Patent Application
20150020189
The present invention relates to a device and a method that enhances computer information security through physically blocking unused USB ports with an electromechanical lock. Another embodiment of the current invention locks a USB cable to the computer USB port. Yet another embodiment of the current invention provides a USB port locking device with internal circuitry that qualifies and secures the attached user peripheral device.
Generally, universal serial bus (USB) ports provide a serial bus standard for connecting devices to computers. Most modern computers include at least one, and usually a plurality of USB ports. USB ports are used to connect peripherals such as mice, keyboards, scanners, digital cameras, printers, external storage, etc. Anyone with access to a computer's USB port can plug a portable flash drive or other mass storage device into the port and attempt to download information from the computer. Unauthorized, downloading information from the computer is a security problem.
US Patent application 2008/0041125 USB PORT LOCKING AND BLOCKING DEVICE, to Carl Poppe, discloses a mechanical lock for USB ports.
PCT application WO2013042108) SECURITY PLUG FOR PREVENTING ACCESS TO A USB SOCKET AND SECURED USB DEVICEA, to Zeuveni Zadok, discloses a security plug for preventing access to a USB socket adapted to complete an electrical circuit when inserted into the USB socket such that its removal from the USB socket breaks the circuit and is detected by a host computer.
A mechanical lock for USB port is available from Kensington (www.kensington.com)
Another mechanical lock for USB port is available from Lidy (LINDY USA, 14327 Bledsoe Rd. Athens, Ala. 35613 (http://www.lindy-usa.com/)
Security software (SW) that locks and manages the USB ports are available. However, as with any software based security measure, this software may be bypassed, for example if the computer is infected, or if the abuser has obtained administrator permissions.
For example: USB flash dive control software may be downloaded from http://www.softpedia.com/get/System/System-Miscellaneous/USB-Port-Blocker.shtml USB blocker software may be obtained from iSM—Institut für System-Management. Oldendorfer Str. 12, 18147 Rostock, Germany (http://www.usb-blocker.com/)
In view of the security risks associated with USB devices connected to computers, and in view of the shortcoming of prior art USB protection methods and devices, there is a need for a USB port protection device that at least will provide few of the following:
To further leverage such security device, it is desirable that the following derivative devices will be provided:
It is an object of a current invention to provide an electromechanically activated lock for a computer port comprising: a plug capable of mating with a port of a host computer; an electromechanical lock, capable of locking the said plug to said port, wherein said electromechanical lock is capable of being activated by security software.
It is another object of a current invention to provide an Electronic USB Security Device comprising: USB security plug (13), capable of interfacing the Electronic USB Security Device with a host device (30) USB jack (31); at least one locking tooth (8), shaped to lock inside standard USB jack (33) shielding tab holes (34); and a solenoid (24), capable of enabling and disabling the device locking through mechanical linkage with said at least one locking tooth (8).
In some embodiments the Electronic USB Security device is further comprising of an Authentication and security function, capable of enabling positive authentication of the device by software installed at said host device.
In some embodiments the solenoid is controlled by said Authentication and security function based on commands received from said coupled host device.
In some embodiments the solenoid is configured to enable locking when de-energized and unlocking when energized.
In some embodiments the mechanical linkage is a metal lever that pulled by said solenoid when said solenoid is energized, and mechanically restricts the movement of the said at least one locking tooth when said solenoid is not energized.
In some embodiments the device further comprising a visual indicator to provide visual indication of device lock and unlock states to the user, and wherein said visual indicator is selectable from the list consisting of: Light Emitting Diode (LED), Lamp, electromagnetic colored flag and Liquid Crystal Display (LCD).
In some embodiments the device further comprising a push-button, coupled to at least one locking tooth, to enable safe removal of the device by user mechanical input force pushing said push-button.
In some embodiments the device further comprising a Leaf spring, coupled to at least one tooth, to force said at least one locking tooth into the mating USB jack shielding tab holes.
In some embodiments the device further comprising a sensor, capable of providing electrical feedback about the device lock and unlock states.
In some embodiments the device further comprises at least one removable ring, selectable from the list consisting of: filler removable rings to enable user device adjustment to various hosts USB jack wall thicknesses; and removable oversized rings to enable mechanical blocking of nearby connector.
In some embodiments the device further comprising at least one Tamper Evident Labels (TEL) to enable authenticity validation and device physical tampering visual indications.
In some embodiments the device further comprises a Security Controller Function that drives the said solenoid and coupled to a remote controller receiver function, wherein said remote-control receiver function is capable of receiving user commands from a remote control device through communication channels selectable from the list consisting of: radio frequency antenna; loop antenna; and electrical contacts.
In some embodiments the device further comprising at least one mechanically fixed cable, wherein said at least one cable is coupled to the device USB plug at one end.
