A New Secure Architecture of Network Computer Based on Single CPU and Dual Bus

Internet is facing a serious problem: open and security. Private data, such as credit card information, login account and password, and etc., is easily theft by hackers. In this paper, we propose a new secure architecture of network computer (SANC). This new architecture is aimed to build a kind of low-cost intrusion-free network computer and reduce vulnerability of Neumann model. It is comprised of one CPU and two physically isolated system buses, secure and non-secure. Only non-secure bus has Internet interfaces. Devices, storing private data, can only be accessed through secure bus. Internet related applications, only running on the non-secure bus, have no opportunity to access resources on the secure bus. Besides, only one CPU can efficiently control the cost. To control the connection between CPU and two system buses, and ensure only one bus can be connected to CPU at the same time, a bus bridge (BB) is designed.