ISOLATED PROTECTED ACCESS DEVICE

• US 20130254439A1
• Filed: 05/23/2013
• Published: 09/26/2013
• Est. Priority Date: 04/29/2009
• Status: Active Grant

• Current Assignee: Sujiyama, Inc.
• Original Assignee: Clisertec Corporation
• Inventors: Sundaravel, Vale
• Granted Patent: US 8,930,598 B2
• Time in Patent Office: Days
• US Class Current: 710/62
• CPC Class Codes: G06F 13/12 using hardware independent of the central processor, e.g. channel or peripheral processor
• CPC Class Codes: G06F 13/38 Information transfer, e.g. on bus G06F13/14 takes precedence
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/567 using dedicated hardware
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 3/0227 Cooperation and interconnection of the input arrangement with other functional units of a computer G06F3/023 - G06F3/037 take precedence
• CPC Class Codes: G06F 3/023 Arrangements for converting discrete items of information into a coded form, e.g. arrangements for interpreting keyboard generated codes as alphanumeric codes, operand codes or instruction codes
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

A computer switching device is disclosed which enables switching between a local computer and a secure computer connected through a network. The device sits like a keyboard-video-mouse (KVM) and optionally audio device between the local computer and the local input/output devices, but connects to the secure computer through a network. Access to the secure computer is pre-configured in the switching device through access and security settings for a specific user to the specific secure computer. The switching device specifically prevents access to the secure computer by the local computer, printer, or storage devices such as fixed or removable media drives. Tamper detection is included to disable secure access on any tampering with the switching device.

Claims

1. A computer switching device comprising:

a housing box;

an internal Keyboard-Video-Mouse switch connected to one or more outbound connectors located on the housing box for connection to physical input-output devices, and the Keyboard-Video-Mouse switch connected to one or more inbound connectors located on the housing box, the inbound connectors grouped as a first computer connection to the Keyboard-Video-Mouse switch;

an internal special purpose computer processor configured to remotely operate a secure remote computer resource, the internal special purpose computer connected as a second computer to the Keyboard-Video-Mouse switch, the special purpose computer having embedded security certificates for securely accessing the specific secure remote computer resources, and the special purpose computer having an embedded bios with driver support for input-output devices restricted to keyboard, mouse, video, network, and optionally audio; and

an internal network switch having a first connection to the internal special purpose computer processor, a second connection to the inbound network connector, and a third connection to an outbound network connector, wherein the internal network switch connects both the internal special purpose computer processor and any computer connected to the inbound network connector to a same network through the outbound network connector.

2. The computer switching device of claim 1, wherein the internal special purpose computer connects with keyboard, video, and mouse connections to the Keyboard-Video-Mouse switch.

3. The computer switching device of claim 2, wherein the one or more outbound connectors comprise:

an outbound video connector;

an outbound mouse connector; and

an outbound keyboard connector; and

the one or more inbound connectors comprise;

an inbound video connector;

an inbound mouse connector; and

an inbound keyboard connector.

4. The computer switching device of claim 1, further comprising an outbound audio connector connected to the Keyboard-Video-Mouse switch for connection to physical devices, an inbound audio connector connected to the Keyboard-Video-Mouse switch as part of the first computer connection, and wherein the second computer connection from the special purpose computer to the Keyboard-Video-Mouse switch includes an audio connection.

5. The computer switching device of claim 1, further comprising an internal tamper switch connected to the housing box and to the special purpose computer, and the housing box is sealed such that any physical opening or tampering with the housing box will trigger the tamper switch and void the embedded security certificates.

6. The computer switching device of claim 1, wherein the special purpose computer includes physical connections restricted to keyboard, mouse, video, audio, and network.

7. The computer switching device of claim 4, further comprising an outbound microphone connector connected to an internal voice-over-ip processor connected to a fourth connection on the network switch.

8. The computer switching device of claim 1, wherein the internal network switch further includes a wireless network connection.

9. The computer switching device of claim 1, further comprising at least one button on the housing box and connected to the Keyboard-Video-Mouse switch such that activation of the button causes switching of the Keyboard-Video-Mouse switch of a specific connected computer to the outbound connectors.

10. The computer switching device of claim 1, wherein the Keyboard-Video-Mouse switch observes commands received through the outbound keyboard connection and upon receipt of a specific keystroke sequence causes switching of the Keyboard-Video-Mouse switch of a specific connected computer to the outbound connectors.

11. The computer switching device of claim 1, wherein the housing box is a mobile computer case.

12. The computer switching device of claim 1, further comprising industrial control signal connectors in the housing box, the industrial control signals connected to the special purpose computer to be transmitted to the secure remote computer resource.

13. The computer switching device of claim 1, wherein the internal network switch is a video broadcast network switch and wherein the Keyboard-Video-Mouse switch is further configured to switch between video from the special purpose computer and video received on the video broadcast network.

14. A mobile computing switched device, comprising:

a mobile computer case;

an mobile computer within the mobile computer case;

an internal Keyboard-Video-Mouse switch connected to the mobile computer case for connection to physical input-output devices, and the Keyboard-Video-Mouse switch connected to the mobile computer as a first computer connection to the Keyboard-Video-Mouse switch;

an internal special purpose computer processor configured to remotely operate a secure remote computer resource, the internal special purpose computer connected as a second computer to the Keyboard-Video-Mouse switch, the special purpose computer having embedded security certificates for securely accessing the secure remote computer resources, and the special purpose computer having an embedded bios with driver support for input-output devices restricted to keyboard, mouse, video, network, and optionally audio; and

an internal network switch having a first connection to the internal special purpose computer processor, a second connection to the mobile computer, and a third connection for to an outbound network.

15. The mobile computing device of claim 14, wherein the third connection to an outbound network is a cellular modem.