Patent Publication Number: US-6219792-B1

Title: Secured network system

Description:
This application is a continuation-in-part of U.S. patent application Ser. No. 09/035,409, filed Feb. 10, 1998, U.S. patent application Ser. No. 08/919,180, filed Aug. 15, 1997, now U.S. Pat. No. 5,894,552, and U.S. patent application Ser. No. 08/919,181, filed Aug. 15, 1997, U.S. Pat. No. 5,841,120. 
    
    
     BACKGROUND OF THE INVENTION 
     1. Field of the Invention 
     The present invention relates generally to secured network systems. More particularly, the present invention relates to a secured network system which allows multiple users with proper authorization to access classified data provided by a secured network server and unclassified data provided by an unsecured network server from their personal computer. 
     2. Description of the Prior Art 
     In the past computer security for the military services and the intelligence agencies has been provided by a variety of commercially available computer programs which are adapted for use with a variety of microcomputers such as DOS based operating system personal computers and Apple Macintosh personal computers. These computer programs are adapted to provide access control to a computer&#39;s data or the data base of a Local Area Network that is coupled to the computer. 
     Computer security programs often reside in the memory of the computer&#39;s central processing unit. Placing computer security programs in the computer&#39;s memory slows the computer&#39;s processing time because the computer must perform repetitive identification and auditing tasks stored in the computer&#39;s memory. In addition, conflicts between security software and the computer operating system or other computer software used by the computer may result in the computer crashing which renders the computer unusable. 
     Recently microchip embedded cards or “Smart Cards” have been used with computer security software to insure that classified data is not accessible to an individual who is not authorized to access the classified data. However, “Smart Cards” also rely on performing authentication and auditing functions which are stored in the computer&#39;s memory. 
     Accordingly, there is a need for a secure network system which will allow only authorized individuals to access classified data, but will not require the use of computer memory to perform authentication and auditing functions associated with the accessing of classified data. 
     SUMMARY OF THE INVENTION 
     The present invention overcomes some of the disadvantages of the prior art including those mentioned above in that it comprises a relatively simple yet highly effective secured network system which will allow only an authorized user of the secured network system to access classified data. 
     The secured network system comprising the present invention includes a readykey controller which has connected thereto a first card reader and a power relay switch. The user of the secured network system inserts a microchip embedded card into the first card reader which then transmits an authorization signal to the readykey controller indicating that the user is authorized to use a personal computer and its associated monitor. The readykey controller, in response to the authorization signal, activates a power relay switch affixed to the computer which connects the computer&#39;s power supply to an external power source allowing the user to receive and process data with the computer. 
     The secured network system also has a data relay switch which includes a manual A/B secured network switch. The manual A/B switch allows the user to receive and process classified data, by setting the manual A/B switch to a predetermined position which allows a secured network server to be connected to the computer. The user then inserts his proximity card into a second card reader which transmits a second authorization signal to the readykey controller indicating that the user is authorized to receive and process classified data from the secured network server. The readykey controller, responsive to the second authorization signal, activates the data relay switch. Activating the data relay switch connects the secured network switch to the secured network server via the data relay switch which allows for the transmission of classified data between the secured network server and the personal computer. 
     The secured network system of the present invention is adapted for use with two computers. A second power relay switch and a second data relay switch is provided for the second computer to allow an authorized user of the second computer to receive and processed both classified and unclassified data. 
     Each power relay switch has a tamper circuit which is connected to the readykey controller. When an unauthorized user attempts to bypass the power relay switch to gain access to the computer the impedance of the tamper circuit will change which causes the readykey controller to deactivate the power relay switch and generate an alarm. 
     Each data relay switch also has a tamper circuit which is connected to the readykey controller. When an unauthorized user attempts to bypass the data relay switch to gain access to the computer the impedance of the tamper circuit will change which causes the readykey controller to de-activate the data relay switch and generate an alarm. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS 
     FIG. 1 is an electrical schematic diagram of a secured network system which includes a power relay switch and a data relay switch; 
     FIG. 2 is an electrical schematic diagram of the power relay switch of FIG. 1; 
     FIG. 3 is an electrical schematic diagram of the data relay switch of FIG. 1; and 
     FIGS. 4A,  4 B and  4 C are electrical schematic diagrams of a secured network system which includes a power relay switch, a data relay switch and which is adapted for use with plurality of card readers. 
