# US 10,375,018 B2 · Method of using a secure private network to actively configure the hardware of a computer or microchip > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,018 B2 - Document ID: US10375018B2 - Status: Granted - Kind: B2 - Application number: 16/051,054 - Filed: 2018-07-31 - Published: 2018-11-29 - Granted: 2019-08-06 - Earliest claimed: 2010-01-26 - Applicants: Frampton E. Ellis - Inventors: Frampton E. Ellis - Web page: https://patentgrep.com/patent/US10375018B2 ## CPC - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - G06F 11/2043: {where the redundant components share a common memory address space} - G06F 21/50: Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems - G06F 21/71: to assure secure computing or processing of information - G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices - H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method for a computer or microchip with one or more inner hardware-based access barriers or firewalls that establish one or more private units disconnected from a public unit or units having connection to the public Internet and one or more of the private units have a connection to one or more non-Internet-connected private networks for private network control of the configuration of the computer or microchip using active hardware configuration, including field programmable gate arrays (FPGA). The hardware-based access barriers include a single out-only bus and/or another in-only bus with a single on/off switch. ## Claims ### Claim 1 A computer that is a personal computer, a smartphone, a tablet, a web server or a cloud server, comprising: (a) at least one public unit, said public unit including at least one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communications component for separate wired and/or wireless network connections to the Internet; and (b) at least one network connection to the Internet; and (c) at least one private unit, the at least one private unit having: (i) at least one separate and distinct, private network connection component; (ii) at least a central processing unit microprocessor located in the at least one private unit and which is a central controller that functions as a master controlling device configured for controlling the computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server, and wherein said central processing unit microprocessor is configured to control communication between the public unit and the private unit; and at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one private unit and the at least one public unit and is controlled by the central controller, wherein said inner hardware-based access barrier or inner hardware-based firewall denies access to the private unit from the network of computers including the Internet. ### Claim 2 (depends on 1) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is a secure control bus, the secure control bus being isolated from input from the network including the Internet. ### Claim 3 (depends on 1) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is an in-only bus with an input on/off switch or an out-only bus with an output on/off switch or both of said at least one in-only bus and said at least one out-only bus and the input on/off switch and output on/off switch are controlled by the central controller. ### Claim 4 (depends on 1) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the central controller is configured to have direct preemptive control over all components of the public unit. ### Claim 5 (depends on 1) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the central controller is configured to have direct preemptive control over all components of the personal computer, smartphone, tablet, web server or cloud server. ### Claim 6 (depends on 1) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein the central controller is configured to reboot a hardware configuration of the personal computer, smartphone, tablet, web server or cloud server under control of the central controller. ### Claim 7 (depends on 1) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 1, wherein there is no intervening hardware between the central controller and the at least one inner hardware-based access barrier or inner hardware-based firewall. ### Claim 8 (depends on 2) The computer that is the personal computer, smartphone, tablet, web server or cloud server according to claim 2, wherein the secure control bus is configured so that it cannot be affected, interfered with, altered read or written to or superseded by any component of the public unit. ### Claim 9 (depends on 1) The computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 1, further comprising system BIOS of the personal computer, smartphone, tablet, web server or cloud server located in the at least one private unit. ### Claim 10 (depends on 1) The computer that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 1 configured for control by a personal user. ### Claim 11 A computer on a microchip that is a personal computer, a smartphone, a tablet, or a web or cloud server system, comprising: (a) at least one public unit including one or more microprocessors configured to connect to a network of computers including the Internet and at least one separate and distinct network communication component for separate wired and/or wireless network connections to the Internet; and (b) at least one network connection to the Internet; and (c) at least one private unit, the at least one private unit having: (i) at least one separate and distinct, private network connection component; and (ii) at least a central processing unit microprocessor located in the private unit and which is a central controller that functions as a master controlling device configured for controlling the computer on the microchip that is the personal computer, the smartphone, the tablet, or the web or cloud server and wherein said central processing unit microprocessor is configured to control communication between the public unit and the private unit; and (d) at least one inner hardware-based access barrier or inner hardware-based firewall is located between and communicatively connects said at least one private unit and the at least one public unit and is controlled by the central controller, wherein said inner hardware-based access barrier or inner hardware-based firewall denies access to the private unit from the network of computers including the Internet. ### Claim 12 (depends on 11) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is a secure control bus, the secure control bus being isolated from input from the network including the Internet. ### Claim 13 (depends on 11) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the at least one inner hardware-based access barrier or inner hardware-based firewall is an in-only bus with an input on/off switch or an out-only bus with an output on/off switch or both of said at least one in-only bus and said at least one out-only bus and the input on/off switch and output on/off switch are controlled by the central controller. ### Claim 14 (depends on 11) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the central controller is configured to have direct preemptive control over all components of the public unit. ### Claim 15 (depends on 11) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the central controller is configured to have direct preemptive control over all components of the personal computer, smartphone, tablet, web server or cloud server. ### Claim 16 (depends on 11) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein the central controller is configured to reboot a hardware configuration of the personal computer, smartphone, tablet, web server or cloud server under control of the central controller. ### Claim 17 (depends on 11) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 11, wherein there is no intervening hardware between the central controller and the at least one inner hardware-based access barrier or inner hardware-based firewall. ### Claim 18 (depends on 12) The computer on a microchip that is the personal computer, smartphone, tablet, web server or cloud server according to claim 12, wherein the secure control bus is configured so that it cannot be affected, interfered with, altered read or written to or superseded by any component of the public unit. ### Claim 19 (depends on 11) The computer on a microchip that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 11, further comprising system BIOS of the personal computer, smartphone, tablet, web server or cloud server located in the at least one private unit. ### Claim 20 (depends on 11) The computer on a microchip that is the personal computer, the smartphone, the tablet, the web server or the cloud server according to claim 11 configured for control by a personal user.