JP2003122444A - System and method for assuring security of computer cpu - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and method for assuring the security of a computer CPU. SOLUTION: The security of the computer CPU is assured mainly through a two-layer protection method for hardware and software, to thereby completely reject intrusion of hackers and ensure the security of hard disc data. In terms of software, the system does not perform authentication after startup but the computer can be started only after authentication of an IC card and fingerprints. In terms of hardware, saved data are encrypted by an encryption/decryption card to prevent theft of the hard disc, and the password of the card is deleted by a microswitch which is actuated upon the release of a housing.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for securing a kind of computer CPU.
In particular, the present invention relates to a system and method for simultaneously securing the security of a computer CPU by simultaneously using a two-layer protection system of a kind of hardware and software.

[0002]

2. Description of the Related Art The convenience of computers has been widely accepted in daily life with the management of personal data or the application to financial systems. However, its safety is not sufficient and there is still a lot of room for improvement.
In particular, future net ID identification systems and electronic payment systems will lead the construction of the overall foundation. Therefore, it is necessary to analyze the factors that threaten the safety of the existing system equipment before the actual general use. Computer C
Once the PU has been compromised or the hard disk stolen, all data is exposed or tampered with. Known computer CPU
In the authentication process for protecting the security, the OS system is normally used for authentication after booting, or the BIOS system is used for authentication in the booting process.
However, since these authentication methods have already activated the CPU, it is not possible to completely prevent hackers from entering. Further, the known protection methods are only software methods, but if the hard disk storing the data is directly stolen, these software protection methods are ineffective.

[0003]

SUMMARY OF THE INVENTION In order to solve the above-mentioned drawbacks of the known structure, the present invention aims to provide a system and method for ensuring the safety of a computer CPU. It uses the protection scheme of hardware and software at the same time to ensure the safety of computer CPU. In addition, it uses authentication methods such as IC card and fingerprint identification,
The user can start the computer CPU for the first time after clearing the authentication, and is not a system that performs authentication after starting. In addition, it utilizes an encryption / decryption card and a microswitch on the housing to secure the hard disk data.

[0004]

In order to solve the above problems, the present invention provides the following system and method for ensuring the safety of a computer CPU. It mainly consists of computer motherboard, keyboard, card reader, fingerprint scanner, hard disk, encryption / decryption card,
Including housing. The computer motherboard includes a processor, a northbridge chip, a southbridge chip and an input / output control chip. The northbridge chip is connected to the processor and controls the flow rate between the processor and the bus, so that the processor writes to and reads from a device such as a memory. The memory has an OS system and fingerprint identification software. The south bridge chip is connected to the north bridge chip and the input / output control chip and serves as an input route of data to the USB interface and the processor of the peripheral device. The input / output control chip connects with the south bridge chip, and the input / output control chip only accepts the correct password input from the keyboard, and then starts the computer. The keyboard is connected to the card reader and the input / output control chip, and after the card reader completes the authentication, the keyboard is activated so that the user can input the password. The card reader uses a control circuit to connect to the computer motherboard, and the card reader confirms the IC card and, if an authorized user, activates the control circuit to operate the computer normally. If the IC card is removed before the normal termination of the computer, the card reader activates the suspend function and stops any input / output operation. At this time, if authentication is not performed again,
You cannot restart the computer. The fingerprint scanner is connected to the computer motherboard, and the fingerprint scanner receives fingerprint data input by a user. The hard disk is connected to the computer motherboard, and the hard disk is used for storing data. The encryption / decryption card is connected to the computer motherboard, and when the data is stored, the encryption / decryption card first performs an encryption process on the data and stores the data in the hard disk. When reading data from the hard disk, the data is first decrypted and then read. The password of the encryption / decryption card is stored in the flash memory of the encryption / decryption card. The housing covers the computer motherboard, the card reader, the fingerprint scanner, the hard disk, and the encryption / decryption card. The housing includes a microswitch, which when activated opens the microswitch and deletes the password stored in the flash memory of the encryption / decryption card. The system and method for securing the computer CPU of the present invention mainly includes the following steps. a. After inserting the IC card and clearing the IC card authentication process, start the computer. b. The OS system is started and fingerprint data is read from the hard disk at the same time. c. The user inputs a fingerprint with a fingerprint scanner. d. The fingerprint identification software confirms whether or not the fingerprint is correct, and if it does not match the regular fingerprint, the process returns to step c, and if it matches, the process proceeds to the next step. e. Log in to the OS system. f. Read / write hard disk data with encryption / decryption card. When storing data, the encryption / decryption card first performs an encryption process on the data and stores the data in the hard disk. When reading data from the hard disk, the data is first decrypted and then read. The password of the encryption / decryption card is stored in the flash memory of the encryption / decryption card. At the same time, a micro switch is provided on the housing, and when the housing is opened, the micro switch is activated to delete the password stored in the flash memory of the encryption / decryption card. g. It is checked whether or not the IC card remains in the card reader, and if it remains, it ends normally, and if it does not remain, the card reader activates the computer suspend function and performs all input / output operations. To stop. At the same time, post information and notify the user.

