Source: https://patents.justia.com/patent/8522309
Timestamp: 2019-03-22 06:50:54
Document Index: 536512912

Matched Legal Cases: ['Application No. 60', 'application No. 201000159', 'Application No. 20050271190', 'Application No. 20030062252', 'Application No. 20050009496', 'Application No. 20040243825', 'Application No. 2004']

US Patent for Security switch Patent (Patent # 8,522,309 issued August 27, 2013) - Justia Patents Search
Justia Patents Access Control Or AuthenticationUS Patent for Security switch Patent (Patent # 8,522,309)
System and method for securing a personal device that includes a device core and a peripheral device from unauthorized access or operation. The system comprises an isolated switch, included fully or partially within an envelope of the personal device. The isolated switch cannot be affected in its operation by either the device core or the peripheral device. The switch may be operated by an authorized user of the personal device either preemptively or in response to a detected threat. In some embodiments, the isolated switch includes an isolated controller which can send one or more signals to the peripheral device and/or part of peripheral device. In some embodiments, the isolated switch includes an isolated internal component and an isolated external component, both required to work together to trigger the isolated switch operation. In some embodiments, the isolated switch includes an isolated disconnector for connecting and disconnecting the device core from part of the peripheral device.
This application is a Continuation in Part of U.S. patent application Ser. No. 11/741,751 titled “Security Switch” and filed 29 Apr. 2007, which claimed priority from U.S. Provisional Patent Application No. 60/881,510 filed 22 Jan. 2007. This application further claims priority from Russian patent application No. 201000159 filed 5 Feb. 2010, now allowed as EAPO patent No. 013885. All of the abovementioned patents and patent applications are incorporated herein by reference in their entirety.
Authorized user—an owner or permitted operator of a personal device.
Unauthorized access—any attempt of an unauthorized user to access or operate a personal device.
False indication/notification—an indication showing one state, while another “real” state is different.
“Man in the middle”—a component logically placed between two other components and which can control the information passed between the two other components [0008]Secure Input—an input readable only to a permitted component, meaning that the input of the permitted component cannot be revealed by others components.
External—separate from a personal device but which can be connected to the personal device or plugged into the personal device.
Isolated switch—a switch that cannot be operated or affected by any entity or factor except an authorized user.
Independent operation—an operation that cannot be affected by any entity or factor except an authorized user.
Isolated controller—a controller that cannot be operated or affected by any entity or factor except an authorized user.
Embodiments according to the invention relate to the security of personal communication or computing devices which communicate with other devices which use software for operation. Personal software operated devices or appliances (hereinafter “personal devices”) such as mobile phones, IP-phones, pocket PCs, PDAs, laptop computers, desktop computers and network switches, use a variety of hardwired or wireless communication means for communication with other devices. A remote unauthorized user can adversely use these communication means to try and break the personal device security and obtain personal and other information on the personal device user or owner. A single personal device may have a number of different communication means such as phone-lines, cables, a wireless LAN, Bluetooth, etc, which only increases the security risk. These communication means can be used to retrieve private information, audio/video information, user location information (track where user is located when personal device is using out communication) or transmitted information.
Devices with permanently installed or accessory sensor components such as a microphone, earphone(s), speakers, camera, etc, are able to capture the information at a user location. Devices with permanently installed or accessory communication components like: modem, LAN adapter, Wireless LAN adapter, Bluetooth, GSM, etc, are able to transmit information and might reveal the user location. When signals are transmitted from the user location, the transmission can be used for tracking the user location. Components of a device/appliance that are controlled by software and electronic switching devices may be controlled by an unauthorized user even if they were disabled earlier by the authorized user. The components can be controlled without the user noticing the change in mode of operation. For example, a mobile phone may look “switched off” but still be functioning or even transmitting.
Hardware security solutions are known and include: devices used to isolate telephone lines in order to prevent unauthorized capture of audio information from phone user (see U.S. Pat. No. 5,402,465 and US Pat. Application No. 20050271190); data line switches for computers that disconnect a computer line physically from the Internet, working in manual and/or automatic mode (US Pat. Application No. 20030062252); a power off method for a wireless peripheral device, which terminates power to all parts of the wireless device except the control chip by a certain operation on a connect button (US Pat. Application No. 20050009496); a switch that powers-on a PDA in response to the stylus being removed from the PDA's stylus holder and, selectably, powers-off the PDA in response to the stylus being replaced into the PDA (U.S. Pat. No. 6,233,464); a mobile phone with two input modes, whereby a switch of input modes is attained by changing an electrical connection between the main printed circuit board (PCB) in the phone and the front and back PCBs (U.S. Pat. No. 7,031,758); the NetSafe Computer Security Switch, which uses a simple physical switching technology in a way that allows a computer or group of computers to quickly and easily block a communications signal from entering the computer(s) and restart the signal without any software and without the need to power down, reboot, or run software on the computer(s) (US Pat. Application No. 20040243825); a wireless button for a laptops, offered by the Hewlet Packard Corporation in its line of Pavilion laptops (hereinafter the “HP wireless button”), which enables or disables all integrated wireless components in the laptop (e.g. WiFi and Bluetooth), and a wireless light that indicates simultaneous the computer's overall wireless state (enabled or disabled); the portable electronic device that disconnects a receiving antenna from the duplexer of a mobile phone (US Pat. Application No. 2004/0203536A1).
