EA013885B1 - System for securing a personal device from unauthorized access - Google Patents

Abstract

The present invention relates to electronics, in particular, to security of personal communication or computing devices with external communications and sensors (e.g. microphone, camera) features and using software for operation. Protection system of personal device from unauthorized access consists of device core and at least one peripheral device. Protection system of personal device from unauthorized access, including device core, internal isolated switch that have functions that cannot be controlled nether by device core, nor by any peripheral device, switch that consist of isolated disconnector for connection and disconnection of device core with part of at least one peripheral device. Second embodiment of the device consists of isolated disconnector for connection and disconnection of device core with at least one peripheral device and part of at least one peripheral device. Isolated switch can be a mechanical switch without an electrically operated bypass and an electronic/electrical switch separated electrically from elements or components of the personal device.

Description

Registered (legal) user - the owner of a personal device or an operator with the right to use it.

Illegal user - any user or software (software) that does not have permission to operate a personal device.

Unauthorized access - any attempt by an illegal user to gain access to a personal device or to its operation.

False sign / signal - a sign showing one state, while the actual state is different from it.

A coupling element is an element connected in parallel with the other device (s) to one input link in such a way that both devices can operate simultaneously, while the coupling element remains isolated from other devices.

The man in the middle (Eng. Map Ιη ТНе Миб1е) is a component placed between two other components, capable of tracking information passing between these two components.

Safe input - input of information that can only be read by a legitimate user (component), implying that the information entered by him cannot be read by other components.

Internal - closed inside the shell of a personal device or on its surface, or located at least partially on the surface of its shell.

An isolated switch is a switch that cannot be operated by any object or under the influence of any factor other than the actions of a legitimate user.

An isolated controller is a controller that cannot be activated by any object or under the influence of any factor other than the actions of a legitimate user.

Disconnector (eng. E ^ soppesyug) - a switching device designed to connect and disconnect electrical circuits of any voltage.

FIELD OF THE INVENTION

This invention relates to electronic equipment, and more particularly, to personal communication protection devices or computer systems equipped with external communication devices and sensors (for example, a microphone, camera) and using software (hereinafter referred to as software) for operation.

Background of the Related Art

In personal devices and equipment controlled by software (hereinafter referred to as personal device), such as mobile phones, ΙΡ-phones, PDAs, communicators, laptop computers, desktop computers and network switches, a variety of wired and wireless means of communication with other devices are used.

An illegal user at a distance can use the means of communication with dishonest intentions and try to violate the security of a personal device to obtain private and any other information from the owner of this personal device.

A single personal device may have several means of communication, such as, for example, telephone lines, cables, wireless LANs, bluetooth (English - В1ие1оо1й), etc., which only increases the security risk.

These means of communication can be used to obtain private audio / video information, information about the location of the user (the place where the user is located while the device is maintaining external communication), or the transmitted information.

Devices with built-in or auxiliary sensor components, such as microphones, headphones, speakers, cameras, etc., are capable of capturing information at the user's location. Devices with built-in or auxiliary communication components, such as a modem, network adapter, wireless network adapter, bluetooth, O8M, etc., are capable of transmitting information and can locate the user. User signaling can be used to track his location. Instrument components / devices controlled by NGOs and electronic switch devices can also be controlled by an unlawful user, even if these devices / devices were previously turned off by a legitimate user. These components can be controlled, and the user may not notice any changes in the operation of their device. For example, a mobile phone may seem to be turned off, but it will work or even transmit signals.

Local legal or illegal users can easily change the software of a personal device and thereby violate the security system, for example, when downloading updates infected with a virus. The software modification scenario is standard: on the one hand, software modification is much easier to do than hardware modification, and on the other hand, these changes are much more difficult to control, and unwanted changes are more difficult to notice.

- 1 013885

Currently, the problem of unauthorized access is solved through various types of security systems, such as access protection systems, anti-virus programs, anti-Spyware programs and security systems. However, each new protection method ultimately does not withstand the onslaught of new hacking methods, viruses, worm programs, Trojan programs, and other pests. This creates endless competition between security providers and illegal users. Essentially, security software is difficult to implement and / or test / prove security in use. Even if the theoretical model of such tools is tested, there is a possibility of an error or damage during the implementation process, which can cause a security breach. It follows that software security methods are not reliable.

Known methods of hardware protection (security), which include telephone line isolation devices to prevent unlawful interception of subscriber audio information (see US patent 5402465 and US patent application No. 20050271190), communication channel switches for a computer that physically disconnect a computer line from the Internet operating in manual control mode and / or automatically (US patent application No. 20030062252). A known method of power off for wireless peripheral devices, which involves disconnecting energy from all parts of a wireless device, except for the control chip, when performing a special keystroke (US patent application No. 20050009496). A switch is known that supplies power to the communicator when the stylus is removed from the holder and arbitrarily disconnects power from the communicator when the stylus is returned (US Pat. No. 6,233,464). A well-known mobile phone with two input modes, while switching the input mode is done by switching the electrical contact between the main circuit board in the phone and the front and rear circuit boards (US patent No. 7031758). A computer-based circuit breaker is known (No. 18aGe), which is based on a simple shutdown technology that allows a computer or group of computers to quickly and easily block the data signal from accessing it (them), restart the signal without using software, and without performing a power outage , reboot and run the software on the computer (application for US patent No. 20040243825). There is a well-known wireless access key for laptops offered by Нс \\ '1с1 Raskatb Sotrotiop portable computers Ρανίΐίοη (hereinafter referred to as the HP wireless access key) in the product series, with which all integrated wireless components of a laptop computer are activated or deactivated (for example,' Ψί -Ρί or bluetooth), a wireless indicator light that determines the general condition of the computer (activated or deactivated), a portable electronic device that disconnects the receiver an antenna duplexer of a mobile phone (US Patent Application number 2004 / 0203536L1).

The described means of protection always have at least one of two drawbacks: the switch is either external and therefore accessible from outside, or internal, but not completely isolated from the device itself, therefore, the software of the device itself can be controlled. As a result of this, existing tools cannot simultaneously provide temporary protection against receiving audio / video information in the device from unauthorized access and obtaining information about the location of the user / device, and also cannot provide a safe exit from the protective mode, and prevent the interception of maintaining protection modes in the device. Existing internal switches cannot provide protection against false alerts about the security status of a device with a damaged security mechanism, namely, in a state where an illegal user gains access or control over a personal device, despite the presence of software protection mechanisms.

The closest analogue of the claimed invention in terms of the essential features and the achieved result is a system for protecting a personal device from unauthorized access to it, described in US patent No. 2008/0178282 A1, including the main device, at least one peripheral device, an internal isolated switch, the functions of which it is impossible to control either using the main part of the personal device or using any peripheral device containing an insulated disconnector for To connect and disconnect the main unit with at least one peripheral device.

The known device reliably solves the problem of unauthorized access to a personal device, therefore, is the closest analogue of the claimed invention - a prototype.

The disadvantages of the prototype include its narrow functionality, which consists in the fact that this device can only be completely turned off or connected by a peripheral device and it is impossible to change any of its functions.

- 2 013885

SUMMARY OF THE INVENTION

The invention relates to proposals characterized by a combination of known elements of the same order, i.e. the inventive step consists in the connections between structural elements, namely, in the connections between an internal insulated switch, the functions of which cannot be controlled either by the main part of a personal device, or by any peripheral device containing an insulated disconnector, and a peripheral device (s).

The objective of the invention is to expand the functionality of the system for protecting a personal device from unauthorized access to it - to protect personal devices from unauthorized access, intentional or not intentional, performed by software or directly by the user. The expansion of the functionality of the system for protecting a personal device from unauthorized access to it is ensured by ensuring the protection of the personal device not only by disabling the peripheral device or several peripheral devices, but also by changing the function of the peripheral device and / or its part or several peripheral devices and / or parts thereof.

