Secure data management device
Methods, devices, and systems for managing sensitive data are provided. The management tool may be provided on a user input device, as opposed to being provided in memory or in a peripheral that can be read from a program running on a computing platform. The management tool may be maintained in a read/write isolation mode where no data is transmitted outside of the management tool unless the user input device is disengaged from the computing platform, at which point data may be transmitted from the management tool for ultimate delivery to the computing platform.
1. A method, comprising:
maintaining user input data on a security module;
restricting read/write access to the security module until a physical user action has been taken at the security module, wherein the security module is in communication with a user input device when the read/write access to the security is restricted;
detecting a first user input at the security module, wherein the first user input comprises (i) receiving an access authorization password associated with a user-selected amount of user input data and (ii) receiving an indication that a physical switch has been engaged that indicates transmission of the user-selected amount of user input data is allowable;
in response to detecting the first user input, transmitting the user-selected amount of the user input data from the security module to a computing platform, the method further comprising:
in response to detecting the first user input, deactivating a switched interface between the input device and the computing platform and then activating a switched interface between the security module and the input device;
transmitting the user-selected amount of the user input data from the security module to the input device;
detecting a second input at the security module; and
in response to detecting the second user input, deactivating the switched interface between the security module and the input device and then activating the switched interface between the input device and the computing platform thereby allowing the user-selected amount of user input data to be transmitted to the computing platform.
2. The method of claim 1 , further comprising: the input device encoding the user-selected amount of user input data according to a protocol used by the input device to communicate with the computing platform; and the input device transmitting the encoded user-selected amount of user input data.
3. The method of claim 1 , wherein the input device comprises at least one of a keyboard, mouse, phone, and Point of Service (POS) device.
4. The method of claim 1 , further comprising:
detecting that all of the user-selected amount of user input data has been transmitted from the security module, wherein detecting that all of the user-selected amount of user input
providing an indication to a user of the security module that the user-selected amount of user input data has been transmitted from the security module.
5. The method of claim 1 , wherein the user-selected amount of user input data comprises at least one of a user name, a password, encryption data, identification information, user preferences, account information, field entry instructions, and signal conversion information associated with an application that is accessible via the computing platform, and wherein the physical switch is a device configured to make or break a connection between terminals of an electrical circuit.
6. The method of claim 1 , further comprising:
connecting the security module to a user input device that is in communication with the computing platform; disengaging the user input device from the computing platform;
allowing read/write access to the security module while the user input device is disengaged from the computing platform;
receiving user input at the user input device; and
updating the data on the security module with the input received at the user input device.
7. A non-transitory computer readable medium comprising processor executable instructions operable to perform the method of claim 1 .
8. A user input device comprising a security module, comprising:
memory operable to store user input data;
a processor operable to retrieve user-selected application data from the user input data;
a first switched interface operable to restrict read/write access to the user input data until (i) an access authorization password associated with the user input data has been received and (ii) engagement of a physical switch has been detected; and
a second switched interface that facilitates selective communication between the user input device and a computing platform, wherein while the first switched interface of the security module is in an active state the second switched interface of the user input device is in an inactive state and wherein while the first switched interface of the security module is in an inactive state the second switched interface of the user input device is in an active state.
9. The security module of claim 8 , further comprising:
an output buffer for storing the user-selected application data until the physical switch is engaged, wherein contents of the output buffer comprise a single instance of the user-selected application data.
10. The security module of claim 9 , further comprising:
a user output operable to indicate to a user of the security module when transfer of the user-selected application data from the security module has completed.
11. The security module of claim 8 , wherein the user input device further comprises the switch.
12. The security module of claim 8 , wherein the switched interfaces are adapted to allow user input data transmissions there through while in an active state and wherein the switched interfaces are adapted to restrict data transmission there through while in an inactive state.
13. A computing system, comprising:
a user input device operable to provide user inputs to a computing platform;
a security module operable to maintain user input data in a secure state, restrict the user input device from accessing the user input data until a physical user action has been taken at the security module, detect a first user input, and in response to detecting the first user input, transmit a user-selected amount of user input data to the user input device;
a first switched interface between the security module and the user input device;
a second switched interface between the user input device and the computing platform; and
wherein, in response to detecting the first user input, the second switched interface is deactivated and then the first switched interface is activated such that the user-selected amount of the user input data is transmitted from the security module to the user input device and wherein in response to detecting a second user input, the first switched interface is deactivated and then the second switched interface is activated such that the user-selected amount of user input data is transmitted to the computing platform.
14. The system of claim 13 , wherein the first user input comprises (i) receiving an access authorization password associated with the user-selected amount of user input data and (ii) receiving an indication that a physical switch has been engaged that indicates transmission of the user-selected amount of user input data is allowable, and wherein the user input device is further operable to forward the user-selected amount of user input data received from the security module to a computing platform.
15. The system of claim 14 , wherein the user-selected amount of user input data comprises at least one of a user name, a password, encryption data, identification information, user preferences, account information, field entry instructions, and signal conversion information associated with an application that is accessible via the computing platform.
16. The system of claim 13 , further comprising:
a switch provided on at least one of the security module and user input device, wherein the switch is operable to receive the first user input; and
a user output device operable to indicate to a user that all of the user-selected amount of user input data has been transmitted to the user input device.