Embodiments according to the invention disclose hardware security solutions that overcome the problems of hardware and software security solutions mentioned above. The invention provides a user of a personal device with hardware means for protecting information such as private information, audio/video information, user location information or transmission information. The hardware means, referred to as “security switch” or “isolated switch” is internal to the personal device and is isolated, both “internal” and “isolated being defined above. The “isolation” also means that the control elements of the switch do not have any external communication capability and are protected from remote operation/manipulation.
In some embodiments a security switch according to the invention is a component having: a) control elements that are not connected electrically to an environment from which they should be isolated and shielded, or that are decoupled in such a way that both electrical and magnetic fields cannot influence their operation; and b) switching elements that cannot be connected, disconnected or bypassed by elements other than the control elements in (a).
The principle of operation of the security switch disclosed herein relies solely on manual disconnection (or connection) of audio/video/communication or power supply components in the personal device in order to avoid unauthorized access to the information or personal device. This provides full isolation even in cases of full access to the device software or remote access to electronic components of the device, in the sense that an unauthorized user is not able to connect electrical circuits that are switched off manually
Note that the invention is not concerned with software security, but with protecting certain private information even in cases when security of device was already broken by disabling devices capable of capturing information or transmitting signal.
In some embodiments, there is disclosed a system for securing a personal device that includes a device core and at least one peripheral device from unauthorized access or operation, comprising an internal isolated switch having operating functions that cannot be affected by either the personal device core or by the at least one peripheral device and an isolated controller which can send signal(s) to the at least one peripheral device and/or part of peripheral device, the isolated controller thereby being capable of affecting operation of the at least one peripheral device, but cannot be operated or affected by the personal device. In some embodiments, the isolated switch includes an isolated disconnector for connecting and disconnecting the device core from part of the at least one peripheral device. In some embodiments, the isolated switch includes an isolated internal component and an isolated external component, wherein the isolated internal and external components trigger together the isolated switch operation.
Reference will be made in detail to preferred embodiments according to the invention, examples of which may be illustrated in the accompanying figures. The figures are intended to be illustrative, not limiting. Although the invention is generally described in the context of these preferred embodiments, it should be understood that it is not intended to limit the spirit and scope according to the invention to these particular embodiments. The structure, operation, and advantages of the present preferred embodiment according to the invention will become further apparent upon consideration of the following description, taken in conjunction with the accompanying figures, wherein:
FIG. 1 shows a first embodiment of a personal device with a security switch according to the invention;
FIG. 2 shows another embodiment of a personal device with a security switch according to the invention;
FIG. 3 shows yet another embodiment of a personal device with a security switch according to the invention;
FIG. 4 shows yet another embodiment of a personal device with a security switch according to the invention;
FIG. 5 shows yet another embodiment of a personal device with a security switch according to the invention;
FIG. 6 shows an embodiment of a personal device with an input solution for security switch according to the invention;
FIG. 7 shows yet another embodiment of a personal device with a security switch according to the invention;
FIG. 8 shows yet another embodiment of a personal device with a security switch according to the invention;
FIG. 9 shows an example of an electro-mechanical implementation of an isolated switch according to the invention;
FIG. 10 shows an example of an electrical implementation of an isolated switch according to the invention;
FIG. 11 shows another example of an electrical implementation of an isolated switch according to the invention;
FIG. 12 shows an example of an electrical/electronic implementation of an isolated switch according to the invention;
FIG. 13 shows an example of an electro-mechanical implementation of an isolated switch according to the invention;
FIG. 14 shows an example of an electro-mechanical implementation of isolated switch according to the invention;
FIG. 15 shows yet another embodiment of a personal device with a security switch according to the invention;
FIG. 16 shows an example of electrical/electronic implementation of an isolated switch with partial disconnection according to the invention;
FIG. 17 shows an example of electrical/electronic implementation of an isolated switch with isolated controller according to the invention;
FIG. 18 shows an example of electrical/electronic implementation of an isolated switch with external and internal components for mutual triggering of operation according to the invention.
The invention discloses security systems and devices for protecting personal devices and their users from unauthorized access, operation, identity theft or information theft. In particular, the invention discloses a security switch that provides total protection of information related to the personal device or a user of the device. In the following description, like elements appearing in different figures are numbered identically.
