Arrangement for and method of protecting private security codes from unauthorized disclosure

Claim 2

A security arrangement for protecting from unauthorized disclosure a private security code used for rendering electronic equipment operational, comprising: (A) an equipment microprocessor within the equipment and having an internal protected memory which is accessed solely by the equipment microprocessor and which is protected from interrogation external to the equipment microprocessor; (B) code entry means operatively connected to the equipment microprocessor for entering the private security code; (C) said equipment microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for rendering the equipment operational and for maintaining the equipment operational until a disabling event has occurred; (D) detector means operatively connected to the equipment microprocessor, for detecting when the disabling event has occurred; (E) disabling means responsive to the detector means, for disabling the equipment from normal operation after the disabling event has been detected, and being further operative for maintaining the equipment disabled, even after the disabling event has terminated, until after the private security code has been entered; (F) enabling means for rendering disabled equipment operational in response to entry of an enabling request via the code entry means; (G) code generating means responsive to each enabling request, for generating an unpredictable code each time the enabling request has been entered; (H) means for displaying the unpredictable code; (I) encryption means responsive to the code generating means, for encrypting each unpredictable code into an encrypted code which constitutes the private security code, and for causing the encrypted code to be stored into the internal memory, said encryption means constituting an encryption routine as part of the program stored in the internal memory, both the encryption routine and the stored encrypted code being protected from interrogation external to the equipment microprocessor; (J) security control means separate from the equipment, said control means including (i) a control microprocessor having a control memory in which a control encryption routine identical to said first-mentioned encryption routine is stored, (ii) a data entry means for entering the aforementioned displayed unpredictable code into the control microprocessor, (iii) said control microprocessor executing the control encryption routine to generate the same encrypted code as previously stored in the internal memory of the equipment microprocessor, and (iv) a control display for displaying said same encrypted code; and (K) re-enabling means responsive to entry of said same encrypted code into the equipment microprocessor via the code entry means, for again rendering the disabled equipment operational.

Claim 3

The security arrangement as recited in claim 1, wherein the code generating means includes a number generator for generating a sequence of numbers constituting the unpredictable code from a multitude of possible numbers.

Claim 4

The security arrangement as recited in claim 2, wherein the number generator is a random number generator mounted within the equipment.

Claim 5

The security arrangement as recited in claim 2, wherein the displaying means includes a numerical display on the equipment for displaying the unpredictable numerical code.

Claim 6

The security arrangement as recited in claim 2, wherein the encryption means is operative for encrypting each unpredictable numerical code into an encrypted numerical code, each unpredictable numerical code and its corresponding encrypted numerical code being different for each enabling request.

Claim 7

The security arrangement as recited in claim 1, wherein the security control means is located at a confidential service center to which access is available only to authorized equipment users.

Claim 8

The security arrangement as recited in claim 1, wherein the detector means includes timer means for generating an elapsed time after which the disabling event is deemed to have occurred.

Claim 9

A security arrangement for protecting from unauthorized disclosure a private numerical security code used for rendering electronic equipment operational, comprising: (A) an equipment microprocessor within the equipment and having an internal, non-volatile, protected memory which is accessed solely by the equipment microprocessor and which is protected from interrogation external to the equipment microprocessor; (B) a keyboard on the equipment and operatively connected to the equipment microprocessor for manually entering the private numerical security code; (C) said equipment microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for rendering the equipment operational and for maintaining the equipment operational until a disabling event has occurred; (D) detector means operatively connected to the equipment microprocessor, for detecting when the disabling event has occurred; (E) said program having a disabling routine responsive to the detector means, for disabling the equipment from normal operation after the disabling event has been detected, and being further operative for maintaining the equipment disabled, even after the disabling event has terminated, until after the private numerical security code has been entered; (F) said program having an enabling routine for rendering disabled equipment operational in response to entry of an enabling request via the keyboard; (G) code generating means within the equipment and responsive to each enabling request, for generating an unpredictable numerical code each time the enabling request has been entered; (H) a display on the equipment for displaying the unpredictable numerical code; (I) said program having an encryption routine responsive to the code generating means, for encrypting each unpredictable numerical code into an encrypted numerical code which constitutes the private security code, and for causing the encrypted numerical code to be stored into the internal memory, said encryption routine and the stored encrypted numerical code being protected from interrogation external to the equipment microprocessor; (J) security control means located at a confidential service center separate from the equipment, and to which access is available only to cleared authorized personnel, said control means including (i) a control microprocessor having an internal, non-volatile, protected control memory in which a control encryption routine identical to said first-mentioned encryption routine is stored, (ii) a data entry means for entering the aforementioned displayed unpredictable numerical code into the control microprocessor, (iii) said control microprocessor executing the control encryption routine to generate the same encrypted code as previously stored in the internal memory of the equipment microprocessor, and (iv) a control display for displaying the same encrypted code; and (K) said program having a re-enabling routine responsive to entry of the same encrypted code into the equipment microprocessor via the keyboard, for again rendering the disabled equipment operational.

Claim 10

A security arrangement for protecting from unauthorized disclosure a private numerical security code used for rendering electronic equipment operational, comprising: (A) an equipment microprocessor within the equipment and having an internal, non-volatile, protected memory which is accessed solely by the equipment microprocessor and which is protected from interrogation external to the equipment microprocessor; (B) a keyboard on the equipment and operatively connected to the equipment microprocessor for manually entering the private numerical security code; (C) said equipment microprocessor being operative for executing a program stored in the internal memory, said program having an operational routine for rendering the equipment operational and for maintaining the equipment operational until a disabling event has occurred; (D) detector means operatively connected to the equipment microprocessor, for detecting when the disabling event has occurred; (E) said program having a disabling routine responsive to the detector means, for disabling the equipment from normal operation after the disabling event has been detected, and being further operative for maintaining the equipment disabled, even after the disabling event has terminated, until after the private numerical security code has been entered; (F) said program having an enabling routine for rendering disabled equipment operational in response to entry of an enabling request via the keyboard; (G) code generating means within the equipment and responsive to each enabling request, for generating an unpredictable numerical code each time the enabling request has been entered; (H) a display on the equipment for displaying the unpredictable numerical code; (I) said program having an encryption routine responsive to the code generating means, for encrypting each unpredictable numerical code into an encrypted numerical code which constitutes the private security code, and for causing the encrypted numerical code to be stored into the internal memory, said encryption routine and the stored encrypted numerical code being protected from interrogation external to the equipment microprocessor; (J) security control means located at a confidential service center separate from the equipment, and to which access is available only to cleared authorized personnel, said control means including (i) a control microprocessor having an internal, non-volatile, protected control memory in which a control encryption routine identical to said first-mentioned encryption routine is stored, (ii) a data entry means for entering the aforementioned displayed unpredictable numerical code into the control microprocessor, (iii) said control microprocessor executing the control encryption routine to generate the same encrypted code as previously stored in the internal memory of the equipment microprocessor, and (iv) a control display for displaying the same encrypted code; and (K) said program having a re-enabling routine responsive to entry of the same encrypted code into the equipment microprocessor via the keyboard, for again rendering the disabled equipment operational.