BRPI0621155A2 - portable session management device configured to insert into a host computer input, portable session administration method configured to insert into a host computer input and portable session coupling device configured to insert into a host computer input - Google Patents

Abstract

PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING INTO A HOSTED COMPUTER ENTRY, METHOD OF ADMINISTRATION OF PORTABLE SESSION CONFIGURED FOR INSERTING INTO A HOSTED COMPUTER AND A HOSTED COMPUTER HOSPITAL DEPARTMENT IN A HOSTED COMPUTER IN A HOSTED DEVICE. . A portable session management device configured for insertion into an entry on a host computer, the portable session management device comprising: an authentication unit configured to obtain authentication of the user's portable session management device against the host computer ; and a secure access unit operatively associated with the authentication unit and configured to facilitate secure access to at least one computer-based application in conjunction with the host computer.

Description

"PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURATED FOR INSERT ENTRY INTO A HOSPEDER COMPUTER, PTVRA CONFIGURATED PORTABLE SESSION ADMINISTRATION METHOD FOR INSERT ACCESSORIES IN A HOSPEDER COMPUTER HOST". FIELD AND HISTORY OF THE INVENTION

The present invention relates to portable computer session management data devices. More specifically, the present invention relates to portable computer session management devices that are configured, inter alia, to: provide secure single-point access to at least one computer-based application in conjunction with a host computer; data encryption on the host computer, facilitating data backup, providing parameters for computer use by children, providing parameters for computer use by members of a group, and / or providing secure data transfer between remotely located members of a computer. a group.

Portable solid state memory storage devices that connect to a computer USB port, here portable session management devices, have become an important addition to computer devices today, offering download, transfer and / or backup. fast and dynamic data. Portable session management devices, however, are not without problems.

If a portable session management device is stolen, sensitive data could fall into the wrong hands. Additionally, data held on a portable session management device that is lost may present the user with an irreplaceable loss of data.

In addition, a portable session management device can be attached to a computer to quickly download and steal sensitive files, posing a huge security risk.

Encryption software that potentially prevents data theft from computers and / or portable session management devices is known. However, software packages that provide backup functions are typically packaged separately from software packages that provide data encryption and each require user installation, configuration, and administration; a very annoying approach to protecting data.

Portable session administration devices incorporating encoded partitions are known: U.S. Patent Application 10 / 304,772 (Ziv, et al), filed November 27, 2002, now published as US 2004/0103288; and U.S. Provisional Patent Application 60 / 643,150, (Oh, et al), filed January 13, 2005 and now published as US 2006/0156036, teach portable data storage devices with encoded memory storage partitions and unencrypted, but no longer provide data backup protection.

A problem associated with computers in general is the transfer of data to remote locations, for example, over a wide area network or the Internet. When data coding is used, coding codes that are formulated at a home location must be transferred to user computers at remote locations; facilitating interception by unauthorized recipients. The intercepted codes are then used to track, hijack and decode the transferred data.

In addition, computer-resident Trojan programs are capable of decoding and transferring data to unauthorized recipients, thus allowing, for example, access to sensitive military data by unauthorized organizations that may compromise public safety.

In general, portable session management devices:

no longer provide a single point for secure access to computer-based applications together with a host computer;

lack adequate protection of data stored on the device;

present an identification problem when transferring encoded files and / or encoding codes; and present a danger of theft to computer storage systems containing sensitive data. In addition to the above issues with portable session management devices, there are multiple issues that specifically affect Internet users:

1) Internet cheat protection; and

2) Limiting user access to Internet websites, for example, by preventing staff from wasting company time or by preventing children from accessing adult websites.

Regarding Internet protection, after a typical Internet session, there is a record of temporary Internet files, and cookies that serve as guides to attract computer scammers, junk mail, and computer viruses, as well as providing a forensic trail to allow third parties to investigate the internet browsing of a particular computer user.

Software programs that erase Internet logs from storage devices are known. However, such programs are generally limited in their ability to completely hide browsing history.

With respect to . Internet access, software that limits children's access to adult websites of Internet sites is known. However, because software resides on the computer, it is often tempting, and easy target to cheat by a computer-savvy child.

There is then a widely recognized need to solve a wide variety of problems associated with session management, data transfer and Internet access devices, and it would be highly advantageous to provide devices configured to be exempt from the above limitations.

SUMMARY OF THE INVENTION

The present invention successfully addresses the defects of currently known devices by providing a portable session management device comprising an authentication unit configured to provide authentication of its user to a host computer and conditional upon user authentication to access securely at least one computer-based application in conjunction with the host computer.

In the settings, to facilitate authentication of the user identity, the user views an activation screen on the host computer where unique user identifiers are fed. After authentication, the handheld is configured to substantially handle uninterrupted data sessions, including: providing secure access to at least one computer-based application in conjunction with the host computer; encode and decode the data on the host computer; and securely back up data.

Additionally, in the secure internet browsing configurations, the portable session management device of the present invention is configured to keep all temporary internet files and cookies on the administration device during the internet session, thus protecting the host computer from cheating and Internet virus.

After the session, the entire browsing record is hidden and / or encoded on the portable session management device, thereby retaining the record virtually and invisibly, and thus inaccessible, to an unauthorized user of the portable device, with no record left. on the computer.

In a secure data transfer configuration, the present invention provides a coupling device configured to download a common coding configuration for multiple portable session management devices, for example, to members of a selected group. Portable session management devices are later used to download and transfer encoded data between group member devices located at remote locations.

By maintaining all coding codes and mechanisms on portable session management devices rather than on the host computer, coding codes and associated transferred data cannot be hijacked, for example, by Trojans.

In a configuration wherein parameters for a child's use of a computer are provided, the present invention provides a portable parent session management device that configures a portable child session management device to restrict child access to the computer. to Internet sites, instant messaging, chat rooms, and emails.

In the configurations, the child host computer cannot be accessed without inserting the portable child session management device, thus preventing the child from misleading the parental restriction parameters.

In the additional settings, the parent device configures a memory device to keep a history of visited websites, chat rooms, instant messaging, blogs, and / or emails for review by parents. Additionally, the parent device is optionally configured to send parent alert messages and / or shut down the host computer when the child violates the restriction parameters.

In additional configurations, the parent device is configured for use by a group administrator and the child device is configured for use by a group member. Group devices are configured by the administrator device with guidelines for using the computers on which member devices are inserted.

In the settings, the guidelines include time constraints, for example, regarding Sabbath Jewish religious observance and holy days when active use of the computer is prohibited and those responsible may wish to restrict computer use.

According to one aspect of the present invention, there is provided a portable session management device configured for insertion into an entry in a host computer, the portable session management device comprising: an authentication unit configured to obtain authentication of the host device. user portable session administration with respect to the host computer; and a secure access unit operatively associated with the authentication unit and configured to facilitate secure access to at least one computer based application in conjunction with the host computer.

In the configurations, the portable session management device includes a hidden encoding mechanism configured to operate with the host computer in encoding user selected data thereon.

In the configurations, the portable session management device includes a concealment mechanism configured to operate with the host computer to conceal a portion of data therein.

In configurations, the condition comprises the hiding of the data portion after authentication expiration by the authentication unit.

In the configurations, the portable session management device is configured to reveal the hidden portion upon reauthentication.

In configurations, the hidden portion of data comprises a data partition configured by the device.

In the configurations, the portable session management device further comprises a hidden encoding mechanism configured to encode at least a portion of the data.

In the configurations at least a portion of the data is encoded.

In the configurations, the portable session management device is configured to decrypt the encoded data on the host computer, except that user authentication is in effect.

In the configurations, the portable session management device includes a backup manager configured, conditionally upon user authentication, to open communication with a remote server through the host computer to enable data backup operations on the remote server.

In the settings, the

A portable session management device includes a backup manager configured, conditionally upon user authentication, to open communication with a server through the host computer to enable data backup operations on the server.

In the settings, the backup is continuous while authentication is in effect. In the configurations, the portable session management device is configured to hide at least a portion of the data on the server.

In configurations, the portable session management device is configured to encode at least a portion of the data on the server.

In the settings, the

Data backup operations are based on the parameters selected by the user. In configurations, at least a portion of data backup operations are increasingly provided.

In the settings, the

Portable session management device is configured to establish a connection with a proxy server. In the configurations, the server is located at a remote location relative to the host computer. In configurations, the portable session management device is configured to communicate with the server at the remote location using at least one of a wide area network, an Internet channel, a server, and a proxy server. In configurations, authentication includes a digital string comprising at least one of: a session management device identifier, a user login name, and a user password.

In the configurations, the portable session management device is configured to hash the digital string on at least one of: the portable session management device, the host computer, a proxy server, and the server.

In the configurations, the portable session management device is configured to register the digital chain with a registration entity.

In the settings, device authentication configured to be optionally invalidated by the registrar.

In the configurations, the portable session management device is further configured to hide an Internet browsing session from an inspection performed from the host computer. In the configurations, the portable session management device is further configured to authorize payment of at least one item to be purchased electronically using funds from a digital banking station.

In the configurations, the portable session management device is further configured to provide at least one provision to a digital funds bank station from a user-designated digital funding source, and to provide a physical location for receiving the remittance. At least one item.

In configurations, the portable session management device is configured to turn off the host computer when authentication is not obtained.

In configurations, the portable session management device is configured to keep an access log when authentication is not obtained.

In the configurations, the record is kept on at least one of: a portable session management device, the host computer, a proxy server, and a server.

According to another aspect of the present invention, a coupling device is provided for coupling a plurality of portable session administration devices. The coupling device comprises multiple inputs for two portable session management devices, a first session management device, and at least one second session management device, each of the two portable session management devices having a respective mechanism for hidden coding, a common coding mechanism configuration transfer unit operably associated with multiple inputs, and configured to transfer a common configuration from a first session management device to at least a second session management device.

In configurations, the coupling includes an authentication unit configured to determine the identities of at least two session administration devices for future authentication.

In the configurations, the coupling device is configured such that a first session administration device is configured as an administrator device configured to output the settings to at least a second session administration device.

In the settings, the coupling device includes an operational function to clear its settings after use.

In configurations after the two session management devices are removed from the coupling device, the two session management devices are configured to communicate during a first meeting using the common configuration, and communication occurs between two locations that are remote between each other. Yes.

In configurations during the first meeting, the two session management devices are configured to generate a second common configuration, thus allowing a second meeting from multiple remote locations.

In the configurations, the coupling device includes a rechargeable power source connected to an input configured to be removably connected to a load supply source that recharges the rechargeable power source.

In accordance with a further aspect of the present invention, there is provided a portable session management device configured as a parent management device enabling a child session management device. In the configurations, the permission comprises providing parameters for a computer session on a host computer into which the child session management device is inserted, and recording a computer session history.

In the settings, the history is stored on at least one of: the host computer, the child device, the parent device, and a remote server.

In the settings, the parent session management device is configured to access history using at least one of: a wide area network, an Internet channel, a local server, and a proxy server.

In the settings, the child session management device is configured to recognize parameter violations during the computer session.

In configurations, recognized parameter violations are in the form of at least one of: digital text keyword entry, password entry, secondary Internet sites accessed through a primary Internet site, periodic snapshots, and video streaming throughout the session.

In configurations, recognized parameter violations are in the form of characters displayed in a graphical interface.

In configurations, recognized parameter violations are included in at least one of an Internet site, a chat room, instant messaging, a blog, and an email.

In configurations, recognized parameter violations are established through one of: the parent device and a rating service. In configurations, when a parameter violation is acknowledged, the child session management device is configured to provide at least one of: shut down the host computer, and shut down at least one of internet site, chat room, instant messaging , blog and email.

In configurations, when a parameter violation is acknowledged, the child session management device is configured to generate a warning message to the parent session management device.

In the settings, the child session management device is configured to request a change in at least one parameter to the parent device.

In the settings, the parent session management device is configured to change at least one parameter using at least one of: wide area network, Internet channel, local server, parent session management device, and proxy server.

In the settings, the parent session management device is configured to change at least one parameter while the child session management device and the parent device are connected to the host computer.

In the configurations, the parent session management device is configured to provide at least one time parameter during which the child session management device activates the host computer.

In the configurations, the parent session management device is configured to provide at least one goal parameter whose achievement allows the child session management device to activate a group reward comprising: extended computer use, access to designated computer games and access to designated Internet sites.

In the settings, the parameters include allowing access to at least one of: an Internet site, a chat room, instant messaging, a blog, and an email.

In the settings, the parameters include preventing access to at least one of: an Internet site, a chat room, instant messaging, a blog, and an email.

In the configurations, the portable session management device includes multiple child session management devices issued to multiple members of a group, and the parent session management device is issued to a group administrator.

In configurations, the group administrator session management device is configured to prevent at least one of multiple group members from receiving communications over a period of time.

In configurations, multiple member session management devices are configured to prevent receiving communications over a period of time.

In configurations, the group administrator session management device is configured to prevent at least one of the multiple group members from transmitting communications over a period of time.

In the settings, the time period is related to religious observance.

In accordance with yet another aspect of the present invention, there is provided a method for providing session management, comprising the steps of connecting a portable session management device to a host computer, obtaining authentication that the portable session management device is allowed to access the host computer, and access at least one computer-based application using the host computer, conditionally upon authentication.

In accordance with yet another aspect of the present invention, there is provided a method for providing session administration between portable session management devices, the method comprising: providing a multi-input configuration switching device for communication between multiple communication devices. portable session management devices, inserting multiple portable session management devices into multiple inputs, each device having a hidden data encoding mechanism, and configuring each hidden data encoding mechanism with a common encoding configuration for hidden communication between the devices. portable session management devices or hosts thereof.

According to a further aspect of the present invention, there is provided a method for monitoring computer use, comprising: providing a portable parent session management device, configuring a portable child session management device, using the administration device Parent Session, insert the portable child session management device into a host computer thus to guide the use of the host computer using the configured parameters.

Unless otherwise defined, all technical and scientific terms used herein have the same meanings as commonly understood by one of ordinary skill in the art to which this invention belongs. While methods and materials similar or equivalent to those described herein may be used in the practice or testing of the present invention, suitable methods and materials are described below. In case of conflict, the patent specification, including definitions, will control. In addition, the materials, methods and examples are illustrative only and not intended to be limiting.

As used herein, the terms "comprising" and "including" or grammatical variants thereof shall be construed as specifying the stated characteristics, integers, steps or components, but do not prevent the addition of one or more additional characteristics, integers, steps or components. of the same. This term encompasses the terms "consisting of" and "consisting essentially of".

The phrase "consisting essentially of" or grammatical variants thereof, when used herein, should be considered to specify the stated characteristics, integers, steps, or components, but do not preclude the addition of one or more additional features, integers, steps, or components, or but only if the characteristics, integers, steps or additional components or groups thereof do not materially alter the basic and new characteristics of the claimed composition, device or method.

The term "method" refers to the methods, means, techniques and procedures for performing a particular task, including, without limitation, such methods, means, techniques and procedures known or readily developed from methods, means, techniques and procedures known to the art. professionals in the computer science technique. Implementation of the method and system of the present invention involves performing or completing the manually selected tasks or steps, automatically or a combination thereof. Furthermore, according to the actual instrumentation and equipment of the preferred method and system configurations of the present invention, several selected steps could be implemented by hardware or software in any operating system of any firmware or a combination thereof. For example, as hardware, the selected steps of the invention could be implemented as a chip or circuit. As software, the selected steps of the invention could be implemented as a plurality of software instructions being executed by a computer using any suitable operating system. In any case, the selected steps of the method and system of the invention could be described as being performed by a data processor, such as a computing platform for executing a plurality of instructions.

BRIEF DESCRIPTION OF DRAWINGS

The inventions described herein include portable session management devices that are configured, inter alia, to hide and / or encode data on a host computer and provide data backup; provide parameters for computer use by children; and provide secure data transfer between remotely located members of a group; are being described, by way of example only, with reference to the accompanying drawings.

