Systems and methods for protecting information on a computer by integrating building security and computer security functions

• US 20020078372A1
• Filed: 09/10/2001
• Published: 06/20/2002
• Est. Priority Date: 09/08/2000
• Status: Abandoned Application

• Current Assignee: Mainstay Enterprises, Inc.
• Original Assignee: Mainstay Enterprises, Inc.
• Inventors: Aluzzo, Gaspare, Bigno, William
• Application Number:
  US09/950,508
• Publication Number:
  US 20020078372A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence

Abstract

An embodiment of the invention is a method for controlling access to a computer having an authorized computer access token and a computer access token reader in communication with the computer. The computer is housed in a building with an entrance controlled by an authorized building access token and a building access token reader and the computer is in communication with the building access token reader. The method comprises logging in a person seeking computer access with the authorized building access token at the building access token reader. A check is performed for the authorized computer access token at the computer access token reader. Another check is performed to determine whether the person associated with the authorized computer access token has logged into the building access token reader. The computer is disabled if the person associated with the authorized computer access token has not logged in with the authorized building access token at the building access token reader.

Claims

1. A method for controlling access to a computer having an authorized computer access token and a computer access token reader in communication with the computer, the computer being housed in a building with entrances controlled by an authorized building access token and a building access token reader, the computer being in communication with the building access token reader, the method comprising:

logging in a person seeking computer access with the authorized building access token at the building access token reader;

checking for the authorized computer access token at the computer access token reader;

checking that the person associated with the authorized computer access token has logged into the building access token reader; and

disabling the computer if the person associated with the authorized computer access token has not logged in with the authorized building access token at the building access token reader.

2. The method of claim 1, wherein checking that the person associated with the authorized computer access token has logged into the building access token reader further comprises:

checking that the person associated with the computer access token has logged into the building access token reader at the entrance, which is a predetermined one of a plurality of building access points.

3. The method of claim 2, further comprising:

disabling the computer if the person associated with the authorized computer access token has not logged into the building access token reader at the predetermined one of the building access points.

4. The method of claim 2, further comprising:

revoking an authorization status of the authorized computer access token if the person associated with the computer access token logs into the building access token reader with the building access token at an alternative one of the building access points.

5. The method of claim 1, wherein checking for the authorized computer access token at the computer access token reader further comprises:

disabling the computer if the authorized computer access token has not been read by the computer access token reader.

6. The method of claim 1, wherein the authorized building access token and the authorized computer access token are the same.

7. The method of claim 6, wherein the authorized building access token and the authorized computer access token comprise at least one Smart Card.

8. The method of claim 1, wherein checking that the person associated with the authorized computer access token has logged into the building access token reader further comprises:

querying a building security system as to whether the person associated with the authorized computer access token has logged into the building security system and whether the person associated with the authorized computer access token is authorized to enter the building at that moment; and

receiving data from the building security system.

9. The method of claim 1, wherein checking that the person associated with the authorized computer access token has logged into the building access token reader further comprises:

querying a building security system;

receiving data from the building security system; and

determining whether the data meet prespecified criteria.

10. The method of claim 9, wherein the prespecified criteria comprise an amount of time since logging in at the building access token reader.

11. The method of claim 9, wherein the prespecified criteria comprise a level of security clearance.

12. The method of claim 7, wherein disabling the computer further comprises:

detaining the at least one Smart Card in the computer access token reader.

14. The system of claim 13, wherein the computer is disabled when the person associated with the authorized computer access token has not logged in with the authorized building access token at a specified one of the building access token readers.

15. The system of claim 14, wherein the computer access token and the building access token are the same.

16. The system of claim 15, wherein the building access token and the computer access token comprise at least one of a Smart Card, an RF tag, a device having a magnetic stripe, a retina from the person seeking access, a fingerprint from the person seeking access, and a palmprint of a person seeking access.

18. The computer-readable medium of claim 17, wherein checking that the person associated with the authorized computer access token has logged into the building access token reader further comprises:

checking that the person associated with the computer access token has logged into the building access token reader at the entrance, which is a predetermined one of a plurality of building access points.

19. The computer-readable medium of claim 18, wherein the program further comprises disabling the computer if the person associated with the authorized computer access token has not logged into the building access token reader at the predetermined one of the building access points.

20. The computer-readable medium of claim 19, wherein the program further comprises revoking an authorization status of the authorized computer access token if the person associated with the computer access token logs into the building access token reader with the building access token at an alternative to one of the building access points.

21. The computer-readable medium of claim 17, wherein checking for the authorized computer access token at the computer access token reader further comprises:

disabling the computer if the authorized computer access token has not been read by the computer access token reader.

22. The computer-readable medium of claim 17, wherein the authorized building access token and the authorized computer access token are the same.

23. The computer-readable medium of claim 22, wherein the authorized building access token and the authorized computer access token comprise at least one Smart Card

24. The computer-readable medium of claim 17, wherein checking that the person associated with the authorized computer access token has logged into the building access token reader further comprises:

querying a building security system as to whether the person associated with the authorized computer access token has logged into the building security system and whether the person associated with the authorized computer access token is authorized to enter the building at that moment; and

receiving data from the building security system.

25. The computer-readable medium of claim 17, wherein checking that the person associated with the authorized computer access token has logged into the building access token reader further comprises:

querying a building security system;

receiving data from the building security system; and

determining whether the data meet prespecified criteria.

26. The computer-readable medium of claim 25, wherein the prespecified criteria comprise an amount of time since logging in at the building access token reader.

27. The computer-readable medium of claim 25, wherein the prespecified criteria comprise a level of security clearance.

28. The computer-readable medium of claim 23, wherein disabling the computer further comprises:

detaining the at least one Smart Card in the computer access token reader.

13. A system for protecting information when accessing a building with a plurality of entrances, comprising:

a computer housed in the building;

a plurality of building access token readers, each of which being respectively disposed substantially proximate to each of the entrances;

a computer access token reader in communication with the computer, the computer access token reader being in communication with the building access token readers;

a building access token; and

a computer access token,

wherein the computer is disabled if a person seeking computer access places the computer access token in the computer access token reader when the person associated with the computer access token has not logged in with the building access token at one of the building access token readers.

17. A computer-readable medium operative in a computer system having an authorized computer access token and a computer access token reader in communication with the computer system, the computer system being housed in a building with an entrance controlled by an authorized building access token and a building access token reader, the computer system being in communication with the building access token reader, and the computer-readable medium containing a program for protecting information within the computer system by carrying out steps comprising:

logging in a person seeking computer access with the authorized building access token at the building access token reader;

checking for the authorized computer access token at the computer access token reader;

checking that the person associated with the authorized computer access token has logged into the building access token reader; and

disabling the computer system if the person associated with the authorized computer access token has not logged in with the authorized building access token at the building access token reader.