KR100490394B1 - Computer security method and computer security system using ignition key card - Google Patents

Abstract

The present invention discloses a computer security method and a computer security system using a startup key card. Computer security method according to the present invention using a starter key card, (a) determining whether the starter key card is inserted into the starter key slot located at a predetermined position of the computer when the computer booting, (b) the starter key card If is inserted, the unique product serial number stored on the ignition key card and the unique product serial number of the system side cross-check and (c) if the unique product serial numbers match, proceed to normal operation to perform the computer boot process With steps.

Description

Computer security method and computer security system using ignition key card

The present invention relates to an anti-theft function for a computer, and more particularly, to a portable computer and a security method having an anti-theft start key card to secure the computer by checking the startup key card inserted by the user to limit the use of the computer. will be.

In general, a security function for a computer refers to a function that controls and controls the use of such a resource by only users who are authorized to use the computer or the data managed by the computer. The security function may be achieved, for example, by using a security program to verify the user's password or by examining the user's permission level. Recently, as the importance of security increases, a more thorough computer security device is required. In particular, a computer security device using an integrated circuit (IC) card is noted.

The conventional IC card drive is inserted into an expansion bay provided in the front of the computer main body and mounted inside the computer such as a floppy disk drive or a CD-ROM drive. When the user wishes to use a computer, he or she must insert the corresponding IC card into the insertion slot of the IC card drive. The IC card drive checks the IC card inserted when the computer boots up and delivers it to the computer. Depending on the data checked, the computer restricts the use of the computer. In this regard, the IC card drive may be referred to as an access controller or IC card security device that controls access to a user's computer.

As described above, a conventional computer security device using an IC card has an IC card drive, which is separate hardware inserted into an expansion bay of the computer, and the IC card inserted into the IC card drive is checked only once when the computer is booted. Therefore, the conventional computer security device using an IC card has to add additional hardware to the computer, which increases the cost, and there is an uneconomical problem in terms of cost in view of only the security function. In addition, since the IC card is checked only once when the computer boots, there is a problem that the security effect of the computer is reduced.

An object of the present invention is to provide a computer security method using a startup key card to easily secure a computer by inserting a startup key card storing a unique product serial number of a system to boot a computer.

Another technical problem to be achieved by the present invention is to provide a computer security system having a startup key card which can easily boot a computer with a simple configuration and easily secures the computer.

In order to achieve the above object, a computer security method according to a preferred embodiment of the present invention using a startup key card,

(a) determining whether the ignition key card is inserted into the ignition key insertion slot located at a predetermined position of the computer when the computer is booted, (b) if the ignition key card is inserted, the unique product serial number stored in the ignition key card And comparing the unique product serial numbers on the system side with each other and (c) if the unique product serial numbers match, proceeding to a normal operation to perform a computer booting process.

In order to achieve the above object, a computer security method according to another preferred embodiment of the present invention using a startup key card,

(a) determining whether the computer has been booted with the ignition key card inserted into the ignition key insertion slot located in a predetermined position of the computer body; (b) if the ignition key card has been inserted, Performing routines to check for existence from time to time, (c) if the start-up key card does not exist, checking the key to lock the computer so that it cannot be used, and displaying a keylock status window on the screen, and (d) starting up When the key card is reinserted, comparing the unique product serial number stored in the ignition key card with the unique product serial number on the system side, and (e) if the unique product serial numbers match, the user proceeds to normal operation and the user It is provided with the step of making it available.

In order to achieve the above another object, a computer security system having a startup key card,

A start key card having a first memory storing a first unique product serial number, and a second memory storing a second unique product serial number, the start key card being positioned by a user at a predetermined position of the computer main body; When inserted into the ignition key insertion slot, the unique product serial numbers stored in the first and second memories are assigned to the ignition key card check unit connected to the ignition key card inside the computer main body and the ignition key card connected to the ignition key card check unit. Compare and match, it is equipped with a microcomputer that allows the user to use the computer.

Hereinafter, a configuration and operation of a computer security system having an anti-theft start key according to the present invention and a computer security method will be described with reference to the accompanying drawings.

