DE19805745A1 - Protection of data against computer viruses and external access over network - Google Patents

Abstract

The system requirements are for a computer with at least two IDE-(AT bus) hard disc droives 4,6. In order to protect the data one drive 6 is temporarily made unaccessible when on line and this drive is coupled to a controller 2 via a switch 8. This prevents any access to important information over the network. A restart is required before the drive can be accessed.

Description

Lots of people who like the opportunities of worldwide networking, for example on the Internet, see and would like to take advantage of on the other hand, also recognize possible dangers associated with the Connect your computer to such a gigantic network possibly arise.

Nobody is comfortable with the thought that maybe someone else you don’t even know, spying, spying on data, and for uses his (criminal) purposes.

Another problem is that the transmission of viruses or similar programs could cause damage. Protective measures that are important in connection with the online operation of computers should be briefly outlined below:
Data backup with backups and RAID systems: This makes it possible to restore lost or changed data. Data backup is indispensable on any computer with serious use, but is hardly ever sufficient as the sole means of guaranteeing data protection and data security.

Virus scanners: They are an important complementary measure for everyone other methods used, but are not sufficient as sole protection out.

Fire Wall Systems: A software solution that protects the unauthorized To prevent access to a computer. Fire wall systems are coming on larger IT systems where it is not organizationally so it is simply possible to generally block data against access, in order to Use, e.g. B. in banks that offer online banking. Fire wall Systems are not as secure as hardware protection, but they do greater flexibility in using existing ones Computing resources.

They are currently in strong development and will be fine a certain one also for the sector of smaller PC applications Get meaning.

Encryption method: You are supposed to evaluate data by unauthorized persons if they gain access to have. Encryption methods are a necessity in the Transfer sensitive data and also provide one additional protection, but always need a certain amount additional organizational effort.

It has often been suggested that, to be on the safe side, provide a separate computer for internet access to everyone To avoid problems.

This is certainly not unreasonable, but it also has disadvantages:
In addition to the considerable costs for hardware, maintenance, and replacement that will become necessary at some point, which another computer brings with it, this also requires space and energy.

And we have to buy an operating system again. Peripheral devices such as CD-ROM drives etc. are required several times. However, all of these parts are subject to wear in that they become obsolete relatively quickly. You have to live with that, but you should try to keep your costs limited. Perhaps more serious is another disadvantage:
With all the advantages, a special computer may ensure that we are wrongly weighing ourselves too safety. What will happen to the software that we have downloaded to this computer from the Internet? We will definitely want to use them on other computers. Will we always think of the virus scan we actually wanted to do?

Special only because of the intended online access Existing computers: They prevent data from being spied on just as reliable as the solution presented in this document, but mean more effort and possibly worse Overview of the organizational measures that are otherwise necessary took.

Based on these considerations, the desire arose To create a solution that is cheaper than an extra computer and whose task is performed as well or better. The solution is that the computer used has at least 2 Hard drives must have.  

Only one hard drive is released during online operation, all of them others are made inaccessible to everyone (including the Computer users).

Spying on sensitive data is therefore completely impossible. The transmission of viruses or other unwanted programs cannot be ruled out, of course. There is always this danger if you use software, especially if you use programs starts.

The transmission of these unwanted programs can, however initially refer only to the memory and the shared hard drive, so stay limited for now.

It is now like the solution with a specially for the online Access provided computers also, under the responsibility of the Users, the possibility of redistributing such programs avoid. Specifically, this means that a virus check in useful Intervals, preferably after each online operation and before the The other plate (s) should be released again.

The solution according to the invention contains electronics that make it possible read and write access to the controller of one or more Hard drives impossible to make and later To release time again. After the cold start of the computer after reset or switch on All drives are always released first. The electronics are controlled by software, so that a reasonable and comfortable operation can be made possible.  

Normally, the shutdown and release will be the desired one Times via the corresponding software or the restart triggered.

Applications of the solution according to the invention are also conceivable for everyone other cases where access to certain drives is impossible should be made.

We are thinking of protecting data and programs Children playing on the computer or protecting data and programs on computers used by several people different access rights can be used.

An embodiment of the invention is based on the drawing explained.

It shows use in a PC with at least one free ISA slot for the controller ( 2 ). PCs with ISA, EISA, VESA Local Bus or a PCI bus system are possible.

For the exemplary embodiment, the computer must contain at least 2 IDE (AT bus) hard disks ( 4 and 6 ) as physical hard disk drives.

To protect data, a hard disk ( 6 ) is made temporarily inaccessible.

The data on this disk ( 6 ) cannot be accessed during online operation.

Downloaded files can only be saved on this disk after the Re-release copied.

Technically, the desired function is realized in such a way that the control ( 2 ) manipulates signals in the hard disk connection cable ( 9 ) via the electronic switch ( 8 ) in such a way that write and read accesses to the hard disk ( 6 ) become impossible.

If desired, the re-release can even be done by restarting the Computers are made dependent.

In order to be able to use parts of the solution according to the invention for several drives if necessary and to keep cable lengths limited for electrical and financial reasons, the control ( 2 ) and electronic switch ( 8 ) are spatially separated and the electronic switch ( 8 ) According to the invention arranged in the immediate spatial vicinity of the hard disk ( 6 ) to be locked.

Spying on sensitive data can, if used properly, affect everyone Cases are definitely excluded.

Further protection requirements are set out in the possible framework clear and calculable way satisfied.

This is a virus check if you work in a disciplined manner always feasible when it should actually be done.

This way of working can also be automated, so that a high level of security, but also comfort.  

Reference list

1

IDE or EIDE controller

2nd

Control for electronic switches

3rd

Connection line to the electronic switch

4th

Hard drive C

5

Hard disk connection cable

6

hard drive to be switched off

7

by electronic switch (

8th

) influenceable lines

8th

electronic switch

9

Hard disk connection cable

Claims (6)

1. Protection device against computer viruses and external espionage attacks on data carriers during online or network operation of the computer, characterized in that when operating several drives ( 4 , 6 ) a number of drives ( 6 ) is switched off in terms of hardware, so that an uncontrolled transmission of unwanted programs or data and uncontrollable access to important data and documents (external espionage attacks) on these drives ( 6 ) are not possible. 2. Protection device against computer viruses and external espionage attacks on data carriers during online or network operation of the computer according to the preceding claim, characterized in that the drives ( 6 ), which are provided for switching off, can be switched off when the computer is switched on. 3. Protection device against computer viruses and external espionage attacks on data carriers during online or network operation of the computer according to one of the preceding claims, characterized in that one or more supply lines (e.g. control lines ( 9 )) of the drives to be disconnected via a controller ( 2 ) and a connecting line ( 3 ) are influenced ( 7 ) so that both write and read access to these drives ( 6 ) are absolutely impossible. 4. Protection device against computer viruses and external espionage attacks on data carriers during online or network operation of the computer according to one of the preceding claims, characterized in that the separation of the drives to be protected ( 6 ) by an electronic switch ( 8 ) via a controller ( 2 ) is triggered by software. 5. Protection device against computer viruses and external espionage attacks on data carriers during online or network operation of the computer according to one of the preceding claims, characterized in that, once the electronic switch ( 8 ) has been set, it can only be reset by restarting the computer . 6. Protection device against computer viruses and external espionage attacks on data carriers during online or network operation of the computer according to one of the preceding claims, characterized in that the necessary electronics consist of locally separate circuit parts ( 2 and 8 ), such that the switching action itself in the immediate spatial proximity of the drives ( 6 ) to be switched off can take place, as a result of which line lengths of multi-core cables remain limited and circuit parts ( 2 , 8 ) can be used repeatedly.