Computer system and method having isolatable storage for enhanced immunity to viral and malicious code infection

• US 7,577,871 B2
• Filed: 02/16/2006
• Issued: 08/18/2009
• Est. Priority Date: 05/19/2000
• Status: Active Grant

• Current Assignee: Vir2us, Inc.
• Original Assignee: Vir2us, Inc.
• Inventors: Largman, Kenneth, Blair, Jeffrey, More, Anthony
• Primary Examiner(s): Beausoliel; Robert
• Assistant Examiner(s): Manoskey; Joseph D
• Application Number:
  US11/386,493
• Publication Number:
  US 20060161813A1
• Time in Patent Office: 1,279 Days
• Field of Search: 714/2, 714/7, 714/13, 714/19, 714/20, 714/23, 714/38
• US Class Current: 714/20
• CPC Class Codes: G06F 11/1417 Boot up procedures
• CPC Class Codes: G06F 11/1435 using file system or storage system metadata
• CPC Class Codes: G06F 11/1446 Point-in-time backing up or restoration of persistent data
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1456 Hardware arrangements for backup
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: G06F 11/1662 the resynchronized component or unit being a persistent storage device re-synchronization of failed mirror storage G06F11/2082; rebuild or reconstruction of parity RAID storage G06F11/1008
• CPC Class Codes: G06F 11/1666 where the redundant component is memory or memory area
• CPC Class Codes: G06F 11/20 using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
• CPC Class Codes: G06F 11/2094 Redundant storage or storage space G06F11/2056 takes precedence
• CPC Class Codes: G06F 21/568 eliminating virus, restoring damaged files
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

An apparatus and method of supporting the backup and recovery of a computing device. The computing device typically includes both a user computing environment and a supporting environment which enhances the stability and functionality of the user computing environment.

Claims

1. A computer that has enhanced resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection, the computer comprising:

a processor;

a memory coupled to the processor;

a plurality of identified storage; and

a switch selectively enabling access with only one of the plurality of storage with said processor and said memory by opening or closing a predetermined electrical circuit of a device to be switched;

the selectively enabling access to the one storage disabling access among or between the processor, memory and another of the plurality of identified storage, wherein only a single storage is accessed at a time, preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

a data port and means for mediating access of the computer over an external communications link with an external system;

and the computer being operable in a connected state and in a disconnected state;

the disconnected state being a state in which (i) the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage; and

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating with an external system via the data port and operable for isolating data received only to the second storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage.

2. A computer as in claim 1, wherein the plurality of identified storage includes a first storage and a second storage.

3. A computer as in claim 1, wherein the plurality of identified storage comprise different logical storage.

4. A computer as in claim 1, wherein the plurality of identified storage comprise different physical storage.

5. A computer as in claim 1, wherein the plurality of identified storage comprise at least one hard disk drive physical storage device.

6. A computer as in claim 1, wherein the second storage is separated from the processor and cannot execute the data received.

7. A computer as in claim 1, wherein at least some of the plurality of storage are adapted to store data selected from the set of data consisting of user data, computer system data, operating system data, application program data, application program executable computer program code, operating system computer program executable code, including at least one of user data and program data.

8. A computer as in claim 1, wherein the switch disables access with the first data store so that the computer may enable only one of the plurality of data stores at any given time, which depending on whether the computer is accessing or not accessing the communications link, and thereby isolating data received over the communications link only to said second storage so that if the data over the communications link has a virus, hacking executable, infection, or maliciously created data element it is confined to the second storage.

9. A computer as in claim 1, further comprising:

a first bus communicatively coupling the memory, first and second peripheral controllers and the data pod to each other and to the processor;

a second bus communicatively and electrically coupling the peripheral controller to the first storage and to the switch;

a third bus communicatively and electrically coupling the second peripheral controller to the second storage and to the switch; and

wherein the switch includes a switching element for switching an operating signal of the second bus thus communicatively or electrically coupling the storage, and the switch element switching an operating signal of the second bus thus communicatively or electrically coupling the second storage.

10. A computer as in claim 9, wherein the computer further comprises multiple mother boards each having a processor and a memory coupled to the processor, and the switch includes a switching element for switching the functioning components of a computer from one board to another so that different mother boards, processors, memories, and storage may be selectively allocated to different users or to different user processes to provide physical security.

11. A computer as in claim 9, wherein the operating signal comprises a power line signal and the communicatively or electrically coupling comprises powering-up or powering-down the bus.

