Computers or microchips with a primary internal hardware firewall and with multiple internal harware compartments protected by multiple secondary interior hardware firewalls

• US 8,892,627 B2
• Filed: 03/03/2013
• Issued: 11/18/2014
• Est. Priority Date: 11/29/1996
• Status: Expired due to Fees

• Current Assignee: Frampton E. Ellis
• Original Assignee: Frampton E. Ellis
• Inventors: Ellis, Frampton E.
• Primary Examiner(s): STRANGE, AARON N
• Application Number:
  US13/783,351
• Publication Number:
  US 20130179963A1
• Time in Patent Office: 625 Days
• Field of Search: 709/201, 709/209, 709/250, 726/11, 712/10
• US Class Current: 709/201
• CPC Class Codes: A01N 25/30 characterised by the surfactants
• CPC Class Codes: G06F 11/1666 where the redundant component is memory or memory area
• CPC Class Codes: G06F 11/30 Monitoring
• CPC Class Codes: G06F 15/76 Architectures of general purpose stored program computers with program plugboard G06F15/08; multicomputers G06F15/16
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 9/5072 Grid computing
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A computer or microchip configured for communication with a network of computers and including a microprocessor configured to be a master controlling device, and a primary internal hardware firewall separating a protected side from a network side configured for connection to a network of computers including the Internet. One or more microprocessors, at least a volatile memory and network communications components are located within the network side. The network side microprocessors, network communications components and the primary firewall are separate components. The primary firewall by its location does not restrict access by the network to the network side, thereby not restricting network operations conducted in the network side. One or more secondary internal hardware firewalls form one or more separate hardware protected compartments. The primary firewall keeps the protected side accessible only to a personal user. The computer or microchip can be a personal computer.

Claims

1. A personal computer configured for control by at least one personal user and for communication to a network of computers including the Internet, said computer comprising:

at least one primary internal hardware firewall configured to protect a hardware protected side of the computer'"'"'s hardware from a network side of the computer'"'"'s hardware that is not protected by said at least one primary internal hardware firewall;

at least one microprocessor and at least a non-volatile memory located within said hardware protected side;

one or more network side microprocessors with at least a volatile memory and network communications components located within said network side, said network side being configured for connection to the network of computers including the Internet and being located between at least one said primary internal hardware firewall and a wired or wireless network connection to said network of computers including the Internet;

said one or more network side microprocessors being separate components from said network communications components, and

said network communication components and said one or more network side microprocessors being separate from said at least one primary internal hardware firewall;

at least one said primary internal firewall by its internal location not restricting access to the network side by the network of computers including the Internet, thereby not restricting network operations of the computer which are conducted in said network side using said network side microprocessors; and

at least a first secondary internal hardware firewall configured to form either;

(A) a first separate hardware protected compartment located in said network side, said first separate hardware protected compartment having at least one said network side microprocessor with at least a volatile memory located therein, or

(B) a first separate hardware protected compartment located in said hardware protected side; and

at least one said primary internal hardware firewall being configured such that said hardware protected side is kept accessible only to a personal user of said computer.

2. The computer of claim 1, further comprising a microprocessor configured to be master controlling device of said computer.

3. The computer of claim 1, further comprising a microprocessor configured to be a master controlling device of said computer, and wherein said master controlling device is located within the hardware protected side of said computer.

4. The computer of claim 1, wherein said first secondary internal hardware firewall is configured such that said first separate hardware protected compartment is kept accessible only to a personal user of said computer.

5. The computer of claim 4, further comprising a third said secondary internal hardware firewall configured to form a third said separate hardware protected compartment located in said second separate hardware protected compartment;

and

wherein said third separate hardware protected compartment is located in the hardware protected side; and

said third secondary internal hardware firewall is configured such that said third separate hardware protected compartment is kept accessible only to a personal user of said computer.

6. The computer of claim 5, further comprising a fourth said secondary internal hardware firewall configured to form a fourth said separate hardware protected compartment located in said third separate hardware protected compartment;

and

wherein said fourth separate hardware protected compartment is located in the hardware protected side; and

said fourth secondary internal hardware firewall is configured such that said fourth separate hardware protected compartment is kept accessible only to a personal user of said computer.

7. The computer of claim 6, further comprising at least four additional said secondary internal hardware firewalls configured to form at least four additional said separate hardware protected compartments located in said network side and/or said hardware protected side;

and

at least four additional said hardware protected side microprocessors, each with at least a volatile memory and each located in a separate one of said at least four additional separate hardware protected compartments.

8. The computer of claim 6, further comprising a master controlling device located in said first, second, third, or fourth separate hardware protected compartment located in said hardware protected side.

9. The computer of claim 1, further comprising a second said secondary internal hardware firewall configured to form a second said separate hardware protected compartment located in said first separate hardware protected compartment;

and

wherein said second separate hardware protected compartment is located in the hardware protected side; and

said second secondary internal hardware firewall is configured such that said second separate hardware protected compartment kept accessible only to a personal user of said computer.

