Security system for data processing applications

• US 6,799,259 B1
• Filed: 02/13/2002
• Issued: 09/28/2004
• Est. Priority Date: 09/27/2000
• Status: Expired due to Fees

• Current Assignee: John H. Reed Jr
• Original Assignee: John H. Reed Jr
• Inventors: Reed, John H. Jr.
• Primary Examiner(s): Sparks, Donald
• Assistant Examiner(s): Peugh, Brian R.
• Application Number:
  US10/075,220
• Time in Patent Office: 958 Days
• Field of Search: 711/111, 711/112, 711/114, 711/162, 711/163, 711/164, 700/83, 713/200, 713/201, 713/202, 713/1, 713/2
• US Class Current: 711/163
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A system for dynamically controlling activation status of multiple data storage structures in a single computer so that a single computer can be dynamically configured using two or more hard drives, each with its own disk operating system. The system includes a means for selectively automatically toggling between active data storage structures and inactive data storage structures. In a preferred embodiment of the present invention, the dynamic controlling means can dynamically switch activation status without re-booting or re-powering the computer.

Claims

1. A computer system for operably maintaining a plurality of distinct data storage elements having predetermined levels of security designated therefor, and for automatically and dynamically directing data flow to designated ones of said distinct data storage elements having a respective predetermined security level designation that is commensurate with a predetermined risk level of the data flow, said computer system comprising:

(a) a computer having said plurality of distinct data storage elements operably coupled thereto; and

(b) automated switching means operably coupled to said computer and being configured for continuously and dynamically controlling the activation status of said plurality of data storage elements, with the activation status of each of said data storage elements being selected from the group consisting of activated and deactivated, the activated activation status enabling direct entry of data into respective data storage elements and the deactivated activation status preventing entry of data into respective data storage elements, said switching means being configured to automatically change the activation status of respective data storage elements in order to switch an activation status from a first set of said data storage elements to a second set of said data storage elements, such automatic activation status change including the steps of;

(i) interrupting communication to first disk operating system software resident in said first data storage element set;

(ii) creating a first RAM memory map of application data and said first disk operating system software operation on said first data storage element set;

(iii) saving said first RAM memory map onto said first data storage element set;

(iv) reconfiguring electrical connections and hardware settings in said computer to thereby deactivate said first data storage element set and subsequently to activate said second data storage element set; and

(v) uploading a previously saved second RAM memory map of application data and second disk operation system software previously operating on said data storage element set, such that data flow is automatically and immediately directed exclusively to said second data storage element set.

2. A computer system as in claim 1 wherein less than all of said data storage elements are capable of receiving data from an external connection to a computer network.

3. A computer system as in claim 1 wherein said data storage elements comprise hard disks and operating systems.

4. A computer system as in claim 1 wherein said switching means are selectively enabled by a user of said computer system.

5. A computer system as in claim 1 wherein said switching means completes the activation status change procedure without re-booting or powering down said computer.

6. A computer system as in claim 1 wherein said computer is operably coupled to multiple server/LAN systems.

7. A computer system as in claim 6 wherein less than all of said server/LAN systems are connected to activated ones of said data storage elements.

8. A computer system as in claim 1 wherein predetermined levels of user authorization are required to activate respective said data storage elements.

9. A computer system as in claim 1 wherein said switching means is embodied in a distinct accessory which may be operably coupled to said data storage elements.

10. A computer system as in claim 9 wherein said accessory includes a data storage element integrally formed therewith.

11. A computer system as in claim 10 wherein said accessory data storage element is autonomous from the remainder of said plurality of data storage elements.

12. A computer system as in claim 1 wherein said switching means is configured upon boot-up of said first and second data storage element sets to selectively and dynamically switch the activation status between said first and second data storage element sets without re-booting either of such first and second data storage element sets.