In some embodiments the Solenoid is controlled through the coupled cable from a connected USB device.
In some embodiments the device further comprises: a USB jack, to connect user USB device; a USB Host interface Emulator function, coupled to the said USB jack on one side, and coupled to a unidirectional serial data output on the other side; a USB Device Emulator function, coupled to the said USB plug on one side, and coupled to a unidirectional serial data input on the other side; and a Unidirectional data flow enforcing device, coupled to said USB Host Emulator function unidirectional serial data output, and coupled to the said USB Device Emulator function unidirectional serial data input, wherein the device is programmed to enumerate pre-defined user USB devices only.
In some embodiments the solenoid is configured to enable locking when de-energized and unlocking when energized.
In some embodiments the mechanical linkage is a metal lever that is capable of being pulled by said solenoid, and when not pulled mechanically restricts the movement of the said at least one tooth.
In some embodiments the device further comprises a visual indicator or providing visual indication of device lock and unlocks states to the user, wherein visual indicator are selectable from the list of: Light Emitting Diode (LED), Lamp, electromagnetic colored flag and Liquid Crystal Display (LCD).
In some embodiments the device further comprising a push-button coupled to said at least one tooth to enable safe removal of the device by user mechanical input force pushing said push-button.
In some embodiments the device further comprising a Leaf spring coupled to at least one tooth to force said at least one tooth into the mating USB jack shielding tab holes.
In some embodiments the device further comprising a sensor capable of providing an electrical feedback about the device lock and unlock states.
In some embodiments the device further comprises at least one removable ring selectable from the list consisting of: filler removable rings to enable user device adjustment to various host USB jack wall thicknesses; and removable oversized rings to enable mechanical blocking of nearby connector.
In some embodiments the device further comprises at least one Tamper Evident Labels (TEL) to enable authenticity validation and device physical tampering visual indications.
In some embodiments the solenoid is controlled by the Host Emulator function to enable device unlocking using a connected USB device.
In some embodiments the device further comprises: a USB jack, to connect user USB device; a USB Physical layer function, coupled to the said USB jack on one side, and coupled to a Core function on the other side; a USB Physical layer function, coupled to the said USB plug on one side, and coupled to said Core on the other side; and a Core function, said Core function is capable of performing functions selectable from the list consisting of: enabling enumeration of only predefined user devices based pre-programmed profile; passing only specific USB packets based on predefined profile; blocking specific USB packets based on predefined profile; acting as a unidirectional device enabling data flow in only one specific direction; and emulating USB host and USB device for specific devices.
It is another object of a current invention to provide a method removing an electromechanical USB lock device from a USB port of a host computer by an authorized user comprising: verifying that the host computer is powered, wherein a security software in said host computer is automatically executed on power-up of said host and periodically communicating with the electromechanical USB lock device, wherein said electromechanical USB lock device is locked in the USB port of a host computer; entering a code associated with said electromechanical USB lock device into a remote device; communicating and authenticating a lock-release command from said remote device to said USB lock device; in response to said lock-release command, unlocking said electromechanical USB lock device from said USB port; and removing said electromechanical USB lock device from said USB port.
In some embodiments the method removing an electromechanical USB lock device from a USB port of a host computer further comprises logging the removal event in the security software with data entries selected from a group consisting of: authorized user name, removed USB lock device details, time and date.
In some embodiments the method removing an electromechanical USB lock device from a USB port of a host computer further comprises enabling the use of said USB port through said security software as defined by the authorized user permissions level and applicable network management group policies.
In some embodiments the security software in the periodically communicating with the device to provide continuous security through keep alive and re-authentication.
In some embodiments the Remote device authenticates the USB lock and communicates (via server) to the host that it is OK to remove.
In some embodiments the USB lock device energizing the solenoid and provides proper user indication through Red LED illumination.
In some embodiments, once the USB lock device is removed—it fails to communicate with the security SW and as result the security SW changing its state to “removed”.
In some embodiments the removal event is logged in the security SW with data entries such as authorized user name, removed USB lock device details, time and date.
It is another object of a current invention to provide a method for installing an electromechanical USB lock device by an authorized user, and continuous monitoring of the USB lock device, the method comprises: accessing a Security software, and entering an applicable USB lock device identification and a host computer identification; entering the installation mode in said Security software[verifying that said host computer is powered; inserting the USB lock device into the appropriate host USB jack; and authenticating said the USB lock device and recording the results.
In some embodiments the user verifies that the selected host is powered on or turns on the selected host.
In some embodiments the authorized user slowly inserting the USB lock device into the appropriate host USB jack, and once USB lock device plug contacts are in contact with the host computer USB jack contacts, it powers up and waiting for commands from Security SW.
