Patent ID: 8386795

Claim:
A data transmission method for an information security device used to access a host comprising the steps of: 1) the host recognizing the information security device by establishing a connection to the information security device by enumerating an USB HID device by the host, obtaining a HID class and a report descriptor, setting up communication with the information security device, reading a file system of the information security device, and obtaining related information by the host; 2) the host sending control commands to the device, via HID instructions, by receiving an authentication request from a user by the host, and sending an authentication data to the device using a Set_Report control transmission command of a HID-specific request by the host; 3) the device resolving and processing the control commands after receiving the control commands by resolving a Set_Report control transmission command of the HID specific request from the host, performing security operations comprising PIN authentication, signature authentication, data downloading, file access, privilege management, or read/write operations by performing the initialization process, performing a weak factor authentication, wherein the weak factor is a PIN authentication, receiving random numbers from the host and encrypting the random numbers with a defined key calculation algorithm by the device when the weak factor authentication is passed, the key calculation algorithm using a key supplied by the user, thereby producing execution results, returning the encrypted random numbers to the host, and confirming the encrypted random numbers by the host with the key calculation algorithm executed on the host; wherein key used to execute the key calculation algorithm on the device does not appear in the host; and 4) sending the execution results of the security operations to the host.