Integral security apparatus for remotely placed network devices

• US 20060220850A1
• Filed: 04/04/2005
• Published: 10/05/2006
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Bowser, Robert, Theobold, David
• Granted Patent: US 7,295,112 B2
• Time in Patent Office: Days
• US Class Current: 340/568.100
• CPC Class Codes: G08B 13/1418 Removal detected by failure in electrical connection between the appliance and a control centre, home control panel or a power supply
• CPC Class Codes: G08B 25/01 characterised by the transmission medium

Abstract

Integral electronic security is provided for a remotely placed network device to reduce the risk of theft, vandalism, or tampering. Sensors monitor the environment surrounding the remotely placed network device. When tampering is detected, a message is sent to a monitoring station. Optionally, the network device can clear its own configuration to prevent the loss of sensitive data.

Claims

1. An apparatus for providing electronic security to a network device, comprising:

a sensor;

a signal conditioning module comprising logic for processing a signal sent by the sensor, the signal indicative of tampering; and

a motherboard comprising a central processing unit responsive to the signal conditioning module receiving the signal indicative of tampering to send a message to a monitoring device.

2. An apparatus according to claim 1, wherein the signal conditioning module is located on the motherboard of the network device.

3. An apparatus according to claim 1, wherein the signal conditioning module is located between the sensor and the motherboard.

4. An apparatus according to claim 1, wherein the central processing unit is further responsive to the signal conditioning module to delete data from a non-volatile memory.

5. An apparatus according to claim 4, wherein the non-volatile memory contains configuration data for the network device.

6. An apparatus according to claim 5, wherein the configuration data comprises a key used by the network device to communicate on the network.

7. An apparatus according to claim 5, wherein the central processing unit is responsive to multiple alarm levels, the central processing unit sending the message to the monitoring device responsive to a first alarm level and to delete data from the non-volatile memory responsive to a second alarm level.

8. An apparatus according to claim 1, wherein the sensor is at least one of the group consisting of

a passive infrared detector;

a retro-reflective sensor;

a tilt switch;

an accelerometer;

a lever switch; and

a field sensor for detecting a human body.

9. An apparatus according to claim 1, wherein the logic for processing a signal sent by the sensor comprises at least one of:

logic for de-bouncing the signal;

logic to digitize the signal; and

logic to determine whether the signal has exceeded a predetermined threshold.

10. A computer-readable medium of instructions, comprising:

signal conditioning means coupled to a sensing means and responsive to signals sent by a sensing means;

a processing means responsive to the signal conditioning means;

wherein the signal conditioning means determines from signals sent from the sensing means when a condition indicative of tampering exists, the signal conditioning means responsive to notifying the processing means of the condition indicative of tampering, and the processing means responsive to notification of the condition indicative of tampering to send an alarm signal to an external monitoring station.

11. A computer-readable medium of instructions according to claim 10, wherein the signal conditioning means and processing means are located on a motherboard within the network device.

12. A computer-readable medium of instructions according to claim 10, wherein the processing means is further responsive to the condition indicative of tampering to clear data from a non-volatile memory.

13. A computer-readable medium of instructions according to claim 12, wherein the non-volatile memory contains configuration data for the network device.

14. A computer-readable medium of instructions according to claim 13, wherein the configuration data comprises a key used by the network device to communicate on the network.

15. A computer-readable medium of instructions according to claim 10, wherein the sensing means comprises at least one of the group consisting of

a passive infrared detector;

a retro-reflective sensor;

a tilt switch;

an accelerometer;

a lever switch; and

a field sensor for detecting a human body.

16. An apparatus according to claim 10, the signal conditioning means further comprises:

means for de-bouncing the signal; and

means for digitizing the signal.

17. An apparatus according to claim 16, wherein the signal conditioning means further comprises means for determining whether the signal has exceeded a predetermined threshold.

18. A method for implementing network security for a network device coupled to a network, comprising:

receiving a signal from a sensor indicative of an alarm event;

sending an alarm message to a remote monitoring station coupled to the network; and

deleting data from a non-volatile memory coupled to the network device.

19. A method according to claim 18, wherein the non-volatile memory contains configuration data for the network device.

20. A method according to claim 19, wherein the configuration data comprises a cryptographic key used by the network device to communicate on the network.