Secure computer system

• US 20030023863A1
• Filed: 06/08/2001
• Published: 01/30/2003
• Est. Priority Date: 06/08/2001
• Status: Active Grant

• Current Assignee: Siemens Mobility SAS (Siemens AG)
• Original Assignee: Matra Transport International (Siemens AG)
• Inventors: El Fassi, Said, Moreau, Louis
• Granted Patent: US 7,302,587 B2
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 11/004 Error avoidance G06F11/07 and subgroups take precedence
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

The secure computer system comprises at least one computer having a processor operating under the control of a program on input data that can be associated with a code and delivering output data for output members. A security peripheral that is external but connected to the processor is provided to receive at least the input data codes, the operands, and the nature of the operation of each elementary operation performed by the processor, a code being calculated on each elementary operation performed by the processor in order to verify proper performance of all or part of the executed program. The system is applicable to processes for automatically running rail track systems.

Claims

1. / A computer system comprising at least one computer with a processor operating under the control of a program, operating on input data items each suitable for being associated with a code and supplying output data items each suitable for being associated with a code and for being transmitted or applied to output members, the system being characterized by at least one peripheral external to the processor, connected to the processor to receive at least the input data codes, the operands, and the nature of the operation for each elementary operation performed by the processor, the peripheral having secure architecture and computing a code for each elementary operation performed by the processor and verifying proper operation of all or part of the executed program, while the processor performs computations only on the functional values of the encoded data.

2. / A computer system according to claim 1, in which the said program is permanent or downloaded.

3. / A computer system according to claim 1, in which the peripheral is single and associated with a host computer to provide security for all of a system having a plurality of computers connected to a common communications medium.

4. / A computer system according to claim 3, in which the host computer is fitted with a safety driver which enables it to dialog with the peripheral and with the other computers.

5. / A computer system according to claim 1, having a plurality of host computers, interconnected by a transmission medium and each provided with a security peripheral.

6. / A computer system according to claim 1, in which the security peripheral or the security peripherals perform security operations only on the inputs/outputs of only some of the processors.

7. / A computer system according to claim 1, having a single security peripheral, connected to a computation assembly constituted by a central unit or a processor and peripherals, said security peripheral having computation means that perform:

digital security processing; and

security processing of the inputs/outputs.

8. / A system according to claim 1, characterized in that said security peripheral is designed to make secure an assembly of the system constituted by a smart card, a reader, and one or more computers involved in the processing, and constituting the system, and to generate the interchanges between the smart card and the computer(s).

9. / A system according to claim 1, in which the security peripheral is an ASIC.