# US 12,008,101 B2 · Secure enablement of a removable security module on a logic board

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,008,101 B2
- Document ID: US12008101B2
- Status: Granted
- Kind: B2
- Application number: 17/353,935
- Filed: 2021-06-22
- Published: 2022-12-22
- Granted: 2024-06-11
- Earliest claimed: 2021-06-22
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Steven Charles Erickson; Clinton William Erie; Shawn Matthew Johnston; Michael John MacPherson; Ryan Paske
- Web page: https://patentgrep.com/patent/US12008101B2

## CPC

- G06F 21/554: {involving event detection and direct action}
- G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06F 2221/034: Test or assess a computer or a system
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Methods and systems for protecting a secure computing system. Aspects include connecting a pluggable security card to a motherboard of the secure computing system. Aspects also include activating a detection circuit to monitor a physical connection between the pluggable security card and the motherboard. Based on detecting that the physical connection between the pluggable security card and the motherboard has been interrupted, aspects include setting a tamper event flag, wherein the secure computing system is prevented from being operated when the tamper event flag is set.

## Claims

### Claim 1

A computer-implemented method for protecting a secure computing system, the method comprising:
connecting a pluggable security card having a trusted platform module (TPM) designed to secure the secure computing system using integrated cryptographic keys, to a motherboard of the secure computing system,
activating a detection circuit to monitor a physical connection between the pluggable security card and the motherboard;
based on detecting that the physical connection between the pluggable security card and the motherboard has been interrupted, setting a tamper event flag,
wherein the secure computing system is prevented from being operated when the tamper event flag is set,
wherein the detection circuit is disposed on the motherboard, the detection circuit includes a battery and a volatile memory, and wherein connecting the pluggable security card establishes an electrical connection between the battery and the volatile memory through the pluggable security card, and
wherein a loss of the electrical connection will result in erasure of the volatile memory.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein the detection circuit further includes a real-time clock that is electrically connected via the physical connection between the pluggable security card and the motherboard.

### Claim 3 (depends on 2)

The computer-implemented method of claim 2, wherein the real-time clock is disposed on the motherboard.

### Claim 4 (depends on 2)

The computer-implemented method of claim 2, wherein the real-time clock is disposed on the pluggable security card.

### Claim 5

A secure computing system comprising:
a motherboard;
a pluggable security card having a trusted platform module (TPM) designed to secure the secure computing system using integrated cryptographic keys, the pluggable security card being removably affixed to the motherboard via a physical connection;
a detection circuit configured to monitor a continuity of physical connection, wherein the detection circuit is disposed on the motherboard, the detection circuit includes a battery and a volatile memory, and the pluggable security card establishes an electrical connection between the battery and the volatile memory through the pluggable security card; and
a processor communicatively coupled to the detection circuit, the processor configured to prevent operation of the secure computing system based on the detection circuit indicating a loss of the continuity of physical connection,
wherein a loss of the electrical connection will result in erasure of the volatile memory.

### Claim 6 (depends on 5)

The secure computing system of claim 5, wherein the pluggable security card includes a security module.

### Claim 7 (depends on 5)

The secure computing system of claim 5, wherein the detection circuit includes a real-time clock that is electrically connected via the physical connection between the pluggable security card and the motherboard.

### Claim 8 (depends on 7)

The secure computing system of claim 7, wherein the real-time clock is disposed on the motherboard.

### Claim 9 (depends on 7)

The secure computing system of claim 7, wherein the real-time clock is disposed on the pluggable security card.

### Claim 10

A secure computing system comprising:
a processor configured to prevent operation of the secure computing system based on a determination that a tamper event flag is set;
a microcontroller configured to monitor a continuity of a physical connection between a motherboard of the secure computing system and a pluggable security card having a trusted platform module (TPM) designed to secure the secure computing system using integrated cryptographic keys, the pluggable security card being removably affixed to the motherboard, wherein the motherboard includes a detection circuit comprising a battery and a volatile memory and wherein the pluggable security card establishes an electrical connection between the battery and the volatile memory through the pluggable security card,
wherein the microcontroller is further configured to set the tamper event flag based on detecting a loss of the continuity of physical connection,
wherein a loss of the electrical connection will result in erasure of the volatile memory.

### Claim 11 (depends on 10)

The secure computing system of claim 10, wherein the pluggable security card includes a security module.
