Method and apparatus for preventing unauthorized access to information stored in a non-volatile memory

• US 8,646,094 B2
• Filed: 12/07/2011
• Issued: 02/04/2014
• Est. Priority Date: 12/07/2011
• Status: Active Grant

• Current Assignee: OWL Cyber Defense Solutions LLC
• Original Assignee: Owl Computing Technologies, Inc.
• Inventors: Staubly, Steven
• Primary Examiner(s): Revak, Christopher
• Assistant Examiner(s): Savenkov, Vadim
• Application Number:
  US13/314,167
• Publication Number:
  US 20130152206A1
• Time in Patent Office: 790 Days
• Field of Search: 726/26, 726 34- 36, 713/194
• US Class Current: 726/26
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A communications device for ensuring secure data transfer provided having an interface device for controlling data transfer, an integrated circuit coupled to the interface device and having a processor, a non-volatile memory for storing at least program code for the processor, a volatile memory, an input pin and an output pin; and an electrical conductor which electrically connects the input pin and the output pin. The electrical conductor passes through an external portion of the enclosure, e.g., a slot, which allows a user to easily sever the electrical conductor. In operation, a portion of the program code detects when the electrical conductor is severed and causes the program code in the non-volatile memory to be erased, data transfer via the interface device to be disabled, and power to the integrated circuit cut off to ensure that all information in volatile memory is erased.

Claims

1. A communications device for ensuring secure data transfer, the communications device provided in an enclosure, comprising:

an interface device for controlling data transfer;

an integrated circuit coupled to the interface device and having a processor, a non-volatile memory for storing at least program code for the processor, a volatile memory, an input pin and an output pin;

an electrical conductor which electrically connects only the input pin and the output pin and which is not part of a pathway for the secure data transfer, wherein the electrical conductor is positioned in an externally accessible portion of the enclosure to allow a user to easily sever the electrical conductor;

wherein a portion of the program code detects when the electrical conductor is severed and causes the program code in the non-volatile memory to be erased;

wherein the interface device and the integrated circuit are positioned within a send only circuit portion, wherein the interface device is coupled to a low security host, the communications device further comprising;

a second interface device for controlling data transfer to a high security host;

a second integrated circuit coupled to the second interface device and having a processor, a non-volatile memory for storing at least program code for the processor, a volatile memory, an input pin and an output pin;

a second electrical conductor which electrically connects only the input pin and the output pin on the second integrated circuit and which is not part of a pathway for the secure data transfer, wherein the electrical conductor is positioned in an externally accessible portion of the enclosure to allow a user to easily sever the second electrical conductor; and

wherein a portion of the program code in the second integrated circuit detects when the second electrical conductor is severed and causes the program code in the non-volatile memory in the second integrated circuit to be erased;

wherein the second interface device and the second integrated circuit are positioned within a receive-only circuit portion.

2. The communications device of claim 1, further comprising a one-way data link coupling the send-only circuit portion to the receive-only circuit portion.

3. The communications device of claim 2, wherein the one-way data link comprises a data-diode.

4. The communications device of claim 2, wherein the one-way data link comprises an optical emitter in the send-only circuit portion, a photo detector in the receive-only circuit portion and an optical link coupling the optical emitter and the photo detector which passes from the send-only circuit portion to the receive-only circuit portion.