Method of using one or more secure private networks to actively configure the hardware of a computer or microchip
OwnerFrampton E. Ellisinventor
Life of this patent
Estimating the term…
Abstract
A method for a computer or microchip with one or more inner hardware-based access barriers or firewalls that establish one or more private units disconnected from a public unit or units having connection to the public Internet and one or more of the private units have a connection to one or more non-Internet-connected private networks for private network control of the configuration of the computer or microchip using active hardware configuration, including field programmable gate arrays (FPGA). The hardware-based access barriers include a single out-only bus and/or another in-only bus with a single on/off switch.
Claims40
A method of securely controlling computer, including a computer on a microchip, said computer being configured to operate as a general purpose computer connected to the Internet, said computer comprising:
- at least one network connection configured for connection to at least a public network of computers including the Internet, said at least one network connection being located in at least one public unit of said computer,
- at least one additional and separate private network connection configured for connection to at least a separate, private network of computers, said at least one additional and separate private network connection being located in at least one protected private unit of said computer, and
- at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one protected private unit of said computer and said at least one public unit of said computer;
- wherein said private and public units and said two separate network connections are separated by said at least one inner hardware-based access barrier or inner hardware-based firewall;
- said at least one protected private unit of the computer includes at least a first microprocessor or core or processing unit,
- said at least one public unit of the computer includes at least a second microprocessor or core or processing unit, configured to operate as a general purpose microprocessor or core or processing unit, and
- said second microprocessor or core or processing unit is separate from said inner hardware-based access barrier or inner hardware-based firewall;
- and
- at least a part of said computer is configured using active hardware configuration;
- and said method comprising the steps of:
- controlling at least a part of said active hardware configuration of said computer from said private network of computers, said controlling step including at least transmitting data and/or code from said private network of computers to said separate private network connection in said protected private unit of said computer;
- receiving said data and/or code by said first microprocessor or core or processing unit in said protected private unit of said computer;
- and
- transmitting data and/or code by said first microprocessor or core or processing unit in said protected private unit to at least a part of said computer to configure at least a part of said computer using said active hardware configuration of said computer.
A method of securely controlling a computer, including a computer on a microchip, said computer being configured for connection to the Internet, said computer comprising:
- at least one network connection configured for connection to at least a public network of computers including the Internet, said at least one network connection being located in at least one public unit of said computer,
- at least one additional and separate private network connection configured for connection to at least a separate, private network of computers, said at least one additional and separate private network connection being located in at least one protected private unit of said computer, and
- at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one protected private unit of said computer and said at least one public unit of said computer;
- wherein said private and public units and said two separate network connections are separated by said at least one inner hardware-based access barrier or inner hardware-based firewall;
- said at least one protected private unit of the computer includes at least a first microprocessor or core or processing unit,
- said at least one public unit of the computer includes at least a second microprocessor or core or processing unit;
- and
- said second microprocessor or core or processing unit is separate from said inner hardware-based access barrier or inner hardware-based firewall;
- and
- at least a part of said computer is configured using active hardware configuration;
- and
- said method comprising the steps of:
- controlling at least a part of said active hardware configuration of said computer from said private network of computers, said controlling step including at least transmitting data and/or code from said private network of computers to said separate private network connection in said protected private unit of said computer;
- receiving said data and/or code by said first microprocessor or core or processing unit in said protected private unit of said computer;
- and
- transmitting data and/or code by said first microprocessor or core or processing unit in said protected private unit to at least a part of said computer to configure at least a part of said computer using said active hardware configuration of said computer.
A method of securely controlling a computer, including a computer on a microchip, said computer is configured to operate as a general purpose computer connected to the Internet, said computer comprising:
- at least one network connection configured for connection to at least a public network of computers including the Internet, said at least one network connection being located in at least one public unit of said computer,
- at least one additional and separate private network connection configured for connection to at least a separate, private network of computers, said at least one additional and separate private network connection being located in at least one protected private unit of said computer, and
- at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one protected private unit of said computer and said at least one public unit of said computer;
- wherein said private and public units and said two separate network connections are separated by said at least one inner hardware-based access barrier or inner hardware-based firewall;
- said at least one protected private unit of the computer includes at least a first microprocessor or core or processing unit,
- said at least one public unit of the computer includes at least a second microprocessor or core or processing unit, configured to operate as a general purpose microprocessor or core or processing unit;
- said second microprocessor or core or processing unit is separate from said inner hardware-based access barrier or inner hardware-based firewall;
- at least a separate, second inner hardware-based access barrier or inner hardware-based firewall that protects at least a second protected private unit of said computer;
- said second protected private unit of the computer includes at least a master controlling device or central controller of said computer;
- and
- said method comprising the steps of:
- controlling at least one operation of said computer from said private network of computers, said operation including at least transmitting data and/or code from said private network of computers to said separate private network connection in said protected private unit of said computer;
- receiving said data and/or code by said first microprocessor or core or processing unit in said protected private unit of said computer;
- transmitting data and/or code by said first microprocessor or core or processing unit in said protected private unit to at least a part of said public unit;
- and
- controlling by said master controlling device or central controller on a peremptory basis one or more parts of said computer, said master controlling device or central controller being controlled by a user of said computer.
A method of securely controlling a computer, including a computer on a microchip, said computer is configured for connection to the Internet, said computer comprising:
- at least one network connection configured for connection to at least a public network of computers including the Internet, said at least one network connection being located in at least one public unit of said computer,
- at least one additional and separate private network connection configured for connection to at least a separate, private network of computers, said at least one additional and separate private network connection being located in at least one protected private unit of said computer, and
- at least one inner hardware-based access barrier or inner hardware-based firewall that is located between and communicatively connects said at least one protected private unit of said computer and said at least one public unit of said computer;
- wherein said private and public units and said two separate network connections are separated by said at least one inner hardware-based access barrier or inner hardware-based firewall;
- said at least one protected private unit of the computer includes at least a first microprocessor or core or processing unit,
- said at least one public unit of the computer includes at least a second microprocessor or core or processing unit;
- said second microprocessor or core or processing unit is separate from said inner hardware-based access barrier or inner hardware-based firewall;
- at least a separate, second inner hardware-based access barrier or inner hardware-based firewall that protects at least a second protected private unit of said computer;
- and
- said second protected private unit of the computer includes at least a master controlling device or central controller of said computer, and
- said method comprising the steps of:
- controlling at least one operation of said computer from said private network of computers, said operation including at least transmitting data and/or code from said private network of computers to said separate private network connection in said protected private unit of said computer;
- receiving said data and/or code by said first microprocessor or core or processing unit in said protected private unit of said computer;
- transmitting data and/or code by said first microprocessor or core or processing unit in said protected private unit to at least a part of said public unit;
- and
- controlling by said master controlling device or central controller on a peremptory basis one or more parts of said computer, said master controlling device or central controller being controlled by a user of said computer.
Dependencies are inferred from the claim text.