Patent Application
20090178133
1. Field of the Invention
This invention relates to an electronics system with restricted access.
2. Description of the Related Art
It is often desirable to provide security to an electronic system by restricting access to it. By restricting access to the electronic system, its unauthorized use is prevented. Restricted access to the electronic system can be provided in many different ways. For example, the electronic system often includes a controller in communication with an input device. Access is provided to the controller in response to a predetermined access input signal being provided to the controller through the input device.
There are many different ways the predetermined access input signal can be provided to the controller. For example, the input device can be a computer system operating security software. The predetermined access input signal is then provided to the security software as a username and password. The input device can also be a biometric device which receives biometric data, such as fingerprint and retina scan information. The predetermined input signal is provided in response to biometric data being provided to the controller with the biometric device.
Another way restricted access can be provided to the electronic system is with a keypad in communication with the controller. The keypad restricts access to the electronic system until a predetermined key input is provided to the controller through the keypad. An example of an electronic system with a keypad is disclosed in U.S. Pat. No. 6,260,765. However, it is often possible to circumvent the security provided by these input devices to gain unauthorized access to the electronic system.
The present invention employs a switching device which controls the communication between electronic and input devices. When the switching device is activated, the electronic and input devices are in communication with each other, and a digital control signal is allowed to flow between them. The digital control signal is used to control the operation of the electronic device. The operation of the electronic device can be controlled by the input device if the digital control signal is received by the electronic device.
When the switching device is deactivated, the electronic and input devices are not in communication with each other, and the digital control signal is not allowed to flow between them. The operation of the electronic device cannot be controlled by the input device unless the digital control signal is received by the electronic device. The switching device is activated and deactivated in response to a security signal. In this way, security is provided to the electronic device by controlling the communication between it and the input device.
These and other features, aspects, and advantages of the present invention will become better understood with reference to the following drawings and description.
Switching device 103 can be of many different types, such as a relay, key switch and filter. There are many different types of relays that can be used, such as those made by Zettler Automotive of Aliso Viejo, Calif. Further, there are many different types of filters that can be used, such as analog or digital filters. An analog filter generally includes analog circuit components, such as resistors, capacitors, transistors and/or operational amplifiers. A digital filter generally includes digital logic devices made from interconnected transistors.
Electronic device 101 and input device 102 can be of many different types. For example, in an embodiment shown in
In an embodiment shown in
Electronic device 101 operates in response to an input signal SInput received by input device 102. For example, when input device 102 is a computer keyboard, input signal SInput is received by input device 102 when a key on the keyboard is pushed. When input device 102 is a computer mouse, input signal SInput is received by input device 102 when the mouse is moved. After input device 102 receives input signal SInput, it outputs a digital control signal SData, wherein digital control signal SData is a digital signal. A digital signal generally includes information in a digital format, such as bits.
In accordance with the invention, digital control signal SData is allowed to flow between input device 102 and electronic device 101 when switching device 103 is activated. Further, digital control signal SData is not allowed to flow between input device 102 and electronic device 101 when switching device 103 is deactivated. When digital control signal SData is not allowed to flow between input device 102 and electronic device 101, access to electronic device 101 is restricted. In this way, the flow of digital control signal SData between input device 102 and electronic device 101 is controlled by switching device 103. The flow of control signal SData between input device 102 and electronic device 101 can be controlled in many different ways.
In one way, switching device 103 is embodied as a relay so that when it is activated, input device 102 is connected to electronic device 101, as indicated by an indication arrow 105. It should be noted that, in this embodiment, input device 102 is physically connected to electronic device 101 when switching device 103 is activated. In this way, input device 102 is physically connected to electronic device 101 in response to switching device 103 being activated and, in response, digital control signal SData is allowed to flow between them. The operation of electronic device 101 can be adjusted, in response to receiving digital control signal SData, by using input device 102 to adjust digital control signal SData.
When the relay is deactivated, input device 102 is disconnected from electronic device 101, as indicated by an indication arrow 104. It should be noted that, in this embodiment, input device 102 is physically disconnected from electronic device 101 when switching device 103 is deactivated. In this way, input device 102 is physically disconnected from electronic device 101 in response to switching device 103 being deactivated and, in response, digital control signal SData is not allowed to flow between them. The operation of electronic device 101 cannot be adjusted, in response to receiving digital control signal SData, by using input device 102 to adjust digital control signal SData.
