RU2313181C1 - Device for protecting a computer from unsanctioned installation of software modules and reading of information transferred through radio interfaces and other radio frequency channels - Google Patents

Abstract

FIELD: technology for protecting information contained on a computer.

SUBSTANCE: in the device, controllable generator of radio interferences and controllable power amplifier are connected serially. Antenna commutator is connected by first signal input to output of power amplifier. Signal input of signal processing block is connected to first output of antenna commutator, first controlling output is connected to controlling input of radio interference generator, second controlling output is connected to power amplifier controlling input, and signal output is connected to input of indicator of type of radio interface or radio frequency channel. Output of power supply is connected to powering inputs of antenna commutator and signal processing block. Controllable electronic computer is connected between output of power supply and powering inputs of radio interference generator and power amplifier and is connected by control input to third control output of signal processing block. Band filter is coupled between combined second signal input and output of antenna commutator and receiving-transmitting antenna. The latter is mounted in close proximity of computer being protected with possible reaction to operation of receiver-transmitter of malefactor. Signal processing block consists of serially coupled receiver, detector and logical analyzer, made in form of microprocessor with possible determining of fact of presence of an illegal signal, its power, band of working frequencies, duration of packets and association with a type of radio interface or radio frequency channel.

EFFECT: increased efficiency of computer protection, increased informational safety of computer.

4 cl, 2 dwg

Description

The invention relates to techniques for protecting the information contained on a computer (desktop computer, notebook, PDA, smartphone, etc.), and is intended to prevent the unauthorized introduction of software modules and the removal of information on radio interfaces and other radio frequency channels. In addition, it can be used to suppress radio transmitters providing illegal transmission of acoustic and / or video information circulating in a room in which confidential negotiations are conducted.

Recently, much attention has been paid to the construction of information protection of electronic equipment with wireless radio interfaces. The applicant, in particular, proposed and successfully applied a technical solution to prevent the unauthorized removal of information from a cell phone that works with the radio interface (RU 2281613 C1, H04M 1/68, 08/10/2006). At the same time, the problem of creating reliable protection for a computer is also very urgent.

A device for protecting a computer from malicious programs that allow unauthorized access to information and / or cause damage to it (RU 2002135074 A, G06F 11/00, 04/20/2004). This device contains means for automatically segregating programs, hardware for detecting and blocking actions with the amount of data actually sent from the computer that does not coincide with a certain protection, means for automatically blocking potentially dangerous actions or requesting a user to confirm permission to execute them, means for preventing falsification user data input by malicious programs, monitoring and blocking tool that controls nodes Information and Communication tions, and the user interface that can interact with the user for the purpose of prevention of the perceived danger.

A disadvantage of the known device is determined by limited functionality, covering mainly the protection of information stored in a computer, but not preventing its unauthorized removal during transmission via radio interfaces or radio frequency channels.

Meanwhile, the exchange of information on wireless radio interfaces, such as Bluetooth, Wi-Fi, ZeegBee, despite all the efforts of communication and cryptography specialists, is not completely protected. Appropriate radio monitoring and penetration techniques have been developed and are available, cryptographic cracking programs, and even the necessary equipment (special directional antennas) that allow an attacker to “see” a specific computer at a distance of up to a kilometer.

Closest to the proposed device is a computer protection device made using a storage unit for possible network configurations, a wireless intrusion detection unit, an intrusion location indicator, an illegal interference signal processing unit, and means for switching transmitted information to another radio interface or radio frequency network channel (US 20030233567 A1 , G06F 11/30, 12/18/2003). This device can connect to the USB port of a protected computer.

The disadvantage of this device is associated with a low level of counteraction to information leakage from a computer due to the installation of non-optimal radio interference.

The objective of the present invention is to increase the effectiveness of computer protection. The technical result is to increase its information security.

