Data security method and device for computer modules

Abstract

A security method for an attached computer module in a computer system. The security method reads a security identification number in an attached computer module and compares it to a security identification number in a console, which houses the attached computer module. Based upon a relationship between these numbers, a security status is selected. The security status determines the security level of operating the computer system.

1. A security protection method for a computer module, said method comprising:
 inserting the computer module into a console;   initiating a security program in said module to read a security identification of said console and to read a security identification of said computer module;   determining of a predetermined security status based upon a relationship of said console identification and said computer module identification;   selecting said predetermined security status; and   operating said computer module based upon said security status.   
     
     
       2. The method of  claim 1  wherein said predetermined security status disables a network access to the computer module. 
     
     
       3. The method of  claim 1  wherein said predetermined security status disables a secondary storage of information from said computer module to substantially prevent information to be transferred from a memory of the computer module to said secondary storage. 
     
     
       4. The method of  claim 1  wherein said security program is provided in a system BIOS. 
     
     
       5. The method of  claim 1  wherein said step of initiating reads said security identification of said computer module from a flash memory device. 
     
     
       6. The method of  claim 1  wherein said step of initiating reads said security identification of said console from a flash memory device. 
     
     
       7. The method of  claim 1  wherein said console is selected from a desktop home computing device, an office desktop computing device, a mobile computing device, a television sot-top computing device, and a co-worker's computing device. 
     
     
       8. A system for secured information transactions, the system comprising:
 a console comprising a peripheral controller housed in the console;   a user identification input device coupled to the peripheral controller, the user identification input device being provided for user identification data; and   an attached computer module coupled to the console, the attached computer module comprising a security memory device stored with the user identification data.   
     
     
       9. The system of  claim 8  wherein the user identification input device is a finger print reader. 
     
     
       10. The system of  claim 8  wherein the user identification input device is a voice processing device. 
     
     
       11. A method for operating a module computer into one of a plurality of network systems, the method comprising:
 providing a computer module, the module comprising a connection program;   inserting the computer module into a computer console, the computer console having access to a network;   receiving connection information from the computer console;   configuring the connection program to adapt to the connection information; and   establish a connection between the computer module and a server coupled to the network.   
     
     
       12. The method of  claim 11  wherein the connection information comprises a connection protocol for providing the connection. 
     
     
       13. The method of  claim 12  wherein the connection protocol is selected from TCP/IP, or mobile IP. 
     
     
       14. A system for secured information transactions, the system comprising:
 a console comprising a network controller housed in the console;   a user identification input device coupled to the network controller; and   an attached computer module coupled to the console, the attached computer module comprising
 a central processing unit, 
 a device stored with a user identification data, 
 a security program providing password protection for access to the computer module based on the user identification data, 
 an integrated interface controller and bridge unit to communicate an encoded serial bit stream of address and data bits of Peripheral Component Interconnect (PCI) bus transaction, the integrated interface controller and bridge unit directly coupled to the central processing unit, and 
 a low voltage differential signal channel coupled to the integrated interface controller and bridge unit to convey the encoded serial bit stream of PCI bus transaction, 
   wherein the low voltage differential signal channel comprises two sets of unidirectional serial bit channels which transmit data in opposite directions.    
     
     
       15. The system of claim 14 wherein the encoded serial bit stream comprises 10 bit packets.  
     
     
       16. The system of claim 14 wherein the integrated interface controller and bridge unit is coupled to the central processing unit without any intervening PCI bus.  
     
     
       17. The system of claim 16 wherein the integrated interface controller and bridge unit comprises a north bridge and an interface controller integrated with the north bridge, and the low voltage differential signal channel extends from the interface controller to convey the encoded serial bit stream of PCI bus transaction.  
     
     
       18. The system of claim 16 further comprising a peripheral component coupled to the central processing unit through the low voltage differential signal channel.  
     
     
       19. The system of claim 16 wherein the attached computer module further comprises a main memory coupled to the central processing unit through the integrated interface controller and bridge unit.  
     
     
       20. The system of claim 16 wherein the integrated interface controller and bridge unit is configured to output encoded PCI address and data bits in serial form that are conveyed over the low voltage differential signal channel.  
     
     
       21. The system of claim 16 wherein the encoded serial bit stream of PCI bus transaction comprises information to permit decoding to create a PCI bus transaction across the low voltage differential signal channel.  
     
     
       22. The system of claim 16 wherein the low voltage differential signal channel comprises a first plurality of unidirectional, differential signal pairs to convey data in a first direction and a second plurality of unidirectional, differential signal pairs to convey data in a second, opposite direction.  
     
     
       23. The system of claim 16 wherein the network controller comprises an Ethernet controller.  
     
     
       24. A method comprising:
 providing a computer module, the module comprising
 a central processing unit, 
 a connection program, 
 an integrated interface controller and bridge unit to output an encoded serial bit stream of address and data bits of Peripheral Component Interconnect (PCI) bus transaction, the integrated interface controller and bridge unit coupled to the central processing unit without any intervening PCI bus, and 
 a low voltage differential signal channel coupled to the integrated interface controller and bridge unit to convey the encoded serial bit stream of PCI bus transaction; 
   inserting the computer module into a computer console, the computer console having access to a network;   receiving connection information from the computer console;   configuring the connection program to adapt to the connection information; and   establishing a connection between the computer module and a server coupled to the network,   wherein the low voltage differential signal channel further comprises two sets of unidirectional serial bit channels which transmit data in opposite directions.    
     
