Uniform modular framework for a host computer system
View Patent ↗A security framework for a host computer system which allows a host to control access to a compliant security token by ensuring enforcement of established security policies administered by a middleware application. Processing between the host computer system and the security token is performed using one or more modular security application agents. The modular security application agents are counterpart applications to security applications installed in the security token and may be retrieved and installed upon to ensure compatibility between counterpart token and host security applications. The security policies are a composite of host security policies and token security policies which are logically combined by the middleware application at the beginning of a session.
1. A non-transitory computer-readable medium containing software that implements a security system, the software comprising: executable code that retrieves token security policies from a compliant security token; and executable code that enforces the set of security policies when the compliant security token is used to perform a security function, wherein a host computer has retrievable host security policies, token selection policies, and a token access control application that generates a combined set of security policies using the host security policies, the token selection policies, and the token security policies and that ensures enforcement of the combined set of security policies, wherein the token selection policies include rules that indicate choice of the compliant security token.
2. A non-transitory computer-readable medium, according to claim 1 , wherein at least a portion of the host security policies are retrieved from the host computer system.
3. A non-transitory computer-readable medium, according to claim 1 , wherein at least a portion of the token security policies are retrieved from the security token.
4. A non-transitory computer-readable medium, according to claim 1 , wherein at least one security application agent and the token access control application are provided with the security token and wherein the at least one security application agent performs a security function for the token security applications in accordance with the combined security policies.
5. A non-transitory computer-readable medium, according to claim 4 , wherein in response to receiving an object from an other application, the at least one security application agent returns the object to the other application after the at least one security application agent and the token security application have performed the security function.
6. A non-transitory computer-readable medium, according to claim 5 , wherein the at least one security application agent returns the object to the token access control application after performing the security function with the one or more token security applications.
7. A non-transitory computer-readable medium, according to claim 5 , wherein the object includes at least one of: a digital certificate, data to undergo a cryptographic function, and data to be stored in the security token.
8. A non-transitory computer-readable medium, according to claim 4 , wherein the security function includes authentication using a credential.
9. A non-transitory computer-readable medium, according to claim 8 , wherein the credential includes at least one of: a personal identification number, a password and a biometric sample.
10. A non-transitory computer-readable medium, according to claim 8 , wherein the security function further includes establishing a secure messaging session.
11. A non-transitory computer-readable medium, according to claim 4 , wherein said one or more token security applications includes an authentication application.
12. A non-transitory computer-readable medium, according to claim 11 , wherein said one or more token security applications further includes a secure messaging application.
13. A non-transitory computer-readable medium, according to claim 12 , wherein the host computer system stores the combined security policies.
14. A non-transitory computer-readable medium, according to claim 12 , wherein the host security policies include at least one host access control rule.
15. A non-transitory computer-readable medium, according to claim 14 , wherein the token security policies include at least one token access control rule.
16. A non-transitory computer-readable medium, according to claim 15 , wherein the combined security policies are generated from a most restrictive logical combination of the at least one host access control rule and the at least one token access control rule by the token access control application.
17. A non-transitory computer-readable medium, according to claim 16 , wherein the host security policies further include token selection rules.
18. A non-transitory computer-readable medium, according to claim 1 , wherein the token access control application further includes a registry.
19. A non-transitory computer-readable medium, according to claim 18 , wherein the registry includes a plurality of security parameters associated with at least one registered token security application, at least one registered security agent application, at least one enablement flag and at least one operational state.
20. A non-transitory computer-readable medium containing software that implements a security system, the software comprising: executable code that retrieves token security policies from a compliant security token; and executable code that enforces the set of security policies when the compliant security token is used to perform a security function, wherein a host computer has retrievable host security policies and token selection policies that are separate from the token security policies and a token access control application that generates a combined set of security policies by combining the host security policies, the token selection policies, and the token security policies and that ensures enforcement of the combined set of security policies, wherein the token selection policies include rules that indicate choice of the compliant security token.