In some embodiments the Security SW sends lock-disable command to the target USB lock device, and once lock disable command received by the USB security device, a solenoid is energized and a LED is illuminated in red color.
In some embodiments the authorized user can then push a push-button and fully insert the device to the host USB jack.
In some embodiments the, once the solenoid is de-energized, the USB lock device sensing the state through switch or sensor report back to the Security SW that the device is locked and the LED is illuminating in green color.
In some embodiments the Security SW authenticates the USB lock device and records the results and the installation event is logged in the security SW with data entries such as authorized user name, inserted USB lock device details, time and date.
In some embodiments the Security SW periodically re-authenticates each one of the USB Lock devices to maintain the system security. Each successful/unsuccessful authentication is reported to the log database
It should be noted that embodiments of the current invention enable safe device removal using a scalable and secure centralized security permissions enforcement management. Mechanical keys known in the art presents severe management challenge, specifically at large organizations. If all (or a plurality of) locks has identical keys across the organization, then there may be a security threat if one key finds its way to the attacker's hand. On the other hand, if each of the keys is different, then it is very difficult for large organization to manage and match these keys to their corresponding lock. The use of electronic keys with electromechanical lock provides flexibility and security even for large and growing organizations. For example, it is possible to assign different levels of authorities (equivalent to individual and master keys) with multiple levels.
Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Although methods and materials similar or equivalent to those described herein can be used in the practice or testing of the present invention, suitable methods and materials are described below. In case of conflict, the patent specification, including definitions, will control. In addition, the materials, methods, and examples are illustrative only and not intended to be limiting.
Unless marked as background or art, any information disclosed herein may be viewed as being part of the current invention or its embodiments.
Some embodiments of the invention are herein described, by way of example only, with reference to the accompanying drawings. With specific reference now to the drawings in detail, it is stressed that the particulars shown are by way of example and for purposes of illustrative discussion of the preferred embodiments of the present invention only, and are presented in the cause of providing what is believed to be the most useful and readily understood description of the principles and conceptual aspects of the invention. In this regard, no attempt is made to show structural details of the invention in more detail than is necessary for a fundamental understanding of the invention, the description taken with the drawings making apparent to those skilled in the art how the several forms of the invention may be embodied in practice.
In the drawings:
Before explaining at least one embodiment of the invention in detail, it is to be understood that the invention is not necessarily limited in its application to the details set forth in the following description or exemplified by the examples. The invention is capable of other embodiments or of being practiced or carried out in various ways.
It will be appreciated that certain features of the invention, which are, for clarity, described in the context of separate embodiments, may also be provided in combination in a single embodiment. Conversely, various features of the invention, which are, for brevity, described in the context of a single embodiment, may also be provided separately or in any suitable sub-combination or as suitable in any other described embodiment of the invention. Certain features described in the context of various embodiments are not to be considered essential features of those embodiments, unless the embodiment is inoperative without those elements.
In discussion of the various figures described herein below, like numbers refer to like parts. The drawings are generally not to scale. For clarity, non-essential elements may have been omitted from some of the drawing.
To the extent that the figures illustrate diagrams of the functional blocks of various embodiments, the functional blocks are not necessarily indicative of the division between hardware circuitry. Thus, for example, one or more of the functional blocks (e.g., processors or memories) may be implemented in a single piece of hardware (e.g., a general purpose signal processor or random access memory, or the like) or multiple pieces of hardware. Similarly, the programs may be stand alone programs, may be incorporated as subroutines in an operating system, may be functions in an installed software package, and the like.
The security plug 13 has a planar body portion dimensioned for insertion into the frame of the USB jack (not shown in this figure). The body portion may also be dimensioned such that an end surface thereof is flush with an outer edge of the USB jack frame when the plug is fully inserted therein. At least one prong 124 is supported by a major surface 125 of the body portion for engaging a corresponding aperture in the USB jack frame whereby an edge of the aperture engages the prong 124 and impedes removal of the plug from the socket. A frangible tab 128 fixed to the end surface of the plug and adapted for easy removal therefrom after insertion of the plug into the USB jack. In one embodiment, the frangible tab 128 is adapted to be fractured from the body portion upon attempting to remove the plug from the socket leaving a facture mark. This both prevents removal while also providing an immediate visual indication that the plug has been tampered with.
Also described in this patent application are security functions that enable software detection of the plug presence through software running on the host computer. Between the VBUS and Ground connections (pins 1 and 4 of the USB plug) there is connected a resistor R (not shown in this figure) of sufficiently high value e.g. 100 k Ohm to impose little current drain. Software in the host computer monitors the current flowing between VBUS and Ground so as to detect whether the security plug is connected or removed as a function of current flow. Specifically, any status in the connection or disconnection of the security plug while the computer is operating can be detected in this manner. In order to provide an additional layer of security that prevents tampering while the computer is switched off, a memory device storing a unique ID may be connected across the data pins 2 and 3 so as to allow the host computer to identify the device. The host computer monitors the USB ports and detects when a device is removed or inserted and uses the ID to establish the identity of the device. The user is then prompted to enter an authorization code that is matched to a database of authorized users stored in the computer in order to determine whether the user is authorized to remove or insert the identified device and take precautionary or evasive action if necessary.
