Patent ID: 7861015

Claim:
A Universal Serial Bus (USB) apparatus, comprising: a Universal Serial Bus communication module for resolving data transfer protocol; a mass storage module for storing a mass of data; a program storage module; a security token data storage module; and one controller module that controls the Universal Serial Bus communication module, the mass storage module, the program storage module and the security token data storage module and that processes the data, wherein the Universal Serial Bus communication module, the mass storage module, the program storage module and the security token data storage module each are coupled to the controller module, wherein the Universal Serial Bus communication module is adapted to transfer, with a unified communication protocol, data between the controller module and a host, the controller module running as a master of the mass storage module and the security token data storage module, and wherein the one controller module is adapted to determine, after receiving the data transferred from the Universal Serial Bus communication module, whether an operation for the data is for the mass storage module or for the security token data storage module, and when the operation is for the mass storage module, the one controller module controls the security token data storage module to encrypt the data before the data is stored in the mass storage module and to decrypt the encrypted data before transferring the decrypted data to the host when the host is to read the encrypted data from the mass storage module; and when the operation is for the security token data storage module, the one controller module is adapted to control the security token data storage module to authenticate identity of a user of a network or a user of the host through at least one of digital certificate and digital signature as well as perform security data processing operations, wherein the security data processing operations involve at least one of receiving and sending data, encrypting data, decrypting data, storing and verifying a password, storing and verifying a signature, storing and verifying a certificate or managing privileges.