Computers or microchips with a hardware side protected by a primary internal hardware firewall and an unprotected hardware side connected to a network, and with multiple internal hardware compartments protected by multiple secondary inner hardware firewalls

• US 8,209,373 B2
• Filed: 02/03/2009
• Issued: 06/26/2012
• Est. Priority Date: 11/29/1996
• Status: Expired due to Fees

• Current Assignee: Frampton E. Ellis III
• Original Assignee: Frampton E. Ellis III
• Inventors: Ellis, Frampton E. III
• Primary Examiner(s): STRANGE, AARON N
• Application Number:
  US12/364,745
• Publication Number:
  US 20090282092A1
• Time in Patent Office: 1,239 Days
• Field of Search: 709/201, 709/209, 709/250, 726/11, 712/10
• US Class Current: 709/201
• CPC Class Codes: A01N 25/30 characterised by the surfactants
• CPC Class Codes: G06F 11/1666 where the redundant component is memory or memory area
• CPC Class Codes: G06F 11/30 Monitoring
• CPC Class Codes: G06F 15/76 Architectures of general purpose stored program computers with program plugboard G06F15/08; multicomputers G06F15/16
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A personal computer or microchip comprising: a primary internal hardware firewall separating a protected side of the computer'"'"'s hardware from a network side connected to a network of computers. A master controller and/or a microprocessor is located within the hardware protected side protected by the primary internal hardware firewall. Microprocessors are located within the network side located between the primary internal hardware firewall and the network connection. The network side microprocessors are separate components from the primary internal hardware firewall. The primary internal hardware firewall by its location does not restrict access by the network to the computer'"'"'s network side, thereby enabling network operations between the computer and the network to be conducted in the network side using the networked microprocessors. One or more secondary inner hardware firewalls form one or more separate hardware protected compartments in the network side, the compartments including for example a networked microprocessor.

Claims

1. A computer configured for direct personal use by an individual, comprising:

at least a primary internal hardware firewall configured to protect a hardware protected side of the computer'"'"'s hardware from a network side of the computer, said network side is not protected by said primary internal hardware firewall,

at least one master controlling device and at least a non-volatile memory is located within said hardware protected side;

one or more network side microprocessors with at least a volatile memory and at least one network communication component are located within said network side, said network side being configured for connection to the network of computers and being located between said primary internal hardware firewall and a wired or wireless network connection to said network of computers;

said one or more network side microprocessors being separate components from said one or more network communications components, and both said network side microprocessors and said at least one network communication component being separate from said primary internal hardware firewall;

said primary internal firewall by its location does not restrict access by the network to said network side of the computer, thereby enabling network operations between the computer and the network to be conducted in said network side using said network side microprocessors;

at least one secondary inner hardware firewall configured to form at least one separate hardware protected compartment located in the network side; and

at least one said network side microprocessor with at least a volatile memory is located in said separate hardware protected compartment located in said network side.

2. The computer of claim 1, wherein said primary internal hardware firewall is configured to deny access to said hardware protected side of the computer by said network.

3. The computer of claim 1, further comprising a second said secondary inner hardware firewall configured to form at least a second said separate hardware protected compartment located in said network side;

and

at least one said network side microprocessor with at least a volatile memory is located in said second separate hardware protected compartment located in said network side.

4. The computer of claim 3, further comprising a third said secondary inner hardware firewall configured to form third said separate hardware protected compartment located in said network side;

and

at least one said network side microprocessor with at least a volatile memory is located in said third separate hardware protected compartment located in said network side.

5. The computer of claim 4, further comprising at least four additional said secondary inner hardware firewalls configured to form at least four additional said separate hardware protected compartments located in said network side;

and

at least four additional said network side microprocessors each with at least a volatile memory, and each said additional network side microprocessors with said volatile memory is located in a separate one of said four additional separate hardware protected compartments located in said network side.

6. The computer of claim 1, further comprising a second said secondary inner hardware firewall configured to form a first said separate hardware protected compartment located in said hardware protected side;

and

at least one microprocessor is located in said first separate hardware protected compartment located in said hardware protected side.

7. The computer of claim 6, further comprising a third said second inner hardware firewall configured to form at least a second said separate hardware protected compartment located in said hardware protected side;

and

at least one memory component is located in said second separate hardware protected compartment located in the hardware protected side.