The solution of this problem in the first embodiment of the claimed device is ensured by the fact that the system for protecting a personal device from unauthorized access to it, including the main device, at least one peripheral device, an internal isolated switch, the functions of which cannot be controlled using the main part of the personal device, nor using any peripheral device containing an insulated disconnector for connecting and disconnecting the main device with a part of at least the mind of one peripheral device.

The function of connecting and disconnecting the main device with a part of at least one peripheral device provides not only disconnecting the peripheral device if this part of the peripheral device has the function of disconnecting the entire peripheral device, but also changing the function of the peripheral device if the specified part of the peripheral device is capable of changing any function without turning off the device.

The solution of the problem in the second embodiment of the claimed device is ensured by the fact that the system for protecting a personal device from unauthorized access to it, including the main device, at least one peripheral device, an internal insulated switch, the functions of which cannot be controlled using the main part of the personal device, nor with using any peripheral device containing an insulated disconnector for connecting and disconnecting the main device with at least one peripheral device and with at least one peripheral device.

This option is used when a peripheral device is used, which when connecting part of it to an insulated disconnector does not have the ability to disconnect.

A particular solution to the problem in the first and second variants of the claimed device is provided by the fact that to the set of features in the first and second variants of the claimed device are added signs according to which the internal insulated switch is equipped with an independent controller for sending a signal or signals to at least one peripheral device and / or to its part.

The use of an insulated disconnector with an independent controller in this set of features provides the ability to change any function of the peripheral device without turning off the device, regardless of the nature of its connection with the peripheral device (with the peripheral device as a whole or part thereof).

A particular solution to the problem in the first and second embodiment of the claimed device, with or without the above-described particular solution to the problem, is provided by the fact that, unlike the above options, at least part of one peripheral device is made in the form of a group of peripheral devices, while an isolated disconnector for disconnecting the main device from a part of at least one peripheral device has the ability to disconnect and connect any subgroup of the group of peripheral devices ystv; and / or an internal insulated switch contains isolated internal and external components for jointly triggering the circuit breaker; and / or at least one peripheral device consists of a group of devices, while an isolated disconnector has the ability to disconnect and connect any subgroup of a group of peripheral devices; and / or at least one peripheral device comprises a user input component, wherein the internal isolated switch is provided with an isolated user input logic module for reading user input; and / or the peripheral device is selected from the group consisting of: mobile phones, 1P phones, pocket PCs, communicators, laptop computers, desktop computers and a switch

- 3 013885 lei of the network; and / or as an internal insulated switch operating independently of a personal device, a switch selected from the group or any combination of elements of the group consisting of a mechanical switch without a bypass operated by an electric drive, an electric and electronic switch electrically isolated from the elements is used and personal device components; and / or the personal device is equipped with an input mode indicator connected to an isolated disconnector to provide a visual indication of the status of the disconnector; and / or the personal device is equipped with an input mode indicator connected to an isolated disconnector to provide a visual indication of the status of the disconnector, while the internal isolated switch is equipped with an input logic module for reading user input; and / or the internal insulated switch is equipped with an input mode indicator to provide a visual indication of the status of the internal insulated switch; and / or the internal insulated switch is equipped with an input mode indicator to provide a visual indication of the status of the internal insulated switch, while a light-emitting device is used as an input mode indicator to provide a visual indication of the status of the internal insulated switch; and / or at least one peripheral device comprises a user input component connected to an insulated disconnector, wherein the internal insulated switch is provided with an isolated user input logic module for reading user input; and / or at least one peripheral device comprises a user input component connected to an insulated disconnector, wherein the internal insulated switch is provided with an isolated user input logic module for reading user input and an input mode indicator to provide a visual indication of the state of the switch; and / or the internal insulated switch is equipped with an input mode indicator to provide a visual indication of the state of the switch; and / or the internal insulated switch is equipped with an input mode indicator to provide a visual indication of the state of the switch and a user input logic module for reading user input; and / or the internal insulated switch is equipped with an input mode indicator to provide a visual indication of the status of the switch, an input logic module for reading user input and an input mode indicator for providing a visual indication of the status of the input logic module of the user; and / or the internal insulated switch is equipped with an input mode indicator for providing a visual indication of the status of the switch, an input logic module for reading user input and an input mode indicator for providing a visual indication of the status of the user input logic module, using a light-emitting device as an input mode indicator .

Brief Description of the Drawings

Detailed references are given to standard modifications of the present invention, examples of which are illustrated by the accompanying figures. The figures are intended to present illustrated material, but not exhaustive. Although the invention has been generally described in the context of standard modifications, it is important to understand that the concept and scope of the present invention is not limited to these modifications. The structure, principle of operation and advantages of this standard modification of the invention will further become clear when considering the descriptions accompanying the figures, where:

FIG. 1 shows a first modification of a personal device with a safety switch of the present invention;

FIG. 2 shows another modification of a personal device with a safety switch of the present invention;

FIG. 3 shows another modification of a personal device with a safety switch of the present invention;

FIG. 4 shows another modification of a personal device with a safety switch of the present invention;

FIG. 5 shows another modification of a personal device with a safety switch of the present invention;

FIG. 6 shows a modification of a personal device with a safety switch input mechanism of the present invention;

FIG. 7 shows another modification of a personal device with a safety switch of the present invention;

- 4 013885 FIG. 8 shows another modification of a personal device with a safety switch of the present invention;

FIG. 9 shows another modification of a personal device with a safety switch of the present invention;

FIG. 10 shows an example of an electromechanical model of an insulated circuit breaker;

FIG. 11 shows an example of an electrical model of an insulated circuit breaker;

FIG. 12 shows another example of an electrical model of an insulated circuit breaker;

FIG. 13 shows an example of an electrical / electronic model of an insulated circuit breaker;

FIG. 14 shows an example of an electromechanical model of an insulated circuit breaker;

FIG. 15 shows an example of an electromechanical model of an insulated circuit breaker;

FIG. 16 shows an example of an electrical / electronic model of a partially tripped isolated circuit breaker;

FIG. 17 shows an example of an electrical / electronic model of an isolated switch with an isolated controller;

FIG. 18 shows an example of an electrical / electronic model of an insulated circuit breaker with external and internal components for jointly triggering a circuit breaker.

In all figures, lines with two-way arrows show connections where data or source energy can be transmitted in both directions.

In all figures, the lines with one-sided arrows show the connections where the data or source energy can be transmitted in one direction (in the direction of the arrow).

In FIG. 10-18, solid lines show the electrical connections between the elements, and dashed lines show the mechanical connections between the elements.

Information confirming the possibility of carrying out the invention

The present invention discloses hardware security mechanisms to overcome the drawbacks of the software and hardware described above. The device provides the user of the personal device with information protection means, such as, for example, private information, audio / video information, information about the user's whereabouts and transmitted information. Hardware, called a safety switch or an isolated switch, is located inside the device and isolated from it (internal and isolated at the same time, as defined above).

The term isolation also means that the control elements of the circuit breaker do not have external communication capabilities and are protected from remote commands / manipulations.

In some modifications, the protective switch is a component consisting of a) control elements that are not electrically connected to the external environment from which these elements must be isolated and shielded or separated in such a way that electric and magnetic fields do not affect their operation; and b) switch-off elements that cannot be connected, disconnected or bypassed (b) by other elements, with the exception of the control elements described in paragraph (a).