With specific reference now to the detailed drawings, it is emphasized that the details shown are by way of example only and for purposes of illustrative discussion of the preferred embodiments of the present invention, and are presented to provide what is believed to be the most useful and readily understood description. of the principles and conceptual aspects of the invention. In this regard, no attempt is made to show the structural details of the invention in more detail than is necessary for a fundamental understanding of the invention, the description considered with the drawings makes it apparent to one skilled in the art as the various forms of the invention. can be configured in practice. In the drawings:

Figure 1a shows the components of a

typical portable session administration; Fig. Ib shows the portable session management device of Fig. 1a being connected to a computer;

Figures 1c-1f show an overview of the functions of the portable session management device; provided through the computer of FIGURE 1b in accordance with the embodiments of the invention; Fig. 2 shows the connection and networking options of the portable session management device and computer of Fig. 1b, in accordance with the inventive configurations; Figures 3-10 show views of the user options provided by the portable and computer session management device of Figure 1b, in accordance with the inventive configurations;

Figures 11-22b show the flow charts of the options shown in Figures 1c-10 in accordance with the embodiments of the invention;

Figures 23a-23d show flow charts implementing parent computer supervision for a child in accordance with the embodiments of the invention;

Figures 24-30 show a method of registering the portable session management device in accordance with the embodiments of the invention;

Figure 31 shows the implementation of the default backup in accordance with the inventive configurations;

Figure 32 shows the implementation of increasing backup in accordance with the inventive configurations;

Fig. 33 shows the implementation of a secure pc lock in accordance with the embodiments of the invention;

Figure 34 shows the implementation of session administration in accordance with the inventive configurations;

Fig. 35 shows the implementation of incognito browsing in accordance with the embodiments of the invention;

Figure 36 shows the implementation of the parental control lock in accordance with the inventive configurations;

Figures 37-39 show the implementation of the anonymous subscription service in accordance with the inventive configurations;

Figures 40-42 show the implementation of an anonymous internet shopping service in accordance with the inventive embodiments;

Fig. 43 shows the implementation of a secure instant messaging feature in accordance with the embodiments of the invention;

Fig. 44 shows the implementation of a multiple factor authentication in accordance with the inventive configurations;

Fig. 45 shows receiving and activating a replacement portable session administration device in accordance with the embodiments of the invention;

Figures 46-47 show implementation of a system for notifying a user of unauthorized use of the computer in accordance with the inventive embodiments;

48-51 show a method of exchanging data between group members using secure session administration in accordance with the inventive configurations;

Figures 52-58 and 60, 61 show the coupling device used to ensure safe session administration of Figures 48-51 in accordance with the inventive embodiments; Fig. 59 shows the implementation of antivirus features in accordance with the inventive configurations; and

Figures 62-73 show the implementation of a computer system monitored by an administrator in accordance with the inventive configurations.

DESCRIPTION OF PREFERRED EMBODIMENTS

These settings relate to portable session management devices that provide secure single-point access to a variety of computer-based applications; provide secure data transfer between remotely located members of a group; and provide parameters and monitoring of a child's computer use.

The principles and uses of the teachings of the present invention may be better understood with reference to the accompanying drawings and descriptions.

Before explaining at least one embodiment of the invention in detail, it should be understood that the invention is not limited in its application to the details of construction and arrangement of components set forth in the following description or illustrated in the drawings. The invention is capable of other configurations or of being practiced or performed in various ways. Similarly, it should be understood that the phraseology and terminology employed herein is for description purposes and should not be construed as limiting.

Referring now to the drawings, Figure 1A shows a configuration of a portable session management device 114 of the present invention, alternatively referred to herein as a session management USB key 114 and / or a USB key 114.

Portable Session Admin Device Overview

Some features of portable session management device

Portable session management device 114 typically has a key ring connector 149 configured to hang on a key ring and a swivel cover 128 which, when in a forward position covers and protects a USB connector 191. With cover 128 on the Downward position, a sliding knob 148 is pushed in one direction 178, for example with a thumb movement, thereby bringing the USB connector 191 forward to a ready-to-connect position.

The body of the portable session management device 193 is connected to the USB connector 191 and typically comprises, inter alia, a controller 186 and a flash memory 188.

In non-limiting configurations, portable session management device 114 comprises a USB key manufactured by Acer ®; the many options and manufacturers of portable session management devices 114 being well known to those of skill in the art.

In non-limiting configurations, the present invention provides a portable session management device comprising a user USB device interface comprising portable session management device 114 optionally using a flash memory and / or USB protocol. However, USB is only one of many user interfaces and protocols that can be used with the computer 102, computing device, and / or any computer memory device. The scope of the present invention includes, a priori, all available user interfaces, memory devices and protocols available today or in the future.

Figure IB shows a computer 100 comprising a laptop 102 with a keyboard 110, a screen 112, a memory store 412, for example a hard disk, and the portable session management device input 114 to a USB port 106 In configurations, computer 102 comprises, for example, a Lenovo ThinkPad laptop or any portable and / or non-portable computing device available today or in the future.

In the configurations, session management device 114 includes an authentication unit 118, alternatively referred to as user access module 118, which obtains authentication that user portable session administration device 114 is registered with host computer 102. Through user authentication, portable session management device 114 provides secure access to computer-based applications in conjunction with host computer 102.

As used herein, a "computer-based application" comprises, inter alia, use of any type of computing device to: run and / or use any software program, data transfer between computing devices, data encoding, data backup, provide secure Internet browsing, and / or authorize digital payment of funds. In addition, as used herein, a "computer based application" includes data transfer via a wide area network, an Internet channel, a server, and / or a proxy server.

As used herein, the term "secure" with respect to the access of a computer-based application refers to substantially the prevention of access by, inter alia, Internet con artists, spyware, spying, junk mail, computer viruses. and / or access by unauthorized users on computer 102, session management device 114 or any alternative computing device or memory device of the computer on which session management device 114 has been authenticated. While the computer input 102 comprises the USB port 106, the input could alternatively comprise a serial port, an infrared receiving input, a wireless communication port and / or any existing or future communication medium that facilitates communication between a portable session management device 114 thus configured and a computing means.

Device Login

Figure IC shows a schematic diagram of portable session management device 114 connected to computer 102. User access module 118 includes a user device login module 132, alternatively referred to as a name module 132 which registers a name. user login; and a user device password code module 134, alternatively termed as a password module 134 which registers a user password.

The user device login name module 132 and the user device password code module 134 are encoded in the user access module 118 during an initial configuration of the portable session management device 114 as explained below.

Additionally, portable session management device 114 includes a unique device identifier 414 which is encoded in portable session management device 114 by the manufacturer as a resident digital chain 454. Resident digital chain 454, optionally along with the login name User ID and password is transferred to the 412 memory store during configuration of the portable session management device 114. In the configurations, the unique device identifier of the portable session management device 414 comprises a sequence of numbers and digits, whether coded or not.

By connecting the portable session management device 114 to the USB port 106, the user access module 118 compares the unique device identifier 414 with the resident digital string 454 in memory storage 412, thereby preventing access to computer 102 by another portable session management device 114 that has not been registered with computer 102.

Upon successful combination of resident digital string 454 and unique device identifier 414, user access module 118 initiates a display 302 (Figure 1D) on computer screen 112 via an initiation module 116 which requires you to enter a display login name 162 and enter a display password code 164.

Upon entry of display login name 162 and display code 164, the access module 118 compares display login name 162 with the user login name of the portable session management device 132; and display password code 164 with the user password code of the portable session management device 134.

Upon successful combination, the user is suggested to press a "Login" button 168, thus successfully connecting to computer 102. Upon login, the user access module 118 signals to the starter module. 116 to open a window 302 on screen 112, as seen in Figure 1D.

In alternate configurations, access module 118 associated with the autorun feature of the Windows XP operating system by Microsoft Corporation to provide display 302.

In accordance with the configurations of the present invention, as soon as the user has been authenticated by identifying the display login name 162 and display password code 164, any encoding or decoding process associated with the portable session management device 114 stores a hash value 456 along with each data packet, as explained below.

As used herein, the term "hash" refers to the creation of an encoding code associated with a portion of the digital data.

As used herein, the terms "encoding" and "encoding" refer to encoding at least a portion of the data using at least one algorithm to prevent unauthorized inspection of the data. In additional configurations, data inspection is facilitated by a decoding code comprising the same algorithm used for data encoding.

As used herein, that term "inspection" refers to accessing, reviewing, or determining information from any digital string or portion of data stored in a computing device and / or storage device memory.

As used herein, the terms "hide" and "concealment" refer to any obscuration, encoding or encoding of data to prevent unauthorized inspection of data.

As used herein, the terms "authenticating" and / or "authenticating" refer, inter alia, to verifying the integrity of a digital message or data portion, and / or verifying the identity of a user accessing a computing device. and / or network; verification, including the use of any password, biometric parameter, digital certificate, code and / or digital string.

In the embodiments of the present invention, after generating the hash value 456, the value is encoded and stored in portable session management device 114, for example, in device memory store 408.

In configurations, the hash value 456 associated with portable session management device 114 is sent, for example, via a secure VPN connection, to a server 470, for example, at a remote location, for storage in an accessible secure encrypted vault to the user 430.

In configurations, starter module 116 comprises a protocol written using the ".Net" platform program marketed by Microsoft Corporation of Seattle, Washington. Alternatively, initiator module 116 comprises a U3 initiation pad manufactured by U3 Corporation of California, USA.

In alternate configurations, the initiation module 116 comprises one or more software programs, including software modules, software components, software libraries and / or software DLLs, which in turn include computer instructions for relevant operations operating in conjunction with user access module 118 to provide the many services of portable session management device 114, some of which are detailed below.

Operating software programs with user access module 118 are optionally written in accordance with settings in the C, C ++, C #, Java, or other programming languages, and run against one or more operating systems, including , without limitation, Windows, Linux, or Unix platforms.

As seen in Figure 1D, in a non-limiting configuration, a window 302 on screen 112 provides the user with. following options via display buttons 320:

Access to a Secure Coded Vault 304;

Access to a Remote Storage Database 306;

Access to a Secure Coded Device Memory 308;

Access to Safe Browsing on the Internet 310; and Access to a Customer Care Center 312.

The user selects one of the options in window 302, for example, "Safe Vault" 304, and screen 112 displays the opening view associated with secure vault 304.

Secure Vault

Secure vault 304, seen in Figure 1E, displays a display vault 410 that contains the folders and files contained in a secure vault 411 in computer memory storage 412. Secure vault 411 is accessible, mounted here, as readable on screen 112, such as display vault 410, only as long as portable session management device 114 remains connected to computer 102.

Upon successful login with portable session management device 114, secure vault 411 is recovering by pressing a "Recovery" button 472, after which the user can modify secure vault 411 by accessing the display vault 410.

By choosing to terminate a particular session, including allowing and / or facilitating authentication expiration during a given session, the user presses a "Securely Eject Key" button 314. After pressing the button 314, all changes to the vault Display codes 410 are encoded in secure vault 411 in memory store 412 and remain completely invisible to anyone accessing computer 102. In configurations, secure vault 411 is defined in memory store 412 by physical start and end addresses.

In configurations, File Allocation Table (FAT) files and / or New Technology File System (NTFS) files are encoded using an encoding mechanism hidden within the device, so there is no way that the computer can find the vault data without the device. The result is that virtually no trace is left of any information that was entered on computer 102. In an additional configuration, secure vault 411 and associated start and end addresses are encrypted by disconnecting from portable session management device 114. A The reference remains in the space used in 412 memory storage that includes the size of 411 vaults, so that other programs do not inadvertently overwrite the data.

Remote Database

Remote Database 306 ensures that secure vault 411 data, or any user-chosen data, is backed up on server 470 as a backup file on remote vault 430 that is accessible only by successfully logging in from the administration device. portable session 114 on computer 102. Server 470 is located, for example, in a different city and is accessible via an Internet connection 460.

In configurations, portable session management device 114 compares the information and files in secure vault 411 in computer storage 412 with remote vault 430 on server 470 periodically throughout the session. In configurations, even when the user has not specifically chosen to access remote database 306, files in secure vault 411 that have been changed are automatically backed up to secure vault 411 and / or remote vault 430.

As used herein, the term "server" refers to any storage device employing magnetic, optical or alternate media, including, inter alia, server 470 and / or server 212 (Figure 2), located locally and / or at a location. remote; at present a remote server.

In the settings, a window 322 informs a user during a given session of all files and folders in secure vault 411 being backed up to secure vault 411 or server 470. At the beginning of the next session, the user is optionally informed of changes to secure vault 411 that were made in the first session. In the additional configurations, the user optionally configures portable session management device 114 to back up changes to the displayed vault 410 to secure .vault 411 in memory store 412 and server 470 over the given session increasingly. Increasing backup allows significantly reduced communication between computer 102 and server 470, thus keeping computer 102 at optimal speed.

In other configurations, at the end of the session, portable session management device 114 optionally prompts the user to save changed files in secure vault 411 to remote vault 430 or to save secure vault 411 under new names on server 470. A The latter option prevents overlapping files in secure vault 411 that were present at the beginning of the session.

The information contained on server 470 is optionally retrieved on any computer 102 to which portable session management device 114 has been successfully connected. In the settings, upon successful login, the user has the option of activating the "Recovery" button 472 for the recovery of 470 server files.

Server recovery 470 is optionally used, for example, when the user is on vacation, in which case computer 102 comprises a previously unregistered desktop computer with respect to portable session management device 114. Unregistered computer 102 may be located in a hotel or on any ISP website, for example, an internet cafe or other locations.

During the session, portable session management device 114 continuously encodes the data. Upon termination of the session determination, the user selects the "Securely Eject Key" 314 option and the data is backed up in either encrypted or uncoded form to secure remote vault 430 and the portable session management device 114 is securely removed from computer 102. If the user wishes, secure vault 411 and associated display vault 410 are deleted from unregistered computer 102, so that when the user leaves a cafe with the Internet, there is no trail of any user session data on the host computer 102.

In configurations, if the 412 memory store becomes extinct, for example through what is termed a failure, the user accesses the remote vault 430 and places the data in a new 412 memory store or another computer 102, thereby protecting it. and restoring all folders and files in secure vault 411 despite the failure.

Key Memory

In configurations, the user may use the "Secure Device Memory" option 308 to back up secure vault 411 and / or secure vault 411 to store memory of coded device 408 on portable session management device 114. Data in the 408 device memory store is not accessible to anyone who cannot successfully connect to computer 102. The 408 device memory storage vaults, files, and information, however, are available to the user to download to any computer 102 anywhere after successful connection. If portable session management device 114 is lost or stolen, the user need not worry that sensitive information has fallen into the wrong hands due to the coding protocols noted above on portable session management device 114.

Optionally, 408 device memory storage is automatically downloaded and encrypted on server 470 via 460 connection. When the user connects to computer 102 after replacing lost device 114, even recently modified files in device 408 memory may recovered from server 470, thereby preventing data loss after the loss of portable session management device 114.

In addition, portable session management device 114 provides the user with the opportunity to work on files from device memory 408, even in a location that does not have a 460 internet connection, for example, while on vacation. or remote city.

Customer Care Center

In the event that the user has forgotten the device 132 login name or device 134 password code, the user optionally contacts Customer Care Center 312, seen in Figure 1F, as required in a window 332. Alternatively, the user calls an operator at Customer Care Center 312.

In the configurations, the user is required to provide the device login name 132 or device password code 134, optionally with the device 414 unique device identifier and / or unique personal identification, for example, the mother's maiden name of user. Upon successful provision of the ID ·, the user is given the previous device login name 132, previous device password code 134. Alternatively, Customer Care Center 312 allows the user to enter a new device login name 132 and / or device password code 134.

If portable session management device 114 is lost upon proper identification, a new portable session management device 114 including user login name 132 and user password code 134 is optionally issued. In the configurations, the user then uses the new portable session management device 114 to insert the encoded remote database 306 to retrieve files and folders from server 470 to computer 102.

In the configurations, the new portable session management device 114 is optionally provided with a replacement device unique identifier 414 and the original device unique identifier 414 is invalidated.

Thus, if the user lost, for example, a folder containing portable session management device 114 and also his notebook with login name and password code, an alleged impostor would not be able to access secure vault 411. In these configurations, the access program compares the unique device identifier of the portable session management device 414 with the identification information stored in the memory store 412 and, upon rejection of an unauthorized device, maintains a record to inform the user.

The user is informed that the unregistered portable session management device 114 has been connected to laptop 102 and optionally the identity and timing of the unauthorized connection.

