Method and system for securing a computer connected to an insecure network

• US 20030140247A1
• Filed: 01/23/2002
• Published: 07/24/2003
• Est. Priority Date: 01/23/2002
• Status: Abandoned Application

• Current Assignee: SecureNet Technologies Ltd.
• Original Assignee: SecureNet Technologies Ltd.
• Inventors: Bakke, M. Russell, Marin, Richard, Landsman, Joshua
• Application Number:
  US10/055,767
• Publication Number:
  US 20030140247A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The present invention relates to an improved method for securing a computer connected to an insecure network when the computer is not utilizing the insecure network, wherein the computer is installed with a program managing the connection with the insecure network, which includes the steps of determining whether the computer is active, deactivating the computer from the insecure network when it is determined that the computer is inactive, and waiting for a predefined time period to repeat the method.

Claims

1. A method for securing a computer connected to an insecure network when the computer is not utilizing the insecure network, wherein the computer is installed with a program managing the connection with the insecure network, the method comprising the steps of:

determining whether the computer is active;

deactivating the computer from the insecure network when it is determined that the computer is inactive; and

,

waiting for a predefined time period to repeat the method.

2. The method according to claim 1 further comprising the step of displaying the current status of the insecure network on the computer.

3. The method according to claim 1 further comprising the steps of:

obtaining an address for the network card;

obtaining an address for an interface connected to the insecure network using the obtained address of the network card; and

,

obtaining the status of the obtained address of the interface.

4. The method according to claim 3 wherein said step of obtaining an address further comprises the steps of:

initializing any sockets support in the program managing the insecure connection;

loading a driver having an object identifier of the program managing the insecure connection;

obtaining an address for the initialization function and an address for the query function from the program; and

,

calling the initialization function to initialize the driver.

5. The method according to claim 4 wherein said step of obtaining an address for an interface connected to the insecure network further comprises the steps of:

determining a total number of interface(s) using the obtained address of the network card; and

,

storing the obtained total number of interface(s) in temporary memory.

6. The method according to claim 5 wherein said step of obtaining the status of each obtained address of the interface further comprises the steps of:

reading the status of the obtained address of the interface; and

,

saving the obtained address of the interface with the read status to memory.

7. The method according to claim 3 wherein said step of deactivating the computer from the insecure network further comprises the step of setting each obtained address of the interface to an inactive status.

8. The method according to claim 1 further comprising the steps of:

determining whether there is a network reactivation request; and

,

reactivating the computer on the insecure network when there is a network reactivation request.

9. The method according to claim 1 further comprising the steps of:

determining whether there is a network deactivation request; and

,

deactivating the computer from the insecure network when there is a network deactivation request.

10. The method according to claim 3 wherein prior said step of determining whether the computer is active further comprises the steps of:

determining whether the obtained address of the interface connected to the insecure network has an active status; and

,

waiting for a predefined time period to repeat the method when the obtained address of the interface has a nonactive status.

11. The method according to claim 1 wherein said step of determining whether the computer is active further comprises the steps of:

determining whether there is any active network process currently running via the insecure network when it is determined that the computer is active;

deactivating the computer from the insecure network when it is determined that there is no active network process currently running via the insecure network; and

,

waiting for a predefined time period to repeat the method when it is determined that there is an active network process currently running via the insecure network.

12. The method according to claim 11 wherein said step of determining whether there is any active network process currently running further comprises the steps of:

obtaining an address for the network card;

obtaining an address for an interface connected to the insecure network using the obtained address of the network card;

reading an old number of received and transmitted bytes over the obtained address of the interface;

changing the obtained address of the interface to an address for obtaining the number of bytes received;

reading the number of bytes received;

saving the read number of bytes received as a new number;

the obtained address of the interface to an address for obtaining the number of bytes transmitted;

reading the number of bytes transmitted;

saving the read number of bytes transmitted as a new number;

determining whether the old numbers of received and transmitted bytes equal to the new numbers of received and transmitted bytes;

returning a determination that an active network process is currently active when the old numbers do not equal the new numbers; and

,

returning a determination that no active network process is currently running when the old numbers equal the new numbers.

13. The method according to claim 1 wherein said step of determining whether the computer is active is performed by a step of determining whether the screen saver is activated on the computer.

14. The method according to claim 13 wherein said step of determining whether the screen saver is activated further comprises the step of determining the current version of a Microsoft Windows®

operating system installed on the computer.

15. The method according to claim 14 wherein when the current version of Microsoft Windows®

is not Windows NT, the method further comprising the steps of;

executing the findwindow function to find windowsscreensaver;

determining whether the windowsscreensaver is found by the findwindow function;

returning a determination that the screen saver is active when the windowsscreensaver is found; and

,

returning a determination that the screen saver is not active when the windowsscreensaver is not found.

16. The method according to claim 14 wherein when the current version of Microsoft Windows®

is Windows NT version 4.0 or later, the method further comprising the steps of;

executing a systemparametersinfo function to find getscreensaverunning;

determining whether the getscreensaverrunning is found by the systemparametersinfo function;

returning a determination that the screen saver is active when the getscreensaverrunning is found; and

,

returning a determination that the screen saver is not active when the getscreensaverrunning is not found.

17. The method according to claim 14 wherein when the current version of Microsoft Windows®

is Windows NT version 4.0 or older, the method further comprising the steps of;

opening a desktop of the computer where the screen saver runs on;

determining whether opening the desktop is successful;

returning a determination that the screen saver is active when the opening of the desktop is successful;

determining whether access to the desktop has been denied when the opening of the desktop is not successful;

returning a determination that the screen saver is not active when access to the desktop has not been denied; and

,

returning a determination that the screen saver is active when the access to the desktop has not been denied.

18. A system for securing a computer connected to an insecure network when the computer is not utilizing the insecure network, wherein the computer is installed with a program managing the connection with the insecure network, the system comprising:

means for determining whether the computer is active;

means for deactivating the computer from the insecure network when it is determined that the computer is inactive; and

,

means for waiting for a predefined time period to repeat the method.

19. A computer program product comprising a computer readable code stored on a computer readable medium that, when executed, the computer program product causes a computer to:

determine whether the computer is active;

deactivate the computer from the insecure network when it is determined that the computer is inactive; and

,

wait for a predefined time period to repeat the method.