Patent ID: 7904565

Claim:
A system for providing secure communications between a plurality of devices, comprising: a first, substantially portable device comprising a host computer running an untrusted operating system and untrusted hardware, a communications stack operative to run on said host computer, a first security apparatus adapted to establish a security association, and a communications interface adapted to establish a communications link with at least one other device; a second computerized device comprising a second security apparatus; a first computer program operative to run on said first portable device and adapted to verify the identify of a user of said first portable device before farther access is permitted; a second computer program operative to run on said first portable device and adapted to receive data sent from a higher layer process in said host computer for transmission over said communications link; a third computer program operative to run on said first portable device and adapted to determine whether said security association exists with said second security apparatus of said second computerized device; a fourth computer program operative to run on said first portable device and adapted to encrypt at least a portion of said data sent from said higher layer process using at least one cryptographic key; and a fifth computer program operative to run on said first portable device and adapted to transmit said at least portion of said data sent from said higher layer process to said second security apparatus when said security association does exist; wherein said second computerized device comprises an interface to a second network, said second network having other security apparatus associated therewith, said other security apparatus of said second network being configured to establish security associations with said portable device via at least said second computerized device using at least a portion of a dynamically generated encryption data; and wherein said first security apparatus is adapted to dynamically generate said encryption data for each association, said act of generating not requiring intervention by a user of said portable device.