Security arrangement for and method of rendering microprocessor-controlled electronic equipment inoperative after occurrence of disabling event

• US 4,494,114 A
• Filed: 12/05/1983
• Issued: 01/15/1985
• Est. Priority Date: 12/05/1983
• Status: Expired due to Term

• Current Assignee: International Electronic Technology Corporation
• Original Assignee: International Electronic Technology Corporation
• Inventors: Kaish, Norman
• Primary Examiner(s): Shaw, Gareth D.
• Assistant Examiner(s): ZIMMERMAN, BRIAN A
• Application Number:
  US06/558,115
• Time in Patent Office: 407 Days
• Field of Search: 235/382, 235/382.5, 364/200, 364/900, 364/184, 364/709, 340/63, 340/64, 340/65, 340/517, 340/568, 340/825.31, 340/825.32, 340/825.33, 340/825.34, 340/543, 340/571, 340/652, 340/673
• US Class Current: 340/5.31
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G08B 13/00 Burglar, theft or intruder alarms
• CPC Class Codes: G08B 13/1418 Removal detected by failure in electrical connection between the appliance and a control centre, home control panel or a power supply

Abstract

A lock-out security arrangement for and method of maintaining microprocessor-controlled electronic equipment normally operational until the occurrence of a disabling event, such as physical removal of the equipment from its normal installation, and/or electrical removal of the equipment from a source of electrical power, and thereupon for disabling the equipment after detecting the disabling event and for maintaining the equipment disabled, even after the disabling event has been discontinued, until a code manually entered via a keyboard associated with a microprocessor for controlling the normal operation of the equipment matches a private access code whose identity is protected from external interrogation by reason of being stored in an internal non-volatile memory of the microprocessor. The private access code is preferably selected by and known only to the user, and may be changed to a different private access code at the user'"'"'s option.

Claims

1. A lock-out security arrangment for rendering electronic equipment having a normal operation inoperative after a disabling event has occurred, and for maintaining the equipment inoperative after the disabling event has terminated, comprising:

(a) a microprocessor having an internal, non-volatile, protected memory accessed solely by the microprocessor and protected from interrogation external to the microprocessor, said microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for controlling the normal operation of the equipment, and a security routine for controlling the security of the equipment;

(b) said security routine having means for distinguishing between an initial execution of the security routine and a subsequent execution of the security routine;

(c) means responsive to the initial execution of the security routine, for storing a first code in a secured manner in the internal memory of the microprocessor such that the stored first code is protected from interrogation external to the microprocessor;

(d) code entry means operatively connected to the microprocessor, for entering a second code to the microprocessor;

(e) said security routine having code validity means for comparing the second code entered using the code entry means to the stored first code whose identity is protected from external interrogation;

(f) enabling means responsive to a completed initial execution, or to the subsequent execution, of the security routine, for enabling the microprocessor to execute the operational routine after the first code has been stored in the internal memory of the microprocessor, and for maintaining the equipment normally operational until the disabling event has occurred;

(g) detector means operatively connected to the microprocessor, for detecting when the disabling event has occurred; and

(h) disabling means responsive to the detector means and operatively connected to the microprocessor, for disabling the equipment from normal operation after the disabling event has occurred, said disabling means being further operative for maintaining the equipment disabled, even after the disabling even has terminated, until the second code matches the stored first code.

2. The security arrangement as recited in claim 1, wherein the microprocessor includes an integrated circuit chip in a self-contained housing built into the equipment, said chip having a central processing unit, and said internal memory including a read-only memory in which the program is permanently stored and a read/write random access memory in which the first code is stored;

and wherein the central processing unit, the read-only memory and the random access memory are all self-contained within the housing to protect the program and the stored first code from both visual and electronic examination.

3. The security arrangement as recited in claim 1, wherein a plurality of microprocessors are to be used for protecting a corresponding plurality of electronic equipment, and wherein the stored first code is different and unique for each microprocessor.

4. The security arrangement as recited in claim 3, wherein the storing means includes programming means for directing each microprocessor in response to the initial execution of the security routine to accept the different stored first code and to store the latter in the internal memory, said programming means being operative for applying a code signal to each microprocessor, each code signal being different for each microprocessor.

5. The security arrangement as recited in claim 3, wherein the storing means includes programming means for directing each microprocessor in response to the initial execution of the security routine to accept a common public code for storage and to temporarily store the common public code in the internal memory, said programming means being operative for applying an identical code signal to each microprocessor;

and wherein the security routine associated with each microprocessor is operative for changing the common public code to each different first code upon entry of the latter by the respectively associated code entry means.

6. The security arrangement as recited in claim 5, wherein each code entry means is manually actuatable by each user, and wherein each different first code is selected and manually entered by each user to ensure code privacy.

7. The security arrangement as recited in claim 6, wherein the security routine of each microprocessor includes means for changing the first code selected by a user to a different private code selected by the user.