In another way, switching device 103 is embodied as a filter, such as a digital or analog filter. When the filter is activated, digital control signal SData flows therethrough and is amplified. Digital control signal SData is amplified by the filter so that the operation of electronic device 101 can be adjusted in response to receiving it. When the filter is deactivated, digital control signal SData flows therethrough and is attenuated. Digital control signal SData is attenuated by the filter so that the operation of electronic device 101 can not be adjusted in response to receiving it.
It should be noted that, in this embodiment, the filter scales digital control signal SData by amplifying or attenuating its amplitude. However, in some situations, the amplitude of digital control signal SData is scaled by a factor of one or approximately one. Filters that scale the amplitude of a signal by one or approximately one are often referred to as unity gain filters.
It should also be noted that switching device 103 can be activated and deactivated in many different ways. For example, it can be activated and deactivated in response to a security signal SSecurity. In this way, security is provided to electronic device 101 by controlling the communication between it and input device 102 with security signal SSecurity. In some embodiments, security signal SSecurity is provided to switching device 103 through a wireless connection and, in other embodiments, it is provided through a wired connection. However, security signal SSecurity is generally provided from a security system, as will be discussed in more detail presently.
As discussed above, switching device 103 is activated and deactivated in response to security signal SSecurity. It should be noted that security signal SSecurity can correspond to many different signals to activate and deactivate switching device 103. In one example, switching device 103 is activated and deactivated when security signal SSecurity corresponds to a digital one and zero, respectively. In another example, switching device 103 is activated and deactivated when security signal SSecurity corresponds to a digital zero and one, respectively.
Security system 107 can be of many different types, such as a biometric or non-biometric security system. A biometric security system provides security signal SSecurity in response to a biometric input signal, such as data corresponding to a person's finger, voice, eye pattern, etc. A non-biometric security system provides security signal SSecurity in response to non-biometric input signal, such as data corresponding to signals from a keypad or a key lock. An example of a keypad is disclosed in U.S. Pat. Nos. 4,721,954 and 5,015,829. When security system 107 is a keypad, security signal SSecurity is provided in response to activating one or more of its keypad buttons. When security system 107 is a key lock, security signal SSecurity is provided in response to activating it with a corresponding key. It should be noted that the biometric and non-biometric input signal are indicated as signal SAccess in
In this embodiment, however, security system 107 is a card reader so that security signal SSecurity is provided to switching device 103 in response to the card reader reading a security card. An example of a card reader is disclosed in U.S. Pat. No. 6,223,984. In general, the card reader includes a microcontroller and the security card includes a microprocessor. However, the security card can include a magnetic strip in some embodiments. If the security card includes a microprocessor, the microprocessor of the security card flows signal SAccess to the microcontroller of the card reader when they are positioned proximate to each other. If the security card includes a magnetic strip, the microcontroller of the card reader reads security data, represented by signal SAccess, stored with the magnetic strip when the magnetic strip is moved relative to the card reader.
The security data included with signal SAccess is then processed and the microcontroller determines whether or not to activate or deactivate switching device 103 with security signal SSecurity. This determination can be made in many different ways, such as by using a protocol, such as the RS-232 and RS-485 protocols. The RS-232 and RS-485 protocols are well-known and are often used to operate microcontrollers associated with card readers. Another protocol that can be used is based on the Universal Serial Bus (USB), which is often used for flowing a signal between a computer system and a USB compatible electronic device.
In one mode of operation, the security data collected by the microcontroller is checked and a decision is made by logic circuitry whether or not to flow security signal SSecurity to switching device 103. The security data collected is often compared by the logic circuitry with the information stored with a microcontroller memory system.
If the security data collected matches that stored by the microcontroller memory system, switching device 103 is activated in response to security signal SSecurity. In some situations when the security data matches, switching device 103 is in an activated condition and it remains there. In other situations when the security data matches, switching device 103 is in a deactivated condition and is moved to the activated condition.
If the security data collected does not match that stored by the microcontroller memory system, switching device 103 is deactivated in response to security signal SSecurity. In some situations when the security data does not match, switching device 103 is in the deactivated condition and it remains there. In other situations when the security data does not match, switching device 103 is in the activated condition and is moved to the deactivated condition.