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
     Referring to FIG. 1 there is shown a secured network system  10  which receives and processes classified data as well as unclassified data. Secured network system  10  includes a readykey controller  12  which has connected thereto a personal computer card reader  14  located adjacent a digital computer  18  and a power relay switch  16  affixed to computer  18 . The user of secured network system  10  presents a proximity card which is a microchip embedded card (not illustrated) to card reader  14 . Card reader  14  upon receiving the microchip embedded card and verifying the card transmits an electrical authorization signal to readykey controller  12  indicating that the user is authorized to use digital computer  18  and its associated monitor  20  for receiving and processing classified data as well as unclassified data. 
     The readykey controller  12  is also connected to an administrative personal computer (not illustrated) which monitors readykey controller  12  to keep track of individuals accessing computer  18  and to insure an attempt at unauthorized access of data stored in computer  18  or available to computer  18  through a Local Area Network is not made. 
     Referring now to FIGS. 1,  2  and  4 A- 4 C, readykey controller  12  has four contacts RC 1 , RC 2 , RC 3  and RC 4 . Readykey controller  12 , in response to the electrical authorization signal from card reader  14 , closes its contact RC 1  which allows current from a +12 VDC source to flow through the coils of relays  40 ,  41  and  42  energizing the coil of each relay  40 ,  41  and  42 . Energizing the coil of relay  40  closes normally open contact  1  of relay  40 , energizing the coil of relay  41  closes normally open contact  1  of relay  41 , and energizing the coil of relay  42  opens normally closed contact  1  of relay  42 . 
     Closing contact  1  of relay  40  and relay  41  connects power line  44  from terminal M 3  of power relay switch  16  through relay  40  to terminal M 5  of switch  16  and neutral line  46  from terminal M 4  of power relay switch  16  through relay  40  to terminal M 6  of switch  16 . Terminal M 5  and M 6  of power relay switch  16  are connected to the power supply for computer  18  so that closure of normally open contact  1  of relays  40  and  41  provides 120 VAC from an external source to the power supply of computer  18 , thereby activating computer  18  which allows the user of computer  18  to receive and process data. Line  48  provides a ground for computer  18 . 
     Line  50  which connects pin  6 , terminal J 1  of switch  16  to pin  5 , terminal J 1  of switch  16  via normally closed contact  1  of relay  42  is a status or test line. When normally closed contact  1  of relay  42  is closed a test signal is supplied to readykey controller  12  indicating that power relay switch  16  is off and computer  18  is not operational. Opening normally closed contact  1  of relay  42  results in a test signal being provided to readykey controller  12  which indicates that power relay switch  16  is on and computer  18  is operational. 
     Power relay switch  16  includes a normally closed tamper switch  22  which is connected through pins  7  and  8  of terminal J 1  of switch  16  to readykey controller  12 . When tamper switch  22  is in a closed position, current flow is through resistor R 1  and switch  22  which indicates to readykey controller  12  that power relay switch  16  is operating normally. Unauthorized tampering or removal of the power relay switch  16  from computer  18  opens tamper switch  22 . Opening tamper switch  22  results in a change in impedance (series connected resistors R 1  and R 2  are now in the current flow path) which indicates that an unauthorized person has attempted to bypass power relay switch  16  or remove power relay switch  16  from computer  18 . Resistor R 1  has a value of 2.2 K-ohms and resistor R 2  has a value of 4.7 k-ohms. 
     Referring again to FIG. 1, secured network system  10  includes a data relay switch  26  which has a manual A/B switch enclosed therein. The manual A/B switch allows the user of computer  18  to receive unclassified data from an unsecured network server  30  and classified data from a secured network server  32 . The manual A/B switch used in secured network system  10  is fully disclosed in U.S. Pat. No. 5,777,400, “Shielded Computer Network Switch”, which issued on Jul. 7, 1998 to Stephen W. Bouthillier, a co-inventor of the present invention. 
     When the manual A/B switch of data relay switch  26  is set at a first position such that unsecured network server  30  is connected to computer  18 , the user of computer  18  may receive and process unclassified data from unsecured network server  30 . 