     
       25. The method of claim 24 wherein the connection between the computer module and the server comprises an Ethernet connection.  
     
     
       26. The method of claim 24 wherein the connection protocol is TCP/IP.  
     
     
       27. The method of claim 24 further comprising conveying, over the low voltage differential signal channel, the encoded serial bit stream of PCI bus transaction as 10 bit packets.  
     
     
       28. The method of claim 27 wherein conveying the encoded serial bit stream of PCI bus transaction comprises conveying information to permit decoding to create a PCI bus transaction across the low voltage differential signal channel.  
     
     
       29. A system of connecting a computer module to a network, the system comprising:
 a console having access to a network;   a computer module inserted into the console and powered by the console, the computer module comprising
 a central processing unit, 
 a peripheral bridge coupled to the central processing unit without any intervening Peripheral Component Interconnect (PCI) bus, the peripheral bridge comprising an interface controller to communicate an encoded serial bit stream of address and data bits of PCI bus transaction, 
 a low voltage differential signal channel extending from the interface controller to convey the encoded serial bit stream of PCI bus transaction, and 
 a connection program receiving connection information from the console, configuring the connection program to adapt to the connection information, and establishing a connection between the computer module and a server coupled to the network, 
   wherein the low voltage differential signal channel comprises two sets of unidirectional serial bit channels which transmit data in opposite directions.    
     
     
       30. The system of claim 29 wherein the encoded serial bit stream comprises 10 bit packets.  
     
     
       31. The system of claim 29 wherein the interface controller is integrated with the peripheral bridge as a single integrated unit.  
     
     
       32. The system of claim 31 wherein the peripheral bridge comprises a north bridge.  
     
     
       33. The system of claim 32 further comprising a south bridge coupled to the north bridge through the low voltage differential signal channel.  
     
     
       34. The system of claim 31 wherein the interface controller is coupled to the central processing unit without any intervening PCI bus.  
     
     
       35. The system of claim 31 wherein each of the unidirectional serial bit channels corresponds to a point-to-point link.  
     
     
       36. A system for secured information transactions, the system comprising:
 a console comprising a network communication controller housed in the console;   a user identification input device coupled to the console, the user identification input device being provided for user identification data; and   an attached computer module coupled to the console, the attached computer module comprising
 a central processing unit, 
 a security program, 
 a peripheral bridge directly coupled to the central processing unit, the peripheral bridge comprising an interface controller, the peripheral bridge and the interface controller configured as a single integrated unit, and 
 a low voltage differential signal channel that comprises two sets of unidirectional serial bit channels in opposite directions which transmit data in 10 bit packets, the low voltage differential signal channel coupled to the interface controller; 
   wherein said security program receives the user identification data from the console, determines a predetermined security status, and operating said computer module based upon said security status.    
     
     
       37. The system of claim 36 wherein the data packets comprise an encoded bit stream of address and data bits of Peripheral Component Interconnect (PCI) bus transaction.  
     
     
       38. The system of claim 37 wherein the interface controller is configured to transmit and receive encoded PCI address and data bits over the low voltage differential signal channel.  
     
     
       39. The system of claim 38 wherein the interface controller is coupled to the central processing unit without any intervening PCI bus.  
     
     
       40. The system of claim 38 wherein the peripheral bridge comprises a north bridge.  
     
     
       41. The system of claim 40 further comprising a south bridge coupled to the north bridge.  
     
     
       42. The system of claim 41 wherein the south bridge is coupled to the north bridge through the low voltage differential signal channel.  
     
     
       43. The system of claim 38 wherein the low voltage differential signal channel comprises two sets of unidirectional, multiple serial bit channels to convey data in opposite directions, and each of the unidirectional, multiple serial bit channels corresponds to a point-to-point link.  
     
     
       44. A system for secured information transactions, the system comprising:
 a computer console comprising
 a network communication controller housed in the console, 
 a low voltage differential signal (LVDS) channel comprising two sets of multiple unidirectional serial channels that transmit encoded address and data bits of Peripheral Component Interconnect (PCI) bus transaction in opposite directions, and 
 a user identification input device coupled to the console, the user identification input device being provided for user identification data; and 
   an attached computer module that inserts into the console in a “plug and play” operation, the attached computer module comprising
 a security program providing password protection for data content within said attached computer module, 
 a security memory device stored with the user identification data, and 
 an interface controller coupled to the console through serial bit based lines; 
   wherein the interface controller transfers data between the computer module and the console in Universal Serial Bus (USB) protocol.    
     
     
       45. The system of claim 44 wherein said attached computer module inserts into the console and is powered by the console to form a functional computer.  
     