1 is an external view of a portable computer having a ignition key card according to the present invention, and generally includes a computer main body 100, a monitor 102, a keyboard 104, a mouse 106, a touch pad 108, and a mouse button. The unit 110, the start key card 112 and the start key insertion port 114 is configured.

Referring to FIG. 1, a portable computer has, for example, a ignition key insertion hole 114 at an upper surface of the computer main body 100 as compared with a general portable computer, and a ignition key card 112 through the ignition key insertion hole 114. Has an expansion slot inside so that it can be plugged in. If the user wants to use the computer, the corresponding start key card 112 should be inserted into the start key insertion hole 114 located on the upper surface of the computer main body 100. Here, the ignition key card 112 stores a unique product serial number as at least security information for confirming the use authority of the computer. The computer main body 100 basically checks the ignition key card 112 inserted at the time of booting the computer to control the computer usage rights.

2 is a flowchart for explaining a preferred embodiment of the computer security method according to the present invention.

First, when the user presses the power button of the computer, power is supplied to each device in the system, and execution of the system power software is started (step 200). In the process of booting the computer, it is determined whether the security item is in the security item in the CMOS setup (operation 202). If it is not the security enable state, the process proceeds to the normal operation immediately and performs a boot operation (step 212). If it is in the security enable state, it is judged whether the ignition key card is inserted into the ignition key insertion hole of the computer main body (step 204).

If the ignition key card is inserted, the unique product serial number (S / N) of the ignition key card is descrambled (step 216). Step 216 is an optional step when the original product S / N is previously stored in the ignition key card when the original product serial number is scrambled and copied. After step 216, the start key card and the unique product S / N on the system side are collated with each other (step 218). As a result of mutual check, it is determined whether the unique product S / N stored in the ignition key card and the unique product S / N on the system side coincide with each other (step 220). If the unique product S / N coincides, the system proceeds to a normal operation to perform a computer booting process (step 212). On the other hand, if the unique product S / N does not match, the boot is not and the system is stopped (step 222).

On the other hand, if it is determined in step 204 that the start key card is not inserted into the start key insertion hole of the computer main body, a password request window is displayed on the screen of the monitor, and the user inputs a password (step 206). . A password is input from the user (step 208). In operation 210, it is determined whether the password inputted from the user matches the password preset in the system. If the passwords match, the system proceeds to the normal operation to perform a computer boot process (step 212). If the passwords do not match, booting stops and the system is stopped (step 214).

3 is a flowchart for explaining another preferred embodiment of the computer security method according to the present invention.

FIG. 2 illustrates a computer security method upon initial boot up of the computer, while FIG. 3 illustrates a computer security method during use of the computer after booting. It may be necessary to check for the existence of a startup key card from time to time, since the startup key card may be pulled out from the startup key insert of the main body of the computer while the computer is in use.

Referring to FIG. 3, first, system power software is enabled (step 200). It is determined whether the security item is in the security setup state in the CMOS setup (step 202). If the security is not enabled, the process proceeds to the normal operation (step 316). If the security is in the enabled state, it is determined whether the startup key card is inserted into the startup key insertion hole of the computer main body to confirm whether the booting of the computer is performed by the check of the startup key card (step 304).

If the ignition key card has been inserted, the operation proceeds to the normal operation following the insertion of the ignition key card (step 318). During the normal operation, a routine for checking the existence of a start key card from time to time is performed (step 320). According to this routine, it is determined whether a start key card exists (step 322). If there is a ignition key card, the process proceeds to step 320 again to check the existence of the card from time to time. On the other hand, if the user removes the ignition key card or randomly removes the ignition key card, the key lock status window is displayed on the screen of the monitor for the security of the computer, and the user waits for input of the password (step 324). ). The keylock status window indicates that the computer cannot be used by locking the input key from the time when no startup key card is present until the user enters a password or reinserts the startup key card.

After operation 324, it is determined whether a password is input from the user (operation 326). If there is a password input from the user, the process proceeds to the normal operation following the password input (step 316). On the other hand, if there is no password input from the user, it is determined whether there is a start key card inserted by the user again (step 328). If the start key card exists, it is determined whether the unique product S / N of the start key card and the unique product S / N of the system match (step 330). If the unique product S / N coincides, the operation proceeds to the normal operation following the insertion of the starter key card (step 332). If the unique product S / N does not match in step 330, the process proceeds to step 324 again to repeat the above-described operation.

