Securing trusted personal computer system against unauthorized movement

A personal computer system for receiving and retaining data and capable of securing data retained within the system against unauthorized access, the system comprising:

• a normally closed enclosure;
• an erasable memory element mounted within said enclosure for selective activation to active and inactive states and for receiving and storing a power-on password and a privileged access password when in the active state;
• a manually operable option switch mounted within said enclosure, said option switch being operatively connected with said erasable memory element and manually settable by a user of the personal computer system for setting said erasable memory element to the active and inactive states;
• a tamper detection switch mounted within said enclosure and operatively connected with said erasable memory element for detecting opening of said enclosure;
• a movement detection switch mounted within said enclosure and operatively connected with said erasable memory element for detecting unauthorized movement of the computer system;
• program controlled means for selectively enabling and disabling the movement detection switch;
• means for preventing a successful power-up of the computer system in response to switching of either the tamper detection switch or said movement detection switch while it is enabled;
• and
• a system processor mounted within said enclosure and operatively connected with said erasable memory element for controlling access to at least certain levels of data stored within the system by distinguishing between the active and inactive states of said memory element, between entry and non-entry of the passwords, and between the enabled and disabled state of the movement detection switch.

A personal computer system for receiving and retaining data and capable of securing data retained within the system against unauthorized access, the system comprising:

• a normally closed enclosure;
• a movement detection switch;
• program controlled means for selectively rendering the movement detection switch enabled and disabled;
• a first erasable memory element mounted within said enclosure for selective activation to active and inactive states and for receiving and storing a privileged access password when in the active state;
• an option switch mounted within said enclosure and operatively connected with said first erasable memory element for setting said first erasable memory element to the active and inactive states;
• a second erasable memory element mounted within said enclosure for receiving and storing a power-on password and data indicative of the enabled state of the movement detection switch, the state of said first erasable memory element, and of correct installation of any stored power-on password and privileged access password;
• a tamper detection switch mounted within said enclosure and operatively connected with said second erasable memory element for detecting unauthorized opening of said enclosure;
• said movement detection switch mounted within said enclosure and operatively connected with said second erasable memory element for detecting unauthorized movement of the computer system;
• means effective with the privileged access password installed for preventing a successful power-up of the computer system in response to switching of the tamper detection switch and in response to switching of the movement detection switch while it is enabled;
• and
• a system processor mounted within said enclosure and operatively connected with said erasable memory elements for controlling access to at least certain levels of data stored within the system by distinguishing between the enabled and disabled state of the movement detection switch and between entry and non-entry of any valid stored privileged access password and any valid stored power-on password in the first and second erasable memory elements.

A method of operating a personal computer system having an enclosure, a system processor mounted within the enclosure, a selectively activatable erasable memory element mounted within the enclosure, a manually operable option switch mounted within the enclosure manually settable by a user of the personal computer system for setting the memory element to active and inactive states, a tamper detection switch mounted within the enclosure for detecting opening of the enclosure, a movement detection switch mounted within the enclosure for detecting movement of the computer system from a normal operating position, and a utility program invocable by the user for rendering the movement detection switch enabled, the method comprising the steps of:

• manually setting the option switch and selectively setting the memory element into the active state;
• storing a privileged access password in the active memory element;
• invoking the utility program to enable the movement detection switch;
• controlling access to at least certain levels of data stored within the system by distinguishing between entry and non-entry of the password and between an enabled and disabled state of the movement detection switch;
• and
• inhibiting a power-up of the system in response to any switching of the tamper switch and in response to switching of the enabled movement detection switch.