The safety switch can be mechanical (electrical contacts are mechanically actuated) or electronic / electrical. In the first case, control over it is already initially isolated, since work on it can be performed using the user's physical action, and not by the device itself. A mechanical circuit breaker, driven by electricity, must not have a bypass circuit. In the second case (electronic / electrical switch), the protective switch is electrically isolated, i.e. completely separated from other elements and components of the personal device.

The principle of operation of the protective switch described here is based only on the manual disconnection (or connection) of the audio / video components, as well as the communication and power components in a personal device in order to prevent unauthorized access to information or a personal device. This method provides complete isolation even in the case of full access to the device software in the sense that an illegal user will not be able to connect to electrical circuits that are disconnected manually.

Two main operating modes are as follows:

mode 1: manual shutdown by a legitimate user (or just a user) to prevent the interception of audio / video information from the user;

mode 2 - manual shutdown made by a legitimate user in order to prevent the user's location or other information from being determined.

Using mode 1, the user can receive visual information (for example, incoming calls, SMS, memos, files, etc.). In mode 2, communication with the device is completely disconnected, so the location of the device cannot be determined by any means, and the transmission of information is impossible. It is also possible to combine modes 1 and 2 in combined mode. It is important to note that mode 2 is not a substitute for mode 1, since in case of unauthorized access, audio / video information can be intercepted and stored in the device’s memory, and after

- 5 013885 user moves from mode 2 this information can be transmitted.

Switching off allows the user of the personal device to temporarily change the operating mode for personal purposes and, if desired, to avoid tracking him / her by recording audio / video information or tracking his / her location. The use of a manual safety switch allows the user to disconnect components that can capture audio / video information and user input or transmit a signal from / to a personal device. When an electric circuit is opened by a manual action, it cannot be reunited by an unlawful user even in the event of full access to the device software or remote access to an electronic personal device. If all components capable of capturing audio / video information, such as microphones, headphones, speakers and cameras, are disabled, then an illegal user cannot receive information.

If all components capable of transmitting a signal from a user’s device / device, such as КЕ, ^ νίΕί, bluetooth, ΝΕΟ and ΕΆΝ, are disabled, the illegal user will not be able to find out the user's location and receive other private information about the user.

It is important to note that the present invention does not relate to software protection, but provides protection for specific private information even if the security of the device is already violated by the damaging effect of a device capable of capturing information or transmitting a signal. The principle of this protection is based on an action that cannot be performed using the device software or by the device itself, but is only possible by the user (manually disconnecting the corresponding components), and the action itself is not recognized by the device software or by the device itself.

Protection can prevent potential device theft.

A solution is a module containing a part of a safety switch integrated into a mobile device. The module will block the device by means of iron (yatytate) after the expiration of its timer (for example, 3 days). When a registered power supply device (including an additional part of the module) is connected to the device, the module will reset the timer.

Protection makes the device useless (after the timer expires) without a registered power device.

It is impossible to unlock the device with any software or reboot (i.e. the device becomes useless for the kidnapper).

Registering a new power device requires the use of a secure password and is performed by the module, so no device program can recover the password.

If you try to turn on the device in a locked mode, the device can initiate visual / audio signals (using iron), warning that the device is stolen, which will help identify stolen devices, especially among young people, their parents and other adults.

A module can unlock (using iron) certain functions in a mobile device (for example, enable ΝΕΟ (short-range wireless communication), which is used for mobile payments) only if the external device (such as a credit card-sized card that can be located in wallet among other cards) is located nearby, which makes such functions (for example, mobile payments ΝΕΟ) impossible without an external device, thus inaccessible to the thief.

To register a new device, a secure ΡΙΝ code is required, and this is performed by the module, in which no illegal / hacker program in the mobile device can recover the ΡΙΝ code.

This invention requires a system for protecting a personal device from unauthorized access and working with it, consisting of the main part of the device and at least one peripheral device containing an internal isolated switch having functions that cannot be controlled using the main part of both the personal device and peripheral device (at least one).

In some versions, the insulated circuit breaker has an insulated disconnector for connecting and disconnecting the main part and the peripheral device (at least one).

In some modifications, the insulated switch has an insulated disconnector for connecting and disconnecting the main part from any part of at least one peripheral device.

In some versions, an isolated switch contains an isolated controller to send a signal or signals to at least one peripheral device.

In some modifications, an isolated switch contains an isolated controller for sending a signal or signals to any part of at least one peripheral device.

In some versions, an insulated circuit breaker contains an insulated internal component and an insulated external component that together trigger the circuit breaker.

In some versions, an insulated circuit breaker has electromechanical components.

In some versions, an insulated circuit breaker contains electrical components.

In some versions, an insulated circuit breaker contains electronic components.

- 6 013885

In some modifications, an insulated circuit breaker has a combination of components selected from the group of combinations of electromechanical components with electrical components, or a combination of electromechanical and electronic components, or a combination of electrical and electronic components, or a combination of electromechanical components with electrical and electronic components.

In some versions, the insulated circuit breaker has an input mode indicator to visually indicate the status of the circuit breaker.

In some modifications, the peripheral device (at least one) has at least one user input component, and the isolated switch has an isolated user input logic module for reading user input.

In some versions, the peripheral device (at least one) is equipped with at least one user input component, and the isolated switch has a user input logic module for reading user input, as well as an isolated disconnector for disconnecting and connecting the main part of the device with the user input component (at least one) .

In some versions, the isolated switch has an input mode indicator to provide a visual indication of the input mode of the switch.

The present invention assumes the existence of a system for protecting a personal device from unauthorized access and working with it, consisting of the main part of the device and at least one peripheral device containing an internal insulated switch arranged to operate independently of the personal device and containing an insulated disconnector for connection / disconnecting the main part of the device from the peripheral device (at least one).

This invention protects a personal device from unauthorized access or unauthorized use of it, consisting of the main part of the device and at least one peripheral device. This protection consists in equipping the device with an internal insulated circuit breaker having functions that cannot be controlled both with the main part of the personal device and with a peripheral device (at least one), and in using an insulated circuit breaker for protection against unauthorized access to a personal device or unauthorized work with it.

In some embodiments, the device is equipped with an isolated switch and assumes the presence of an isolated disconnector for connecting and disconnecting the main part of the device with a peripheral device (at least one).

In some embodiments, the device is supplemented by a circuit breaker mode indicator combined with an isolated switch to provide a visual indication of the status of the isolated disconnector.

In some embodiments of the proposed proposal, the process of using a switch involves disconnecting the main part of the device from a peripheral device (at least one), performed by the user in response to a threat or for preventive purposes.

In some embodiments of the proposed system, equipment of the device with a user input indicator is added to provide a visual indication of the status of the user input logic module. A light emitting device may be used as an indicator.

The present invention is a security system and mechanism for protecting personal devices and their users from unauthorized access, work, theft of personal data and information. In particular, the invention is a safety switch providing complete protection for information contained in a personal device or information about a user of a device. In the descriptions below, the elements of the devices are numbered in accordance with the diagrams.

FIG. 1 shows a first modification 50 of a personal device with a safety switch of the present invention. The personal device 50 consists of the core of the device 100, an isolated switch 102, and at least one peripheral device 104.

Dotted dashed arrows indicate a direct connection between the core of the device 100 and the peripheral device 104 and / or between the core of the device 100 and the isolated switch 102. The core of the device 100 is controlled 110 and may consist of one or more control elements (for example, central processing units CPUs), one and more than a memory unit and one or more power modules. The peripheral device 104 may consist of one or more communication components, and / or one or more sensor components, and / or one or more data input components. Each of these elements is further shown in the diagrams. Communication components can be either wireless or wired (for example, ^ ί-Ρί, RF, bluetooth, ΝΡΟ, мод and a modem). Touch components can be audio and video components (microphones, speakers, or camera). The input components may be a keyboard or a touch screen.

