RU182701U1 - TRUSTED COMPUTER - Google Patents

Abstract

A trusted computer contains built-in hardware information security - a resident security component (SEC), which has at least one additional connection to the computer bus with at least one of its functional units. The objective of the utility model is to increase the level of protection of the computer against critical data leaks in trusted mode, solved by the fact that at least one additional connection is laid between the RCB output and the power supply circuit of the functional unit responsible for transmitting data to the outside world, and is skipped over it a control signal that turns off the power to the specified unit in the trusted computer mode. 1 s.p. f-ly.

Description

The utility model relates to the field of computer technology and information technology.

In this field of technology, there has long been a problem of information security, historically the first and simplest solution to which was the creation and use of software that implements certain protective functions. However, the experience of the development of the past years and the theoretical analysis of the problem convincingly demonstrated the limitations of this approach and led to the need for mainly hardware implementation of protective functions using specialized hardware for this - the so-called resident security components (FCS) integrated into the hardware environment of electronic interaction, in particular, embedded in computers [1, p. fifty].

Later, the concept of a trusted computing environment (ICE) was formulated - such a fragment of an electronic interaction environment for which the integrity of objects and the integrity of the relationships between them are established and maintained over a specified time interval [2, p. 209]. The most advanced computer models designed to work in the internal combustion engine - trusted computers - are not limited to monitoring the integrity of the software and hardware environment, but also support additional protective functions - in particular, checking the compliance of external situational factors with the trusted ranges established by the adopted security policy. For this purpose, communications between the computer and the computer are not limited to its bus - on which the computer is usually installed - and at least one additional (physically dedicated) communication of the computer is laid with at least one functional unit of the computer - in particular sensor external situational factor [3].

However, the computer [3] - the one closest to this utility model - is characterized by an insufficiently high level of protection against critical data leaks in a trusted mode to the outside world through one or more computer units responsible for its external communications - in particular, WiFi, Bluetooth, etc. .P. This is due to the fact that these blocks were not covered by additional communications from the RCB - therefore, it is impossible to give firm guarantees that they will not be included in a trusted mode as a result of any malicious actions or by accident.

The objective of the utility model is to eliminate this drawback - i.e. increasing the level of computer protection from critical data leaks in trusted mode, and its technical result is, accordingly, obtaining the most protected trusted computer.

The problem is solved in that in a trusted computer containing an FC, having at least one additional, with respect to the computer bus, communication with the functional unit responsible for transmitting data to the outside world, at least in the power circuit of the specified functional of the unit, a transistor switch is installed, the control contact of which is connected to one of the contacts of the general-purpose input-output interface of the RKB processor, used as its output, indicated by the additional connection, and the control is skipped over it signal whose disconnecting said power unit in the trusted mode PC. The output contact of the indicated transistor key is connected by a second additional connection to the second contact of the CPU interface - used as its input. The RKB processor is programmed to indicate the corresponding computer malfunction and / or turn it off when a transistor key is malfunctioned by the signal received via the first additional connection.

Thus, the problem of the utility model is solved, since turning off the power of the computer’s functional unit responsible for external communications, in particular by means of a transistor key, is the most solid guarantee that it cannot be activated unauthorized, and the delivery of the signal that turns off the power from the RCB to the unit via an additional (physically allocated) Communication bypassing the common computer bus is the most solid guarantee of its smooth passage. The RBK processor interface is a standardized General-purpose input / output interface (GPIO), the most convenient for creating additional connections between components of a computer system, as well as being flexibly configurable - the same contacts can act as both inputs and outputs [4].

Since the reliability of any real key is not absolute (there is a non-zero probability of its failure when the correct control signal is supplied), a second additional connection is laid between the above contacts of the transistor key and GPIO. Programming the RKB processor to indicate the corresponding computer malfunction and / or turning it off when a key is not detected by the signal received via the first additional connection is also, therefore, a prerequisite for solving the utility model problem.

It is advisable to install this transistor switch in the power circuit of a functional unit that wirelessly transfers data to the outside world via a radio channel, for example, a WiFi or Bluetooth module. Thus, the most dangerous channel for critical data leakage in a trusted mode - through the air - will be blocked.

INFORMATION SOURCES

1. Konyavsky V.A. Information security management on the basis of SZI NSD "Accord". - M .: Radio and communications, 1999 - 325 p.

2. Konyavsky V.A., Gadasin V.A. Fundamentals of understanding the phenomenon of electronic information exchange. - Minsk: Bellitfond, 2004 - 282 p.

3. Patent of Russia for utility model No. 175 189.

4. GPIO - https://ru.wikipedia.org/wiki/GPIO

Claims (2)

1. A trusted computer containing built-in hardware information security - a resident security component (SEC), having at least one additional, with respect to the computer bus, communication with the functional unit responsible for transmitting data to the outside world, characterized in that at least a transistor switch is installed in the power circuit of the specified function block, the control contact of which is connected to one of the contacts of the general-purpose input-output interface of the processor RKB, used as its output, indicated by an additional link, and a control signal is passed through it, which turns off the power to the specified unit in the trusted computer mode, and the output terminal of the indicated transistor key is connected by a second additional link to the second pin of the general-purpose input-output interface of the RCB processor, used as its input, and the RB processor is programmed to indicate the corresponding computer malfunction and / or turn it off when a transistor key is malfunctioning by the signal received on the first additional connection. 2. The computer according to claim 1, characterized in that the transistor switch is installed in the power circuit of a functional unit that wirelessly transfers data to the outside world via a radio channel, for example, a WiFi or Bluetooth module.