# US 2013/0160106 A1 · Basic architecture for secure internet computers > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0160106 A1 - Document ID: US20130160106A1 - Status: Published application - Kind: A1 - Application number: 13/768,582 - Filed: 2013-02-15 - Published: 2013-06-20 - Earliest claimed: 2010-01-26 - Inventors: Frampton E. ELLIS - Web page: https://patentgrep.com/patent/US20130160106A1 ## CPC - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - G06F 21/50: Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems - G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of securely controlling through a private network a computer protected by a hardware-based inner access barrier or firewall and optionally configured to operate as a general purpose computer connected to the Internet, comprising: two separate network connections separated by an inner hardware-based access barrier or inner hardware-based firewall protecting a private network connection configured for connection to a private network of computers but not protecting a public network connection configured for connection to a public network configured to include the Internet, the method including the step of controlling at least one operation of the computer, the control being provided through the private network and the operation involving data and/or code transmitted to the public network. Another method includes the step of controlling an operation of a second or third private protected unit of the computer, the control being provided through a second or third private network, respectively. ## Claims ### Claim 1 A method of securely controlling through a private network a computer protected by an inner access barrier or firewall and configured to operate as a general purpose computer connected to the Internet, said computer comprising: at least one network connection configured for connection to at least a public network of computers including the Internet, said at least one network connection being located in at least one public unit of said computer, at least one additional and separate private network connection configured for connection to at least a separate, private network of computers, said at least one additional and separate private network connection being located in at least one protected private unit of said computer, and at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one protected private unit of said computer and said at least one public unit of said computer; wherein said private and public units and said two separate network connections are separated by said at least one inner hardware-based access barrier or inner hardware-based firewall; said at least one protected private unit of the computer includes at least a first microprocessor or core or processing unit, said at least one public unit of the computer includes at least a second microprocessor or core or processing unit, configured to operate as a general purpose microprocessor or core or processing unit, and said second microprocessor or core or processing unit is separate from said inner hardware-based access barrier or inner hardware-based firewall; and said method comprising the step of: controlling at least one operation of said computer from said private network of computers, said operation including at least transmitting data and/or code from said private network of computers to said separate private network connection in said protected private unit of said computer; receiving said data and/or code by said first microprocessor or core or processing unit in said protected private unit of said computer; and transmitting data and/or code by said first microprocessor or core or processing unit in said protected private unit to at least a part of said public unit. ### Claim 2 (depends on 1) The method of claim 1, wherein said controlling step includes remotely controlling said computer. ### Claim 3 (depends on 1) The method of claim 1, wherein said controlling step includes remotely providing administrative functions for said computer. ### Claim 4 (depends on 3) The method of claim 3, wherein said controlling step includes remotely maintaining the computer, remotely testing the computer, or remotely updating an operating or application system of said computer. ### Claim 5 (depends on 3) The method of claim 3, wherein said controlling step includes performing at least one operation in the public unit of said computer. ### Claim 6 (depends on 4) The method of claim 4, wherein said computer further comprises: at least a separate, second inner hardware-based access barrier or inner hardware-based firewall that protects at least a separate, second private network connection configured for connection to at least a separate, second private network of computers, said at least a second private network connection being located in at least a second protected private unit of said computer; said second protected private unit of the computer includes at least a third microprocessor or core or processing unit, said method further comprising the steps of: controlling at least one operation of said computer from said second private network of computers, said operation including at least transmitting data and/or code from said second private network of computers to said second private network connection in said second protected private unit of said computer; and receiving said data and/or code in at least a part of said second protected private unit of said computer from said second private network of computers, said part of said second protected private unit including at least said third microprocessor or core or processing unit; and transmitting data and/or code by said third microprocessor or core or processing unit through said second inner hardware-based access barrier or inner hardware-based firewall to at least a part of said public unit or said protected private unit. ### Claim 7 (depends on 6) The method of claim 6, wherein said computer further comprises: at least a separate, third inner hardware-based access barrier or inner hardware-based firewall that protects at least a separate, third private network connection configured for connection to at least a separate, third private network of computers, said at least a third private network connection being located in at least a third protected private unit of said computer; said third protected private unit of the computer includes at least a fourth microprocessor or core or processing unit, said method further comprising the steps of: controlling