SECURITY SYSTEM AND METHOD FOR COMPUTERS

摘要

A computer security device comprising a processor that is independent of the host CPU for controlling access between the host CPU and the storage device. A program memory that is independent of the computer memory and the storage device unalterably stores and provides computer programs for operating the processor in a manner so as to control access to the storage device. The security device is connected only in line with the data access channel between the host CPU and the storage device, and off the main data and control bus of the host CPU. All data access by the host CPU to the data storage device is blocked before initialization of the security device and is intercepted immediately after the initialization under the control of the processor. The processor effects independent control of the host CPU and configuration of the computer to prevent unauthorized access to the storage device during the interception phase. All users of the computer are authenticated with a prescribed profile of access to the storage device and data access to the storage device remains blocked until a user of the computer is correctly authenticated.