Trusted personal computer system with identification

• US 5,341,422 A
• Filed: 09/17/1992
• Issued: 08/23/1994
• Est. Priority Date: 09/17/1992
• Status: Expired due to Fees

• Current Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Dayan, Richard A., Newman, Palmer E., Moeller, Dennis L., Blackledge, John W. Jr., Zubay, Kenneth J. P.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/947,014
• Time in Patent Office: 705 Days
• Field of Search: 380/3, 380/4, 380/23, 380/25, 380/49, 380/50, 380/52, 340/825.31, 340/825.34
• US Class Current: 726/5
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/009 Trust

Abstract

This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system. This invention contemplates protecting a personal computer system which has the capability of becoming a secure system from being placed into that condition by an attack on an unsecured machine. Additionally, in a network environment, it is important to maintaining network security that any given particular system be uniquely identified to the network, in order to guard against the substitution of an insecure "alternate" which would open the network to attack through an insecure system. This invention contemplates provision for such identification in a secure manner.

Claims

1. A personal computer system for receiving and retaining data and for enabling data retained within the system to be secured against unauthorized access, the system comprising:

a normally closed enclosure,

an enclosure lock for normally maintaining said enclosure in a securely locked condition denying access to the interior of the enclosure apart form possession of a key for said enclosure lock,

an erasable memory element mounted within said enclosure for selective activation to one of an active state and an inactive state,

an option switch mounted and accessible solely from within said enclosure and connected with said erasable memory element for setting said erasable memory element to a selected one of the active and inactive states, and

a system processor mounted within said enclosure and connected with said erasable memory element for controlling access to at least certain levels of data and programs stored within the system by distinguishing between the active and inactive states of said memory element.

2. A personal computer system in accordance with claim 1 wherein said option switch functions for enabling an operator to select between secured operation of the system and unsecured operation of the system by selecting respective active and inactive states of said memory element.

3. A personal computer system in accordance with claim 2 wherein said option switch is manually operated and positioned within said enclosure for manual access only after opening of said enclosure.

4. A personal computer system in accordance with claim 1 wherein said erasable memory element is an electrically erasable programmable read only memory element.

5. A personal computer system in accordance with claim 4 wherein said electrically erasable programmable read only memory device contains a system unique identifier enabling software running on a network server with which the system is connected to verify that the system located at a particular location in the network is and continues to be a secure system for which controlled access is allowed.