In addition, the user has the option to contact Customer Care Center 312, where additional measures may be taken, for example, disabling the unauthorized device until the unauthorized user is notified and / or warned of the unauthorized access. Safe Internet Browsing

Portable session management device 114 allows the user to safely browse websites on the Internet. In the settings, after login and safe browsing option 310, a specially configured internet browser is launched from the device that stores session information such as cookies and website history so that the information cannot be inspected without the device.

Preferably, the data is stored on the device. That is, the history of each site 510 visited by the user and any information or communications downloaded during a particular browsing session is entered into the portable session management device 114.

As used herein, the term "history" with respect to the administration device 114 refers to any record of digital and / or analog information and / or communications via the Internet, chat rooms, blogs and / or email.

Safe Computing Environment

Figure 2 shows an optional computing environment 200 in which portable session management devices 114, 206, 216 and 220 are connected to computing devices comprising laptop 102, desktop computers 222 and 208, and a portable device 218, respectively.

In the configurations, portable session management device 114, for example, is inserted into laptop 102 which is connected to a server 212 via a local area network 214 and activated by user access module 118.

Additionally, desktop computers 208 and 222, with portable session management devices 206 and 220 respectively, are connected via a local area network 240 via a connection 269 to a wide area network 224 and communicate with server 212 and computer 102.

In still further configurations, the portable session management device 216 is connected to a portable device 218, for example mobile phone 218, which is connected to server 212 via network 214.

As used herein, any reference to connections between computers 102, 222 and 208, computer storage, for example, server 212 and / or portable computing devices 218 and / or methods and protocols for connecting them, includes a priori all methods, devices and / or protocols available today or in the future. The many options for connecting laptop 102, desktop computers 208 and 222, portable computing device 218, and server 212 are well known to those of skill in the art. In addition, as used herein, the term "computer" 208 refers to any computing device with a USB connection. Those skilled in the art will still appreciate that portable session management devices 114, 206, 216, and 220 are optionally connected to computing devices 102, 208, 218, 222, and / or server 212, either directly or via various network configurations. , 214 and 224 and / or computer communication protocols currently available or further developed.

In the configurations described below, backup to remote memory storage uses the example backup on server 470 and / or remote vault 430 contained herein. However, as used herein, any reference to the 470 server and / or 430 remote vault refers to any computer and / or storage available today or in the future.

As non-limiting examples, the laptop 102, or any computing device, including, inter alia, computers 208, 218, and / or 222, may back up files on any of computers 102, 220, and 208, server 212, and / or portable device 218 using the currently presented protocol of portable session management device 114 or any protocol developed in the future.

In configurations, server 212 generates a hash value for each of the portable session management devices 114, 206, 216, and 220 based on the individual user login name 132 (Figure 1C), user password code 134, and / or unique device identifier of the portable session management device 414 which are optionally stored in each of the portable session management devices 114, 206, 216 and 220 and / or in the memory storage associated with computing devices 102, 208, 218, and 222 and / or server 212.

Device Configuration

Figure 3 shows window 302

in a view 300 where the user has selected to configure coded vault 304. by clicking a "coded vault" configuration button 305. Figure 4 shows a secure vault window 402 in a view 400 that follows the choice of "Secure Coded Vault" 304 (Figure 3). The user selects a "Create Vault" button 418 and enters a 404 vault name to create.

As used herein, the words keying, clicking, choosing, selecting and grammatically related words and / or words with similar connotations refer to the choices that are made by the user using, inter alia, a keyboard, mouse, touch screen and / or pen.

Vault name 404 optionally comprises any identification string that identifies vault 411 on computer storage 412 and / or vault 430 on server 470. The user optionally chooses the vault name 404 that is connected to the utility of the created vault 418, for example. eg drive "F" followed by "documents" or the user ID, for example "John" as explained below.

In a 406 box, the user selects the default size of vault 404, for example 30 megabytes, although any other number designating a given 404 vault size can be placed in box 406. The size of vault 404 is only limited by system capacity. operational to create the files or folders that fit the chosen size 406.

In configurations, the user optionally changes vault size 406 any time after creating vault 404. In alternate configurations, vault size 406 is set to be dynamic, so that vault size 406 changes depending on several parameters. including, inter alia, available storage space on computer storage 412, user preferences, user preferences with respect to computing device 102 or server 470, and / or the volume of files and information stored on the computer. vault 411.

The user clicks button 418 to create vault 411 or clicks button 409 to cancel the operation and returns to the previous window 300. By pressing the "Create Vault" button 418, user access module 118 instructs the computer operating system 102 to create a secure vault 411 on memory storage 412 and / or other predefined storage, for example, remote vault 430 on server 470.

Secure vault 411 is encoded using conventional encoding protocols. In a non-limiting configuration, the encoding protocol comprises the TrueCrypt encoding scheme by the TrueCrypt Foundation; The many coding protocols and coding methods are well known to those of skill in the art.

Unit Configuration

Figure 5 shows a screen display of computer 500 with a window 502 illustrating multiple drives on computer 102. The displayed vault 410 generated by module 118 is stored in secure vault 411 within memory storage 412, and is shown to the user in the window. 502, for example, as a displayed vault 504 designated as a removable disk that was named "John" by the user. Units 506, 508, 511, 512, 514 are also shown to the user in window 502.

In the embodiments of the present invention, while portable session management device 114 is connected to computer 102, the displayed vault 504 remains visible and available for storing files and information. While secure vault 411 is open the user optionally saves files and information to secure vault 411 by copying or saving files and pressing the displayed vault button 504.

In alternate configurations of the present invention, the user can drag and drop files or information into the displayed vault 504 which is then encoded into secure vault 411. The files and information from the displayed vault 504 are encoded along with the user's hash value, which is contained in user access module 118 and / or memory storage 412, and saved to secure vault 411.

Unit Status

Figure 6 shows a window 622 on a display 600 related to the status and options associated with the displayed vault 504. The displayed vault 504 is opened by default upon launch of access module 118. The displayed open vault 504, hereinafter referred to as being "mounted" as secure vault 411 in memory storage 412, it is available to receive data.

Closed displayed vault 504 unmounts vault 411, so that neither memory store 412 nor displayed vault 504 is user viewable and vault 411 cannot be accessed.

A window 602 illustrates a 404 status of the displayed vault 504, with a title of "John" 632. The displayed vault 504 is designated as mounted on computer storage 412 as vault 411 by an "active" designation 632 and assigned an indication of unit 634, in this case, a letter "F".

Display 622 additionally shows the size box 406 showing the size of secure vault 411 and a colored bar indicating the amount of free space 610 still available for use in secure vault 411. In other configurations, alternative illustrations of vault size 406 and amount of free space 610 is optionally displayed, for example, a pie chart illustration; The many options for graphics associated with the 622 display and / or components, such as free space 610, are well known to those of skill in the art.

While the vault displayed. 504 is represented in isolation, it will be readily appreciated that many additional vaults are optionally illustrated in a similar manner alongside the displayed vault 504.

A number of 630 buttons are available to the user to administer the displayed vault 504. A 612 button allows the user to mount vault 411 to memory store 412 even while displayed vault 504 is closed and vault 411 is dismounted. A button 614 allows the user to close the displayed vault 504, thus dismounting the vault 411 in memory storage 412. A button 616 allows the user to add a vault, described with respect to Figure 4 above; and a 618 button allows the user to delete a vault. Secure Database

A display 700 (Figure 7) shows a 702 window with a selection menu presenting the user with 701 options after selecting remote database option 306.

In the settings, when the user selects the option to access Secure Database 306, window 702 displays the 701 selection menu. The 701 selection menu allows the user to choose folders to be backed up 704. As used herein, the The term "folder" refers to any storage component created which comprises any created data, individual files, multiple files, individual folders and / or multiple folders. Menu 701 additionally presents the user with folders of choice for restoring 706 and viewing folder activity 708.

Additionally, the user optionally presses a "Backup" button 710 to view the 711 backup information. In the configurations, the backup information section of display 711 includes, inter alia, a 712 backup utilization count, a field stating the current operation being performed 714, a directory name where the relevant file is located 716, and a file name being backed up or restored 718.

Figure 8 shows an 800 view in which an 802 window appears in response to the user selecting Choose 704 Folders. The 802 'window provides the user with folders to choose from, for example, in the form of an 818 directory tree. directory 818 includes, for example, all folders, for example, 804 and 806 that are under the control of portable session management device 114. The user optionally selects one or more folders to work on, for example My Music 804 and My Images 806 for backup. Upon selection, folders 804 and 806 are highlighted and an 808 storage summary is presented. Storage summary 808 optionally provides information about the amount of storage available, in this example 2 gigabytes, the amount of storage used in this example, O gigabytes, and the amount of storage remaining, in this example, 2 gigabytes.

Backup

A backup speed 810, referred to herein as upload speed 810 and shown in this example as 119,224 kilobytes per second, is optionally presented to the user. Additional options include, for example, a "Clear All Choices" button 812, a "Save Changes" button 814, and a "Cancel" button 817, which cancels actions and returns the user to window 702 (Figure 7).

Upon selection and execution, folders 804 and 806, or any other user-selected data, are stored in computer vault 411 and / or remote vault 430 as encoded or decrypted files. In the settings, the option to back up encoded files or non-encoded files in vault 411 is an option chosen by the user.

After storage, restoration of 804 and / or 806 folders on computer 102 will only be allowed via the use of portable session management device 114 after authentication as described above.

In emergencies, the user has the option to notify Customer Care Center 312 and request that backup data 810 be made available for download to computer 102 without using portable session management device 114. Such emergency backups become are extremely valuable when, for example, there is a computer error in computer 102 that makes it impossible to log in with device 114. Restore

A 900 display (Figure 9) shows a 902 window where the user has selected the "Restore Files" option 706.

A window 904 gives the user the option to select which folders to restore from server 470, for example, a personal folder 905. In the settings, the user will see a window 906 showing the list of files encoded in folder 905. In the example shown, The user has selected for restoration: a "Song2.mp3" 930 file, a "Song3.mp3" 932 file and a "Figurel.JPG" 934 file.

The user then selects a target location 918 where files 930, 932, and 934 will be restored, for example, C: \ Documents and SettingsXJohn \ My Documents in memory store 412. The user alternatively manually enters another suitable path in box 918. for example, remote vault 430 on server 470. Alternatively, the user optionally accesses browser window 502 (Figure 5) and navigates until it finds target location 918.

By selecting a "Restore" button 916, files 930, 932, and 934 are restored to target location 918. Alternatively, the user selects a "Cancel" button 922 to return to window 702 (Figure 7). Account Activity

A 1000 view (Figure 10) shows a window 1008 that provides the user with options after selecting to view "account activity" 708. Account activity 708 displays information associated with storage device backup and restore operations, including 412 memory storage and 470 server.

The user selects the drop down report menu window 1002 which displays the storage devices, for example, shows the information in a storage device group named "PC-M_Room", including server 212, memory storage 412 of the storage device. computer 102 and server 470. The user then clicks on device 212, 412, or 470 against which a detailed activity report 1004 will be displayed.

The PC-M_Room selection in window 1002 is shown as display 1006. Optionally, the user selects a 1006 uptime chart for PC-M Room 1.002, which in this example is shown as "from 9/4/2006 until 14/14. 9/2006 ".

After the user has entered the above account activity and preferences noted, the user chooses the "View Detailed Activity" view 1004 which provides a window 1014 showing a maximum storage space 1024, an amount of used storage space 1026 and a Amount of storage space still available 1028.

In accordance with the configurations of the present invention, an activity window 1054 provides the user with activities performed by one of the storage devices in window 1002, for example server 470, or all devices on PC-M_Room 1002.

Such description includes, inter alia, a number of scan hours 1032, a number of browsing hours 1034, a number of added files 1036 and a number of deleted files 1038.

Additionally, window 1054 shows the size of added files 1044, size of deleted files 1048 and size of restored files 1050. Additionally, window 1010 shows a file summary of file types stored or handled, for example by server 470, or all devices on PC-M_Room 1002 for the time frame shown in activity view 1006. In the example shown, file types include 1060 documents, 1062 photos, 1064 videos, 1066 music, or "other" 1068 file types. Device Operation Flowcharts

A portion of flowchart 1190 (Figure 11) shows secure login and authentication performed by module 118 starting from step 1100. In a connection step 1102, the user connects portable session management device 114 to computer 102 In a network step 1104, access module 118 determines whether a network connection has been established between computer 102 and server 470.

With a proper network connection, the user proceeds to an activation step 1106, in which all applications become active. In a login step 1108, the user connects by providing display login name 162 and display password code 164 (Figure 1C) and in a device communication step 1110, access module 118 communicates this entry to server 470, along with unique device identifier 414.

Server 470 performs a query on user login name 162; user password code 164 and unique device identifier 414 and determine and the user login is authentic. Upon authentication in step 1110, an 1112 toolbar is displayed. The toolbar 1112 is shown in Figure 3 as window 302. In configurations, if there is no connection to the 470 server or a VPN connection is not present, the access module 118 informs the user that the connection must be made to continue. operation. The user is referred to an offline step 1114 which, with proper input of the parameters, allows the connection to secure vault 411 only. The user can additionally choose to log in, performed at a login step 1116.

In a step 1118, user authentication is performed by combining the incoming user login name 132 and incoming user password code 134 with the information stored in the portable session management device 114.

In a step 1120, user access module 118 starts a file watcher program to look for changes to folders, for example, "My Pictures" 806 and "My Music" 804, (Figure 8), the information regarding those changes. They are preferably communicated via mechanisms such as Windows Status message boxes.

Ending a Session

In a flowchart portion 1200 (Figure 12), starting at a junction 1202, the user proceeds to an exit step 1204. Upon choosing to exit, the user proceeds to a cleanup step 1206 in which all temporary files and Cookies are clean. In a dismount step 1222, access module 118 ensures that all data in memory storage 412 is unmounted and that any connections to server 470 are disconnected. In a step of removing device 1224, access module 118 unmounts the data so that portable session management device 114 securely removes from computer 102 and the session is terminated. If the user selects to access a secure vault step 1208 instead of output step 1206, access module 118 accesses the displayed vault 504 as described below and proceeds via a junction 1210 in Figure 13.

If the user. If you select to access the remote database located, for example, on server 470, in step 1212, access module 118 proceeds to a junction 1214 described in Figure 16. If the user chooses not to access the remote database on server 470 , access module 118 proceeds through junction 1216 and the user returns to junction 1128 of Figure 11.

Vault Creation and Administration

A flowchart portion 1300 (Figure 13) shows administration of secure vault 411. In a determination step 1302, access module 118 determines whether there are previously defined secure vaults 411 present on computer 102 and displays secure vault icon 504 seen in Figure 5. If no secure vault 411 was previously created, in a display step 1304, access module 118 causes computer 102 to display vault screen creation 402 (Figure 4). In a vault configuration step 1306, the user enters vault name 404 and vault size 406 (Figure 4) and in step 1308, the displayed vault 504 (Figure 5) is shown.

If in step 1302, unmounted secure vault 411 is available for mounting on computer 102, in an assembly step 1310, secure vault 411 is mounted and displayed as displayed vault 504.

In a step 1312, the secure vault 320 options toolbar buttons (Figure 6) are shown to the user. Access module 118 expects a selection to be entered by the user in step 1314. The available selections are shown in a flowchart portion 1400 (Figure 14).

At an exit step 1402, the user selects to exit the secure vault 304 options toolbar. Access module 118 closes and dismounts open secure vault 411 in a step 1404 and returns to junction 1128 of Figure 11. At Alternatively, at step 1404, secure vault 411 is closed but not dismounted until portable session management device 114 is removed from computer 102.

In step 1406, access module 118 determines whether the user has selected secure vault 411 to open and if so, in step 1408, access module 118 identifies which secure vault 411 the user has selected to open and proceed to step one. 1502 of Figure 15 (flowchart 1500), wherein access module 118 determines whether or not the selected secure vault 411 is open. If secure vault 411 is not open, in step 1504, access module 118 authenticates the user by performing a query on server 470 to authenticate whether such user login name 162 and user password code 164 entered match the password. device login name 132 and device password code 134 on portable session management device 114 connected to computer 102.

Alternatively, when a network connection is not available, the authentication described above is performed on portable session management device 114. If the query succeeds, in step 1506, access module 118 opens and mounts the secure vault. selected 411 and displays the vault displayed 504 in view 502 (Figure 5).

