Computer system protection

• US 20080313725A1
• Filed: 06/12/2007
• Published: 12/18/2008
• Est. Priority Date: 06/12/2007
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Thiagarajan, Ashwin
• Granted Patent: US 8,578,469 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss

Abstract

Methods, systems, and computer program products for computer system protection are provided. Embodiments protect against unauthorized access to information on stolen and/or illegally transported computer systems. Embodiments include locking of functionalities within a computer system when the computer system moves outside a designated area. Embodiments include limiting access to functionalities within the computer system based on the location of the computer system. Embodiments of the present invention include allowing variable levels of access protection depending on the location of the computer system.

Claims

1. A method for protecting access to information on a computer system having a first level of authentication, comprising:

detecting when said computer system moves outside a designated area; and

communicating a token with said computer system upon its moving outside the designated area;

wherein said token triggers a second level authentication when said computer system is subsequently started outside the designated area, and wherein failure of said second level of authentication results in locking of functionalities within said computer system.

2. The method of claim 1, wherein said communicating step comprises communication with radio frequency (RF) communication components integrated within said computer system.

3. The method of claim 2, wherein said RF communication components are integrated within a LAN On Motherboard (LOM) network adapter, said adapter integrated within a motherboard of said computer system.

4. The method of claim 2, wherein said communicating step comprises communicating with said RF communication components regardless of the power mode of said computer system at the time of communication.

5. The method of claim 2, wherein said communication components comprise a Global Positioning System (GPS) receiver.

6. The method of claim 1, wherein said detecting step comprises comparing global positioning coordinates of said computer system against a range of global positioning coordinates that defines the designated area.

7. The method of claim 1, wherein said communicating step comprises communicating said token with said computer system when said computer system is within the designated area.

8. The method of claim 7, wherein said token communicated within the designated area is activated when said computer system moves outside the designated area.

9. The method of claim 2, wherein said RF communication components comprise a wireless radio transceiver.

10. The method of claim 1, wherein said detecting step is performed by a centralized surveillance system.

11. The method of claim 1, wherein said detecting step comprises detecting a code associated with said computer system.

12. The method of claim 1, wherein said communicating step comprises communicating said token with said computer system when said computer system is outside the designated area.

13. The method of claim 1, wherein said communicating step comprises downloading said token inside the designated area to said computer system and activating the token outside the designed area when said computer system is outside the designated area.

14. The method of claim 1, further comprising:

registering in a database a plurality of answers to a respective plurality of secret questions, wherein said answers are selected by and associated with a legitimate user of said computer system; and

registering in said database a plurality of user passwords selected by said legitimate user, wherein each of said passwords is associated with one corresponding pair of secret question and respective answer.

15. The method of claim 14, further comprising:

generating said token based on one or more of a current password associated with said legitimate user and an exit time of said computer system from the designated area,

wherein said token includes a secret question from said plurality of secret questions, a respective answer from said plurality of answers, and a password associated with said secret question and answer.

16. The method of claim 15, further comprising upon a starting of said computer system:

(a) prompting for and receiving user input to said current password associated with said legitimate user;

(b) verifying said user input to said current password;

(c) prompting for and receiving user input to said secret question included in said token, if password verification is successful in step (b);

(d) verifying said user input to said secret question using said respective answer included in said token;

(e) prompting for and receiving user input to said password associated with said secret question and answer, if verification is successful in step (d); and

(f) verifying said user input to said associated password; and

(g) allowing user access to functionalities of said computer system if said verification in step (f) is successful.

17. The method of claim 16, wherein said second level of authentication includes steps (c) through (f).

18. The method of claim 16, further comprising:

(h) locking of functionalities within said computer system if any of said verifying steps is successively failed for a determined number of times.

19. The method of claim 1, wherein said second level of authentication can be bypassed by docking said computer system to an associated network system within said designated area.

20. The method of claim 1, wherein said locking of functionalities within said computer system includes blocking access to one or more of the operating system, hard drives, and external drives associated with said computer system.

21. The method of claim 1, wherein said token triggers limited access to certain functionalities within said computer system when said computer system moves outside the designated area, regardless of the result of said second level authentication.

22. The method of claim 1, wherein said certain functionalities include one or more of printing documents, network access, and access to external drives.

23. The method of claim 1, wherein said first level of authentication acts both inside and outside the designated area.

24. A system for protecting access to information on a computer system having a first level of authentication, comprising:

a centralized surveillance system configured to detect when said computer system moves outside a designated area;

a database configured to store authentication information associated with a legitimate user of said computer system; and

a radio frequency (RF) communication system configured to communicate a token with said computer system upon its moving outside the designated area;

wherein said token includes authentication information from said database and is configured to trigger a second level of authentication when said computer system is subsequently started outside the designated area.

25. The system of claim 24, further comprising:

a radio frequency (RF) transceiver integrated within a LAN On Motherboard (LOM) network adapter, integrated within a motherboard of said computer system.

26. The system of claim 24, further comprising:

a Global Positioning System (GPS) receiver integrated within said computer system, wherein said GPS receiver is configured to generate position coordinates of said computer system and download said token if said computer system is outside said designated area.

27. The system of claim 24, wherein said database includes a plurality of answers to a respective plurality of secret questions, said answers selected by and associated with said legitimate user of said computer system.

28. The system of claim 27, wherein said database further includes a plurality of user passwords selected by said legitimate user, and wherein each of said passwords is associated with one corresponding pair of said secret questions and answers.

29. The system of claim 24, wherein said centralized surveillance system comprises:

a detector configured to generate detection signals when said computer system moves outside the designated area; and

a controller coupled to said detector and configured to receive said detection signals from said detector.

30. The system of claim 24, wherein said controller is further configured to communicate with said database and to retrieve authentication information associate with said computer system.

31. The system of claim 24, wherein said controller is further configured to control said RF communication system to communicate with said computer system.