FIG. 1 shows a first embodiment 50 of a personal device with a security switch according to the invention. Personal device 50 includes a device core 100, an isolated switch 102 and at least one peripheral device 104. The dotted arrows indicate an optional direct connection between device core 100 and peripheral device 104 and/or between device core 100 and isolated switch 102. Device core 100 operates by software and may include one or more controllers (e.g. central processing units (CPUs)), one or more memory units and one or more power management modules. A peripheral device 104 may include one or more communication components, and/or one or more sensor components, and/or one or more user input components. Each of these will be shown in following figures. The communication components may include wireless communication components or wired communication components (e.g. WiFi, RE, Bluetooth, NFC, LAN, and modem). The sensor components may include audio components, video components (e.g. a microphone, speaker or camera). The user input component may include a keyboard or a touch screen.
Isolated switch 102 is an inventive element according to the invention, which contrasts with prior art in terms of both structure and function. Isolated switch 102 is an internal component, isolated from other components of the personal device. As defined above, “internal” means enclosed within an envelope of the personal device or positioned at least partially on the surface of the envelope of the personal device. “Isolated” means that the operation of the security switch cannot be affected either directly or indirectly by device core 100 or peripheral devices 104. This isolation prevents manipulation of switch 102 by the software of the personal device. In short, switch 102 can perform operations independently from the personal device (i.e. the personal device cannot affect an operation performed by switch 102) and can operate either in parallel with device core 100 (meaning that both perform independent tasks, in which case there may be a direct connection between device core 100 and peripheral device 104), or as a “man in the middle”, meaning that the connection of device core 100 with peripheral devices 104 or the information passed therebetween is affected by the operation of the switch.
FIG. 2 shows a second embodiment 52 of a personal device with a security switch according to the invention. In addition to all the components of device 50, in device 52, isolated switch 102 includes a disconnect/connect component. (“disconnector”) 200. Disconnector 200 is an inventive sub-component according to the invention, which contrasts with prior art in terms of both structure and function. It is an internal, isolated (in the sense defined above for switch 102) sub-component, which can disconnect and reconnect different subsets of peripheral devices 104 from the device core. The disconnect operation may be effected by disconnecting (cutting) essential links between the device core and the subset of peripheral devices 104 (e.g. a data line, a power supply line, etc) or by shorting electrically essential links in the subset of peripheral devices 104 (e.g. a data line, sensor terminals, etc). Disconnector 200 may be implemented in a number of different ways: by electrical contacts switched mechanically, by electrical components, by electronic components or a combination of the above.
FIG. 3 shows another embodiment 54 of a personal device with a security switch according to the invention. Device 54 includes in addition to all the components of device 52 a switch mode indicator (e.g. a LED) 300. Indicator 300 provides visual indication of the state of disconnector 200, i.e. a visual indication of the disconnected subset of peripheral devices 104 or an indication that none of peripheral devices 104 are disconnected by disconnector 200. The switch mode indicator is “isolated” in the same sense as disconnector 200 and controlled only by disconnector 200 which contrasts with prior art in terms of structure. This prevents manipulation of indicator 300 by the software of the personal device or by other means, meaning that false indication or notification is impossible.
FIG. 4 shows yet another embodiment 56 of a personal device with a security switch according to the invention. Device 56 includes in addition to all the components of device 50 an isolated user input logic 400 (or simply “logic”) as a component of isolated switch 102 and at least one user input component 402 included in at least one of peripheral devices 104. A component 402 may be any known input component such as a keyboard or a touch screen.
Isolated user input logic 400 is another inventive sub-element according to the invention, which contrasts with prior art in terms of both structure and purpose. Logic 400 is an internal isolated component (in the sense defined above for switch 102) used for reading inputs, which is hooked to at least one subset of user input components 402 in parallel with and separately from device core 100. The hook-up may be done exemplarily by using keys with a mutual mechanical part and independent electrical contacts. Logic 400 is isolated from other components of the personal device in the sense that the inputs read from user input components 402 cannot be affected either directly or indirectly by device core 100 or by peripheral devices 104. This isolation prevents manipulation of logic 400 by the software of the personal device. Logic 400 may have different implementations depending on the user input component(s) 402 to which it is hooked.
Examples of user input logic 400 hooks include:
1. Hook to an “end call” button and a “start call” button.
2. Hook to an integrated cover, meaning that operation will be initiated by closing\shifting the cover.
3. Hook to a keyboard, meaning that operation will be initiated by the user pressing a combination or sequence of keys.
4. Hook to a “mute mode” button, e.g. in an IP-Phone.
5. Hook to a handset placement, meaning that operation will be initiated by the user plug in/out the handset.
6. Hook to a stylus holder, meaning that operation will be initiated by the user placing the stylus back in the stylus holder and/or removing the stylus from the stylus holder e.g. in a Pocket PC\PDA.
