Computer or microchip with a master controller connected by a secure control bus to networked microprocessors or cores

• US 8,869,260 B2
• Filed: 02/15/2013
• Issued: 10/21/2014
• Est. Priority Date: 01/26/2010
• Status: Active Grant

• Current Assignee: Frampton E. Ellis
• Original Assignee: Frampton E. Ellis
• Inventors: Ellis, Frampton E.
• Primary Examiner(s): SIMITOSKI, MICHAEL J
• Application Number:
  US13/768,582
• Publication Number:
  US 20130160106A1
• Time in Patent Office: 613 Days
• Field of Search: 726/11, 726/22, 726/30, 713/153, 713/154, 713/194
• US Class Current: 726/11
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212

Abstract

A computer or microchip securely controlled through a private network including a connection to a network of computers including the Internet; a separate connection to at least a private network of computers located in a hardware protected area of said computer or microchip, a first microprocessor, core or processing unit configured to connect to the connection to the network of computers including the Internet; a master controlling device for the computer or microchip located in the hardware protected area; and a secure control bus configured to connect at least said master controlling device with said microprocessor, core or processing unit, and isolated from input from the network and components other than said master controlling device. The master controlling device securely controls an operation executed by the microprocessor, core or processing unit, with secure control being provided through the private network to the private network connection through the secure control bus.

Claims

1. A computer or microchip configured to be securely controlled, said computer or microchip comprising:

at least a first microprocessor, core or processing unit configured to connect to a network of computers including the Internet;

at least a master controlling device for the computer or microchip wherein said master controlling device comprises at least a second microprocessor, core or processing unit; and

a secure control bus that connects at least said master controlling device with at least said at least said first microprocessor, core or processing unit, and said secure control bus being isolated from input from said network of computers including the Internet and input from components of said computer or microchip other than said master controlling device; and

said master controlling device being configured for securely controlling at least one operation executed by at least one said microprocessor, core or processing unit, said secure control being provided by said master controlling device via said secure control bus.

2. The computer or microchip of claim 1, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus provides and ensures direct preemptive control by said master controlling device over said unprotected public unit.

3. The computer or microchip of claim 2, wherein said at least a second microprocessor, core or processing unit is a general purpose microprocessor, core or processing unit.

4. The computer or microchip of claim 2, wherein said master controlling device comprises a non-volatile memory.

5. The computer or microchip of claim 2, wherein said secure control bus is configured such that it cannot be affected, interfered with, altered or written to, or superseded by any part of said unprotected public unit or by input from said network of computers including the Internet.

6. The computer or microchip of claim 2, wherein said master controlling device controls through said secure control bus one or more secondary controllers that are located on said secure control bus.

7. The computer or microchip of claim 6, wherein said one or more secondary controllers are located in the unprotected public unit.

8. The computer or microchip of claim 7, wherein said one or more secondary controllers are used to control one or more of said at least one microprocessor, core or processing unit located in said unprotected public unit.

9. The computer or microchip of claim 8, wherein said one or more secondary controllers are integrated with one or more of said at least one microprocessor, core or processing unit located in said unprotected public unit.

10. The computer or microchip of claim 2, wherein said secure control bus is wired, wireless or a channel.

11. The computer or microchip of claim 2, wherein said secure control bus provides a connection to control a firewall located on a periphery of said computer or microchip.

12. The computer or microchip of claim 2, wherein said secure control bus connects at least said master controlling device with at least two of said microprocessors, cores or processing units located in said unprotected public unit.

13. The computer or microchip of claim 2, wherein said secure control bus connects at least said master controlling device with at least six of said microprocessors, cores or processing units located in said unprotected public unit.

14. The computer or microchip of claim 2, wherein said at least a first microprocessor, core or processing unit is a general purpose microprocessor, core or processing unit.

15. A computer or microchip configured to be securely controlled through a private network of computers, said computer or microchip comprising:

at least one network connection for connection to a network of computers including the Internet;

at least a separate private network connection for connection to at least said private network of computers, at least said separate private network connection being located in a hardware protected area of said computer or microchip,

at least a first microprocessor, core or processing unit configured to connect to said at least one network connection for connection to network of computers including the Internet;

at least a master controlling device for the computer or microchip located in said hardware protected area wherein said master controlling device comprises at least a second microprocessor, core or processing unit; and

a secure control bus that connects at least said master controlling device with said at least a first microprocessor, core or processing unit, said secure control bus being isolated from input from said network of computers including the Internet and input from components of said computer or microchip other than said master controlling device; and

said master controlling device being configured for securely controlling at least one operation executed by said at least a first microprocessor, core or processing unit, said secure control being provided by said master controlling device through said private network of computers to said separate private network connection in said hardware protected area and through said secure control bus.

16. The computer or microchip of claim 15, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus provides and ensures direct preemptive control by said master controlling device over said unprotected public unit.

17. The computer or microchip of claim 16, wherein said at least said second microprocessor, core or processing unit is a general purpose microprocessor, core or processing unit.

18. The computer or microchip of claim 16, wherein said master controlling device comprises a non-volatile memory.

19. The computer or microchip of claim 16, wherein said secure control bus is configured such that it cannot be affected, interfered with, altered or written to, or superseded by any part of said unprotected public unit or by input from said network of computers including the Internet.

20. The computer or microchip of claim 16, wherein said master controlling device controls through said secure control bus one or more secondary controllers that are located on said secure control bus.

21. The computer or microchip of claim 20, wherein said one or more secondary controllers are located in the unprotected public unit.

22. The computer or microchip of claim 21, wherein said one or more secondary controllers are used to control one or more of said at least a first microprocessor, core or processing unit located in said unprotected public unit.