- 7 013885

The isolation switch 102 is an internal component isolated from other components of the personal device. As indicated above, internal means closed inside the shell of a personal device or located at least partially on the surface of its shell. Isolated also means that the operation of the circuit breaker cannot be directly or indirectly affected by the main part of the device 100 or auxiliary devices 104. Such isolation does not allow the control of the circuit breaker 102 to be controlled by the device software. The switch 102 can perform operations regardless of the personal device (i.e., the personal device cannot affect the operation of the switch 102) and can operate either in parallel with the core of the device 100 (assuming that both perform independent tasks, in which case a direct connection between the core of the device 100 and the peripheral device 104), or on the principle of the person in the middle, implying that the connection between the core of the device 100 and the peripheral device 104 or the information passed between them is not controlled by the operation of lyuchatelya.

The isolated switch 102 may be implemented in various ways: using electromechanical components, electrical components, electronic components, or a combination of the above components.

The isolated switch 102 differs from its analogues (with the exception of the prototype) in the following ways: the HP wireless access key is considered not completely isolated, because some of the subcomponents of this mechanism (for example, an indicator) are controlled by a laptop computer, and other subcomponents do not work without a bypass circuit and without access to their control element. In contrast, the switch 102 is completely isolated from the personal device into which it is integrated. The HP Wireless Access Key works only on the principle of the man in the middle, while the isolated switch can also work in parallel. The portable electronic device disclosed in US Patent Application No. 2004 / 0203536A1 is also not isolated in the sense that it only disconnects the receiving antenna from the duplexer, and the transmitting antenna remains operational and can provide a workaround. In contrast, the switch 102 is completely isolated from the personal device into which it is integrated, without the possibility of a workaround. The portable electronic device operates only on the principle of the man in the middle, while the isolated switch 102 can also work in parallel. The switch No. 18a1e (US patent application No. 20040243825) is an external device, and the switch 102 is internal. The energy-saving circuit (US Patent Application No. 2006/0066370) uses microelectromechanical switches, and it is not an isolated device (in fact, this device is controlled by the logical part of the device), it is understood that the circuit for energy-saving using microelectromechanical switches can controlled by device software. In contrast, switch 102 is an isolated device that cannot be powered or controlled by the logical part of a personal device.

FIG. 2 shows a second modification 52 of a personal device with a safety switch of the present invention. In addition to all components 50, the isolation switch in the device 52 has a disconnecting / connecting component (disconnector) 200. The disconnector 200 is a key subcomponent of the present invention, which differs from prototypes in structure and operating principles. It is an internal, isolated (in the same sense as switch 102) subcomponent that can disconnect and reconnect various subgroups of peripheral devices with the core of the device. The disconnection operation can be performed by disconnecting the main connections (chopping off) between the core of the device and subgroups of peripheral devices 104 (for example, an information line, an energy supply line, etc.) or by closing the main electrical circuits in a subgroup of peripheral devices 104 (for example, an information line , touch terminals, etc.). The disconnector 200 may be arranged in various ways: by means of electrical contacts that are switched off mechanically, by electronic components, or by a combination of the above methods.

The cases in which it is advisable to use a safety switch are as follows: if the user has detected a threat to private information about himself or a threat to a personal device or if the user wants to take precautions, the disconnector 200 is activated by the user to disconnect the corresponding subgroup of peripheral devices 104 from the main part. After the user determines that the threat has passed or that the precautionary measures are no longer necessary, he / she using the disconnector restores the connection between the disconnected subgroup of peripheral devices 104 with the device core. Conversely, a disconnector 200 is used by a user to connect an appropriate subset of peripheral devices 104 to the core of the device. After the user determines that the threat has passed or that the precautionary measures are no longer necessary, he / she activates the disconnector 200 to disconnect the connected subset of peripheral devices from the device core.

- 8 013885

The differences between the isolated disconnector 200 and the HP wireless key are that the latter turns all integrated wireless devices on and off together, and the disconnector 200 can disconnect a separate subset of such devices. The HP wireless access key turns on / off all integrated wireless devices at once, and the subgroup of these devices is disconnected only through the laptop software. The HP Wireless Key may not be uninsulated. In contrast, the disconnector 200 can disconnect any selected subset of peripheral devices 104 (which include not only wireless accessory devices, such as wired peripherals, touch devices) and is isolated from the personal device into which it is integrated. The differences between the isolated disconnector 200 and the portable electronic device are that the latter only connects / disconnects the incoming signal (KB radio), which nevertheless allows information to be sent from the device to an unlawful user. In contrast, a disconnector 200 can disconnect any selected subset of peripheral devices, including, but not limited to, an incoming radio signal (KB), not connected to communication devices, so it is not possible to achieve a condition under which an illegal user can send information from the device.

The insulated disconnector 200 differs from the circuit breaker No. 18a1e (US Patent Application No. 20040243825) in that the latter is an external device that disconnects only wired communications, while the disconnector 200 is an internal device capable of disconnecting any selected subgroup of auxiliary devices 104 ( which include not only wired accessories).

The isolated disconnector 200 differs from the circuit for energy saving (US patent application No. 2006/0066370) in that the latter uses microelectromechanical switches, and in that it is not isolated (in fact, it is controlled by the logical part of the device); this means that the circuit uses microelectromechanical switches for energy saving, which can be controlled using the device software. In contrast, the disconnector 200 is an isolated mechanism that cannot be controlled using the logical part of a personal device.

The power saving circuit presented in US Patent Application No. 2006/0066370 can only disconnect the logic elements, while the disconnector 200 can both disconnect and short circuit peripheral devices 104.

FIG. 3 shows yet another modification 54 of a personal device with a safety switch of the present invention. The device 54 includes, in addition to all the components of the device 52, a switch mode indicator (eg, LIE) 300. The indicator 300 provides a visual indication of the status of the disconnector 200, i.e. a visual indication of the disconnection (disconnection) of a subgroup of peripheral devices 104, or an indication that none of the peripheral devices 104 is disconnected by the disconnector 200. The circuit breaker mode indicator is isolated in the same sense as the disconnector 200, and is controlled only by the disconnector 200, which in turn, differs from analogues in structure. This does not allow to manipulate it using the software of a personal device or other means, this means that a false indication or notification is impossible.

In a practical sense, under the same conditions described in device 52, a circuit breaker is used in the following cases: a disconnector 200 is actuated by the user to disconnect the corresponding subgroup of auxiliary devices 104 from the main part of the device. The disconnector, in turn, activates the indicator 300, used to inform the user about the choice of the desired operating mode of the protective switch. After the user determines that the threat has passed or that precautionary measures are no longer necessary, he / she restores the connection between the disconnected subgroup of auxiliary devices and the core of the device by the action of the disconnector. The disconnector then turns off the indicator 300, which is again used to inform the user about the selection of the desired operating mode of the circuit breaker.

The differences between the switch mode indicator and the wireless key indicator of the HP key are that the latter is not isolated from the laptop and is controlled by the laptop software, while the indicator 300 is isolated from the personal device into which it is integrated. The wireless key indicator of the HP key may give a false indication / notification (for example, due to software manipulation), while the indicator 300 is controlled only by the disconnector 200, which prevents the possibility of false indication / notification.

FIG. 4 represents yet another modification 56 of a personal device with a safety switch of the present invention. The device 56, in addition to all the components of the device 50, includes, as a component, an isolated switch 102, an isolated data input logic module 400 (abbreviated as logic module), and at least one data input component 402 included in at least one auxiliary device. Component 402 may be any known means of inputting information, such as, for example, a keyboard or a touch screen.