     When the user of secured network system  10  needs to receive and process classified data, the manual A/B switch of data relay switch  26  is set at a second position allowing secured network server  32  to be connected to computer  18 . The user next inserts his proximity card into a network card reader  24  which then transmits an electrical authorization signal to readykey controller  12  indicating that the user is authorized to receive and process classified data from secured network server  32 . Readykey controller  12 , responsive to the authorization signal from network card reader  24  enables data relay switch  26 . Enabling data relay switch  26  connects secured network server  32  to computer  18  through data relay switch  26  and the manual A/B switch enclosed therein. 
     Referring to FIGS. 1,  3  and  4 A- 4 C there is shown in FIG. 3 a detailed electrical schematic diagram of data relay switch  26 . Data relay switch  26  includes three relays  60 ,  62  and  64  which allow a computer to be connected to secured network server  32 . 
     Secured network server  32  is connected to computer  18  through relays  60 ,  62  and  64  of data relay switch  26 . Readykey controller  12 , in response to the electrical authorization signal from card reader  24 , closes its contact RC 2  which allows current from +12 VDC source to flow through the coils of relays  60 ,  62  and  64  energizing the coil of each relay  60 ,  62  and  64 . Energizing the coil of relay  62  closes normally open contacts  1  and  2  of relay  62 , energizing the coil of relay  64  closes normally open contacts  1  and  2  of relay  64 , and energizing the coil of relay  60  opens normally closed contact  1  of relay  60 . Closing the normally open contacts  1  and  2  of each relay  62  and  64  completes a data path for the four classified data lines  66  between secured network server  32  and computer  18  allowing for the transfer of classified data between secured network server  32  and computer  18 . 
     Data relay switch  26  also has a status or test line  68  which indicates the status of the data path or the four data lines  66  between secured network server  32  and computer  18 . When the coil of relay  60  is de-energized, normally closed contact  1  of relay  60  is closed sending a test signal to readykey controller  12  via status line  68  which indicates to readykey controller  12  that the data path between secured network server  32  and computer  18  is inactive. Energizing the coil of relay  60  opens normally closed contact  1  of relay  60  which indicates to readykey controller  12  that the data path between secured network server  32  and computer  18  is active and classified data may be transferred over the four data lines  66 . 
     Data relay switch  26  also has a normally closed tamper switch  70  which is connected through pins  7  and  8  of terminal J 2  of data relay switch  26  to readykey controller  12 . When tamper switch  70  is in a closed position, current flow is through resistor R 3  and switch  70  which indicates to readykey controller  12  that data relay switch  26  coupled to computer  18  is operating normally. Unauthorized tampering of data relay switch  26  opens tamper switch  70 . Opening tamper switch  70  results in a change in impedance (series connected resistors R 3  and R 4  are now in the current flow path) which indicates that an unauthorized person has tampered with data relay switch  26 . Resistor R 3  has a value of 2.2 K-ohms and resistor R 4  has a value of 4.7 k-ohms. 
     At this time it should be noted that readykey controller  12  includes an alarm event manager module  13  which significantly increases the inputs and outputs of readykey controller  12 . The readykey controller  12  used in the preferred embodiment of the present invention is a Model No. K2100 Readykey Controller commercially available from Radionics Corporation of Salinas, Calif. Module  13  is a Model K2015A Alarm Event Manager Module also commercially available from Radionics Corporation. Personal Computer card reader  14  is a Readykey K2003 Touchfree proximity reader and network card reader  24  is a Readykey K2001 Touchfree proximity reader also commercially available from Radionics of Salinas, Calif. 
     The power relay switch  16  used in the preferred embodiment of the present invention is a Model No. 101022 SecureSwitch Power Relay Switch commercially available from Market Central Inc. of Pittsburgh, Pa. The data relay switch  26  which has a manual A/B switch enclosed therein is a Model No. 101021 SecureSwitch Data Relay Switch, also commercially available from Market Central, Inc. 
     Referring to FIGS. 1,  2  and  4 A- 4 C, whenever an unauthorized person tampers with power relay switch  16 , module  13  of readykey controller  12  will sense a change in impedance within the R 1 , R 2  resistor series circuit of switch  16  via a ZONE 1 IN line. ZONE 1 IN line connects module  13  to power relay switch  16  of secured network system  10 . 
     Readykey controller has six normally closed tamper switch relay contacts TSRC 1 , TSRC 2 , TSRC 4 , TSRC 5 , TSRC 7  and TSRC 8  and two normally open tamper switch relay contacts TSRC 3  and TSRC 6 . 