In step 304, when the computer is booted, the user checks the authority of the user by inputting a password. If the startup key card is not inserted after the computer is booted, the routine for checking the existence of the card is ignored. After the password is input, the operation proceeds to the normal operation (step 306). During normal use of the computer, it is determined whether the user selects a keylock hotkey for security of the computer (step 308). The keylock hotkey is, for example, function keys F1 to F12, which are keys that control the use of the computer by locking the input key until the user enters the password again.

After the step 308, the key lock status window is displayed on the screen of the monitor for security of the computer, and the input of the password is waited (step 310). In operation 326, it is determined whether a password is input from the user. If there is a password input from the user, the system judges whether the password matches the preset password (step 314). If the passwords match, the process proceeds to the normal operation accompanying the password input (step 316). On the other hand, if the password does not match, the process proceeds to step 310 again to repeat the above-described operation.

4 is a block diagram illustrating a computer security system having an anti-theft start key card according to the present invention, which includes a start key card 400, a start key card check unit 420, and a microcomputer 440 on the system side. do.

Here, the start key card check unit 420 on the system side is implemented in PIIX4 in the main board as a preferred example. The ignition key card 400 and the ignition key card check unit 420 are each provided with a memory storing at least the unique product S / N. In the present invention, as an exemplary memory, an electrically erasable and programmable ROM (EEPROM) using an SM bus having a two-line data transfer scheme is used. The EEPROM1 402 in the ignition key card 400 and the EEPROM2 422 in the ignition key card check unit 420 on the system side start the clock pin (SMCLK), the data pin (SMDATA), and the ignition key insert of the computer main body. It is connected to the check pin (P_card_exist) which can know whether the key card is inserted.

In the security method of the computer described with reference to Figure 3, the step of determining whether the start-up key card 400 is present by checking the value of the check pin (P_card_exist). For example, if the value of the check pin P_card_exist is 1, the start key card 400 exists, and if it is 0, it may be determined that it does not exist.

When the ignition key card 400 is inserted into the ignition key insertion hole of the computer main body, the EEPROM1 402 of the ignition key card 400 and the EEPROM2 422 of the ignition key card checker 420 on the system side are respectively internally system. It is connected via a corresponding clock pin SMCLK, a data pin SMDATA and a check pin P_card_exist. When the ignition key card 400 and the ignition key card check unit 420 are connected in this way, the microcomputer 440 reads the unique product S / N from them and compares them with each other.

Fig. 5 shows the contents of the system side memory and the start key card memory. In the system side EEPROM2 422 shown in FIG. 4, a comparison with a unique product S / N stored in the startup key card 400 or a password input from a user when the startup key card 400 is not used is performed. The basic product S / N and password is basically stored, in addition to the user's personal information, name, address, phone number (Tel), memo, etc. are stored. Meanwhile, at least the unique product S / N is stored in the ignition key card 400 shown in FIG. 4.

6 is a flowchart for explaining a method of storing a unique product serial number in a memory.

First, the ignition key card is inserted into the system, specifically, the ignition key card insertion hole of the computer main body (step 600). When the ignition key card is inserted, it is connected to the ignition key card check portion in the system as described above. Attach a unique barcode label to the system (step 602). The bar code reader is connected to the system parallel port (step 604). The barcode scan value read by the barcode reader is transferred to the system through the system parallel port (step 606). The specific product S / N is copied to the memory of the starter key card and the system, specifically, the memory of the starter key card checker through a predetermined utility (step 608). After the ignition key card test, the process moves to the next process (step 610).

7 (a) and 7 (b) are diagrams showing a password screen at a conventional computer boot and a personal information item displayed on the password screen according to the present invention.