23. The computer or microchip of claim 22, wherein said one or more secondary controllers are integrated with one or more of said at least a first microprocessor, core or processing unit located in said unprotected public unit.

24. The computer or microchip of claim 16, wherein said secure control bus is wired, wireless or a channel.

25. The computer or microchip of claim 16, wherein said secure control bus provides a connection to control a firewall located on a periphery of said computer or microchip.

26. The computer or microchip of claim 16, wherein said secure control bus connects at least said master controlling device with at least two of said at least a first microprocessor, core or processing unit located in said unprotected public unit.

27. The computer or microchip of claim 16, wherein said secure control bus connects at least said master controlling device with at least six of said at least a first microprocessor, core or processing unit located in said unprotected public unit.

28. The computer or microchip of claim 16, wherein said at least a first microprocessor, core or processing unit is a general purpose microprocessor, core or processing unit.

29. A computer or microchip configured to be securely controlled, said computer or microchip comprising:

at least one microprocessor, core or processing unit configured to connect to a network of computers including the Internet;

at least a master controlling device for the computer or microchip; and

a secure control bus that connects at least said master controlling device with at least said at least one microprocessor, core or processing unit, and said secure control bus being isolated from input from said network of computers including the Internet and input from components of said computer or microchip other than said master controlling device; and

said master controlling device being configured for securely controlling at least one operation executed by at least one said microprocessor, core or processing unit, said secure control being provided by said master controlling device via said secure control bus.

30. The computer or microchip of claim 29, wherein said master controlling device comprises a non-volatile memory.

31. The computer or microchip of claim 29, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus provides and ensures direct preemptive control by said master controlling device over said unprotected public unit.

32. The computer or microchip of claim 31, wherein said at least one microprocessor, core or processing unit is a general purpose microprocessor, core or processing unit.

33. The computer or microchip of claim 29, wherein said secure control bus is configured such that it cannot be affected, interfered with, altered or written to, or superseded by any part of said unprotected public unit or by input from said network of computers including the Internet.

34. The computer or microchip of claim 29, wherein said master controlling device controls through said secure control bus one or more secondary controllers that are located on said secure control bus.

35. The computer or microchip of claim 34, wherein said one or more secondary controllers are located in the unprotected public unit.

36. The computer or microchip of claim 35, wherein said one or more secondary controllers are used to control one or more of said at least one microprocessor, core or processing unit located in said unprotected public unit.

37. The computer or microchip of claim 36, wherein said one or more secondary controllers are integrated with one or more of said at least one microprocessor, core or processing unit located in said unprotected public unit.

38. The computer or microchip of claim 29, wherein said secure control bus is wired, wireless or a channel.

39. The computer or microchip of claim 29, wherein said secure control bus provides a connection to control a firewall located on a periphery of said computer or microchip.

40. The computer or microchip of claim 29, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus connects at least said master controlling device with at least two of said microprocessors, cores or processing units located in said unprotected public unit.

41. The computer or microchip of claim 29, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus connects at least said master controlling device with at least six of said microprocessors, cores or processing units located in said unprotected public unit.

42. A computer or microchip configured to be securely controlled through a private network, said computer or microchip comprising:

at least one network connection for connection to a network of computers including the Internet;

at least a separate private network connection for connection to at least said private network of computers, at least said separate private network connection being located in a hardware protected area of said computer or microchip,

at least one microprocessor, core or processing unit configured to connect to said at least one connection for connection to said network of computers including the Internet;

at least a master controlling device for the computer or microchip located in said hardware protected area; and

a secure control bus that connects at least said master controlling device with at least said at least one microprocessor, core or processing unit, said secure control bus being isolated from input from said network of computers including the Internet and input from components of said computer or microchip other than said master controlling device; and

said master controlling device being configured for securely controlling at least one operation executed by at least one said microprocessor, core or processing unit, said secure control being provided by said master controlling device through said private network to said separate private network connection in said hardware protected area and through said secure control bus.

43. The computer or microchip of claim 42, wherein said master controlling device comprises a non-volatile memory.

44. The computer or microchip of claim 42, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus provides and ensures direct preemptive control by said master controlling device over said unprotected public unit.

45. The computer or microchip of claim 44, wherein said at least one microprocessor, core or processing unit is a general purpose microprocessor, core or processing unit.

46. The computer or microchip of claim 42, wherein said secure control bus is configured such that it cannot be affected, interfered with, altered or written to, or superseded by any part of said unprotected public unit or by input from said network of computers including the Internet.

47. The computer or microchip of claim 42, wherein said master controlling device controls through said secure control bus one or more secondary controllers that are located on said secure control bus.

48. The computer or microchip of claim 47, wherein said one or more secondary controllers are located in the unprotected public unit.

49. The computer or microchip of claim 48, wherein said computer or microchip further comprises an unprotected public unit and said one or more secondary controllers are used to control one or more of said at least one microprocessor, core or processing unit located in said unprotected public unit.

50. The computer or microchip of claim 49, wherein said one or more secondary controllers are integrated with one or more of said at least one microprocessor, core or processing unit located in said unprotected public unit.

51. The computer or microchip of claim 42, wherein said secure control bus is wired, wireless or a channel.

52. The computer or microchip of claim 42, wherein said secure control bus provides a connection to control a firewall located on a periphery of said computer or microchip.

53. The computer or microchip of claim 42, wherein said computer or microchip further comprises an unprotected public unit and said secure control connects at least said master controlling device with at least two of said microprocessors, cores or processing units located in said unprotected public unit.

54. The computer or microchip of claim 42, wherein said computer or microchip further comprises an unprotected public unit and said secure control bus connects at least said master controlling device with at least six of said microprocessors, cores or processing units located in said unprotected public unit.