Security Enhancements for Pervasive Devices

• US 20080072330A1
• Filed: 09/27/2007
• Published: 03/20/2008
• Est. Priority Date: 01/16/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Moore, Scott, Kulack, Frederick
• Granted Patent: US 7,865,951 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A method, apparatus, and program product for tiered, multi-state intelligent detection and enforcement of security on a pervasive device is provided. The method/apparatus first monitors the pervasive device for the presence of a security identifier, then establishes a current security level chosen from a plurality of security levels for the pervasive device based on the presence of the security identifier.

Claims

1. A method for providing tiered, multi-stage intelligent detection and enforcement of security on a pervasive device, the method comprising the steps of:

monitoring the pervasive device for the presence of a security identifier, wherein the security identifier is an identification signal broadcast by an indicator device in broadcast proximity to the pervasive device, the monitoring step further comprising;

periodically detecting the presence of the identification signal on a predetermined time interval; and

measuring the elapsed time from the last detection of the identifier signal; and

establishing a current security level chosen from a plurality of security levels for the pervasive device based on the presence of the security identifier, the establishing step further comprising;

comparing the elapsed time from the last detection of the identification signal to one or more predefined threshold levels; and

determining the current security level for the pervasive device based upon where the elapsed time falls within the one or more predefined threshold levels.

2. The method of claim 1, wherein the step of determining the current security level for the pervasive device based upon where the elapsed time falls within the one or more predefined threshold levels further comprises the step of:

adjusting the amount of identification information required to be provided by a user to access the device based upon the current security level.

3. The method of claim 2, wherein the pervasive device is at a low risk security level if the elapsed time from the last detection of the identification signal is less than a first threshold value.

4. The method of claim 3, wherein a user of the pervasive device is not required to enter a password to use the device when the pervasive device is at the low risk security level.

5. The method of claim 3, wherein the pervasive device is at an elevated risk security level if the elapsed time from the last detection of the identification signal is greater than the first threshold value.

6. The method of claim 5, wherein if the pervasive device is at the elevated risk security level, the detection of the identification signal returns the device to the low risk security level.

7. The method of claim 6, wherein a user of the pervasive device is required to enter a user identifier to access sensitive user information within the pervasive device when the pervasive device is at the elevated risk security level.

8. The method of claim 7, wherein a failure to successfully enter the user identifier when the pervasive device is at the elevated risk security level causes the device to assume an even higher risk security level.

9. The method of claim 8, wherein the even higher risk security level requires the user to enter a complex user identifier in order to access sensitive user information within the pervasive device.

10. The method of claim 9, wherein if the pervasive device is at the even higher risk security level, the detection of the identification signal returns the device to the low risk security level.