     Readykey controller  12 , responsive to this change in impedance, opens its normally closed contact TSRC 1  which deenergizes relays  40  and  41  of power relay switch  16 . Deenergizing relays  40  and  41  opens contact  1  of relay  40  and contact  1  of relay  42  which disconnects 120 VAC from the external source to the power supply of computer  18  deactivating computer  18 . 
     Referring to FIGS. 1,  3  and  4 A- 4 C, whenever an unauthorized person tampers with data relay switch  26 , module  13  of readykey controller  12  will sense a change in impedance within the R 3 , R 4  resistor series circuit of switch  26  via a ZONE 2 IN line. ZONE 2 IN line connects module  13  to data relay switch  26  of secured network system  10 . 
     Readykey controller  12 , responsive to this change in impedance, opens its normally closed contact TSRC 2  which deenergizes relays  62  and  64  of data relay switch  26 . Deenergizing relays  62  and  64  opens contacts  1  and  2  of relay  62  and contacts  1  and  2  of relay  64  which disconnects the four classified data lines  66  between secured network server  32  and computer  18 . Disconnecting the four classified data lines  66  prevents the transfer of classified data between secured network server  32  and computer  18 . 
     Opening contact TSRC 2  also de-energizes relay  60  closing contact  1  of relay  60  which results in a test signal being sent to readykey controller  12  via status line  68  indicating to readykey controller  12  that the data path between secured network server  32  and computer  18  is now inactive. 
     Module  13  of readykey controller  12  also has an impedance matching circuit  80 . Impedance matching circuit  80  includes series connected resistor R 5  and R 6  and readykey controller contact TSRC 7  which is connected parallel to resistor R 6 . Impedance matching circuit  80  also includes series connected resistor R 7  and R 8  and readykey controller contact TSRC 8  which is connected parallel to resistor R 8 . Resistors R 5  and R 7  each have a value of 2.2 K-ohms while resistors R 6  and R 8  each have a value of 4.7 K-ohms. 
     Impedance matching circuit  80  is used by readykey controller  12  as a comparison circuit to compare the impedance values provided by power relay switch  16  and data relay switch  26  with the expected values provided by impedance matching circuit  80 . Readykey controller  12  may then determine whether an unauthorized person is tampering with either power relay switch  16  or data relay switch  26 . 
     Each card reader  14 ,  24 ,  84  and  86  has red and green light emitting diodes (not illustrated). The red light emitting diode indicates the card reader  14 ,  24 ,  84  or  86  is powered on but authorized access has not been granted. 
     The VCA terminal of card reader  24  is connected through diode D 2 , contact RC 2  and contact TSRC 2  to ground. When readykey controller  12  closes contact RC 2  the current path from card reader  24  to ground is complete which activates the green light emitting diode of card reader  24 . Activating the green light emitting diode of card reader  24  indicates that data channel associated with card reader  24  is enabled. 
     Referring to FIGS.  1  and  4 A- 4 C, secured network system  10  is adapted for use with two personal computers. System  10  includes a second personal computer card reader  84  located adjacent the second personal computer (not illustrated). System  10  also includes a second network card reader  86  positioned adjacent the data relay switch for the second computer. 
     The user of secured network system  10  may present a proximity card to card reader  84 . When card reader  84  verifies that the user is authorized to use the second computer and the monitor associated with card reader  84 , readykey controller  12  will activate the power relay switch for the second computer. In a like manner, the data relay switch for the second computer is activated when an authorized user presents a proximity card to card reader  86  which allows the user of the second computer to receive and process classified data as well as unclassified data. 
     Since the power relay switch for the second personal computer operates in exactly the same manner as the power relay switch illustrated in FIG. 2, and the data relay switch for the second personal computer operates in exactly the same manner as the data relay switch illustrated in FIG. 3, a detailed description of their operation will not be provided. 
     From the foregoing, it may readily be seen that the present invention comprises a new, unique and exceedingly useful secured network system for receiving and processing classified and unclassified data which constitutes a considerable improvement over the known prior art. Obviously, many modifications and variations of the present invention are possible in light of the above teachings. It is, therefore to be understood that within the scope of the appended claims that the invention may be practiced otherwise than as specifically described.