TW419636B - Computer device with security functions - Google Patents

Abstract

The present invention is a computer device with security functions that must be used together with a security device applied as a hardware key so as to accomplish the purpose of safe security without having to use any password again when the computer device is turned on for normal operation.

Description

4 1 9 63 6-V. Description of the invention (1) Configuration The present invention is a computer device with a security function. It must be used with a security device to operate normally. In military computer applications, especially when used on the battlefield, in order to avoid forgetting the password when it is in a hurry or related to timeliness, it is not appropriate to use a password. However, for complete and confidentiality, there must be a security mechanism to achieve the purpose of confidentiality. In order to achieve this, the present invention proposes a computer device with a security function, which uses a security device as a kind of hardware key. As long as the security device is used, the computer device can be used normally. There is no need to use M. In addition, 'Under special circumstances, there is no time to destroy the computer device', 'Just take the security device from the computer device or destroy it'. Then even if the computer device falls into the hands of the enemy, the normal operation (for example, the LCD display device cannot display) It is not expected that the enemy will be immediately and easily informed. In order to achieve the above object, the 'computer device with security function proposed by the present invention' includes at least: a host system; a comparison enabling device is disposed on the host system; and, a security device, a plurality of arrays are set in advance in the security device. The identification code, < is lightly connected to the comparison enabling device through the port of the host system. When the security device is coupled to the comparison enabling device through the port, the security device outputs the complex array identification code for comparison by the comparison enabling device. If all the identification codes are If the comparison is correct, the above-mentioned comparison enabling device outputs an enabling signal, so that the above-mentioned host system can operate normally; when the above-mentioned loosening device and the above-mentioned comparison enable are put through 乂

4 1963 6-., V. Description of the invention (2) ------ When off, the above host system cannot operate normally. Brief description of the drawings: Understand: ί: ί The above-mentioned objects, features, and advantages of the invention can be made more obvious and easier. The preferred embodiment will be described in detail with the accompanying drawings as follows: Figure 1A shows the invention according to the present invention. The computer device with security function; Figure 1 β shows the communication signal diagram of the printer port of the computer device and the port of the security device; Figure 1C shows the output of the present invention through a comparison enabling device The enable signal S —enable enables the control switch IC3844 so that the data (CPO ~ CP17) can be transmitted to the LCD display device through the K3844. FIG. 2A is a circuit block diagram showing an embodiment of the security device in the device of the present invention. FIG. 2B is a circuit block diagram of each identification code setting device in the security device of FIG. 2A; FIG. 3A is a display In the device of the present invention, a circuit block diagram of an embodiment of the comparison enabling device; FIG. 3B shows a possible circuit block diagram of each corresponding code setting device in the comparison enabling device of FIG. 3A; and FIG. 3C FIG. 3A is a block diagram showing a possible circuit of each comparison device in FIG. 3A. Explanation of symbols: 1 ~ Computer device; 10 ~ Host device; 12 ~ Comparison enabling device; 14 ~ Secure device; 16 ~ Printer print port; 18 ~ Port (male); 19 ~ Connect

4 1 9 63 6 j iff V. Description of the invention (3) '一 ·' '---, cockroach (female): Τΐ, Τ4, ρρρ ~~ logical output selector; 〇a_H〇e ~ buffer device; 140 counter; Vcc ~ power supply; 125-1 28 ~ comparison split; 12a_12d ~ corresponding code setting device; ΥΓΓιΓ generates Λ signal; E1-E4 ~ comparison signal; trox-tr3x ~ identification = bit Wu output logic value S0X_S3X ~ Corresponding element X — 4 ~ Mutually exclusive logic operation device; i and ON ;: Positive type upper example: Fan 1, see / 2A, 丨 B Computer device with security function according to the present invention 1 ( For example, a notebook computer) includes at least a host system ι0, a comparison enabling device 12 'configured on the host system 10, and a security device 14'. It is coupled to the comparison enabling device 12 through the port 16 of the host system. In this embodiment, the above-mentioned connection port 6 is a printer printing port, which is generally a female socket. The signals represented by the pins (1 to 25) are shown in Figure 1β. The security device of the present invention mainly uses pins 8 ~ 23 of the print port and will be named TR0 ~ TR5. When the security device 12 is coupled to the comparison enabling device 12 through the printing port 16, the security device 14 outputs the complex array identification code for the comparison enabling device 12 and its built-in The corresponding codes are compared. If all the identification codes are compared correctly, the comparison enabling device 12 outputs a consistent energy signal S_enable, so that the host system 10 can operate normally. When the security device 14 and the above When the comparison enabling device 12 is separated, the host system 10 cannot operate normally. For example, as shown in Figure ic, when the above

