US4262329A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security system for data processing
Assignee: COMPUTER PLANNING Inc
•
Filing: 1978-03-27
•
Granted: 1981-04-14
•
Expires: 1998-03-27
Abstract
Abstract A data processing security system employs a secure enclosure, such as a vault, for all cryptographic processes, and the maintenance of digital information in storage outside of the enclosure in encrypted form and when not in use by the host computer system, where the information is used in plain text form and which communicates with the enclosed encryption system by a standard interface.
Inventors
- 👤 Herbert S. Bright
- 👤 Richard L. Enison
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-23 15:54
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6245
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
327 words
A data processing security system comprising: a first general-purpose digital computer for processing data signals under the control of stored program signals, with information signals including said data signals and program signals being in plaintext, said first computer including a digital memory, a central processor, and an input and output means including means for requesting data and programs, and means for housing said first computer to be accessible to ordinary operating personnel; a second cryption computer for transferring plaintext information signals to and from said first computer in response to requests from said first computer, including means for encrypting and decrypting information signals to transform said information signals between plaintext and encrypted forms; means, including a storage for a key date base operationally usable during production by way of said cryption computer, for providing keys for operating said encrypting and decrypting means to transform said information signals between plaintext and encrypted forms; said encrypting and decrypting means, including means having controls for entry of other cryptographic keys for encrypting and decrypting the keys of said key data base a signal storage for encrypted information signals housed to be accessible to ordinary operating personnel; means for transferring information signals between said first computer and said signal storage, said transferring means including said cryption computer, first means for linking said first and second computers for plaintext intercommunication, and second means for linking said second computer and said signal storage for transferring encrypted information signals therebetween; and means, including a hard wall housing surrounding said cryption computer, for preventing access to the contents thereof under a high degree of security, and for maintaining said cryption computer closed to access by the ordinary operating personnel of said first computer; whereby a high security encryption process is maintained within said hard wall, and is inaccessible for tampering, and said first computer and signal storage operate respectively to process information signals in plaintext and store encrypted signals without special limitation on access thereto.
Claim 2
Dependent Claim
327 words
A data processing security system comprising: a first general-purpose digital computer for processing data signals under the control of stored program signals, with information signals including said data signals and program signals being in plaintext, said first computer including a digital memory, a central processor, and an input and output means including means for requesting data and programs, and means for housing said first computer to be accessible to ordinary operating personnel; a second cryption computer for transferring plaintext information signals to and from said first computer in response to requests from said first computer, including means for encrypting and decrypting information signals to transform said information signals between plaintext and encrypted forms; means, including a storage for a key date base operationally usable during production by way of said cryption computer, for providing keys for operating said encrypting and decrypting means to transform said information signals between plaintext and encrypted forms; said encrypting and decrypting means, including means having controls for entry of other cryptographic keys for encrypting and decrypting the keys of said key data base a signal storage for encrypted information signals housed to be accessible to ordinary operating personnel; means for transferring information signals between said first computer and said signal storage, said transferring means including said cryption computer, first means for linking said first and second computers for plaintext intercommunication, and second means for linking said second computer and said signal storage for transferring encrypted information signals therebetween; and means, including a hard wall housing surrounding said cryption computer, for preventing access to the contents thereof under a high degree of security, and for maintaining said cryption computer closed to access by the ordinary operating personnel of said first computer; whereby a high security encryption process is maintained within said hard wall, and is inaccessible for tampering, and said first computer and signal storage operate respectively to process information signals in plaintext and store encrypted signals without special limitation on access thereto.
Claim 3
Dependent Claim
25 words
A data processing security system as recited in claim 1, wherein said signal storage stores encrypted data processed by said first computer in plaintext form.
Claim 4
Dependent Claim
27 words
A data processing security system as recited in claim 1, wherein said signal storage stores encrypted programs to be used in plaintext form in said first computer.
Claim 5
Dependent Claim
32 words
A data processing security system as recited in claim 1 wherein said cryption computer further includes means for recording an access-journal of all accesses by said first computer to said cryption computer.
Claim 6
Dependent Claim
37 words
A data processing security system as recited in claim 4 and further comprising a continuously running clock in said hard wall and associated with said cryption computer for recording the time of all entries in said access-journal.
Claim 7
Dependent Claim
28 words
A data processing system as recited in claim 5, wherein said cryption computer includes means for authenticating users of said first computer requesting access to said signal storage.
Claim 8
Dependent Claim
47 words
A data processing security system as recited in claim 6 wherein said authenticating means in said cryption computer includes means for supplying encrypted authentication identifiers to said first computer and for comparing decrypted identifiers returned from said first computer with the previously supplied identifiers to authenticate access.
Claim 9
Dependent Claim
30 words
A data processing security system as recited in claim 1 wherein said key data base storage is outside of said hard wall housing and said keys are in encrypted form.
Claim 10
Dependent Claim
22 words
A data processing security system as recited in claim 1 wherein said key data base storage is inside said hard wall housing.
Claim 11
Dependent Claim
54 words
A data processing security system as recited in claim 1 wherein said controls for entry of other cryptographic keys include means for accepting partial cryptographic keys as inputs and for assembling said other cryptographic keys from said partial keys, whereby the complete assembly of said other keys can be restricted to said cryption computer.
Claim 12
Dependent Claim
39 words
A data processing security system as recited in claim 1 wherein said encrypting and decrypting means includes means to perform a cryptographic check on the digits of said information signals to detect unauthorized changes in the information content thereof.
Claim 13
Dependent Claim
40 words
A data processing security system as recited in claim 1 and further comprising at least one remote terminal having a cryption computer in a hard wall housing, and means providing a telecommunication link between said cryption computers for encrypted messages.
References Cited (Backward Citations)
US3798605A
Cited
US3798360A
Cited
US3798359A
Cited
US3796830A
Cited
US3806882A
Cited
US3931504A
Cited
US3906448A
Cited
US3958081A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1984-04-13 | 1984-10-13 | 1985-04-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1988-04-13 | 1988-10-13 | 1989-04-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1992-04-13 | 1992-10-13 | 1993-04-14 | $7700.00 | Window Closed / Lapsed |