Method and system for establishing a communications pipe between a personal security device and a remote computer system
View Patent ↗A method and a system is provided for establishing a communications path over a communications network between a personal security device (PSD) and a remote computer system without requiring the converting of high-level messages such as API-level messages to PSD-formatted messages such as APDU-formatted messages (and inversely) to be installed on a local client device in which the PSD is connected.
1. A non-transitory computer-readable medium, that contains software that establishes a communications pipe between at least one personal security device (PSD) and at least one remote computer system over a network using at least one client device, the software comprising:
executable code that converts a request to access the at least one PSD from said high-level messaging format to a PSD-formatted request message;
executable code that encapsulates the PSD-formatted request message with a packet-based communications protocol, thus producing an encapsulated PSD-formatted request message;
executable code that transmits via the network the encapsulated PSD-formatted request message, using the packet-based communications protocol, from the at least one remote computer system to the at least one client device;
executable code that extracts the PSD-formatted request message from the encapsulated PSD-formatted request message;
executable code that transmits the PSD-formatted request message from the at least one client device to the at least one PSD;
executable code that processes the PSD-formatted request message, thus producing a PSD-formatted response message;
executable code that transmits the PSD-formatted response message from the at least one PSD to the at least one client device;
executable code that encapsulates the PSD-formatted response message with the packet-based communications protocol, thus producing an encapsulated PSD-formatted response message;
executable code that transmits the encapsulated PSD-formatted response message, using the packet-based communications protocol, from the at least one client device to the at least one remote computer system via the network;
executable code that extracts the PSD-formatted response message from the encapsulated PSD-formatted response message;
executable code that converts the PSD-formatted response message into a high-level response message; and
executable code that processes the high-level response message in the at least one remote computer system.
2. A non-transitory computer-readable medium according to claim 1 , further comprising:
executable code that encrypts the PSD-formatted request message in the at least one remote computer system;
executable code that decrypts the PSD-formatted request message in the at least one PSD;
executable code that encrypts the PSD-formatted response message in the at least one PSD; and
executable code that decrypts the PSD-formatted response message in the at least one remote computer system.
3. A non-transitory computer-readable medium according to claim 2 , wherein the at least one PSD includes unique identification information.
4. A non-transitory computer-readable medium according to claim 3 , further comprising:
executable code that cross-references the unique identification information with a look-up table in order to select at least one cryptographic device for encrypting and decrypting the PSD-formatted request message and encrypting and decrypting the PSD-formatted response message.
5. A non-transitory computer-readable medium according to claim 1 , further comprising:
executable code that initiates the communications pipe automatically upon connection of the at least one PSD to said at least one client device.
6. A non-transitory computer-readable medium according to claim 1 , further comprising:
executable code that initiates the communications pipe upon an initial request generated by the at least one client device.
7. A non-transitory computer-readable medium according to claim 1 , further comprising:
executable code that initiates the communications pipe upon an initial request generated by at least one remote computer system.
8. A non-transitory computer-readable medium according to claim 1 , further comprising:
executable code that establishes the communications pipe in the background.
9. A non-transitory computer-readable medium according to claim 1 , wherein the high-level messaging format is an API-level format, and wherein the PSD-formatted messages are APDU-formatted messages.