While the apparatus described above provides a basic solution for the problem, it is suffering from some severe security vulnerabilities:
The above security vulnerabilities may prevent the use of such device in organizations having strict security policy.
A lock 999 with a housing 214 mounted onto a retaining sheath, which is insertable to a USB port (not shown in this figure). Locking member 208 is pivotally connected to the rear end of retaining sheath. Locking member 208 is provided with two protrusions 218, which correspond to standard openings 222 in a USB port 216. Locking member 208 has a bent, preformed shape, such that in the absence of external forces it runs diagonally; its front end is farther inward than its back end. Lock 999 further includes lock button 206 which protrudes from the rear end of housing 214. Lock button 206 is depressible by a user to lock the lock 999. Lock button 206 is connected to linear cam 204, which pivots locking member 208 by cooperating with the ramped camming surface of locking member 208.
While this prior art device solves the physical security problem is suffers from several disadvantages:
In this embodiment 20 the USB security USB security plug 20 comprises a security plug 13 which is designed to fit standard USB jack 31 of host device 30 such as the one illustrated to at the left side. USB jack 33 may be any open and unused USB port in host PC, laptop, docking station, appliance, server etc. USB security plug 13 comprises electrical contacts 12 which are arranged to touch and make electrical contact with contacts 33 of USB jack 31.
It should be noted that the term “host”, “host device” or “host computer” may be any electronic or computing device having a USB female USB jack.
Authentication and security function 27 is connected to the USB plug contacts 12 through lines 9a and 9b to enable software loaded on host computer 30 to positively authenticate the USB security plug 20.
In this document the term “security function” or other references to “function” or “functions” refer to hardware capable of performing the logical function. The hardware may comprise one or a plurality of electronic circuitries. The hardware may be based on an ASIC (Application Specific Integrated Circuit), a processor accompanied with the necessary memory, a programmable device such as FPGA (Field Programmable Gate Array), or other device or devices capable of performing the desired function. The block diagrams seen here may refer to the function (rather then the hardware sub-units) since modern logical hardware are capable of performing several functions. Thus, a plurality of logical functions may be performed by the same hardware. Alternatively, each logical function may be performed by a dedicated hardware, for example a single chip, or several chips. A man skilled in the art of electronics may find several ways to realize and implement the “function” or “functions”. All such implementations are within the scope of this invention.
Power required for the Authentication and security function 27, and other components in the USB security plug 20 is received from host computer USB contacts 33 via plug contacts 12 and line 10. Power is preferably 5 VDC as defined in USB standard. However, DC to DC power supply or power regulator may be used for modifying the USB standard voltage to voltages, or voltages required for the operation of the USB security 20. Authentication and security function 27 also comprising of switching function that powers the electromechanical solenoid 24 via solenoid activation line 28 based on commands received from host computer 30.
Electromechanical solenoid 24 is coupled to a pin or lever 23 that is loaded to the forward position when solenoid 24 is de-energized by spring 22. Spring 22 may be torsion spring, leaf spring or any other type of elastic component. Metal pin or lever 23 is inserted inside release push-button 18 to prevent user activation of the release action when the electromechanical solenoid 24 is not energized. Pin or lever 23 is preferably made of magnetic metal such that it is influenced by solenoid 24, optionally; the part of pin or lever 23 close to the solenoid 24 is made of magnetic metal such that it is influenced by solenoid 24. Optionally the part of pin or lever 23 close to the solenoid 24 comprises a permanent magnet such that it is influenced by solenoid 24. Optionally pin or lever 23 is constructed as a balanced lever (see
Push-button 18 is mounted on a flexible leaf spring 16 having one or more locking teeth 8 that are designed to engage with shielding tab holes 34 inside standard USB jack 33, locking the security plug 13 to the USB jack 33. Leaf spring 16 is designed to provide pressure on locking teeth 8 to secure the USB security plug having an electromechanical solenoid lock 20 inside host computer USB jack 31 and to prevent its advertent, malicious, or inadvertent removal.
Optional switch or sensor 25 provides feedback to the Authentication and security function 27 about the current position of the Metal pin or lever 23. Alternatively, sensor 25 is configured to detect the position of push-button 18 or Leaf spring 16.
Optional visual indicator 19, for example an LED derived by Authentication and security function 27 provides user indication when the device is properly locked, for example through green light. Bi-color LED may be used to provide other state indications such as unlocked state (red color for example).