- 9 013885

The 400 Isolated Data Logic Module is the second key innovative sub-element that differs from its analogues in structure and purpose. Logic module 400 is an internal isolated component (in the same sense as described for switch 102) used to read input data, which is connected in parallel to at least one subgroup of data input components 402 and separated (disconnected) from the main part of device 100. Connection can be produced, for example, using keys with a common mechanical part and independent electrical contacts. Logic module 400 is isolated from other components of the personal device in the sense that information transmitted through user input components cannot be directly or indirectly affected by the main part of the device 100 or auxiliary devices 104. This mechanism does not allow the device software to be manipulated over the logical module 400.

Logic module 400 may have various designs depending on the user input component 402 with which it is coupled.

In a practical application, when a user wants to activate a protective switch (for example, by pressing a key on the keyboard), he enters data through a user input component 402 to enter data for an isolated switch, the logic module 400 treats the input of this data from component 402 as an independent operation (regardless device cores 100).

FIG. 5 represents yet another modification 58 of a personal device with a safety switch of the present invention. The device 58, in addition to all components of the device 56, includes an isolated disconnector 200. Unlike the device 52, the disconnector 200 in the device 58 disconnects and connects only different subgroups of the user input components 402 to the device core to prevent data entry in case of access to the main part of the device. This prevents the unauthorized interception of information using the software of a personal device or other means (for example, КеуОобб бПИГсг). meaning that in this case the input will be protected. In a practical application, under the same conditions described in the device 56, in order for the protective switch to trip, the user enters the initial data through the user input component 402. The logic module 400 accepts the input of the initial data as an independent operation and activates the disconnector 200, disconnecting the corresponding component user input from the main part of the device (for the safe input of information in a safe environment, for example, secure ΡΙΝ-code input). Further, the user continues to enter information through the user input component for tripping the protective shutdown as an independent operation (in this case, data entry cannot be recorded by any means other than a protective switch). At the end of the input operation, the logic module 400 actuates the disconnector 200 to restore communication between the disconnected subgroup of user input components 402 and the core of the device 100.

FIG. 6 shows a modification 60 of a personal device with a data input mechanism for protective shutdown of the present invention. The device 60, in addition to all components of the device 58, includes an input mode indicator (eg, LIE) 500. The indicator 500 provides a visual indication of the status of the logic module 400, i.e. a visible indication that the logic module has activated the disconnector 200 to disconnect the user input components 400 from the main part of the device, or an indication that none of the user input components has been disabled by the logic module 400 through the disconnector 200. The user input indicator, isolated in the same sense that the logical module 400 is controlled only by the logical module 400, which distinguishes it from previous inventions in structure. This does not allow the manipulation of it through the personal device software or by other means, implying that false indication and notification are impossible.

Under the same conditions as described for device 58, the safety switch is used as follows: the user enters the initial data through the user input component 402 to trip the protective shutdown. The logic module 400 reads the initial input data from the user input component 402 and activates a disconnector 200 to disconnect the user input component 402 from the main part of the device 100 (in order to continue data input in safe conditions) and turns on the indicator 500. The indicator 500 serves the user to visual notification that data entry is performed in a safe environment. The user enters data through user input component 402 to trip a protective shutdown. At the end of the input operation, the logic module 400 activates the disconnector 200 to restore communication between the user input component 402 and the core of the device 100, and turns off the indicator 500. In this case, the indicator serves to visually alert the user about the return of the input conditions to the initial state.

FIG. 7 shows yet another modification 62 of a personal device with a safety switch of the present invention. The device 62 combines the characteristics of devices 52 and 58, where the auxiliary devices 104 (described in device 50) include user input components 402 (described in device 56), communication components 602, and sensor components 600 (described in

- 10 013885 sub-component 50 as subcomponents of peripheral devices 104). The device 62 has the functionality of both devices - 52 and 58.

FIG. 8 shows yet another modification 64 of a personal device with a safety switch of the present invention. Device 64 combines the characteristics of devices 54 and 60, where peripheral devices (described in device 50) include user input components 402 (described in device 56), communication components 602, and sensor components 600 (described in device 50 as subcomponents of peripheral devices 104) . Device 64 has the functionality of both devices - 54 and 60.

FIG. 9 shows yet another modification 53 of a personal device with a safety switch.

The device 53, in addition to all components of the device 50, includes an isolated controller 700. The isolated controller 700 sends signals to peripheral devices 104. The isolated controller is isolated in the same sense as an isolated switch, it is controlled only by a legitimate user and only sends signals to devices 104, and does not receive signals from devices 104, which distinguishes it from previous inventions in structure. This does not allow the manipulation of the isolated controller 700 through the software of a personal device or by other means, implying that the transmission of a false signal is impossible.

Safety switch is used as follows. In practical applications, when the user wants to activate a safety switch (for example, by switching it with the switch handle), this initiates the operation of the isolated controller 700, which sends signals to peripheral devices 104. The received signals change the operation of peripheral devices 104.

FIG. 10 shows an electromechanical embodiment of a circuit breaker 102 including a disconnector 200 and a mode indicator of a switch 300. FIG. 10 includes IS1 as the main device 100, PH1 (I8V device) as the communication component 602, I1 is NiMa81eg, and PH2 (contact keys 1, 2) as a user input component 402, as an electromechanical embodiment of the disconnector 200 and And as an electric version of the indicator 300. I1 is a multi-position switch having 4 operating modes: normal, mode 1, mode 2 and mode 1 + 2. The normal mode of switch I1 is activated with open contacts 1, 2 and closed contacts 3, 4 (or with normally open contacts 3 a, 4a). When I1 is in normal mode, IS1 is connected to PH1, and the circuits L1 and L2 of indicator 11 are open, meaning that LIE of mode 1 and 2 are turned off. When B1 is in mode 1, contacts 3, 4 (or 3 a, 4a) remain in the same state as in normal mode (due to the fact that the communication component 602 and user input component 402 are not involved in mode 1), but pin 1 closes the current circuit from P1 through the resistor K81 to L1, due to which L1 is switched on.

When I1 is in mode 2, contacts 3, 4 are open and disconnect the data line between IS1 and PH1, also IS1 is disconnected from PH2 (or contacts 3a, 4a ground the data lines I +, I-), and contact 2 closes the current circuit from P1 through resistor K.82 to L2, whereby LNI of mode 2 is turned on. When I1 is in 1 + 2 mode, contacts 3, 4 are open and disconnect the data line between IS1 and PH1, and also IS1 is disconnected from PH2 (or contacts 3a, 4a ground the data lines I +, I-), and contacts 1, 2 close the current circuit from P1 through K81, K82 to L1, L2, due to which The LEK modes 1 and 2 are taken.

The switch 102 is an isolated device, since I1 is mechanically actuated, and its control is influenced by IS1 or PH1 or PH2. There is no possibility of a workaround to the data lines And +, And - and keys 1, 2. Therefore, when contacts 3, 4 are open (3a, 4a are closed), the connection between PH1 and IS1 is interrupted and the keys of contacts 1 and 2 are disabled without the possibility of a workaround.

FIG. 11 shows an example of an electrical embodiment of an insulated circuit breaker 102 including a disconnector 200 (shown as I2), a mode indicator of the circuit breaker 300 (presented as 11), and an isolated logic module 400 (presented as K1). I2 represents K and is made in the form of an indicator of the LEI modes (as shown in diagram 11), K1 is presented in the form of stand-alone keys 111, 112, 113.

By simultaneously pressing the keys 111 and 112, the relay K is activated, while the contacts in the circuit to be disconnected are opened and contact K is closed; Relay K, while continuing to receive electrical power, as long as key 113 is in a normal state, turns on LEU. When you press the key 113, the relay K is turned off, and the broken circuit (s) returns to its previous (normal) state.

