A lock-out security arrangement for rendering electronic equipment having a normal operation inoperative after a disabling event has occurred, and for maintaining the equipment inoperative after the disabling event has terminated, comprising:
- (a) a microprocessor having an internal, non-volatile, protected memory accessed solely by the microprocessor and protected from interrogation external to the microprocessor, said microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for controlling the normal operation of the equipment, and a security routine for controlling the security of the equipment;
- (b) said security routine having means for distinguishing between an initial execution of the security routine and a subsequent execution of the security routine;
- (c) means responsive to the initial execution of the security routine, for storing a public code in the internal memory of the microprocessor;
- (d) means for substituting a private code for the public code in a secured manner in the internal memory of the microprocessor such that the stored private code is protected from interrogation external to the microprocessor;
- (e) code entry means operatively connected to the microprocessor, for entering a trial code to the microprocessor;
- (f) said security routine having code validity means for comparing the trial code entered using the code entry means to the stored private code whose identity is protected from external interrogation;
- (g) enabling means responsive to a completed initial execution, or to the subsequent execution, of the security routine, for enabling the microprocessor to execute the operational routine after the private code has been stored in the internal memory of the microprocessor, and for maintaining the equipment normally operational until the disabling event has occurred;
- (h) detector means operatively connected to the microprocessor, for detecting when the disabling event has occurred;
- and
- (i) disabling means responsive to the detector means and operatively connected to the microprocessor, for disabling the equipment from normal operation after the disabling event has occurred, said disabling means being further operative for maintaining the equipment disabled, even after the disabling event has terminated, until the trial code matches the stored private code.