at least one operation of said computer from said third private network of computers, said operation including at least transmitting data and/or code from said third private network of computers to said third private network connection in said third protected private unit of said computer; and receiving said data and/or code in at least a part of said third protected private unit of said computer from said third private network of computers, said part of said third protected private unit including at least said fourth microprocessor or core or processing unit; and transmitting data and/or code by said fourth microprocessor or core or processing unit through said third inner hardware-based access barrier or inner hardware-based firewall to at least a part of said public unit or said protected private unit. ### Claim 8 A method of securely controlling through a private network a computer protected by an inner access barrier or firewall, configured for connection to the Internet, said computer comprising: at least one network connection configured for connection to at least a public network of computers including the Internet, said at least one network connection being located in at least one public unit of said computer, at least one additional and separate private network connection configured for connection to at least a separate, private network of computers, said at least one additional and separate private network connection being located in at least one protected private unit of said computer, and at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one protected private unit of said computer and said at least one public unit of said computer; wherein said private and public units and said two separate network connections are separated by said at least one inner hardware-based access barrier or inner hardware-based firewall; said at least one protected private unit of the computer includes at least a first microprocessor or core or processing unit, said at least one public unit of the computer includes at least a second microprocessor or core or processing unit, configured to operate as a general purpose microprocessor or core or processing unit, and said second microprocessor or core or processing unit is separate from said inner hardware-based access barrier or inner hardware-based firewall; and said method comprising the step of: controlling at least one operation of said computer from said private network of computers, said operation including at least transmitting data and/or code from said private network of computers to said separate private network connection in said protected private unit of said computer; receiving said data and/or code by said first microprocessor or core or processing unit in said protected private unit of said computer; and transmitting data and/or code by said first microprocessor or core or processing unit in said protected private unit to at least a part of said public unit ### Claim 9 (depends on 8) The method of claim 8, wherein said controlling step includes remotely controlling said computer. ### Claim 10 (depends on 8) The method of claim 8, wherein said controlling step includes remotely providing administrative functions for said computer. ### Claim 11 (depends on 10) The method of claim 10, wherein said controlling step includes remotely maintaining the computer, remotely testing the computer, or remotely updating an operating or application system of said computer. ### Claim 12 (depends on 10) The method of claim 10, wherein said controlling step includes performing at least one operation in the public unit of said computer. ### Claim 13 (depends on 11) The method of claim 11, wherein said computer further comprises: at least a separate, second inner hardware-based access barrier or inner hardware-based firewall that protects at least a separate, second private network connection configured for connection to at least a separate, second private network of computers, said at least a second private network connection being located in at least a second protected private unit of said computer; said second protected private unit of the computer includes at least a third microprocessor or core or processing unit, said method further comprising the steps of: controlling at least one operation of said computer from said second private network of computers, said operation including at least transmitting data and/or code from said second private network of computers to said second private network connection in said second protected private unit of said computer; and receiving said data and/or code in at least a part of said second protected private unit of said computer from said second private network of computers, said part of said second protected private unit including at least said third microprocessor or core or processing unit; and transmitting data and/or code by said third microprocessor or core or processing unit through said second inner hardware-based access barrier or inner hardware-based firewall to at least a part of said public unit or said protected private unit. ### Claim 14 (depends on 13) The method of claim 13, wherein said computer further comprises: at least a separate, third inner hardware-based access barrier or inner hardware-based firewall that protects at least a separate, third private network connection configured for connection to at least a separate, third private network of computers, said at least a third private network connection being located in at least a third protected private unit of said computer; said third protected private unit of the computer includes at least a fourth microprocessor or core or processing unit, said method further comprising the steps of: controlling at least one operation of said computer from said third private network of computers, said operation including at least transmitting data and/or code from said third private network of computers to said third private network connection in said third protected private unit of said computer; and receiving said data and/or code in at least a part of said third protected private unit of said computer from said third private network of computers, said part of said third protected private unit including at least said fourth microprocessor or core or processing unit; and transmitting data and/or code by said fourth microprocessor or core or processing unit through said third inner hardware-based access barrier or inner hardware-based firewall to at least a part of said public unit or said protected private unit.