The switch 102 is an isolated device, since the relay coil K and K1 (which are the control elements I2) are not electrically connected to any components, are not adjacent to them and are protected from them. Thus, they cannot be controlled directly or indirectly (cross-linking) using other components. There is also no workaround to circuit broken relay K.

- 11 013885

FIG. 12 shows another electrical embodiment of an insulated circuit breaker 102 including a disconnector 200 (shown as Ό2), a mode indicator of the circuit breaker 300 (shown as II), and an isolated logic module 400 (presented as K2). Ό2 is a relay with LK.3 memorization. II is LEO. K2 is presented in the form of keys 121, 122, 123, 124 and a relay with memorization of LK.1 and LK2.

When the keys 121, 122, 123 are pressed in the correct sequence, the relay is activated with memorization, the contacts of the circuit to be disconnected are opened, and LEE is switched on. Relays with memorization LK.1, LK2 and LK.3 remain in a fixed (latched) position until the key 124 is pressed. When the key 124 is pressed, the broken circuit returns to its normal state.

The switch 102 is considered to be isolated, since the relay coil LK.3 and K2 (which are the control elements Ό2) are not electrically connected to any components, are not adjacent to them and are protected from them. Thus, they cannot be controlled directly or indirectly (cross-linking) using other components. There is also no workaround to circuits disconnected with a LK3 relay.

FIG. 13 shows yet another modification of an electrical / electronic insulated circuit breaker including a disconnector 200 (shown as Ό2), a mode indicator of circuit breaker 300 (shown as 11), an isolated logic module 400 (presented as K3), and an input mode indicator 500 (presented in view 12). Ό2 is made in the form of relays K1 and K2, 11 is made in the form of БЕО b1, and 12 is made in the form of БЕО b2 (also as b1), K3 is made in the form of a mechanism mechanically connected to the keys 130, 131, 132, 133, 134, 135 the main keyboard (the key 135 has 2 contacts), the triggers E1, E2, E3, E4, E5, E6 and one-way circuits ΟΝ1, ΟΝ2, ΟΝ3, ΟΝ4 and ΟΝ5.

When the key 130 is pressed, E1 changes its state and activates the relay K1, which disconnects the desired subgroup of peripheral devices 104 and turns on L1, implying that the protective switch is in safe mode. To exit the safe mode, the user presses the key 131, which activates ΟΝ1 to transmit a signal to E3. E3 changes its state and ensures the operation of E4. Then the user presses the key 132, which activates ΟΝ2 to transmit the signal to E4. E4 changes its state by activating K2; K2 disconnects the main keyboard from the core of the device 100 and turns on L2 (in this state, the protective switch provides safe data input). Then the user presses the keys 133 and 134 in such a sequence that the trigger E5 first changes its state, then Eb and then Eb to disconnect the relay K1; K1 reconnects the previously disconnected subgroup of peripheral devices 104, turns off L1, and connects the ground to key 135 (second contact). Key 135 is used to reset the trigger sequence E3, E4, E5, E5, in order to re-press the sequence of keys, causes E2 to change its state and disconnects relay K2. Then relay K2 restores the connection of the main keyboard and turns off 1, 2, implying that the protective switch is switched to normal mode.

The switch 102 is considered insulated, since K1 and K2 have an isolated winding, and K3 (control elements Ό2) is not electrically connected to any other components, is not adjacent to them and protected from them (keys 130, 131, 132, 133, 134 are connected with the main keyboard only mechanically). Thus, they cannot be controlled directly or indirectly (cross-linking) using other components. There is also no workaround for circuits disconnected using relays K1 and K2.

FIG. 14 shows an example of an electromechanical embodiment of an insulated switch 102 that includes a disconnector 200 (shown as Ό 1) in a mobile terminal (eg, a mobile phone). The mobile phone includes the main part of the device 100 (presented in the form of ES2) with a 1bb processor (SRI), 1b5 memory, 1b4 SIM card, 1b3, 1C LCD camera 145, 1b2 audio interface, 1b1 power management module; PH2 represents communication components b02, where PH2 is a transceiver, PH7 is a SRZ receiver, PH3, PH4 and PH5 are sensor components b00, PH1 is a user input component 402; PH3 consists of a microphone; PH4 consists of a speaker; RN5 consists of a camera, and RNb consists of keyboards. All components and subcomponents are interconnected, as shown in the diagram. In mode 1 Ό1 disconnects PH4 and PH5. In mode 2, Ό1 disconnects PH2 (to disconnect PH2 Ό1 can disconnect power supply module 1b1 or processor 147 from PH2). In 1 + 2 mode, Ό1 disconnects PH3, PH4, PH5 and PH2. However, PH1 and PH7 remain unused by the safety switch. PH2 shutdown options are shown in the diagram.

FIG. 15 shows an example of an electromechanical insulated switch 102, which consists of a disconnector 200 (shown as Ό1) and an input mode indicator 300 (shown as 11) in a 1P telephone.

The 1P phone includes the main part of the device 100 (represented as an ES3) which includes a UoGR processor 151, a memory 152, an audio / voice encoder-decoder 153, a power module 154, a control device (controller) LCD 155, LCD 15b, camera decoder 157. Elements PH7, PH8, PH9 are presented in the form of sensory components b00; PH11 is presented as a component of communication b02 and

- 12 013885

PH10 is presented as a user input component 402. PM7 consists of a microphone; PH8 consists of a speaker; PH9 consists of a camera; PH11 - from the transceiver of the local network, and PH10 - from the keyboard. All components and subcomponents are interconnected, as shown in the diagram.

The safety switch has only one mode (mode 1), since modes 1 and 1 + 2 are not provided in this model. In mode 1, I1 disconnects PH8 and PH7 and activates 11, consisting of K.1, L1 and B1. As shown in FIG. 15, a load resistor 158 can be used to protect an open circuit between PH8 and IC2 in mode 1. The options for turning off PH8 are shown in the diagram. PH9 and PH10 are not disabled.

FIG. 16 shows an example of an electrical / electronic embodiment of an insulated switch 102 (represented as I2) that includes a disconnector 200, a mode indicator of a switch 300, an isolated data input logic module 400, an input status indicator 500, in a mobile terminal (e.g., a mobile phone).

The mobile phone includes the main part of the device 100 (represented as IC1) with a processor (SRI) 166, memory 165, SIM card 164, LCD 163, audio interface 162, power management module 161. The PH2 transceiver represents communication components 602; PH3 and PH4 represents sensory components 600; PH1 - user input component 402; PH3 consists of a microphone; PH4 consists of a speaker; and PH1 - from the keyboard. The power management module 167 is shown in the diagram. The disconnector 200 may include additional relays 201.

In the isolated data input logic module 400, there is a logic module 401 and keys B to mode 168, From mode 169, keys 0-9 170, and there may also be other keys 171.

The PH1 keyboard has Cancel 172 keys, Call 173 keys, 0-9 174 keys, and other 175 keys. Communication line Date 1, designated 176, is intended for sending SMS call data.

Signal - Signal 1 177, which releases the transmission (out) of long data packets from the CPU (SRI) 166.

Signal Signal 1 177 has the highest priority in PH2. The communication line Date 2, designated 178, is intended for data transmission from PH2 to the CPU (SRI) 166. The communication line Date 3, designated 179, is designed to transmit data from the CPU (SRI) 166 to PH2. Additional signals are designated 180.

All components and subcomponents are interconnected, as shown in the diagram.

