| 摘要 |
The method for authorized data entry and securing the authenticity of such data when entering cryptographic operations is characterised in that the application in the computer (A), requiring authorized data entry, sends a specific command to the STM module (C) which defines a template of input data intended to be cryptographically processed. This specific command switches the STM module (C) over to the secure typing mode, the STM module (C) autonomously controls the typing of required data items of the data template, by recording characters typed on the connected entry device (D) and the recorded characters are arranged by the STM module (C) in its internal memory in requested data structures defined by the the input data template, and such created data are sent by the STM module (C) directly to the token (E) where the requested cryptographic operation is called, the result of which is sent to the computer (A) by the STM module (C), and subsequently the STM module (C) switches back to the transparent mode. For the devices according to the present invention, both the data entry device (D) and the external token (E) are connected to the computer (A) via an additional STM module (C) which is standardly in the transparent mode when transferring data between the computer (A) and connected peripherals, such as the data entry device (D) and the token (E), without affecting the process, with the specific command sent from the appliction in the computer (A) being a transferrable template of data defining the requirements for the input data of cryptographic operations and the STM module (C) which can be switched over to the secure typing mode where the STM module (C) autonomously controls data typing on the data entry device (D) and their cryptographic processing in the token (E). |
