David M. Mooney received three patents related to computer security between 1997 and 2002. The patents describe methods for securing access to computers and files using smart card technology and encryption. One patent involves using a card reader interface and verification questions to control user access and peripherals. Another provides secure file transfer and access control using encryption and smart cards. A third patent describes a cellular phone call management system that records call details onto a smart card using a remote card reader.

1. David M. Mooney – United States Patents
 Computer Security Patents - March 11, 1997
PAT. NO. Title
5,610,981 Preboot protection for a data security system with anti-intrusion capability
5,515,440 Preboot protection of unauthorized use of programs and data with a card reader inter-
face
5,327,497 Preboot protection of unauthorized use of programs and data with a card reader inter-
face
Abstract
A secure computer controlling access to internal devices via an integrated card reader. A micro-
processor-controlled card reader interface logically connected to the CPU of the computer reads
and writes information from and to a card placed in the card reader and performs additional func-
tions in response to commands received from the CPU. The boot ROM of the computer is pro-
grammed to start execution from a program logic device, which runs a verification program to
verify the authenticity of a user. Upon a valid user card being placed in the card reader, one or
more questions are read from the card and displayed to the user. The user's responses are saved
and compared to the correct answers stored on the card, and if the responses match the correct
answers, a power control circuit is used by the CPU to turn on power to computer peripherals the
user has been authorized to use. The system additionally provides for a method of initializing and
authorizing a user card with a security administrator card. Upon a valid security administrator
card being placed in the card reader, a security administrator initializes and authorizes one or
more individual user cards by selecting from a list of menu options displayed to the security ad-
ministrator. The security administrator inputs a list of questions and answers, which are then
stored on the user card for use during the verification procedure. The system further provides for
the physical and logical destruction of data in response to unauthorized attempts by a user to vio-
late the physical or logical integrity of the computer system. The physical and logical destruction
of data may be disabled for maintenance or configuration purposes by the use of a maintenance
card.
 Access Control / Crypto Security - Feb 26, 2002
6,351,813 Access control/crypto sys-
tem
Abstract
An access control/crypto system having a smart card reader and an access control program for
requesting information from a user to determine if the user is authorized to access the computer.
The access control/crypto system uses encryption and smart card technology as a means for se-
curing files stored on the system, telecommunicated globally, or archived to a chosen media. The

2. system includes an access hierarchy, combined with the issuance of smart cards, to control the
various levels of access provided by the system. Further, the present system provides secure file
transfer by encrypting sensitive files at a first site, transferring the encrypted version to a second
site, providing an authorized user at the second site with a secret password, and decrypting the
file at the second site using the secret password under control of the authorized user.
Cellular Phone Call Management System – Security - June 2,
1998
5,761,624 Method and apparatus for controlling and recording cellular phone transactions using an integrated
circuit card
Abstract
A cellular phone call management system using a microprocessor-controlled remote card reader
interface for a cellular telephone system to record calls onto a card as they are placed or received.
A microprocessor reads information from a card placed in the remote card reader and ensures the
card is valid. The cellular telephone's transceiver logic bus is monitored to determine the transac-
tion information of a call as it is placed or received. After the call is completed, the call transac-
tion information is recorded on the card. When all calls are complete, the card is placed in a host
card reader attached to a host computer where the call transaction information is read from the
card, processed, and written to a host storage device. The call transactions may then be analyzed
and reports may be generated and printed by host computer software.