Method for enabling a trusted dialog for collection of sensitive data

Abstract

The present invention is a method for enabling a trusted dialog for collection of sensitive data, including the steps of: storing a personal security token specified by a user; receiving an input dialog request from an application; determining whether the application is a signed application; and, if a determination is made that the application is a signed application, accessing the personal security token and allowing the input dialog to be displayed with the personal security token and signed application identification. The personal security token may be at least one of an audible recording or a set of vibratory motions.

1 . A method for enabling a trusted dialog for collection of sensitive data, comprising: 
 storing a personal security token specified by a user, the personal security token being at least one of an audio recording or a set of vibratory motions;    receiving an input dialog request from an application;    determining whether the application is a signed application; and    if, a determination is made that the application is a signed application, accessing the personal security token and allowing the input dialog to be revealed with the personal security token and signed application identification.    
   
   
       2 . The method for enabling a trusted dialog as claimed in  claim 1 , wherein the method is implemented in a mobile device.  
   
   
       3 . The method for enabling a trusted dialog as claimed in  claim 2 , wherein the mobile device is a cellular telephone.  
   
   
       4 . A method for enabling a trusted dialog as claimed in  claim 1 , wherein the personal security token may be changed as desired by the user.  
   
   
       5 . A method for enabling a trusted dialog as claimed in  claim 1 , wherein the personal security token is stored in a platform service.  
   
   
       6 . A method for enabling a trusted dialog as claimed in  claim 1 , wherein receiving the input dialog request from the application is done by a platform service.  
   
   
       7 . A method for enabling a trusted dialog as claimed in  claim 6 , wherein upon receiving the input dialog request from the application, the platform service determines whether the application is a signed application by inspecting the application's execution call stack.  
   
   
       8 . A method for enabling a trusted dialog as claimed in  claim 7 , wherein upon determining that the application is a signed application, the platform service accesses the personal security token and allows the application's input dialog to be revealed with the personal security token and signed application identification.  
   
   
       9 . A method for enabling a trusted dialog as claimed in  claim 7 , wherein if a determination is made that the application is not a signed application, the application is prevented from being revealed with the personal security token.  
   
   
       10 . A method for enabling a trusted dialog as claimed in  claim 1 , wherein the application does not know the personal security token.  
   
   
       11 . A computer program product, comprising: 
 a computer useable medium including computer usable program code for creating a method for enabling a trusted dialog for collection of sensitive data, the computer program product including:    computer usable program code for storing a personal security token specified by a user, the personal security token being at least one of an audio recording or a set of vibratory motions;    computer usable program code for receiving an input dialog request from an application;    computer usable program code for determining whether the application is a signed application; and,    if, a determination is made that the application is a signed application, computer usable program code for accessing the personal security token and allowing the input dialog to be revealed with the personal security token and signed application identification.    
   
   
       12 . A computer program product as claimed in  claim 11 , wherein instructions are included within the computer readable medium which cause the program, upon receiving the input dialog request from the application, to determine whether the application is a signed application by inspecting the application's execution call stack.  
   
   
       13 . A computer program product as claimed in  claim 11 , wherein instructions are included within the computer readable medium which cause the program, upon the program making a determination that the application is not a signed application, to prevent the application from being revealed with the personal security token and signed application identification.  
   
   
       14 . A computer program product as claimed in  claim 11 , wherein the personal security token may be changed as desired by the user.  
   
   
       15 . A computer program product as claimed in  claim 11 , wherein the personal security token is stored in a platform service.  
   
   
       16 . A method for enabling a trusted dialog for collection of sensitive data, comprising: 
 storing a personal security token specified by a user on a platform service, the personal security token being at least one of an audible recording or a set of vibratory motions;    receiving an input dialog request by the platform service from an application;    determining whether the application is a signed application by inspecting the application's execution call stack; and    if, the application is a signed application, accessing the personal security token by the platform service and allowing the input dialog to be revealed with the personal security token and signed application identification, or    if, the application is not a signed application, prohibiting the application from being revealed with the personal security token.    
   
   
       17 . The method for enabling a trusted dialog as claimed in  claim 16 , wherein the method is implemented in a mobile device.  
   
   
       18 . The method for enabling a trusted dialog as claimed in  claim 17 , wherein the mobile device is a cellular telephone.  
   
   
       19 . A method for enabling a trusted dialog as claimed in  claim 16 , wherein the personal security token may be changed as desired by the user.  
   
   
       20 . A method for enabling a trusted dialog as claimed in  claim 16 , wherein the application does not know the personal security token.