Portable session management device 114 provides the hash value associated with secure vault 411 as well as for mounting secure vault 411 that is available to the user. Optionally, in a step 1510, secure vault 411 content is displayed to the user.

In step 1409, access module 118 determines whether the user has selected to close secure vault 411 and if so, in step 1410, access module 118 identifies which secure vault 411 or portion thereof has been selected to close and proceed to Figure 15. In a step 1512 of Figure 15, it is determined whether the displayed vault 504 is already closed. If the displayed vault 504 is closed, then the flow returns to step 1312 of Figure 13.

Alternatively, if secure vault 411 is open, as shown in flowchart 1500 (Figure 15), a step 1514 authenticates the user by comparing the input ID by identifying it with the portable session management device 114. In a step 1516, using the hash value, secure vault 411 is closed and unmounted and cannot be accessed or viewed by the user or other users of computer 102.

In Figure 14, in a new vault creation step 1412, access module 118 determines whether the user has selected to create a new secure vault 411. If yes, control is transferred to a junction 1316 of Figure 13. In a step 1414 , access module 118 determines whether the user has selected to delete the new secure vault 411 and if so, in a step 1416, access module 118 identifies which secure vault 411 the user has selected for deletion.

Optionally, in step 1418, the user is prompted to confirm their desire to delete the displayed vault 504. User authentication is then performed as described in association with step 1504 in Figure 15. If the user is authenticated, then the vault safe 411 is deleted and control is returned to a junction 1318 of Figure 13.

Backup and Storage Figures 16 - 22B show the backup and restore flowcharts that are performed by access module 118.

A flowchart portion 1600 (Figure 16) shows a step 1602 that authenticates the user as in step 1514 of Figure 15. In a load step 1604, the user's backup configuration records are loaded. Backup configuration records include user-defined parameters including the list of files and folders the user wants to back up. In a step 1606, it is determined whether the computer 102 and the portable session management device 114 are properly combined.

In the configurations, there are multiple computing devices 102 and / or storage memory device 412 associated with the portable session management device 114, as seen in Figure 2. In the configurations, the computer 102 where the portable session management device 114 is connected is set to primary computer 102 for backup and security. In accordance with this configuration, primary computer 102 and its associated storage memory device 412 are in default storage.

In a portion of flowchart 1800 (Figure 18), the user defines additional computing devices and storage devices for backup and restore procedures. A backup step 1802 is highlighted, expecting the user to enter which folders should be encrypted on computer 102. The user views a view of remote database 306 (Figure 8). The folders you choose are then stored in files located on server 470.

In an 1806 selection step, the user selects the folders to back up or exits the view in an 1808 step, at which time changes to the folder list are saved in an 1812 save step. A 1608 junction of Figure 16 is then highlighted. .

If the user did not select exit in exit step 1808, a determination step 1814 is highlighted, and if a folder was already backed up on server 470 in a removal step 1816, the already backed up folder is removed and an 1820 junction is highlighted in User expectation to insert to Ioop back up to flowchart step 1800.

Alternatively, in determination step 1814, if the selected folder has not been previously stored, in an addition step 1822 the selected folder is added to the list of folders for backup.

Referring back to Figure 16, in a toolbar step 1610, the toolbar for remote database 306 is displayed, and in an access step 1612, access module 118 waits for user selection from from a list of options. If the user selects to leave the account toolbar for remote database 306 in an exit step 1614, then in a shutdown step 1616 the remote database account toolbar 306 is closed and a junction 1128 of Figure 11 is highlighted.

If the user selects the folders to back up in a 1618 backup step, then an 1824 junction (Figure 18) is highlighted and user input is awaited.

If the user selects a restore folder step 1620, then a junction 1902 is highlighted pending input (Figure 19).

If no folder is chosen, an "I" junction 1702 is highlighted (Figure 17) in flowchart portion 1700, awaiting user input. If a backup "upon" determination 1714 is made, the user goes to a switch step 1724 and switches the button 710 (Figure 7) to "off". A shutdown step 1734 sends a signal to junction "Fl" in Figure 16 to shut down the backup process.

Alternatively, if a

If the 1706 backup "off" determination is made, the user goes to a 1716 switching step and switches the 710 button (Figure 7) to "on". A start backup step 1726 sends a signal to junction "Fl" in Figure 16 to start the backup.

The user is returned to flowchart 1600 through junction 1608 with backup shutdown or ready-to-start backup and the user proceeds to open the 1610 database toolbar and is presented with the performance step of option 1612, awaiting input from the user.

Selecting the 1620 restore option brings the user to junction 1902 of a flowchart portion 1900 (Figure 19). In a 1904 display step, the folder list and unique IDs are ready. Unique file identification refers to files that are stored on computing devices except computer 102.

The user optionally designates each computing device with its own ID and the unique ID is stored in portable session management device 114 associated with remote vault 430.

A 1906 display step displays the folders and files that are available for server 470 restore, as seen in Figure 9. In a 1908 folder pick step, access module 118 waits for the user to select which folders and files to restore. . In an exit step 1910, it is determined whether the user has selected to exit the display of Figure 9, and if so, junction 1608 of Figure 16 is highlighted.

In a step 1912, it is determined whether the user has made a selection to restore server folders and files 470, which are associated with computer 102 and portable session management device 114. If yes, optionally in a target step 1914, the The user chooses the target location and path that the selected folders or files should be restored to. In a 1916 folder selection step, if folder selection has occurred, 1918 display folders display the folder-related files (Figure 9). In a 1920 file selection step, if the files were selected, in a 1922 file add step, the files are added by the user to the restore list. Restore list 1922 contains the list of files to be restored during the next restore operation.

A portion of flowchart 2000 (Figure 20) shows a start step 2002 in which the restore procedure is started. Start step 2002 starts Ioop that stores each file until the restore list in list step 1922 is empty.

In a 2004 step, the name and other parameters of a first file to be restored are read from server 470. The first file is divided into small packages, for example at least about 64 bytes in size and encoded with the associated hash value. to the portable session management device 114.

Alternative to 64-byte packets, files are divided into 1 to 65,535 byte packets. The encoded packets are then sent to computer 102 and in a save step 2008, the packets are saved to memory store 412.

In step 2 010, a file is constructed of packets that arrived through computer 102. In step 2012, the file is decrypted using the hash value associated with portable session management device 114. At that time, except for the list of restore is empty, the next file name in the list is read, and the process continues as described above.

In configurations, when secure vault 411 is opened, as seen in a flowchart portion 2100 (Figure 21), a 2102 file watcher step is activated that automatically or semi-automatically backs up any changes to the secure vault content. 411 as selected by the user. This is an ongoing process where the list of files or folders to watch and back up for storage on the 470 server is read at step 2102, and the file list changes or new files are added to the file list for restore. File watch 2102 is disabled when secure vault 411 is closed.

In a suspend step 2106, if the continuous process of steps 2102 and 2104 was suspended for any reason, a step 2108 starts the process again.

In step 2110, access module 118 waits for Windows to read the parameters of a given file and provide notification of which file to restore has been changed, added, or deleted. The file is prepared for processing in step 2114 and transferred to a creation step 2202 in Figure 22. The changed file parameters that are monitored are additionally monitored for, inter alia, file location, size and saved data.

A flowchart portion 2200 (Figure 22A) shows step 2202 wherein the file compression algorithm is performed using the hash value associated with portable session management device 114. In one step 2204, the file is compressed with the hash value as part of the compression.

Compression optionally uses the WinZip compression algorithm from WinZip International LLC, Mansfield, Connecticut, USA. Those skilled in the art will appreciate that other compression algorithms may be employed similarly.

In a temporary step 2116 (Figure 21), a temporary working file is prepared on server 470 to buffer data packets arriving at server 470. In a step 2118, incoming data packets are read. In a package step 2122, packages are written to a temporary working file. Once the last packet of a given file has been written, the file is sent to server 470 and a temporary file record is added to a database storing all stored file names with respect to portable session management device 114.

Flowchart portion 2300 (Figure 22B) shows a registration step 2304 wherein the registry declares the file name, path, and associated computer 102. In one step 2306, the temporary file is then deleted and a junction 2124 of Figure 21 is highlighted.

Those skilled in the art will appreciate that file observer 2102 (Figure 21) may be a part of access module 118 or a computer independent program or module optionally executed and kept resident in computer random access memory 102 associated with the device. session management system 114.

Parent Device Configuration

Figure 23A is a flowchart portion showing the configuration of a portable parent session management device 98, alternatively referred to herein as a parent device 98. The parent places the parent device 98 on computer 102 and advances to a step of "Internet connection" 1104 and activation of an "application step" 1106 as described with respect to flowchart 1190 (Figure 11). At a login step 2308, the parent device 98 is connected to computer 102.

After the parent device 98 login authentication, alternatively referred to herein as the parent device 98 authentication, login occurs as described with respect to flowchart 1190 (Figure 11). The parent then proceeds to a vault question step 1302 as described in flowchart 1300 (Figure 13). In a "vault step" 2318, a country vault 350 is created in computer memory 412. In a "backup step" 2320, a country backup 352 is created in remote memory on server 470.

Additionally or alternatively, backup step 2320 can back up data by using a proxy step 2321 on a proxy server.

As used herein, a proxy server refers to a server that receives intended requests from another server and acts on behalf of the client, such as the proxy, to obtain the requested service. A proxy server is optionally a gateway server that separates a corporate network from an external network, protecting the corporate network from external intrusion.

In configurations, proxy step 2321 obtains information from a web server that acts as an intermediary between the user and the web server; of specific importance when there is a slow link to the Internet and / or the 470 server.

It is understood that, as used herein, any reference to the backup or services associated with it, the 470 server, and / or communication via any Internet-based protocol, is optionally configured to use a proxy server. Methods and protocols for configuring between the configurations of the present invention and a proxy server are well known to those of skill in the art.

After backup 352 is created, the process proceeds to Figure 23B starting with connecting to computer 102 of a child device 99, alternatively referred to herein as a portable child session management device 99. After the device login step 2309, and an authentication step 2311, a 360 child vault is created in computer memory 412 and a 362 child backup is created in remote memory on server 470.

The process proceeds to a "parameter step" 2380 shown in Figure 23C, wherein the parent device 98 sets the various parameters and protects the orientation of computer use 102 that will be connected to the child device 99.

If parameters have already been set, for example, through the Windows content advisor by inserting the parent device 98, a background process temporarily suspends the advisor. contents as will be explained with respect to Figure 36. During the sleep period, the parent device 98 is optionally used to change the parameters.

Windows Content Advisor suspends until Parent Device 98 is disconnected and removed from Computer 102. After disconnecting, for example, after securing protocols by Parent Device 98 on Computer 102, Windows Content Advisor returns to provide all restrictions indicated.

In the configurations, the child device 99 remains on computer 102 at the same time as the parent device 98 and the child device 99 and is directly attached to the parent device 98 during scheduled vault setup 360 and backup 362.

Alternatively, child device 99 is removed from computer 102 and at the next login with child device 99, vault 360 and backup 362 parameters and configuration are loaded on child device 99.

In still other configurations, the children's device 99 is used for login only; so that all parameters are stored in vault 360 and backup 362 and the parameters are loaded on computer 102 with each child device 99 login. The many interaction protocols and methods for providing parameters and interactions between child device 99, vault 360 and backup 362 are well known to those familiar with the technique.

In the settings, there is an option to prohibit access to the computer in general unless the child device 99 is connected to the computer 102. That way the child cannot simply turn on the computer 102 and without the child device 99 , access the Internet, chat rooms, blogs, or email without parameter guidance.

As used herein, the term "blog" refers to a website that contains, inter alia, a personal online diary comprising reflections and / or comments provided by a writer associated with the website. In the settings, after configuring the child device 99, changes to the parameters associated with the child device 99 are only made with the parent device 98, preventing the child device 99 from being used to tamper with the computer 102. In the settings, a first parent device 98 allows a second parent device 98 the privileges to modify specific parameters associated with the child device 99.

In configurations, an additional level of protection is provided by bypass devices 98 and 99 because all Internet browsing and / or other 2380 parameter options are provided via a dedicated secure proxy server associated with devices 98 and 99.

Internet Access Control

After connecting Parent Device 98 and Child Device 99, Parent Device 98 optionally accesses a list of "Approved Internet Sites" 2382, where parents choose child-accessible sites from a list of Internet sites, for example, sites related to science and education.

In addition or alternatively to limit Internet access to approved 2382 Internet sites, parents have the option to enter a "blocking step" 2384 and block Internet sites. In conjunction with lock step 2384, parents can enter a "device word" step 2386 and enter device words that cannot be used by the child. Blocked words are optionally adapted to specific situations. For example, the words "suicide" and "euthanasia" will optionally be blocked from a child who has been diagnosed with a terminal illness.

Additionally, in an "adult step" 2388, parents optionally block words or phrases that are associated with adult sites, for example, "must be 18" to enter this site.

To prevent access to adult websites, sites including tick boxes asking the user to click to confirm that they are over 18 or including the wording "must be 18" are. optionally locked. Additionally, devices 98 and 99 are optionally configured with GUI protocols, so that the wording "must be 18" appearing in graphical format will also be blocked.

Ignoring blocked keywords and / or entering blocked websites optionally causes the computer 102 to shut down or the Internet link to close. Alternatively, a warning message is issued to parents, for example via a wide area network, an Internet channel, computer 102, server 470 and / or a proxy server; and parents have the option of communicating with the child and / or turning off the computer 102.

Optionally there are

multiple levels of keywords, for example words that turn off computer 102, words that turn off the Internet connection, words that trigger a warning on computer display 102 and an immediate message to parents, and / or words that merely alert parents without warning the child.

In addition to words on a website in text or graphic format, computer shutdown and / or warnings are optionally triggered by text entry, keywords, passwords and requests to the child to visit a secondary Internet site that is accessed via a website. .primary of the Internet.

Parents have the option to enter

the parent device 98 at any time, for example, when the child device user 99 is in school, and change the Internet browsing parameters. By inserting child device 99 into computer 102, approved sites 2382, blocked sites 2384, blocked keywords 2386, and / or 2388 adult parameters are updated to provide new parameters for the next computer session by children. Blocked Sites

In the settings, the list of

Blocked sites 2384 is provided wholly or in part by a software program, for example, Spector Pro by SpectorSoft Corporation of Vero Beach, Florida. In the configurations, computer 102, parent device 98, and / or child device 99 are configured to receive automatic downloads from websites that have been identified for blocking by Internet rating services.

In an "Unmonitored Email" step 2390, and an "Unmonitored Chat Rooms" step 2396, Parent Device 98 has the option of specifying email addresses and chat rooms that are specifically not monitored. For example, an unmonitored email address might include an address of a divorced parent where email monitoring could present a disturbance to the child.

There are several options for excluding chat rooms and / or emails from being monitored. In one option, agreements are made and / or modified only by mutual agreement of parent and child, for example, with both devices 98 and 99 on computer 102.

Alternatively, parents change agreements without the child's participation and / or agreement, but a notification of the change is sent to the child via the computer 102. In other options, parents make the changes without the child agreeing and the child is not notifying the child. amendment

In "keyword blocking step" 2386, parent device 98 can add keywords, in addition to those entered for the Internet, that trigger blocking or warnings associated with email addresses and / or chat rooms. For example, if the child writes or receives a message containing the word "porn", the email address involved is optionally prohibited from further communication.

In a 2394 "monitored email" step and a 2398 "monitored chat room" step, the parent device 98 is additionally used to specify the email addresses and chat room websites that are prohibited. , for example, websites and / or addresses that urge the child to shop.

In a 2344 "user limitation" step, parent device 98 is configured to provide parameters for device 99 usage. For example, in a "daily hours" step 234 6, hourly, daily, weekly, or monthly schedules to allow use of the computer 102 are inserted.

In a "goal step" 2348, parent data session administering device 98 configures computer 102 and / or child device 99 with the target parameters, which achievement allows child device 99 to activate a group reward comprising, for example, extended computer use, access to designated computer games, and / or access to an Internet gaming site. Such goal parameters optionally include, for example, math, text comprehension, social studies, writing and obtaining a favorable assessment on at least one predetermined task. Proceeding with a "parameter record" step 2352, the parent device 98 optionally specifies how the child device 99 and / or computer 102 should be registered. Parameter log 2352 optionally includes a series of snapshots, full time video streaming and image recognition.

