RU27432U1 - DEVICE FOR PROTECTING THE COMPUTER FROM UNAUTHORIZED ACCESS (OPTIONS) - Google Patents

Description

The utility model relates to special means of protecting information, namely, to means of protecting a computer from unauthorized access.

A device for protecting information stored in a personal computer RF Patent 2099779, MKI G06F12 / 14, publ. 12.20. 1997. The security device contains an external storage medium. A physical microprocessor board, to which an information exchange interface with an external medium is connected, has a physical random number sensor and random access memory. The information protection device has a ROM, which, like the random access memory and microprocessor, is connected to the information exchange interface with a personal computer. The external storage medium is made in the form of non-volatile memory and contains a unique personal code. A personal identifier of the Touch Metory family is used as a storage medium.

As a prototype, the Dallas Lock hardware-software complex manufactured by Confident Computer Systems Security LLC was adopted. Sat publications of the magazine “information security. Confident 1994-2000 in 2 years - St. Petersburg, 2000. The hardware is in the form of a computer expansion card, which is inserted into the ISA / PCI slot on the computer's motherboard. The reader of electronic identifiers (electronic cards) is connected to the expansion board. An electronic identifier is a chip containing a one-time programmable ROM, in which is written

unique to each card number. The device is powered by computer power circuits. When entering the PC from the ROM on the protection board, an identifier request is initiated. After touching the electronic card to the reader, a unique identifier number is transferred to the board. The software is designed to block the loading of the operating system. Thus, loading the operating system from the hard disk is carried out only after presentation of the registered identifier. The main disadvantage of the prototype is that the protective device begins to work after turning on the computer, which reduces the reliability of protection. In addition, the program requires binding to the type of operating system and possible incompatibility. The program takes at least 5 MB in the system partition of the hard drive and requires storage in ROM and RAM.

The utility model is based on the task of expanding the arsenal of computer protection means, namely, creating a computer protection device that prevents its unauthorized inclusion.

In the first embodiment, the task is solved in that in the device for protecting the computer against unauthorized access, comprising a microprocessor unit equipped with an input for connecting the input circuit of the identification code of the identification code of the user identification means, it is new that the device further comprises a key connected to the microprocessor the unit and designed to turn on / off the power of the motherboard of the protected computer, while the microprocessor unit is equipped with an input for connecting cheniya to standby power circuit protected computer.

The second variant of the utility model includes all the features of the first variant and additionally contains a memory unit for storing information about registered identification codes and connected by a microprocessor unit.

In both versions, the device may additionally contain a key for connecting to the power supply circuit of drives located inside the protected computer, and the microprocessor unit is additionally equipped with an input for connecting to the power supply circuit of the motherboard of the protected computer.

The Figure shows a block diagram of the inventive device and its connection circuit.

The device contains a microprocessor unit 1, the input 2 of which is designed to connect to the standby power circuit of the protected computer. The input 3 of the microprocessor unit 1 is designed to connect the input circuit information of the identification code of the user identification means. As a means of user identification, for example, iButton (Touch Memory) from Dallas Semiconductor Sof., Magnetic cards, chip cards, contactless cards, etc. can be used. For the perception of information, appropriate readers are used 4. A key 5 is connected to the microprocessor unit, which is used to turn on / off the power of the motherboard of the protected computer. In the first embodiment of the utility model, the microprocessor unit software provides storage of information about registered identification codes. The second option is useful

models, this function is performed by a memory unit 6 connected to

microprocessor unit.

In both versions, the device may additionally contain a key 7, designed to connect to the power circuit of drives located inside the protected computer.

The inventive device, thanks to the embedded program, can additionally monitor whether an unauthorized computer was turned on without presenting an identification tool. For this, the microprocessor unit 1 is equipped with an additional input 8 for connecting to the power circuit of the motherboard of the protected computer.

Also, thanks to the embedded program, the security device allows you to identify the user who turned on the computer with his means of identification. For this, the microprocessor unit is equipped with an input for connecting to RS-232 or USB serial channels.

The device operates as follows.

Depending on the type of identification tool used, it is inserted into the reader or it is touched. The identification code is compared with the code recorded in the memory of microprocessor unit 1 or memory unit 6. If the codes match, the key 5 is turned on, power is supplied to the motherboard of the protected computer and the computer turns on. In this case, the standard power circuit (button on the front of the computer) is not used. If the codes do not coincide with the values recorded in the memory, the computer does not turn on. The microprocessor unit constantly monitors the power supply circuit of the system board, and if power has appeared on it without the use of identification means, then key 5 is activated to turn off the computer. The power of the inventive device is supplied from the standby power circuit

a protected computer, which allows the device to function before power is applied to the system board.

It is possible to implement an additional function, namely, some users (some identification codes) can be prohibited from using drives located inside the protected computer. For this purpose, a key 7 is used, controlled by sigpal from microprocessor unit 1.

The device diagram and program also provides for the control of unauthorized use of drives. For this, it is possible to control the drive power supply circuits, and accordingly, an additional input 8 in the microprocessor unit.

Thus, the claimed device allows you to turn on the computer only to authorized users when using the means of identification, as well as to control unauthorized access.

& JU4

5

Claims (8)

1. A device for protecting a computer from unauthorized access, comprising a microprocessor unit, equipped with an input for connecting the input circuit of the identification code of the user identification means, characterized in that it contains a key connected to the microprocessor unit and designed to turn on / off the power of the protected motherboard computer, while the microprocessor unit is equipped with an input for connecting to the standby power circuit of the protected computer.  2. The device according to claim 1, characterized in that it further comprises a key for connecting to the power supply circuit of drives located inside the protected computer.  3. The device according to claim 1 or 2, characterized in that the microprocessor unit is additionally equipped with an input for connecting to the power circuit of the system board of the protected computer.  4. The device according to claim 1, or 2, or 3, characterized in that the microprocessor unit is additionally equipped with an input for connecting to the RS-232 or USB serial channels of the protected computer.  5. A device for protecting a computer from unauthorized access, comprising a microprocessor unit equipped with an input for connecting an information input circuit of an identification code of a user identification means, and a memory unit connected to a microprocessor unit for storing information about registered identification codes, characterized in that contains a key connected to the microprocessor unit and designed to turn on / off the power of the motherboard of the protected computer and, wherein the microprocessor unit equipped with an input for connection to a standby power circuit protected computer.  6. The device according to claim 5, characterized in that it further comprises a key for connecting to the power supply circuit of drives located inside the protected computer.  7. The device according to claim 5 or 6, characterized in that the microprocessor unit is additionally equipped with an input for connecting to the power circuit of the system board of the protected computer. 8. The device according to claim 5, or 6, or 3, characterized in that the microprocessor unit is additionally equipped with an input for connecting to the RS-232 or USB serial channels of the protected computer.