Automated security privilege setting for remote system users

Abstract

A method of secure communication involves determining that a remote system is trusted prior to authorizing secure communication therewith. A removable security device is coupled with a first system. When the first system communicates with a remote system securely, the remote system is evaluated to ensure that it is a trusted remote system prior to secure communication therewith being allowed.

1 - 32 . (canceled) 
     
     
         33 . A method comprising:
 determining access privileges to at least one of data and processes within a security device by:
 communicating with a remote system; 
 exchanging security data between the security device and the remote system; and 
 in dependence upon the security data exchanged, determining access privileges to at least one of data and processes within the security device. 
   
     
     
         34 . A method according to  claim 33  wherein, the security device comprises at least one of a peripheral memory storage device and a memory storage device. 
     
     
         35 . A method according to  claim 33  wherein, an identifier of the remote system is stored within the security device. 
     
     
         36 . A method according to  claim 33  wherein, exchanging the security data comprising exchanging the security data at least in dependence upon an authorization process for authorizing at least one of the security device to the remote system and the remote system by the security device. 
     
     
         37 . A method according to  claim 36  wherein, the authorization process comprises at least one of generating a one time password, receiving a code from the first remote system and generating a one time password in dependence upon the code, providing a user authentication to the removable security device, and providing user identification data and user authorization data from the removable security device to the first remote system. 
     
     
         38 . A method according to  claim 36  wherein, the authorization process comprises providing authorization data from the security device to the remote server system, the authorization data stored within the security device in a secure fashion and transmitted therefrom in an obfuscated fashion for preventing deciphering thereof. 
     
     
         39 - 70 . (canceled) 
     
     
         71 . A non-volatile computer readable medium having code stored thereon, wherein execution of the code by a suitable computing device results in a method of determining access privileges to at least one of data and processes within a security device, the method comprising:
 communicating with a remote system;   exchanging security data between the security device and the remote system; and   in dependence upon the security data exchanged, determining access privileges to at least one of data and processes within the security device   
     
     
         72 . A medium according to  claim 71  wherein, the security device comprises at least one of a peripheral memory storage device and a memory storage device. 
     
     
         73 . A medium according to  claim 71  wherein, an identifier of the remote system is stored within the security device. 
     
     
         74 . A medium according to  claim 71  wherein, exchanging the security data comprising exchanging the security data at least in dependence upon an authorization process for authorizing at least one of the security device to the remote system and the remote system by the security device. 
     
     
         75 . A medium according to  claim 74  wherein, the authorization process comprises at least one of generating a one time password, receiving a code from the first remote system and generating a one time password in dependence upon the code, providing a user authentication to the removable security device, and providing user identification data and user authorization data from the removable security device to the first remote system. 
     
     
         76 . A medium according to  claim 74  wherein, the authorization process comprises providing authorization data from the security device to the remote server system, the authorization data stored within the security device in a secure fashion and transmitted therefrom in an obfuscated fashion for preventing deciphering thereof, 
     
     
         77 . A method of determining access privileges to at least one of data and processes within a security device comprising a peripheral storage device, the method comprising:
 communicating with a remote system;   exchanging security data between the peripheral storage device; and   in dependence upon the security data exchanged, determining access privileges to at least one of data and processes within the security device.   
     
     
         78 . The method of  claim 77 , further comprising identifying the peripheral storage device by a host. 
     
     
         79 . The method of  claim 78 , further comprising retrieving an identity of the remote system from the peripheral storage device. 
     
     
         80 . The method of  claim 79 , wherein the identity is stored in secure form on the peripheral storage device and hidden from normal access. 
     
     
         81 . The method of  claim 79 , where communicating with the remote system comprises accessing the remote system through the host, based on the identity retrieved from the peripheral storage device. 
     
     
         82 . The method of  claim 80 , wherein exchanging security data comprises downloading security data from the remote system for validation by the peripheral storage device. 
     
     
         83 . The method of  claim 81 , further comprising activating the peripheral storage device based on the validation. 
     
     
         84 . The method of  claim 81 , further comprising granting the access rights by transmitting user rights to activate the remote system based on the validation.