     
       46. The system of claim 44 wherein the attached computer module has a tamper resistant enclosure.  
     
     
       47. The system of claim 44 wherein the security memory device comprises of flash memory.  
     
     
       48. The system of claim 44 wherein the console further comprises an integrated interface controller and bridge unit to transmit and receive encoded serial bits of PCI bus transaction over the LVDS channel.  
     
     
       49. The system of claim 48 wherein the encoded serial bits of PCI bus transaction comprise information to permit decoding to create a PCI bus transaction.  
     
     
       50. A system for secured information transactions, the system comprising:
 a console comprising a network communication controller housed in the console;   a user input device coupled to the console, the user input device being provided for user identification data; and   an attached computer module inserted into the console, the attached computer module comprising
 a central processing unit, 
 a peripheral bridge directly coupled to the central processing unit without any intervening Peripheral Component Interconnect (PCI) bus, the peripheral bridge comprising an integrated interface controller to communicate an encoded serial bit stream of address and data bits of PCI bus transaction, 
 a low voltage differential signal channel extending from the integrated interface controller to convey the encoded serial bit stream of PCI bus transaction, and 
 a mass storage unit storing a security program and user identification data; 
   wherein the security program receives the user identification data from the input device, matches the stored user identification data and permits external access to the computer module,   wherein the low voltage differential signal channel comprises two sets of unidirectional serial bit channels which transmit data in opposite directions, and each of the unidirectional serial bit channels corresponds to a point-to-point link.    
     
     
       51. The system of claim 50 wherein the security program further determines a predetermined security status, and controls different levels of access privilege to said attached computer module.  
     
     
       52. The system of claim 50 wherein the encoded serial bit stream comprises 10 bit packets.  
     
     
       53. The system of claim 50 wherein the peripheral bridge comprises a north bridge.  
     
     
       54. The system of claim 50 wherein the integrated interface controller is coupled to the central processing unit without any intervening PCI bus, and the integrated interface controller is configured to output encoded address and data bits of PCI bus transaction in serial form that are conveyed over the low voltage differential signal channel.  
     
     
       55. The system of claim 50 wherein the low voltage differential signal channel comprises a first plurality of unidirectional, differential signal pairs to convey data in a first direction and a second plurality of unidirectional, differential signal pairs to convey data in a second, opposite direction.  
     
     
       56. A system comprising:
 a console housing a network controller and a low voltage differential signal serial channel for communicating encoded address and data bits of Peripheral Component Interconnect (PCI) bus transaction;   a user identification input device coupled to the console; and   an attached computer module coupled to the console, the attached computer module comprising
 a device stored with a user identification data, 
 a security program providing protection for access to the computer module based on the user identification data, and 
 an interface controller coupled to the console for communicating data in a serial bit stream, 
   wherein the low voltage differential signal serial channel further comprises two sets of unidirectional serial bit channels which transmit data in opposite directions.    
     
     
       57. The system of claim 56 wherein the encoded address and data bits of PCI bus transaction comprise 10 bit data packets.  
     
     
       58. The system of claim 56 wherein the computer module further comprises a flash memory mass storage device.  
     
     
       59. The system of claim 56 wherein the serial bit stream transmits data packets in Universal Serial Bus (USB) protocol.  
     
     
       60. A system for secured information transactions, the system comprising:
 a console comprising a peripheral controller housed in the console;   a user identification input device coupled to the peripheral controller, the user identification input device being provided for user identification data; and   an attached computer module coupled to the console, the attached computer module comprising
 a security memory device stored with the user identification data, 
 a central processing unit, 
 an integrated interface controller and bridge unit to communicate an encoded serial stream of address and data bits of Peripheral Component Interconnect (PCI) bus transaction as 10 bit packets, the integrated interface controller and bridge unit directly coupled to the central processing unit, and 
 a low voltage differential signal channel coupled to the integrated interface controller and bridge unit to convey the encoded serial stream of PCI bus transaction, the low voltage differential signal channel comprising two sets of unidirectional serial bit channels which transmit data in opposite directions.  
   
     
     
       61. The system of claim 60 wherein the integrated interface controller and bridge unit is coupled to the central processing unit without any intervening PCI bus.  
     
     
       62. The system of claim 61 wherein the integrated interface controller and bridge unit comprises a north bridge and an interface controller integrated with the north bridge, and the low voltage differential signal channel extends from the interface controller to convey the encoded serial stream of PCI bus transaction.  
     
     
       63. The system of claim 61 wherein the attached computer module further comprises a main memory coupled to the central processing unit through the integrated interface controller and bridge unit.  
     
     
       64. The system of claim 61 wherein the integrated interface controller and bridge unit is configured to output encoded PCI address and data bits in serial form that are conveyed over the low voltage differential signal channel.  
     
     
       65. The system of claim 61 wherein the encoded serial stream of PCI bus transaction comprises information to permit decoding to create a PCI bus transaction across the low voltage differential signal channel.  
     
     
       66. The system of claim 61 wherein the low voltage differential signal channel comprises a first plurality of unidirectional, differential signal pairs to convey data in a first direction and a second plurality of unidirectional, differential signal pairs to convey data in a second, opposite direction.