8. The computer of claim 7, further comprising at least four additional said secondary inner hardware firewalls configured to form at least four additional said separate hardware protected compartments located in said hardware protected side;

and

at least four additional memory components each located in one said additional separate hardware protected compartment located in said hardware protected side.

9. The computer of claim 1, wherein one said master controlling device includes at least one microprocessor.

10. The computer of claim 1, further comprising a memory component of the computer located in at least one said separate hardware protected compartment that is located in the network side, said separate hardware protected compartment being protected at least by an additional said secondary inner hardware firewall.

11. The computer of claim 1, wherein each said network side microprocessor is located in a separate one of said at least one said separate hardware protected compartment located in said network side.

12. The computer of claim 1, wherein at least a portion of operating system files of the computer is located inside at least three additional said separate hardware protected compartments, each said additional separate hardware protected compartment being protected by at least an additional said secondary inner hardware firewall.

13. The computer of claim 1, wherein at least a portion of application software files of the computer is located inside at least three additional said separate hardware protected compartments, each said additional separate hardware protected compartment being protected by at least an additional said secondary inner hardware firewall.

14. The computer of claim 1, wherein at least a portion of files of a user of the computer is located inside at least three additional said separate hardware protected compartments, each said additional separate hardware protected compartment being protected by at least an additional said secondary inner hardware firewall.

15. The computer of claim 1, wherein said one or more network communications components includes at least a digital signal processor or a modem.

16. The computer of claim 1, wherein the computer is a node in an array of other computers linked together as nodes to form a server and/or a mainframe and/or a supercomputer.

17. The computer of claim 1, wherein said computer is configured to enable at least one network user to utilize at least one of said network side microprocessors located in at least one said separate hardware protected compartment located in said network side.

18. A microchip configured for direct personal use by an individual, comprising:

a microprocessor, the microprocessor including at least two processing units; and

at least a primary internal hardware firewall configured to protect a protected hardware side of the microchip'"'"'s hardware from a network side of the microchip, said network side is not protected by said primary internal hardware firewall,

at least one of the processing units of the microprocessor is located within said hardware protected side of the microchip from a network side that is not protected by said primary internal hardware firewall;

at least one of the processing units of the microprocessor is located within said hardware protected side;

one or more of the processing units of the microprocessor is located within said network side, and said network side is configured for connection to the network of computers and being located between said primary internal hardware firewall and a wired or wireless network connection to said network of computers;

said one or more network side processing units being separate from said primary internal hardware firewall;

said primary internal firewall by its location does not restrict access by the network to said network side of the microchip, thereby enabling network operations between the microchip and the network to be conducted in said network side using said network side processing units of the microchip;

at least one secondary inner hardware firewall is configured to form at least one separate hardware protected compartment located in the network side; and

at least one said network side processing unit is located in said at least one separate hardware protected compartment located in said network side.

19. The microchip of claim 18, wherein said primary internal hardware firewall is configured to deny access to said hardware protected side of the microchip by said network.

20. The microchip of claim 18, further comprising a second said secondary inner hardware firewall configured to form at least a second said separate hardware protected compartment located in the network side;

and

at least one said network side processing unit is located in said second separate hardware protected compartment located in the network side.

21. The microchip of claim 20, further comprising a third said secondary inner hardware firewall configured to form at least a third said separate hardware protected compartment located in the network side;

and

at least one said network side processing unit is located in said third separate hardware protected compartment located in the network side.

22. The microchip of claim 21, further comprising at least four additional said secondary inner hardware firewalls configured to form at least four additional said separate hardware protected compartments located in the network side;

and

at least four additional said network side processing units, each located in a separate additional said separate hardware protected compartment.

23. The microchip of claim 18, further comprising a second said secondary inner hardware firewall configured to form a first said separate hardware protected compartment located in said hardware protected side;

and

at least one processing unit is located in said first separate hardware protected compartment located in said hardware protected side.

24. The microchip of claim 23, further comprising a third said secondary inner hardware firewall configured to form at least a second said separate hardware protected compartment located in said hardware protected side;

and

at least one memory component is located in said second additional separate hardware protected compartment located in said hardware protected side.

25. The microchip of claim 24, further comprising at least four additional said secondary inner hardware firewalls configured to form at least four additional said separate hardware protected compartments located in said hardware protected side;

and

at least four additional memory components are located in a separate said additional hardware protected compartment located in said hardware protected side.

26. The microchip of claim 18, wherein said at least one processing unit in said hardware protected side of the microchip includes a master control unit for the microchip.