8. The security arrangement as recited in claim 3, wherein the distinguishing means associated with each microprocessor includes means for permanently loading a flag in a predetermined location in the internal memory of each microprocessor in response to the initial execution of the security routine, and wherein the storing means associated with each microprocessor is operative for directing each microprocessor when the flag is not loaded in the predetermined memory location to accept a common public code for storage and to temporarily store the common public code in the internal memory, and wherein the security routine associated with each microprocessor is operative after the flag has been loaded in the predetermined memory location to change the common public code to each different first code upon entry of the latter by the respectively associated code entry means.

9. The security arrangement as recited in claim 3, wherein the security routine associated with each microprocessor includes means for programming the microprocessor with a code entry routine, and means for erasing the code entry routine in response to the initial execution of the security routine;

and wherein the storing means associated with each microprocessor is operative for directing each microprocessor when the code entry routine is not erased to accept a code for storage and to store the code in the internal memory; and

wherein the code validity means associated with each microprocessor is operative after the code entry routine has been erased for comparing the second code entered by the code entry means to the first code stored in the protected memory.

10. The security arrangement as recited in claim 9, wherein each storing means directs the associated microprocessor when the code entry routine is not erased to accept a common public code for storage and to temporarily store the common public code in the internal memory, and wherein the security routine of each microprocessor is operative after the code entry routine has been erased to change the common public code to each different first code upon entry of the latter by the respectively associated code entry means.

11. The security arrangement as recited in claim 1, and further comprising user-operated means for changing the first code to a different user-selected private code by user operation of the code entry means.

12. The security arrangement as recited in claim 1, wherein the disabling event is a theft event, and the detector means is operative for detecting the removal of the equipment from its source of electrical power.

13. The security arrangement as recited in claim 12, wherein the protected memory remains non-volatile, even after removal of the electrical power source, by being connected to a battery back-up circuit.

14. The security arrangement as recited in claim 12, wherein the protected memory remains non-volatile, even after removal of the electrical power source, by constituting the protected memory as an EEPROM circuit.

15. The security arrangement as recited in claim 1, wherein the disabling means includes a time delay means for introducing a waiting period when the second code does not match the stored first code, said code validity means being inoperative until the waiting period has expired.

16. The security arrangement as recited in claim 1, wherein the disabling event is a theft event, and the detector means is operative for detecting the removal of the equipment from its authorized location.

17. A lock-out security arrangement for rendering electronic equipment having a normal operation inoperative after a disabling event has occurred, and for maintaining the equipment inoperative after the disabling event has terminated, comprising:

(a) a microprocessor having an internal, non-volatile, protected memory accessed solely by the microprocessor and protected from interrogation external to the microprocessor, said microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for controlling the normal operation of the equipment, and a security routine for controlling the security of the equipment;

(b) said security routine having means for distinguishing between an initial execution of the security routine and a subsequent execution of the security routine;

(c) means responsive to the initial execution of the security routine, for storing a public code in the internal memory of the microprocessor;

(d) means for substituting a private code for the public code in a secured manner in the internal memory of the microprocessor such that the stored private code is protected from interrogation external to the microprocessor;

(e) code entry means operatively connected to the microprocessor, for entering a trial code to the microprocessor;

(f) said security routine having code validity means for comparing the trial code entered using the code entry means to the stored private code whose identity is protected from external interrogation;

(g) enabling means responsive to a completed initial execution, or to the subsequent execution, of the security routine, for enabling the microprocessor to execute the operational routine after the private code has been stored in the internal memory of the microprocessor, and for maintaining the equipment normally operational until the disabling event has occurred;

(h) detector means operatively connected to the microprocessor, for detecting when the disabling event has occurred; and

(i) disabling means responsive to the detector means and operatively connected to the microprocessor, for disabling the equipment from normal operation after the disabling event has occurred, said disabling means being further operative for maintaining the equipment disabled, even after the disabling event has terminated, until the trial code matches the stored private code.

24. The method as recited in claim 17, and further comprising the step of changing the first code selected by the user to a different private code selected by the user.

18. A lock-out security arrangement for rendering electronic equipment having a normal operation inoperative after a disabling event has occurred, and for maintaining the equipment inoperative after the disabling event has terminated, comprising:

(a) a microprocessor having an internal, non-volatile, protected memory accessed solely by the microprocessor and protected from interrogation external to the microprocessor, said microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for controlling the normal operation of the equipment, and a security routine for controlling the security of the equipment;

(b) said security routine having means for distinguishing between an initial execution of the security routine and a subsequent execution of the security routine;

(c) means responsive to the initial execution of the security routine, for storing a public code in the internal memory of the microprocessor;

(d) means for substituting a first private code for the public code in a secured manner in the internal memory of the microprocessor such that the stored first private code is protected from interrogation external to the microprocessor;

(e) code entry means operatively connected to the microprocessor, for entering a trial code to the microprocessor;

(f) said security routine having code validity means for comparing the trial code entered using the code entry means to the stored first private code whose identity is protected from external interrogation;