The problem is solved by the proposed device to protect the computer from unauthorized introduction of software modules and information retrieval on radio interfaces and other radio frequency channels, containing a controllable radio-frequency generator and an adjustable power amplifier, as well as an antenna switch connected to the first signal input with the output of an adjustable power amplifier, block signal processing, the signal input of which is connected to the first output of the antenna switch, the first control the output output is to the control input of the controlled radio noise generator, the second control output is to the control input of the adjustable power amplifier, and the signal output is to the input of the indicator type (standard) of the radio interface or radio frequency channel, the power source, the output of which is connected to the power inputs of the antenna switch and unit signal processing, a controlled electronic switch connected between the output of the power source and the power inputs of a controlled radio noise generator and an adjustable power amplifier and with a single control input with a third control output of the signal processing unit, a band-pass filter connected between the combined second signal input and output of the antenna switch and the transceiver antenna installed in the immediate vicinity of the protected computer with the possibility of counteracting the operation of the intruder transceiver, while the signal processing unit consists of included receiver, detector and logic analyzer, made in the form of a microprocessor with the ability to determine Estimation of the fact of the presence of an illegal signal, its power, operating frequency band, packet duration, and belonging to a certain type (standard) of the radio interface or radio frequency channel.

Partial essential features of the invention contribute to the solution of the problem.

The band-pass filter, the signal processing unit and the controlled radio noise generator are made with the possibility of functioning when trying to unauthorized implementation of software modules and removing information via the Bluetooth, Wi-Fi, ZeegBee or ISM radio frequency interfaces.

The device is designed as an adapter that connects to USB or Fire-Wire ports and is powered by a protected computer.

The device can be implemented in the embodiment in which the functions of the logical analyzer in the signal processing unit are performed by the protected computer, and a pop-up information window on the computer monitor is used as an indicator of the type (standard) of the radio interface or the radio frequency channel.

Figure 1 presents the functional diagram of the proposed device for protecting a computer from unauthorized introduction of software modules and information retrieval via radio interfaces and other radio frequency channels, and figure 2 shows the functional diagram of the signal processing unit used in the device.

The device contains a power source 1 (Fig. 1), a controlled radio noise generator 2, an adjustable power amplifier 3, an antenna switch 4, a signal processing unit 5, a passive bandpass filter 6, a transceiver antenna 7, a controlled electronic switch 8, and a type (standard) indicator 9 radio interface or radio frequency channel. Positions 10 and 11 in the diagram respectively indicate the intruder transceiver and its transceiver antenna.

A controlled radio interference generator 2 and an adjustable power amplifier 3 are connected in series. The antenna switch 4 is connected by a first signal input to the output of an adjustable power amplifier 3. The signal input of the signal processing unit 5 is connected to the first output of the antenna switch 4, the first control output to the control input of the controlled radio generator 2, the second control output to the control input of the adjustable power amplifier 3, and the signal output to the input of the indicator 9 of the type of the radio interface or radio frequency channel. The output of the power supply 1 is connected to the power inputs of the antenna switch 4 and the signal processing unit 5. A controlled electronic switch 8 is connected between the output of the power source 1 and the supply inputs of a controlled radio noise generator 2 and an adjustable power amplifier 3 and is connected to the third control output of the signal processing unit 5 by a control input. A band-pass filter 6 is connected between the combined second signal input and output of the antenna switch 4 and the transceiver antenna 7 installed in the immediate vicinity of the protected computer with the ability to counter the operation of the intruder transceiver 10 with the transceiver antenna 11. The signal processing unit 5 consists of a receiver 12 connected in series (Fig. .2), the detector 13 and the logical analyzer 14. The logical analyzer 14 is made in the form of a microprocessor with the possibility of determining the presence of illegal nogo signal, its power, operating frequency band, packet duration (pulse) and belonging to the type (standard) air interface or radio frequency channel.

The band-pass filter 6, the signal processing unit 5 and the controlled radio noise generator 2 are configured to function when attempts are made to unauthorized implementation of software modules and to remove information transmitted via the Bluetooth, Wi-Fi, ZeegBee or ISM radio frequency interfaces.

The device is designed as an adapter that connects to USB or Fire-Wire ports and is powered by a protected computer.

The device can be implemented with a design in which the functions of a logical analyzer in block 5 for processing illegal signals are performed by a protected computer, and a pop-up information window on a computer monitor is used as an indicator of the type (standard) of the radio interface or radio frequency channel.