FIG. 5 shows yet another embodiment 58 of a personal device with a security switch according to the invention. Device 58 includes in addition to all the components of device 56 an isolated disconnector 200. In contrast to device 52, disconnector 200 in device 58 disconnects and reconnects only different subsets of user input components 402 from the device core, for preventing inputs from reaching device core 100. This prevents unauthorized input capture by the software of the personal device or by other means (e.g. a keyboard sniffer), meaning that the input is secured. In use, under the same circumstance as described for device 56, a user input component 402 is operated by the user to enter an initial input for the security switch. Logic 400 reads the initial input as an independent operation and operates disconnector 200 to disconnect the respective user input component from the device core (for enabling continued input in a secure environment, e.g. secure input of a user PIN code). The user input component is then operated by the user to continue entering inputs for the security switch as an independent operation (while the input cannot be captured by any entity except the security switch). At the end of the input operation, logic 400 operates disconnector 200 to restore the connection of the disconnected subset of user input components 402 to device core 100.
FIG. 6 shows an embodiment 60 of a personal device with an input solution for security switch according to the invention. Device 60 includes in addition to all the components of device 58 an input mode indicator (e.g. a LED) 500. Indicator 500 provides visual indication of the state of logic 400, i.e. a visual indication that logic 400 operates disconnector 200 to disconnect user input components 400 from device core 100, or an indication that none of user input components 400 are disconnected by logic 400 via disconnector 200. The switch mode indicator is “isolated” in the same sense as logic 400 and controlled only by logic 400 which contrasts with prior art in terms of structure. This prevents manipulation of indicator 500 by the software of the personal device or by other means, meaning that false indication or notification is impossible. Under similar use circumstances as described for device 58, the security switch is used as follows: User input component 402 is operated by the user to enter an initial input for security switch. Logic 400 reads the initial input from user input component 402, operates disconnector 200 to disconnect input component 402 from device core 100 (for enabling continued input in a secure environment) and enables indicator 500. Indicator 500 is used by the user to visually verify a secure input environment. Input component 402 is operated by the user to continue entering inputs to the security switch. At the end of input operations, logic 400 operates disconnector 200 to restore the connection of input component 402 to device core too and disables indicator 500. Indicator 500 is then used by the user to visually verify the restoration of the input environment to the initial state.
FIG. 7 shows yet another embodiment 62 of a personal device with a security switch according to the invention. Device 62 combines device 52 and device 58, where peripheral devices 104 (described in device 50) include user input components 402 (described in device 56), communication components 602 and sensor components 600 (described in device 50 as sub-parts of peripheral devices 104). Device 62 provides functionalities of both device 52 and device 58.
FIG. 8 shows yet another embodiment 64 of a personal device with a security switch according to the invention. Device 64 combines device 54 and device 60 where peripheral devices 104 (described in device 50) include user input components 402 (described in device 56), communication components 602 and sensor components 600 (described in device 50 as sub-parts of peripheral devices 104). Device 64 provides functionalities of both device 54 and device 60.
FIG. 9 shows an example of an electro-mechanical implementation of an isolated switch 102, which includes disconnector 200 and switch mode indicator 300. FIG. 9 includes DC1 as device core 100, PH1 (USB Device) as communication component 602, D1 (Hub Master) as an electro-mechanical implementation of disconnector 200 and I1 as an electrical implementation of indicator 300. D1 is a multi-positional switch that has four states: normal, mode 1, mode 2 and mode 1+2. The “normal” mode of D1 includes open contacts 1, 2 and closed contacts 3, 4 (or normally opened contacts 3a, 4a). If D1 is in normal mode, DC1 is connected to PH1 and the circuits of L1 and L2 of I1 are open, meaning that the LEDs of mode 1 and mode 2 are off. When D1 is in “mode 1”, contacts 3, 4 (or 3a, 4a) remain in same state as in normal mode (due to the fact that communication component 602 is not affected by mode 1), and contact 1 closes the connecting power from P1 through a resistor RS1 to L1, which turns on the LED of mode 1.
When D1 is in “mode 2” contacts 3, 4 open and disconnect the data line between DC1 and PH1 (or contacts 3a, 4a shorten data lines D+, D− to ground) and contact 2 closes, connecting power from P1 through a resistor RS2 to L2, which turns on the LED of mode 2. When D1 is in “mode 1+2”, contacts 3, 4 open and disconnect the data line between DC1 and PH1 (or contacts 3a, 4a short data lines D+, D− to ground) and contacts 1, 2 close, connecting power from P1 through RS1, RS2 to L1, L2, which turns on the LEDs of modes 1 and 2.