It should be noted that the security data can be stored with security system 107 or with an external database that security system 107 is in communication with. It should also be noted that input device 102 and switching device 103 are shown as being separate components in systems 100 and 106. However, they can be integrated together, as will be discussed in more detail presently.
In accordance with the invention, thermostat 124 includes switching device 103, which is embodied as a relay 103a. Relay 103a is activated and deactivated in response to security signal SSecurity, as discussed above with
In one embodiment of operation, security signal SSecurity is provided to relay 103a so it is activated and keypad processor 126 is connected to main thermostat processor 121. In this way, the operation of main thermostat processor 121 can be controlled by keypad processor 126 with control signal SData. The operation of keypad processor 126 is controlled through signals SInput1 and SInput2 provided by keypad buttons 102a and 102b, respectively. The use of keypad buttons 102a and/or 102b can control the operation of air conditioning unit 122 in many different ways, such as by controlling a temperature setting of main thermostat processor 121.
In this embodiment of operation, signal SSecurity is provided to relay 103a so it is deactivated and keypad processor 126 is disconnected from main thermostat processor 121. In this way, the operation of main thermostat processor 121 cannot be controlled with keypad buttons 102a and/or 102b. Hence, access to the operation of air conditioning unit 122 and access to the temperature setting of thermostat 124 is controlled by activating and deactivating relay 103a.
In one embodiment of operation, when signal SSecurity activates relays 103a and 103b, keypad buttons 102a and 102b are connected to keypad processor 126. In this way, the operation of main thermostat processor 121 can be controlled with keypad buttons 102a and/or 102b. In this embodiment of operation, when signal SSecurity deactivates relays 103a and 103b, keypad buttons 102a and 102b are disconnected from keypad processor 126. In this way, the operation of main thermostat processor 121 cannot be controlled with keypad buttons 102a and/or 102b. Hence, access to the operation of air conditioning unit 122 is controlled by activating and deactivating relays 103a and 103b.
Thermostat 124 includes electronic device 101, which is embodied as main thermostat processor 121 in communication with an internal temperature sensor 125. Main thermostat processor 121 is in communication with air conditioning unit 122 and controls its operation.
In accordance with the invention, thermostat 124 includes switching device 103, which is embodied as relay 103a. A/D converter 123 is in communication with main thermostat processor 121 through relay 103a when relay 103a is activated. A/D converter 123 is not in communication with main thermostat processor 121 when relay 103a is deactivated.
It should be noted that, in some embodiments, electronic system 127 includes relays 103c and 103d integrated with input device 111. In this embodiment, relays 103c and 103d are shown in phantom connected between A/D converter 123 and keypad buttons 102a and 102b, respectively. It should be noted that system 127 operates similar to system 108a (
In this embodiment, internal temperature sensor 125 is in communication with and provides an ambient temperature value, denoted as signal STemp, to main thermostat processor 121. Thermostat processor 121 compares the ambient temperature value to a desired temperature value. Thermostat 121 operates air conditioning unit 122 to drive the difference between the ambient and desired temperature values to zero.
It should be noted that temperature sensor 125 can be located away from main thermostat processor 121 and thermostat 124. For example, temperature sensor 125 can be located so it is hidden and difficult to locate. By locating temperature sensor 125 away from processor 121, it is more difficult to adjust its operation in an unauthorized manner, such as with a heating pad. By locating temperature sensor 125 away from processor 121, it more difficult to control the operation of air conditioning unit 122 through unauthorized access to thermostat 121.
In one embodiment of operation, when signal SSecurity activates relay 103a, A/D converter 123 is connected to main thermostat processor 121 and digital control signal SInput is allowed to flow therebetween. In this way, the operation of main thermostat processor 121 can be controlled with keypad buttons 102a and/or 102b. In this embodiment of operation, when signal SSecurity deactivates relay 103a, A/D converter 123 is disconnected from main thermostat processor 121 and digital control signal SInput is not allowed to flow therebetween. In this way, the operation of main thermostat processor 121 cannot be controlled with keypad buttons 102a and/or 102b. Hence, the ability to control the operation of air conditioning unit 122 is controlled by activating and deactivating relay 103a.
