System and method for trusted communication
A method of establishing a trusted path of data and a method of verifying the integrity of data presented for signing to a user of the personalized device in a public-key cryptographic scheme. The method comprises establishing a trusted path between the user and secure module residing on the personalized device. The secure module holds the user's private key, displays information about the data message directly to the user, and generates the signature only when instructed to do so. The decision whether or not to sign the data message is determined by the user.
1. A method of verifying data integrity between at least two correspondents in a cryptographic scheme, at least one of said at least two correspondents having a main processor and a secure module, said secure module being independently operative of said main processor, said method comprising the steps of:
assembling data on at least one of said at least two correspondents;
displaying said data under control of said main processor to produce a first output;
forwarding said data to said secure module and displaying said data from said secure module to produce a second output to permit comparison of said first output and said second output; and
instructing said secure module to generate a signature on said data upon a favorable comparison of said first output and said second output;
whereby said favorable comparison indicates data integrity such that said at least one of said correspondents signs said data.
2. The method of claim 1 , wherein said at least one of said at least two correspondents is a personalized device.
3. The method of claim 2 , wherein said personalized device is a mobile phone.
4. The method of claim 2 , wherein said personalized device is a personal digital assistant.
5. The method of claim 1 , wherein said favorable comparison is characterized in that said first output and said second output are logically related to one another.
6. The method of claim 5 , wherein said logical relationship is such that said first output and said second output are identical.
7. The method of claim 1 , wherein said step of displaying said data message includes displaying a portion of said data message.
8. The method of claim 7 , wherein said favorable comparison is characterized in that a portion of said first output and a portion of said second output are logically related to one another.
9. The method of claim 8 , wherein said logical relationship is such that said portion of said first output is identical to said portion of said second output.
10. A method of establishing a trusted communication path for data between a personalized device and a user of said device in a cryptographic scheme, said device having a main processor and a secure module independently operative of said main processor, said method comprising the steps of:
providing an interface between said device and said user, said interface having an input device and an output device for providing a means for interaction between said user and said device, said input device and said output device controllable by said main processor;
providing a trusted communication path between said secure module and a secure input device and a secure output device coupled thereto, said trusted path logically isolated from any other communication path;
assembling data at said input device and said secure module and forwarding said data to said secure output device over said trusted communication path; and
displaying said data on said output device and said secure output device, to permit comparison of said data displayed on said output device and said secure output device;
whereby said user of said personalized device can determine said integrity of said data based on said comparison.
11. The method of claim 10 , wherein said user actuates said secure input device based only on said output of said secure output device.