4 1 963 6 V. Description of the invention (4) ---- When the enabling device 1 2 outputs the enabling signal S — enab 1 e, the LCD display data (CP 0 ~ CP 17) can be transmitted to the LCD through IC3844. Display device. The identification code built in the security device 12 and the corresponding code built in the comparison enabling device are built before the computer device is shipped from the factory. Therefore, the security device 14 is removed from the computer device, or The use of other security devices will not allow the above computer systems to function properly 'and therefore violates the need for security. In addition, it can be seen from FIG. 1B that the security device has another port 19 (female), so that the printer can also be connected to the computer system through the port “; among the security device ports 18 and 19, The pin positions are shown in Figure 1B. The following will describe the constituent circuits and operating principles of the comparison enabling device 12 and the security device 14. The security device refers to FIG. 2A, the above-mentioned security device includes a complex array identification code setting. : ... 'and' -output control device 14o, for sequentially outputting each set of identification codes set by the identification code ^ 疋 device. For the convenience of explanation, this embodiment uses four sets of identification code setting devices (# 1 ~ # 4). In this embodiment, the identification code input by each identification code setting device (# 1 ~ # 4) includes N bit signals, and for the sake of simplicity of explanation, only the? Each identification code represents a value of 1 to 6 digits. The display of each of the above-mentioned identification code setting devices # is possible. In Figure 2B, the knife chooses to connect or open both ends of τ 丨 ~ τ 4

4 1 963 6-V. Description of the invention (5) way, that is to determine each identification code setting device ~ 疋 signal TR0XJR3X (where χ — one =, output bit = for example, will identify η in the identification setting device # 1 , T2 connection, τ3, Η 2 ', the identification code is set to output the 4 bit signals, ~ TR3A is .011 (identification code is 3h). According to this setting: Second, for example, the security device 14 is identified. The identification code output by the code setting device is set to 3h, 5h, 7h, and 9h. Vcc is output to the identification code setting device by printing 槔 2] t ^ m ^ 1〇P pin U (TR5). ° Device photo =, 'The above-mentioned output control device 140 includes: 4 buffers = set (14〇a ~ 140 (1), which respectively receive the identification codes output by the above 4 sets of identification code setting devices ~ # 4); a sequence The control device 140f 'enables one buffer device in order, one by one, so that the above four buffer devices can output the received identification codes one by one. Each identification code is then passed through an output buffer device 14 〇e output, and through the column, job number end, and output to the above-mentioned comparison enabling device connected 12 ° in this implementation In the example, the buffer devices 140a to 140e are all IC244 '. The G input terminal must be enabled by a logic "〇" signal before 1 (: 244 will output the material. In addition, the above sequence control device Η〇ί is used as a reason. A counter formed by two 0-type flip-flops' counts ㈣ and Q at the first clock cycle CK1Bf, respectively, so that the buffering device 140a turns out tr0a tr3a; ^ The punching device HOb outputs TR0B ~ TR3B; at the third clock cycle CK3, count ^

