Data processor systems

• US 5,406,624 A
• Filed: 09/02/1993
• Issued: 04/11/1995
• Est. Priority Date: 09/04/1992
• Status: Expired due to Fees

• Current Assignee: Algorithmic Research Limited
• Original Assignee: Algorithmic Research Limited
• Inventors: Tulpan, Yossi
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/115,067
• Time in Patent Office: 586 Days
• Field of Search: 380/4, 380/9, 380/30, 380/49, 380/50, 380/22, 380/21, 380/23, 380/43, 380/46, 380/25, 235/380
• US Class Current: 713/192
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 3/021 Arrangements integrating additional peripherals in a keyboard, e.g. card or barcode reader, optical scanner
• CPC Class Codes: G07F 7/0826 Embedded security module

Abstract

A processor unit connectable between a computer and a keyboard unit stores a plurality of programs for operating the processor unit according to either a Transparent Mode wherein stored data inputted from the keyboard via a keyboard I/O port in the processor unit is transmitted to the computer unit, or according to one of a plurality of Special Handling Modes, and is controlled to select either the Transparent Mode or one of the Special Handling Modes.

Claims

1. For use in a data processor system including a computer unit and a keyboard unit communicating with the computer unit via keyboard I/O ports in the keyboard unit and computer unit, respectively, a security unit for connection between said computer unit and said keyboard unit to isolate said computer unit from said keyboard;

said security unit comprising;

a keyboard I/O port connectible to said keyboard I/O port in the keyboard unit for receiving data inputted from said keyboard unit;

a memory for storing said inputted data;

a keyboard I/O port connectible to said keyboard I/O port in the computer unit;

a processor storing a plurality of security programs for operating the security unit according to either a Transparent Mode wherein the stored data inputted from the keyboard unit via said keyboard I/O port is transmitted via said keyboard I/O port to said computer unit and is passed through said security unit without any change being made by the security unit in the stored data as if the security unit were not present, or according to a Special Handling Mode wherein a selected security program is executed while secret data inputted via the keyboard is isolated from the computer unit;

and control means for controlling said processor to select either the Transparent Mode or a Special Handling Mode.

2. The security unit according to claim 1, wherein said security unit further includes a smartcard reader for reading data from a smartcard inserted therein, which data is also stored in said memory;

said control means also controlling said processor to process the data inputted via said smartcard reader according to the selected mode of operation.

3. The security unit according to claim 2, wherein said unit further includes a smartcard writer for writing data onto a smartcard inserted therein;

said control means also controlling said processor to write data on the smartcard according to the selected mode of operation.

4. The security unit according to claim 1, wherein said security programs stored in said processor of the security unit include a plurality of Special Handling Modes of operation.

5. The security unit according to claim 4, wherein said stored Special Handling Modes includes a Load Program Mode;

and wherein the security unit receives a program from the computer unit, receives a block of data purporting to be the signature of the program'"'"'s fingerprint, computes the program'"'"'s fingerprint, checks to determine whether the above block of data is indeed the signature of the program'"'"'s fingerprint, and if so, loads the program into the security unit'"'"'s processor.

6. The security unit according to claim 4, wherein said stored Special Handling Modes includes a Generate Smartcard Mode;

and wherein the security unit receives information from the smartcard'"'"'s user from the computer unit, receives a password from the keyboard, generates ciphering, deciphering keys, and writes information received from the computer unit and the ciphering, deciphering keys into the smartcard.

7. The security unit according to claim 4, wherein said stored Special Handling Modes include a Read Smartcard Mode;

and wherein the inserted smartcard is read, and only the public data is sent to the computer unit.

8. The security unit according to claim 4, wherein said security unit further includes an internal real-time clock, and wherein said stored Special Handling Modes include a Login Smartcard Mode, in which data is read from an inserted smartcard, the current time and date are read from the internal clock, and a warning is produced if the time and date on the smartcard has expired.

9. The security unit according to claim 8, wherein said stored Special Handling Modes further include a Sign Block Mode;

and wherein the security unit checks to determine whether the Smartcard Mode is logged in, issues a warning signal if the Smartcard Mode is not logged in; and

if the Smartcard Mode is logged in, the security unit receives a block to sign, reads the signature keys from the smartcard, signs the block, and sends the results to the computer unit.

10. The security unit according to claim 4, wherein said stored Special Handling Modes include a Change Password Mode;

and wherein the old password and the new password are both entered in the keyboard, and a new password is generated and is utilized with respect to said smartcard.

11. The security unit according to claim 4, wherein the security unit includes light indicators;

and wherein said stored Special Handling Modes include a Perform Diagnostic Mode, wherein all said indicators are energized, the existing stored programs are checked, and the results are transmitted to the computer unit.

12. The security unit according to claim 1, wherein said security unit further includes two display I/O ports connectible to the computer unit and a display unit, respectively;

said control means also controlling said processor to transmit data via said display port to the display unit.

13. The security unit according to claim 1, wherein said control means comprises preprogrammed software automatically controlling said processor according to the commands inputted from said keyboard unit or said computer unit.

14. The security unit according to claim 1, wherein said control means comprises manual switching means for manually selecting either the Transparent Mode or a Special Handling Mode.

15. A data processor system including the combination of a computer unit, a keyboard unit communicating with the computer unit via keyboard I/O ports in the keyboard unit and computer unit, respectively;

and a security unit connecting said computer unit and said keyboard unit in a manner isolating said computer unit from said keyboard unit;

said security unit comprising;

a keyboard I/O port connectible to said keyboard I/O port in the keyboard unit for receiving data inputted from said keyboard unit;

a memory for storing said inputted data;

a keyboard I/O port connected to said keyboard I/O port in the computer unit;

a processor storing a plurality of security programs for operating the security unit according to either a Transparent Mode wherein the stored data inputted from the keyboard unit via said keyboard I/O port is transmitted via said keyboard I/O port to said computer unit and is passed through said security unit without any change being made by the security unit in the stored data as if the security unit were not present, or according to a Special Handling Mode wherein a selected security program is executed while the secret data inputted via the keyboard is isolated from the computer unit;

and control means for controlling said processor to select either the Transparent Mode or a Special Handling Mode.

16. The system according to claim 15, wherein said unit further includes a smartcard reader for reading data from a smartcard inserted therein, which data is also stored in said memory;

said control means also controlling said processor to process the data inputted via said smartcard reader according to the selected mode of operation.

17. The system according to claim 15, wherein said unit further includes a smartcard writer for writing data onto a smartcard inserted therein;

said control means also controlling said processor to write data on the smartcard according to the selected mode of operation.

18. The system according to claim 15, wherein said stored Special Handling Modes includes a Load Program Mode, wherein the security unit receives a program from the computer unit, receives a block of data purporting to be the signature of the program'"'"'s fingerprint, computes the program'"'"'s fingerprint, checks to determine whether said block of data is indeed the signature of the program'"'"'s fingerprint, and if so, loads the program into the security unit'"'"'s processor.