| 摘要 |
This invention relates to a portable secure identity and mass storage device comprises an identity processing unit, a cryptographic processing unit and a mass storage unit. The identity processing unit in this invention authenticates the owner of the device. The identity processing unit can be a biometrics processing unit, a radio frequency identity reader (RPID) or a wireless smart card reader. The identity processing unit retrieves the identification signal, external to the device, performs signal processing, authenticates the signal retrieved against identity parameters stored within the device independent from a PC Host . The cryptographic processing unit is used to read a smart card which enables seamless integration into Public Key Infrastructure (PKI) ar- chitecruresand stores users' personal certificate credentials, such as private keys, passwords and digital certificate. Unlike other smart card systems which are accessed by entering a Personal Identification Number(PIN) in the personal computer; the identity processing unit is used to enable secure access to the smart card, once authenticated, by releasing the PIN without going through a PC. The PIN number is securely embedded within the device and cannot be accessed by any PC. In addition, the cryptographic processor can generate one time passwords and enable the security token by an authenticated identity entry. The access to the mass storage device is also protected by the identity authentication. The data stored within the device is encrypted.The encryption keys are stored within the device. The encryption key is generated in the mass storage processor from two encryption keys that are physical stored in two separate integrated circuits.
|