Switch 102 is isolated because D1 operates mechanically and its control cannot be affected by DC1 or PH1. There is no bypass to data lines D+, D−, so when contacts 3, 4 open (3a, 4a close), communication between PH1 and DC1 is disconnected without possibility of bypass.
Regarding components in various embodiments, examples of predefined subsets of sensor components 600 that can be disconnected by the disconnector in mode 1 include:
1. Microphone, speaker and camera;
2. Microphone and camera (in case that the speaker is proved to be unable to capture voice, it is possible to leave it connected and to gain more functionally).
Examples of predefined subsets of communication components 602 that can be disconnected by the disconnector in mode 2 include.
1. RF communication components;
2. Bluetooth, infra-red and\or NFC (Near Field Communication) components, e.g. in a mobile phone where NFC might be used for PayPass (Electronic Payment) and Bluetooth\Infra-Red might be used for data transfer;
3. WiFi or Wimax components.
When Key 1 and Key 2 are pressed simultaneously, relay R operates and opens contacts to circuit(s) that have to be interrupted, closes contact R and stays energized while Key 3 is in normal position and turns on the LED. When key 3 is pressed, relay R is released and interrupted circuit(s) return to normal state.
FIG. 13 shows an example of an electro-mechanical implementation of isolated switch according to an embodiment according to the invention which includes disconnector 200 (represented by D1) in a mobile terminal (e.g. mobile phone). The mobile phone includes a device core 100 (represented by DC2) with a CPU, a memory, a SIM card, a graphic LCD, a camera IC, an audio Interface, and a power management module; PH2, PH3 representing communication components 602; a transceiver PH2 and a GPS receiver PH3; PH4 and PH5 representing sensor components 600; and PH6 as user input component 402. PH4 consists of a microphone and a speaker, PH5 consists of a camera and PH6 consists of a keyboard. All components and subcomponents are interconnected as shown.
FIG. 14 shows an example of an electro-mechanical implementation of isolated switch according to the invention. In this implementation, the isolated switch includes a disconnector (represented by D1) and a switch mode indicator (represented by I1) in, exemplarily, an IP-Phone. The IP phone includes a device core (represented by DC3) with a VoIP processor 151, a memory 152, an audio/voice codec 153, a power management module 154, a LCD controller 155, a LCD 156 and a camera decoder 157. PH7 and PH8 represent sensor components 600, PH9 represent communication component 602 and PH10 representing user input component 402. PH7 is a microphone, PH8 is a speaker, PH9 is a camera, PH10 is a keyboard and PH11 is an Ethernet transceiver. All components and subcomponents are interconnected as shown.
The security switch has only one mode (mode 1), due to the fact that mode 2 and mode 1+2 are not required in this implementation. In mode 1, D1 disconnects PH8 and PH7 and activates I1. As shown in FIG. 14, a pull-up resistor 158 can be used to protect the open circuit between PH9 and DC3.
FIG. 15 shows yet another embodiment 53 of a personal device with a security switch according to the invention. Device 53 includes an isolated switch which includes in addition to components of switch 102 an isolated controller 700. Controller 700 is isolated in the same sense as logic 400, i.e. it is operated only through isolated logic 400. It can send signals to the peripheral devices, but which cannot be operated or affected by the personal device. This prevents manipulation of isolated controller 700 by the software of the personal device or by other means, meaning that receiving a false signal is impossible.
Under similar use circumstances as described for device 56, the security switch may be used here as follows: when a user wants to enter an input (e.g. by pressing keys on the keyboard) the input is entered as described with reference to the embodiment in FIG. 4. That is, the input is entered by operating user input component 402 with logic 400 reading the input from component 402 in an independent operation. In addition, logic 400 then operates isolated controller 700, which sends a signal or signals to peripheral devices 104. The received signals then modify the operation of peripheral devices 104. In contrast with the operation of device 56, in device 53 one can use a combination of user input and controller to modify the operation of the device and not just to perform connect/disconnect operations.
FIG. 16 shows an example of electrical/electronic implementation of an isolated switch (represented by D2) with partial connection or disconnection functionality according to the invention. The switch includes all the components of the embodiment in FIG. 12, but can be operated to only partially connect or disconnect a peripheral device from the personal device core. The implementation is exemplarily for a mobile terminal (e.g. mobile phone). The mobile terminal includes a device core (represented by DC1) with a CPU 166, a memory 165, a SIM card 164, a graphic LCD 163, an audio interface 162 and a power management module 161; transceiver PH2 representing communication components 602; PH3 and PH4 representing sensor components 600; and PH1 as user input component 402. PH3 consists of a microphone and PH4 consists of a speaker, and PH1 consists of keyboard. Power source 167 is used as a separate power source for only the switch.
