Transaction security systems and methods
Outbound traffic of a host application may be received from a host device having a host processor. The secure resource may be configured to provide a secure transaction based on the outbound network traffic. Using a second processor different than the host processor, it may be determined whether the host application is authorized to provide the outbound network traffic to the secure resource. The outbound network traffic may be allowed to be forwarded to the secure resource if the host application is authorized. The outbound network traffic may be disallowed to be forwarded to the secure resource if the host application is not authorized.
1. A method comprising:
establishing, by a secure transaction device having a secure transaction device processor, redirection protocols in a host device having a host device processor different than the secure transaction device processor, the host device having a host device network connection, the secure transaction device having a secure transaction device network connection different than the host device network connection, the redirection protocols causing the host device to redirect all network traffic to the secure transaction device when the secure transaction device is coupled to the host device and not to redirect all network traffic to the secure transaction device when the secure transaction device is not coupled to the host device, the secure transaction device network connection configured to use network configuration details of the host device network connection to mimic the host device network connection to render the secure transaction device transparent to a remote network resource;
when the secure transaction device is coupled to the host device,
receiving, by the secure transaction device from the host device, outbound network traffic originated by a host application on the host device, the outbound network traffic directed to the remote network resource, the remote network resource being remote from the secure transaction device and from the host device;
establishing, by the secure transaction device, a secure tunnel between the host device via the secure transaction device network connection to the remote network resource; and
transmitting the outbound network traffic from the host application via the secure tunnel to the remote network resource; and
the host device being configured to, when the secure transaction device is not coupled to the host device, transmit the outbound network traffic from the host application via the host device network connection to the remote network resource.
2. The method of claim 1 , wherein the host application comprises a stand-alone application resident on the host device, or an interface resident on the host device that cooperates with a server application resident on at least one server.
3. The method of claim 1 , further comprising determining whether the host application is authorized to access the remote network resource.
4. The method of claim 3 , wherein the determining whether the host application is authorized to access the remote network resource comprises looking up permissions of the host application on the security policy.
5. The method of claim 1 , further comprising determining whether a user of the host application has permission to access sensitive information on the remote network resource.
6. The method of claim 1 , wherein the secure transaction device is a device coupled externally to the host device.
7. The method of claim 1 , wherein the secure transaction device is a device coupled internally to the host device.
8. The method of claim 1 , wherein the establishing redirection protocols in the host device includes injecting redirection code into an operating system of the host device.
9. The method of claim 1 , wherein the network configuration details include network protocols and network addresses.
10. A secure transaction device comprising:
a secure transaction device processor;
a secure transaction device network connection; and
memory storing computer code that, when processed by the secure transaction device processor, is configured to cause the secure transaction device to perform:
establishing redirection protocols in a host device having a host device processor different than the secure transaction device processor, the host device having a host device network connection different than the secure transaction device network connection different than the host device network connection, the redirection protocols causing the host device to redirect all network traffic to the secure transaction device when the secure transaction device is coupled to the host device and not to redirect all network traffic to the secure transaction device when the secure transaction device is not coupled to the host device, the secure transaction device network connection configured to use network configuration details of the host device network connection to mimic the host device network connection to render the secure transaction device transparent to a remote network resource;
when the secure transaction device is coupled to the host device,
receiving, by the secure transaction device from the host device, outbound network traffic originated by a host application on the host device, the outbound network traffic directed to the remote network resource, the remote network resource being remote from the secure transaction device and from the host device:
establishing a secure tunnel between the host device via the secure transaction device network connection to the remote network resource; and
transmitting the outbound network traffic from the host application via the secure tunnel to the remote network resource; and
the host device being configured to, when the secure transaction device is not coupled to the host device, transmit the outbound network traffic from the host application via the host device network connection to the remote network resource.
11. The secure transaction device of claim 10 , wherein the host application comprises a stand-alone application resident on the host device, or an interface resident on the host device that cooperates with a server application resident on at least one server.
12. The secure transaction device of claim 10 , wherein the computer code is further configured to cause the secure transaction device to perform determining whether the host application is authorized to access the remote network resource.
13. The secure transaction device of claim 12 , wherein the computer code configured to cause the secure transaction device to perform determining whether the host application is authorized to access the remote network resource comprises computer code configured to cause the secure transaction device to perform looking up permissions of the host application on the security policy.
14. The secure transaction device of claim 10 , wherein the computer code is further configured to cause the secure transaction device to perform determining whether a user of the host application has permission to access sensitive information on the remote network resource.
15. The secure transaction device of claim 10 , wherein the secure transaction device is a device coupled externally to the host device.
16. The secure transaction device of claim 10 , wherein the secure transaction device is a device coupled internally to the host device.
17. The secure transaction device of claim 10 , wherein the computer code configured to cause the secure transaction device to perform establishing redirection protocols in the host device comprises computer code configured to cause the secure transaction device to perform injecting redirection code into an operating system of the host device.
18. The secure transaction device of claim 10 , wherein the network configuration details include network protocols and network addresses.
19. A non-transitory computer-readable medium comprising computer code configured to instruct one or more processors to perform:
establishing, by a secure transaction device having a secure transaction device processor, redirection protocols in a host device having a host device processor different than the secure transaction device processor, the host device having a host device network connection, the secure transaction device having a secure transaction device network connection different than the host device network connection, the redirection protocols causing the host device to redirect all network traffic to the secure transaction device when the secure transaction device is coupled to the host device and not to redirect all network traffic to the secure transaction device when the secure transaction device is not coupled to the host device, the secure transaction device network connection configured to use network configuration details of the host device network connection to mimic the host device network connection to render the secure transaction device transparent to a remote network resource;
when the secure transaction device is coupled to the host device,
receiving, by the secure transaction device from the host device, outbound network traffic originated by a host application on the host device, the outbound network traffic directed to the remote network resource, the remote network resource being remote from the secure transaction device and from the host device;
establishing, by the secure transaction device, a secure tunnel between the host device via the secure transaction device network connection to the remote network resource; and
transmitting the outbound network traffic from the host application via the secure tunnel to the remote network resource; and
the host device being configured to, when the secure transaction device is not coupled to the host device, transmit the outbound network traffic from the host application via the host device network connection to the remote network resource.