System and method for protecting information stored on a computer

• US 20020073306A1
• Filed: 09/10/2001
• Published: 06/13/2002
• Est. Priority Date: 09/08/2000
• Status: Abandoned Application

• Current Assignee: Mainstay Enterprises, Inc.
• Original Assignee: Mainstay Enterprises, Inc.
• Inventors: Aluzzo, Gaspare, Bigno, William
• Application Number:
  US09/950,527
• Publication Number:
  US 20020073306A1
• Time in Patent Office: Days
• US Class Current: 713/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

An embodiment of the invention is a method for protecting information processed, transmitted, or stored on a computer having a bootup operation, an operating system, at least one input device, and at least one output device. The computer checks for a first authentication during the bootup operation of the computer, the first authentication being associated with an external device connected to the computer. At least one input device of the computer is locked if no first authentication is present during the bootup operation of the computer. The computer may check for a second authentication when the operating system is operational and lock the at least one input device if no second authentication is present while the operating system is operational. Checking for an authenticated token as an authentication may comprise querying at a Smart Card reader for an authorized Smart Card.

Claims

1. A method for protecting information stored on a computer having a bootup operation, an operating system, at least one input device, and at least one output device, comprising:

checking for a first authentication during the bootup operation of the computer, the first authentication being associated with an external device connected to the computer; and

locking the at least one input device of the computer if no first authentication is present during the bootup operation of the computer.

2. The method of claim 1, wherein checking for the first authentication further comprises checking for a first token.

3. The method of claim 2, wherein checking for the first token further comprises querying at least one of a Smart Card reader, a radio frequency (RF) tag reader, a magnetic stripe reader, a retinal scanner, a fingerprint reader, and a palmprint reader regarding the presence of the first authenticated token.

4. The method of claim 3, wherein the first token comprises at least one of a Smart Card, an RF tag, a token having a magnetic stripe, a retina from a user, a fingerprint from the user, and a palmprint from the user.

5. The method of claim 1, wherein checking for the first authentication further comprises checking for a first password.

6. The method of claim 1, further comprising:

checking for a second authentication when the operating system is operational; and

locking the at least one input device if no second authentication is present while the operating system is operational.

7. The method of claim 6, wherein checking for the second authentication further comprises checking for a second token.

8. The method of claim 7, wherein checking for the second token further comprises querying at least one of a Smart Card reader, a radio frequency (RF) tag reader, a magnetic stripe reader, a retinal scanner, a fingerprint reader, and a palmprint reader regarding the presence of the second token.

9. The method of claim 8, wherein the second token comprises at least one of a Smart Card, an RF tag, a token having a magnetic stripe, a retina from a user, a fingerprint from the user, and a palmprint from the user.

10. The method of claim 6, wherein checking for the second authentication further comprises checking for a second password.

11. The method of claim 9, wherein the first token and the second token are the same.

12. The method of claim 6, further comprising:

continuing the bootup operation even if the at least one input device is locked.

13. The method of claim 1, wherein the external device comprises a token reader.

14. The method of claim 1, further comprising locking the at least one output device.

15. The method of claim 6, further comprising locking the at least one output device.

17. The system of claim 16, wherein the checking module further comprises software instructions operational on the computer.

18. The system of claim 16, wherein the locking module comprises an instruction which locks a communication interface in the computer that connects the external device.

19. The system of claim 18, wherein the instruction engages a switch at the interface.

20. The method of claim 16, wherein the external device comprises at least one of a Smart Card reader, a radio frequency (RF) tag reader, a magnetic stripe reader, a retinal scanner, a fingerprint reader, and a palmprint reader regarding the presence of the authentication.

21. The system of claim 20, further comprising:

at least one output device, wherein the locking module locks the at least one output device of the computer if no authentication is present during the bootup operation of the computer.

16. A system for protecting information stored on a computer having a bootup operation and an operating system, comprising:

at least one input device;

an external device connected to the computer;

a checking module for checking for an authentication during the bootup operation of the computer, the authentication being associated with the external device; and

a locking module for locking the at least one input device of the computer if no authentication is present during the bootup operation of the computer.

22. A system for protecting information in a computer having a memory and at least one input device, the system comprising:

at least one token;

a reader for reading the at least one token; and

a first software operational in the memory for disabling the at least one input device of the computer during a bootup operation if the at least one token is not read by the reader.

23. The system of claim 22, further comprising:

a second software operational in the memory for disabling the at least one input device of the computer when an operating system is operational if the at least one token is not read by the reader.

24. The system of claim 22, further comprising:

a third software operational in the memory for disabling at least one output device of the computer when an operating system is operational if the at least one token is not read by the reader.

25. The system of claim 22, further comprising:

a fourth software operational in the memory for placing the memory in an inaccessible state if the authorized token is not read by the reader when the computer attempts to access the memory.

26. The system of claim 25, wherein the memory further comprises registry software;

and wherein the fourth software further comprises an application executable call executed substantially coincidentally with the registry software.

27. The system of claim 25, wherein the memory defaults to an inaccessible state.

28. The system of claim 27, wherein the memory changes to an accessible state if the authorized token is read by the reader.

30. The computer-readable medium of claim 29, wherein the computer system comprises at least one output device;

and

wherein the program further comprises locking the at least one output device if the authenticated token is not read by the token reader.

31. The computer-readable medium of claim 29, wherein the program further comprises:

checking for the authenticated token in the token reader when the operating system is operational; and

locking at least one input device if the authenticated token is not read by the token reader.

32. The computer-readable medium of claim 31, wherein the computer system further comprises at least one output device, and wherein the program further comprises locking the at least one output device if the authenticated token is not read by the token reader.

29. A computer-readable medium operative in a computer system having a bootup operation, at least one input device, a token reader, and at least one authenticated token, the computer-readable medium containing a program for protecting information within the computer system by carrying out steps comprising:

checking for an authenticated token in the token reader during the bootup operation of the computer system; and

locking at least one input device if an authenticated token is not read by the token reader.