[0005]

DETAILED DESCRIPTION OF THE INVENTION As shown in FIG. 1, the system of the present invention includes a computer motherboard 110. The computer motherboard 110 is a processor 111,
A north bridge chip 112 connected to the processor 111 is included. The north bridge chip 112 controls the flow rate between the processor 111 and the bus, so that the processor 111 writes to and reads from a device such as a memory. The memory has an OS system and fingerprint identification software. South Bridge Chip 11
3 is connected to the north bridge chip 112 and an input / output control chip (in this embodiment, Winbond Super IO chip 114 manufactured by Huaho Electronics Co., Ltd. is used), and a USB interface, a PCI interface, an IDE interface and peripheral devices (keyboard). 121, serial port 122, parallel port 123, etc.) is used as a data input route to the processor 111. The Winbond super IO chip 114 is connected to the south bridge chip 113. The Winbond Super IO Chip 114 accepts only the correct password entered from the keyboard 121 and then boots the computer. The keyboard 121 is connected to the card reader 130 and the Winbond Super IO chip 114.

After the authentication is completed, the card reader 130 activates the keyboard 121 so that the user can input the password. The card reader 130 connects to the computer motherboard 110 using a control circuit. The card reader 130 confirms the IC card, and if the user is a legitimate user, activates the control circuit and operates the computer normally. If the IC card is removed before the computer ends normally, the card reader 130 activates the suspend function and stops any input / output operation. At this time, the computer cannot be newly started without re-authentication. The card reader 130 includes a light emitting diode 131 and a timer (not shown). After starting the computer normally, if the IC card is not removed within the scheduled time, alert the user.

The fingerprint scanner 140 is connected to the computer motherboard 110 by a USB interface. The fingerprint scanner 140 receives fingerprint data input by a user. Hard disk 150 is IDE
It is connected to the computer motherboard 110 through an interface. The hard disk 150 is used for storing data. The encryption / decryption card 160 is connected to the computer motherboard 11 via a PCI interface.
Connect with 0. When the data is stored, the encryption / decryption card 160 first performs an encryption process on the data and stores the data in the hard disk 150. When reading data from the hard disk 150, the data is first decrypted and then read. Therefore, even if the hard disk 150 is stolen, the internal data will not be read. The encryption / decryption card 16
The password of 0 is stored in the flash memory of the encryption / decryption card 160. The housing 170 includes the computer motherboard 110 and the card reader 13.
0, the fingerprint scanner 140, the hard disk 15
0, envelop the encryption / decryption card 160. The housing 170 includes a micro switch 171. Normally, the circuit break is maintained when the housing 170 is closed, but when the housing 170 is opened, the micro switch 171 is activated, and a deletion signal is sent to the encryption / decryption card 160. The password stored in the flash memory of the encryption / decryption card 160 is deleted. That is, when a person trying to steal opens the housing 170, the password is immediately deleted, and the stolen encryption / decryption card 160 is naturally unusable. An IC card (not shown) stores user identification data and is identified by the card reader 130 as an authorized user.