To enter mode 1, the legitimate user presses the Cancel key 172, which is mechanically connected to the B mode key 168 of the isolated data input logic module 400, which turns on relay K1 of the isolated disconnector 200. Relay K1 disconnects PH3 from the audio interface 162 and / or disconnects Date 1 176, responsible for the data of SMS calls, and / or Signal 1 177, which releases the transmission (outward) of long data packets from the CPU (SRI) 166. An isolated switch disconnects part of PH2 from IC1, while the rest remains connected. When the data line responsible for SMS calls is disconnected and / or the signal permitting the transmission (outward) of long data packets from the CPU (SRI) 166 is disconnected, the PH2 transceiver can receive SMS calls and transmit location data (1a1uyu nrba1s). since 178, 179, 180 are not disconnected, but cannot send SMS outgoing calls. This cannot be bypassed / canceled by IS1, since Signal 1 177 has the highest priority in PH2 and I2 is isolated.

K1 also turns on the indicator of the mode switch 300, which shows the legitimate user that the switch is in mode 1. To exit mode 1, the legitimate user presses the Call key, which is mechanically connected to the key From the mode of the isolated data input logic module 400, which trips relay K1 isolated isolator 200. Relay K1 connects PH3 to audio interface 162 and connects Date 1 176, which is responsible for SMS call data, and signal 1 177, which releases transmission (outward) of long data packets from the CPU (SRI) 166. K1 also turns off the mode indicator LED of the switch 300, shows the legitimate user that the switch is in normal mode.

Without additional actions, a legitimate user blocks voice recording and SMS forwarding, data or call transfers by an illegal hacker program.

For safe entering of the RGY code, the legitimate user dials the numbers (0-9) 174 prefix, which includes 170, then the Cancel key 172, which is mechanically connected to the B key 168 of the isolated logical data input module 400. In response to this sequence, the isolated data input logic module 400 turns on the relay K2 of the disconnector 200, the K2 of the disconnector 200 disconnects the PH1 from the CPU (SRI) 166. The logic module 400 also turns on the LED of the input status indicator 500, which indicates to the legitimate user that the safe RGY code can be entered. After entering the secure RGY code and performing other operations, the legitimate user types a sequence or combination of keystrokes to exit the safe input mode, in response to this, the isolated data input logic module 400 disables the relay K2 of the disconnector 200, the switch K2 of the disconnector 200 connects PH1 to the CPU (SRI ) 166. Logic module 400 turns off the input status indicator LED 500, which indicates that the switch has returned to normal mode.

- 13 013885

FIG. 17 shows an example of an electrical / electronic embodiment of an insulated switch 102 (represented as Ό2) that includes a disconnector 200, an isolated controller 700, an isolated data input logic module 400, an input status indicator 500, in a mobile terminal (e.g., a mobile phone).

The mobile phone includes the main part of the device 100 (represented as IC1) with a processor (SRI) 166, memory 165, SIM card 164, LCD 163, audio interface 162, power management module 161. The PH2 transceiver represents communication components 602; PH3 and PH4 represents the sensor components 600, PH1 represents the user input component 402. PH3 consists of a microphone and PH4 consists of a speaker, and PH1 is of a keyboard.

The power management module 167 is shown in the diagram. The disconnector 200 may contain additional relays 201. In the isolated logical input module 400 there is a logical module 401 and the keys To mode 168, From mode 169, keys 0-9 170, the module may also have other keys 171.

In the PH1 keyboard there are Cancel keys 172, Call keys 173, keys 0-9 174 and other 175 keys. Communication line Date 1, designated 176, is intended for transmitting SMS calls data. Signal - Signal 1 177, which releases the transmission (out) of long data packets from the CPU (SRI) 166. Signal Signal 1 177 has the highest priority in PH2. Communication line Date 2 indicated

178, is designed to transmit data from PH2 to the CPU (SRI) 166. Communication line Date 3, indicated

179, is designed to transmit data from the CPU (SRI) 166 to PH2. Additional signals indicated

180, The isolated controller 700 is isolated by optocopler 181 from PH2. All components and subcomponents are interconnected, as shown in the diagram.

To enter the restricted communication mode, the legitimate user presses the Cancel key 172, which is mechanically connected to the B key of 168 mode of the isolated data input logic module 400, which sends a signal of the corresponding logical state to the isolated controller 700. The isolated controller 700 sends a signal Signal 1 177 to PH2 through an optocopler

181, blocking the transmission (out) of long data packets. When the transceiver is blocked (outward) from transmitting long data packets, the PH2 transceiver can receive SMS file data, incoming calls, can transmit location data (1st, 1st, and 2nd! E), since 178, 179,180 are not blocked, but cannot transmit SMS file data outgoing calls. This cannot be bypassed / canceled by ES'1. since signal 1 177 has the highest priority in pH2.

To exit the restricted communication mode, the legitimate user presses the Call key 173, which is mechanically connected to the key From the 169 mode of the isolated data input logic module 400, which sends a signal of the corresponding logical state to the isolated controller 700. The isolated controller 700 cancels the signal Signal 1 177 to PH2 through an optocopler 181, allowing the transmission (out) of long data packets.

Without additional actions, a legitimate user blocks the sending of SMS, the transfer of data or calls by an illegal hacker program.

For safe entry of the RGY code, the legitimate user dials the numbers (0-9) 174 prefix connected to 170, then the Cancel key 172, which is mechanically connected to the B key 168 of the isolated data input logic module 400. In response to this sequence, the isolated data input logic module 400 turns on the relay K.1 of the disconnector 200, the K1 of the disconnector 200 disconnects the PH1 from the CPU (SRI) 166. The logic module 400 also turns on the input status indicator LED 500. This indicates to the legitimate user that it is safe code can be entered. After entering the secure RGY code and performing other operations, the legitimate user types a sequence or combination of keystrokes to exit the safe input mode, in response to this, the isolated data input logic module 400 disconnects the relay K1 of the disconnector 200, the K1 of the disconnector 200 connects the PH1 to the CPU (SRI ) 166. Logic module 400 turns off the input status indicator LED 500. This indicates that the switch has returned to normal mode.

FIG. 18 shows an example of an electrical / electronic embodiment of an insulated switch 102 (represented as Ό2) that includes a disconnector 200, a mode indicator of a switch 300, an isolated data input logic module 400, an input status indicator 500 in a mobile terminal (e.g., a mobile phone). The mobile phone includes the main part of the device 100 (represented as IC1) with a processor (SRI) 166, memory 165, SIM card 164, LCD 163, audio interface 162, power management module 161. PH2 represents communication components 602; PH3, PH4 sensor components 600; PH1 is a user input component 402. PH3 consists of a microphone, PH4 consists of a speaker, and PH1 is of a keyboard. The power management module 167 is shown in the diagram. The disconnector 200 may include additional relays 201.

In the isolated data input logic module 400, there is a logic module 401, a timer 402 and B mode keys 168, keys 0-9 170, and the module may also have other keys 171.

- 14 013885

In the PH1 keyboard there are Cancel keys 172, keys 0-9 174, other keys 175.

A portion of the isolated data input logic module 400 is located in the external device E1 and can only be connected by a legitimate user. This part is located in the same housing with the charger 1611 and is connected to the mobile terminal simultaneously with the charger 1611.

The external part of the isolated data input logic module 400 contains a memory 403, the internal part of the isolated data input logic module 400 contains a timer 402. All components and subcomponents are interconnected, as shown in the diagram.

As part of the routine operation, the timer 402 counts the time to a preset value (for example, 48 hours), then turns on the relay K.1 of the disconnector 200. The relay K1 of the disconnector 200 disconnects the LCD 163 from the processor 166 and disconnects the memory 165, SIM card 164 and LCD 163 - from the power control module 161. K1 also includes a mode indicator LED of the switch 300, which indicates that the switch in the lock mode, and not the mobile terminal, is damaged. This makes the mobile terminal useless for an illegal user who does not have the external part of the data input logic 400, with a secure code stored in its memory.

