Method and electronic device for triggering zeroization in a electronic device

• US 20060225142A1
• Filed: 04/05/2005
• Published: 10/05/2006
• Est. Priority Date: 04/05/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Moon, Billy G.
• Granted Patent: US 7,571,475 B2
• Time in Patent Office: Days
• US Class Current: 726/34
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/76 in application-specific integrated circuits [ASIC] or field-programmable devices, e.g. field-programmable gate arrays [FPGA] or programmable logic devices [PLD]
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 21/87 by means of encapsulation, e.g. for integrated circuits
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A method and apparatus for initiating a zeroization process in an electronic device is provided. Diagnostic information is provided by a plurality of sub-systems such that when one or more conditions are detected that are expected to cause the electronic device to experience a failure in the near future or if the electronic device appears to have been compromised, then the zeroization process is triggered.

Claims

1. A method for initiating a zeroization process in an electronic device, the method comprising:

monitoring for the occurrence of a trigger condition during operation of the electronic device;

determining whether at least one of a plurality of trigger conditions has occurred; and

initiating the zeroization process in the electronic device in response to determining whether at least one of a plurality of failure conditions has occurred.

3. The method of claim 1 further comprising receiving an over-ride to initiate the zeroization process.

4. The method of claim 1 wherein said monitoring step comprises the step of implementing a plurality of diagnostic sensors each adapted to monitor at portion of said electronic device.

5. The method of claim 1 wherein said determining step comprises the step of logically determining whether a combination of trigger conditions are about to occur.

6. The method of claim 5 wherein said determining step comprises determining whether said electronic device is operating below an expected threshold.

7. The method of claim 6 wherein said determining step comprises determining whether said electronic device is compromised.

8. The method of claim 7, wherein the electronic device is a router.

9. The method of claim 1 further comprising reconfiguring the electronic device after executing the zeroization process.

2. (canceled)

10. (canceled)

11. (canceled)

12. (canceled)

13. (canceled)

14. (canceled)

15. (canceled)

16. (canceled)

17. (canceled)

18. (canceled)

19. An electronic device for triggering zeroization comprising:

a plurality of sub-systems a portion of which may store sensitive information in a memory;

a monitoring module for monitoring diagnostic information from each sub-system; and

a zeroization initiation circuit for activating a scrubbing routine to immediately delete sensitive information in response to said monitoring module detecting a trigger condition.

20. The electronic device of claim 19 wherein said monitoring module further comprises a plurality of sensors for generating diagnostic information from each sub-system.

21. The electronic device of claim 20 further comprising mean for reconfiguring said electronic device after initiation of the scrubbing routine.

22. The electronic device of claim 20 wherein said zeroization initiation circuit comprises Boolean logic for combining diagnostic information from at least two of said sensors.

32. The electronic device of claim 20 further comprising means for manually triggering the zeroization process.

33. The electronic device of claim 20 wherein said monitoring step comprises the step of implementing a plurality of diagnostic sensors each adapted to monitor at portion of said electronic device.

34. The electronic device of claim 33 wherein said monitoring module is configurable for a plurality of mission environments.

35. The electronic device of claim 34 wherein said monitoring module comprises a plurality of dedicated diagnostic processors.

36. The electronic device of claim 35 wherein said monitoring module comprises a n-level deep logic circuit.

23. (canceled)

24. (canceled)

25. An electronic device comprising:

a processing system including a processor and memory containing sensitive information;

means for monitoring occurrence of a trigger condition during operation of the electronic device;

means for determining whether the trigger condition has occurred; and

means for triggering zeroization of sensitive memory in the electronic device when a trigger condition has occurred.

26. The electronic device of claim 25 further comprising at least one sensor for detecting a trigger condition.

27. The electronic device of claim 26 further comprising at least one sensor for detecting an impending trigger condition.

28. The electronic device of claim 26 wherein said triggering means comprises a zeroization initiation circuit.

29. The electronic device of claim 28 wherein said zeroization initiation circuit comprises Boolean logic for combining diagnostic information from at least two sensors.

30. The electronic device of claim 25 further comprising means for reconfiguring the electronic device after executing the zeroization process.

31. The electronic device of claim 30 further comprising means for activating a manual over-ride to initiate the zeroization process.