Method for prohibiting unauthorized access in a non-contacting data carrier system

• US 6,823,459 B1
• Filed: 02/22/2000
• Issued: 11/23/2004
• Est. Priority Date: 03/04/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Abe, Naoki, Tanaka, Jun, Maruichi, Tomoki, Horikoshi, Hideto
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): HENEGHAN, MATTHEW E
• Application Number:
  US09/510,573
• Time in Patent Office: 1,736 Days
• Field of Search: 713/200, 713/300, 713/310
• US Class Current: 726/17
• CPC Class Codes: G06F 21/35 communicating wirelessly

Abstract

To provide a method whereby unauthorized data access by an RFID data processing system is prohibited without any degradation of performance being incurred. An RFID data processing system 30 comprises a CPU 35, a EEPROM 34, communication devices 31 and 32, and power controllers 40 and 41. When an RFID data processing system 30 in the power-ON state that does not have access authorization passes through a portal gate located at the entrance to an unauthorized data access protection area, the portal gate transmits a signal to set ON a tamper bit 44 in the EEPROM 34. When the tamper bit 44 has been set ON, a tamper bit interrupt request signal is output by the EEPROM 34. Upon receiving this signal, the power controllers 40 and 41 power off the RFID data processing system 30.

Claims

1. A method for prohibiting unauthorized access to a data processing system, comprising:

using a wireless data carrier to communicate with a data processing system that includes a CPU, a semiconductor memory, a communication device and a power controller;

transmitting a signal on the wireless data carrier to the data processing system, in a power-ON state, to set a predetermined bit in the semiconductor memory whenever the data processing system enters or exits from an unauthorized data access protection area; and

transmitting, with a portal gate, provided at the entrance to the unauthorized data access protection area, the wireless data carrier the signal for setting the predetermined bit in the semiconductor memory.

2. The method according to claim 1, wherein the predetermined bit in the semiconductor memory is a tamper bit, and wherein access authorization is granted to the data processing system in accordance with an entry of a predetermined password.

3. A method for prohibiting unauthorized access to a data processing system having a CPU, a semiconductor memory, a wireless communication device and a power controller on a data processing system network, said method comprising:

using a wireless data carrier to communicate with a data processing system that includes a CPU, a semiconductor memory, a communication device and a power controller;

transmitting a signal on the wireless data carrier to the data processing system, in a power-ON state, to set a predetermined bit in the semiconductor memory whenever the data processing system enters or exits from an unauthorized data access protection area;

transmitting, with a portal gate, provided at the entrance to the unauthorized data access protection area, the wireless data carrier the signal for setting the predetermined bit in the semiconductor memory;

a wireless communication device on the data processing system receiving the signal while the power controller is in a power-ON state;

responsive to the signal, determining if the signal instructs the data processing system to set a predetermined bit in a semiconductor memory;

setting the predetermined bit in the semiconductor memory as instructed by the signal;

issuing a tamper interrupt request from the semiconductor memory to the power controller; and

in response to the tamper interrupt request, the power controller switching to a power-OFF state in which the power controller discontinues the supply of power to the data processing system.

4. The method of claim 3, wherein said receiving step comprises the wireless communication device receiving the signal when the data processing system crosses a boundary of an unauthorized data access protection area.

5. The method of claim 4, wherein the step of receiving the signal further comprises receiving the signal over-the-air when the data processing system crosses the boundary of an unauthorized data access protection area defined by a portal gate, which transits the signal.

6. The method of claim 3, wherein said method further comprises granting login access to said data processing system after said predetermined bit is set only in response to an entry of a predetermined password.

7. The method of claim 3, wherein the receiving step further comprises receiving a radio frequency electromagnetic signal.

8. The method of claim 3, further comprising, the wireless communication device continuing operation in the a power-on state, even when the power controller is in the power-OFF state, by means of an independent power source.

