Patent ID: 7392534

Claim:
A method for using a secure computing device to secure transactions over a computer network that includes an untrusted client computer with a user interface and a server computer connected to the computer network, in a manner designed to foil identity theft perpetrated from the client computer, comprising: connecting the secure computing device to the untrusted client computer and the network; operating the secure computing device to communicate a list of available services, for which the secure computing device stores private information corresponding to the service, to the client computer; in response to receiving the list of available services, using the user interface to display the list of available services to a user; in response to a selection of one available service by the user, establishing a secure connection from the secure computing device to the server; transmitting from the secure computing device to the server computer user identifying information including a shared secret; establishing a secure connection from the untrusted client computer to the server computer; operating the server computer to create a one-to-one mapping between the secure computing device and the untrusted client computer; receiving an attempted entry of the shared secret by the user from the untrusted client computer; if the entered shared secret matches the shared secret, permitting the user to interact with a service provided by the server computer.