In the settings, registration step 2352 optionally includes lists of chat site and / or chat site conversations, instant messaging and emails. In the settings, registration step 2352 optionally includes lists of websites visited, topics that were searched, and activities performed on, for example, MySpace.

In the settings, registration step 2352 optionally includes the child-placed photos, the child-viewed photos, and all keystrokes entered on the computer 102.

In the settings, registration step 2352 optionally records how much time the child spent on each site, Uniform Resource Locators (URL database), all questions answered by the child, and a list of all downloaded files. .

In the settings, the downloaded file lists optionally include the link to where the file was found, and where, on computer 102, the child saved the file. Computer Session Registration

Additionally, in the settings, video and / or audio streaming includes the information in the link through which the video was located.

With reference to emails, registration step 2352 optionally records technical information for email servers, including, inter alia, simple mail transfer protocol (SMTP). Additionally, registration step 2352 registers post office protocols (POPs) for retrieving mail from a remote server over Transmission Control Protocol of the Internet Protocol suite. Internet Protocol set]) through which connections and data stream exchange occur.

The many types of activities and protocols that are optionally logged in registration step 2352 are well known to those familiar with the art and a priori include all future activities and protocols that will be invented in the future.

In the configurations, data from parameter logging step 2352 is stored in a "storing" step 2354 in the parent device vault 350 or backup 352. In addition, storage can be done in the child device vault 360, data backup child 362, with child access blocked.

Figure 23D shows a typical session with child device 99 connected to computer 102. After the "authentication" step 2311, a "permission" step 2326 appears on the screen and the child user chooses an Internet site, site. chat, and / or email address allowed.

Case kids device

99 If you enter an activity prohibited by a "prohibited" step 2328, device 99 responds, for example, with a "notification" step 2364, in which computer 102 displays a warning that the prohibited step 2328 has been entered. Optionally, the computer 102 reverts to the allowed phase 2326 in which the allowed options are presented.

Alternatively, the computer 102 enters a "shutdown" phase 2362, wherein the computer 102 will be pending shut down, for example, the input of the parent device 98.

In addition to the above, a 2366 "quick notification" step is optionally activated, so that a 2366 quick notification is sent to parents, for example via a wide area network, an Internet channel, a local server, and a server. proxy. In settings, a message is required on a parent's mobile phone or other personal communication device (not shown) to alert parents to communicate with the child.

Additionally or

alternatively, for example, after shutdown step 2362, the child is responsible for contacting the parent so that the parent activates the computer 102. In the exemplary configurations, the child data session management device 99 is configured to enter a "request" step 2372 to request a change to the parameters that are sent to the parent device 98. The request step 2372 optionally sends the request via a wide area network, an Internet channel, host computer 102. , 470 server and / or a proxy server.

In the configurations shown, the parent device 98 and / or the child device 99 are depicted as being solely dedicated to computer monitoring functions. For those skilled in the art, it is readily understood that portable session management device 114, as described with respect to Figure 1A, is optionally configured with protocols that are similar to the above described protocols for parent device 98 and / or device. 99. Thus, portable session management device 114 is configured to provide a wide range of coding services in addition to the many child guidance parameters set forth above.

In the configurations shown, the parent device 98 and / or the child device 99 are depicted as being solely dedicated to the computer monitoring functions established between a parent and the child. In alternate configurations, multiple child devices 99 are issued to multiple, possibly adult, users. Users being, for example, members of a church, while parent device 98 is issued to a group administrator, for example, a religious leader. The parental device 98 is then used to set computer usage parameters that are consonant with, for example, religious belief and / or parochial school hours. In group use of devices 98 and 99, the administrator optionally enters special parameters, for example, prohibiting websites that promote witchcraft. Additional details of group parameter setting and computer usage 102 are given with respect to Figures 62-73.

Additional Device Applications

Additional applications for portable session management device 114 will be introduced, including secure purchase, parental control, and secure messaging. Figures 24 through 73 include a review of some of the processes previously presented, as well as the processes that act as operating platforms for additional applications that will be described below.

Figure 24 shows the receiving device. portable session administration 114 through the registration process. The user receives the portable session management device 114, inserts the portable session management device 114 into the USB port found on the computer and is suggested to make a decision to continue the registration process.

Figures 25-30 show the continuation of the registration process and user selection of desired functions, eg backup (Figure 31), the end of the registration process.

Figure 25 shows the user identity authentication that is used in the future to recover the lost or damaged portable session management device 114s. In Figure 26, the user selects a login of sufficient length and strength to meet the minimum requirements, for example, as dictated by the company and / or government policy.

Figure 27 shows the process by which the host computer reads the serial number of the portable session management device 114 and authenticates over the Internet that such a portable session management device 114 has not yet been registered to another person.

If portable session management device 114 has not been previously registered, as seen in Figures 28-29, functionality selection continues. In Figure 30, a summary is shown to the user about which characteristics they have selected and the process ends.

During functionality selection, the user has the option of selecting remote backup, the selection of which makes the backup work in the background, as seen in Figure 31.

To initiate remote backup, the user starts by creating a list of directories and files to back up. Data on portable session management device 114 is automatically backed up by default.

Typically, the file list is processed sequentially and encoded before transfer to the Internet. Each encoded file includes the serial number of the portable session management device 114, as well as information regarding the encoding process used. The coding process for a given user is optionally selected according to company and / or government parameters. The backup continues until all files in the file list have been processed.

Figure 32 shows the process that starts when the user chooses to back up. Upon introducing portable session management device 114 into a USB port, a background process begins which retrieves account information for that device to determine if the user is participating in the remote backup feature. If the user is shown to be participating, then a list of such locations being remotely backed up will be created. The directories found in this list that were created will be monitored, and any files added or changed while portable session management device 114 is in the USB port; and if something has been added or changed when there is a broadband Internet connection, it will be copied to remote servers. Figure 33 shows the beginning and functions of Secure PC Lock. If this feature is selected to be. used during registration, so when portable session management device 114 is placed in a USB port and the user connects portable session management device 114, a background process will begin and continue to monitor the USB port to see if the Portable session management device 114 has been removed. When portable session management device 114 is removed, the system starts the screensaver and prompts the user to reconnect to the computer before being able to process.

Figure 34 shows the start and functions of encoding available through portable session management device 114, if stored on portable session management device 114 or a computer memory storage device.

When portable session management device 114 is placed in the USB port on the computer, the hard disk area and portable session management device 114 that has been selected to be encoded is mounted and does not show as available devices. Any files written to these mounted areas will be encoded automatically.

Any encoded files stored at these locations are automatically decrypted upon selection by the associated application. The encoding and decoding processes continue until the user disconnects from portable session management device 114 or removes portable session management device 114 from the USB port.

Figure 35 shows the

Internet feature incognito configuration and functions. While portable session management device 114 is in the USB port and the user is logged in, the user navigates with, for example, a Firefox browser.

In the settings, the

portable session management device 114 configures the browser to use the portable session management device's Internet-based proxy server that runs from portable session management device 114. portable session management device 114 collects the file and the temporary files associated with using the Internet browser that was loaded on the device. Optionally, the web browser loaded on the hard disk is not used. File collection continues while the user is using the Firefox browser, portable session management device 114 is in the USB port and the user is connected with portable session management device 114. Parental Control Device

Figure 36 shows a feature of parental control locking in which a user is logged on to portable session management device 114 and the Windows content advisor has been activated. Upon insertion of the parental control device, a background process temporarily suspends the content advisor. Suspend continues until the portable session management parent control device is removed from the USB port or the user is disconnected from such portable session management device 114. Upon disconnection, the Windows content advisor will return to provide all restrictions indicated.

Anonymous Subscription Service

Figures 37-39 show a simplified pictorial illustration of the configuration, functionality, and use, including account configuration, of the anonymous subscription service.

Figure 37 shows that after making the decision to anonymously subscribe to a web-based service, the user accesses the web services with the aid of portable session management device 114.

If the user does not have an anonymous signature account configuration, the user will have the ability to do so in Figure 38. Using the information received from the subscription request. Made to the handheld session management device's Internet proxy server as received of Figure 39, the user anonymously subscribes to the web-based service while portable session management device 114 is connected to the computer's USB port.

In Figure 38, the user has the ability to configure a portable session management device Internet proxy server subscription account. The user enters the information necessary to process the charges through a credit card or bank account, through which the subscription is made anonymously. All information is cataloged and stored based on the serial number located on the portable session management device 114.

In Figure 39, the user makes a request to the handheld session management device's Internet proxy server to subscribe to a web service anonymously. Using portable session management device 114 to query account information, the user is prompted to enter the cost of the requested web service. After you accept the purchase charge and process the service charge, the full charge is processed through your credit card or bank account.

After receiving the user's bank approval for the charge, a debit card is initialized to the user with the requested amount, and the user receives the requested anonymous information (account name, account number, expiration date, etc.). to subscribe to the web service. Anonymous Purchase

Figures 40-42 show the anonymous purchasing service in setting up and using an Internet account. Figure 40 shows that after making the decision to buy something over the Internet anonymously, the user uses portable session management device 114.

If the user does not have an anonymous purchase account setup, the user has the option of setting up an anonymous purchase account, as shown in Figure 41, where the user enters the information necessary to process the charges through their credit card or bank account; the information that is encoded with the serial number 118.

Using the information received from the purchase request made to the portable session management device Internet proxy server, as seen in Figure 42, the user performs anonymous purchase and can continue to purchase anonymously while portable session management device 114 is into the computer's USB port.

Figure 42, a continuation of Figure 40, shows the user making a request to the handheld session management device's Internet proxy server to purchase anonymously. Using portable session management device 114 to query account information, the user is prompted to enter the item cost for purchase.

After the user authenticates that they will accept the purchase and service charges, the charge will be made to the user's credit card or bank account. Upon approval of the user's bank or credit card, a portable session management device debit card is initialized to the user with the requested amount. Additionally, the user receives the required anonymous information (account name, account number, expiration date, etc.) to purchase the item anonymously.

Secure Instant Messaging

Figure 43 shows a simplified pictorial illustration of the configuration and functionality of the secure instant messaging feature. While portable session management device 114 is in the USB port and the user is connected to portable session management device 114 and optionally initiate an instant messaging session with another user of the portable session management device.

As long as both users have portable session management devices 114 in their computer's USB ports and are connected to their respective portable session management devices 114, the instant messaging session continues and remains secure.

Each message is encoded at the message initiation site and decoded at the message receiving site.

Figure 44 shows a simplified pictorial illustration of the configuration implementation of multi-factor authentication in a Windows server environment using portable session management device 114. Portable session management device 114 typically includes at least one level. additional security in the form of positive authentication for the person connecting to the computer and / or network.

Additionally, the second and third additional security levels are included, each additional security level requiring additional authentication parameters. Multiple factor authentication is optionally integrated with the Windows server environment.

Figure 45 shows a simplified pictorial illustration of the procedure for the user to receive and activate a new portable session management device 114 upon loss or destruction of the user's current portable session management device 114.

Figure 45 shows that the replacement process begins after portable session management device 114 is lost or considered. useless for damage. The process includes property authentication of the lost or damaged portable session management device 114. After authentication, a new log record for the portable session management device 114 is created. The data in the previous portable session management device 114 is decoded and the decoded data is encrypted and stored in the new session management device.

In addition, the serial number of the damaged or lost portable session management device 114 is then flagged and disabled to prevent future abuse, for example by a person who stole device 114, or was able to repair the session management device. portable 114.

Figures 46-47 show how portable session management device 114 alerts the user if files are accessed or modified without the user's knowledge. Figure 46 shows the process flow, considering that using portable session management device 114 optimizes security. For example, if portable session management device 114 is not in the computer's USB port and an intruder enters one of the directories selected for monitoring during setup, referenced in Figure 47. Any intruder access, additions, or changes to any file causes a registry entry to be created and the user receives an email.

The email address is typically recorded during functional setup (Figure 47). Additionally or alternatively, immediate intrusion notification occurs via a handheld device, such as a PDA or mobile phone.

In the configurations, the user sets up a usual system to monitor intrusions, for example, specific to file spaces or hardware to monitor. Alternatively, the user chooses to accept the default monitoring provided with the portable session management device 114. Secure Group Member Communication

Figure 52 shows a coupling device 3100 with an administrator input 3104 which, as seen in Figure 53, has an administrator session administration device 3112 inserted therein. Typically, the administrator session management device 3112 includes an administrator session management mechanism.

As seen in Figure 54, coupling device 3100 includes a plurality of group 3116 input ports and, as seen in Figure 55, multiple session administration group devices 3120 have been inserted into input ports 3116.

Each of the session administration group devices 3120 includes a hidden encoding mechanism 3148 that is responsible for a hidden administrator encoding mechanism 3149.

As seen in Figure 55, upon input of devices 3112 and 3120, a first session begins, and a random button 3108 is pressed, which creates a common randomly derived coding configuration. Typically, a display 3102 controlled by a display control knob 3106 is pressed and a visual signal is transmitted, confirming that the random coding setting is ready for transmission.

Upon pressing a record button 3110, all 3120 devices on ports 3116 receive the common coding configuration created by the coupling device 3100 on coding mechanisms 3148 and 3149. The coding mechanism typically includes a six-digit meeting number indicating, for example, the date of the meeting.

Upon receipt, the coupling device 3100 removes and / or makes invisible any trace of the common coding configuration of the coupling device mechanism 3158.

Each of the session administration group devices 3120 is removed from entry 3116 and removed by their respective group members.

At a future date and time, session management group devices 3120 and session management device 3112 are inserted into remote devices, for example, mobile phones and / or computing devices (not shown).

Upon commencement of communication, coding mechanisms 3148 and 3149 communicate directly with each other without being written to the memory of remote devices, thereby preventing contamination of devices 3120 or 3112, for example with a Trojan. Direct detection prevents the detection and / or interception of the coding codes contained in the 3148 and 3149 coding mechanisms.

During a given session, devices 3112 and 3120 are capable of communicating with each other, for example encoding data for secure transfer directly between devices 3112 and 3120.

Optionally, upon completion of a given remote site data transfer session, at least one of the 3120 devices generates a new common encoding configuration for all 3112 and 3120 devices. The new encoding configuration provides the capability for 3112 and 3120 devices. 3120 communicate directly in another session.

In alternate configurations, the 3112 administrator session management device issues the changed coding code to the 3120 group devices (Figure 55).

In configurations, the 3112 administrator session management device is capable of running multiple remote meetings between different users belonging to different groups. For example, a user group with 3120 session management group devices, group "A", is optionally computer programmers for a given company while another group, group "B", comprises physicists employed by the same company. Group "A" transfers data with the administrator device 3112 and between members of group "A". Group "B" transfers data with the administrator device 3112 and between members of group "B". However, group "A" 3120 devices cannot remotely exchange information with group "B" 3120 devices.

Optionally, communication between session management devices 3112 and 3120 occurs via a wide area network, an Internet channel, a local server, and / or a proxy server.

In configurations, 3120 session administration group devices comprise flash or USB drives and are inserted into ports 3116.

Figures 60 and 61 show the coupling device 3100 wherein a 3130 rechargeable battery is being charged by a 3140 charger. In configurations, the 3100 coupling device includes a 3142 charger connection and an adapter 3144, which is used to connect the charger 3140 to the coupling device 3100, thus charging the 3130 battery.

Figure 48 shows a flow chart 4800 of the process for using coupling device 3100 to provide coding codes to team members that are loaded into coding mechanisms. In a step 4810, the system manager, also referred to herein as the system administrator, and users, enter portable session management devices with box 3100, also referred to herein as coupling device 3100.

In a step 4820, display panel 102 (not shown) provides a signal, for example, a flashing light, to signal that all session management devices 3120 and 3112 are on coupling device 3100. In steps 4830 and 4832, a random meeting number is created to provide all 3120 and 3112 session management devices. In steps 4834 and 4836, the coding engine codes are created and recorded on each 3120 and 3112 session management device.

Figure 49 shows a flowchart of implementation of a non-USB flash drive device used as the portable session management device 114 of the present invention that connects to a USB port. A software coding program is optionally supplied with the 3100 coupling device (Figure 52). The non-USB flash drive device issues a serial number and the encoding mechanism is inserted into one of the 3116 inputs.

