System including separable protected components and associated methods

• US 5,982,894 A
• Filed: 02/06/1997
• Issued: 11/09/1999
• Est. Priority Date: 02/06/1997
• Status: Expired due to Term

• Current Assignee: Apple Inc.
• Original Assignee: AuthenTec Incorporated (Apple Inc.)
• Inventors: Schmitt, John C., McCalley, Karl W.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/796,161
• Time in Patent Office: 1,006 Days
• Field of Search: 380/9, 380/25, 380/49, 380/23, 340/825.31, 340/825.34
• US Class Current: 340/5.21
• CPC Class Codes: B60R 16/0315 using multiplexing techniques multiplexing for transmission of signals G08C15/00; multiplexing for electrical communication in general H04J
• CPC Class Codes: B60R 2016/0322 Temporary code for documents to be reclassified to G08C, H04L or H04Q

Abstract

A system having enhanced security includes: a plurality of components; at least one security circuit associated with at least one component; and at least one master circuit associated with at least one component and connected in communication with the security circuit. More particularly, the security circuit when in the virgin state is switchable to a desired enrolled state for the master circuit. The master circuit according to one aspect of the invention preferably determines if the security circuit is in the virgin state and switches the security circuit to the desired enrolled state. The master circuit also preferably prevents operation of the system responsive to a security circuit being in an enrolled state other than the desired enrolled state for the master circuit. A security circuit may be restored to the virgin state in response to a user token or a fingerprint of the user. Method aspects of the invention are also disclosed.

Claims

1. A system having enhanced security and comprising:

a plurality of components;

at least one security circuit associated with a respective at least one component, said at least one security circuit being switchable from a virgin state to an enrolled state; and

at least one master circuit associated with a respective at least one component and connected in communication with said at least one security circuit, said at least one master circuit comprising

enrolling means for switching said at least one security circuit to a desired enrolled state only for the at least one master circuit responsive to the at least one security circuit being in the virgin state, and

disabling means for disabling at least a portion of the system based upon at least one security circuit being in an enrolled state other than the desired enrolled state for the at least one master circuit;

said at least one security circuit when in the virgin state being switchable to a respective desired enrolled state for a respective master circuit associated with any plurality of components to thereby facilitate legitimate substitution and replacement of components.

2. A system according to claim 1 wherein said disabling means further comprises complement-based disabling means for disabling at least a portion of the system unless a predetermined complement of one or more security circuits are in the desired enrolled state for the at least one master circuit.

3. A system according to claim 2 wherein said complement-based disabling means comprises means for disabling at least a portion of the system unless a predetermined number of security circuits are in the desired enrolled state for the at least one master circuit.

4. A system according to claim 2 wherein said complement-based disabling means comprises means for disabling at least a portion of the system unless predetermined security circuits are in the desired enrolled state for the at least one master circuit.

5. A system according to claim 2 wherein said at least one master circuit further comprises complement adding means for adding a new security circuit to the predetermined complement.

6. A system according to claim 5 wherein said complement adding means comprises virgin state responsive adding means for adding the new security circuit to the predetermined complement responsive to determining the new security circuit is in the virgin state.

7. A system according to claim 1 further comprising communication link means connecting said at least one master circuit in communication with said at least one security circuit.

8. A system according to claim 7 wherein said communication link means comprises encryption means for encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

9. A system according to claim 8 wherein said encryption means comprises asymmetric encryption means for asymmetrically encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

10. A system according to claim 9 wherein said asymmetric encryption means comprises:

public key means for encrypting signals exchanged between said at least one security circuit and said at least one master circuit using a public key;

master circuit private key decrypting means connected to said at least one master circuit for decrypting public key encrypted signals from said at least one security circuit using a private key; and

security circuit private key decrypting means connected to said at least one security circuit for decrypting public key encrypted signals from said at least one master circuit using a private key.

11. A system according to claim 7 wherein said communication link means comprises means for establishing a digital data bus.

12. A system according to claim 7 wherein said communication link means comprises means for establishing a wireless channel.

13. A system according to claim 7 wherein said communication link means comprises means for establishing a wireline channel.

15. A system according to claim 1 further comprising biometric sensing and revirginizing means for switching at least one security circuit back to the virgin state after being in the desired enrolled state and based upon a biometric characteristic of a user.

16. A system according to claim 15 wherein said biometric sensing and revirginizing means comprises a fingerprint sensor.

17. A system according to claim 1 further comprising token reading and revirginizing means for switching at least one security circuit back to the virgin state after being in the desired enrolled state and based upon reading a user token.