In this embodiment, the partial connection or disconnection feature is enabled by a special interconnection of relays 201 included in disconnector 200 and other elements. Isolated logic 400 includes a logic module 401 for reading code and keys “mode in” 168, “mode out” 169 and “0-9” 170. Optionally, it can also include other keys 171. Keyboard PH1 includes a key 172 which serves as a “end of call” key, a key 173 which serves as a “start of call” key, keys 174 which represent numbers 0-9 and, optionally, keys 175 which can be used for other purposes. A first data line 176 is for transferring data of SMS/calls between CPU 166 and transceiver PH2. A signal 177 enables transferring (out) long packets of data from CPU 166. Signal 177 has highest priority in PH2. A second data line 178 is for transferring data from PH2 to CPU 166. A third data line 179 is for transferring data from CPU 166 to PH2. Additional signals are marked 180. All components and subcomponents are interconnected as shown.
For entering mode 1, an authorized user presses key 172 which is mechanically connected with key 168 which operates relay R1 of disconnector 200. R1 disconnects PH3 from audio interface 162 and disconnects data line 176 and/or signal 177 from CPU 166. The isolated switch thus disconnects part of PH2 from DC1, while other parts remain connected. This represents the “partial disconnection” referred to above. When the data line responsible for sending SMS\call data is disconnected, and\or when a signal responsible for enabling transfer of long data packet is also disconnected, from CPU 166 (e.g. by R1 disconnecting data line 176) transceiver PH2 can receive SMS\call data, can send location updates, since 178, 179 and 180 are not switched off, but cannot send out SMS and call data. Changes done by components 102 or D2 or 200 cannot be bypassed by device core DC1, since signal 177 has highest priority in PH2 and since D2 is isolated. R1 also connects the LED of mode indicator 300, which shows the authorized user that switch is now in mode 1.
For exiting mode 1, an authorized user presses key 173, which is mechanically connected with key 169. This resets relay R1. R1 connects PH3 to audio interface 162 and data line 176 and signal 177 to CPU 166. R1 also disconnects the LED of mode indicator 300, which shows the authorized user that the switch is now in normal mode. Without additional actions, the authorized user thus prevents voice capture and sending calls/SMS by malicious software.
For entering a secure PIN, an authorized user presses a preset number using keys 174, thereby operating keys 170, then presses key 172 which is mechanically connected with key 168. In response, logic 400 operates relay R2 of isolated disconnector 200 and relay R2 disconnects PH1 from CPU 166. Logic module 400 also operates the LED of input mode indicator 500, which shows the authorized user that the secure PIN can be entered. After entering the secure PIN and performing (if necessary) other operations, the authorized user presses a key sequence or combination for exiting the secure mode. In response, module 400 resets relay R2, which then reconnects PH1 to CPU 166. The LED is turned off, indicating that the switch is now in normal mode.
FIG. 17 illustrates the use of the isolated controller through another example of an electrical/electronic implementation of an isolated switch (represented by D2). The implementation is exemplarily for a mobile terminal (e.g. mobile phone). The mobile phone includes a device core (represented by DC1) with a CPU 166, a memory 165, a SIM card 164, a graphic LCD 163, an audio interface 162, and a power management module 161, with transceiver PH2 representing communication components 602, PH3 (e.g. a microphone) and PH4 (e.g. a speaker) representing sensor components 600 and PH1 representing user input component (e.g. keyboard) 402. Isolated controller 700 is isolated from PH2 by an opto-coupler 181. All components and subcomponents are interconnected as shown.
Power source 167 is used as a separate power source for only the switch. Disconnector 200 includes relays 201. Isolated input logic 400 includes logic module 401 and keys 168, 169, 170, and, optionally, keys 171. Keyboard PM includes keys 172, 173, 174 and, optionally, keys 175. Data line “data1” marked 176 is for transferring data of SMS/calls. Signal “signal 1” 177 enables transferring (out) long packets of data from CPU 166. Signal “Signal 1” 177 has highest priority in PH2. Data line “data 2” marked 178 is for transferring data from PH2 to CPU 166. Data line “data3”, marked 179 is for transferring data from CPU 166 to PH2. Additional signals are marked 180.
For entering a mode of restricted communication, an authorized user presses key 172 which is mechanically connected to key 168, which sends a signal of a correspondent logic state to isolated controller 700. Controller 700 then sends signal 177 to PH2 through the opto-coupler, disabling out-transfer of a long data packet. While such transfer is disabled, transceiver PH2 can receive SMS\call data and can send location updates, since 178, 179, 180 are enabled, but cannot send SMS and call data. Changes done by components 102 or D2 or 200 cannot be bypassed by device core DC1, since signals 177 have highest priority in PH2. For exiting the mode of restricted communication, an authorized user presses “start of call” key 173 which is mechanically connected with “mode out” key 169, thereby sending a signal of a correspondent logic state to isolated controller 700. Controller 700 stops signal 177 to PH2 through opto-coupler 181, thereby enabling transfer out of long data packet.