In Fig. 7 (a), since the conventional password screen has only a password input window for receiving a password, the original user cannot be known from the information on the screen when the user loses the computer. In contrast, the password screen improved by the present invention as shown in FIG. 7B includes personal information in addition to the password input window. The personal information represents, for example, a user's name, affiliation, contact information, memo details, etc. Referring to FIG. 4, the personal information is stored in the system side EEPROM2 422.

As such, by including personal information on the password screen, even if the user loses the computer, the user can be immediately identified, thereby increasing the possibility of return and maximizing the anti-theft effect in accordance with the theft alarm function. In addition, the personal information content may be used for user identification at the after-service center.

There is a condition to be settled for an efficient management system of the above-described anti-theft start key card. When the customer asks for the password to be removed, the after-sales service needs identification and verification procedures in response. Identification information can be checked with the personal information shown in FIG. 7 (b), and a confirmation procedure can be performed by A / S computer management of the stolen portable computer which will be described later.

8 is a block diagram showing an example of an A / S computer processing process at the time of theft of a portable computer.

Referring to FIG. 8, when a consumer loses, for example, a notebook computer N / P, the S / N of the stolen product is reported in a supervisor call (SVC). The SVC registers the S / N of the stolen goods in the host server, and the host server automatically reviews and notifies the SVC of all N / Ps by A / S request. The consumer reports the theft of the N / P to the police, while the SVC requires the police to investigate the stolen goods so that the police can find the stolen goods smoothly. Therefore, the unique S / N of the notebook computer enables the stolen N / P retrieval function and the theft warning message output in the computer program of the A / S center.

As described above, the computer security method and the computer security system using the anti-theft start key card according to the present invention, by inserting the start key card storing the unique product serial number of the system to boot the computer, it is simple and simple configuration It has the advantage of booting the computer and easily securing the computer.

1 is an external view of a portable computer having a ignition key card according to the present invention.

2 is a flowchart for explaining a preferred embodiment of the computer security method according to the present invention.

3 is a flowchart for explaining another preferred embodiment of the computer security method according to the present invention.

4 is a block diagram illustrating a computer security system having an anti-theft start key card according to the present invention.

Fig. 5 shows the contents of the system side memory and the start key card memory.

6 is a flowchart for explaining a method of storing a unique product serial number in a memory.

7 (a) and 7 (b) are diagrams showing a password screen at a conventional computer boot and a personal information item displayed on the password screen according to the present invention.

8 is a block diagram showing an example of an A / S computer processing process at the time of theft of a portable computer.

Claims (5)

In the computer security method using a startup key card, (a) determining whether the ignition key card is inserted into a ignition key insertion hole located at a predetermined position of the computer main body when the computer is booted; (b) if the ignition key card is inserted, comparing the unique product serial number stored in the ignition key card with the unique product serial number on the system side; And and (c) if the unique product serial numbers match, proceeding to a normal operation to perform the computer booting process. The method of claim 1, (d) requesting a password from a user if the ignition key card is not inserted in the step (a); And (e) if the input password matches the password set in advance on the system side, the computer security method further comprising the step of operating normally. The method of claim 1, wherein in step (b), And if the unique product serial number is scrambled and copied to the starter key card, descrambling before comparing with the unique product serial number on the system side. In the computer security method using a startup key card, (a) determining whether the computer is booted with the ignition key card inserted into the ignition key insertion slot located at a predetermined position of the computer main body; (b) performing a routine of checking the existence of the starter key card from time to time when the starter key card is inserted; (c) if the start key card does not exist as a result of the check, locking the key so that the computer cannot be used and displaying a keylock status window on the screen; (d) if the ignition key card is reinserted, comparing the unique product serial number stored in the ignition key card with the unique product serial number on the system side; And and (e) if the unique product serial numbers match, proceeding to normal operation to enable a user to use the computer. In a computer security system having a ignition key card, A start key card having a first memory storing a first unique product serial number; A second memory storing a second unique product serial number, and when the ignition key card is inserted into the ignition key insertion slot located at a predetermined position of the computer main body by a user, the ignition key card is connected to the ignition key card inside the computer main body. A start key card check unit; And And a micom for allowing the use of the computer if the start key card connected to the start key card check unit compares and compares the unique product serial numbers stored in the first and second memories. Computer security system.