KR19990004962A - Security device of computer terminal system and its security method - Google Patents

Abstract

The present invention relates to a security device of a computer terminal system having a main memory and a ROM BIOS, and a security method thereof, comprising: storage means for storing extended data and a key number and being part of the main memory; Card signal reading means for reading a security card storing a password; In response to an external first control signal, controlling the system, outputting a reset signal to the card signal reading means, reading a password from the card signal reading means, comparing the key number with the password and according to the result Control means for generating a second control signal for performing the next operation of the system,

By determining whether the password stored in the security card and the stored key number match, the system performs a power on self test (POST) only when the password and the key number match, thereby providing a floppy disk drive (FDD). Or, there is no need to prepare a separate program on the hard disk drive (HDD), there is an effect that can enhance the security function for illegal use by communication with the security card.

Description

Security device of computer terminal system and its security method

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security device for a computer terminal system and a security method thereof, and more particularly, to a security device for a computer terminal system for controlling booting of a system by a password and a security method thereof.

As computer terminal systems are widely used, the need for security is increasing. To this end, various devices and methods have been sought to prevent unauthorized users from using a hard disk drive (HDD) or floppy disk drive (FDD) after booting a computer. However, research on a method for blocking access to the system by a user who is not allowed at booting of the terminal system is insufficient. Therefore, the need for a safeguard for protection for the system at the time of booting the terminal system is more and more highlighted.

In general, one of the functions of IBM-based personal computer (IBM-PC) is the 'extended ROM function', and if used properly, it can double the scalability of the PC. The present invention is to solve the security problem of the IBM-PC using the extended ROM function.

First, the main memory structure of the IBM-PC, the A0000h ~ EFFFFh address area is empty, of which A0000h ~ BFFFFh area is occupied by the video RAM, C0000h ~ EFFFFh area is the expanded memory system (EMS) This is the part that is occupied. Here, the C0000h to EFFFFh areas may be used as the extended ROM areas.

As a security method of a computer terminal system used in the related art, a separate operating system (OS) or a program is loaded to prevent other people from using it.

The technical problem to be achieved by the present invention is a computer terminal for securely managing a computer terminal system without the need of an operating system (OS) or a program by using a security card stored in the extended ROM region and password of the ROM BIOS (BIOS) It is to provide a security device of the system and a security method thereof.

1 is a block diagram showing a configuration of a computer terminal system according to the present invention.

Figure 2 is a block diagram showing the configuration of one embodiment according to the present invention.

3 is a flowchart for explaining the operation of the present invention.

Explanation of symbols for main parts of the drawings

10: card reader 20: inside the computer

22: system memory 24: ROM BIOS

26: central processing unit (CPU) 28: interface

30: expanded memory area 40: control unit

42: storage 44: backup battery

46: voltage detector 48: switching unit

The present invention for achieving the above technical problem, in the security device of a computer terminal system having a main memory and a ROM BIOS (BIOS),

Storage means for storing extended data and a key number and being part of said main memory; Card signal reading means for reading a security card storing a password; In response to an external first control signal, controlling the system, outputting a reset signal to the card signal reading means, reading a password from the card signal reading means, comparing the key number with the password and according to the result Control means for generating a second control signal to perform the next operation of the system.

According to an embodiment of the present invention, during the power on self test (POST) in the system, the extended data is input to check the presence of a card reader, and the first control signal is generated according to the test result. And a ROM bios for controlling the system in response to the second control signal.

In this case, the storage means may electrically erase data and use a programmable read-only memory (EEPROM) or a static constant speed call memory (SRAM).

In addition, the voltage detection means for inputting the power supplied to the system to compare with a predetermined level, and generates a third control signal in accordance with the comparison result; Switching means for generating a fourth control signal for erasing data stored in said storage means; And a backup battery supplying power to the storage means in response to the third control signal and the fourth control signal.

On the other hand, the present invention for achieving the above technical problem, in the security method of a computer terminal system having a card reader for reading a security card storing a password, and a storage means for storing the encrypted key number,

A first step of initializing a card reader; A second step of determining whether a password stored in the security card and a key number stored in the storage unit match after the initialization of the card reader; Stopping the operation of the system if the card reader is not initialized or if the password and key number do not match; And a fourth step of performing a power on self test (POST) of the system when the password and the key number coincide with each other.

Hereinafter, with reference to the accompanying drawings, a preferred embodiment of a security device and a security method of a computer terminal system according to the present invention.

1 is a block diagram for explaining the configuration of a security device of a computer terminal system according to the present invention, reference numeral 10 denotes a card reader for reading a security card, and 20 denotes the inside of the computer.

The interior 20 of the computer includes an interface 28 connected to the card reader 10, a system memory 22, a ROM (Basic Input / Output System) (BIOS) 24, a central processing unit ( CPU) 26, and an extended memory area 30 for storing an encrypted key number.

The ROM BIOS 24 performs a power on self test (POST) when the computer terminal system is booted, inputs extended data stored in the extended memory area 30, and then enters the card reader 10. The presence is checked and a control signal is output to the central processing unit 26 in accordance with the checked result. The central processing unit 26 inputs this control signal and transfers the control right of the computer interior 20 to the expansion memory area 30. The CPU 26 receives the control right for the computer 20 from the expansion memory area 30 in response to the second control signal C2 generated in the expansion memory area 30. The security card input to the card reader 10 stores a password and outputs a reset response signal in response to a reset signal from the extended memory area 30.

