Multi-level secure computer with token-based access control

A multilevel computer security system operating within a core computer that includes a central processor unit (CPU), random access memory (RAM), and a computer-power supply with the CPU coupled to and controlling the operation of devices and data interfaces within the computer for data processing, data communications, and data storage, said computer security system being comprised of:

• a first security subsystem coupled to the core computer via a data bus, having means for storing the data and communicating data at a first security level;
• at least one additional-security subsystem coupled to the core computer via the data bus, with each of said additional-security subsystem having means for storing data at a designated and exclusive security level higher than the first security level, each of the additional-security subsystems including power-indicator means for illuminating when the additional-security subsystem is receiving power from the computer-power supply;
• access control means comprising a micro-controller that processes access requests and identification and authentication information from a user and correlate it with the security identification requirements and access privilege information stored within a security token possessed by the user to output an activation signal representative of the security level that will be granted to the user;
• sensor means that enables the transmission of the activation signal from the access control means to the electronically-activated power switching means only if the additional-security subsystem is determined by said sensor means to be at a security level corresponding to the security level represented by said activation signal;
• and
• an electronically-activated power switching means, responsive to the electronic activation signals from an access-control means in order to select the components of a security subsystem at the granted security level of the user and connect power to only said selected components thereby isolating said powered security subsystem and the data at its designated security level from all other security subsystems.