Enclosure 5 is designed to withstand mechanical tampering and therefore it is preferably made from material such as strong plastic or metal alloy. Inclusion of ferromagnetic metal, (for example mu-metal, http://en.wikipedia.org/wiki/Mu-metal) in the enclosure 5 may be used to prevent abusing the USB security plug 20 by attempting to influence lever 23 wing an external magnetic field, for example by placing a magnet near it.
Optionally, one or more Filler Removable rings 14 are designed to fill the gap between the security plug enclosure 5 and the mating USB jack 31 when the USB security plug 20 is fully engaged with the USB jack. These Filler Removable rings 14 may be removed by the user to adjust the device for various thick host computer panels (as will be further explained below).
During initial insertion of the USB security plug 20, its USB plug contacts 12 touches host USB connector 31 mating contacts 33. Once the coupled Authentication and security function 27 is powered and recognizes initial insertion state it energizes the electromechanical solenoid 24 via solenoid activation 28. Solenoid 24 pulls the metal pin or lever 23 that in turn moves out of the notch in push-button 18 to enables user finger 21 pressing push-button 18 to lower Leaf spring 16 and locking teeth 8 to enable full insertion of security plug 13 of USB security plug 20 into USB lack 31.
Alternatively, user 21 may push the enclosure 5, thus forcing locking teeth 8, Leaf spring 16 to bend downwards as the slopping face 38 of locking teeth 8 meet the edge 39 of USB jack 31.
Optionally, during the USB security plug insertion, when electromechanical solenoid 24 is energized, Authentication and security function 27 turns off LED indicator 19 or changes its color to indicate that the device is not secured.
Next
Once the USB security plug 13 of USB security plug 20 is fully inserted into the host USB jack 31, locking teeth 8 penetrates the USB jack shielding tab holes 34 and therefore mechanically secure the USB security plug 20 into position inside host USB jack 31. Locking teeth 8 are sized to fit into USB jack shielding tab holes 34, enabling leaf spring 16 to return to its normal position and push the push-button 18 upwards. When Authentication and security function 27 de-energizes the solenoid 24, metal pin or lever 23 can return into the locked position inside push-button 18 and signal its locked position to Authentication and security function 27 through switch or sensor 25.
Once the USB security plug device 20 reached its locked position as indicated by switch or sensor 25, Authentication and security function 27 turns on LED indicator 19 to indicate that the device is secured.
Once the USB security plug 20 is locked in place, the only possible way to remove it from USB jack 31 is through the following process:
Such removal may be needed to enable proper insertion of the USB security plug 20 into the USB jack 31 of host device 30 even when the wall 35 in front of the jack is thick. A thick wall 35 may prevent the proper insertion of the USB security plug 20 and therefore the device is preferably equipped with one or more filler removable rings 14 that enable the user to adjust the device for host device 30 wall thicknesses.
It should be noted that without such filler removable rings 14, a gap between the USB security plug device 20 and the host device 30 USB jack 31 may be formed when wall 35 is thin or missing. Such gap is potential security vulnerability as an attacker may insert a thin tool or metal plate inside that gap and bend the locking teeth 8 and leaf spring 16 downwards to release the USB security plug 20.
Such oversized removable ring 32 may be used to enable mechanical blocking of additional nearby USB or other jacks. For example in this
It should be noted that oversized removable rings 32 may be designed with different shape and installation orientations to enable blocking of connectors located at different positions around the device 20.
While this exemplary embodiment of the current invention provides good management and security levels, in some cases a higher security level may be needed. In particular there is a potential security vulnerability of a malicious code running on the host device 30 that may target the USB security plug 20 in attempt to support an unauthorized removal of the plug. This issue may be addressed by other embodiment of the current invention as illustrated in
In this embodiment of the current invention solenoid 24 is driven by SCF 129 that also drives the optional LED indicator 19. The SCF 129 is also coupled to the switch or sensor 25 to receive indications about the device state. The SCF 129 is powered from the USB interface 5V power through line 145b via line 10.
It should be noted that the USB security plug 120 state can be fully defined by the switch or sensor state 25 and the 5V USB power input 145b. As state information can only be sensed while USB security plug 120 is powered and therefore inserted into a USB port of host device 30. When USB security plug 120 is fully inserted and powered there are only 2 state options:
a. Push-button 18 is locked
b. Push-button 18 is unlocked.