To exit the lock mode, the legitimate user connects the external part E1 of the isolated data input logic module 400 (together with the charger), the logic module 401 reads the code recorded in the memory 403 of its external part E1, if the code is correct, the logic module 401 resets the timer 402, which turns off relay K1 and timer 402, and starts counting. The relay K1 of the disconnector 200 connects the LCD 163 to the processor 166 and connects the memory 165, the SIM card 164 and the LCD 163 to the power management module 161. K1 also turns off the mode indicator LED of the switch 300, which indicates that the switch is in normal mode.

For safe entry of the ΡΙΝ-code, the legitimate user dials the numbers (0-9) 174 prefix connected to 171, then the Cancel key 172, which is mechanically connected to the B key 168 in the isolated data input logic module 400. In response to this sequence, the isolated data input logic module 400 turns on the relay K2 of the disconnector 200, the K2 of the disconnector 200 disconnects the PH1 from the CPU (SRI) 166. The logic module 400 also turns on the input status indicator LED 500, which indicates to the legitimate user that a safe ΡΙΝ code can be entered. After entering the secure ΡΙΝ-code, the user can change the code in the memory of the external part of the logical module 400 and do other operations. After that, the legitimate user types a sequence or combination of keystrokes to exit the safe entry mode, in response to this, the isolated data input logic module 400 disconnects the relay K2 of the disconnector 200, the K2 of the disconnector 200 connects the PH1 to the CPU (SRI) 166. The logic module 400 turns off the LED input status indicator 500, which indicates that the switch has returned to normal mode.

Examples of standard subgroups of sensor components 600 that can be disconnected using a disconnector 200 in mode 1 are:

1) microphone, speaker and camera, for example, in a mobile phone;

2) a microphone and a camera (if the speaker is not able to record sound, you can leave it turned on and thereby save more functions), for example, in a mobile phone.

Examples of standard subgroups of communication components 602 that can be disconnected using a disconnector 200 in mode 2 are:

1) radio communication, for example, in a mobile phone;

2) bluetooth, IR and / or K’RS (short-range wireless communication), for example, in a mobile phone, where this mechanism is used to support RauRacc technology (electronic payment), and bluetooth and IR are used to transmit information;

3) νί-Ρί, \ νίιη; · ιχ. for example, in a laptop.

Examples of attachment (mechanical coupling) of the input logic module 400 of the user.

1. The end of the call and the start of the call is attached to the button, for example, in a mobile phone.

2. Attaches to the joint cover, meaning that the operation of the device is initiated by closing / sliding the cover, for example, in a mobile phone or laptop.

3. Attaches to the keyboard, implying that the mechanism works when the user presses a combination or sequence of keys, for example, on a mobile phone.

4. Attaches to the mute button, for example, in a 1P phone.

5. Attached to the handset of the phone (when removing / returning it), implying that the operation of the device is initiated by turning on / off the handset, for example, in a 1P phone.

6. Attaches to the stylus holder, implying that the mechanism is triggered when the user returns the stylus to the holder or when removing it from the holder, for example, in a pocket PC / communicator.

Since the invention is described with a limited number of modifications, it is necessary to take into account numerous other options, modifications and developments that can be made on the basis of this invention. Those skilled in the art will appreciate that the invention may be embodied in other forms and in another manner without losing the essence of the invention.

- 15 013885

Modifications described in this invention are illustrative examples of the present invention, but are not exhaustive.

Claims (19)

CLAIM 1. The system for protecting a personal device from unauthorized access to it, including the main device; at least one peripheral device; an internal insulated switch, the functions of which cannot be controlled either by the main part of the personal device or by any peripheral device, containing an isolated disconnector for connecting and disconnecting the main device with a part of at least one peripheral device. 2. The system for protecting a personal device from unauthorized access to it, including the main device; at least one peripheral device; an internal insulated switch, the functions of which cannot be controlled either by the main part of the personal device or by any peripheral device, containing an isolated disconnector for connecting and disconnecting the main device with at least one peripheral device and at least part of one peripheral device. 3. The system for protecting a personal device from unauthorized access to it according to claims 1, 2, characterized in that the internal isolated switch is equipped with an independent controller for sending a signal or signals to at least one peripheral device and / or to its part. 4. The system for protecting a personal device from unauthorized access to it according to claims 1 to 3, characterized in that at least part of one peripheral device is made in the form of a group of peripheral devices, while an isolated disconnector for connecting and disconnecting the main device with at least part of one peripheral device has the ability to disconnect and connect any subgroup of a group of peripheral devices. 5. The system for protecting a personal device from unauthorized access to it according to claims 1-3, characterized in that the internal isolated switch contains isolated internal and external components for jointly triggering the circuit breaker. 6. The system for protecting a personal device from unauthorized access to it according to claims 1 to 3, characterized in that at least one peripheral device consists of a group of devices, while an isolated disconnector has the ability to disconnect and connect any subgroup of a group of peripheral devices. 7. The system for protecting a personal device from unauthorized access to it according to claims 1 to 3, characterized in that at least one peripheral device contains a user input component, while the internal isolated switch is equipped with an isolated user input logic module for reading user input. 8. The system for protecting a personal device from unauthorized access to it according to claims 1 to 3, characterized in that the peripheral device is selected from the group consisting of mobile phones, 1P phones, PDAs, communicators, laptop computers, desktop computers and network switches . 9. The system for protecting a personal device from unauthorized access to it according to claims 1-3, characterized in that, as an internal isolated switch operating independently of the personal device, a switch selected from the group or any combination of elements of the group consisting of a mechanical switch is used without a workaround driven by an electric drive, an electric and electronic switch, electrically isolated from the elements and components of a personal device. 10. The system for protecting a personal device from unauthorized access to it according to claims 1-3, characterized in that the personal device is equipped with an input mode indicator connected to an isolated disconnector to provide a visual indication of the status of the disconnector. 11. The system for protecting a personal device from unauthorized access to it according to claim 10, characterized in that the internal insulated switch is equipped with an input logical user module for reading user input. 12. The system for protecting a personal device from unauthorized access to it according to claims 1-3, characterized in that the internal isolated switch is equipped with an input mode indicator to provide a visual indication of the status of the internal isolated switch. 13. The system for protecting a personal device from unauthorized access to it according to claim 12, characterized in that a light-emitting device is used as an indicator of the input mode to provide a visual indication of the state of the internal isolated switch. 14. The system for protecting a personal device from unauthorized access to it according to claims 1 to 3, characterized in that at least one peripheral device contains a user input component connected to an isolated disconnector, while the internal isolated switch is equipped with an isolated user input logic module for reading introduced - 16 013885 user data. 15. The system for protecting a personal device from unauthorized access according to claim 14, characterized in that the internal insulated switch is equipped with an input mode indicator to provide a visual indication of the status of the switch. 16. The system for protecting a personal device from unauthorized access to it according to claims 1 to 3, characterized in that the internal isolated switch is equipped with an input mode indicator to provide a visual indication of the status of the switch. 17. The system for protecting a personal device from unauthorized access to it according to clause 16, characterized in that the internal isolated switch is equipped with an input logic module for the user to read user input. 18. The system for protecting a personal device from unauthorized access to it according to claim 17, characterized in that the internal isolated switch is equipped with an input mode indicator to provide a visual indication of the status of the user input logic module. 19. The system for protecting a personal device from unauthorized access to it according to claim 18, characterized in that a light-emitting device is used as an indicator of the input mode.