Simultaneous Determination of a Computer Location and User Identification

• US 20130081137A1
• Filed: 09/23/2011
• Published: 03/28/2013
• Est. Priority Date: 09/23/2011
• Status: Active Grant

• Current Assignee: Arturo Geigel
• Original Assignee: Arturo Geigel
• Inventors: Geigel, Arturo
• Granted Patent: US 8,769,688 B2
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3058 Monitoring arrangements for monitoring environmental properties or parameters of the computing system or of the computing system component, e.g. monitoring of power, currents, temperature, humidity, position, vibrations thermal management in cooling arrangements of a computing system G06F1/206
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04W 12/121 Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices

Abstract

An apparatus including an intrusion detection arrangement and a location identification arrangement which ties digital information (i.e. transaction events such as parameters of information, database queries, transaction ranges, etc.) submitted to a computer system with the physical characteristics of the event such as the picture of the person(s) originating the information.

Claims

1. A network security system, comprising:

an intrusion detection device configured to detect suspicious network traffic based on predefined criteria;

a plurality of wireless signal generators distributed across the network, wherein each said wireless signal generator is associated with a particular area within the network;

a plurality of dynamically-oriented imaging devices, wherein each imaging device is configured to capture an image of the area associated with each wireless signal generator; and

a database configured to store the predefined criteria and the images of each area.

2. The network security system of claim 1, wherein each said wireless signal generator produces a signal, the intensity of which is measured by the intrusion detection device and recorded in the database.

3. The network security system of claim 2, wherein the intrusion detection device maps the intensity of each said signal with coordinates within each said particular area and said mapping is recorded in the database.

4. The network security system of claim 3, wherein the intrusion detection device is further configured to periodically map the intensity of each said signal to detect changes in the physical configuration of each particular area in response to variations in said intensity.

5. The network security system of claim 3, wherein the intrusion detection device identifies suspicious traffic by examining the payload portion of a message.

6. The network security system of claim 5, wherein the intrusion detection device retrieves an approximate location of an intruder device in response to the identification of said suspicious traffic.

7. The network security system of claim 6, wherein the approximate location is retrieved based on the coordinates recorded in the database.

8. The network security system of claim 7, wherein a dynamically-oriented imaging device located closest to the intruder device is activated and positioned to capture an image of said intruder device.

9. A wireless network security system,

comprising:

an intrusion detection device configured to intercept wireless network traffic and detect suspicious activity based on predefined criteria;

a plurality of wireless signal generators distributed across the network, wherein each said wireless signal generator is associated with a particular area within the network, and wherein each said wireless signal generator produces a signal, the intensity of which is continuously measured by the intrusion detection device;

a plurality of dynamically-oriented imaging devices, wherein each imaging device is configured to capture an image of the area associated with each said wireless signal generators; and

a database configured to store the predefined criteria, the intensity of the measured signal and the images of each area.

10. The wireless network security system of claim 9, wherein the predefined criteria includes at least one of:

a Computer Name, Property Number, MAC Address, IP Address, User Name, Index, and Computer Type.

11. The wireless network security system of claim 9, wherein the intrusion detection device continuously maps the intensity of each said signal with coordinates within each said particular area and said mapping is recorded in the database.

12. The wireless network security system of claim 11, wherein the intrusion detection device identifies suspicious traffic by examining the payload portion of a message.

13. The wireless network security system of claim 12, wherein the intrusion detection device retrieves an approximate initial location of an intruder device in response to the identification of said suspicious traffic.

14. The wireless network security system of claim 13, wherein retrieving the approximate initial location comprises identifying at least one of said wireless signal generators previously used to channel the suspicious traffic.

15. The wireless network security system of claim 13, wherein the intrusion device retrieves the approximate initial location upon sampling all signal strengths from the plurality of wireless signal generators.

16. The wireless network security system of claim 13, wherein the approximate initial location is retrieved based on the coordinates recorded in the database.

17. The wireless network security system of claim 16, wherein the dynamically-oriented imaging device located closest to the intruder device is activated and positioned to capture an image of said intruder device.

18. A network security method, comprising:

distributing a plurality of wireless signal generators across the network, wherein each of said wireless signal generators is associated with a particular area within the network;

capturing a first image of the area associated with each of said wireless signal generators, wherein said capturing comprises activating at least one dynamically-oriented imaging device;

detecting suspicious network traffic based on predefined criteria; and

storing the predefined criteria and the images of each area in a database, wherein each of said wireless signal generators produces a signal, the intensity of which is measured by an intrusion detection device and recorded in the database.

19. The network security method of claim 18, wherein the predefined criteria includes at least one of:

a Computer Name, Property Number, MAC Address, IP Address, User Name, Index, and Computer Type.

20. The network security method of claim 18, further comprising mapping the intensity of each said signal with coordinates within each said particular area and recording the results in the database.

21. The network security method of claim 20, further comprising periodically mapping the intensity of each said signal to detect changes in the physical configuration of each said particular area in response to variations in said intensity.

22. The network security method of claim 21, further comprising identifying suspicious traffic by examining the payload portion of a message.

23. The network security method of claim 22, further comprising retrieving an approximate location of an intruder device in response to the identification of said suspicious traffic.

24. The network security method of claim 23, wherein retrieving the approximate location comprises fetching the coordinates recorded in the database.

25. The network security method of claim 24, further comprising activating and positioning the dynamically-oriented imaging device located closest to the intruder device to capture an image of said intruder device.

26. The wireless network security method of claim 23, wherein retrieving the approximate initial location comprises identifying at least one of said wireless signal generator previously used to channel the suspicious traffic.

27. The network security method of claim 26, further comprising activating and positioning the dynamically-oriented imaging device located closest to the intruder device to capture an image of said intruder device.

28. The wireless network security method of claim 23, wherein retrieving the approximate initial location comprises sampling all signal strengths from the plurality of wireless signal generators.

29. The network security method of claim 28, further comprising activating and positioning the dynamically-oriented imaging device located closest to the intruder device to capture an image of said intruder device.