SYSTEMS, METHODS AND COMPUTER PRODUCTS FOR A SECURITY FRAMEWORK TO REDUCE ON-LINE COMPUTER EXPOSURE

• US 20090044249A1
• Filed: 08/10/2007
• Published: 02/12/2009
• Est. Priority Date: 08/10/2007
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wang, Hao, Shen, Jinmei
• Application Number:
  US11/837,012
• Publication Number:
  US 20090044249A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

Systems, methods and computer products for a security framework to reduce on-line computer exposure. Exemplary embodiments include a computer security method, including initiating a computer session on a first computer, receiving a grace period entry into the first computer, monitoring mouse and keyboard on the first computer activity during the computer session, monitoring long-running jobs initiated on the first computer during the computer session, monitoring authorized computer access of a plurality of computers to the first computer, determining which computers of the plurality of computers can access the first computer and for what time period and terminating computer traffic related to the first computer in response to an expiration of the grace period.

Claims

1. A computer security method, consisting of:

initiating a computer session on a first computer;

receiving a grace period entry into the first computer;

monitoring mouse and keyboard on the first computer activity during the computer session;

monitoring long-running jobs initiated on the first computer during the computer session;

monitoring authorized computer access of a plurality of computers to the first computer;

determining which computers of the plurality of computers can access the first computer and for what time period; and

terminating computer traffic related to the first computer in response to an expiration of the grace period.

2. The method as claimed in claim 1 wherein computer traffic related to the first computer is terminated in response to at least one of detecting no activity from the keyboard during the grace period and detecting no activity from the mouse during the grace period.

3. The method as claimed in claim 2 wherein computer traffic related to the first computer includes:

incoming traffic that terminates after the grace time of inactivity; and

outgoing traffic that terminates after the grace period of inactivity.

4. The method as claimed in claim 3 wherein incoming traffic includes external threats that can cause damage to the first computer and outgoing traffic includes data resident to the first computer that is subject to theft.

5. The method, as claimed in claim 4 further consisting of permitting access to the first computer from a service computer.

6. A computer security system, comprising:

a computer processor coupled to a memory having instructions for;

initiating a computer session on a first computer;

receiving a grace period entry into the first computer;

monitoring mouse and keyboard on the first computer activity during the computer session;

monitoring long-running jobs initiated on the first computer during the computer session;

monitoring authorized computer access of a plurality of computers to the first computer;

determining which computers of the plurality of computers can access the first computer and for what time period; and

terminating computer traffic related to the first computer in response to an expiration of the grace period, wherein the computer traffic related to the first computer is terminated in response to at least one of detecting no activity from the keyboard during the grace period and detecting no activity from the mouse during the grace period.

7. The system as claimed in claim 6 wherein computer traffic related to the first computer is terminated in response to at least one of detecting no activity from the keyboard during the grace period and detecting no activity from the mouse during the grace period, and wherein computer traffic related to the first computer includes incoming traffic that terminates after the grace time of inactivity and outgoing traffic that terminates after the grace period of inactivity.