The device operates as follows.

In the initial state, the electronic switch 8 is turned off, and the antenna switch 4 connects the transceiver antenna 7 with a bandpass filter 6 to the signal processing unit 5. The device continuously scans the air. In the case of an attacker using a transceiver 10 and a transceiver antenna 11 to establish communication with a radio interface or other radio frequency channel through which data is exchanged with a protected computer, in the signal processing unit 5 by means of a receiver 12, a detector 13, and a logical analyzer 14, the presence of an illegal signal is determined , its power, operating frequency band, packet duration and belonging to the type (standard) of the radio interface or radio frequency channel.

After that, the signal processing unit 5 includes an electronic switch 1 and the power from the source 1 is supplied to a controlled radio interference generator 2 and a power amplifier 3. At the same time, the signal processing unit 5 according to the signal from the detector 13 sets the corresponding frequency of the controlled radio noise generator 2 and the corresponding power level at the output of amplifier 3, and also changes the position of the antenna switch 4 by connecting a transceiver antenna 7 with a bandpass filter 6 to an adjustable power amplifier 3.

Radio interference emitted on the air prevents the unauthorized implementation of software modules (mobile agents), which can provide remote control over a personal computer and, as a result, loss of confidential information, as well as prevent unauthorized removal of information transmitted to a personal computer via radio interfaces or radio frequency channels. The set frequency and power level correspond to the optimal counteraction to the intruder 10 transceiver.

It is important to note that in the proposed device, firstly, the controlled radio generator 2 and the adjustable power amplifier 3 are turned on through the controlled electronic switch 8 only when the illegal transceiver 10 is operating, and secondly, the controlled power amplifier 3 is controlled precisely for the purpose of setting the optimal radio interference and, thirdly, the use of a band-pass filter 6 allows you to cut out out-of-band radiation of a controlled generator 2 radio interference and increase the sensitivity of the receiver 12 block 5 signal processing, as well as the efficiency of the controlled generator 2 radio interference.

The proposed device can also be used as an intelligent blocker (jammer) of radio transmitters designed for illegal transmission of acoustic and / or video information circulating in a room in which confidential negotiations are conducted.

Claims (4)

1. A device for protecting a computer from unauthorized introduction of software modules and retrieving information on radio interfaces and other radio frequency channels, containing a controllable radio-frequency generator and an adjustable power amplifier, as well as an antenna switch connected to the first signal input with the output of an adjustable power amplifier, a signal processing unit the signal input of which is connected to the first output of the antenna switch, the first control output to the control input about the radio noise generator, the second control output is to the control input of the adjustable power amplifier, and the signal output is to the input of the indicator type (standard) of the radio interface or radio frequency channel, the power source, the output of which is connected to the power inputs of the antenna switch and the signal processing unit, is controlled by an electronic switch connected between the output of the power source and the supply inputs of a controlled radio noise generator and an adjustable power amplifier and connected by a control input to the third control the output signal processing unit, a band-pass filter connected between the combined second signal input and the output of the antenna switch and the transceiver antenna installed in the immediate vicinity of the protected computer with the possibility of counteracting the operation of the intruder’s transceiver, while the signal processing unit consists of a receiver, detector and logical analyzer, made in the form of a microprocessor with the ability to determine the presence of an illegal signal Its power, working frequency band, and length packets belonging to type (standard) air interface or radio frequency channel. 2. The device according to claim 1, in which the band-pass filter, the signal processing unit and the controlled radio noise generator are configured to function when trying to unauthorized implementation of software modules and removing information via Bluetooth, Wi-Fi, ZeegBee or ISM radio frequency channels. 3. The device according to claim 1, which is made in the form of an adapter connected to USB or Fire-Wire ports and powered from a protected computer. 4. The device according to claim 1, in which the functions of the logical analyzer in the signal processing unit can be performed by the protected computer, and a pop-up information window on the computer monitor is used as an indicator of the type (standard) of the radio interface or the radio frequency channel.

Images