12. A computer as in claim 9, wherein the switching of the first and second storage may be done at least in part tinder manual control, hardware control, software control, or a combination of these.

13. A computer as in claim 9, wherein when the switching is accomplished at least in part by a manual switch, the mechanical switch comprises a mechanical switch operated by a user of the computer when the user wishes to access or cease accessing the communications link.

14. A computer as in claim 9, wherein when the switching is accomplished at least in part by a software-controlled switch, the software-controlled switch comprises a switch responding programmatically to the processor of the computer.

15. A computer as in claim 1, wherein the software controlled switch comprises said manual switch.

16. A computer as in claim 1, wherein the switching between the disconnected mode and the connected mode is initiated by an event.

17. A computer as in claim 1, wherein the switch involves re-booting the computer in order to make the second storage the only storage available during the use of the communications link.

18. A computer as in claim 1, wherein the computer synchronously switches the data port and the second storage so that the resistance of the computer to hacking or viral or other malicious code infection is enhanced.

19. A computer as in claim 1, wherein access to the second storage is disabled by stopping operating power to the second storage via the switch.

20. A computer as in claim 1, wherein access to the second storage to support access to communications link is enabled by supplying operating power to the second storage via the switch.

21. A computer as in claim 1, wherein access to the first storage is disabled by stopping operating power to the data store via the switch.

22. A computer as in claim 1, wherein access to the first storage to prevent infection during access to communications link is disabled by denying an operating signal to the first storage via the switch.

23. A computer as in claim 1, wherein the second storage contains application software to process the data received over the communications link and there is no need to migrate the data on the second storage to the first storage for processing.

24. A computer as in claim 1, wherein a migration of the data received is performed a predetermined time after receiving data over the communications link.

25. A computer as in claim 24, wherein during a delay in migration anti-virus software is applied to address security issues for the data.

26. A computer as in claim 25, wherein the migration is manual.

27. A computer as in claim 25, wherein the migration is automated.

28. A computer as in claim 1, wherein received data is placed in a quarantined isolated storage for a period of time.

29. A computer as in claim 28, wherein the quarantined isolated storage is selectively coupled with the processor and memory for a period of time but maintained in isolation from other of the plurality of storage.

30. A method for enhancing resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection in a device of the type having a processor, a memory coupled to the processor, and a least one physical storage, the method comprising:

identifying a plurality of storage from said at least one physical storage including a logical or physical first storage and a second logical or physical storage; and

selectively enabling access with only one of the plurality of identified storage with said processor and said memory by opening or closing a predetermined electrical circuit of a device to be switched;

the selectively enabling access to the one storage disabling access among or between the processor, memory and another of the plurality of identified storage, wherein only a single storage is accessed at a time, preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

the computer further being of the type having a data port and means for mediating access of the computer over an external communications link with an external system; and

the method further comprising;

operating the computer in a connected state and in a disconnected state;

the disconnected state being a state in which (i) the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage; and

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating with an external system via the data port and operable for isolating data received only to the second storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage.

31. A method as in claim 30, further comprising executing a procedure to identify a virus, a hacking executable code, an infection, or other harmful or malicious element before permitting movement of the data received from the second storage to another storage.

32. A method as in claim 30, wherein the computer may operate in any of N states and the plurality of storage comprises at least N storage for association with the storage of N users data;

assigning each of the N storage to a user or group of users, each storage having self-contained software for the user or group of users, including at least one of a bootable operating system, application program code and data, and user data files; and

receiving a switch command and enabling the storage corresponding to a particular user or group of users so that a first user'"'"'s data is separated from a second user'"'"'s data on the same computer, the separating a users'"'"' data by enforcing security at a physical level rather than at the logical software-enforced level.

33. A method as in claim 32, wherein the computer comprises multiple mother boards each having a processor and a memory coupled to the processor, and a switch for switching the functioning components of a computer from one board to another, the method further comprising allocating different mother boards, processors, memories, and storage to different users or to different user processes.

34. A method as in claim 30, wherein received data is placed in a quarantined isolated storage for a period of time.

35. A method as in claim 34, wherein the quarantined isolated storage is selectively coupled with the processor and memory for a period of time but maintained in isolation from other of the plurality of storage.

