Data security method and device for computer modules

• US RE41,092 E1
• Filed: 02/10/2005
• Issued: 01/26/2010
• Est. Priority Date: 05/14/1999
• Status: Expired due to Term

• Current Assignee: Acqis LLC (Acqis Technology, Inc.)
• Original Assignee: Acqis Technology, Inc.
• Inventors: Chu, William W. Y.
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US11/056,604
• Time in Patent Office: 1,811 Days
• Field of Search: 726 2- 9, 726 16- 21, 726 26- 30, 713/189, 713192-194, 713182-183
• US Class Current: 726/2
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A security method for an attached computer module in a computer system. The security method reads a security identification number in an attached computer module and compares it to a security identification number in a console, which houses the attached computer module. Based upon a relationship between these numbers, a security status is selected. The security status determines the security level of operating the computer system.

Claims

1. A security protection method for a computer module, said method comprising:

inserting the computer module into a console;

initiating a security program in said module to read a security identification of said console and to read a security identification of said computer module, wherein said step of initiating reads said security identification of said computer module from a flash memory device;

determining of a predetermined security status based upon a relationship of said console identification and said computer module identification;

selecting said predetermined security status; and

operating said computer module based upon said security status.

2. The method of claim 1 wherein said predetermined security status disables a network access to the computer module.

3. The method of claim 1 wherein said predetermined security status disables a secondary storage of information from said computer module to substantially prevent information to be transferred from a memory of the computer module to said secondary storage.

4. The method of claim 1 wherein said security program is provided in a system BIOS.

5. The method of claim 1 wherein said step of initiating reads said security identification of said computer module from a flash memory device.

6. The method of claim 1 wherein said step of initiating reads said security identification of said console from a flash memory device.

7. The method of claim 1 wherein said console is selected from a desktop home computing device, an office desktop computing device, a mobile computing device, a television sot-top computing device, and a co-worker'"'"'s computing device.

8. A system for secured information transactions, the system comprising:

a console comprising a peripheral controller housed in the console;

a user identification input device coupled to the peripheral controller, the user identification input device being provided for user identification data, wherein the user identification input device is a finger print reader; and

an attached computer module coupled to the console, the attached computer module comprising a security memory device stored with the user identification data.

9. The system of claim 8 wherein the user identification input device is a finger print reader.

10. The system of claim 8 A system for secured information transactions, the system comprising:

a console comprising a peripheral controller housed in the console;

a user identification input device coupled to the peripheral controller, the user identification input device being provided for user identification data, wherein the user identification input device is a voice processing device; and

an attached computer module coupled to the console, the attached computer module comprising a security memory device stored with the user identification data.

11. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing a computer module, the module comprising a connection program;

inserting the computer module into a computer console, the computer console having access to a network;

receiving connection information from the computer console;

configuring the connection program to adapt to the connection information; and

establish a connection between the computer module and a server coupled to the network.

12. The method of claim 11 wherein the connection information comprises a connection protocol for providing the connection.

13. The method of claim 12 wherein the connection protocol is selected from TCP/IP, or mobile IP.

14. A security protection method for a computer module, said method comprising:

inserting the computer module into a console;

initiating a security program in said module to read a security identification of said console and to read a security identification of said computer module, wherein initiating reads said security identification from a flash memory device;

determining of a security status based upon a relationship of said console identification and said computer module identification;

selecting said security status; and

operating said computer module based upon said security status.

15. A system for secured information transactions, the system comprising:

a console comprising a network communication controller housed in the console;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console, the attached computer module comprising a mass storage unit, a graphics subsystem, an interface controller coupled to the console, and a security memory device stored with the user identification data, wherein the security memory device comprises a flash memory, and wherein all data from the computer module passes through the interface controller to reach any device in the console.

16. The system of claim 15 wherein said security memory device is further stored with a security program, wherein said security program can at least one of activate different levels of password protection, and control different levels of access privilege.

17. The system of claim 15 wherein the flash memory device includes codes to provide password protection.

18. A system for secured information transactions, the system comprising:

a console comprising a network communication controller housed in the console;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console, the attached computer module comprising a mass storage unit comprising a hard disk drive including a computer code for implementing a security program, a graphics subsystem, and a security memory device stored with the user identification data.

19. The system of claim 18 wherein the security memory device comprises flash memory includes a code to provide password protection.

20. The system of claim 18 wherein said security program can at least one of activate different levels of password protection, and control different levels of access privilege.

21. A modular system for information transactions, the system comprising:

a console comprising a first interface controller housed in the console and coupled with an interface connector; and

an attached computer module coupled to the console through the interface connector and comprising a mass storage unit, a graphics subsystem, a security program, and a second interface controller coupled to the first interface controller, wherein the computer module further comprises a security memory device stored with security identification data, wherein the security memory device comprises a flash memory including a code to provide password protection, and wherein all data transferred from the mass storage unit to the console passes through the first and second interface controllers.

