Encryption-enabled interfaces

Abstract

Decryption apparatus includes an input memory ( 48 ), which is coupled to receive encrypted data, and an output transducer ( 28 ), for presenting decrypted data to a user. A decryption processor ( 50 ) is coupled to read and decrypt the encrypted data from the input memory but is incapable of writing to the input memory, and is coupled to convey the decrypted data to the output transducer for presentation to the user.

1 - 32 . (canceled) 
     
     
         33 . A computer terminal, comprising:
 a communication interface, configured to be coupled to a network;   a secure input device, which comprises:
 an input transducer, which is coupled to receive an input from a user and to generate a data signal responsively to the input; 
 an encryption processor, which is coupled to process the data signal so as to output data for transmission over the network, such that the data signal is not accessible outside the secure input device except in the data output by the encryption processor, and which has a secure operational mode in which the encryption processor generates the output data by encrypting the data signal using an encryption key not accessible to any elements of the computer terminal outside the secure input device so that the output data are unintelligible to such elements; and 
   a display configured to display non-secure data received from the network without decryption while the secure input device operates in the secure operational mode.   
     
     
         34 . The terminal according to  claim 33 , wherein the input transducer comprises a text input device. 
     
     
         35 . The terminal according to  claim 34 , wherein the text input transducer comprises a keyboard. 
     
     
         36 . The terminal according to  claim 33 , wherein the input transducer comprises an image capture device. 
     
     
         37 . The terminal according to  claim 33 , wherein the input transducer comprises an audio input device. 
     
     
         38 . The terminal according to  claim 33 , and comprising a central processing unit (CPU), which is coupled to receive the output data from the secure input device and to transmit the output data via the communication interface to the network,
 wherein the encryption key is not accessible to the CPU, and the output data are unintelligible to the CPU.   
     
     
         39 . A method for data communication, comprising:
 in a secure input device of a computer terminal, receiving a data signal from an input transducer responsively to an input by a user;   processing the data signal using an encryption processor operating in the secure input device in a secure operational mode so as to generate data for output via a network, such that the data signal is not accessible outside the secure input device except in the data output by the encryption processor, which generates the output data in the secure operational mode by encrypting the data signal using an encryption key not accessible to any elements of the computer terminal outside the secure input device so that the output data are unintelligible to such elements;   transmitting the output data from the secure input device over a network to a computer; and   while the secure input device operates in the secure operational mode, receiving over the network non-secure data from the computer and displaying the non-secure data on the terminal.   
     
     
         40 . The method according to  claim 39 , wherein the input transducer comprises a text input device. 
     
     
         41 . The method according to  claim 40 , wherein the text input transducer comprises a keyboard. 
     
     
         42 . The method according to  claim 39 , wherein the input transducer comprises an image capture device. 
     
     
         43 . The method according to  claim 39 , wherein the input transducer comprises an audio input device. 
     
     
         44 . The method according to  claim 39 , wherein transmitting the output data comprises receiving the output data in a central processing unit (CPU) of the computer terminal and passing the output data from the CPU to the network,
 wherein the encryption key is not accessible to the CPU, and the output data are unintelligible to the CPU.