36. A computer that self-repairs to maintain an operational status at any time during operation, the computer comprising:

a main computer hardware box;

at least one CPU disposed within the main computer hardware box;

at least one random access memory disposed within the main computer hardware box and coupled to the at least one CPU;

the at least one CPU and random access memory providing at least one user computing environment and a supporting computing environment substantially isolated from the user computing environment and operative to enhance the stability and functionality of the user computing environment by monitoring processes running or enabled within the user computing environment;

first and second controllers for respective first and second data storage devices disposed within the main computer hardware box of the computer prior to a need for repair, the first data storage device storing programs and data for the user computing environment and the second data storage device being associated with the supporting computing environment and containing at least one backup snap-shot; and

means for controlling the self-repair of the computer cooperatively coupled with said at least one CPU, said at least one random access memory, and said first and second controllers.

37. The computer of claim 36, wherein the repairing comprises:

automatically repairing software on the first storage device according to preset preferences without further direction from the user, the preset preferences designating to repair the computer according to whether;

to recover data, to run a virus check, to reformat the first storage device, to revert to a backup, or to run diagnostics.

38. The computer of claim 36, wherein the repairing comprises:

reformatting the first storage device and then copying software onto the first storage device;

or resetting parameters in a persistent memory and then copying software onto the first storage device.

39. The computer of claim 36, wherein the self-repair is initiated by a signal indicating a need for repair that is either:

(i) self-generated by the computer without human intervention by the monitoring the processes running or enabled within the user computing environment;

or

(ii) generated by the computer in response to a single action by an external user, said single action selected from the set of actions consisting of;

pressing a key or combination of keys on a keyboard of the computer and pressing or changing the state of a physical switch different from an on-off switch of the computer and exposed on an exterior surface of the main computer hardware box of the computer.

40. A computer as in claim 36, further comprising means for backing up programs and data on the computer and recovering the computer to a predetermined state in the event of a viral, hacker, or other malicious code contamination of the computer.

41. A computer as in claim 40, wherein the means for backing up includes means for obtaining at least one snap-shot of data on the computer.

42. A computer as in claim 36, wherein the self-repairing of the computer to a specified operational state is performed on-the-fly during normal operation without user intervention.

43. A computer as in claim 36, wherein the computer in operation automatically executes a plurality of individual computing processes selected from the set of computing processes consisting of monitoring the user computing environment, tracking the user computing environment, predicting the stability of the user computing environment, backing-up the user computing environment, restoring the user computing environment, and recovering attributes within the user computing environment.

44. A computer as in claim 43, wherein the attributes may be software specific, data specific, operating system specific, or any combination of the software, data, and operating system attributes.

45. A computer as in claim 43, wherein execution of the plurality of computing processes facilitates the normal operation of the user computing environment.

46. A computer as in claim 36, wherein the user computing environment is stabilized without user intervention that would perform a shut-down, restart, log off, log on, or termination of applications executing on the computer.

47. A computer as in claim 36, wherein the supporting environment is operative to interact with the user computing environment.

48. A computer as in claim 36, wherein the user computing environment and the supporting environment function in different computing systems physically residing in the main computer hardware box.

49. A computer as in claim 36, wherein the monitoring includes monitoring of the utilization of the user computing environment data storage device and data contained on the user computing environment data storage device.

50. A computer as in claim 49, wherein the monitoring of the user computing environment by the supporting computing environment identifies undesired changes and potential problems with the user computing environment.

51. A computer as in claim 50, wherein the supporting computing environment detects at least one of a freeze and an undesirable change within the user computing environment.

52. A computer as in claim 51, wherein when a freeze or other undesirable change is detected in the user environment, the supporting environment attempts to recover or restore or repair the user environment.

53. A computer as in claim 36, wherein the supporting computing environment is operative to re-enable the user environment, the enabling selected from the set consisting of:

resetting a locked user environment keyboard, resetting connections, resetting and clearing devices, replacing defective software components, switch hardware components and/or devices, and combinations of these.

54. A computer as in claim 36, wherein the supporting computing environment obtains at least one snap-shot and subsequently copies all or part of the data from one or more of the at least one snapshots to recover or restore or repair the user environment.

55. A computer as in claim 36, wherein both the user computing environment and the supporting computing environment reside on a single computer system;

a snap-shot associated with the supporting computing environment of the operational user environment is obtained;

processes associated with the supporting environment monitor the activities and status of the user computing environment;

a monitoring function is executed that detects any degraded performance of the user computing environment and notifies the supporting environment of any degraded performance detected; and

the supporting environment performing any recovery or repair action as necessary to recover or restore the user environment, the recovery optionally including utilizing the snap-shot to recover or restore the user environment.