As a result of the actions above and without additional actions, an authorized user prevents sending SMS/calls by malicious software. For entering a secure PIN, an authorized user presses a preset number using keys 174 thereby operating keys 170, then presses key 172 which is mechanically connected with key 168 of isolated input logic 400. In response, module 400 operates relay R1 of isolated disconnector 200 and relay R2 disconnects PH1 from CPU 166. Logic module 400 also operates the LED of input mode indicator 500, which shows the authorized user that the secure PIN can be entered. After entering the secure PIN and performing (if necessary) other operations, the authorized user presses a key sequence or combination for exiting the secure mode. In response, module 400 resets relay R1, which connects PH1 to CPU 166. The LED is turned off, indicating that the switch is now in normal mode.
FIG. 18 shows another example of an electrical\electronic implementation of an isolated switch (represented by D2) according to the invention. The implementation is exemplarily for a mobile terminal (e.g. mobile phone). The mobile phone includes a device core 100 (represented by DC1) with a CPU 166, a Memory 165, a SIM Card 164, a graphic LCD 163, an audio Interface 162, and a power management module 161; transceiver PH2 representing communication components 602; PH3 and PH4 representing sensor components 600; and PH1 as user input component 402. PH3 consists of a microphone, PH4 consists of a speaker, and PH1 consists of keyboard. Disconnector 200 includes relays 201. Isolated logic module 400 includes logic module 401, timer 402 and keys “mode in” 168, keys “0-9” 170 and also include other keys 171. Power source 167 is used as a separate power source for only the switch.
Part of input logic module 400 is located in an external (to the personal device) unit (component) E1. E1 can be connected only by an authorized user. E1 is located in the same unit with a mobile terminal charger 1611 and connected to mobile terminal simultaneously with charger 1611. E1 includes a memory 403, while the internal part of module 400 includes a timer 402. All components and subcomponents are interconnected as shown.
As part of the routine operation of the logic module, timer 402 counts to a pre-determined value (e.g. 48 hours), then operates relay R1. R1 disconnects display 163 from CPU 166 and disconnects memory 165, SIM card 164 and display 163 from power supply 161. R1 also connects led of mode indicator 300, which shows an authorized user that switch is in blocked mode, but not malfunctioning. This renders the mobile terminal unusable for a non-authorized user, who does not have external part E1 with secure code written in its memory 403.
For exiting a blocked mode, an authorized user connects external part E1 (together with its charger) and a logic module reading code 401 written in memory 403 of E1. If the code is correct, the logic module resets timer 402 which disconnects relay R1, and the timer 402 restarts the count. Relay R1 connects display 163 to CPU 166 and connects memory 165, SIM card 164 and display 163 to power supply 161. R1 also disconnects the LED of mode indicator 300, which shows the authorized user that switch is in normal mode. For entering a secure PIN, the authorized user presses a preset number using keys 174, then presses key 172 which is mechanically connected to key 168. In response to this sequence, isolated input logic module 400 operates relay R2, which disconnects PH1 from CPU 166. The logic module also operates turns on the LED of input mode indicator 500, which shows the authorized user that secure PIN can be entered. After entering the secure PIN, the user can change code in the memory of E1 and conduct other operations. Then, the user can press a key sequence or combination for exiting the secure mode. In response, logic module 400 resets relay R2, which re connects PH1 to CPU 166 and turns off the LED of input mode indicator 500. The switch now returns to normal mode.
All publications, patents and patent applications mentioned in this specification are herein incorporated in their entirety by reference into the specification, to the same extent as if each individual publication, patent or patent application was specifically and individually indicated to be incorporated herein by reference. In addition, citation or identification of any reference in this application shall not be construed as an admission reference is available as prior art to the invention.
While the invention has been described with respect to a limited number of embodiments, it will be appreciated that many variations, modifications and other applications according to the invention may be made. Those skilled in the art will appreciate that the invention can be embodied by other forms and ways, without losing the scope according to the invention. The embodiments described herein should be considered as illustrative and not restrictive.
1. A system for securing a personal device that includes a device core and at least one peripheral device from unauthorized access or operation, comprising an internal isolated switch having operating functions that cannot be affected by either the personal device core or by the at least one peripheral device, wherein the isolated switch includes an isolated controller which can send a signal to the at least one peripheral device but which cannot be operated or affected by the personal device, the isolated controller thereby being capable of affecting operation of the at least one peripheral device.
3. The system of claim 1, wherein the isolated switch includes an isolated disconnector for connecting and disconnecting the device core from a part of the at least one peripheral device.