Figure 50 shows a protocol for sending email on remote site 3112 session management devices. Figure 51 shows a protocol for receiving email messages using 3112 devices at remote locations.

Anti-Spam

Figure 58 shows the anti-spam features found on the portable session management device 114. Figure 59 shows the anti-virus features found on the portable session management device 114. The anti-spam and antivirus features, for example , comprise any of the many spam and virus protections that are readily available today and well known to those of skill in the art.

Figure 62 shows the receipt of portable session management device 114 and registration process. The user inserts the portable session management device 114 into a USB port found on the computer and is prompted to make a decision to continue the registration process, as seen in Figure 63.

In Figure 64, the registry authenticates the user's identity and the user selects a login of sufficient length and strength to meet the minimum requirements required by company policy or federal regulation.

In Figure 65, the system search and authentication process that the system is out of inappropriate materials is completed. In Fig. 66, the process of loading the background services and base modifications of the computer is completed, these services and modifications are required for complete computer monitoring and security.

In Figure 67, a summary is shown to the user about the features that were added to the USB flash drive and the registration process ends.

Figure 68 shows a procedure for monitoring a user's computer by a system administrator, for example, on a school-based network, for inappropriate use; either in content or in a form that is not a good time to use it according to the group administrator.

Figure 69 shows a procedure for implementing a calendar found on the USB flash drive that interfaces with the operating system to authenticate that it is a good time to use the computer and optionally provides the user with multiple time zones around the world.

Figure 70 shows a

email monitoring procedure for inappropriate content as determined by the group administrator. The group administrator optionally monitors the email of a specific individual or randomly.

Figure '71 shows a

procedure for controlling when a user in a user group can browse the Internet based on the privileges granted by the group administrator.

Figure 72 shows a process for engaging in an instant messaging session with members of a designated group, as well as monitoring the instant messaging for inappropriate content by the group administrator. Figure 73 shows a process of engaging in a chat session with members of a designated group, as well as monitoring chat sessions for appropriate content by the group administrator.

It is expected that during the life of this patent many relevant portable session management devices, USB key devices and / or digital data transfer alternate mechanism will be developed and the scope of the terms "portable session management device" and "USB key" is intended to include all such new a priori technologies.

Additional novel objects, advantages and features of the present invention will become apparent to those skilled in the art upon examination of the following examples, which are not intended to be limiting. Additionally, each of the various embodiments and aspects of the present invention as outlined above and as claimed in the claims section below find experimental support in the following examples.

It is appreciated that certain features of the invention, which are clearly described in the context of separate configurations, may also be provided in combination in a single configuration. Conversely, various features of the invention, which are briefly described in the context of a single embodiment, may also be provided separately or in any suitable sub-combination.

While the invention has been described in conjunction with its specific embodiments, it is apparent that many alternatives, modifications and variations will be apparent to those skilled in the art. Correspondingly, it is intended to encompass all such alternatives, modifications and variations that fall within the spirit and broad scope of the appended claims. All publications, patents and patent applications mentioned in this specification are incorporated herein in their entirety by reference in the specification, to the extent that each individual publication, patent or patent application has been specifically and individually indicated to be incorporated by reference herein. Further, citation or identification of any reference in this application will not be construed as an admission that such reference is available as prior art of the present invention.

Picture's description

Figure 1c

A - Login Screen

132 - User Login

134- User Pin Code

116 - Run

Figure 1d

304 - Encoded Vault

306 - Coded Remote Database 308 - Coded Key Memory

310 - Coded Browsing Internet

312 - Customer Care Center

Figure Ie

304 - Secure Vault

A - My Bank

B - My Tax

C - My Private Documents

D - My Legal Activities

E- My Customer List

F - My Testament

314 - Securely Eject Key

472 - Recover

474 - Backup

308 '- Coded Key Memory

If figure

306 - Coded Remote Database

310 - Coded Browsing Internet

312 - Customer Care Center

Figure 3

B - Your Digital Bodyguard

304 - Encoded Vaults

305 - Click to configure

314 - Securely Eject Key

Figure 4

304 - Secure Unit

418 - Create Unit

404 - Choose a Drive Name A - When the drive is created, it will be located in your "My Computer" Folder

406 - Choose a Unit Size

B - You can choose up to XXXX MBs.

418 - Create Unit

409 - Cancel

Figure 5

A - My Computer

1 - Archive

2 - Edit

3 - View

4 - Favorites

5 - Tools

6 - Help

7 - Address

506 - Local Disk

504 - Removable Disk

508 - Floppy Disk of 3

511 - DVD Drive

512 - DVD / CD-RW Drive

Figure 6

304 - Secure Vaults

A - Click on secure drive and click "Open Drive" to view contents

632 - Active

612- Open Unit

614 - Close Unit

616 - Add Unit 618 - Delete Unit

J-O green indicates the amount of free space, red indicates the amount of space used

504 - Removable Disk

Figure 7

306 - Remote Database

704 - Choosing Folders

706 - Restore Files

708 - View Activity

710 - Backup On

712 - Using Backup

714 - Current Operation: Seeking Changes

716 - Directory

718 - File Name

Figure 8

306 - Remote Database

704 - Choosing Folders

A - Select a folder by clicking on the box to the left of the folder you want to protect. That folder and all folders located under it will be protected. Any files added or changed in this folder will be saved. If you do not want one of the folders below a selected folder to be included, just click the box next to that folder and it will not be protected. Protected folders will be highlighted for your review.

808 - Storage Plan

808 - Used storage

808 - Storage left B - Press here to see how much you have selected C - Computer Name D - Local Settings E - My Documents F - My Images G - My Music

810 - Upload Speed 812 - Clear All Choices 814 - Save Changes 10 817 - Cancel

Figure 9

306 - Remote Database 706 - Restore Files

A - To select the entire folder, check the box to the left of the folder. To select an individual file to restore, click on the folder name and the file will appear in the box on the right - then just tick the box to the left of the file you want to restore. The list of files being restored will appear in the box at the bottom.

B - Server Folders Power Key D - Documents and Settings E - My Documents F - My Files G - My Received Files H - History I - My Templates J - Private 905 - Personal

K - Files in folder

L - File (s) to restore

920 - Choose Location

916 - Restore

922 - Cancel

Figure 10

708 - Account Activity

A - Choose Computer

212 - Server

412 - My Laptop

470 - Remote Location

1004 - View detailed activity

1024 - Account Limit

1026 - Space Used

1028 - Available Space

1002 - Time Frame for PC-M-ROOM Activity

1006 - from September 4, 2006 to September 14, 2006

1054 - Description

1054 - Number of Hours

1054 - Number of Files

1054 - File Size

1032 - Hour Scan

1034 - Search Hours

1036 - Added Files

1038 - Deleted Files

1040 - Restored Files

B - File Summary C - File Count

D - File Size

1060 - Documents

1062 - Pictures

1064 Videos

1066 - Music

1068 - Others

Figure 11

1100 - START

1102 - USER CONNECTS HIS KEY ON USB SLOT

1104 - IS THERE AN INTERNET?

1114 - SET PTVRA LOGIN OFFLINE LOGIN PARAMETER TO ENSURE UNIT APPLICATION ONLY

1116 - USER LOGIN

1118 - AUTHENTICATE USER LOGIN WITH OFFLINE STORED INFORMATION

1122 - USER CHOOSES PTVRA APPLICATION TO USE

1124 - IS THE APPLICATION AVAILABLE?

1106 - SET LOGIN PARAMETERS FOR ALL APPLICATIONS TO BE ACTIVE

1110 - AUTHENTICING USER LOGIN INFORMATION WITH SERVER INFORMATION

1112 - DISPLAY MAIN TOOL BAR WITH AVAILABLE OPTIONS

1120 - START FILE NOTE FOR BACKUP CHANGES

YES

N - DON'T - FIG.

Figure 12

A '- FIGURE

1204 - Does the user select to leave?

1208 - USER SELECTED SAFE VAULTS?

1212 - USER SELECTED REMOTE DATABASE?

1206 - CLEAN ALL TEMPORARY FILES AND COOKIES

YES

N - NO

1222 - SAVE SCRIPT AND CLOSE ALL NAVIGATION VAULTS AND PARAMETERS

1224 - END APPLICATION

B '- FIGURE

Figure 13

A '/ B' / C '/ D' - FIGURE

504 - Secure Vault

1302 - Are VAULTS already present in the system?

1304 - DISPLAYING VAULTS SCREEN

1306 - USER ENTERS VAULT NAME AND SIZE

1308 - CRITVR VAULT USING SAFE PARAMETERS

1310 - MOUNT CURRENT VAULTS AS UNITS USING THE NEXT LETTER OF AVAILABLE UNIT

1312 - DISPLAY SECURE VAUL OPTIONS

1314 - USER SELECTS OPTION TO CARRY OUT

E '- THE FIGURE

Figure 14

A '- FIGURE

504 - Vault Segura 1402 - DOES THE USER SELECT TO LEAVE THE TOOLBAR?

1406 - USER SELECTS TO OPEN A VAULT?

1409 - USER SELECTS PAHA TO CLOSE A VAULT?

1412 - USER SELECTS TO CREATE A NEW VAULT?

1414 - USER SELECTS TO DELETE A VAULT?

1404 - CLOSE SAFE VAULTS TOOLBAR

1408 - USER SELECT VAULT TO OPEN

1410 - USER SELECIONTVR VAULT TO CLOSE

1416 - USER SELECT VAULT TO DELETE

1418 - USER CONFIRMS EXCLUSION

1420 - SAFE PARAMETERS ARE CHECKED AND VAULT IS EXCLUDED

B ', C', D ', E' - FIGURE

Figure 15

A '- FIGURE

504 - Secure Vault

1502 - Is VAULT OPEN?

1504 - Vault is Closed

1506 - OPEN SAFE VAULT

1508 - OPEN WINDOWS FILE BROWSER

1510 - VIEW SECURE VAULT CONTENT

1512 - Is VAULT CLOSED?

1514 - AUTHENTICATE USER USING SAFE PARAMETERS

1516 - CLOSE SECURE VAULT

YES

B '-A FIGURE

Figure 16 E ', F', 6 '- FIGURE

1602 - AUTHENTIC USER USING SAFE PARAMETERS

1604 - LOAD USER BACKUP CONFIGURATION RECORDS

1606 - IS THIS FIRST COMPUTER?

1610 - DISPLAY REMOTE DATABASE ACCOUNT TOOLBAR

1612 - USER SELECTS OPTION TO CARRY OUT

1614 - DOES THE USER SELECT TO LEAVE THE TOOLBAR?

1618 - USER PICKES FOLDERS?

162 0 - DOES THE USER SELECT TO RESTORE?

1616 - CLOSE SAFE VAULTS TOOLBAR A ', B', C ', D' -A FIGURE

YES

N - NO

Figure 17

A '- FIGURE

A If On, Toggle Button Off

B-If "Off", "On" Toggle Button

1704 - Read Current Backup Status "On" or "Off"

1714 - USER BACKUP CONNECTED

1724 - Toggle Button 710 to "Off"

1734 - Send Signal to Stop Backup

1706 - USER BACKUP OFF

1716 - Toggle Button 710 to "On"

D - Send Signal to Start Backup

B '- FIGURE 18

A '- FIGURE

1802 - READ STORAGE BACKUP FOLDER LIST FOR THIS COMPUTER 1806 - USER CLICKS ON A FOLDER OR EXIT 1808 - USER SELECTED TO EXIT? 1814 - WAS THIS FOLDER ALREADY SELECTED? 1822 - ADD THIS FOLDER TO SELECTION LIST 1810 - WAS THE EXIT "SAVE CHANGES"? 1812 - SAVE THE NEW SELECTED FOLDER LIST 1816 - REMOVE SELECTED FOLDER LIST

Y - Y N - NO B '- FIGURE

Figure 19

OF FIGURE

A '- READ STORED LIST OF FILES AND UNIQUE 1904 IDS - SERVER SHOWING THAT IS AVAILABLE TO RESTORE 190 6 - DISPLAY DIRECTORY SHOW FOLDERS WITH AVAILABLE DATA 1908 - USER CLICKS ON A FILE, FOLDER 19, OR SATAURA - SELECTED EXIT? 1912 - USER SELECTED RESTORE? 1916 - USER SELECTED A FOLDER? 1920 - USER SELECTED A FILE? 1914 - USER SELECTS DEFAULT SITE OR CHOOSE NEW LOCATION 1918 - DISPLAY LISTED FILES UNDER FOLDER 1922 - ADD FILES TO RESET LIST

YES

N - NO

B ', C' - FIGURE

Figure 20

2002 - START RESTORATION PROCESS A-FIGURE

B - PROCESS LOOP UP TO RESTORE LIST IS EMPTY

2004 - READ FIRST RESET LIST FILE

2006 - READ CONTENT OF SERVER FILE ON SMALL BYTES PACKAGES

2012 - ENCODE FILE USING SECURE PARAMETERS REVEALES FILE

2010 - WHEN FILE HAS BEEN COMPLETED AND RECONSTRUCTED, REMOVE FROM RESTORATION LIST

2008 - SAVE FILE ON HARD DRIVE IN SERVER READ PACKAGES

Figure 21

A- CONTINUOUS PROCESS

2014 - WAIT FOR CHANGES OR ADDITIONAL FILES-WHEN EVENT OCCURS BACKUP

2102 - READ LIST OF FOLLOWERS TO OBSERVE

2106 - WAS BACKGROUND PROCESS SUSPENDED?

2108 - PAUSE UNTIL THE PROCESS IS RESET THROUGH THE BACKUP TOOLBAR OPTION

2110 - WAITING FOR WINDOWS TO FIRE AN EVENT DECLARING THAT A FILE HAS BEEN ADDED OR CHANGED 2112 - READ THE FILE PARAMETERS

2114 - PREPARE FILE FOR PROCESSING

2116 - CREATING A TEMPORARY WORK FILE ON THE SERVER TO BUILD DATA PACKAGES AS THE SERVER ARRIVES

2118 - READ FILE DATA PACKAGES

2120 - END OF FILE?

2122 - WRITE TEMPORARY FILE PACKAGE

504 - Safe Vault

DIE - FIGURE

BIC - FIGURE

YES

N - NO

Figure 22a

A - FIG.

2202 - CREATING SECURITY CODE FROM SECURE PARAMETER

2200 - COMPRESSING THE FILE

Figure 22b

A - FIGURE

2302 - WRITE LAST PACKAGE IN TEMPORARY FILE

2304 - WRITE FILE IN SERVER'S REGISTRATION GUIDE IN

DATABASE WITH PARAMETERS

2305 - DELETE TEMPORARY FILE

B - THE FIGURE

Figure 23a

1100 - START

2302 - Connect Parental Switch 98 ON USB SLOT

A - Interrupt 1104 - IS THERE AN INTERNET?

1106 - SET LOGIN PARAMETERS FOR ALL APPLICATIONS TO BE ACTIVE

1302 - Are VAULTS already present in the system?

B- Go to 2380 page 23C

2308 - Login Parents Key 98

2310 - AUTHENTICATING COUNTRY KEY LOGIN INFORMATION WITH SERVER INFORMATION

2318 - Create Safe Parent Vault 350

2321 - Create Proxy Server

2320 Create secure backup 352 at remote location 470, optionally via a local proxy server

Figure 23b

A-Da Figure

2303 - Connect Child Key 99 ON USB SLOT

B - Interrupt

1104 - IS THERE AN INTERNET?

1106 - SET LOGIN PARAMETERS FOR ALL APPLICATIONS TO BE ACTIVE

1302 - Are VAULTS already present in the system?

