Patent ID: 8429419

Claim:
A method for securing authorized data entry and securing the authenticity of such data when entering cryptographic operations which are performed by external cryptographic tokens connected to a computer comprising the steps of: an application in the computer, requiring authorized data entry, sends a specific command to a secure typing module which defines a template of input data intended to be cryptographically processed; the specific command switches the secure typing module over to a secure typing mode, where the secure typing module autonomously control typing of required data items of the data template by recording characters typed on a connected entry device; the recorded characters are arranged in required data structures defined by the input data template in an internal memory of the secure typing module; the thereby created data are sent by the secure typing module directly to an external token where the requested cryptographic operation is called, the result of which is sent by the secure typing module to the computer; subsequently the secure typing module switches back to a transparent mode; wherein an integrity of the template of input data defined by the specific command is cryptographically protected; after reception of the specific command by the computer, the data template defined by the specific command is sent to the secure typing module and the secure typing module verifies the integrity of the data template using the cryptographic support of the external token; in the event of successful integrity verification the secure typing module signals this event; and in the event of unsuccessful integrity verification the secure typing module switches back to the transparent mode.