The SCF 129 receives control commands from the Wired or wireless remote-control receiver function 148 via bi-directional lines or bus 146. Wired or wireless remote-control receiver function 148 receives commands from remote device 155 through antenna 150 or electrical contacts 152. Antenna 150 may be Radio Frequency antenna or an inductor receiving commands through electromagnetic inductance. Wired or wireless remote-control receiver function 148 receives power from the USB interface 5V power through lines 145a and 10. Alternatively Wired or wireless remote-control receiver function 148 may receive power from the antenna 150 if inductor is used to receive commands and power. If Wired or wireless remote-control receiver function 148 is wireless receiver then antenna 150 must be installed outside the device enclosure 105 metal parts or alternatively, enclosure 105 is made of plastic material that do not significantly attenuating command signal reception.
Alternatively remote-control receiver function 148 may receive power from the remote device 155 through electrical contacts 152.
Wired or wireless remote-control receiver function 148 may use any secure wired or wireless communication method suitable for short distance, for example:
Conventional wired protocol
Radio Frequency (RF) remote control link
RFID (Radio Frequency Identification) link
Single wire communication protocol link
Human body communication link
Optical communication link
Remote control device 155 uses the selected link as described above to provide short distance remote control of the isolated USB security plug device 120. This control is preferably achieved through an encrypted communication link using device 155 antenna 156 (for wireless link) or contacts 158 (for wired link). Remote control device 155 may further comprising of means to detect nearby USB plug device serial number through bar-code reader 162 or an integrated receiver function that uses same antenna 156.
Keypad or touch-screen 160 may be added at the Remote control device 155 to enable manual entry of USB security plug serial numbers or to enter other commands.
Tamper Evident Label 107 may be installed on the isolated USB security plug device 120 outer enclosure 105 to provide clear indication if the device was mechanically tampered. Such label is preferably holographic surface having a special adhesive layer. Once the label is peeled or removed—clear indications of such removal appears in or under that label.
While installation (insertion) of this device 120 is similar to device 20 shown in
Optional LED indicator 19 provides a visual indication that the specific isolated USB security plug device 120 received the command and it is ready for safe removal (that is, solenoid 24 is energized). After preprogrammed time interval solenoid 24 is de-energized if the USB security device 120 was not removed first.
Remote control device 155 may serve as a master key for all USB security plug devices in the department/site/organization or it may be programmed to control only specific devices as needed according to the organizational security scheme.
Optionally, Remote control device 155 is in communication 198 with an optional security server 199 that monitors, logs and verify each removal of an isolated USB security plug device 120. Server 199 may be local, may be part of Remote control device 155, or may be a remote server. Optionally, sending the unlocking code is possible only after verification by the security server. Optionally, the optional security server 199 is further in communication 197 with host 30 in order to verify that the specific isolated USB security plug device 120 is installed in one of its USB jacks 31. Optionally, sending the unlocking code is possible only after verification by the security server at host 30 that isolated USB security plug device 120 is installed in one of its USB jacks 31, and there is authorization for its removal.
Communication channels 198 and 197 may be wired or wireless channels and optionally are standard computer communication channels, for example the communication channels used in the organization (e.g. LAN, WAN, WiFi, etc.). Preferably, secure communication protocol is used.
USB user keyboard or mouse jack 235 is coupled with host emulator function (HE) 219. Host emulator function 219 emulates a standard PC USB Human Interface Device host stack by receiving user keyboard entries. Host emulator function 219 is powered from the host device 5V USB power via host USB jack 31, line 10 and 145c. Same 5V power is also used to power the connected user keyboard and mouse through USB user keyboard and mouse jack 235.
Host emulator function 219 is preferably a microcontroller, ASIC (Application Specific Integrated Circuit), FPGA (Field Programmable Gate Array), System on a Chip or any other computing function that is capable of performing the required emulation. Host emulator function 219 converts the keyboard entries received from keyboard into a proprietary unidirectional data stream passed through line 217 to the unidirectional data enforcing device 215. Unidirectional data enforcing device is preferably and optical isolator, inductive isolator or any other electronic circuitry capable of assuring unidirectional data flow. From unidirectional data enforcing device 215 the proprietary unidirectional data stream is coupled through line 214 into the Device Emulator function (DE) 210. Device emulator function 210 emulates a standard PC keyboard device by receiving proprietary unidirectional data stream from line 214 and generating matching user keyboard entries over USB bus (lines 9a and 9b) coupled to the host device 30 via USB contacts 33. Device emulator function 210 is powered from the host device 5V USB power via line 10.
Device emulator function 210 is preferably a microcontroller, ASIC (Application Specific Integrated Circuit), FPGA (Field Programmable Gate Array), System on a Chip or any other computing function that is capable of performing the required emulation. Device emulator function 210 is preferably capable to provide authentication functions similar to the Authentication and security function 27 of
It should be noted that the operation of a USB mouse is similar to the operation of the USB keyboard that described above but instead of keyboard inputs, mouse inputs are passed to the host device. Optionally, the same keyboard or mouse security device 220 is capable of interfacing with and transmitting commands from a mouse or a keyboard.
