Controlling and remotely monitoring accessed network data

• US 20040186989A1
• Filed: 03/19/2003
• Published: 09/23/2004
• Est. Priority Date: 03/19/2003
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Clapper, Edward O.
• Granted Patent: US 7,406,715 B2
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

An environment for remote monitoring of a device, such as a child'"'"'s computer, from a television or other monitor device. The monitored device has a security layer, which may be implemented in hardware, software, or a combination of the two, where the security layer inspects some or all accessed network data or network access activities, including real-time content such as chat rooms and the like. While the monitored device is used to access network data, alerts are displayed on the remote monitoring device to allow an adult or other responsible entity to keep track of material. Thus, for example, an adult may watch television, confident that an alert will be displayed in a corner of the television screen if necessary to alert the adult to any problems. For serious alerts, the security layer may automatically block or shutdown offending network application programs.

Claims

1. A system for monitoring network data accessed by a device, comprising:

a network interface having an identifier communicatively coupled with a network;

a network application program for accessing network data of the network;

a forwarding module for forwarding some or all accessed network data to a content recognizer; and

a security layer including the content recognizer and an alert generator, the content recognizer configured to identify unacceptable content within forwarded network data, and the alert generator operable to issue an alert if unacceptable content is identified by the content recognizer.

2. The method of claim 1, further comprising:

a monitor for displaying the alert;

a receiver attached to the monitor for receiving the alert and presenting the alert in a format suitable for display by the monitor; and

a transmitter attached to the device and communicatively coupling the alert generator and the receiver.

3. The system of claim 2, wherein the receiver and transmitter utilize a wireless communication technology.

4. The system of claim 2, wherein the monitor comprises a television.

5. The system of claim 1, wherein the device is a child'"'"'s computer.

6. The system of claim 1, further comprising:

a monitor for displaying the alert; and

an override controller to allow issuing a response to an alert displayed on the monitor.

7. The system of claim 6, wherein the alert displayed on the monitor indicates access to the network has been denied, and wherein the response may instruct the security layer to allow continued access to the network.

8. The system of claim 1, wherein the security layer further comprises a process handler for controlling application programs operating on the device.

9. A method comprising:

initializing a device to be monitored;

blocking access to a monitored network;

confirming a security layer for the device is operational;

confirming ability to send an alert to a remote monitor; and

unblocking access to the monitored network if the security layer is operational and the ability to send the alert is confirmed.

10. The method of claim 9, further comprising:

determining an attempt by the device to access a monitored network; and

confirming the attempt is from a valid network interface of the device.

11. The method of claim 9, further comprising:

monitoring content of the monitored network that is accessed by the device;

applying a content recognizer to the monitored content, the content recognizer configured to identify unacceptable content within the monitored content;

if unacceptable content is recognized, issuing an alert.

12. The method of claim 11, wherein the alert may be active or passive, and wherein an active alert comprises blocking further network access, and a passive alert comprises sending the alert to the monitor.

13. The method of claim 9, further comprising:

monitoring content of the monitored network accessed by the device;

categorizing the accessed content;

determining the accessed content corresponds to a first category of content;

incrementing a counter for accessed content of the first category;

if the counter exceeds a threshold, sending an alert to the remote monitor as if the accessed content belongs to a second category of content.

14. The method of claim 13, wherein the first category comprises mildly unacceptable content, and the second category comprises very unacceptable content.

15. The method of claim 14, further comprising:

sending an alert to a remote monitor based at least in part on the category identified for the accessed content.

16. The method of claim 9, further comprising:

monitoring content of the monitored network accessed by the device;

identifying types of content being accessed based at least in part on applying rules for identifying suggestive content or adult content;

determining whether multiple instances of suggestive content have been recognized in the monitored content; and

if so, sending an alert to a remote monitor indicating the multiple instances, and if not, sending the alert to a user of the device warning of accessing suggestive content.

17. An article comprising a machine-accessible media having associated data, wherein the data, when accessed, results in a machine performing:

initializing a device to be monitored;

blocking access to a monitored network;

confirming a security layer for the device is operational;

confirming ability to send an alert to a remote monitor; and

unblocking access to the monitored network if the security layer is operational and the ability to send the alert is confirmed.

18. The article of claim 17 wherein the machine-accessible media further includes data, when accessed, results in the machine performing:

determining an attempt by the device to access a monitored network; and

confirming the attempt is from a valid network interface of the device.

19. The article of claim 17 wherein the machine-accessible media further includes data, when accessed, results in the machine performing:

monitoring content of the monitored network that is accessed by the device;

applying a content recognizer to the monitored content, the content recognizer configured to identify unacceptable content within the monitored content;

if unacceptable content is recognized, issuing an alert.

20. The article of claim 17 wherein the machine-accessible media further includes data, when accessed, results in the machine performing:

monitoring content of the monitored network accessed by the device;

categorizing the accessed content;

determining the accessed content corresponds to a first category of content;

incrementing a counter for accessed content of the first category;

if the counter exceeds a threshold, sending an alert to the remote monitor as if the accessed content belongs to a second category of content.

21. The article of claim 17 wherein the machine-accessible media further includes data, when accessed, results in the machine performing:

monitoring content of the monitored network accessed by the device;

identifying types of content being accessed based at least in part on applying rules for identifying suggestive content or adult content;

determining whether multiple instances of suggestive content have been recognized in the monitored content; and

if so, sending an alert to a remote monitor indicating the multiple instances, and if not, sending the alert to a user of the device warning of accessing suggestive content.