IP Library Granted Patent US 8,140,733
Granted Patent B2
US 8,140,733 · App. 12/855,025 · Granted Mar 20, 2012

Secure external computer hub

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,140,733
App. No.
12/855,025
Granted
Mar 20, 2012
Kind
B2
Abstract

Secure external hubs for coupling peripheral devices to host computers are disclosed. Each peripheral device includes device identification (ID). Peripheral devices may be securely coupled to a host computer by designating authorized device IDs in response to an administrator input received via an administrator port of a hub, authorizing the peripheral devices connected to the hub based on the designated authorized device IDs, and enabling communication between authorized peripheral devices connected to the hub and a communication cable and preventing communication between unauthorized peripheral devices connected to the hub and the communication cable.

Claims (54)

1. A secure external hub for coupling a plurality of peripheral devices to a host computer, each peripheral device including device identification (ID), the hub comprising:

a communication cable for connection with the host computer;

a first connection port for connection with a first peripheral device including first device ID;

a first communication path extending between the first connection port and the communication cable;

a first switch coupled within the first communication path;

an administrator input device;

a memory for storing at least one authorized device ID; and

a processor coupled to the first switch, the administrator input device, and the memory, the processor programmed to designate the at least one authorized device ID in response to an administrator input received via the administrator input device, to receive the first device ID when the first peripheral device is connected to the first connection port, to identify a match between the first device ID and the at least one stored authorized device ID, and to selectively actuate the first switch such that communication is enabled through the first communication path when a match is identified and communication is disabled when a match is not identified.

2. The hub of claim 1 , further comprising:

a second connection port for connection with a second peripheral device including second device ID;

a second communication path extending between the second connection port and the communication cable; and

a second switch coupled within the second communication path; and

wherein the processor is further coupled to the second switch, the processor further programmed to receive the second device ID when the second peripheral device is connected to the second connection port, to identify a match between the second device ID and the at least one stored authorized device ID, and to selectively actuate the second switch such that communication is enabled through the second communication path when a match is identified and communication is disabled when a match is not identified.

3. The hub of claim 1 , further comprising an administrator key port and wherein the processor is further programmed to only accept the administrator input from the administrator input device when a secure key is connected to the administrator key port.

4. The hub of claim 1 , wherein the first device ID is at least one of vendor ID, product ID, or serial number.

5. The hub of claim 4 , the processor further programmed to receive a qualification selection via the administrator input device selecting one or more of the vendor ID, product ID, or serial number, storing the qualification selection in memory, and basing identification of matches on the qualification selection.

6. The hub of claim 1 , further comprising:

a USB hub module positioned within the first communication path, the USB hub module including an upstream port coupled to the communication cable and a downstream port coupled to the first connection port via the first switch.

7. The hub of claim 2 , further comprising:

a USB hub module positioned within the first and second communication paths, the USB hub module including an upstream port coupled to the communication cable, a first downstream port coupled to the first connection port via the first switch, and a second downstream port coupled to the second connection port via the second switch.

8. The hub of claim 1 , further comprising

a secure connector coupled to an end of the communication cable for establishing a tamper resistant connection with the host computer.

9. The hub of claim 1 , wherein the memory includes administrator data for presenting a graphical user interface (GUI) on a remote computer terminal for soliciting the administrator input; and

wherein the processor is further programmed to retrieve the administrator data from memory and send it to the remote computer terminal via the administrator port.

10. The hub of claim 1 , wherein the administrator input device includes an administrator key port and an administrator button and wherein the processor is programmed to designate device IDs received from the connected peripheral devices as the at least one authorized device ID when a secure key is received by the administrator key port and the administrator button is actuated.

11. A method for configuring a secure external hub for coupling a plurality of peripheral devices to a host computer, each peripheral device including device identification (ID), the method comprising:

designating at least one authorized device ID in response to an administrator input received via an administrator input device of the hub;

authorizing one or more peripheral devices connected to the hub based on the designated at least one authorized device ID; and

enabling communication between authorized peripheral devices connected to the hub and a communication cable of the hub for communication with the host computer and preventing communication between unauthorized peripheral devices connected to the hub and the communication cable.

12. The method of claim 11 , further comprising the step of:

securely coupling the communication cable to a first port of the host computer.

13. The method of claim 12 , the method further comprising the step of:

securing a second port of the host computer.

14. The method of claim 11 , wherein the designating step comprises:

sending, via the administrator port, administrator data for presenting a graphical user interface (GUI) on a remote computer terminal, the GUI soliciting the administrator input; and

receiving the administrator input into the GUI.

15. The method of claim 14 , the designating step further comprising:

receiving a secure key via an administrator key port; and

verifying the received secure key prior to sending the administrator data.

16. The method of claim 11 , wherein the designating step comprises:

receiving device ID from each of the peripheral devices connected to the hub;

receiving the administrator input; and

designated the received device ID from each of the connected peripheral devices as the at least one authorized device ID in response to receipt of the administrator input while each of the peripheral devices are connected to the hub.

17. The method of claim 11 , wherein the authorizing step comprises:

comparing the device IDs of the one or more connected peripheral devices to the at least one authorized device ID to identify matches; and

authorizing each peripheral device connected to the hub for which a match is identified.

18. The method of claim 11 , wherein the hub includes a communication path extending between each connected peripheral device and the communication cable and wherein the enabling step comprises:

selectively closing a switch within each communication path extending from the connected peripheral device such that communication between authorized connected peripheral devices and the communication cable is enabled and communication between connected peripheral devices that are not authorized and the communication cable are prevented.

19. A system for configuring a secure external hub for coupling a plurality of peripheral devices to a host computer, each peripheral device including device identification (ID), the system comprising:

means for designating at least one authorized device ID in response to an administrator input received via an administrator port of the hub;

means for authorizing one or more peripheral devices connected to the hub based on the designated at least one authorized device ID; and

means for enabling communication between authorized peripheral devices connected to the hub and a communication cable of the hub for communication with the host computer and preventing communication between unauthorized peripheral devices connected to the hub and the communication cable.

20. The system of claim 19 , further comprising:

means for securely coupling the communication cable to a first port of the host computer.

Assignments (3)
RELEASE OF SECURITY INTEREST Recorded Jun 1, 2011
From: RBC BANK (USA)
To: EMCON EMANATION CONTROL LTD
Reel/Frame 026373/0501 →
SECURITY AGREEMENT Recorded May 2, 2011
From: EMCON EMANATION CONTROL LTD
To: RBC BANK (USA)
Reel/Frame 026305/0044 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 12, 2010
From: WONG, MICHAEL HOWARD; RITCHIE, BRADLEY CLARE
To: EMCON EMANATION CONTROL LTD.
Reel/Frame 024829/0775 →