Secured network system

• US 6,092,724 A
• Filed: 08/28/1998
• Issued: 07/25/2000
• Est. Priority Date: 08/15/1997
• Status: Expired due to Fees

• Current Assignee: the united states of america as represented by the secretary of the navy
• Original Assignee: the united states of america as represented by the secretary of the navy
• Inventors: Morse, Randall, Seybold, Ross E., Wesche, Kenneth D., Sulkowski, Robert V., Dodge, Brian L., Kellogg, Dana C., Bouthillier, deceased, Stephen W.
• Primary Examiner(s): Hajec, Donald
• Assistant Examiner(s): St. Cyr, Daniel
• Application Number:
  US09/146,920
• Time in Patent Office: 697 Days
• Field of Search: 235/380, 235/375, 235/382, 235/492, 902/24, 902/25, 395/187.01, 395/200.55
• US Class Current: 235/380
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 2211/005 Network, LAN, Remote Access, Distributed System
• CPC Class Codes: G06Q 20/229 Hierarchy of users of accounts
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A secured network system comprising a readykey controller which has a first card reader and a power relay switch connected thereto. The user of the stem inserts a microchip embedded card into the first card reader which then transmits an authorization signal to the readykey controller. The readykey controller then activates a power relay switch affixed to the computer which connects the computer'"'"'s power supply to an external power source activating the computer. The secured network system also has a data relay switch which includes a manual A/B secured network switch. The manual A/B switch allows the user to receive and process classified data, by setting the switch to a predetermined position which connects a secured network server to the computer. The user inserts his proximity card into a second card reader which transmits a second authorization signal to the readykey controller. The readykey controller, responsive to the second authorization signal, activates the data relay switch. Activating the data relay switch connects the secured network switch to the secured network server via the data relay switch which allows for the transmission of classified data between the secured network server and the personal computer.

Claims

1. A secured network system comprising:

data processing means for receiving and processing classified data;

network card reader means, said network card reader means being adapted to receive a microchip embedded card, said network card reader means providing an authorization signal whenever said microchip embedded card is presented to and authenticated by said network card reader means;

controller means connected to said network card reader means to receive said authorization signal from said network card reader means;

a classified network server for generating said classified data;

a data relay switch connected to said controller means, said data relay switch being connected to said classified network server and said data processing means;

said controller means, responsive to said authorization signal from said network card reader means, enabling said data relay switch to provide for a data transfer of said classified data from said classified network server through said data relay switch to said data processing means allowing an authorized user of said secured network system to process said classified data with said data processing means; and

said data relay switch including a normally closed tamper switch connected to said controller means;

said controller means monitoring said data relay switch to detect when said normally closed tamper switch is opened which indicates that an unauthorized user of said secured network system is attempting to bypass said data relay switch.

2. The secured network system of claim 1 wherein said data relay switch includes a manual A/B switch connected to said classified network server and an unclassified network server, said manual A/B switch allowing said authorized user of said secured network system to access unclassified data provided by said unclassified network server and said classified data provided by said classified network server.

3. The secured network system of claim 1 wherein said data processing means comprises a digital computer.

4. The secured network system of claim 1 wherein said data relay switch comprises:

a first relay having a coil and a pair of normally open contacts, the coil of said first relay being connected to said controller means, the pair of normally open contacts of said first relay being connected to said classified network server and said data processing means;

a second relay having a coil and a pair of normally open contacts, the coil of said second relay being connected to said controller means, the pair of normally open contacts of said second relay being connected to said classified network server and said data processing means; and

said controller means, responsive to said authorization signal, energizing the coil of said first relay and the coil of said second relay closing the pair of normally open contacts of said first relay and the pair of normally contacts of said second relay to provide a classified data path between said classified network server and said data processing means.

5. The secured network system of claim 4 wherein said data relay switch further comprises a third relay having a coil and a normally closed contact, the coil of said third relay and the normally closed contact of said third relay being connected to said controller means.

6. The secured network system of claim 1 further comprising:

a first resistor having a first terminal connected to said controller means and a second terminal connected to a first terminal of said normally closed tamper switch;

second resistor having a first terminal connected to the second terminal of said first resistor and a second terminal connected to a second terminal of said normally closed tamper switch; and

the second terminal of said normally closed tamper switch being connected to said controller means.

7. The secured network system of claim 6 wherein said first resistor comprises a 2.2 k-ohm resistor and said second resistor comprises a 4.7 k-ohm resistor.

8. A secured network system comprising:

a data processor for receiving and processing classified data;

a network card reader, said network card reader being adapted to receive a microchip embedded card, said network card reader providing a first authorization signal whenever said microchip embedded card is presented to and authenticated by said network card reader;

a controller connected to said network card reader to receive said first authorization signal from said network card reader;

a classified network server for generating said classified data;

a data relay switch connected to said controller, said data relay switch being connected to said classified network server and said data processor;

said controller, responsive to said authorization signal from said network card reader, enabling said data relay switch to provide for a data transfer of said classified data from said classified network server through said data relay switch to said data processor allowing an authorized user of said secured network system to process said classified data with said data processor;

said data relay switch including a normally closed tamper switch connected to said controller;

said controller monitoring said data relay switch to detect when said normally closed tamper switch is opened which indicates that an unauthorized user of said secured network system is attempting to bypass said data relay switch;

a power relay switch connected to said data processor;

a personal computer card reader connected to said controller, said personal computer card reader being adapted to receive said microchip embedded card, said personal computer card reader providing a second authorization signal whenever said microchip embedded card is presented to and authenticated by said personal computer card reader;

said controller being connected to said personal computer card reader to receive said second authorization signal, said controller, responsive to said second authorization signal, activating said power relay switch; and

said power relay switch when activated coupling said computer to an external power source.

9. The secured network system of claim 8 wherein said data processor comprises a digital computer.

10. The secured network system of claim 8 wherein said data relay switch includes a manual A/B switch connected to said classified network server and an unclassified network server, said manual A/B switch allowing said authorized user of said secured network system to access unclassified data provided by said unclassified network server and said classified data provided by said classified network server.

11. The secured network system of claim 8 wherein said data relay switch comprises:

a first relay having a coil and a pair of normally open contacts, the coil of said first relay being connected to said controller, the pair of normally open contacts of said first relay being connected to said classified network server and said data processor;

a second relay having a coil and a pair of normally open contacts, the coil of said second relay being connected to said controller, the pair of normally open contacts of said second relay being connected to said classified network server and said data processor;

said controller, responsive to said authorization signal, energizing the coil of said first relay and the coil of said second relay closing the pair of normally open contacts of said first relay and the pair of normally contacts of said second relay to provide a classified data path between said classified network server and said data processor.

12. The secured network system of claim 11 wherein said data relay switch further comprises a third relay having a coil and a normally closed contact, the coil of said third relay and the normally closed contact of said third relay being connected to said controller.

13. The secured network system of claim 8 further comprising:

a first resistor having a first terminal connected to said controller and a second terminal connected to a first terminal of said normally closed tamper switch;

a second resistor having a first terminal connected to the second terminal of said first resistor and a second terminal connected to a second terminal of said normally closed tamper switch; and

the second terminal of said normally closed tamper switch being connected to said controller.

14. The secured network system of claim 13 wherein said first resistor comprises a 2.2 k-ohm resistor and said second resistor comprises a 4.7 k-ohm resistor.