System and Method for Providing Data and Device Security Between External and Host Devices
A secure data exchange system comprising a security device including a first external device plug, and a security engine operative to enforce a security policy on data transfer requests received from the host; an external device including a second external device plug; and a host including a first external device port operative to communicatively couple with the first external device plug, a second external device port operative to communicatively couple with the second external device plug, and a driver, e.g., a redirect driver, operative to transfer a data transfer request to the security device before executing the data transfer request.
1 . A security device, comprising:
an external device plug operative to communicatively couple with a host;
an external device port operative to communicatively couple with an external device;
a processor; and
memory storing
an operating system,
an external device driver operative to control communication with the external device, and
a security engine operative to enforce a security policy on a data transfer request between the external device and the host.
2 . The security device of claim 1 , wherein the security device is operative with a driver on the host.
3 . The security device of claim 1 , wherein at least one of the external device plug and the external device port follows a USB standard.
4 . The security device of claim 1 , wherein at least one of the external device plug and the external device port includes a wireless connection.
5 . The security device of claim 1 , wherein the security engine protects against the transfer of at least one of viruses, spyware and adware.
6 . The security device of claim 1 , wherein the security engine protects against the unauthorized transfer of private data.
7 . A secure data exchange system, comprising:
a security device including
a first external device plug; and
a security engine operative to enforce a security policy on data transfer requests received from the host;
an external device including
a second external device plug; and
a host including
a first external device port operative to communicatively couple with the first external device plug;
a second external device port operative to communicatively couple with the second external device plug; and
a redirect driver operative to transfer a data transfer request from the host to the security device before executing the data transfer request.
8 . The secure data exchange system of claim 7 , wherein the external device includes a USB drive.
9 . The secure data exchange system of claim 7 , wherein the external device includes one of a PDA or a cell phone.
10 . The secure data exchange system of claim 7 , wherein the host includes one of a laptop, desktop, PDA or cell phone.
11 . The secure data exchange system of claim 7 , wherein the host launches the redirect driver upon detecting connection of the secure device to the host.
12 . A method comprising:
communicatively coupling a security device to a host;
communicatively coupling an external device to the security device;
receiving by the security device a data transfer request from the host; and
enforcing by the security device a security policy on the data transfer request before allowing the data transfer request to be performed.
13 . The method of claim 12 , wherein the communicatively coupling a security device to a host includes using a wired or wireless connection.
14 . The method of claim 12 , wherein the communicatively coupling an external device to the host includes using a wired or wireless connection.
15 . The method of claim 12 , wherein the data transfer request includes a request to transfer data from the host to the external device.
16 . The method of claim 12 , wherein the data transfer request includes a request to transfer data from the external device to the host.
17 . The method of claim 12 , wherein the enforcing includes reviewing the data being transferred for at least one of viruses, spyware and adware.
18 . The method of claim 12 , wherein the enforcing includes determining whether the data transfer request includes a request for private data.
19 . The method of claim 18 , wherein the enforcing includes requiring an additional security check before allowing the transfer of private data.
20 . A method, comprising:
communicatively coupling a security device to a host;
communicatively coupling an external device to the host;
receiving by the host a data transfer request;
using a redirect driver on the host to redirect the data transfer request to the security device; and
enforcing by the security device a security policy on the data transfer request before allowing the data transfer request to be performed.
21 . The method of claim 20 , wherein the communicatively coupling a security device to a host includes using a wired or wireless connection.
22 . The method of claim 20 , wherein the communicatively coupling an external device to the host includes using a wired or wireless connection.
23 . The method of claim 20 , wherein the data transfer request includes a request to transfer data from the host to the external device.
24 . The method of claim 20 , wherein the data transfer request includes a request to transfer data from the external device to the host.
25 . The method of claim 20 , wherein the enforcing includes reviewing the data being transferred for at least one of viruses, spyware and adware.
26 . The method of claim 20 , wherein the enforcing includes determining whether the data transfer request includes a request for private data.
27 . The method of claim 26 , wherein the enforcing includes requiring an additional security check before allowing the transfer of private data.