FIG. 2 is a flow chart of the embodiment of the present invention. As the figure shows, the user inserts the IC card and
After clearing the C card authentication process, the computer is activated (step 210). Then, the OS system is started, and at the same time, the fingerprint data is read from the hard disk 150 (step 220). Next, the user inputs a fingerprint with the fingerprint scanner 140 (step 23).
0), the fingerprint identification software confirms whether the fingerprint is correct (step 240). If it does not match the legitimate fingerprint,
Return to step 230. If they match, the OS system is logged in (step 250), and general work proceeds. However, when reading / writing data from the hard disk 150, it is necessary to pass the encryption / decryption card 160 without fail (step 260). The encryption / decryption card 1
When storing the data, the data 60 is first encrypted and then stored in the hard disk 150. When reading data from the hard disk 150, the data is first decrypted and then read. The password of the encryption / decryption card 160 is stored in the flash memory of the encryption / decryption card 160. At the same time, a micro switch 171 is provided on the housing 170, and when the housing 170 is opened, the micro switch 171 is activated to delete the password stored in the flash memory of the encryption / decryption card 160. Thus, the stolen encryption / decryption card 1
Of course, 60 cannot be used.

FIG. 3 is a flowchart of the IC card authentication of the embodiment of the present invention, that is, a detailed process of step 210 of FIG. First, when the power is turned on, the card reader 1
30 enters the standby state (step 310). Subsequently, when the user inserts the IC card into the card reader 130 (step 320), the card reader 13
0 determines whether the IC card is valid (step 3)
30). If not, the process returns to step 310. If valid, the card reader 130 activates the control circuit and the Winbond Super IO chip 114 activates the keyboard 121 (step 340). at the same time,
The card reader 130 displays and informs the user to enter the password. Subsequently, the user inputs the password using the keyboard 121 (step 35
0), the Winbond Super IO Chip 114 determines whether the password is valid (360). If not, the process returns to step 350. If valid, the Winbond Super IO chip 114 boots the computer.

FIG. 4 is a flowchart of computer suspend and cancellation of the suspended state according to the embodiment of the present invention. During general computer work (410),
The card reader 130 constantly checks whether or not the IC card remains in the card reader 130. If it remains, the process ends normally (step 47).
0). If not, the card reader 130 activates the computer suspend function and stops all input / output operations. At the same time, information is posted by the light emitting diode 131 to notify the user (step 430).
Then, it is determined whether the user newly inserts the IC card (step 440). If not, the process returns to step 430. If you insert it, the card reader 1
30 again checks whether the IC card is valid (step 450). If not, step 43
Return to 0. If it is valid, the card reader 130 releases the suspended state, and at the same time returns to step 410. After the computer ends normally in step 470, the card reader 130 checks whether the IC card is removed within 10 seconds (step 48).
0). If so, end all steps.
If not, the timer in the card reader 130 sounds a warning after 10 seconds to alert the user.
At the same time, the process returns to step 480 (step 490).

[0011]

As described above, the system and method for ensuring the security of the computer CPU provided by the present invention are as follows:
Through the two-layer protection system of hardware and software,
The security of the computer CPU can be secured, which can completely prevent hackers from entering and protect the safety of hard disk data.

[Brief description of drawings]

FIG. 1 is a system instruction diagram of an embodiment of the present invention.

FIG. 2 is a flowchart of an embodiment of the present invention.

FIG. 3 is a flow chart of IC card authentication according to the embodiment of the present invention.

FIG. 4 is a flowchart of computer suspend and cancellation of the suspended state according to the embodiment of this invention.

[Explanation of symbols]

110 computer motherboard 111 processor 112 North Bridge Chip 113 South Bridge Chip 114 Winbond Super IO Chip 121 keyboard 122 serial port 123 parallel port 130 card reader 131 light emitting diode 140 fingerprint scanner 150 hard disk 160 encryption / decryption card 170 housing 171 Micro Switch

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06K 17/00 G06K 17/00 TF term (reference) 5B017 AA03 BA05 BA07 BA08 BA09 BB00 BB04 CA05 CA07 CA14 5B058 CA27 KA02 KA04 KA08 KA13 KA31 KA38 YA20 5B085 AE01 AE12 AE26 AE29

Claims (9)