18. A system according to claim 1 wherein said plurality of components comprise a plurality of vehicle components.

19. A system according to claim 18 wherein said plurality of vehicle components comprise:

at least one electronic component; and

at least one vehicle body component.

20. A system according to claim 1 wherein said plurality of components comprise a plurality of computer components.

21. A system according to claim 20 wherein said plurality of computer components comprise:

a microprocessor; and

at least one of a display, keyboard, memory, and disk drive.

22. A system according to claim 1 wherein said plurality of components comprise a plurality of appliances.

23. A system according to claim 22 further comprising power line carrier communication means for establishing a communication link between the plurality of appliances over power wiring.

14. A system according to 1 further comprising revirginizing means for switching at least one security circuit back to the virgin state after being in the desired enrolled state.

24. A security apparatus for a system comprising a plurality of components, the security apparatus comprising:

at least one security circuit associated with a respective at least one component, said at least one security circuit being switchable from a virgin state to an enrolled state;

at least one master circuit associated with a respective at least one component and connected in communication with said at least one security circuit, said at least one master circuit comprising disabling means for disabling at least a portion of the system based upon at least one security circuit being in an enrolled state other than a desired enrolled state for the at least one master circuit;

said at least one security circuit when in the virgin state being switchable to a respective desired enrolled state for a respective master circuit associated with any plurality of components to thereby facilitate legitimate substitution and replacement of components; and

biometric sensing and revirginizing means for switching at least one security circuit back to the virgin state after being in the desired enrolled state and based upon a biometric characteristic of a user.

25. A security apparatus according to claim 24 wherein said biometric sensing and revirginizing means comprises a fingerprint sensor.

26. A security apparatus according to claim 24 wherein said at least one master circuit further comprises enrolling means for switching said at least one security circuit to the desired enrolled state for the at least one master circuit responsive to the at least one security circuit being in the virgin state.

27. A security apparatus according to claim 24 wherein said disabling means further comprises complement-based disabling means for disabling at least a portion of the system unless a predetermined complement of one or more security circuits are in the desired enrolled state for the at least one master circuit.

28. A security apparatus according to claim 27 wherein said complement-based disabling means comprises means for disabling at least a portion of the system unless a predetermined number of security circuits are in the desired enrolled state for the at least one master circuit.

29. A security apparatus according to claim 27 wherein said complement-based disabling means comprises means for disabling at least a portion of the system unless predetermined security circuits are in the desired enrolled state for the at least one master circuit.

30. A security apparatus according to claim 24 further comprising communication link means connecting said at least one master circuit in communication with said at least one security circuit.

31. A security apparatus according to claim 30 wherein said communication link means comprises asymmetric encryption means for asymmetrically encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

32. A security apparatus for a system comprising a plurality of components, the security apparatus comprising:

at least one security circuit associated with a respective at least one component, said at least one security circuit being switchable from a virgin state to an enrolled state;

at least one master circuit associated with a respective at least one component and connected in communication with said at least one security circuit, said at least master circuit comprising disabling means for disabling at least a portion of the system based upon at least one security circuit being in an enrolled state other than a desired enrolled state for the at least one master circuit;

said at least one security circuit when in the virgin state being switchable to a respective desired enrolled state for a respective master circuit associated with any plurality of components to thereby facilitate legitimate substitution and replacement of components; and

token reader and revirginizing means for switching at least one security circuit back to the virgin state after being in the desired enrolled state and based upon reading a user token.

33. A security apparatus according to claim 32 wherein said at least one master circuit further comprises enrolling means for switching said at least one security circuit to the desired enrolled state for the at least one master circuit responsive to the at least one security circuit being in the virgin state.

34. A security apparatus according to claim 32 wherein said disabling means further comprises complement-based disabling means for disabling at least a portion of the system unless a predetermined complement of one or more security circuits are in the desired enrolled state for the at least one master circuit.

35. A security apparatus according to claim 34 wherein said complement-based disabling means comprises means for disabling at least a portion of the system unless a predetermined number of security circuits are in the desired enrolled state for the at least one master circuit.

36. A security apparatus according to claim 34 wherein said complement-based disabling means comprises means for disabling at least a portion of the system unless predetermined security circuits are in the desired enrolled state for the at least one master circuit.

37. A security apparatus according to claim 32 further comprising communication link means connecting said at least one master circuit in communication with said at least one security circuit.

