path subsystem comprising: a processor, wherein the processor includes a communications port; an input data manager connected to the processor, wherein the input data manager includes a data input port, a data output port and an input data switch, wherein the input data switch is connected to the processor, the data input port and the data output port; a display manager connected to the processor, wherein the display manager includes a display input port, a display output port and a display switch, wherein the display switch is connected to the processor, the display input port and the display output port; wherein the input data switch operates in normal mode to transfer data received at the data input port to the data output port and in trusted path mode to intercept the data received at the data input port and transfer the intercepted data to the processor; wherein the processor operates in trusted path mode to encrypt the intercepted data and transfer the encrypted intercepted data to the communications port; and wherein the display switch operates in normal mode to transfer display information received at the display input port to the display output port and in trusted path mode to modify the display information received at the data input port as a function of display information received from the processor.
Claim 12
Dependent Claim
23 words
The trusted path subsystem according to claim 9 wherein the processor further includes a cryptographic entity used to selectively encrypt and decrypt data.
Claim 13
Dependent Claim
16 words
The trusted path subsystem according to claim 9 wherein the subsystem further includes a network interface.
Claim 14
Dependent Claim
17 words
The trusted path subsystem according to claim 9 wherein the input data switch comprises keyboard manager logic.
Claim 15
Dependent Claim
160 words
The trusted path subsystem according to claim 9 wherein the display switch includes: a video multiplexer having first and second video multiplexer input ports and a video multiplexer output port, wherein the first video multiplexer input port receives a video signal from the display input port and wherein the video multiplexer output port generates an output video signal used to drive a video display; a video data memory; converter means, connected to the video data memory and the second video multiplexer input port, for converting data read from said video data memory into a trusted video signal representative of that data and for applying the trusted video signal to the second video multiplexer input port; and a video synchronization circuit, connected to the video data memory and the video multiplexer, for controlling the video data memory and the video multiplexer so as to insert the trusted video signal into the output video signal generated at the video multiplexer output port.
Claim 16
Dependent Claim
17 words
The trusted path subsystem according to claim 13 wherein the input data switch comprises keyboard manager logic.
References Cited (Backward Citations)
US4352952A
Cited
US4365249A
Cited
US4368357A
Cited
US4817147A
Cited
US4922534A
Cited
US4815128A
Cited
US4989244A
Cited
US4985919A
Cited
US4981371A
Cited
US5001750A
Cited
US5430800A
Cited
US5062136A
Cited
US5241596A
Cited
US5280529A
Cited
US5166977A
Cited
US5228083A
Cited
US5341427A
Cited
US5276735A
Cited
US5410599A
Cited
US5351136A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-12 | 2002-04-13 | 2002-10-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-12 | 2006-04-13 | 2006-10-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-12 | 2010-04-13 | 2010-10-13 | $7700.00 | Window Closed / Lapsed |