(g) enabling means responsive to a completed initial execution, or to the subsequent execution, of the security routine, for enabling the microprocessor to execute the operational routine after the first private code has been stored in the internal memory of the microprocessor, and for maintaining the equipment normally operational until the disabling event has occurred;

(h) detector means operatively connected to the microprocessor, for detecting when the disabling event has occurred;

(i) disabling means responsive to the detector means and operatively connected to the microprocessor, for disabling the equipment from normal operation after the disabling event has occurred, said disabling means being further operative for maintaining the equipment disabled, even after the disabling event has terminated, until the trial code matches the stored first private code;

(j) means for changing the first private code to a second private code known only to an authorized user having knowledge of the first private code, and for storing the second private code in a secured manner in the internal memory of the microprocessor such that the stored second private code is protected from interrogation external to the microprocessor;

(k) said code validity means being further operative, after the second private code has been stored, for comparing the trial code entered using the code entry means to the stored second private code whose identity is protected from external interrogation; and

(l) said disabling means being still further operative for maintaining the equipment disabled, even after the disabling event has terminated, until the trial code matches the stored second private code.

19. A method of rendering electronic equipment having a normal operation inoperative after a disabling event has occurred, and for maintaining the equipment inoperative after the disabling event has occurred, comprising the steps of:

(a) programming a microprocessor having an internal, non-volatile, protected memory for executing a program stored in the internal memory, said program having an operational routine for controlling the normal operation of the equipment, and a security routine for controlling the security of the equipment;

(b) accessing the internal memory of the microprocessor solely by the microprocessor, and protecting the internal memory from interrogation external to the microprocessor;

(c) distinguishing between an initial execution of the security routine and a subsequent execution of the security routine;

(d) storing in response to the initial execution of the security routine a first code in a secured manner in the internal memory of the microprocessor such that the stored first code is protected from interrogation external to the microprocessor;

(e) entering a second code to the microprocessor;

(f) comparing the entered second code to the stored first code whose identity is protected from external interrogation;

(g) enabling the microprocessor in response to a completed initial execution, or to the subsequent execution, of the security routine, to execute the operational routine after the first code has been stored in the internal memory of the microprocessor, and maintaining the equipment normally operational until the disabling event has occurred;

(h) detecting when the disabling event has occurred;

(i) disabling the equipment from normal operation after the disabling event has occurred; and

(j) maintaining the equipment disabled, even after the disabling event has terminated, until the entered second code matches the stored first code.

20. The method as recited in claim 19, and further comprising the step of providing a plurality of microprocessors for protecting a corresponding plurality of electronic equipment, and wherein the storing step is performed by storing the first code as different and unique for each microprocessor in the internal memory thereof.

21. The method as recited in claim 20, wherein the storing step is performed by directing each microprocessor in response to the initial execution of the security routine to accept the different first code and to stored the latter in the internal memory, said storing step being performed by applying a code signal to each microprocessor, each code signal being different for each microprocessor.

22. The method as recited in claim 20, wherein the storing step is performed by directing each microprocessor in response to the initial execution of the security routine to accept a common public code for storage and to temporarily store the common public code in the internal memory, said storing step being performed by applying an identical code signal to each microprocessor;

and further including the step of changing the common public code to each different first code upon entry of the latter during the code entering step.

23. The method as recited in claim 22, wherein the code entering step is manually performed by each user, who selects and manually enters each different first code to ensure code privacy.

25. The method as recited in claim 20, wherein the distinguishing step is performed by permanently loading a flag in a predetermined location in the internal memory of each microprocessor after the initial execution of the security routine, and wherein the storing step is performed by directing each microprocessor when the flag is not loaded in the predetermined memory location to accept a common public code for storage and to temporarily store the common public code in the internal memory, and wherein the storing step is performed after the respective flag has been loaded in the predetermined memory location by changing the common public code to each different first code upon entry of the latter during the code entering step.

26. The method as recited in claim 20, wherein the distinguishing step includes the step of programming each microprocessor with a code entry routine, and the step of erasing the code entry routine after the initial execution of the security routine;

and wherein the storing step is performed by directing each microprocessor when the code entry routine is not erased to accept a code for storage and to store the code in the internal memory, and wherein the comparing step is performed after the code entry routine has been erased for comparing a code entered during the code entering step to the code stored in the protected memory.

27. The method as recited in claim 26, wherein the storing step is performed when the code entry routine is not erased to accept a common public code for storage and to temporarily store the common public code in the protected memory, and wherein the storing step is performed after the code entry routine has been erased to change the common public code to each different first code upon entry of the latter during the code entering step.

28. The method as recited in claim 19, and further comprising the step of changing the first code to a different private code selected by user entry.

29. The method as recited in claim 19, wherein the detecting step is performed by detecting the removal of the equipment from its source of electrical power.

30. The method as recited in claim 19, wherein the disabling step is performed by introducing a waiting period when the first entered during the code entering step does not match the stored first code, said comparing step being inoperative until the waiting period has expired.

31. The method as recited in claim 19, wherein the detecting step is performed by detecting the removal of the equipment from its authorized location.