27. The microchip of claim 18, further comprising a memory component of the microchip located in at least one said separate hardware protected compartment that is located in the network side, said separate hardware protected compartment being protected by at least said secondary inner hardware firewall.

28. The microchip of claim 18, wherein all said network side processing units are each located in a separate said hardware protected compartment.

29. The microchip of claim 18, wherein at least a portion of operating system files of the microchip is located inside at least three additional said separate hardware protected compartments, each additional said separate hardware protected compartment being protected by at least an additional said secondary inner hardware firewall.

30. The microchip of claim 18, wherein at least a portion of application software files of the microchip is located inside at least three additional said separate hardware protected compartments, each additional said separate hardware protected compartment being protected by at least an additional said secondary inner hardware firewall.

31. The microchip of claim 18, wherein at least a portion of files of a user of the microchip is located inside at least three additional said separate hardware protected compartments, each additional said separate hardware protected compartment being protected by at least an additional said secondary inner hardware firewall.

32. The microchip of claim 18, wherein said network side includes one or more network communication components.

33. The microchip of claim 32, wherein said one or more network communications components includes at least a digital signal processor or a modem.

34. The microchip of claim 32, wherein at least one said network communications component is located in said at least one separate hardware protected compartment within said network side.

35. The microchip of claim 18, wherein said internal hardware firewall denies access by said network to said hardware protected side of the microchip.

36. The microchip of claim 18, wherein the hardware protected side includes at least a non-volatile memory and the network side includes at least a volatile memory.

37. The microchip of claim 18, wherein said microchip is configured to enable at least one network user to utilize at least one of said network side processing units located in at least one said separate hardware protected compartment located in said network side.

38. A computer configured for direct personal use by an individual, comprising:

at least a primary internal hardware firewall configured to protect a hardware protected side of the computer'"'"'s hardware from a network side of the computer, said network side is not protected by said primary internal hardware firewall,

at least one microprocessor and at least a non-volatile memory is located within said hardware protected side;

one or more of said microprocessors with at least a volatile memory and at least one said network communications component are located within said network side, said network side being configured for connection to the network of computers and being located between said first internal hardware firewall and a wired or wireless network connection to said network of computers;

said one or more network side microprocessors being separate components from said one or more network communications components, and both said network side microprocessors and said network communications components being separate from said primary internal hardware firewall;

said primary internal firewall by its location does not restrict access by the network to said network side of the computer, thereby enabling network operations between the computer and the network to be conducted in said network side using said network side microprocessors of the computer;

at least a secondary inner hardware firewall is configured to form at least one separate hardware protected component located in the network side; and

at least one said network side microprocessor with at least a volatile memory is located in said at least one separate hardware protected compartment located in said network side.

39. The computer of claim 38, wherein said at least one microprocessor in said hardware protected side of the computer includes a master controlling device for the computer.

40. The computer of claim 38, wherein said one or more network communications components includes at least a digital signal processor or a modem.

41. The computer of claim 38, wherein said internal hardware firewall denies access by said network to said hardware protected side of the computer.

42. The computer of claim 38, wherein the computer is a node in an array of other computers linked together as nodes to form a server and/or a mainframe and/or a supercomputer.

43. The computer of claim 38, wherein said computer is configure to enable at least one network user to utilize at least one of said network side microprocessors located in at least one said separate hardware protected compartment located in said network side.

44. A microchip configured for direct personal use by an individual, comprising:

at least one primary internal hardware firewall is configured to protect a hardware protected side of the microchip'"'"'s hardware from a network side of the microchip, said network side is not protected by said primary internal hardware firewall,

a master controlling unit of said microchip is located within said hardware protected side;

a microprocessor including one or more of the processing units located within said network side, said network side being configured for connection to the network of computers and being located between said first internal hardware firewall and a wired or wireless network connection to said network of computers;

said one or more network side processing units being separate from said primary internal hardware firewall;

said primary internal firewall by its location does not restrict access by the network to said network side of the microchip, thereby enabling network operations between the microchip and the network to be conducted in said network side using said network side processing units of the microchip;

at least one secondary inner hardware firewall is configured to form at least one separate hardware protected compartment located in said network side; and

at least one said network side processing unit is located in said at least one separate hardware protected compartment located in said network side.

45. The microchip of claim 44, wherein said network side includes one or more network communication components.

46. The microchip of claim 44, wherein the hardware protected side includes at least a non-volatile memory and the unprotected side includes at least a volatile memory.