Patent ID: 8028067

Claim:
A method of operating a portable communications device, said portable communications device comprising a host computerized device having an untrusted operating system, at least some untrusted hardware, and a communications software stack operative to run on said host device, said portable communications device further comprising security apparatus for use with said stack; wherein said portable device is configured to operate according to the method comprising: verifying the identity of a user of said portable device before further access is permitted; receiving data sent from a higher layer process of said host computerized device for transmission over a network; determining whether an association between said security apparatus and at least one other security apparatus exists, said association comprising a cryptographic data exchange algorithm adapted to cause said portable communications device to exchange cryptographic data; encrypting at least a portion of said data using at least one cryptographic key; transmitting said at least portion to said at least one other security apparatus when said association does exist; and facilitating the review of a user session audit trail.