Usb security gateway

Abstract

A USB security gateway device is integrated within a host computer. The USB security gateway device is used for protecting a USB port of a host computer against interaction with unauthorized USB device. The USB security gateway device qualifies any USB peripheral device before it allows it to interact with the host device. Qualification parameters are stored in the USB security gateway device and are reprogrammable.

1 . A USB gateway device comprising:
 a host USB connector configured to connect to host computer;   a peripheral device USB connector configured to connect to a peripheral device; and   a controller;   a switch that is configured to switch USB signals, the switch is coupled to said peripheral device USB connector and configured to couple peripheral device USB signals to either said controller or said host USB connector; and   a USB reset detector coupled to the peripheral device USB connector, the USB reset detector is configured to monitor disconnecting of a peripheral device from the peripheral device USB connector,   
       wherein at reset and after disconnecting of the peripheral device from the peripheral device USB connector, the switch is coupling the peripheral device USB signals to the controller, the controller is configured to enumerate the connected peripheral device and upon the enumeration data the controller allow the device to be coupled to the host computer by controlling the switch to couple the peripheral device USB signals to the host USB connector. 
     
     
         2 . The USB gateway of  claim 1 , wherein the controller further comprising a table of qualified peripheral devices. 
     
     
         3 . The USB gateway device of  claim 1 , wherein the USB gateway is in a single enclosure stand-alone device. 
     
     
         4 . The USB gateway of  claim 1 , wherein the USB gateway is integrated into a USB hub. 
     
     
         5 . The USB gateway of  claim 1 , wherein the switch and the reset detector are integrated together in a single component. 
     
     
         6 . The USB gateway of  claim 1 , wherein the USB gateway is in a form of a USB dongle. 
     
     
         7 . The USB gateway of  claim 1 , wherein the USB gateway have a plurality of host USB connectors and the switch is configured to couple the peripheral device USB to any one of a plurality of host computers. 
     
     
         8 . The USB gateway of  claim 1 , wherein the USB gateway is integrated in a peripheral sharing switch that is configured to switch the peripheral device USB signals to any one of the connected hosts computer of the peripheral sharing switch. 
     
     
         9 . The USB gateway of  claim 1 , wherein the USB gateway support a plurality of USB versions including at least one of or any combination of USB 2.0, USB 3.0, and USB 3.1 
     
     
         10 . The USB gateway of  claim 2 , wherein said table of qualified peripheral devices contains at least one of:
 a black list, listing qualifications of peripheral device to be blocked from connecting to each of said USB host connectors; and   a white list, listing qualifications of peripheral device to be allowed to connect to each of said USB host connectors.   
     
     
         11 . The USB gateway of  claim 1 , wherein said enumeration data to qualify the peripheral devices are selected from the group consisting of: USB class, USB sub-class, USB protocol, USB Vendor ID, USB Product ID, USB serial number. 
     
     
         12 . The USB gateway of  claim 1 , wherein the USB gateway further comprising a programming port connected to the controller to field re-programming of said table of qualified peripheral devices. 
     
     
         13 . The USB gateway of  claim 12 , wherein the programming port is the host USB connector. 
     
     
         14 . The USB gateway of  claim 12 , wherein the programming port is the peripheral device USB connector. 
     
     
         15 . The USB gateway of  claim 1 , wherein said controller is capable of preparing and storing an event log file based on monitoring the activity of the USB gateway device. 
     
     
         16 . The USB gateway of  claim 1 , wherein the USB gateway is further comprising anti-tampering functions. 
     
     
         17 . The USB gateway of  claim 1 , wherein the USB gateway allow connection of only smart card reader peripheral devices. 
     
     
         17 . The USB gateway of  claim 1 , wherein the USB gateway prohibit connection of only data storage peripheral devices. 
     
     
         18 . A method for connecting USB peripheral device to host computer through a USB gateway, The gateway comprises:
 a host USB connector configured to connect to host computer;   a peripheral device USB connector configured to connect to a peripheral device; and   a controller;   a switch that is configured to switch USB signals, the switch is coupled to said peripheral device USB connector and configured to couple peripheral device USB signals to either said controller or said host USB connector; and   a USB reset detector coupled to the peripheral device USB connector, the USB reset detector is configured to monitor disconnecting of a peripheral device from the peripheral device USB connector,   
       the method comprises the step of:
 setting the switch to couple said USB peripheral device to said controller at reset and after disconnecting of a peripheral device from the peripheral device USB connector; 
 enumerating the USB peripheral device connected to the peripheral device USB connector; 
 setting the switch to couple said USB peripheral device to said host computer if data of the enumeration of the USB peripheral device pass an allowance criterion. 
 
     
     
         19 . The method of  claim 18 , wherein the allowance criterion contains at least one of:
 a black list, listing qualifications of peripheral device to be blocked from connecting to each of said USB host connectors; and   a white list, listing qualifications of peripheral device to be allowed to connect to each of said USB host connectors.   
     
     
         20 . The method of  claim 18 , wherein the method further comprises the step of programming the controller to field re-programming of said allowance criterion. 
     
     
         21 . The method of  claim 18 , wherein the method further comprises the step of logging the activity of the USB gateway device.