10. The computer of claim 1, further comprising a hardware memory component with an internal hardware firewall configured to protect a hardware protected side of the hardware memory component from a network side of the hardware memory component, said network side of said hardware memory component not being protected by said internal hardware firewall of said hardware memory component;

and

said internal hardware firewall of said hardware memory component is configured such that said hardware protected side of said hardware memory component is kept accessible only to a personal user of said computer.

11. The computer of claim 1, wherein the network operations of the computer are conducted only in the network side using said one or more network side microprocessors.

12. The computer of claim 1, wherein the computer is a node in an array of computers linked together as nodes to form a server and/or a mainframe and/or a supercomputer.

13. The computer of claim 12, wherein said computer is configured such that at least one network user utilizes at least said network side microprocessor located in said separate hardware protected compartment located in said network side when performing said network operations of the computer.

14. The computer of claim 1, further comprising a memory component of the computer located in said separate hardware protected compartment that is located in the hardware protected side of the computer'"'"'s hardware, said separate hardware protected compartment being protected at least by a secondary internal hardware firewall.

15. The computer of claim 1, further comprising at least three additional said separate hardware protected compartments, each said additional separate hardware protected compartment being protected by at least a separate secondary internal hardware firewall and wherein at least a portion of files of at least one operating system of the computer is located inside each of said at least three additional said separate hardware protected compartments.

16. The computer of claim 1, further comprising at least three additional said separate hardware protected compartments, each said additional separate hardware protected compartment being protected by at least a separate secondary internal hardware firewall and wherein at least a portion of the files of at least one software application of the computer is located inside each of said at least three additional said separate hardware protected compartments.

17. The computer of claim 1, further comprising at least three additional said separate hardware protected compartments, each said additional separate hardware protected compartment being protected by at least a separate secondary inner hardware firewall and wherein at least a portion of the files of at least one user of the computer is located inside each of said at least three additional said separate hardware protected compartments.

18. A computer or microchip configured for communication with a network of computers including the Internet, said computer or microchip comprising:

a microprocessor configured to be a master controlling device of said computer or microchip;

at least one primary internal hardware firewall configured to protect a hardware protected side of the computer'"'"'s hardware or the microchip'"'"'s hardware from a network side of the computer'"'"'s hardware or the microchip'"'"'s hardware that is not protected by said at least one primary internal hardware firewall,

at least one microprocessor and at least a non-volatile memory located within said hardware protected side;

one or more network side microprocessors with at least a volatile memory and network communications components located within said network side, said network side being configured for connection to the network of computers including the Internet and being located between at least one said primary internal hardware firewall and a wired or wireless network connection to said network of computers including the Internet;

said one or more network side microprocessors being separate components from said network communications components, and

said network side microprocessors and said network communication components being separate from said at least one primary internal hardware firewall;

at least one said primary internal hardware firewall by its internal location not restricting access by the network of computers including the Internet to the network side, thereby not restricting network operations of the computer or microchip, which are conducted in said network side using said network side microprocessors; and

at least a first secondary internal hardware firewall configured to form either;

(A) a first separate hardware protected compartment located in said network side, said first separate hardware protected compartment having at least one said network side microprocessor with at least a volatile memory located therein, or

(B) a first separate hardware protected compartment located in said hardware protected side; and

at least one said primary internal hardware firewall being configured such that said protected side is kept accessible only to a personal user of said computer or microchip.

19. The computer or microchip of claim 18, wherein said hardware protected side includes said at least one master controlling device of the computer or microchip.

20. The computer or microchip of claim 18, wherein said computer or microchip is configured to be a node in an array of computers or microchips linked together as nodes to form a server and/or a mainframe and/or a supercomputer.

21. The computer of claim 18, wherein said computer comprises a microchip configured for use in a personal computer by at least one individual user, said microchip comprising at least one said microprocessor, at least one said primary internal hardware firewall and at least said first secondary interior hardware firewall.

22. A personal computer located on a microchip, configured for control by at least one personal user, said computer comprising:

at least one primary internal hardware firewall configured to protect a hardware protected side of the computer'"'"'s hardware from a network side of the computer'"'"'s hardware configured for connection to a network of computers, said network side of the computer'"'"'s hardware not being protected by said at least one primary internal hardware firewall;

at least one microprocessor and at least a non-volatile memory located within said hardware protected side;

one or more network side microprocessors with at least a volatile memory located within said network side, said network side being configured for connection to the network of computers and being located between at least one said primary internal hardware firewall and a wired or wireless network connection to said network of computers;

said one or more network side microprocessors being separate from said at least one primary internal hardware firewall;

at least one said primary internal firewall by its internal location not restricting access by the network of computers to the network side, thereby not restricting network operations of the computer which are conducted in said network side using said network side microprocessors; and

at least a first secondary internal hardware firewall configured to form either;

(A) a first separate hardware protected compartment located in said network side, said first separate hardware protect compartment having at least one said network side microprocessor with at least a volatile memory located therein, or

(B) a first separate hardware protected compartment located in said hardware protected side; and

at least one said primary internal hardware firewall being configured such that said protected side is kept accessible only to a personal user of said computer.

23. The personal computer of claim 22, further comprising network communications components located within said network side, said network communications components being separate components from said one or more network side microprocessors and from said at least one primary internal hardware firewall.

24. The personal computer of claim 22, wherein said network of computers includes the Internet.