Optionally, the keyboard or mouse security device 220 is capable of interfacing with, and transmitting commands from, both a mouse and a keyboard concurrently. This can be accomplished by having two USB jacks 235, or using an external USB hub or composite USB device, with both mouse and keyboard connected to it. In this exemplary embodiment of the current invention solenoid 24 is driven by SCF 129 that also drives the LED indicator 19. The SCF 129 is also coupled to the switch or sensor 25 to receive indications about the device state. The SCF 129 is powered from the USB interface 5V power through line 145b and 10.
The locking mechanism of this exemplary embodiment of the current invention is similar to the locking mechanism shown in
The SCF 129 receives control commands from the coupled to the Wired or wireless remote-control receiver function 148 via bi-directional lines or bus 146. Wired or wireless remote-control receiver function 148 receives commands from remote device 155 (seen in
The use of this keyboard or mouse security device 220 described herein, having emulators and unidirectional data enforcing device provides the following security advantages over direct connection of USB keyboard or mouse to the host device:
It should be noted that the topology of keyboard or mouse security device 220 having a unidirectional data diode function 215 may be used for preventing data leak when used with other USB input devices. For example, a user may need to upload imaged from a digital camera to host 30, yet the possibility of transferring images already stored on host 30 is to be prevented. This may be accomplished by adopting Host emulator 219 to communicate with a digital camera and accept data from it (most digital cameras are capable of “pushing” images to a host).
USB jack 235 is coupled to USB Physical layer function (PHY) 279. Physical layer function 279 interfaces between the USB bus 299 and the core function 275 internal bus 277.
Core function 275 is preferably a microcontroller, ASIC (Application Specific Integrated Circuit), FPGA (Field Programmable Gate Array), System on a Chip or any other computing function that is capable of performing the required filtering and security functions.
Core function 275 is programmed to perform the following tasks:
Core function 275 is further coupled through internal bus 274 to another USB physical layer function (PHY) 272 that is coupled through lines 9a and 9b, USB plug contacts 12 and host device contacts 33 into the host device USB port 31.
It should be noted that the core function 275 may be integrated with the two USB physical layer functions 279 and 272 into a single device having two USB interfaces (for example NXP or FreeScale ARM based microcontrollers having two USB ports).
The locking mechanism of this exemplary embodiment of the current invention is similar to the locking mechanism shown in
The locking mechanism of this exemplary embodiment of the current invention is similar to the locking mechanism shown in
The exemplary cable locking device shown in
The locking mechanism of this exemplary embodiment of the current invention is similar to the locking mechanism shown in
The cable locking device 420 may be used to secure USB KVM (Keyboard Video Mouse) switch cable to a computer.
The purpose of such device is to assure that only qualified equipment will be connected to that host computer by locking its USB cable to the host device USB port. This type of USB cable locking device may be used in conjunction with Secure KVM devices or secure peripheral devices. Another advantage of such device is that it secures the peripheral device to the host computer. Such function may be useful in the case of portable USB devices that may be abused to transfer data to other computers.
In this exemplary embodiment of the current invention, the USB cable locking device 520 is mechanically secured inside host device 30 USB jack 31 through similar solenoid based mechanism as shown in
It should be noted that this embodiment of the current invention is less complex and less expensive than other options but it requires a non-standard USB port behavior from the attached USB device and therefore standard off-the shelve USB devices may not be used here.
Optionally, USB plug 408 or 408a (and the USB device that is connected to it, and is not seen in this figure) is placed in a secure enclosure 499 such that the user of host 30 cannot access the USB plug 408 and connect an unauthorized USB device to it.
Additionally or alternatively, other security measures are used to prevent disconnecting the authorized USB device from plug 408 and connecting an unauthorized USB device to it. For example, the authorized USB device connected to plug 408 may have an alarm function alerting that plug 408 was disconnected.
Alternatively, USB plug 408 or 408a may be missing, and the authorized USB device permanently attached to the cord 407 or 407a. For example, a keyboard or a mouse (or other authorized devices) having a cord ending with a USB cable locking device 420 or 520 may be securely connected to the host 30.
In this embodiment of the current invention USB contacts 12 are printed on a Printed Circuit Board (PCB) 99 that forms the mechanical substrate for the whole device. Filler Removable rings 14a and 14b are plugged to one another to fill the gap between the device enclosure 205 (in this figure the upper half, 205a of the enclosure is seen) and the host device USB jack (not shown here).
Optionally, the rings are gap-fillers and modular and are designed to prevent easy removal while the device is locked. This may be done by:
Optionally the rings are designed in such way that they may be plugged to one another.
Optionally the last ring is constructed to be plug into the device enclosure.
The rings may be made of hard plastic or metal.