9. The method of claim 3, wherein the receiving step further comprises a microwave electromagnetic signal.

10. A data processing system comprising:

a semiconductor memory,

a wireless communication device for receiving a signal over-the-air;

means for using a wireless data carrier to communicate with a data processing system that includes a CPU, a semiconductor memory, a communication device and a power controller;

means for transmitting a signal on the wireless data carrier to the data processing system, in a power-ON state, to set a predetermined bit in the semiconductor memory whenever the data processing system enters or exits from an unauthorized data access protection area;

means for transmitting, with a portal gate, provided at the entrance to the unauthorized data access protection area the wireless data carrier the signal for setting the predetermined bit in the semiconductor memory;

means for processing signals, including;

means responsive to the signal, for determining if the signal instructs the data processing system to set a predetermined bit in a semiconductor memory;

means for setting the predetermined bit in the semiconductor memory as instructed by the signal;

wherein the semiconductor memory for issues a tamper interrupt request in response to setting of the predetermined bit; and

a power controller that, responsive to the tamper interrupt request, switches from a power-ON state to a power-OFF state in which the power controller discontinues the supply of power to the data processing system.

11. The system of claim 10, wherein the wireless communication device further comprises means for receiving the signal when the data processing system crosses a boundary of an unauthorized data access protection area.

12. The system of claim 11, wherein the wireless communication device further comprises means for receiving the signal over-the-air when the data processing system crosses the boundary of an unauthorized data access protection area defined by a portal gate, which transmits the signal.

13. The system of claim 10, wherein said system further comprises means for granting login access to said data processing system after said predetermined bit is set only in response to an entry of a predetermined password.

14. The system of claim 10, the wireless communication device further comprises means for receiving a radio frequency electromagnetic signal.

15. The system of claim 10, further comprising, means for the wireless communication device continuing operation in a power-on state, even when the power controller is in the power-OFF state, by means of an independent power source.

16. The system of claim 10, wherein the wireless communication device further comprises means for receiving a microwave electromagnetic signal.

17. A computer program product in a computer-readable medium for prohibiting unauthorized access to a data processing system having a CPU, a semiconductor memory, a wireless communication device and a power controller on a data processing system network, said computer program product comprising:

a computer-readable medium;

instructions on the computer-readable medium for using a wireless data carrier to communicate with a data processing system that includes a CPU, a semiconductor memory, a communication device and a power controller;

instructions on the computer-readable medium for transmitting a signal on the wireless data carrier to the data processing system in a power-ON state, to set a predetermined bit in the semiconductor memory whenever the data processing system enters or exits from an unauthorized data access protection area;

instructions on the computer-readable medium for transmitting with a portal gate provided at the entrance to the unauthorized data access protection area the wireless data carrier the signal for setting the predetermined bit in the semiconductor memory;

instructions on the computer-readable medium for receiving the signal on the data processing system, while the power controller is in a power-ON state;

instructions on the computer-readable medium for, responsive to the signal, determining if the signal instructs the data processing system to set a predetermined bit in a semiconductor memory;

instructions on the computer-readable medium for setting the predetermined bit in the semiconductor memory as instructed by the signal; and

instructions on the computer-readable medium for issuing a tamper interrupt request from the semiconductor memory to the power controller to cause the power controller to switch from a power-ON state to a power-OFF state in which the power controller discontinues the supply of power to the data processing system.

18. The computer program product of claim 17, wherein said receiving instructions further comprise instructions for receiving the signal when the data processing system crosses a boundary of an unauthorized data access protection area.

19. The computer program product of claim 18, wherein the instructions for receiving the signal further comprise instructions for receiving the signal over-the-air when the data processing system crosses the boundary of an unauthorized data access protection area defined by a portal gate which transmits the signal.

20. The computer program product of claim 17, wherein said computer program product further comprises instructions for granting login access to said data processing system after said predetermined bit is set only in response to an entry of a predetermined password.

21. The computer program product of claim 17, wherein the instructions for receiving flyer comprise instructions for receiving a radio frequency electromagnetic signal.

22. The computer program product of claim 17, further comprising, instructions for continuing operation in a power-on state, even when the power controller is in the power-OFF state, by means of an independent power source.

23. The computer program product of claim 17, wherein the instructions for receiving further comprise instructions for receiving a microwave electromagnetic signal.