Patent ID: 8082585

Claim:
Malware protection for computers that cannot be altered or compromised by any software, said malware protection is independent from any form of virus detection, said malware protection applies to computer system normal mode of operation including internet use, said malware protection applies to computer system download mode of operation that permits downloading of permanent operational software elements, said malware protection comprising: an independent non-volatile operational system hard drive dedicated to storing software elements of a computer, said operational system hard drive is hardware write protectable; an independent paging memory dedicated to storing paging data, said paging memory is independent of said operational system hard drive that is write protected; an independent non-volatile data hard drive dedicated to storing application data; memory gates that enable or disable paging outputs, data hard drive outputs and external memory outputs, said memory gates are hardware implemented and hardware invoked, said memory gates are activated to block all memories that could be malware contaminated thus providing a sterile environment when write protection of said operational system hard drive is deactivated; a security switch that activates write protection of said operational system hard drive while deactivating said memory gates during normal said computer operation when there is no downloading of said software elements, said security switch activates said memory gates while deactivating write protection of said operational system hard drive; a write protect function that provides the required hardware interface between said security switch and said operational system hard drive, said write protect function is only invoked by said security switch and is not programmable or altered by any software; wherein said security switch provides an output to said write protect function to enable or disable write protection of said operational system hard drive, said security switch provides an output to said memory gates that activates or deactivates memory blocking, said security switch provides an output to the CPU to facilitate displaying of said security switch status, said security switch is functionally a single pole double throw switch with make before break contacts enabling said write protection before said memory gates are deactivated; said security switch is independent from all software; wherein said memory gates are hardware implemented with digital 2-input gates where one input is a data input and the second input is the activation input from said security switch, said memory gates enable or disable paging outputs, data hard drive outputs and external memory outputs simultaneously, said memory gates activation inputs are connected together and to the output of said security switch; and wherein said write protect function transforms the output from said security switch to the particular required inputs of the operational system hard drive, said write protect function is independent of all software.