Data security method and system

Claim 2

A data security method for executing part of a server process, originated from a server machine, within a process execution space of a client machine, said method comprising the steps of: (a) assigning a process execution space in the client machine, (b) calling the server machine from the client machine, (c) transferring a program that is part of the server process from the server machine to said process execution space in the client machine, and (d) executing the program from the server machine in said process execution space in the client machine, such that a part of the server process is executed in said process execution space reserved in the client machine, and such that the server machine and part of the client machine cooperatively execute a process of the program.

Claim 3

A data security method according to claim 1, further comprising the steps of: (e) interfacing the client process with the server process in the client machine, and (f) communicating between the client process and server process.

Claim 4

A data security method according to claim 1, wherein said client machine encrypts and decrypts data using encryption and decryption information contained in the program transferred from the server machine.

Claim 5

A data security method according to claim 2, wherein said client machine comprises an application-specific integrated circuit unit to execute at least a part of the encryption and decryption process under the control of the program transferred from the server.

Claim 6

A data security system for executing a process of a server machine within a process execution space of a client machine, said system comprising: (1) a server machine comprising: (a) a first CPU; and (b) a first memory; (2) a client machine comprising: (a) a second CPU; (b) a second memory; (c) a third CPU; and (d) a third memory; (3) first communication means provided between the server machine and the client machine for communicating between the first CPU associated with the first memory and the third CPU associated with the third memory, and for loading a program from the first memory to the third memory for execution by the third CPU; (4) second communication means provided in the client machine for communicating between said second CPU and third CPU; and (5) means for preventing interaction between the second and third memories except when controlled by the program being executed by the client system.

Claim 7

A data security system for executing a process of a server machine within a process execution space of a client machine, said system comprising: (1) a server machine comprising: (a) a first CPU; and (b) a first memory; (2) a client machine comprising: (a) a second CPU; (b) a second memory; (c) a third CPU; and (d) a third memory; (3) first communication means provided between the server machine and the client machine for communicating between the first CPU associated with the first memory and the third CPU associated with the third memory, and for loading a program from the first memory to the third memory for execution by the third CPU; (4) second communication means provided in the client machine for communicating between said second CPU and third CPU; and (5) means for preventing interaction between the second and third memories except when controlled by the program being executed by the client system.

Claim 8

A data security system according to claim 5 wherein said client machine comprises a primary machine portion comprising said second CPU and said second memory, and a connectable machine portion comprising said third CPU and third memory.

Claim 9

A data security system according to claim 6, wherein said connectable machine portion further comprises a communication circuit.

Claim 10

A data security system according to claim 6, wherein said connectable machine portion is implemented in a card.

Claim 11

A data security system according to claim 8, wherein said card comprises a printed circuit board.

Claim 12

A data security system according to claim 7, wherein said connectable machine portion is implemented in a card.

Claim 13

A data security system according to claim 10, wherein said card comprises a printed circuit board.

Claim 14

A data security system according to claim 6, wherein said connectable machine portion further comprises an encryption/decryption circuit.

Claim 15

A data security system according to claim 5, wherein said second CPU and third CPU are provided by a single CPU in a time sharing manner.

Claim 16

A data security method according to claim 1, further comprising the step of: dynamically changing the process cooperatively executed by the server machine and part of the client machine.

Claim 17

A data security method according to claim 14, wherein the process is a security procedure, said dynamically changing step repeatedly modifying the security procedure under control of the server machine.

Claim 18

A data security system according to claim 5, wherein said first CPU and said third CPU cooperatively execute a process within the program.

Claim 19

A data security system according to claim 16, said server machine further comprising: means for dynamically changing the process cooperatively executed by said first CPU and said third CPU.

Claim 20

A data security system according to claim 17, wherein the process is a security procedure, said dynamically changing means repeatedly modifying the security procedure under control of the server machine.

Claim 21

A data security system for executing a process of a server machine within a process execution space of a client machine, said system comprising: a server machine including a first CPU, and a first memory; a client machine including a second CPU, a second memory, a third CPU, and a third memory; a first communication channel operatively connecting said client machine and said server machine; said server machine utilizing said first communication channel to load a portion of a security program from said first memory to said third memory; said server machine and said client machine cooperatively executing the security program with said first CPU and said third CPU such that the security program is managed by the client machine and executed under operative control of said server machine; a second communication channel in said client machine, said second communication channel operatively connecting said second CPU and said third CPU; and a security device operatively connected to said second and third memories, said security device preventing interaction between said second and third memories except when controlled by the security program being cooperatively executed by said server machine and said client machine.

Claim 22

A data security system for executing a process of a server machine within a process execution space of a client machine, said system comprising: a server machine including a first CPU, and a first memory; a client machine including a second CPU, a second memory, a third CPU, and a third memory; a first communication channel operatively connecting said client machine and said server machine; said server machine utilizing said first communication channel to load a portion of a security program from said first memory to said third memory; said server machine and said client machine cooperatively executing the security program with said first CPU and said third CPU such that the security program is managed by the client machine and executed under operative control of said server machine; a second communication channel in said client machine, said second communication channel operatively connecting said second CPU and said third CPU; and a security device operatively connected to said second and third memories, said security device preventing interaction between said second and third memories except when controlled by the security program being cooperatively executed by said server machine and said client machine.

Claim 23

A data security system according to claim 19, said server machine dynamically changing the security program cooperatively executed by said first CPU and said third CPU.

Claim 24

A data security system according to claim 20, said server machine repeatedly modifying the security program cooperatively executed by said first CPU and said third CPU.

Claim 25

A data security system according to claim 19, said client machine comprising a primary machine portion including said second CPU and said second memory and a connectable machine portion including said third CPU and said third memory.

Claim 26

A data security system according to claim 22, wherein said connectable machine portion further includes a communication circuit.

Claim 27

A data security system according to claim 22, wherein said connectable machine portion is implemented in a card.

Claim 28

A data security system according to claim 24, wherein said card comprises a printed circuit board.

Claim 29

A data security system according to claim 22, wherein said connectable machine portion further comprises an encryption/decryption circuit.

Claim 30

A data security system according to claim 19, wherein said second CPU and said third CPU are provided by a single CPU in a time sharing manner.