Secure computer system

• US 7,302,587 B2
• Filed: 04/02/2001
• Issued: 11/27/2007
• Est. Priority Date: 06/08/2001
• Status: Expired due to Term

• Current Assignee: Siemens Mobility SAS (Siemens AG)
• Original Assignee: Matra Transport International (Siemens AG)
• Inventors: Moreau, Louis, El Fassi, Saïd
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US09/822,820
• Publication Number:
  US 20030023863A1
• Time in Patent Office: 2,430 Days
• Field of Search: 713/200, 701/29
• US Class Current: 713/192
• CPC Class Codes: G06F 11/004 Error avoidance G06F11/07 and subgroups take precedence
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

The secure computer system comprises at least one computer having a processor operating under the control of a program on input data that can be associated with a code and delivering output data for output members. A security peripheral that is external but connected to the processor is provided to receive at least the input data codes, the operands, and the nature of the operation of each elementary operation performed by the processor, a code being calculated on each elementary operation performed by the processor in order to verify proper performance of all or part of the executed program. The system is applicable to processes for automatically running rail track systems.

Claims

1. A computer system for managing the operation of at least one public transport vehicle so as to ensure safe operation thereof, the computer system comprising at least one computer with a processor operating under the control of a program, operating on input data items each suitable for being associated with a code so as to provide input data codes and supplying output data items each suitable for being associated with a code and for being transmitted or applied to output members, the computer system further comprising at least one peripheral external to the processor, connected to the processor to receive at least the input data codes, the operands, and the nature of the operation for each elementary operation performed by the processor, the peripheral having secure architecture and the processor and the at least one peripheral both processing all types of said input data codes including any secure input data codes, the peripheral computing a code for each elementary operation performed by the processor and verifying proper operation of all or part of the executed program controlling the processor by detecting any internal errors produced in the operation of the processor, said verifying being at least partly based on said input data codes and the code computed by the peripheral for each elementary operation performed by the processor, while the processor performs computations only on the functional values of the encoded data, said computer system controlling the safe operation of the at least one public transport vehicle, based on said detecting of internal errors, as well as detecting external errors, and at least one of (i) said processor and (ii) said at least one peripheral being located on the public transport vehicle or along a wayside for the public transport vehicle.

2. A computer system according to claim 1, in which the said program is permanent or downloaded.

3. A computer system according to claim 1, in which the peripheral is single and associated with a host computer to provide security for all of a system having a plurality of computers connected to a common communications medium.

4. A computer system according to claim 3, in which the host computer is fitted with a safety driver which enables it to dialog with the peripheral and with the other computers.

5. A computer system according to claim 1, having a plurality of host computers, interconnected by a transmission medium and each provided with a security peripheral.

6. A computer system according to claim 1, in which the security peripheral or the security peripherals perform security operations only on the inputs/outputs of only some of the processors.

7. A computer system according to claim 1, having a single security peripheral, connected to a computation assembly constituted by a central unit or a processor and peripherals, said security peripheral having computation means that perform:

digital security processing; and

security processing of the inputs/outputs.

8. A system according to claim 1, characterized in that said security peripheral is designed to make secure an assembly of the system constituted by a smart card, a reader, and one or more computers involved in the processing, and constituting the system, and to generate the interchanges between the smart card and the computer(s).

9. A system according to claim 1, in which the security peripheral is an ASIC.

10. A system according to claim 1 in which the computer system automatically controls operation of public transport vehicles.

11. A system according to claim 1 wherein the at least one peripheral controls whether the processor itself is processing information input thereto in a secure way independently of whether the input information processed by the processor is secure information.