An example for oversized rings may be seen and are used by Kensington in their mechanical USB lock mentioned at the background section.
Device emulator function 210 is preferably a bare die, BGA (Ball Grid Array) or QFN (Quad-Flat No-leads) chip soldered, bonded or attached to the PCB 99 near the USB security plug 13. Solenoid 24 is soldered to the same board with four mechanical pins. Host emulator 219 is located near the device USB jack 235. Optical isolator 215 is located near the solenoid 24. LED indicator 19, soldered to the PCB 99, is designed to penetrate the device enclosure bottom part 205b (seen in
USB security plug 13 is formed from PCB substrate 99. Top part of Push-button 18 is exposed from the removed enclosure top cover 205a. Push-button 18 is attached to flexible leaf spring 16 having two locking tooth 8a and 8b that are designed to lock inside standard USB jack 33 shielding tab holes 34. Metal lever 23 is mounted on metal hinge 26 with torsion spring 22 loading the metal lever under the leaf spring 16, thus preventing it from flexing downwards. When solenoid 24 is energized, it attracts the left side of the metal lever 23 and rotates counterclockwise the lever against the torsion spring 22 from under the leaf spring 16. This enables the push-button 18 and the leaf spring 16 to bend downwards and release the two locking tooth 8a and 8b from the host USB jack 31.
Tamper Evident Label 107 is attached between the two parts of the device enclosure 205a and 205b to provide clear visual indication if the enclosure parts were separated or tampered.
It should be noted that this or similar locking mechanism may be used with other embodiments of the invention, for example the embodiments seen in
Optional metal shell 149 is placed, optionally on one side, or around security plugs 13 of plugs 20, 120, 220, 270, 320, 420, 520, or 600. Optionally, having an optional metal shell 149 around security plugs 13, plugs 20, 120, 220, 270, 320, 420, 520, or 600 conform with the form factor of standard USB plug except for the locking tooth 8a and 8b.
It should be noted that in some exemplary embodiments of the current invention, the USB lock device may be capable of being inserted and locked while it is unpowered. This can be achieved by designing the lock mechanism to be irreversible: that is, once it is inserted it is locked mechanically. In such case steps 3 to 10 above may not be necessary as host computer may be unpowered during USB lock device installation.
However, optionally, once host 702 is powered, the system is in a state arrived at step 863 (USB security device fully inserted and locked in place), and steps 9 to 10 may commenced.
Referring back to
As used herein, the term “computer” or “module” may include any processor-based or microprocessor-based system including systems using microcontrollers, reduced instruction set computers (RISC), application specific integrated circuits (ASICs), logic circuits, and any other circuit or processor capable of executing the functions described herein. The above examples are exemplary only, and are thus not intended to limit in any way the definition and/or meaning of the term “computer”.
It is to be understood that the above description is intended to be illustrative, and not restrictive. For example, the above-described embodiments (and/or aspects thereof) may be used in combination with each other. In addition, many modifications may be made to adapt a particular situation or material to the teachings of the various embodiments of the invention without departing from their scope. While the dimensions and types of materials described herein are intended to define the parameters of the various embodiments of the invention, the embodiments are by no means limiting and are exemplary embodiments. Many other embodiments will be apparent to those of skill in the art upon reviewing the above description. The scope of the various embodiments of the invention should, therefore, be determined with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled. In the appended claims, the terms “including” and “in which” are used as the plain-English equivalents of the respective terms “comprising” and “wherein.” Moreover, in the following claims, the terms “first,” “second,” and “third,” etc. are used merely as labels, and are not intended to impose numerical requirements on their objects.
Further, the limitations of the following claims are not written in means-plus-function format and are not intended to be interpreted based on 35 U.S.C. §112, sixth paragraph, unless and until such claim limitations expressly use the phrase “means for” followed by a statement of function void of further structure.
This written description uses examples to disclose the various embodiments of the invention, including the best mode, and also to enable any person skilled in the art to practice the various embodiments of the invention, including making and using any devices or systems and performing any incorporated methods. The patentable scope of the various embodiments of the invention is defined by the claims, and may include other examples that occur to those skilled in the art. Such other examples are intended to be within the scope of the claims if the examples have structural elements that do not differ from the literal language of the claims, or if the examples include equivalent structural elements with insubstantial differences from the literal languages of the claims.
Although the invention has been described in conjunction with specific embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. Accordingly, it is intended to embrace all such alternatives, modifications and variations that fall within the spirit and broad scope of the appended claims. All publications, patents and patent applications mentioned in this specification are herein incorporated in their entirety by reference into the specification, to the same extent as if each individual publication, patent or patent application was specifically and individually indicated to be incorporated herein by reference. In addition, citation or identification of any reference in this application shall not be construed as an admission that such reference is available as prior art to the present invention.
