METHOD AND APPARATUS FOR PROTECTING COMPUTER FILES FROM CPU RESIDENT MALWARE

摘要

Apparatus for use with a computer to secure the computer's stored data against malware in the computer's central processing unit (CPU). The apparatus comprises a keyboard and display. The keyboard is connected to the computer's central bus, and a secure connection to the computer's data storage device. The secure connection is operable independent of the CPU. The storage device comprises a file system to manage the stored data independent of the CPU. The keyboard is configured for displaying, on the display, the stored data independent of the CPU. The keyboard, storage device and secure connection operate to protect data and prevent the CPU from accessing the protected data. The computer may be networked and configured to authenticate the computer's user and securely communicate data between another network computer and the keyboard and/or monitor of the computer independent of the computer's CPU.

主权项

1. Apparatus for use with a host computer having a central processing unit operated by an operating system and a central bus connecting the central processing unit to computer system components including peripheral components, for securing data of a data storage component connected to the central bus against malware resident in the central processing unit, the apparatus comprising:
(i) a keyboard including or connectable to a display, wherein the keyboard is configured for connection to the central bus; and, (ii) a secure connection for communicating data between the data storage component and the keyboard wherein the secure connection is operable independently of the central processing unit;wherein a file system is configured to manage data of the data storage component independently of the central processing unit; the keyboard is configured for displaying on the display data communicated from the data storage component independently of the central processing unit;
and, the keyboard, data storage component and secure connection are together operable to enable a user to set or assert data of the data storage component for protection and to prevent the central processing unit from accessing the set or asserted data by requiring the user to confirm any access to the set or asserted data by the central processing unit.