4. The system of claim 3, wherein the at least one peripheral device includes a plurality of peripheral devices and wherein the isolated disconnector can disconnect and connect any subset selected from the group consisting of a subset of the plurality of peripheral devices, a subset of parts of the plurality of peripheral devices and a subset of a mixture of some peripheral devices and parts of other peripheral devices of the plurality of peripheral devices.
5. The system of claim 1, wherein the isolated switch includes an isolated internal component and an isolated external component and wherein the isolated internal and external components trigger together the isolated switch operation.
6. The system of claim 1, wherein the at least one peripheral device includes a user input component and wherein the isolated switch includes an isolated user input logic module for reading user inputs.
7. The system of claim 1, wherein the personal device is selected from the group consisting of a mobile phone, an IP-phone, a pocket PC, a PDA, a laptop computer, a desktop computer and a network switch.
8. The system of claim 1, wherein the internal isolated switch is an electronic/electrical switch separated electrically from elements or components of the personal device.
9. The system of claim 1, wherein the internal isolated switch is a combination of a mechanical switch and an electronic/electrical switch without an electrically operated bypass and separated electrically from elements or components of the personal device.
10. The system of claim 1, wherein the isolated switch includes an input mode indicator for providing a visual indication of an internal isolated switch state.
11. A system for securing a personal device that includes a device core and at least one peripheral device from unauthorized access or operation, comprising an internal isolated switch having operating functions that cannot be affected by either the personal device core or by the at least one peripheral device, wherein the isolated switch includes an isolated disconnector for connecting and disconnecting the device core from any part of the at least one peripheral device.
12. The system of claim 11, wherein the at least one peripheral device includes a plurality of peripheral devices and wherein the isolated disconnector can disconnect and connect any subset selected from the group consisting of a subset of the plurality of peripheral devices, a subset of parts of the plurality of peripheral devices and a subset of a mixture of some peripheral devices and parts of other peripheral devices of the plurality of peripheral devices.
13. The system of claim 11, wherein the at least one peripheral device includes a user input component and wherein the isolated switch includes an isolated user input logic module for reading user inputs.
14. The system of claim 11, wherein the isolated switch includes an input mode indicator for providing a visual indication of the internal isolated switch state.
15. The system of claim 11, wherein the personal device is selected from the group consisting of a mobile phone, an IP-phone, a pocket PC, a PDA, a laptop computer, a desktop computer and a network switch.
16. A system for securing a personal device that includes a device core and at least one peripheral device from unauthorized access or operation, comprising an internal isolated switch having operating functions that cannot be affected by either the personal device core or by the at least one peripheral device, wherein the isolated switch includes an isolated internal component and an isolated external component and wherein the isolated internal and external components trigger together the isolated switch operation.
17. The system of claim 16, wherein the isolated switch includes an isolated disconnector for connecting and disconnecting the device core from the at least one peripheral device.
18. The system of claim 16, wherein the isolated switch includes an isolated disconnector for connecting and disconnecting the device core from a part of the at least one peripheral device.
19. The system of claim 2, wherein the isolated switch includes an isolated internal component and an isolated external component and wherein the isolated internal and external components trigger together the isolated switch operation.
20. The system of claim 3, wherein the isolated switch includes an isolated internal component and an isolated external component and wherein the isolated internal and external components trigger together the isolated switch operation.
3703987 November 1972 Ikeda
4945443 July 31, 1990 DeBiasi et al.
5402465 March 28, 1995 Foltz
5555156 September 10, 1996 Decante
5787307 July 28, 1998 Imoto
7031758 April 18, 2006 Chang
20030051162 March 13, 2003 Kirchmann
20030062252 April 3, 2003 Fonseca
20040198307 October 7, 2004 Chang
20040203536 October 14, 2004 Chao et al.
20040243825 December 2, 2004 Hunt
20050009496 January 13, 2005 Chen
20050271190 December 8, 2005 Linkenhoger
20060248257 November 2, 2006 Kojima
102008022655 November 2009 DE
1698990 September 2006 EP
9313236.3 January 1995 GB
2005-236605 September 2005 JP
WO2008140292 November 2008 WO
EPO, Search Report, Apr. 19, 2011.
JP, Office Action, Jul. 25, 2012.
Patent number: 8522309
Patent Publication Number: 20110179482
Inventors: Simon Yoffe (Givat Shmuel), David Yoffe (Givat Shmuel)
Application Number: 13/020,042
Current U.S. Class: Access Control Or Authentication (726/2); Firewall (726/11); Prevention Of Unauthorized Use Of Data Including Prevention Of Piracy, Privacy Violations, Or Unauthorized Data Modification (726/26); Access Control (726/27); Protection Of Hardware (726/34); By Certificate (713/156); File Protection (713/165)
International Classification: G06F 7/04 (20060101); G06F 9/00 (20060101); G06F 11/26 (20060101); H04L 29/06 (20060101);