It should be noted that in other embodiments, relay 103a is removed from electronic system 127 and keypad buttons 102a and 102b are operatively coupled with A/D converter 123 through relays 103c and 103d, respectively. In operation, when signal SSecurity activates relays 103c and 103d, keypad buttons 102a and 102b, respectively, are connected to A/D converter 123. In this way, the operation of main thermostat processor 121 can be controlled with keypad buttons 102a and/or 102b. Further, when signal SSecurity deactivates relays 103c and 103d, keypad buttons 102a and 102b, respectively, are disconnected from A/D converter 123. In this way, the control of the operation of main thermostat processor 121 with keypad buttons 102a and/or 102b is not allowed.
Thermostat 124a includes electronic device 101, which is embodied as main thermostat processor 121 in communication with internal temperature sensor 125. Main thermostat processor 121 is in communication with air conditioning unit 122 through an A/C relay 103f.
In accordance with the invention, thermostat 124 includes switching device 103, which is embodied as a relay 103e. Relay 103e is connected between main thermostat processor 121 and touch screen processor 126a. Touch screen processor 126a is in communication with main thermostat processor 121 through relay 103e when relay 103e is activated. Touch screen processor 126a is not in communication with main thermostat processor 121 when relay 103e is deactivated. Electronic system 128 includes security system 107 which provides security signal SSecurity to relay 103e to activate and deactivate it.
Relay 103e can have many different numbers of inputs and outputs. However, in this embodiment, relay 103e has four inputs and four outputs. Conductive lines 140a, 140b, 140c and 140d extend between relay 103e and separate outputs of touch screen processor 126a. Separate outputs of relay 103e are connected to conductive lines 140a, 140b, 140c and 140d, respectively, when relay 103e is activated so that conductive lines 140a, 140b, 140c and 140d are connected to separate inputs of main thermostat processor 121. Further, separate outputs of relay 103e are not connected to conductive lines 140a, 140b, 140c and 140d, respectively, when relay 103e is deactivated so that conductive lines 140a, 140b, 140c and 140d are not connected to separate inputs of main thermostat processor 121.
However, it should be noted that relay 103e can have more or fewer inputs and outputs. Further, relay 103e can be replaced with one or more separate relays, such as relays 103a, 103b and 103c discussed above. One embodiment is indicated by an indication arrow 119, wherein relay 103a is connected to an output of touch screen processor 126a through conductive line 140d. Further, conductive lines 140a, 140b and 140c extend between separate outputs of touch screen processor 126a and separate inputs of main thermostat processor 121 and are not connected to relays. When relay 103a is activated, signal SData is allowed to flow between touch screen processor 126a and main thermostat processor 121. Further, when relay 103a is deactivated, signal SData is not allowed to flow between touch screen processor 126a and main thermostat processor 121.
Conductive lines 140a and 140b flow power signals S+ and S−, respectively, between touch screen processor 126a and main thermostat processor 121, wherein power signals S+ and S− flow through relay 103a. Power signals S+ and S− provide power to main thermostat processor 121. Conductive lines 140c and 140d flow clock and control signals Sclock and SData, respectively, between touch screen processor 126a and main thermostat processor 121. Clock signal Sclock provides timing information to main thermostat processor 121 and control signal SData is discussed above. Thermostat 124a includes main thermostat processor 121 in communication with air conditioning unit 122 through an air conditioning relay 103e.
In one embodiment of operation, when signal SSecurity activates relay 103e, touch screen processor 126a is connected to main thermostat processor 121 and signals S+, S−, Sclock, and SData are allowed to flow therebetween. In this way, the operation of main thermostat processor 121 can be controlled by providing one or more inputs to touch screen processor 126a. In this embodiment of operation, when signal SSecurity deactivates relay 103e, touch screen processor 126a is disconnected from main thermostat processor 121 and signals S+, S−, Sclock , and SData are not allowed to flow therebetween. In this way, the operation of main thermostat processor 121 cannot be controlled with touch screen processor 126a. Hence, access to the operation of air conditioning unit 122 is controlled by activating and deactivating relay 103e. Security system 107 and temperature sensor 125 operate in a way the same or similar to that discussed above.