C - Go to 2380 page 23C

2309 - Login Child Key 99

2311 - AUTHENTICATE CHILD LOGIN INFORMATION

99 WITH SERVER INFORMATION

2311 - Create Child Key Vault 350 USING SECURE PARAMETERS

E - Create secure child key vault and Configure controller vault to store vault 360 data F - Create secure child backup 352 at remote location 470, optionally via proxy server

Figure 23c

A - From Figure

2380 - Display Parameter Option for Configuring Child Key 99

2382 - Approved Internet Sites

2384 - Blocked Internet Sites

2390 - Unmonitored Email

2394 - Monitored Email

2396 - Unmonitored Chat Rooms

2398 - Monitored Chat Rooms

2344 - Limitation of use and key parameters of children 99

2352 - Registering Parameters for Child Key Sessions 99

2386 - Lock Keywords

2386 - Keywords to trigger monitoring

2346 - Daily Hours

2348 - In conjunction with goals

20 B- Write text

C - Get χ photos / hour

D - Video Streaming

E - Keyword Image Recognition

2354 - Store child key 99 data sessions in: a) child key vault 360 and backup 362; and b) parent key vault 350 and backup 352

Figure 23d

A - START 2303 - Connect Child Key 99 TO USB SLOT

B - Interrupt

1104 - IS THERE AN INTERNET?

1106 - SET LOGIN PARAMETERS FOR ALL APPLICATIONS TO BE ACTIVE

2309 - Login Child Key 99

C - Monitored

D - Not monitored

2326 - Internet allowed

2326 - Chat Rooms

2326 - Email

2328 - Internet prohibited

2362 - Computer outage

2366 - Fast

2368 - Regular

2364 - Report of Infringement and Notification

2367 - Computer Usage Schedule

2372 - Request for joint parent / child session

2311 - AUTHENTICATING CHILD KEY 99 LOGIN INFORMATION WITH SERVER INFORMATION

2354 - Store child key 99 data sessions in: a) child key vault 360 and backup 362; and b) parent key vault 350 and backup 352

YES

Y- NO

Figure 24

A - User receives USB key 114

B - Key is placed on the computer C - Is this the first use of the key?

D - Registration already completed, this phase is completed

E - An autostart screen appears in the middle of the screen.

F-The user wants to register now?

G- Enter the registration process

H - Exit the registration process and start windows processing normally

Y-yes

N - No

Figure 25

A-From Figure 24

A '- Start the registration process

B - Display a Greeting to USB Key Registration Screen - Brief Description of Benefits

D- Interrupt

N - No

Y-yes

C - You are currently logged in as XXXX - this is the person who will use the key

E- Instruct the user to log out and then log back on to the computer with the correct username

F - Read key serial number

G - Collect personal user data for future registration and identification. Use SSL Protocols for Security

O- Continue to Figure 26

H - Enter Name

I - Enter Address

J - Enter phone number L - Set secret question

M - Answer to the secret question

Q - These are the basic input entries - each will have its own individual error checking routine (i.e. it's a valid address state)

Figure 26

B - Continued from Figure 25

C - Display basic prompts to select a good password

D - Enter Password

E- Enter password again

F - Verify that the password meets the standards

G - password match?

H-Is the password long enough?

I-Password meets power standard

J- Continued on Figure 27

Y-yes

N - No

Figure 27

A - Continued from Figure 26

B- Do you want to use the USB key lock feature?

G - Continued in Fig. 28

C-Does the computer read the serial number of the USB key?

D-Is the serial number already registered?

E- Register this serial number on our servers

F - Set this feature to "on" inside the switch Figure 28

A - Continued from Figure 27 B - Do you want to use parental control features?

H - Continued in Figure 29

C - Computer reads USB key serial number

D - Is the serial number already registered?

E - Register this serial number on our servers

F - Set this feature to "on" inside the switch

G - Provide the user with a summary content orientation setup screen and perform proper configuration for content restrictions

S - Yes

N - No

Figure 29

A - Continued from Figure 28

C- Display information about low cost "memory safe" feature, benefit, security, data backup

D - Do you want to use the data backup feature?

V - Continued in Figure 30

YES

N - NO

E - Computer reads USB serial number

F - Is the serial number already registered?

G - Register this serial number on our servers

H - Check user bandwidth

I-Is the user using a broadband connection?

J - Display message that user must have broadband connection to use this feature K - Have user enter credit card information

L - Show user what information is being backed up by default

M - Use backup defaults

O - Select what to back up

Q - Calculate backup size

Q - Show the user what the backup cost will be monthly

A - This cost is OK

T - Credit Card Charge

U - Start initial backup, warn user that initial backup will take several minutes (as Figure 31)

Figure 30

A - Continued from Figure 29

B - Display information about other characteristics in key

C - Finish the registration process

Figurs 31

A - From Figure 29

B - Run the ongoing backup program in the background on the client computer

D - Connect to backup servers and verify account is in good standing

E - Display on lower right taskbar icon

F - Use parameters received from server to create a file list to back up

G - Get next item for backup from file list

H - It's the end of the list

I - Reading the computer file (from the file list) J-Data passes through the key to encode the data

K-Data is then transmitted over the internet to backup servers.

L - Backup Servers - Multiple Locations Using Load Balancers, and SAN Backup SAN

M - Transmit data to server

O - Show user initial backup is complete

Q - View statistics about initial backup

Q - End process

Y- Yes

N - No

Figure 32

A - alnício

B - When USB key is in USB port being background process for monitoring added or changed files

C - A file has been changed or added

E - This file is in a location designated for automatic backup.

F- Display in lower right taskbar USB key icon

G - Create a file list of files needed to back up

H - Get next item to backup from file list

I - It's the end of the list

J - Read file from computer (from file list)

K - Data passes through key to encode data

L - The data is then transmitted over the internet to backup servers.

M - Backup Servers - Multiple Locations Using Load Balancers, and SAN Backup Subnet

O - Transmit data to server

Q- End process

S - Yes

N - No

Figure 33

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB key

D - User disconnected from USB key

E - The USB key has been placed in the USB port

F - Freeze system until key is replaced on door or override password is provided

G - Stop

H - The override password has been entered

S - Yes

N - No

Figure 34

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB program

D - USB program encoded drive is mounted, hard disk encoded file space is mounted

E-User disconnected from USB program

F-USB key is in USB port

H-User saves file on computer

I-File location is a coded location

J - Unmounted units

K - Close ongoing programs in the background

L - Encode the data file

M - Write data file to disk

N- Interrupt

Y-yes

N - No

Figure 35

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C-User connects to USB program

D-User disconnected from USB program

E-USB key is in USB port

F - Interrupt

G-User started Firefox browser

H-USB key program configures parameters for using USB Key Proxy Server

I - Display the message "You are now entering a safe browsing environment"

J - Process Firefox browser from key-all history kept in K key - User left Firefox browser

L - Reset parameters to use proxy server

S - Yes

N - No

Figure 36

A - Home

B - Parental control feature is enabled

C - Stop

D - USB key is in USB port and user is connected

E - Process the internet using content advisor as normal with all applicable restrictions

G - Start the background process that will suspend the content advisor to require a password to enter restricted pages

H - User is still working on the internet

I - Interrupting the background process by suspending the content advisor

S - Yes

N - No

Figure 37

A - alnício

B - User decides to subscribe to a web page service

C - User has subscription account

D - User defines anonymous account

E - User goes to USB key signature service

F - User makes subscription request

G - User enters anonymous signature information

H - Stop I - ** NOTE: Anonymous subscription must be used within 30 days or transaction will be canceled and% processing fee will be charged

Y-yes

N- No

Figure 38

A - Home

B-USB key is in USB port

C - Inform user to insert USB key into port

D-User enters personal information

E-User enters credit card or bank account information

F - Read USB key serial number

H - Create USB Key Signing Account

I- Display Account Information

J - The information is correct

K - Finish

Y-yes

N - No

Figure 39

A - Home

B-USB key is in USB port

C - Inform user to insert USB key into port

D - Retrieve Subscription Account Information

E- Enter the amount required for subscription

F - Inform user of% surcharge for this transaction

G - It's OK

H - Discontinue I - Process the charge through the user's credit card or bank account

J - The transaction was successful

K - Inform user that transaction was not processed

L - Reserve debit card account USB key xxxx funds for subscription amount only

M - Show user name, debit card account number, and expiration date

O - Email us the USB key name, debit card #, and expiration date for this transaction to the user

Y-yes

N - No

Figure 40

A - Home

B- User decides to purchase something through the web anonymously

C - User has anonymous web purchase account

D - User sets up anonymous account

E - User goes to anonymous USB key purchase site

F - User makes anonymous purchase request

G - User got confirmation to buy

H - User enters anonymous purchase information

I - Interrupt

Y-yes

N - No

Figure 41

A - Home

B - From Figure 40

C - USB key is in USB port D - Inform user to put USB key in port

E - You are a new subscriber of anonymous internet purchase

F - Finish

H - User enters personal information

I- User enters credit card or bank account information

J - Read USB key serial number

K - Create USB Key Signing Account

L - Create USB key debit card account for user

M - View Account Information

O-The information is correct

Y-yes

N - No

Figure 42

A- Home

B-USB key is in USB port

C - Inform user to insert USB key into port

D - Retrieve anonymous purchase account information (entered in Figure 40)

E - Enter the amount required for purchase

F - Inform user of% surcharge for this transaction

G - It's OK

H - Interrupt

I - Process the charge through the user's credit card or bank account

J - The transaction was successful

K - Inform user that transaction was not processed L - Reserve debit card account USB key funds xxxx for subscription amount only

M - Show user name, debit card account number, and expiration date

0 - Email us the USB key name, debit card #, and expiration date for this transaction to user

Y-yes

N - No

Figure 43

A- Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB program

D - User disconnected from USB program

E - USB key is in USB port

F - Interrupt

G - User requested immediate message transmission

H - You have connected to another USB key user

J - Request meeting with another user

K - Process asymmetric key exchange with another user - using key serial number

L - Inform users to securely connect

M - Users are still connected and secure

0 - Inform users that secure connection has been terminated

P - Display message box with USB key secure symbol in corner

Q - Process text message - via key encoding instrument

Y-yes

N - No

Figure 44

Addition

B - User Login to the System

C- User entered a valid login and password

D - Stop

E - USB key is in USB port

F- Display message for user to put USB key on computer

G - Read key serial number / read server login data

H - Login data equals valid key coded serial number

I- Display invalid login message

J - Read key biometric data

K - Login data is the same as valid key encoded biometric data

L - Invalid biometric data

M- Sync with Active Directory

O - Upload user permissions

Q - View Successful Login

Q - Finish

S - Yes

N- No

Figure 45

A - Home

B - User loses or damages their key C - Participatory Store

C-1 - User Requests a New Key by Phone or Purchase at a Participating Store

D - User puts new key into USB port and goes to key replacement website

E - Display Recovery Message

F - User requested to enter verification data

G - This is a valid account.

H - Display wrong verification message

I - Repeat

J - Interrupt

K - USB key retrieves account information

L - User must enter old key password

M - This is the correct password.

O - Read serial number for new USB key

Q - User enters password for new key

Q - All data on encoded local drives is read with old key and rewritten with new key

A - All data backed up to the USB key is read with the old key and rewritten with the new key.

T - New USB key recharged with all data that was located on the key before loss / damage

U - Any anonymous subscription / purchase account is updated with the new key

V - The previous key number is disabled for use.

X - Old serial number data is backed up for 90 days

Y - Yes N - No

Figure 46

A - Home

B-User disconnected from computer

C- Interrupt

D- USB key is in USB port and user is still connected

E - Process windows without creating detection list

F - A file is being accessed that is part of the user-selected monitoring area.

G - Write a record in the Yog file (filename, time, login ID, TCP-IP)

H - Email notification to user that intrusion has been detected

Y- Yes

N - No

Figure 47

A - Home

B - User runs intrusion detection setup program

C - Display the Greeting Screen

D - User wants to configure

E - Stop

F - Use default directories

G- Select areas to be monitored

H - Create Watch List

I - Enter email to send intrusion detection to

Y-Yes N - No

Figure 48

A - Home

4810 - User and Administrator Insert 3120 Coding Key Devices 3116 into 3100 Coupling Device

B - Valid USB Key - (check for encoding)

C - Display "ERROR" in Display Pane

4820 - Display blinking panel 5 times

4830 - User needs a random meeting number (Random button)

D - User uses buttons to select specific meeting number

E - System generates a random meeting number

F - Screen number is OK - (Press record button)

4800 - Enclosure receives USB port on enclosure recording all key serial numbers located on ports

4834 - Create file name that will be the meeting number. Each record will be a coded serial number of any authorized key.

4836 - Write files for user keys

G - The meeting of recording in the user keys?

H - User removes the keys already recorded / new keys inserted

I- Shutdown box

Y-yes

N - No

Figure 49 A - Beginning

B - User Puts Non-USB Key Flash Drive 114 in USB Port

C - User loads secure meeting software on computer

D - This is a Non-USB Key 114

E - Display No Changes Required for USB

F - Create Random Serial Number

G - Writing Serial Number to USB Flash Drive

H - Load encoding software on USB Flash Drive

I - Interrupt

S - Yes

N - No

Figure 50

A - Home

B - User creates email

C - User starts secure meeting software

D - User enters meeting number

E - USB key is in USB port

F - View - Put USB Key 114 in USB Port

G - Meeting Number Sent

H - Sending

I - Read meeting number file

J - This is a valid user for this meeting no.

K - View — Not a valid team member, contact team manager

L - Interrupt

M - Encode Current Email 0 - Send Current Email

Y-yes

N - No

Figure 51

A- Home

B - User receives encrypted email

C - User starts secure meeting software

D - User receives meeting number

E - User enters meeting number

F-USB key is in USB port

G - View - Put USB Key into USB Port

H - Sending

I - Read meeting number file

J - This is a valid user for this meeting no.

K- View — Not a valid team member, contact team manager

L - Interrupt

M - Decode current email

O - View decoded email content

S - Yes

N - No

Figure 58

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User plugs into USB key

D - User disconnected from USB key E - USB key is in USB port

F - Interrupt

G - User has selected anti-spam functionality

H - USB key will set parameters for using USB key proxy server to filter spam

I - Display USB Key Anti-Spam logo on application launchpad

J - Process email and web browsers

K - User is still connected to USB key

L - USB key is still in USB port

S - Yes

N - No

Figure 59

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User plugs into USB key

D - User disconnected from USB key

E - USB key is in USB port

F - Interrupt

G - User has selected antivirus functionality

H - USB key will configure parameters to use USB key Proxy Server to filter viruses

I - Display USB Key Antivirus logo on application launchpad

J - Process email and web browsers

K - User is still connected to USB key L-USB key is still in USB port

Y-yes

N - No

Figure 60

Figure 62

A - User receives USB key 114

B - Key is placed in the computer

C - This key has not been registered

D - Registration already completed, this phase is completed

E- An autostart screen appears in the middle of the screen.

F-The user wants to register now?

G - Enter the registration process

H - Exit the registration process and start windows processing normally

Y- Yes

N - No

Figure 63

A - Starting the registration process From Fig. 62

B - Display a Greeting on the USB Key Registration Screen - Short Description of Benefits

C - You are currently connected to your computer as XXXXX - this is the person who will use the key

D - Instruct the user to log out and then log back on to the computer with the correct username

E- Read key serial number

F - Enter user code provided by group administrator

G - Verify user information that has been set by the group administrator

H - Continued on Figure 64

I - Name

Address

Date of birth

Sex

Other information

S - Yes

N - No

Figure 64

B - Continued from Figure 63

C - Display basic prompts to select a good password

D - Enter Password

E - Enter password again

F- Verify that the password meets the standards

G-Does the password match?

H-Is the password long enough?

I - It meets the standard of USB key strength

J - Continued in Fig. 65

Y- Yes

N - No

Figure 65

A - Continued from Figure 64

B - Display message that computer is being reviewed

C - Run system search for inappropriate material as defined by group administrator

D - Inappropriate materials were found

E - Continued on Figure 66 F - Send Message to Group Administrator

G - Stop the process

H - Search documents and text files for objection word / phrase list

I- Search media files for objection word list in title

J - Check all files for titles in the objection title list

K - Inappropriate Material Search Criteria - These are included but not limited to these

Figure 66

A - Continued from Figure 65

B - Search for known internet access programs and disable

C - Upload Tracking Email Modifications

D - Upload Calendar app - Download 3-year time / date file to users' location

E - Load monitoring software with Calendar application interface

F - Continued in Figure 67

G - The program will search all known internet browsers and email programs, load content filtering protocols configured by the group administrator where possible. Where not possible, will alert the group administrator of the program name.

H - This program will load modifications to different email programs that will include monitoring protocols. I - This application program will load a special calendar with monitoring software, and data based on user location.

