Importance

Loading Importance Indicators...

Abstract

A `personalized` computer with a unique encrypted digital signature which will not boot up or recognize any data storage or communication peripheral devices without a matching `personalized` smart card containing a complementary encrypted digital signature. A modified BIOS (Basic Input Output System) replaces the standard BIOS of a motherboard and allows a security engine microprocessor to take over preboot control of the computer from the motherboard CPU (Central Processing Unit), configures and operates the encryption-based security system, and enables or disables selected data storage devices and other user selectable peripherals upon start up and shut down of the computer. This use of a modified BIOS also allows this invention to work with any operating system or computer microprocessor chipset. The enabling or disabling of peripheral devices involves the use of special enabling/disabling circuits and a procedure for checking the security engine for the presence of an encrypted list of allowed peripheral devices before any particular device driver will be operational. A modified DDL (Device Driver Layer), loaded in the hard drive of the computer as part of the resident O/S (Operating System) of the computer, and memory buffer circuits allows a real time encryption system to be in place for any communication or data storage device. A data encryption engine in the security engine microprocessor allows encryption and decryption of all data stored in data storage devices, including the smart card, and moved through communication devices such as a modem. Upon power up, reset or interrupt of the computer, the microprocessor looks for, and if present, reads from the smart card in the smart card reader which is logically connected to the security engine microprocessor. A software program compares a unique digital signature placed in the smart card to a digital signature assigned to the computer. If these two digital signatures are complementary, the boot up procedure is allowed to continue and access to the computer allowed up to a predetermined level depending on the level of access configured on the smart card. This invention can also be used to allow identification and authentication of the computer and its user in networks.

Loading the Abstract Image...

First Claim