Clock cycle CK2 # on page 8 'The counters Qq and Qi's rotations are 0, respectively.] Chapter 2 Fifth, description of the invention (6) The outputs of the devices Q0 and Qi are 1, 0, and the buffer device 140c outputs TR0C. ~ TR3C · 'At the fourth clock cycle CK4, the outputs of the counters q0 and 1, respectively', cause the buffer device 14od to output TROD to TR3D. Among them, the above-mentioned clock signal CK is output to the above-mentioned timer 140f through the 22nd pin (TR4) of the print port. Finally, each identification code (4 bit signals) is output 'through the output buffer device 140e through the TR0 ~ TR3 signal terminals of the pins 18 ~ 21 of the print port 16, and is output to the above-mentioned comparison enabling device 12. Referring to FIG. 3A for the comparison enabling device, the above comparison enabling device 12 includes: 4 sets of corresponding code setting devices (12a to 12d) for setting 4 sets of corresponding codes; and 4 sets of comparison devices 125 to 128 , Sequentially comparing the identification code and the corresponding code in a one-to-one manner, and if all the identification codes and the corresponding code are compared correctly, the enable signal s_enable is output. In this embodiment, the corresponding code output by each corresponding code setting device (12a ~ 12d) includes 4 bit signals, that is, each corresponding code represents the value of the carry. Fig. 3B shows a possible circuit implementation of each of the corresponding code setting devices (12a to 12d). In FIG. 3B, the two ends of ρ ~ ρ4 are selected to be connected or open, respectively, that is, the bit signals S0X ~ S3X (where χ = A, β, c, or D) logical value, for example, open P1, P2 in the corresponding code setting device 12a, P3 '= connected, then the four bit signals 38 output by the identification code setting device 12a are 1100 ( The identification code is Ch). Follow this setting method at the factory

V. Description of the invention (7) Before 'for example, the corresponding code output device 2a to 12d in tb pair enabling device 丨 2 is set to Ch, Ah, 8h, 6h (in this embodiment, it is Set the identification code to a complementary value '. You can also set the identification code and the corresponding code to be the same). Referring to Fig. 3C ', it shows the possible circuit implementation of each comparison device (125 ~ 128). In Figure 3C, each comparison device (125 ~ 128) includes 4 mutually exclusive computing devices, one end of which is connected to the signal terminal tro ~ TR3, and the other end is coupled to the output of the corresponding code output device (12a ~ 12d) (S0X ~ S3X; X = A, B, C, or D); and an AND gate 130X, whose input is coupled to the outputs of the four mutually exclusive computing devices (X0R1 ~ X0R4), and its output is connected to A d-type flip-flop ΐ32χ, where X = A 'B, C, or D. The output of each flip-flop (132A ~ 132D) is ~ E4 ′ and Ei ~ Ea are lightly connected to the input terminals of the above and gates 1 3 0 b ~ 1 3 0 D, respectively. When at the first clock cycle CK1, the security device η outputs the bit signal TROA ~ TR3A of the identification code 3h through the terminal TRO ~ TR3 # to the comparison enabling device 12 and 4 of the comparison devices 125. The mutually exclusive computing device (X0R1 ~ X0R4) combines TROA ~ TR3A (identification code 3h) and SOA ~ S3A (corresponding code

Ch) Perform a mutually exclusive operation so that the output signal of AND gate 130A is logic "1", so in the first clock cycle CK1, the output signal E of 132 D-type flip-flops E 丨 changes from logic "quot" to "quot" 1 ". Therefore, the gate 130B of the comparison device 126 is enabled by the signal Ei. When the second clock cycle CK2, the above-mentioned security device 4 outputs the identification code 5h through the TR0 ~ TR3 signal terminals. Meta signals TR〇B ~ TR3B to the above

4 彳 9 63 G V. Description of the invention (8) --- The comparison enabling device 12, the four mutually exclusive operations (XOR, X0R4) in the above comparison device 126 will convert TROB to TR3B (identification codes 51 and $ (^ ~ S3B (corresponding code

Ah) perform a mutually exclusive operation so that the output signal of the 13KB is logic " 丨 :: ' Therefore, the output of the D-type flip-flop 1328 is used as logic during the second clock cycle CK2. Therefore, the comparison device 127 and ^ 3 (jc are enabled by the signal E2. When in the third clock cycle CK3, the security device 14 outputs the bit message of the identification code 7h to the signal terminal TRO ~ TR3 to The above-mentioned comparison enabling device 12 and the four mutually exclusive operation devices (XOR and X0R4) in the above-mentioned comparison device 127 perform a mutually exclusive operation between TROC ~ TR3C (identification code 7h) and S0C ~ S3C (corresponding code 8h) so that The output signal of AND gate i3〇c is logic "1", so in the third clock cycle CK3, the output signal of D-type flip-flop i32c is logic 1. Therefore, the device will be compared by the signal Eg 128 and gate 130D are enabled. When the fourth clock cycle CK4, the security device 14 outputs the identification signal trod ~ TR3d through the TR0-TR3 signal terminal to the above comparison enabling device 12, The four mutually exclusive computing devices (X0R and X0R4) in the comparison device 128 perform a mutually exclusive operation between TR0D ~ TR3D (identification code 9h) and S0D ~ S3D (corresponding code 6h), so that the output signal of the gate 3 〇D Is logic, 丨 ,,, so = the output signal E4 of the D-type flip-flop 132D in the third clock cycle CK3 'is logic " 1 " ° The signal E4 is inverted to obtain the enable signal s_enable; therefore, 'the LCD display data (cp0 ~ cP17) can be transmitted to the LCD display device through IC3844', then the computer device 1 can operate normally. From the above, it can be known that 'the above comparison Enabling device 1 2 serially compare identification codes

