Secure architecture and apparatus using an independent computer cartridge

• US 5,630,057 A
• Filed: 07/01/1996
• Issued: 05/13/1997
• Est. Priority Date: 06/14/1988
• Status: Expired due to Fees

• Current Assignee: All Optical Networks, Inc., Patevo Incorporated
• Original Assignee: Progressive Technology, Inc.
• Inventors: Hait, John N.
• Primary Examiner(s): Kriess, Kevin A.
• Assistant Examiner(s): Chavis, John I.
• Application Number:
  US08/677,324
• Time in Patent Office: 316 Days
• Field of Search: 395/186, 395/700
• US Class Current: 726/29
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06F 3/002 Specific input/output arrangements not covered by G06F3/01 - G06F3/16 other optical apparatus G02B27/00
• CPC Class Codes: G06K 7/1097 Optical sensing of electronic memory record carriers, such as interrogation of RFIDs with an additional optical interface

Abstract

A computer architectural and apparatus system for preventing software copying or alteration, and providing enhanced computational capabilities, physical information security, and physical environment protection is disclosed. The system comprises an Independent Computer Module (ICM), and an Interface Unit. The ICM comprises a CPU, a RAM, a ROM, a memory switching means, a communications port, and a connectorless interface contained within a sealed cartridge. The Interface Unit comprises a receptacle for receiving the ICM, which contains a matching connectorless interface, and wiring to a host computer'"'"'s port and power. The connectorless interface uses directional electro-magnetic emitters and sensors to prevent signal leakage. The memory switching means turns off the entire secure memory, enabling non-secure programs to be run from another section of RAM. Reactivation of secure memory by a non-secure program causes program control to be transferred to a fixed address within the secure program.

Claims

1. A secure computer architectural and apparatus system comprising an Independent Computer Module (here after referred to as an ICM), and an Interface Unit for providing two-way data communications between said ICM and a host computer;

said ICM comprising a single cartridge housing and a computer therein comprised of security-sensitive components including;

a central data processing means, a memory means, an energy supply means, component interconnecting means, and a two-way data communications means for providing two-way data communications between said ICM and said Interface Unit;

said ICM further comprising at least one applications program within said memory means;

said memory means further comprising read/write random access type memory (RAM) as one portion of the addressable range of said memory means;

said RAM is to enable the operation of general purpose applications programs;

said two-way data communications means within said ICM further comprising a two-way data communications control means exclusively controlled by means of command-signals from said central data processing means;

said two-way data communications control means is to prevent said host computer from directly transferring data;

(a) into said memory means,

(b) into said central data processing means,

(c) out of said memory means,

(d) out of said central data processing means;

said Interface Unit is comprised of a means for two-way data communications with said ICM, a means for two-way data communications with said host computer, and a receptacle for receiving said ICM;

said secure computer architectural and apparatus system is for operating said at least one applications program contained within said ICM, while being able to prevent said at least one applications program from being down-loaded into said host computer, while being able to prevent said at least one applications program from being copied by said host computer, and while being able to prevent said at least one applications program from being altered by said host computer;

said single cartridge housing is to contain and prevent access to said security-sensitive components, to contain and prevent access to said at least one applications program, to prevent data communications into or out of said ICM by any means other than said two-way data communications means, while enabling booth said security-sensitive components and said at least one applications program to be simultaneously removed from said Interface Unit and made physically secure in a safe place.

2. A first portable secure computer architecture for protecting information and at least one program for controlling said information, comprising:

a single sealed cartridge and a computer contained within said cartridge, said computer having a central data processing means, communications means controlled by said central data processing means for providing information into and/or output from said cartridge and said computer, memory means controlled by said central data processing means, information within said memory means, at least one program within said memory means which controls said central data processing means and ultimately said information and said at least one program,

said computer further having a cryptographic program including at least one encryption/decryption key for encrypting outgoing information and decrypting incoming information, said cryptographic program having an only existing copy of said at least one encryption/decryption key which exists only in said portable secure computer architecture and which is unknown to any human.

3. The invention of claim 2 wherein said at least one encryption/decryption key is machine-generated.

4. The invention of claim 2 including at least one additional portable secure computer architecture which contains the same said only existing copy of said at least one encryption/decryption key

thereby facilitating secure communications between said portable secure computer architectures.

5. The invention of claim 3 including at least one additional portable secure computer architecture which contains the same said only existing copy of said at least one encryption/decryption key

thereby facilitating secure communications between said portable secure computer architectures.

6. A first portable secure computer architecture for protecting information and at least one program for controlling said information, comprising:

a single sealed cartridge and a computer contained within said cartridge, said computer having a central data processing means, communications means controlled by said central data processing means for providing information into and/or output from said cartridge and said computer, memory means controlled by said central data processing means, information within said memory means, at least one program within said memory means which controls said central data processing means and ultimately said information and said at least one program,

said computer further having a cryptographic program including at least one encryption key for encrypting outgoing information, said cryptographic program having an only existing copy of said at least one encryption key which exists only in said portable secure computer architecture and which is unknown to any human.

7. The invention of claim 6 wherein said at least one encryption key is machine-generated.

8. The invention of claim 6 including at least one additional portable secure computer architecture which contains the same said only existing copy of said at least one encryption key

thereby facilitating secure communications between said portable secure computer architectures.

9. The invention of claim 7 including at least one additional portable secure computer architecture which contains the same said only existing copy of said at least one encryption key

thereby facilitating secure communications between said portable secure computer architectures.

10. A first portable secure computer architecture for protecting information and at least one program for controlling said information, comprising:

a single sealed cartridge and a computer contained within said cartridge, said computer having a central data processing means, communications means controlled by said central data processing means for providing information into and/or output from said cartridge and said computer, memory means controlled by said central data processing means, information within said memory means, at least one program within said memory means which controls said central data processing means and ultimately said information and said at least one program,

said computer further having a cryptographic program including at least one decryption key for decrypting incoming information, said cryptographic program having an only existing copy of said at least one decryption key which exists only in said portable secure computer architecture and which is unknown to any human.

11. The invention of claim 10 wherein said at least one decryption key is machine-generated.

12. The invention of claim 10 including at least one additional portable secure computer architecture which contains the same said only existing copy of said at least one decryption key

thereby facilitating secure communications between said portable secure computer architectures.

13. The invention of claim 11 including at least one additional portable secure computer architecture which contains the same said only existing copy of said at least one decryption key

thereby facilitating secure communications between said portable secure computer architectures.

14. A method of providing user-specific operation of processing functions within a portable secure computer architecture comprising the following steps:

providing a portable secure computer having at least one program for controlling information within said portable secure computer capable of maintaining said control from within said portable secure computer to prevent tampering with said at least one program and said information;

providing a user-identification process within said at least one program for controlling program flow within said at least one program,

thereby providing user-specific control of said information and said at least one program within said portable secure computer.

15. The method of claim 14 including:

providing a cryptographic routine within said at least one program under said user-specific control which includes at least one decryption key for decrypting encrypted information input to said portable secure computer, said at least one decryption key being unavailable to a specific user of said portable secure computer architecture,

thereby providing a separation between the functions of user-identification and information protection through encryption, because said specific user is able to operate said at least one program that is able to use said encrypted information without revealing to said specific user said at least one decryption key used to protect said encrypted information, while maintaining control of all said information by said at least one program which is being continually protected within said portable secure computer architecture.