Remote access control for digital hardware
AssigneeNanolock Security Inc.
InventorsEran FINE, Nitzan DAUBE
Life of this patent
Estimating the term…
Abstract
Security systems for microelectronic devices physically lock the hardware itself and serve as a first line of defense by preventing overwriting, modification, manipulation or erasure of data stored in a device's memory. Implementations of the security systems can respond to lock/unlock commands that do not require signal or software interactivity with the functionality of the protected device, and which therefore may be consistent across devices.
Claims22
A security system for servicing memory access requests from a client device including a network interface, the security system comprising:
- a. a protected device comprising memory and a lock unit connected thereto, the lock unit comprising a network interface;
- and
- b. an authentication server,
- wherein the lock unit is configured to (i) detect a memory access request from the client device, (ii) receive authentication data from the client and communicate the received authentication data to the authentication server via the network interface, and (iii) only upon receipt via the network interface of an authentication confirmation signal from the authentication server, cause the lock unit to allow the memory access request to be serviced.
A protected digital device comprising:
- a. a processor;
- b. a memory;
- c. a communication platform;
- d. a security system for servicing access requests to the memory;
- e. a lock unit connected to the memory;
- and
- f. a proxy system for establishing a trusted communication channel via the communication platform between the lock unit and an authentication server external to the protected digital device,
- wherein the lock unit is configured to (i) detect a memory access request from the processor, (ii) communicate authentication data to the authentication server via the trusted communication channel, and (iii) only upon receipt via the trusted communication channel of an authentication confirmation signal from the authentication server, cause the lock unit to allow the memory access request to be serviced.
A security system for servicing memory access requests from a client device, the security system comprising:
- a. on the client device, (i) a protected device comprising memory and a lock unit connected thereto, (ii) a proxy system, and (iii) a communication platform;
- and
- b. a management server for performing a management function comprising receiving and processing signals from the client device, the communication platform including a proxy system for establishing a trusted communication channel between the management server and the lock unit,
- wherein the lock unit is configured to (i) detect a valid memory access request provided via the trusted communication channel, and (ii) allow the memory access request to be serviced and data transmitted to the management server over the trusted communication channel.
-38. (canceled)
Dependencies are inferred from the claim text.