J - This application program is a background key logging device, monitoring keystrokes for inappropriate words or phrases to be entered - even in non-internet related programs such as games. It will also ensure that the computer will not allow login attempts to be made by notifying the group administrator by email.

Figure 67

A - Continued from Figure 66

B - View information about what just happened, explain any questions

C - Send message to group administrator about account status - showing any issues with computer D - Process completed

E - Questions will also be sent in a separate email for immediate review.

Figure 68

A - alnício

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB key program

D - Create a log file for this computer session E - Start the program to monitor keystrokes

F - User disconnected from USB key program

H - This is an approved time for the computer to be operating

J - Display message that you cannot use the computer now

K - Send notification to trespass group administrator

L - Key chronological recorder detects any words or phrases that should be reported according to alert parameters

M - The key has been tampered with

0 - Send notification to tamper group administrator

P - Turn off the computer

Q - Stop

Y-yes

N - No

A- Note 1: During the registration process, programs will be executed that allow internet browsing control protocols, so that without the USB key, internet browsing will be strictly restricted.

T - Note 2: USB key 114 prevents the computer from operating during those times that are restricted by the group administrator.

U - ** The alert parameters will be set by the group administrator and will be a list of the key words and / or phrases that will be searched for and used in communications monitoring.

Figure 69

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB key program

D-User disconnected from USB key program

E- Program

F-USB key is in USB port

G - Start a running background service to verify that it is not a restricted time

H - Is this a restricted moment?

I-The user requested to see the calendar?

J - Display message that you cannot use the computer now

K - View calendar with religious information as defined by group administrator

L- Email the trespass group administrator

M - User enters new location or ends

0 - Turn off the computer automatically

P - Interrupt

Q - New Location

Y- Yes

N - No

A - Note 1: The USB key prevents the computer from operating during those times that are restricted by the group administrator.

Figure 70

A '- Note 1: The USB key prevents the computer from operating during those times that are restricted by the group administrator.

B '- * Revision Status, this will be the revision level for this email, all email for this user or this email is randomly selected.

C - ** Alert parameters will be set by the group administrator and will be a list of key words and / or phrases that will be searched for and used in communications monitoring.

A - Home

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB key program

D - User disconnected from USB key program

D '- Program

E - USB key is in USB port

F - Interrupt

G - The user's email program (outlook, outlook express, etc.) [sic]

H - Alert Admin. Group Update / Get Review Status *

I - User creates email

J - Email violates alerts **

K - Email is selected for review L - Send copy of email to group administrator for review

M - Send Email

Y-yes

5 N- No

Figure 71

A - alnicio

B - When key is inserted into USB port start background process for monitoring if key is in port

C - User connects to USB key program

D - Create a snapshot of the default internet navigation controls without any keys.

E - Load the default internet navigation controls for this user, these controls are saved in the key.

G-User disconnected from USB key program

H - User opens a browser

I - User enters a Web site to browse

J-Location is in allowed site table

K- View Post This Site Is Restricted

L - Send message of this transgression to group administrator

M - Review keystrokes while browsing to see if you violated the alert parameters

0-0 user violated alert parameters **

P - Display web page

Q-The user has finished

A - Load T-snapshot internet navigation controls obtained when key is connected

T - Stop

S - Yes

N - No

A-1 - Note 1: During the registration process, programs will be executed that allow internet browsing control protocols, so that without the USB key, internet browsing will be strictly restricted.

A-2 - Note 2: USB 114 prevents the computer from operating during those times that are restricted by the group administrator.

B-1 - ** Alert parameters will be set by the group administrator and will be a list of key words and / or phrases that will be searched for and used in communications monitoring.

Figure 72

B - Beginning

C - When key is inserted into USB port start background process for monitoring if key is in port

D - User connects to USB key program

E- User disconnected from USB key program

F- USB key is in USB port

G - You have connected another USB key

H- Keep waiting for the request for a meeting with another user

I - Interrupt

J- User requested immediate transmission of message K - Group ID is the same in keys

L - Inform users who do not have instant messaging permission

M - Send message to failed communication group administrator

0 - Inform users that they have logged in and send message to group administrator that an IM session has occurred

Q - Send message to group administrator for review

Q- Process user messages - keep log file of all messages

R - Review messages by alert parameters **

T-Did the message violate the alert?

U- Users are still logged in

V- Inform users that the connection has been terminated

Y- Yes

N - No

A-1- ** Alert parameters will be set by the group administrator and will be a list of the key words and / or phrases that will be searched for and used in communications monitoring.

B-1 - Note: USB key prevents computer from operating during those times that are restricted by group administrator

Figure 73

A - Home

C - When key is inserted into USB port start background process for monitoring if key is in port

D - User connects to USB key program

E-User disconnected from USB key program

F-Atomy key is in USB port

G-User requested to join a chat room

H - User group ID is the same as approved room ID list

I - Inform the user that his permission has been denied entry

J- Send message to group administrator for review

Inform users that they have connected to the chat room

K - Processing user messages — keep log file of all messages

L- Review message by alert parameters **

M-Did the message violate the alert?

0-0 user is still logged in

Q - Inform user that connection has been terminated

R - Stop

Y- Yes

N - No

A-1 - ** alert parameters will be set by the group administrator and will be a list of the key words and / or phrases that will be searched for and used in communications monitoring.

B-1 - Note: USB key prevents computer from operating during those times that are restricted by group administrator

Claims (64)

1. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOST COMPUTER", characterized in that it comprises: (i) an authentication unit configured to obtain authentication of a user's portable session administration device with respect to to said host computer; ii) a secure access unit operatively associated with said authentication unit and configured to facilitate secure access to at least one computer based application in conjunction with said host computer; and iii) a concealment mechanism configured to operate with said host computer and configured to conceal a portion of the data therein. 2. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR INPUT ON A HOST COMPUTER" as claimed in 1, including a hidden encoding mechanism configured to operate with the host computer in encoding the data selected by the host. user in it. 3. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER", as claimed in 1, characterized in that it is configured to hide said portion of data upon expiration of authentication by said authentication unit. 4. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER" as claimed in 3, characterized in that it is configured to reveal said hidden portion upon reauthentication. 5. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER" as claimed in 3, characterized in that said hidden portion of data comprises a data partition configured by said device. 6. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 1, further comprising a hidden encoding mechanism configured to encode at least a portion of said data portion . 7. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 6, wherein said at least a portion of said data portion is encoded. 8. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR ENTERING AN ENTRY IN A HOSTING COMPUTER" as claimed in 7, characterized in that it is configured to decode said encrypted data on said host computer, except that said user is in effect. 9. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT ENTRY IN A HOSTING COMPUTER" as claimed in 1, including a backup manager configured conditionally by said user authentication to open communication remote server through the host computer to enable data backup operations on the remote server. 10. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT ENTRY IN A HOSTING COMPUTER" as claimed in 1, including a backup manager configured conditionally by said user authentication to open communication with a server through the host computer to enable data date operations on the server. 11. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER" as claimed in 9 and 10, characterized in that said backup is continuous while said authentication is in effect. 12. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER", as claimed in 11, characterized in that it is configured to hide at least a portion of said data on said server. 13. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOST COMPUTER", as claimed in 11, characterized in that it is configured to encode at least a portion of data on said server. 14. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 9 and 10, characterized by the fact that said data backup operations are based on user-selected parameters. . 15. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 14, characterized in that said at least a portion of said data backup operations are increasingly provided . 16. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN INPUT ON A HOST COMPUTER", as claimed in 1, characterized in that it is configured to establish a connection to a proxy server. 17. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 9 and 10, characterized in that said server is located at a remote location with respect to said host computer. 18. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER", as claimed in 17, characterized in that it is configured to communicate with said server at said remote location using at least one of : a) a wide area network; b) an internet channel; c) a server; and d) a proxy server. 19. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER", as claimed in 1, characterized in that said authentication includes a digital string comprising at least one of: a) an identifier of session management device; b) a username login name; and c) a user password. 20. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER", as claimed in 19, characterized in that it is configured to hash said digital string in at least one of: a) the said portable session management device; b) said host computer; c) a proxy server; and d) said server. 21. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER" as claimed in 19, wherein said portable session management device is configured to register said digital string with a registration entity. 22. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOST COMPUTER" as claimed in 21, wherein said device authentication is configured to be optionally invalidated by said registrar. 23. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR INPUT ON A HOST COMPUTER" as claimed in 1, characterized in that it is configured to hide an Internet browsing session from an inspection performed from the said host computer. 24. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOST COMPUTER", as claimed in 1, characterized in that it is configured to authorize payment for at least one item to be purchased electronically using a digital bank station. 25. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR INPUT ON A HOST COMPUTER", as claimed in 24, characterized in that it is configured to provide at least one of: a) a digitally funded bank fund from a user-designated digital funding source; and b) providing a physical location to receive shipment of said at least one item. 26. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERTING IN AN INPUT ON A HOSTING COMPUTER", as claimed in 1, characterized in that it was configured to turn off said host computer when said authentication was not obtained. 27. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR ENTERING AN ENTRY IN A HOSTING COMPUTER" as claimed in 1, characterized in that it is configured to maintain an access record when said authentication is not obtained. 28. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 27, characterized in that said record is kept in at least one of: a) a device for administering portable session; b) said host computer; c) a proxy server; and d) a server. 29. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INPUT ON A HOST COMPUTER", characterized in that it comprises: (i) multiple entries for two portable session management devices, a first session management device and at least a second session management device, each of said two portable session management devices with a hidden encoding mechanism thereof; ii) a common coding mechanism defining the transfer unit operatively associated with said multiple inputs, and configured to transfer a common definition from said first session management device to said at least one second session management device. 30. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN INPUT ON A HOSTING COMPUTER", as claimed in 29, comprising an authentication unit configured to determine the identities of said at least two device administration devices. session for future authentication. 31. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER" as claimed in claim 29, characterized in that it is configured such that said first session administration device is defined as an administrator device configured to issue said configurations to said at least one second session administration device. 32. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN INPUT ON A HOSTING COMPUTER", as claimed in 31, characterized in that said administration device includes an operational function for deleting its settings after use. . 33. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 29, characterized in that upon removal of said two session administration devices from said coupling device Said two session management devices are configured to communicate during a first meeting using said common configuration, and characterized by the fact that said communication occurs between the locations that are remote from each other. 34. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 33, characterized in that during said first meeting, said two session administration devices are configured to generate a second common configuration, thus allowing a second meeting from multiple remote locations. 35. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO A HOST COMPUTER" as claimed in 30, including a rechargeable power source connected to an input configured to be removably connected to a power source. charge supply system recharging said rechargeable power source. 36. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", configured as a parent administration device that allows a child session administration device, characterized in that said permission comprises: (i) providing at least one parameter for a computer session on a host computer into which said child session administration device is inserted; and ii) recording a history of said computer session. 37. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOSTING COMPUTER", as claimed in 36, wherein said history is stored on at least one of: a) said host computer; b) said child device; c) said parent device; and d) a remote host computer. 38. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 36, characterized in that said parent session management device is configured to access said history using at least least one of: a) a wide area network; b) an internet channel; c) a local server; and d) a proxy server. 39. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 36, characterized in that said child session administration device is configured to recognize a violation of that by least one parameter during that computer session. 40. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 39, characterized in that said acknowledged violation is in the form of at least one of: a) digital text; b) keyword input; c) password entry; d) secondary Internet sites obtained through a primary Internet site; e) periodically obtain snapshots; and f) streaming video throughout said session. 41. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 39, characterized by the fact that said acknowledged violation is in the form of characters displayed in a graphical interface. 42. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOSTING COMPUTER", as claimed in 39, characterized in that said acknowledged violation is included in at least one of: a) an Internet site ; b) a chat room; c) instant messaging; d) a blog; and e) an email. 43. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOSTING COMPUTER", as claimed in 39, characterized in that said recognized violation is established by at least one of: a) said device of parents; and b) a classification service. 44. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 42, characterized in that when a violation is recognized, said child session administration device is configured to provide at least one of: a) shutdown of said host computer; and b) Disconnection of at least one of said: i) Internet site; ii) chat room; iii) instant messaging; iv) blog; and v) said email. 45. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 39, characterized in that when a violation is recognized, said child session administration device is configured to generate a warning message to said parent session management device. 46. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 38, characterized in that said child session administration device is configured to request a change to that referred to by the least one parameter to said parent device. 47. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 46, characterized in that said parent session administration device is configured to alter said at least a parameter using at least one of: a) said wide area network; b) said Internet channel; c) said local server; d) said parent session administration device; and d) said proxy server. 48. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 46, characterized in that said parent session administration device is configured to change at least one parameter while said child session management device and said parent device are connected to said host computer. 49. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER" as claimed in 36, wherein said parent session administration device is configured to provide at least one parameter of time during which said child session administration device activates said host computer. 50. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 36, characterized in that said parent session management device is configured to provide at least one parameter of goal, the attainment of which allows said child session management device to activate a group reward comprising extended computer use, access to designated computer games and access to designated Internet sites. 51. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 36, characterized in that said at least one parameter includes access to at least one of: a) an Internet site; b) a chat room; c) instant messaging; d) a blog; and e) an email. 52. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 36, characterized in that said at least one parameter includes preventing access to at least one of: a ) an Internet site; b) a chat room; c) instant messaging; d) a blog; and e) an email. 53. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTERING AN ENTRY IN A HOSTING COMPUTER", as claimed in 36, or 37, or 38, or 39, or 40, or -41, or 42, or 43, or 44, or 45, or 46, or 47, or 48, or 49, or 50, or 51, or 52, characterized in that it includes multiple child session management devices issued to multiple members of a group; and said parent session management device is issued to a group administrator. 54. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOST COMPUTER", as claimed in 53, characterized in that said group session administration administrator device is configured to prevent at least one said multiple members of said group receiving communications over a period of time. 55. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 53, characterized in that said session administration devices of said multiple members are configured to prevent the receipt of communications over a period of time. 56. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 53, characterized in that said group session administration administrator device is configured to prevent at least one said multiple members of said group transmitting communications over a period of time. 57. "PORTABLE SESSION ADMINISTRATION DEVICE SETUP ENTRY INTO AN ENTRY TO A HOSTING COMPUTER", as claimed in 54, or 55, or 56, characterized in that said time period is repeated at least once daily ; weekly; monthly; and annually. 58. "PORTABLE SESSION ADMINISTRATION DEVICE SET UP FOR ENTRY INTO A HOST COMPUTER" as claimed in 54, or 55, or 56, characterized by the fact that said time period is related to religious observance. 59. "PORTABLE SESSION ADMINISTRATION DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 57, characterized by the fact that said period of time is related to religious observance. 60. "PORTABLE SESSION ADMINISTRATION METHOD CONFIGURED FOR INSERT INTO A HOST COMPUTER", characterized in that it comprises the steps of: i) connecting a portable session management device to a host computer; ii) obtaining authentication that said portable session management device is allowed to access said host computer; iii) accessing at least one computer-based application using said host computer, conditionally upon said authentication; and iv) hiding a portion of data on said host computer. 61. "PORTABLE SESSION ADMINISTRATION METHOD CONFIGURED FOR INSERT INTO A HOST COMPUTER", characterized in that it comprises: i) provision of a multi-input configuration switching device for communication between multiple session management devices portable devices; ii) inserting multiple portable session management devices into said multiple inputs, each of said devices having a hidden data encoding mechanism; and iii) configuring each hidden data encoding mechanism with a common encoding configuration for hidden communication between said portable session administration devices or hosts thereof. 62. A "PORTABLE SESSION ADMINISTRATION METHOD CONFIGURED FOR INSERT INTO A HOST COMPUTER", characterized in that it comprises: (i) configuring a portable session administration device as a parent device; ii) configuring another portable session management device as a portable child session management device using said parent session management device, said parenting device providing the session management parameters to said child device iii) inserting said child portable session administration device into a host computer, thereby, to guide the use of said host computer using said session administration parameters; and iv) recording a history of said computer session. 63. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN ENTRY IN A HOSTING COMPUTER", as claimed in 30, characterized by the fact that it comprises a standalone unit. 64. "PORTABLE SESSION COUPLING DEVICE CONFIGURED FOR INSERT INTO AN INPUT ON A HOSTING COMPUTER", as claimed in 62, characterized in that said configuration switching device comprises a standalone unit.