[Claims] 1. Mainly includes a computer motherboard, a keyboard, a card reader, a fingerprint scanner, a hard disk, an encryption / decryption card and a housing, and the computer motherboard includes a processor, a northbridge chip, a southbridge chip and an input / output control chip. The north bridge chip is connected to the processor to control a flow rate between the processor and a bus, so that the processor writes to and reads from a device such as a memory, and an OS system and a memory are stored in the memory. The southbridge chip is connected to the northbridge chip and the input / output control chip, and has a USB interface, a PCI interface, an IDE interface and a peripheral device for inputting data to the processor. The input / output control chip is connected to the south bridge chip, the input / output control chip only accepts the correct password input from the keyboard, and then starts the computer, and the keyboard is connected to the card reader and After connecting with the input / output control chip, the card reader activates the keyboard after completion of authentication, which allows the user to enter a password, and the card reader connects to the computer motherboard using a control circuit, The card reader confirms the IC card, and if the user is a legitimate user, activates the control circuit, operates the computer normally, and if the IC card is removed before the normal termination of the computer, The card reader activates the suspend function,
All input / output operations are stopped, and at this time, the computer cannot be restarted without re-authentication, the fingerprint scanner is connected to the computer motherboard, and the fingerprint scanner is input by the user. The hard disk is connected to the computer motherboard, the hard disk is used to store data, the encryption / decryption card is connected to the computer motherboard, and the encryption / decryption card is used to store data. First, when the data is encrypted and stored in the hard disk, and when the data is read from the hard disk, the data is first decrypted and then read, and the password of the encryption / decryption card is read. Stored on the flash memory of the encryption / decryption card, A housing encloses the computer motherboard, the card reader, the fingerprint scanner, the hard disk, the encryption / decryption card, the housing includes a microswitch, and when the housing is opened, the microswitch is activated. A system for ensuring the security of a computer CPU, characterized by deleting a password stored in the flash memory of the encryption / decryption card. 2. The system for ensuring the security of a computer CPU according to claim 1, wherein the IC card stores user identification data, and the card reader identifies whether the user is an authorized user. 3. The system for ensuring the security of a computer CPU according to claim 1, wherein the card reader includes a light emitting diode. 4. The card reader includes a timer,
4. The computer CP according to claim 3, wherein if the IC card is not taken out within a scheduled time after the computer is normally shut down, the user is notified.
A system that ensures the safety of U. 5. A method of ensuring the security of a computer CPU mainly includes the following steps: a. After inserting the IC card and clearing the IC card authentication process, start the computer, b. Start up the OS system and at the same time read the fingerprint data from the hard disk, c. The user inputs a fingerprint with a fingerprint scanner, and d. The fingerprint identification software confirms whether the fingerprint is correct, and if it does not match the regular fingerprint, the process returns to step c, and if it matches, the process proceeds to the next step, and e. Log in to the OS system, f. The data in the hard disk is read / written by the encryption / decryption card, and when the data is saved, the encryption / decryption card first performs the encryption process on the data and then saves the data in the hard disk. When reading, the data is first decrypted and then read, and the password of the encryption / decryption card is stored in the flash memory of the encryption / decryption card, and at the same time, a microswitch is provided on the housing. , When the housing is opened, it activates the microswitch and deletes the password stored in the flash memory of the encryption / decryption card, g. It is checked whether or not the IC card remains in the card reader, and if it remains, it ends normally, and if it does not remain, the card reader activates the computer suspend function and performs all input / output operations. Stop,
A method for ensuring the safety of a computer CPU, which is characterized by posting information at the same time and notifying the user. 6. The step a IC card authentication process includes the following steps: a1. The card reader goes into standby, a2. Insert the IC card into the card reader, a3. It is judged whether the IC card is valid, and if it is not valid, the process returns to step a1. If it is valid, the process proceeds to the next step, a4. The card reader activates a control circuit, the input / output control chip activates a keyboard, and at the same time, the card reader displays and notifies the user to enter a password, a5. The user inputs the password using the keyboard, and a6. The input / output control chip determines whether the password is valid, and if not, returns to step a5,
If yes, proceed to the next step, a7. 6. The computer CPU according to claim 5, wherein the input / output control chip activates a computer.
How to ensure your safety. 7. The process of suspending the computer and canceling the suspended state includes the following steps: h. Determine whether to newly insert the IC card,
If not, the computer will remain suspended, if so, proceed to the next step, i. Check whether the IC card is valid,
7. The method for ensuring the security of a computer CPU according to claim 5, wherein if it is not valid, the computer maintains the suspended state, and if it is valid, the suspended state is released. 8. In step g, after the computer is normally shut down, the card reader checks whether the IC card is taken out within a scheduled time,
The method of ensuring the security of a computer CPU according to claim 5, wherein the card reader emits a warning sound if not. 9. The method for ensuring the security of a computer CPU according to claim 8, wherein the scheduled time is 10 seconds.