REMOTE COMPUTER LOCKDOWN

• US 20090083555A1
• Filed: 09/26/2007
• Published: 03/26/2009
• Est. Priority Date: 09/26/2007
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Locker, Howard, Springfield, Randall Scott, Cromer, Daryl, Challener, David Carroll
• Granted Patent: US 9,792,453 B2
• Time in Patent Office: Days
• US Class Current: 713/310
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A method and system are disclosed for placing a computer in a safe and secure lock down state from a remote location using a remote command device such as a cellular telephone. The method and system includes optional security provisions before restarting the computer.

Claims

1. A method comprising:

receiving at a network client system, having an a unique code associated with said client system, by way of a telephone network, a remotely transmitted data packet comprising a free text potion;

determining if said free text portion of said remotely transmitted data packet includes said unique code associated with said client system; and

locking-down said network client system if said data packet comprises said unique code associated with said client system.

2. The method as described by claim 1 wherein said packet of remotely transmitted data selected from the group consisting of a Magic Packet and a short text message.

3. The method as described by claim 1 wherein said remotely transmitted data packet is data produced by a communication device.

4. The method as described by claim 1 wherein said unique code associated with said client system is selected from the group consisting of a telephone number and a unique code associated with a telephone.

5. The method as described by claim 1 wherein said locking-down is a transition from a S0 (operating system running) state to state chosen from a group consisting of S4 (hibernate) state and S5(off) state.

6. The method as described by claim 1 wherein said locking-down is transitioning from an S3(suspend) state initially to an S0 (operating system running) state, and subsequently to a state chosen from a group consisting of S4 (hibernate) state and S5(off) state.

7. The method as described by claim 1, further comprising:

determining if said remotely transmitted data packet includes an instruction specifying a security policy to be followed for restarting of said client network system;

setting a flag signifying that said packet of remotely transmitted data has been received; and

implementing said security policy.

8. The method in accordance with claim 7 where said security policy requires use of security password to restart said client network system.

9. The method in accordance with claim 7 where said security policy provides for remote setting of a security password.

10. Apparatus comprising:

an electronic memory which stores data and executable software code;

a network interface component which detects said remotely transmitted data packet, and has a communications network interface;

a processor, operatively connected to said network interface component, which has access to a unique code associated with the apparatus, and which executes said executable software code, determines if a remotely transmitted data packet has been received, and locks-down the apparatus if said remotely transmitted data packet includes a code which is cognizably related to said unique code associated with the apparatus.

11. Apparatus, in accordance with claim 10, where the said network interface component is chosen from a group consisting of a network interface card and a communications modem.

12. Apparatus, in accordance with claim 10, where the said processor further

determines if said remotely transmitted data packet includes instruction specifying security policy to be followed for restarting of said client network system;

sets a flag signifying that said packet of remotely transmitted data has been received; and

implements said security policy.

13. Apparatus, in accordance with claim 10, where the said security policy requires use of security password to restart said client network system.

14. Apparatus, in accordance with claim 10, where the said security policy provides for remote setting of security password.

15. A computer-usable medium having computer readable instructions stored thereon for execution by a processor to perform comprising:

receiving at a network client system, having an a unique code associated with said client system, by way of a telephone network, a remotely transmitted data packet comprising a free text potion;

determining if said free text portion of said remotely transmitted data packet includes said unique code associated with said client system; and

locking-down said network client system if said data packet comprises said unique code associated with said client system.

16. A computer-usable medium, in accordance with claim 15, wherein s id locking-down is transitioning from a S0 (operating system running) state to state chosen from a group consisting of S4 (hibernate) state and S5(off) state.

17. A computer-usable medium, in accordance with claim 15, wherein said locking-down is transitioning from an S3(suspend) state initially to an S0 (operating system running) state, and subsequently to a state chosen from a group consisting of S4 (hibernate) state and S5(off) state.

18. A computer-usable medium, in accordance with claim 15, wherein said method further comprises:

determining if said remotely transmitted data packet includes instruction that specifies a security policy to be followed for restarting of said client network system;

setting a flag signifying that said remotely transmitted data packet has been received; and

implementing said security policy.

19. A computer-usable medium, in accordance with claim 18, wherein said security policy requires use of security password to restart said client network system.

20. A computer-usable medium, in accordance with claim 18, wherein said security policy provides for remote setting of security password.