Method and apparatus for enhancing computer system security

• US 6,311,273 B1
• Filed: 07/06/1999
• Issued: 10/30/2001
• Est. Priority Date: 02/13/1997
• Status: Expired due to Fees

• Current Assignee: The Helbig Company LLC
• Original Assignee: Walter A. Helbig Sr
• Inventors: Ackerman, William H. III, Helbig, Walter A. Sr.
• Primary Examiner(s): Wright, Norman M.
• Application Number:
  US09/348,095
• Time in Patent Office: 847 Days
• Field of Search: 713/200, 713/201, 713/202, 714/9, 714/39, 714/46, 714/47
• US Class Current: 726/2
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/567 using dedicated hardware
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: G06F 2211/1097 Boot, Start, Initialise, Power
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 9/3879 for non-native instruction execution, e.g. executing a command; for Java instruction set

Abstract

A security enhanced computer system arrangement includes a coprocessor and a multiprocessor logic controller inserted into the architecture of a conventional computer system. The coprocessor and multiprocessor logic controller is interposed between the CPU of the conventional computer system to intercept and replace control signals that are passed over certain of the critical control signal lines associated with the CPU. The multiprocessor logic controller arrangement thereby isolates the CPU of the conventional computer system from the remainder of the conventional computer system, permitting separate control over the CPU and separate control over the remainder of the computer system. By controlling the control signals that are normally passed between the CPU and the remainder of the computer system, the multiprocessor logic controller permits the coprocessor to perform highly secure operations. These secure operations, selectable by a trusted operator or built in to a cooperating operating system, verify that the computer system is a trusted computing base which can be relied upon to perform its operations properly and without compromise.

Claims

1. A computer system comprising:

a first processor having respective address signals, data signals and a plurality of control signals coupled thereto, said plurality of control signals provided to/from said first processor on a respective plurality of control signal lines including a first control signal line being one of said respective plurality of control signal lines, said first control signal line including a first control signal;

a second processor;

a logic controller, said logic controller including apparatus for intercepting said first control signal to/from said first processor and substituting a second control signal to/from said second processor in place of said first control signal such that said logic controller captures control of said first processor, said logic controller isolates said first processor from the remainder of said computer system, and said logic controller obtains separate control over both said first processor and the remainder of said computer system; and

wherein said second processor, said logic controller, and operation of circuitry associated with said second processor and said logic controller are invisible to all other portions of said computer system, with the exception of a BIOS extension associated with said logic controller.

2. A system in accordance with claim 1, wherein said first control signal is an address strobe signal.

3. A system in accordance with claim 1, wherein said first control signal is an interrupt signal.

4. A system in accordance with claim 1, wherein said first control signal is a write strobe signal.

5. A system in accordance with claim 1, wherein said first control signal is a read strobe signal.

6. A system in accordance with claim 1, wherein said first control signal is a data ready signal.

7. A multiple processor system comprising:

a first processor having a plurality of terminals for receiving a first plurality of controls signals coupled thereto, and a plurality of address signals coupled thereto;

a second processor;

a logic controller, said logic controller monitoring at least one critical program area corresponding to predetermined address signals and predetermined control signals of said first processor to detect an attempt to modify said at least one critical program area;

an alarm responsive to said logic controller detecting said attempt to modify said at least one critical program area;

said logic controller responsive to said alarm for interrupting at least one of said first plurality of control signals and substituting at least one of a second plurality of control signals in place of said at least one of said first plurality of control signals, such that said logic controller captures control of said first processor upon detection of said attempt to modify said at least one critical program area, and said logic processor selectively enables said second processor; and

wherein said logic processor and operation of circuitry associated with said logic controller are invisible to said first processor with the exception of a BIOS extension associated with said logic controller.

8. A multiple processor system in accordance with claim 7, wherein said at least one critical program area is an input/output system (BIOS).

9. A multiple processor system in accordance with claim 7, wherein said at least one critical program area is an interrupt vector address table.

10. A multiple processor system in accordance with claim 7, wherein said at least one critical program area is an operating system (DOS).

11. A multiple processor system in accordance with claim 7, wherein said at least one critical program area is a file that executes automatically (autoexec.bat) on start up.

12. A multiple processor system in accordance with claim 7, wherein said at least one critical program area is a system configuration control (config.sys) file.

13. A multiple processor system in accordance with claim 7, wherein said at least one critical program area is a program or data area specified by a trusted operator.

14. A multiple processor system in accordance with claim 7, wherein said first plurality of control signals is an address strobe signal.

15. A multiple processor system in accordance with claim 7, wherein said first plurality of control signals is an interrupt signal.

16. A multiple processor system in accordance with claim 7, wherein said first plurality of control signals is a write strobe signal.

17. A multiple processor system in accordance with claim 7, wherein said first plurality of control signals is a read strobe signal.

18. A multiple processor system in accordance with claim 7, wherein said first plurality of control signals is a data ready signal.