4 1 y 63 6 V. Description of the invention (9) The bit signals TROA ~ TR3A, TROB ~ TR3B, TR0C ~ TR3C, and TROD TR 3D will only be 'after the previous identification code is compared correctly' during the comparison. The next identification code is compared again, so if there is a mismatch in the comparison process, the enable signal s_enabu can no longer be generated. Since the above-mentioned enable signal S_enable is output only when all comparisons are correct, if the security device 14 is removed, the LCD of the computer device cannot be displayed. In addition, 'in the case of this embodiment, the identification code that can be set is still up to 216 (can be expanded to more than 16 bits)' and it will not be easily cracked in the absence of circuit diagram assistance, so it can Provide effective information confidentiality. Although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. Anyone familiar with the art can make some modifications and retouching without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention shall be determined by the scope of the appended patent application.

Page 12

Claims (1)

4 19 63 6 ", 'VI. Patent application scope 1. A computer device with a security function at least includes: a host system; a comparison enabling device configured on the host system; and a security device' its A complex array identification code is set in advance, which can be consumed to the comparison enabling device through the connection of the host system; where 'when the security device is connected to the comparison enabling device through the above port' The security device outputs the complex array identification code for comparison by the comparison enabling device. If all the identification codes are correct, the comparison enabling device outputs an enabling signal, so that the host system can function normally. Operation; when the security device and the comparison enabling device are separated, the host system cannot operate normally. 2. The computer device according to item 1 of the application scope, wherein the security device includes: a complex array identification code setting device; and an output control device for identifying each group of identifications set by the identification code setting device. The codes are output in order. 3, according to the computer device described in item 2 of the scope of patent application, wherein "on, the identification code rotated by each identification code setting device contains N bit letters $", the above N is outputted in the identification code setting device The N signal lines of the bit are connected to-power or ground, and determine the logical value of the bit signal it outputs. 4. The computer device as described in the second scope of the patent application, wherein the 'upward output control device includes: a plurality of buffer devices' which are rotated by the plurality of identification code setting devices. 6. Identification code for patent application scope;-Sequence control device, which sequentially puts the above-mentioned plural buffer devices one after another = enable 'so that the above-mentioned plural buffer devices can output the received ones one by one. Among them, the above 5 ‘the computer device described in item 4 of the scope of patent application, said sequence control device is a counter. The above 6. The computer device comparison enabling device described in item 1 of the scope of patent application includes: a complex array corresponding code setting device for setting a complex array corresponding code; and ~ Ϊ array comparison 1 sets the above The identification code and the corresponding correspondence are sequentially compared in a Z-to-two comparison. If all the identification codes and the corresponding correspondence are correct, the enabling signal is output. 7. The computer device according to item 6 of the scope of patent application, wherein the above-mentioned identification code and each of the above-mentioned corresponding codes include N-bit signals; each of the above-mentioned comparison devices includes N mutually exclusive arithmetic devices; And the input end is connected to the output of the above mutually exclusive computing device. When the N bit signals of the above :::: descriptive corresponding codes are compared correctly, the above N \ undifferentiated devices all output logic ', so that The above-mentioned AND output logic matches: Λ has a ratio: When the gates in the device all turn out logic τ, the above comparison causes this device to output the above-mentioned enable signal. 8. As for the computer device described in item 1 of the scope of patent application, straight, == dense device is the printer through the above host system "The above comparison enabling device. Page 14 4 1 963 6 VI. Patent application scope 9. The computer device described in item 1 of the patent application scope further includes a display switch device, which is coupled to the display data output by the above host system. When the above display switch device Only after receiving the enabling signal rotated by the above-mentioned comparison enabling device, the display data received by it will be output. Page 15