Personal computer, smartphone, tablet, or server with a buffer zone without circuitry forming a boundary separating zones with circuitry

• US 10,057,212 B2
• Filed: 02/06/2014
• Issued: 08/21/2018
• Est. Priority Date: 01/26/2010
• Status: Active Grant

• Current Assignee: Frampton E. Ellis
• Original Assignee: Frampton E. Ellis
• Inventors: Ellis, Frampton E.
• Primary Examiner(s): Simitoski, Michael
• Application Number:
  US14/174,693
• Publication Number:
  US 20140282998A1
• Time in Patent Office: 1,657 Days
• CPC Class Codes: G06F 11/2043 where the redundant components share a common memory address space
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

A personal computer a smartphone, a tablet, a web server or a cloud server configured for connection to a network of computers or system on a microchip including one or more buffer zones excluding circuitry and two or more zones, each including circuitry. The one or more buffer zones form one or more boundaries separating the zones including circuitry. At least a first of the zones including circuitry includes at least one public unit with a microprocessor and a network communication component. At least a second of the zones including circuitry includes at least one private unit with at least a separate, private network connection and a microprocessor that is a central controller of the computer. The public unit and the at least one private unit can be connected by at least one secure control bus that is isolated from input from a public network.

Claims

1. A computer that is a personal computer, a smartphone, a tablet, a web server or a cloud server, comprising:

one or more buffer zones, each excluding circuitry;

two or more zones, each including circuitry;

the one or more buffer zones forming one or more boundaries separating the zones including circuitry;

at least a first of the zones including circuitry includes

(a) at least one public unit, said public unit including at least one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communications component for separate wired and/or wireless network connections to the Internet; and

(b) at least one network connection to the Internet; and

at least a second of the zones including circuitry includes at least one private unit, the at least one private unit having;

(a) at least one separate and distinct, private network connection component;

(b) at least a central processing unit microprocessor located in the at least one private unit and which is a central controller that functions as a master controlling device for the computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server, and wherein said central processing unit microprocessor controls communication between the public unit and the private unit; and

at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one private unit and the at least one public unit and is controlled by the master controlling device.

2. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the public unit and the at least one private unit are also connected at least by at least one secure control bus, the secure control bus being isolated from input from the network including the Internet.

3. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 2, wherein the one or more buffer zones form a continuous boundary completely separating the public unit and the at least one private unit, exclusive of the secure control bus.

4. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the public unit and the at least one private unit are connected at least by at least one in-only bus with an input on/off switch or at least one out-only bus with an output on/off switch or both of said at least one in-only bus and said at least one out-only bus.

5. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 4, wherein one or more of the buffer zones protect at least a part of at least one bus selected from said in-only bus and said out-only bus.

6. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 4, wherein the one or more buffer zones form a continuous boundary completely separating the public unit and the at least one private unit, exclusive of the at least one bus selected from said in-only bus and said out-only bus.

7. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein one or more of the buffer zones protect at least a part of at least one secure control bus located in the public unit.

8. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein one or more of the buffer zones is three dimensional.

9. The computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 1, further comprising system BIOS of the personal computer, smartphone, tablet, web server or cloud server located in the at least one private unit.

10. The computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 1 configured for control by a personal user.

11. A computer on a microchip that is a personal computer, a smartphone, a tablet, or a web or cloud server system, comprising:

one or more buffer zones, each excluding integrated circuitry;

two or more zones, each of which includes integrated circuitry;

at least a first of the zones including integrated circuitry includes at least one separate and distinct, private network connection component; and

a central processing unit microprocessor for the computer on the microchip that is a central controller which functions as a master controlling device for both the microchip and the personal computer, the smartphone, the tablet or the web or cloud server system,

at least a second of the zones including integrated circuitry includes one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communication component for separate wired and/or wireless network connections with a network of computers including the Internet;

the one or more buffer zones forming one or more boundaries separating the zones including integrated circuitry; and

a secure control bus that connects at least the central processing unit microprocessor with the one or more microprocessors located in the second zone, the secure control bus being isolated from input from the network of computers including the Internet, and wherein said central processing unit microprocessor controls communication between the first of the zones including integrated circuitry and the second of the zones including integrated circuitry by controlling the secure control bus.

