User interface for secure data entry

Abstract

A computer input device for operation with a computer includes an input transducer, which is coupled to receive an input from a user and to generate a data signal responsively to the input. An encryption processor is coupled to process the data signal so as to output data to the computer. The encryption processor has a first operational mode in which the encryption processor encrypts the data signal using an encryption key not accessible to the computer so that the data are unintelligible to the computer, and a second operational mode in which the data are intelligible to the computer. A mode switch is operative so as to switch between the first and second operational modes of the encryption processor. An output transducer is coupled to provide to the user an indication of whether the encryption processor is in the first or the second operational mode.

1 . A computer input device for operation with a computer, comprising:
 an input transducer, which is coupled to receive an input from a user and to generate a data signal responsively to the input;   an encryption processor, which is coupled to process the data signal so as to output data to the computer, and which has a first operational mode in which the encryption processor encrypts the data signal using an encryption key not accessible to the computer so that the data are unintelligible to the computer, and a second operational mode in which the data are intelligible to the computer;   a mode switch, which is operative so as to switch between the first and second operational modes of the encryption processor; and   an output transducer, which is coupled to provide to the user an indication of whether the encryption processor is in the first or the second operational mode.   
     
     
         2 . The device according to  claim 1 , wherein the input transducer comprises a text input device. 
     
     
         3 . The device according to  claim 2 , wherein the text input transducer comprises a keyboard. 
     
     
         4 . The device according to  claim 1 , wherein the mode switch is operable by a user of the device. 
     
     
         5 . The device according to  claim 4 , wherein the mode switch comprises a manually-operable switch. 
     
     
         6 . The device according to  claim 1 , wherein the data signal is not accessible to the computer except in the data output by the encryption processor. 
     
     
         7 . The device according to  claim 1 , wherein the output transducer comprises a lamp. 
     
     
         8 . The device according to  claim 1 , wherein the output transducer comprises an alphanumeric display. 
     
     
         9 . The device according to  claim 1 , wherein the output transducer comprises an audio transducer. 
     
     
         10 . The device according to  claim 1 , wherein the output transducer causes a visible mode change in the input device. 
     
     
         11 . A method for inputting data to a computer, comprising:
 receiving a data signal from an input transducer responsively to an input by a user;   processing the data signal so as to generate data for output to the computer using an encryption processor, which has a first operational mode in which the encryption processor encrypts the data signal using an encryption key not accessible to the computer so that the data are unintelligible to the computer, and a second operational mode in which the data are intelligible to the computer;   setting a mode switch so as to select one of the first and second operational modes;   presenting to the user an indication of whether the encryption processor is in the first or the second operational mode; and   outputting the data to the computer in accordance with the selected one of the operational modes.   
     
     
         12 . The method according to  claim 11 , wherein the input transducer comprises a text input device. 
     
     
         13 . The method according to  claim 12 , wherein the text input transducer comprises a keyboard. 
     
     
         14 . The method according to  claim 11 , wherein the mode switch is manually operable by the user. 
     
     
         15 . The method according to  claim 11 , wherein the data signal is not accessible to the computer except in the data output by the encryption processor. 
     
     
         16 . A method for inputting data to a computer, comprising:
 receiving data input to the computer from an input device operated by a user, the input device having a first user-selectable operational mode in which the input device encrypts the data input and a second user-selectable operational mode in which the data input is unencrypted;   detecting that the data input made to the computer by the user via the input device for entry in a secret data field is unencrypted; and   initiating a preventive action responsively to detecting that the data input is unencrypted.   
     
     
         17 . The method according to  claim 16 , wherein initiating the preventive action comprises preventing further unencrypted data from being sent from the input device to the computer. 
     
     
         18 . The method according to  claim 16 , wherein initiating the preventive action comprises issuing an alert from the computer to the user. 
     
     
         19 . The method according to  claim 18 , wherein issuing the alert comprises instructing the user to switch the input device from the second to the first operational mode and repeat the data input. 
     
     
         20 . The method according to  claim 19 , wherein the input device comprises a mode switch, which is operable by the user so as to switch from the second to the first operational mode, and an output transducer, which is coupled to provide to the user an indication that the input device is in the first operational mode. 
     
     
         21 . The method according to  claim 19 , wherein the computer does not alert the user to switch the input device to the first operational mode until the unencrypted data input is detected. 
     
     
         22 . The method according to  claim 16 , wherein receiving the data input comprises receiving, in the first operational mode, data that have been encrypted using an encryption key not accessible to the computer so that the data are unintelligible to the computer. 
     
     
         23 . Computing apparatus, comprising:
 an input device having a first user-selectable operational mode in which the input device encrypts data input made to the device by the user and a second user-selectable operational mode in which the data input is unencrypted; and   a computer, which is coupled to receive the data input from the input device, and is configured to detect that the data input made by the user for entry in a secret data field is unencrypted, and to initiate a preventive action responsively to detecting that the data input is unencrypted.   
     
     
         24 . The apparatus according to  claim 23 , wherein the preventive action comprises preventing further unencrypted data from being sent from the input device to the computer. 
     
     
         25 . The apparatus according to  claim 23 , wherein the preventive action comprises issuing an alert from the computer to the user. 
     
     
         26 . The apparatus according to  claim 25 , wherein the computer is configured to alert the user to switch the input device from the second to the first operational mode and repeat the data input upon detecting that the data input is unencrypted. 
     
     
         27 . The apparatus according to  claim 26 , wherein the input device comprises a mode switch, which is operable by a user so as to switch from the second to the first operational mode, and an output transducer, which is coupled to provide to the user an indication that the input device is in the first operational mode. 
     
     
         28 . The apparatus according to  claim 26 , wherein the computer is configured not to alert the user to switch the input device to the first operational mode until the unencrypted data input is detected. 
     
     
         29 . The apparatus according to  claim 23 , wherein the input device is configured to encrypt the data, in the first operational mode, using an encryption key not accessible to the computer so that the data are unintelligible to the computer. 
     
     
         30 . A computer software product, comprising a tangible computer-readable medium in which program instructions are stored, which instructions, when read by a computer, cause the computer to receive data input to the computer from an input device operated by a user, the input device having a first user-selectable operational mode in which the input device encrypts the data input and a second user-selectable operational mode in which the data input is unencrypted, and to detect that the data input made to the computer by the user via the input device for entry in a secret data field is unencrypted, and to initiate a preventive action responsively to detecting that the data input is unencrypted. 
     
     
         31 . The product according to  claim 30 , wherein the preventive action comprises preventing further unencrypted data from being sent from the input device to the computer. 
     
     
         32 . The product according to  claim 30 , wherein the preventive action comprises issuing an alert from the computer to the user.