FIG. 2 is a block diagram illustrating a configuration of the extended memory area 30 illustrated in FIG. 1. The controller 40, the storage 42, the backup battery 44, the voltage detector 46, and the switching are shown in FIG. The part 48 is comprised.

The storage unit 42 shown in FIG. 2 stores the extended data and the encrypted key number, and is a part of the main memory, that is, an extended ROM area, which is capable of electrically erasing and programming a read-only memory (EEPROM). Electric Erasable and Programmable ROM (SRAM) or Static Constant Speed Memory (SRAM).

The controller 40 controls the system in response to the first control signal C1 from the central processing unit 26, inputs a reset response signal from the card reader 10, and responds to the reset response signal. The key number stored in the storage 42 is compared with the password stored encrypted in the security card. Thereafter, the second control signal C2 is output to the CPU 26 in correspondence with the result of the comparison.

On the other hand, the extended memory area 30 is an additional function to protect the contents stored in the storage unit 42 and to intentionally erase data stored in the storage unit 42 when the computer 20 is powered off. There is a function that can. For these functions, there is a backup battery 44 for supplying power to the storage 42 in response to the third control signal C3 and the fourth control signal C4.

At this time, the voltage detector 46 receives the power supplied to the system, compares it with a predetermined level, and generates a third control signal according to the compared result. That is, it is determined whether the power supplied to the inside of the computer 20 is turned off. In addition, the switching unit 48 is switched from the outside to erase the data stored in the storage unit 42 to generate the fourth control signal C4.

The interface unit 28 may be implemented by RS-232C and serves as a data interface between the card reader 10 and the extended memory area 30.

3 is a flowchart for explaining the operation of the computer terminal system to which the present invention is applied, the step of checking the security (steps 60 to 76) during the power on self test and performing the power on self test and the following programs Steps 72 and 74 are made.

First, when the IBM-PC is booted, the ROM BIOS 24 performs a POST (step 60). During the POST, the ROM BIOS 24 reads data at a predetermined address of the storage unit 42 of the extended memory area 30 and reads the read data to determine whether a device corresponding to the extended ROM exists. (Step 62). That is, in step 62 it is determined whether there is a security device according to the present invention. If there is a security device, the ROM BIOS 24 transfers control of the system to the expansion memory area 30 through the CPU 26 (step 64). After step 64, the card reader 10 for inputting the security card is initialized (step 64). In step 64, the controller 40 outputs a reset signal to the card reader 10 through the interface 28.

After step 64, the controller 40 determines whether the reset response signal ATR (Answer To Reset) is input from the card reader 10 (step 68). Step 68 is a step of determining whether the security card is initialized, that is, whether the security card is mounted in the slot of the card reader 10.

If a security card is installed in the slot, a file open command is sent to the security card and waiting for a response, and the public or encrypted key number stored in the storage unit 42 matches the password entered from the security card. (Step 70). If the password and key number match, the ROM BIOS 24 takes control again from the security device and continues the POST (step 72). After operation 72, the system loads an operating system (OS) and executes application programs to be performed next. If necessary, the key number may be obtained or changed after manipulating the value of the control register of the storage unit 42 even during the execution of the application program.

However, if the security card is not initialized or if the password and the key number do not match, the operation of the terminal system is stopped (step 76).

As described above, since the security device for the personal computer terminal system and the method of operating the system according to the present invention are performed before the operating system (OS) is loaded at the time of computer booting, the floppy disk drive (FDD) or hard drive There is no need to prepare a separate program on the disk drive (HDD), the security function for illegal use is enhanced by communication with the security card, it is useful to the financial terminal system.

Claims (6)

A security device for a computer terminal system having a main memory and a ROM BIOS, Storage means for storing extended data and a key number and being part of said main memory; Card signal reading means for reading a security card storing a password; In response to an external first control signal, controlling the system, outputting a reset signal to the card signal reading means, reading a password from the card signal reading means, comparing the key number with the password and according to the result And control means for generating a second control signal for performing the next operation of the system. The method of claim 1, While the system performs a power on self test (POST), the extended data is input to check the presence of a card reader, and the first control signal is generated according to the test result, and the second control signal is applied to the second control signal. And a ROM bios for controlling the system in response. The method of claim 1, And said storage means is an electrically erasable, programmable read only memory (EEPROM). The method of claim 1, And said storage means is a static constant speed call memory (SRAM). The method of claim 1, Voltage detection means for inputting power supplied to the system, comparing it with a predetermined level, and generating a third control signal in accordance with the compared result; Switching means for generating a fourth control signal for erasing data stored in said storage means; And And a backup battery for supplying power to the storage means in response to the third control signal and the fourth control signal. A security method of a computer terminal system having a card reader for reading a security card storing a password and a storage means for storing an encrypted key number, A first step of initializing a card reader; A second step of determining whether a password stored in the security card and a key number stored in the storage unit match after the initialization of the card reader; Stopping the operation of the system if the card reader is not initialized or if the password and key number do not match; And And a fourth step of performing a power on self test (POST) of the system when the password and the key number coincide with each other.