Autonomic security settings switching based upon a network connection security profile

• US 20030221122A1
• Filed: 04/17/2003
• Published: 11/27/2003
• Est. Priority Date: 04/18/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hatori, Masahiko
• Application Number:
  US10/417,626
• Publication Number:
  US 20030221122A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system is provided for a user to safely use a computer apparatus in places where securities are not assured. In a notebook type computer apparatus enabling external transmission via a predetermined network connection among a plurality of network connections, security information is set in association with a network connection to be used by a security setting and recording device by a user operation with an input device; the security information set by the security setting and recording device is stored in a security information database; security switching device controls a file sharing service based on the security information stored in the security information database such that accesses from other network connected computers to shared file resources is terminated.

Claims

1. An apparatus comprising:

a plurality of network interface devices which provide network connections;

an access control program which controls file accesses from externally connected network devices; and

a switch, coupled to said plurality of network interface devices and to said access control program, which controls external transmission via a predetermined network connection among a plurality of network connections.

2. The apparatus of claim 1, wherein said switch further comprises:

a program controller which terminates said access control program and denies file accesses from the externally connected network devices and which starts said access control program allowing accesses from the externally connected network devices.

3. The apparatus of claim 1 further comprising:

a network cognizer, coupled to said switch, which recognizes a network to be connected wherein said switch stops said access control program based on the network recognized by said network cognizer.

4. The apparatus of claim 3, further comprising:

a plurality of network profiles, wherein said network cognizer recognizes the network based on one of said plurality of network profiles.

5. The apparatus of claim 2, wherein said program controller stops said access control program based on a user specification.

6. The apparatus of claim 2, wherein said program controller starts said access control program based on a user specification.

7. An apparatus comprising:

a switch which controls external transmission via a predetermined network connection among a plurality of network connections;

a security setter and recorder which sets a security information in association with the network connection to be used and storing the security information set; and

a security switch which makes processing provided by externally connected network devices ineffective based on the security information stored by said security setter and recorder.

8. The apparatus of claim 7, wherein the processing made ineffective by said security switch is related to file/printer sharing.

9. The apparatus of claim 7, wherein the processing made ineffective by said security switch is a download of a program to be downloaded via a network.

10. The apparatus of claim 7, wherein the processing made ineffective by said security switch is a download of a program to be downloaded via a network and execution thereof.

11. An apparatus comprising:

a file sharing service which controls file accesses from externally connected network devices to a network resource individually set to be shared, wherein the network resource is selected from the group consisting of folders and drives; and

a switch which controls said file sharing service.

12. The apparatus of claim 11, wherein said switch directs the stopping of said file sharing service based on a user instruction.

13. The apparatus of claim 11, wherein said switch directs starting of said file sharing service based on a user instruction.

14. The apparatus of claim 11, wherein said switch controls said file sharing service depending on a network to be connected.

15. A Portable information equipment comprising:

a switch which enables external transmission via a network to be connected at a place to which said portable information equipment moves;

a security setter and recorder which determines how to control the sharing of resources on the network; and

a security switch which stops access to a shared network resource from an external apparatus via the network based on the setting provided by said security setter and recorder, independent of the sharing attributes of the network resource;

wherein the network resource is selected from the group consisting of a folder and a drive.

16. The portable information equipment of claim 15,

wherein said security switch starts the sharing of the network resource which had previously been stopped, and

wherein said security switch performs network setting work based on detection of a network at a place to which said portable information equipment has moved, and controls the network resource sharing when performing the network setting work.

17. The portable information equipment of claim 15, wherein said security setter and recorder sets up a network profile.

18. A method comprising the steps of:

enabling an apparatus for external transmission via a predetermined network connection among a plurality of network connections;

terminating an access control program which controls file accesses from externally connected network apparatuses; and

starting execution of said stopped access control program.

19. The method of claim 18 wherein said terminating step is based an event, wherein the event is selected from the group consisting of a user setting and an automatic action, independent of the sharing attributes of each of a set of individual drives and folders, to prohibit file sharing with said other apparatuses.

20. The method of claim 18 wherein said starting execution step permits file sharing with the other apparatuses, which had been stopped, based on a preset sharing setup without performing new sharing setup for a network resource selected from the group consisting of folders and drives.

21. A method comprising the steps of:

enabling external transmission via a predetermined network connection among a plurality of network connections on an apparatus;

setting security information in association with a network connection to be used;

storing the set security information; and

disabling processes to be performed by externally connected network apparatuses based on the stored security information during the setting step.

22. The method of claim 21, wherein said disabling step is for disabling processes related to one of a group consisting of sharing of files and printers, and processes related to a program to be downloaded via a network.

23. A program product comprising:

a computer usable medium having computer readable program code embodied therein for causing a computer to enable external transmission via a predetermined network connection among a plurality of network connections, the computer readable program code in said program product implementing functions effective to;

terminate an access control program for controlling file accesses from externally connected network computers; and

start execution of said stopped access control program.

25. A program product comprising:

a computer usable medium having computer readable program code embodied therein for causing a computer to enable external transmission via a predetermined network connection among plurality of network connections, the computer readable program code in said program product implementing functions effective to;

set security information in association with a network connection to be used;

store said security information in a predetermined memory; and

making processing provided by externally connected network computers ineffective based on the stored security information.