22. The system of claim 21 wherein the attached computer module further comprises a tamper resistant enclosure.

23. The system of claim 21 wherein the attached computer module can be inserted into the console to create a “

plug and play”

operation.

24. The system of claim 21 wherein the attached computer module further comprises a microcontroller.

25. A modular system for secured information transactions, the system comprising:

a computer console comprising a first interface controller housed in the console and coupled to an interface connector;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console, the attached computer module comprising a security program providing password protection, a mass storage unit comprising a flash memory device, a graphics subsystem, and a second interface controller coupled to the first interface controller, wherein the user identification data passes to the computer module through first and second interface controllers.

26. The system of claim 25 wherein the attached computer module further comprises a central processing unit and a graphics subsystem.

27. A system for secured information transactions, the system comprising:

a computer console comprising a network communication controller housed in the console;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console, the attached computer module comprising a central processing unit, a graphics subsystem, an interface controller coupled to the console, and a security memory device stored with the user identification data, wherein the security memory device comprises a flash memory including codes to provide password protection.

28. The system of claim 27 wherein said attached computer module inserts into a bay of the console to form a functional computer.

29. The system of claim 27 wherein the attached computer module can be inserted into the console to create a “

plug and play”

operation.

30. A system for information transactions, the system comprising:

a computer console comprising a network communication controller housed in the console; and

an attached computer module coupled to the console, the attached computer module comprising a central processing unit, a graphics subsystem, a security program configured to at least one of activate different levels of password protection and control different levels of access privilege, and an interface controller coupled to the console, wherein all computer module network data passes through the console.

31. The system of claim 30 wherein the console further comprises a user identification input device coupled to the console, the user identification input device being provided for user identification data, wherein the user identification data passes from the console through said interface controller to the attached computer module.

32. A security protection method for a computer module comprising a mass storage unit and a graphics subsystem, said method comprising:

inserting the computer module into a console comprising a network communication controller;

storing security information data with a security memory device of the computer module, by storing codes in a flash memory to provide password protection for said attached computer module;

initiating a security program in said module to read a security identification of said console and to read a security identification of said computer module;

determining of a predetermined security status based upon a relationship of said console identification and said computer module identification;

selecting said predetermined security status; and

operating said computer module based upon said security status.

33. The method of claim 32 wherein a user identification input device coupled to the console provides user security identification information to the console.

34. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing an attached computer module, the module comprising a connection program, an interface controller and a security identification;

storing security identification data in a security memory device of the computer module;

coupling the computer module to a computer console through the interface controller, the computer console comprising a network communication device having access to a network;

receiving connection information from the console through the interface controller;

receiving the security identification through the interface controller;

transmitting video information to the console from a graphics subsystem of the attached computer module;

configuring the connection program to adapt to the connection information.

35. The method of claim 34 wherein the attached computer module further comprises of a micro-controller coupled to the interface controller.

36. The method of claim 34 wherein the attached computer module further comprises a hard disk drive containing a security program.

37. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing an attached computer module, the module comprising a connection program, a graphics subsystem, an interface controller and a security memory device stored with the user identification data;

coupling the computer module to a computer console through the interface controller, the computer console comprising a network communication device having access to a network;

receiving connection information from the console through the interface controller;

receiving the user identification data through the interface controller;

configuring the connection program to adapt to the connection information, and establishing console access to the computer module, wherein all network data transaction of the attached computer module passes through the console.

38. The method of claim 37 further comprising providing password protection for said computer module from a security program stored on a hard disk drive of the computer module.

39. The method of claim 37 further comprising providing password protection for said computer module from codes stored in a flash memory of the computer module.

40. The method of claim 37 further comprising providing to the network with security, credit card information stored in the attached computer module.

41. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing an attached computer module, the module comprising a connection program and an interface controller;

storing security information in a flash memory device of the computer module;

inserting the computer module into a computer console to form a functional computer to create a “

plug and play”

operation, the computer console comprising a second interface controller coupled to the first interface controller upon insertion, and the console having access to an external network;

receiving connection information from the console through the interface controller;

configuring the connection program to adapt to the connection information, and establishing the computer module connection to the external network through said interface controllers.

42. The method of claim 41 further comprising providing password protection to the computer module from codes stored in a flash memory device of the computer module.

43. The method of claim 41 further comprising providing to the network with security, credit card information from the computer module.

44. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing an attached computer module, the module comprising a connection program and an interface controller;

inserting the computer module into a computer console to form a functional computer to create a “

plug and play”

operation, the computer console comprising a second interface controller coupled to the first interface controller upon insertion, and the console having access to an external network;

receiving connection information from the console through the interface controller;

configuring the connection program to adapt to the connection information, and establishing the computer module connection to the external network through said interface controllers, the method further comprising providing password protection for said computer module from a security program on a hard disk drive of the computer module.

45. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing an attached computer module, the module comprising an enclosure, a graphics subsystem, a connection program and a first interface controller;

coupling the computer module to a computer console, the computer console comprising a second interface controller coupled to the first interface controller upon insertion, and the console having access to an external network;

receiving connection information from the console through the interface controllers;

configuring the connection program to adapt to the connection information, and establishing the computer module access to the external network, the method further comprising providing password protection for said computer module from codes stored in a flash memory device of the computer module.

46. The method of claim 45 wherein providing the attached computer module further comprises:

inserting the computer module into the console to create a “

plug and play”

operation, and

powering on the computer module by the console.

48. The method of claim 45 further comprising providing with security the external network, credit card information of the attached computer module.

47. A method for operating a module computer into one of a plurality of network systems, the method comprising:

providing an attached computer module, the module comprising an enclosure, a graphics subsystem, a connection program and a first interface controller;

coupling the computer module to a computer console, the computer console comprising a second interface controller coupled to the first interface controller upon insertion, and the console having access to an external network;

providing password protection for said computer module from codes stored in a flash memory device of the computer module;

receiving connection information from the console through the interface controllers;

configuring the connection program to adapt to the connection information, and establishing the computer module access to the external network, the method further comprising providing password protection for said computer module from a security program of a hard disk drive of said computer module.

49. A method for operating a modular computer into a network, the method comprising:

providing a computer module, the module comprising a central processing unit, a graphics subsystem and a connection program;

inserting the computer module into a computer console to create a “

plug and play”

operation, the computer console comprising a network communication controller having access to an external network;

receiving connection information from the computer console;

configuring the connection program to adapt to the connection information; and

establishing a connection between the computer module and a server coupled to the network in the plug and play operation, the method further comprising providing password protection for said computer module from codes stored in a flash memory device of the computer module.

50. The method of claim 49 wherein the computer module further comprising:

managing a user interface with a high-level security program; and

accessing data content of the computer module utilizing a program security ID.

51. The method of claim 49 wherein the computer module further comprises security identification, the method further comprising

providing the security identification to the security program,

determining a predetermined security status, and controlling different levels of access privilege to said attached computer module.

52. A system for secured information transactions, the system comprising:

a console comprising a network communication controller housed in the console and coupled to an external network;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console, the attached computer module comprising a central processing unit, a graphics subsystem, and a mass storage unit storing a security program and a user identification datum,

wherein the security program is configured to receive the user identification datum from the input device, match the stored user identification data, and permit external access to the computer module, and

wherein the security program is further configured to at least one of activate different levels of password protection, and control different levels of access privilege.

53. The system of claim 52 wherein the console further comprises a Read-only removable storage medium.

54. A system for secured information transactions, the system comprising:

a console comprising a network communication controller housed in the console and coupled to an external network;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console, the attached computer module comprising a central processing unit, a graphics subsystem, an interface controller coupled to the console, and a mass storage unit storing a security program and a user identification data, wherein the attached computer module further comprises a flash memory device including codes for password protection,

wherein the security program receives the user identification data from the input device, matches the stored user identification data and permits external data transfer to the computer module through the interface controller.

55. The system of claim 54 wherein all peripheral data transaction of the attached computer module passes through said interface controller.

56. A system for secured information transactions, the system comprising:

a computer console comprising a first interface controller housed in the console, and a LAN communication controller;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console through the interface controller, the attached computer module comprising a second interface controller couples to the first interface controller, a CPU, a graphics subsystem, and a mass storage unit stored with the user identification data, the mass storage unit comprising a flash memory device including codes to provide password protection, wherein all LAN communication of the computer module passes through the console.

57. The system of claim 56 wherein the attached computer module can be inserted into the console to create a “

plug and play”

operation.

58. The system of claim 56 wherein the attached computer module further comprises a tamper resistant enclosure.

59. A system for secured information transactions, the system comprising:

a computer console comprising an interface controller housed in the console, and a LAN communication controller;

a user identification input device coupled to the console, the user identification input device being provided for user identification data; and

an attached computer module coupled to the console through the interface controller, the attached computer module comprising a graphics subsystem, a CPU module and a mass storage unit, wherein all network data transaction of the computer module passes through the console, and wherein the mass storage unit comprises a hard disk drive containing a security program to provide password protection of said computer module.

60. A method for operating an attached computer module, the method comprising:

providing an attached computer module, the module comprising a security program, a user password, a first interface controller coupled to an interface connector;

coupling the computer module to a computer console, the computer console comprising a second interface controller compatible to the first interface controller, and a LAN communication controller coupled to an external network;

establishing communication between the two interface controllers;

receiving the user password from the console;

activating the security program to match the user password; and

establishing the console access to the computer module, the method further comprising providing password protection for said computer module from codes contained in a flash memory device of the computer module.

61. The method of claim 60 wherein the attached computer module receives power from the console to form a functional computer.

62. The method of claim 60 wherein all data transaction of the attached computer module passes through said interface controllers.