RU139532U1 - MOBILE COMPUTER WITH HARDWARE PROTECTION OF A TRUSTED OPERATING SYSTEM FROM UNAUTHORIZED CHANGES - Google Patents

Abstract

A mobile computer with hardware protection of a trusted operating system (OS) from unauthorized changes, containing at least two reprogrammable read-only memory devices (EPROMs) installed in parallel on its "common bus", at least one of which is, in particular, designed for storing a trusted OS - contains a mechanical switch of the closing type connected to its output WP (Write Protection), located inside the computer case and allowing after recording in the configuration mode to the trusted OS to block writing to this EPROM in the operating mode of new data, and the second mechanically controlled switch is a switching type, whose positions, in an amount equal to the number of EPROMs, are connected to the CE terminals (Chip Enable - chip is available) of both EPROMs, characterized in that it contains at least one additional EPROM - in particular, intended for storing authorized changes / updates to the trusted OS - also mounted on the "common bus" of the computer, with the CE terminal of the additional EPROM connected in parallel with the CE terminal t th of the aforementioned EPROM, access to which is controlled by the first switch.

Description

The utility model relates to the field of computer technology and information technology.

In recent years, in connection with the rapid development of mobile computers, which include, in particular, laptops, subnotebooks, tablet computers, etc., the problem of reliable hardware protection of the information contained in them has become urgent. Such protection, first of all, is required by trusted operating systems (OS), downloaded to a computer for the user to perform the most critical operations - such as, for example, remote banking transactions, telemedicine consultations, trusted communication sessions with the "electronic government", etc. .

The simplest and, at the same time, reliable hardware protection of critical data, in particular, trusted OS, in small-sized and mobile computer equipment, as you know, can be implemented through mechanical switching. A well-known computer is a thin client type with hardware data protection, containing at least one EPROM, storing, in particular, a trusted OS, and a mechanical switch of the closing type connected to the WP terminal (Write Protection) of this EPROM located inside computer case and allowing, after recording in the trusted OS setup mode, to block writing to this EEPROM in the operating mode of new data [1].

Closest to the utility model is a mobile computer with hardware protection of a trusted operating system (OS), containing at least two reprogrammable read-only memory devices (EPROMs) installed in parallel on its “common bus”, at least one of which is in in particular, intended for storing a trusted OS — it contains a mechanical closing switch connected to its output WP (Write Protection), located inside the computer case and allowing, after recording in Settings for the trusted OS, block write to this EPROM during operation of new data and a second mechanically controlled switch - switching type, whose position in an amount equal to that of the EPROM, attached to their CE terminals (Chip Enable - chip available) [2].

The disadvantage of this computer is that the hardware protection built on this principle makes it difficult (or even impossible for the end user) to make allowed (authorized) changes / updates to the trusted OS, which is sometimes required during the period of operation of the computer, since this is impossible without opening usually sealed computer case.

The objective of the utility model is to expand the functionality of mobile computers with hardware data protection, in particular, trusted OS, through mechanical switching, which is previously absent from the possibility of making allowed (authorized) changes / updates to this data directly by the user.

The problem is solved in that a mobile computer with hardware protection of a trusted OS, containing at least two in parallel installed on its "common bus" EPROM, at least one of which - in particular, designed to store a trusted OS - contains attached its conclusion is WP, a mechanical switch of the closing type, located inside the computer case and allowing, after recording in the trusted OS configuration mode, to block writing to this EPROM in the operating mode of new data, and a second mechanically controlled switch a torus of a switching type, whose positions, in an amount equal to the number of ROMs, are attached to their CE terminals, contains at least one more ROMs - in particular, designed to store authorized changes / updates to a trusted OS.

This additional EPROM is also mounted on the “common bus" of the computer, and its CE terminal is connected in parallel with the CE terminal of one of the above EPROMs, access to which is controlled by the first switch. This difference provides a solution to the problem in connection with the fact that now hardware protection extends only to unauthorized changes (relating to the unchanged part of the trusted OS recorded in the first EPROM managed by the switch), and for the second - the part of the trusted OS that is changed at the request of the user - now There is an additional EPROM, and without blocking the recording. The CE conclusions of both EPROMs are connected in parallel due to the fact that the data stored separately in them belongs to the same OS and must be available for circulation together (at the same time).

INFORMATION SOURCES

1. Russian patent for utility model RU 118773.

2. The patent of Russia for a utility model by application No. 2012152296.

Claims (1)

A mobile computer with hardware protection of a trusted operating system (OS) from unauthorized changes, containing at least two reprogrammable read-only memory devices (EPROMs) installed in parallel on its "common bus", at least one of which is, in particular, designed for storing a trusted OS - contains a mechanical switch of the closing type connected to its output WP (Write Protection), located inside the computer case and allowing after recording in the configuration mode to the trusted OS to block writing to this EPROM in the operating mode of new data, and the second mechanically controlled switch is a switching type, whose positions, in an amount equal to the number of EPROMs, are connected to the CE terminals (Chip Enable - chip is available) of both EPROMs, characterized in that it contains at least one additional EPROM - in particular, intended for storing authorized changes / updates to the trusted OS - also mounted on the "common bus" of the computer, with the CE terminal of the additional EPROM connected in parallel with the CE terminal t th of the aforementioned EPROM, access to which is controlled by the first switch.