Multi-tiered static chain of trust

A multi-tiered authentication computer system, comprising:

• a first processor;
• a read only memory chip storing data including a first authentication program executable by the first processor, the read only memory chip removably connected to the computer system, the read only memory chip non-inline writable while connected to the computer system, and the read only memory chip writable when removed from the computer system;
• a second processor;
• a writable memory chip storing data including a second authentication program executable by the second processor;
• a mass data storage device for storing data;
• wherein:
• upon startup of the computer system, the first processor executes the first authentication program, the first authentication program determines whether at least a portion of the data stored on the writable memory chip is authentic, the first authentication program causes the second processor to execute the second authentication program only when the determination by the first authentication program is affirmative;
• and
• upon execution of the second authentication program by the second processor, the second authentication program determines whether at least a portion of the data stored on the mass data storage device is authentic, the second authentication program permits authenticated use of the portion of data stored on the mass data storage device only when the determination by the second authentication program is affirmative.

A multi-tiered authentication computer system, comprising:

• a first processor;
• a read only memory chip storing data including a first authentication program executable by the first processor;
• a second processor;
• a writable memory chip storing data including a second authentication program executable by the second processor;
• a mass data storage device for storing data;
• wherein:
• upon startup of the computer system, the first processor executes the first authentication program, the first authentication program determines whether at least a portion of the data stored on the writable memory chip is authentic, the first authentication program causes the second processor to execute the second authentication program only when the determination by the first authentication program is affirmative;
• upon execution of the second authentication program by the second processor, the second authentication program determines whether at least a portion of the data stored on the mass data storage device is authentic, the second authentication program permits authenticated use of the portion of data stored on the mass data storage device only when the determination by the second authentication program is affirmative;
• and
• the second authentication program additionally determines whether or not at least a portion of the data stored on the read only memory chip is authentic, and further causes a human detectable indication of an authentication failure when the portion of the data stored on the read only memory chip is determined to be unauthentic.

A method of performing a multi-tiered authentication process on a computer system having a first memory device, a second memory device and a third memory device, comprising:

• executing a first authentication program stored on the first memory device to authenticate at least a portion of data stored on the second memory device;
• executing a second authentication program stored on the second memory device to authenticate at least a portion of data stored on the third memory device only when the first authentication program determines the portion of data stored on the second memory device to be authentic;
• allowing use of the portion of data on the third memory device only when the second authentication program determines the portion of data on the third memory device to be authentic;
• verifying that the computer system is utilizing data from the third memory device;
• and
• authenticating the data of the first memory device by physically removing the first memory device from the computer system and comparing the data stored on the first memory device to data stored on a reference memory device.

A method , of performing a multi-tiered authentication process on a computer system having a first memory device, a second memory device and a third memory device, comprising:

• executing a first authentication program stored on the first memory device by a first processor to authenticate at least a portion of data stored on the second memory device;
• supplying a startup signal to a second processor only when the first authentication program has determined the portion of data stored on the second memory device to be authentic;
• executing a second authentication program stored on the second memory device by the second processor to authenticate at least a portion of data stored on the third memory device only when the startup signal is received;
• allowing use of the portion of data on the third memory device only when the second authentication program determines the portion of data on the third memory device to be authentic;
• and
• executing on the second processor the second authentication program to authenticate at least a portion of data stored on the first memory device.

A method of performing a multi-tiered authentication process on a computer system having a first memory device, a second memory device and a third memory device, comprising:

• executing a first authentication program stored on the first memory device by a first processor to authenticate at least a portion of data stored on the second memory device;
• supplying a startup signal to a second processor only when the first authentication program has determined the portion of data stored on the second memory device to be authentic;
• executing a second authentication program stored on the second memory device by the second processor to authenticate at least a portion of data stored on the third memory device only when the startup signal is received;
• allowing use of the portion of data on the third memory device only when the second authentication program determines the portion of data on the third memory device to be authentic;
• updating data of at least the second memory device while the computer system is operational;
• and
• authenticating the updated data using at least one of the first or second authentication programs upon the next boot of the computer system following the data updating.