Method and apparatus for access to a computer unit

• US 20100082827A1
• Filed: 09/30/2009
• Published: 04/01/2010
• Est. Priority Date: 09/30/2008
• Status: Active Grant

• Current Assignee: Rosberg System AS, Walker Digital LLC (Walker Innovation Inc. (f/k/a Patent Properties, Inc.))
• Original Assignee: Rosberg System AS
• Inventors: Evensen, Cato, Rosberg, Odd Helge
• Granted Patent: US 10,754,806 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 13/387 for adaptation of different data processing systems to different peripheral devices, e.g. protocol converters for incompatible systems, open system
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks

Abstract

A computer unit (10) arranged to establish contact between itself and a centralized server (12), in where the computer unit comprises means to establish a networked connection (22) with said server (12), and wake up means in case the computer unit is in an off or sleeping state, and optionally if the computer unit is on. The computer unit (10) comprises or is connected to a mobile unit that is active whether the computer unit is in off, in hibernation or sleeping state, or on state, and in where the mobile unit is adapted to receive a unique request from the server (12), via a mobile telecommunication connection (20), and if the request is identified as genuine, the computer unit (10) is adapted to establish a new and separate networked connection (20; 22) to the server (12).

Claims

1. A computer unit (10) arranged to establish contact between itself and a centralized server (12), in where the computer unit comprises means to establish a networked connection (22) with said server (12), and wake up means in case the computer unit is in an off or sleeping state, and optionally if the computer unit is on,

wherein the computer unit (10) comprises or is connected to a mobile unit that is active whether the computer unit is in off, in hibernation or sleeping state, or on state, and in where the mobile unit is adapted to receive a unique request from the server (12), via a mobile telecommunication connection (20), and if the request is identified as genuine, the computer unit (10) is adapted to establish a new and separate networked connection (20;

22) to the server (12).

2. A computer unit in accordance with claim 1, wherein the mobile unit is arranged to be connected via the mobile telecommunication connection as a service comprising GSM, TDMA, CDMA, PDC, PHS, 3G, HSDPA, WiMAX, Wifi or similar technologies.

3. A computer unit in accordance with claim 1, wherein pre-programmed information about establishment of said network connection (20;

22) with the server is stored in a secure way in the computer units hardware, such as e.g. TPM chip.

4. A computer unit in accordance with claim 3, wherein the computer unit (10), upon receipt of the request, is arranged to reject the connection, and if the request is identified as genuine, to set up a new connection to address or addresses programmed into said storage in the computer units hardware, in order to direct external communication to no other destinations than the stored ones.

5. A computer unit in accordance with claim 1, wherein the computer unit (10), upon receipt of the request, is arranged to reject the connection, and if the request is identified as genuine, to set up a new connection to address or addresses pre-programmed into said mobile unit, in order to direct external communication to no other destinations than the stored ones.

6. A computer unit in accordance with claim 1, wherein the motherboard of the computer unit (10) is locked when the computer is in an off state, and/or that the main storage for user data (HDD/SSD or similar) is locked in the same manner, and/or that the user data can be encrypted.

7. A computer unit in accordance with claim 1, wherein the computer unit (10) is a PC, notebook, part of a server, or installed in any vehicle, ship, or other computerized equipment.

8. A computer unit in accordance with claim 1, wherein the computer unit (10) comprises equipment for Wake on LAN (WoL) and to establish said networked connection (22) with the server (12), in where the mobile unit is active even if the computer unit is in an off state, as the mobile unit is adapted to receive a telephonic request from the server (12) via the mobile telecommunication connection (20), such as 3G, HSDPA, Wifi or similar, and if the request is identified as genuine, the computer unit (10) is arranged to establish a new and separate networked connection (20;

22) to the server (12).

9. Method to establish contact between a computer unit (10) and a centralized server (12), in where the computer unit comprises wake up means in case the computer unit is in an off or sleeping state, and optionally if the computer unit is on, and which is arranged to establish a networked connection (22) with said server (12), wherein said method comprises the following steps:

to send a mobile based request to the computer unit (10) from the server (12), via a mobile telecommunication connection (20), containing a unique identifier,

to receive the request by a mobile unit in or connected to the computer unit (10), whereupon the request is being identified, and

the computer unit (10) is establishing a new and separate network connection (20;

22) to the server (12), if the request is identified as authentic, otherwise the request is rejected.

10. Method in accordance with claim 9, wherein all requests are being rejected, even though the request is identified as authentic.

11. Method in accordance with claim 9, wherein information regarding the networked connection with the server is being stored in the hardware of the computer unit.

12. Method in accordance with claim 9, wherein the initial connection for security reasons is terminated, whereupon the new connection is established, if the request is identified as genuine.

13. Method in accordance with claim 9, wherein the unique identifier is a caller-ID, or other unique identifiers on mobile networks.

14. Method in accordance with claim 9, wherein the request is a digital, analog or voice signal based upon wireless telecommunication.