12. The computer on the microchip that is the personal computer, the smartphone, the tablet, the web or cloud or server system according to claim 11, wherein the public unit and the at least one protected private unit are connected at least by at least one in-only bus with an input on/off switch or at least one out-only bus with an output on/off switch or both of said at least one in-only bus and said at least one out-only bus.

13. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 12, wherein the one or more buffer zones form a continuous boundary completely separating the public unit and the at least one private unit, exclusive of the at least one bus selected from said in-only bus and said out-only bus.

14. The computer on the microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein one or more of the buffer zones protect at least a part of at least one secure control bus located in the public unit.

15. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 14, wherein one or more of the buffer zones protect at least a part of at least one said secure control bus.

16. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein a width of one or more of the buffer zones is at least a size of a process used in making the microchip or a multiple of the size of the process.

17. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein one or more of the buffer zones is three dimensional so that it can interrupt multiple layers of a microchip process.

18. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 17, wherein one or more of the buffer zones is three dimensional so that it can interrupt multiple layers of a 3D microchip.

19. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein one or more of the buffer zones includes a non-conductive marker material that outlines a boundary of the buffer zone.

20. The computer on a microchip that is personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein the one or more buffer zones form a continuous boundary completely separating the public unit and the at least one private unit, exclusive of the secure control bus.

21. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein the one or more buffer zones form a continuous boundary completely separating the public unit and the at least one private unit, exclusive of the secure control bus.

22. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system according to claim 11, wherein the one or more buffer zones isolate at least in part the secure control bus from input from the network including the Internet.

23. A computer on a microchip that is personal computer, a smartphone, a tablet, or a web or cloud server system, comprising:

one or more buffer zones, each excluding integrated circuitry;

two or more zones, each including integrated circuitry; and

the one or more buffer zones forming one or more boundaries separating the zones including integrated circuitry;

at least a first of the zones including integrated circuitry includes;

(a) at least one public unit including one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communication component for separate wired and/or wireless network connections to the Internet; and

(b) at least one network connection to the Internet; and

at least a second of the zones including integrated circuitry includes at least one private unit, the at least one private unit having;

(a) at least one separate and distinct, private network connection component; and

(b) at least a central processing unit microprocessor located in the private unit and which is a central controller that functions as a master controlling device for the computer on the microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server and wherein said central processing unit microprocessor controls communication between the public unit and the private unit; and

at least one inner hardware-based access barrier or inner hardware-based firewall is located between and communicatively connects said at least one private unit and the at least one public unit and is controlled by the master controlling device.

24. The computer on a microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server system on the microchip according to claim 23, wherein the public unit and the at least one private unit are also connected by at least one secure control bus;

the secure control bus being isolated from input from the network including the Internet.

25. A computer that is a personal computer, a smartphone, a tablet, a web server or a cloud server, comprising:

one or more buffer zones, each excluding circuitry;

two or more zones, each including circuitry; and

the one or more buffer zones forming one or more boundaries separating the zones including circuitry;

at least a first of the zones including circuitry includes at least one separate and distinct, private network connection component, and a central processing unit microprocessor that is a central controller which functions as a master controlling device for the computer that is the personal computer, smartphone, tablet, web server or cloud server,

at least a second of the zones including circuitry includes a network connection and one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communication component for separate wired and/or wireless network connections to the Internet, and

a secure control bus that connects at least the central processing unit microprocessor of the computer with the one or more microprocessors, the secure control bus being isolated from input from the network of computers including the Internet in the second zone and said central processing unit microprocessor controls communication between the first of the zones including integrated circuitry and the second of the zones including integrated circuitry by controlling the secure control bus.