Method of using a secure private network to actively configure the hardware of a computer or microchip

• US 10,375,018 B2
• Filed: 07/31/2018
• Issued: 08/06/2019
• Est. Priority Date: 01/26/2010
• Status: Active Grant

• Current Assignee: Frampton E. Ellis
• Original Assignee: Frampton E. Ellis
• Inventors: Ellis, Frampton E.
• Primary Examiner(s): Simitoski, Michael
• Application Number:
  US16/051,054
• Publication Number:
  US 20180343235A1
• Time in Patent Office: 371 Days
• CPC Class Codes: G06F 11/2043 where the redundant components share a common memory address space
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

A method for a computer or microchip with one or more inner hardware-based access barriers or firewalls that establish one or more private units disconnected from a public unit or units having connection to the public Internet and one or more of the private units have a connection to one or more non-Internet-connected private networks for private network control of the configuration of the computer or microchip using active hardware configuration, including field programmable gate arrays (FPGA). The hardware-based access barriers include a single out-only bus and/or another in-only bus with a single on/off switch.

Claims

1. A computer that is a personal computer, a smartphone, a tablet, a web server or a cloud server, comprising:

(a) at least one public unit, said public unit including at least one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communications component for separate wired and/or wireless network connections to the Internet; and

(b) at least one network connection to the Internet; and

(c) at least one private unit, the at least one private unit having;

(i) at least one separate and distinct, private network connection component;

(ii) at least a central processing unit microprocessor located in the at least one private unit and which is a central controller that functions as a master controlling device configured for controlling the computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server, and wherein said central processing unit microprocessor is configured to control communication between the public unit and the private unit; and

at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one private unit and the at least one public unit and is controlled by the central controller, wherein said inner hardware-based access barrier or inner hardware-based firewall denies access to the private unit from the network of computers including the Internet.

2. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is a secure control bus, the secure control bus being isolated from input from the network including the Internet.

3. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is an in-only bus with an input on/off switch or an out-only bus with an output on/off switch or both of said at least one in-only bus and said at least one out-only bus and the input on/off switch and output on/off switch are controlled by the central controller.

4. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the central controller is configured to have direct preemptive control over all components of the public unit.

5. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the central controller is configured to have direct preemptive control over all components of the personal computer, smartphone, tablet, web server or cloud server.

6. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the central controller is configured to reboot a hardware configuration of the personal computer, smartphone, tablet, web server or cloud server under control of the central controller.

7. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein there is no intervening hardware between the central controller and the at least one inner hardware-based access barrier or inner hardware-based firewall.

8. The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 2, wherein the secure control bus is configured so that it cannot be affected, interfered with, altered read or written to or superseded by any component of the public unit.

9. The computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 1, further comprising system BIOS of the personal computer, smartphone, tablet, web server or cloud server located in the at least one private unit.

10. The computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 1 configured for control by a personal user.

11. A computer on a microchip that is a personal computer, a smartphone, a tablet, or a web or cloud server system, comprising:

(a) at least one public unit including one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communication component for separate wired and/or wireless network connections to the Internet; and

(b) at least one network connection to the Internet; and

(c) at least one private unit, the at least one private unit having;

(i) at least one separate and distinct, private network connection component; and

(ii) at least a central processing unit microprocessor located in the private unit and which is a central controller that functions as a master controlling device configured for controlling the computer on the microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server and wherein said central processing unit microprocessor is configured to control communication between the public unit and the private unit; and

(d) at least one inner hardware-based access barrier or inner hardware-based firewall is located between and communicatively connects said at least one private unit and the at least one public unit and is controlled by the central controller, wherein said inner hardware-based access barrier or inner hardware-based firewall denies access to the private unit from the network of computers including the Internet.

12. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is a secure control bus, the secure control bus being isolated from input from the network including the Internet.

13. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is an in-only bus with an input on/off switch or an out-only bus with an output on/off switch or both of said at least one in-only bus and said at least one out-only bus and the input on/off switch and output on/off switch are controlled by the central controller.

14. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the central controller is configured to have direct preemptive control over all components of the public unit.

15. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the central controller is configured to have direct preemptive control over all components of the personal computer, smartphone, tablet, web server or cloud server.

16. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the central controller is configured to reboot a hardware configuration of the personal computer, smartphone, tablet, web server or cloud server under control of the central controller.

17. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein there is no intervening hardware between the central controller and the at least one inner hardware-based access barrier or inner hardware-based firewall.

18. The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 12, wherein the secure control bus is configured so that it cannot be affected, interfered with, altered read or written to or superseded by any component of the public unit.

19. The computer on a microchip that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 11, further comprising system BIOS of the personal computer, smartphone, tablet, web server or cloud server located in the at least one private unit.

20. The computer on a microchip that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 11 configured for control by a personal user.