SECURITY ENHANCEMENTS FOR PERVASIVE DEVICES

• US 20070033401A1
• Filed: 09/26/2006
• Published: 02/08/2007
• Est. Priority Date: 01/16/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Moore, Scott, Kulack, Frederick
• Granted Patent: US 7,290,136 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A method, apparatus, and program product for tiered, multi-state intelligent detection and enforcement of security on a pervasive device is provided. The method/apparatus first monitors the pervasive device for the presence of a security identifier, then establishes a current security level chosen from a plurality of security levels for the pervasive device based on the presence of the security identifier.

Claims

1. A method for providing tiered, multi- stage intelligent detection and enforcement of security on a pervasive device, the method comprising the steps of:

monitoring the pervasive device for the presence of a security identifier; and

establishing a current security level chosen from a plurality of security levels for the pervasive device based on the presence of the security identifier.

2. The method of claim 1, wherein the security identifier is an identification signal broadcast by an indicator device in proximity to the pervasive device.

3. The method of claim 2, wherein the step of monitoring the pervasive device for the presence of a security identifier further comprises the steps of:

periodically detecting the presence of the identification signal on a predetermined time interval; and

measuring the elapsed time from the last detection of the identifier signal.

4. The method of claim 3, wherein the step of establishing a current security level chosen from a plurality of security levels for the pervasive device based on the presence of the security identifier further comprises the steps of:

comparing the elapsed time from the last detection of the identification signal to one or more predefined threshold levels; and

determining the current security level for the pervasive device based upon where the elapsed time falls within the one or more predefined threshold levels.

5. The method of claim 4, wherein the step of determining the current security level for the pervasive device based upon where the elapsed time falls within the one or more predefined threshold levels further comprises the step of:

adjusting the amount of identification information required to be provided by a user to access the device based upon the current security level.

6. The method of claim 5, wherein the pervasive device is at a low risk security level if the elapsed time from the last detection of the identification signal is less than a first threshold value.

7. The method of claim 6, wherein a user of the pervasive device is not required to enter a password to use the device when the pervasive device is at the low risk security level.

8. The method of claim 6, wherein the pervasive device is at an elevated risk security level if the elapsed time from the last detection of the identification signal is greater than the first threshold value.

9. The method of claim 8, wherein if the pervasive device is at the elevated risk security level, the detection of the identification signal returns the device to the low risk security level.

10. The method of claim 9, wherein a user of the pervasive device is required to enter a user identifier to access sensitive user information within the pervasive device when the pervasive device is at the elevated risk security level.

11. The method of claim 10, wherein a failure to successfully enter the user identifier when the pervasive device is at the elevated risk security level causes the device to assume an even higher risk security level.

12. The method of claim 11, wherein the even higher risk security level requires the user to enter a complex user identifier in order to access sensitive user information within the pervasive device.

13. The method of claim 12, wherein if the pervasive device is at the even higher risk security level, the detection of the identification signal returns the device to the low risk security level.

14. The method of claim 13, wherein a failure to successfully provide the complex user identifier to the pervasive device causes the pervasive device to enter an exploit security level.

15. The method of claim 14, wherein the pervasive device enters an exploit security level if the number of identification signals received within a predetermined time period exceeds a predetermined threshold.

16. The method of claim 15, wherein if the device is at exploit level, and the elapsed time since the last detection of the identification signal exceeds a second threshold level, user sensitive information on the pervasive device is destroyed.

17. The method of claim 1, wherein the security identifier is a user password.

18. The method of claim 17, wherein failure to enter a successful user password in a predetermined number of retries increases the security level of the pervasive device.

19. The method of claim 18, wherein as the security level of the pervasive device increases, the complexity of the password correspondingly increases.

20. The method of claim 2, wherein the identification signal broadcast by the indicator device is an encrypted identification signal.

21. The method of claim 2, wherein the indicator device is an active indicator device.

22. The method of claim 2, wherein the indicator device is a passive indicator device by a user to access the device based upon the current security level.