38. A security apparatus according to claim 37 wherein said communication link means comprises asymmetric encryption means for asymmetrically encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

39. A method for enhancing security of a system comprising a plurality of components, the method comprising the steps of:

associating at least one security circuit with a respective at least one component, said at least one security circuit being switchable from a virgin state to an enrolled state;

associating at least one master circuit with a respective at least one component;

switching said at least one security circuit to a desired enrolled state for the at least one master circuit responsive to the at least one security circuit being in the virgin state, the at least one security circuit when in the virgin state being switchable to a respective desired enrolled state for a respective master circuit associated with any plurality of components to thereby facilitate legitimate substitution and replacement of components; and

disabling at least a portion of the system based upon at least one security circuit being in an enrolled state other than the desired enrolled state for the at least one master circuit.

40. A method according to claim 39 further comprising the step of disabling at least a portion of the system unless a predetermined complement of one or more security circuits are in the desired enrolled state for the at least one master circuit.

41. A method according to claim 40 further comprising the step of adding a new security circuit to the predetermined complement responsive to determining the new security circuit is in the virgin state.

42. A method according to claim 39 further comprising the step of encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

43. A method according to claim 39 further comprising the step of asymmetrically encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

44. A method according to claim 39 wherein the plurality of components comprise vehicle components;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective vehicle components.

45. A method according to claim 39 wherein the plurality of components comprise computer components;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective computer components.

46. A method according to claim 39 wherein the plurality of components comprise appliances;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective appliances.

47. A method for enhancing security of a system comprising a plurality of components, the method comprising the steps of:

associating at least one security circuit with a respective at least one component, said at least one security circuit being switchable from a virgin state to an enrolled state;

associating at least one master circuit with a respective at least one component;

switching said at least one security circuit to a desired enrolled state for the at least one master circuit, the at least one security circuit when in the virgin state being switchable to a respective desired enrolled state for a respective master circuit associated with any plurality of components to thereby facilitate legitimate substitution and replacement of components;

disabling at least a portion of the system based upon at least one security circuit being in an enrolled state other than a desired enrolled state for the at least one master circuit; and

switching at least one security circuit back to the virgin state after being in the desired enrolled state based upon sensing a biometric characteristic of a user.

48. A method according to claim 47 wherein the sensed biometric characteristic of the user is a fingerprint.

49. A method according to claim 47 wherein the step of switching said at least one security circuit to the desired enrolled state comprises switching same responsive to the at least one security circuit being in the virgin state.

50. A method according to claim 47 further comprising the step of disabling at least a portion of the system unless a predetermined complement of one or more security circuits are in the desired enrolled state for the at least one master circuit.

51. A method according to claim 50 further comprising the step of adding a new security circuit to the predetermined complement responsive to determining the new security circuit is in the virgin state.

52. A method according to claim 47 further comprising the step of encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

53. A method according to claim 47 further comprising the step of asymmetrically encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

54. A method according to claim 49 wherein the plurality of components comprise vehicle components;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective vehicle components.

55. A method according to claim 47 wherein the plurality of components comprise computer components;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective computer components.

56. A method according to claim 47 wherein the plurality of components comprise appliances;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective appliances.

57. A method for enhancing security of a system comprising a plurality of components, the method comprising the steps of:

associating at least one security circuit with a respective at least one component, said at least one security circuit being switchable from a virgin state to an enrolled state;

associating at least one master circuit with a respective at least one component;

switching said at least one security circuit to a desired enrolled state for the at least one master circuit, the at least one security circuit when in the virgin state being switchable to a respective desired enrolled state for a respective master circuit associated with any plurality of components to thereby facilitate legitimate substitution and replacement of components;

disabling at least a portion of the system based upon at least one security circuit being in an enrolled state other than a desired enrolled state for the at least one master circuit; and

switching at least one security circuit back to the virgin state after being in the desired enrolled state based upon reading a user token.

58. A method according to claim 57 wherein the step of switching said at least one security circuit to the desired enrolled state comprises switching same responsive to the at least one security circuit being in the virgin state.

59. A method according to claim 57 further comprising the step of disabling at least a portion of the system unless a predetermined complement of one or more security circuits are in the desired enrolled state for the at least one master circuit.

60. A method according to claim 59 further comprising the step of adding a new security circuit to the predetermined complement responsive to determining the new security circuit is in the virgin state.

61. A method according to claim 57 further comprising the step of encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

62. A method according to claim 57 further comprising the step of asymmetrically encrypting signals exchanged between said at least one security circuit and said at least one master circuit.

63. A method according to claim 57 wherein the plurality of components comprise vehicle components;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective vehicle components.

64. A method according to claim 57 wherein the plurality of components comprise computer components;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective computer components.

65. A method according to claim 57 wherein the plurality of components comprise appliances;

and wherein the steps of associating the at least one security circuit and the at least one master circuit comprise associating same with respective appliances.