Method and system for embedded, automated, component-level control of computer systems and other complex systems

• US 6,594,765 B2
• Filed: 05/01/2001
• Issued: 07/15/2003
• Est. Priority Date: 09/29/1998
• Status: Expired due to Term

• Current Assignee: SoftVault Systems, Inc.
• Original Assignee: SoftVault Systems, Inc.
• Inventors: Goldman, Wayne, Hunter, Richard N. Jr., Reed, George M., Sherman, Mark P., Saunders, Larry, Sherman, Edward G., Whittie, Simon
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/847,536
• Publication Number:
  US 20020073334A1
• Time in Patent Office: 805 Days
• Field of Search: 713/150, 713/153, 713/161, 713/168, 713/200, 713/201, 713/202
• US Class Current: 726/35
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A method and system for protecting and controlling personal computers (“PCs”), components installed in or attached to PCs, and other electronic, mechanical, and electromechanical devices and systems. An exemplary embodiment of the system includes a server running on a remote computer and hardware-implemented agents embedded within the circuitry that controls the various devices within a PC. The agents intercept all communications to and from the devices into which they are embedded, passing the communications when authorized to do so, and blocking communications when not authorized, effectively disabling the devices. Embedded agents are continuously authorized from the remote server computer by handshake operations implemented as communications messages.

Claims

1. A system for securing an automotive system, the system comprising:

an automotive system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

2. The system of claim 1 wherein the automotive system is one of:

an automobile;

a truck;

a fuel delivery component of an automobile;

an engine component of an automobile;

a drive train component of an automobile;

a steering component of an automobile;

an audio component of an automobile

a video component of an automobile; and

a GPS systems installed in an automobile.

3. A system for securing an aircraft system, the system comprising:

an aircraft including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

4. The system of claim 3 wherein the aircraft system is one of:

an airplane;

a helicopter;

an ignition system;

a fuel delivery component;

an engine component;

audio and video components;

an audio and video components;

a GPS system;

an avionics; and

a communications and navigation system.

8. The system of claim 3 wherein the building system is one of:

a building;

a security system that controls access to a building;

a security system that monitors the interior environment of a building;

a security system that monitors the exterior environment of a building;

a security system within a building that provides warnings; and

equipment used to construct and repair a building.

18. The system of claim 3 wherein the entertainment-related system is one of:

a cable delivery system;

a satellite delivery system; and

a wireless delivery system.

26. The system of claim 3 wherein the personal identification device is one of:

an electronic passport;

an electronic driver'"'"'s license; and

an electronic personal identification document.

5. A system for securing a banking system, the system comprising:

a banking system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

6. The system of claim 5 wherein the banking system is one of:

an automatic teller machine;

a bank safe;

a safe deposit box room;

a teller drawer;

a credit card; and

a debit card.

7. A system for securing a building system, the system comprising:

a building including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

9. A system for securing a computer-related system, the system comprising:

a computer-related system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

10. The system of claim 9 wherein the computer-related system the is one of:

a personal digital assistant;

a hand-held device;

a tablet-based computer;

a pen-based computer;

a laptop;

a desktop;

a workstation;

a server;

a mini-computer;

a mainframe;

a printer;

networking equipment, including a hub, a router, and a concentrator;

a display device; and

an input device.

11. A system for securing a consumer electronics device, the system comprising:

a consumer electronics device including a subcomponent;

an agent embedded in the subcomponent that, when authorized, enables operation of the subcomponent and that, when not authorized, disables operation of the subcomponent; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the subcomponent.

12. The system of claim 11 wherein the consumer electronics device is one of:

an audio device;

a video device;

a photographic device;

a fax machine;

a copy machine;

an appliance, and

a game device.

13. A system for securing a weapons system, the system comprising:

a weapons system, including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

14. The system of claim 13 wherein the weapons system is one of:

a firearm;

a missile;

a bomb;

ordinance;

a launching system;

a tracking system;

a targeting system;

a weapons delivery system; and

an armored vehicle.

15. A system for securing an energy system, the system comprising:

an energy system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

16. The system of claim 15 wherein the is one of:

a power generation system;

a fuel storage facility;

an energy storage facility;

a fuel dispensing facility;

an energy dispensing facility;

an oil refinery; and

a gas distillation facility.

17. A system for securing an entertainment-related system, the system comprising:

an entertainment-related system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

19. A system for securing a manufacturing system, the system comprising:

a manufacturing system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

20. The system of claim 19 wherein the manufacturing system is one of:

a motor;

a pump;

a generator;

a compressor;

a conveyor;

a shaping system;

a cutting system;

a drilling system;

a welding system;

a robotic system;

a process instrument; and

a sensor.

21. A system for securing a marine system, the system comprising:

a marine system including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

22. The system of claim 21 wherein the marine system is one of:

a personal watercraft,

a boat;

a ship;

a submarine;

an ignition system of a watercraft;

a fuel delivery component of a watercraft;

an engine component of a watercraft;

a drive train component of a watercraft;

a steering component of a watercraft;

an audio component of a watercraft;

a video component of a watercraft;

a GPS system of a watercraft;

a navigation system of a watercraft;

a radar system of a watercraft; and

a sonar system of a watercraft.

23. A system for securing medical equipment, the system comprising:

medical equipment including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.

24. The system of claim 23 wherein the medical equipment is one of:

diagnostic equipment;

measurement equipment;

monitoring equipment;

therapeutic equipment;

medication dispensing equipment;

medical information storage equipment;

radiation source equipment; and

injectable or implantable electronic medical devices.

25. A system for securing a personal identification device, the system comprising:

a personal identification device including a subcomponent;

an agent embedded in the subcomponent that, when authorized, enables operation of the subcomponent and that, when not authorized, disables operation of the subcomponent; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the subcomponent.

27. A system for securing a security device, the system comprising:

a security device including a subcomponent;

an agent embedded in the subcomponent that, when authorized, enables operation of the subcomponent and that, when not authorized, disables operation of the subcomponent; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the subcomponent.

28. The system of claim 27 wherein the security device is one of:

a sensor;

a monitor;

a video device;

an alarm system;

a card key;

a smart card;

a retinal scanning device;

a finger-print identification device; and

an embedded agent security system server.

29. A system for securing a telecommunications network, the system comprising:

a telecommunications network including a device;

an agent embedded in the device that, when authorized, enables operation of the device and that, when not authorized, disables operation of the device; and

a server coupled to the embedded agent that, by exchanging a number of messages with the embedded agent that together compose a handshake operation, authorizes the embedded agent to enable operation of the device.