56. A computer that has enhanced resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection, the computer comprising:

a processor;

a memory coupled to the processor;

a plurality of identified storage;

a switch selectively enabling or disabling access with any selected one or combination of the plurality of storage with said processor, said memory, or other ones of said plurality of storage;

the selectively enabling or disabling access among or between the processor, memory and other of the plurality of identified storage preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

a data port and means for mediating access of the computer over an external communications link with an external system;

the computer being switchable to operable in a connected state and in a disconnected state;

the disconnected state being a state in which (i) the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage;

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating an external system via the data port isolating data received only to storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage; and

the switching between the disconnected mode and the connected mode is initiated by an event, and the event includes a initiation of an internet browser program on the computer, the external system comprises an external network, and the communications link comprises a communications with the Internet network.

57. A computer as in claim 56, wherein upon receiving a request of the intent to connect with the internet or upon launch of the internet browser program the processor and computer programs executing within the processor programmatically initiates the connection of the data port to the communications link and the switching to enable/disable access of the first and second storage.

58. A computer that has enhanced resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection, the computer comprising:

a processor;

a memory coupled to the processor;

a plurality of identified storage;

a switch selectively enabling or disabling access with any selected one or combination of the plurality of storage with said processor, said memory, or other ones of said plurality of storage;

the selectively enabling or disabling access among or between the processor, memory and other of the plurality of identified storage preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

a data port and means for mediating access of the computer over an external communications link with an external system;

the computer being operable in a connected state and in a disconnected state;

the disconnected state being a state in which (i) the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage; and

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating an external system via the data port isolating data received only to storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage; and

wherein a browser on the second storage may launch automatically on the boot from the second storage.

59. A computer that has enhanced resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection, the computer comprising:

a processor;

a memory coupled to the processor;

a plurality of identified storage; and

a switch selectively enabling or disabling access with any selected one or combination of the plurality of storage with said processor, said memory, or other ones of said plurality of storage;

the selectively enabling or disabling access among or between the processor, memory and other of the plurality of identified storage preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

a data port and means for mediating access of the computer over an external communications link with an external system;

and the computer being operable in a connected state and in a disconnected state;

the disconnected state being a state in which (i)the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage;

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating an external system via the data port isolating data received only to storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage; and

the second storage does not contain application software to process the data received over the communications link and there is a need to migrate the data on the second storage to the first storage For processing or migrate the application program on first storage to the second storage for processing the data on first storage.

60. A computer that has enhanced resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection, the computer comprising:

a processor;

a memory coupled to the processor;

a plurality of identified storage; and

a switch selectively enabling or disabling access with any selected one or combination of the plurality oF storage with said processor, said memory, or other ones of said plurality of storage;

the selectively enabling or disabling access among or between the processor, memory and other of the plurality of identified storage preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

a data pod and means for mediating access of the computer over an external communications link with an external system;

and the computer being operable in a connected state and in a disconnected state;

the disconnected state being a state in which (i) the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage;

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating an external system via the data port isolating data received only to storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage; and

the computer simultaneously enables the first and second storage and copies the data received over the communications link to first storage for processing on the first storage.

61. A computer that has enhanced resistance or immunity to viral, Trojan-horse, hacker, or other malicious code infection, the computer comprising:

a processor;

a memory coupled to the processor;

a plurality of identified storage; and

a switch selectively enabling or disabling access with any selected one or combination of the plurality of storage with said processor, said memory, or other ones of said plurality of storage;

the selectively enabling or disabling access among or between the processor, memory and other of the plurality of identified storage preventing a virus, a hacking executable code, an infection, or other harmful or malicious element from executing or from contaminating another storage;

a data port and means for mediating access or the computer over an external communications link with an external system;

and the computer being operable in a connected state and in a disconnected state;

the disconnected state being a state in which (i) the computer is prevented from communicating over the data port, and (ii) the data-store switch may enable access with any plurality of storage including permitting access with the first storage and the second storage;

the connected state being a state in which (iii) the computer is permitted to communicate over the data port, and (iv) the data-store switch may not enable access with the first storage but may enable access with the second storage;

the permitting or preventing access to particular storage depending on whether the computer is communicating or not communicating an external system via the data port isolating data received only to storage so that if the data received has a virus, a hacking executable code, an infection, or other harmful or malicious element it is confined to the second storage; and

the computer simultaneously enables the first and second storage and copies the applications program to the second storage for processing of the data on the second storage.