It should be noted that, in some embodiments, one or more of conductive lines 140a, 140b and 140c can be connected to relays. The relays can be separate relays, wherein they include a single input and a single output, or they can include multiple inputs and multiple outputs. The activation and deactivation of these relays are used to control the flow of signals Sclock, S+ and S− between touch screen processor 126a and main thermostat processor 121.
In this embodiment, security system 107 is connected to relay 103a, as described in more detail above, and provides security signal SSecurity thereto in response to predetermined security signal SAccess. Computer input device 131 can be of many different types, such as a computer keyboard and mouse. Computer input device 131 can be connected to computer 132 in many different ways, but an electrical cable is generally used. There are many different types of electrical cables which can be used, such as RS-232C, PS/2, ADB or USB cables.
In operation, when the predetermined input is provided to security system 107, signal SSecurity is provided to relay 103a. In response, relay 103a is activated and provides a physical connection between computer input device 131 and computer 132 so that a signal SData can flow therebetween. In this way, when computer input device 131 receives an input signal SInput, such as a keystroke on a keyboard, computer input device 131 provides a control signal SData to computer 132 through relay 103a. When the predetermined input is not provided to computer input device 131, signal SSecurity is not provided to relay 103a. In response, relay 103a is deactivated and computer input device 131 and computer 132 are disconnected from each other so that signal SData cannot flow therebetween. In this way, when computer input device 131 receives an input signal SInput, such as a keystroke on a keyboard, computer input device 131 does not provide a control signal SData to computer system 132 through relay 103a. Hence, computer input device 131 cannot control the operation of computer system 132 unless switching device 103 is activated. It should be noted that signal SData is a digital signal so that when relay 103a is deactivated, computer input device 132 and computer system 132 are not in digital communication with each other. It should also be noted that computer input device 131 may be a wireless device, as will be discussed presently.
Keyboard 131b and mouse 131a can be in communication with computer 132 in many different ways. In this embodiment, mouse 131a is in communication with computer system 132 through a wireless receiver 131c and relay 103a so that control signal SData1 can flow therebetween. Control signal SData1 flows through relay 103a between computer system 132 and wireless receiver 131c in response to wireless receiver 131c receiving a wireless mouse signal 136. Control signal SData1 is allowed to flow between computer system 132 and wireless receiver 131c when relay 103a is activated. Control signal SData1 is disallowed from flowing between computer system 132 and wireless receiver 131c when relay 103a is deactivated.
In this embodiment, keyboard 131b is in communication with computer system 132 through relay 103b by using an electrical cable so that a control signal SData2 can flow therebetween. Control signal SData2 is allowed to flow between computer system 132 and computer keyboard 131b when relay 103b is activated. Control signal SData2 is disallowed from flowing between computer system 132 and computer keyboard 131b when relay 103b is deactivated.
It should be noted that computer mouse 131a and computer keyboard 131b can be in communication with computer system 132 in many other ways. For example, in some embodiments, computer keyboard 131b is in communication with computer system 132 through a wireless receiver and mouse 131a is in communication with computer system 132 through a cable. In should also be noted that relays 103a and 103b are activated and deactivated in response to security signal SSecurity, as discussed above and as will be discussed in more detail presently.
In operation, signal SSecurity is provided to relays 103a and 103b in response to the predetermined input. In response, relays 103a and 103b are activated so that signals SData1 and SData2 are allowed to flow, as described above. In this way, the operation of computer system 132 can be controlled in response to input signals SInput1 and SInput2 being provided to computer mouse 131a and computer keyboard 131b, respectively. Signals SInput1 and SInput2 can be of many different types, such as the activation of a mouse and keyboard button, respectively.
Signal SSecurity is not provided to relays 103a and 103b when the predetermined input is not provided. In response, relays 103a and 103b are deactivated so that signals SData1 and SData2 are disallowed from flowing, as described above. In this way, the operation of computer system 132 cannot be controlled in response to input signals SInput1 and SInput2 being provided to computer mouse 131a and computer keyboard 131b, respectively. It should be noted that, in this embodiment, relays 103a and 103b are activated and deactivated together. However, in some embodiments, relays 103a and 103b can be activated and deactivated separately.
The embodiments of the invention described herein are exemplary and numerous modifications, variations and rearrangements can be readily envisioned to achieve substantially equivalent results, all of which are intended to be embraced within the spirit and scope of the invention.
