System and method for securely connecting to a peripheral device
A device connectable between a host computer and a computer peripheral over a standard bus interface is disclosed, used to improve security, and to detect and prevent malware operation. Messages passing between the host computer and the computer peripherals are intercepted and analyzed based on pre-configured criteria, and legitimate messages transparently pass through the device, while suspected messages are blocked. The device communicates with the host computer and the computer peripheral using proprietary or industry standard protocol or bus, which may be based on a point-to-point serial communication such as USB or SATA. The messages may be stored in the device for future analysis, and may be blocked based on current or past analysis of the messages. The device may serve as a VPN client and securely communicate with a VPN server using the host Internet connection.
1 . A device connectable between a host computer and a peripheral device using a standard bus, the device comprising:
a first module comprising:
a first connector connectable to a first cable for connecting to the host computer;
a first transceiver coupled to the first connector for transmitting messages to, and receiving messages from, the host computer over the first cable using the standard bus; and
a first memory storing a first firmware and a first processor for executing the first firmware, the first processor is coupled to control, and to communicate with, the first transceiver,
wherein the first module is configured to emulate the peripheral device to the host computer;
a second module comprising:
a second connector connectable to a second cable for connecting to the peripheral device;
a second transceiver coupled to the second connector for transmitting messages to, and receiving messages from, the peripheral device over the second cable using the standard bus; and
a second memory storing a second firmware and a second processor for executing the second firmware, the second processor is coupled to control, and to communicate with, the second transceiver,
wherein the second module is configured to emulate the host computer to the peripheral device;
a third module comprising:
a third memory storing a third firmware and a third processor for executing the third firmware, the third processor is coupled to control, and to communicate with, the second transceiver,
wherein the third module is communicatively coupled to the first module exclusively over a first local bus, and is communicatively coupled to the second module exclusively over a second local bus;
a sensor that output sensor data in response to a physical phenomenon produced by the peripheral device, the sensor is coupled to the third processor for responding to the physical phenomenon;
and a single enclosure housing the sensor and the first, second, and third modules.
2 . The device according to claim 1 , wherein the sensor is a piezoelectric sensor that uses the piezoelectric effect, includes single crystal material or a piezoelectric-ceramics, and uses transverse, longitudinal, or shear effect mode.
3 . The device according to claim 1 , wherein the sensor comprises multiple sensors arranged as a directional sensor array directed to the peripheral device.
4 . The device according to claim 3 , further operative to estimate a number, magnitude, frequency, Direction-Of-Arrival (DOA), distance, or speed of a signal impinging the sensor array.
5 . The device according to claim 1 , wherein the sensor is a thermoelectric sensor that responds to a temperature or a temperature gradient of an object or of the peripheral device.
6 . The device according to claim 5 , wherein the thermoelectric sensor senses the peripheral device temperature using conduction, convection, or radiation.
7 . The device according to claim 5 , wherein the thermoelectric sensor consists of, or comprises, a Positive Temperature Coefficient (PTC) thermistor, a Negative Temperature Coefficient (NTC) thermistor, a thermocouple, a quartz crystal, or a Resistance Temperature Detector (RTD).
8 . The device according to claim 1 , wherein the sensor is a photoelectric sensor that responds to visible or an invisible light, wherein the photoelectric sensor is based on the photoelectric or photovoltaic effect, and consists of, or comprises, a semiconductor component.
9 . The device according to claim 8 , wherein the invisible light is infrared, ultraviolet, X-rays, or gamma rays.
10 . The device according to claim 8 , wherein the semiconductor component consists of, or comprises, a photodiode, a phototransistor, or a solar cell.
11 . The device according to claim 1 , wherein the sensor is an electroacoustic sensor that responds to a sound produced by the peripheral device.
12 . The device according to claim 11 , wherein the electroacoustic sensor responds to audible or inaudible audio, and, wherein the electroacoustic sensor is a microphone that is omnidirectional, unidirectional, or bidirectional.
13 . The device according to claim 12 , wherein the microphone is based on the sensing of the incident sound-based motion of a diaphragm or a ribbon.
14 . The device according to claim 12 , wherein the microphone consists of, or comprising, a condenser, an electret, a dynamic, a ribbon, a carbon, or a piezoelectric microphone.
15 . The device according to claim 1 , wherein the sensor consists of, or comprises, a nano-sensor, a crystal, or a semiconductor, and, wherein the sensor is an ultrasonic based or is a proximity sensor.
16 . The device according to claim 1 , for use with a VPN server communicating with the host computer over the Internet, the third firmware further comprises a VPN client for execution by the third processor, so that when executed by the third processor, the device establishes a VPN connection with the VPN server over the Internet via the host computer.
17 . The device according to claim 16 , wherein the VPN connection is according to, uses, or is based on, Point-to-Point Tunneling Protocol (PPTP), Layer Two Tunneling Protocol (L2TP), or Secure Socket Tunneling Protocol (SSTP).
18 . The device according to claim 16 , further configured to transmit to the VPN server over the established VPN messages that were received from the peripheral device.
19 . The device according to claim 16 , further configured to transmit to the peripheral device messages that were received from the VPN server over the established VPN.
20 . The device according to claim 16 , wherein the peripheral device consists of, or includes, a non-volatile memory storing a content, and, wherein the device is further configured to read the entire of, or a part of, the content from the non-volatile memory, and transmit the read content to the VPN server over the established VPN connection.