CONTROL ACCESS TO FUNCTION OF INFORMATION DEVICE

• US 20170154172A1
• Filed: 11/27/2015
• Published: 06/01/2017
• Est. Priority Date: 11/27/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: HASEGAWA, Tohru, OISHI, Yutaka, TAKAYAMA, Masao
• Granted Patent: US 10,049,194 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication

Abstract

A control system for controlling access to a protected function of an information device is disclosed. The control system includes a communication device configured to communicate with the information device entering an area. The control system also includes a database configured to store a relationship between the information device and a registered user. The control system further includes a control computer communicably coupled to the communication device. The control computer is configured to identify a user entering the area with the information device. The control computer is also configured to determine whether or not to permit access to the protected function based on the identified user and the registered user for the information device. The control computer is further configured to control the information device via the communication device so as to unlock or lock the protected function based on a result of determination whether or not to permit access.

Claims

1. A control system for controlling access to a protected function of an information device, comprising:

a communication device configured to communicate with the information device entering an area;

a database configured to store a relationship between the information device and a registered user;

a control computer communicably connected to the communication device, the control computer being configured to;

identify a user entering the area with the information device;

determine whether or not to permit access to the protected function based on the identified user and the registered user for the information device; and

control the information device via the communication device so as to unlock or lock the protected function based on a result of determination whether or not to permit access.

2. The control system of claim 1, wherein the control computer is further configured to:

generate a new identifier used to identify the information device;

send the new identifier to the information device via the communication device; and

override the new identifier in the database for the information device.

3. The control system of claim 1, wherein a user entering a predetermined section by passing through the area is subjected to identification and the protected function of the information device entering the predetermined section with the user is controlled to be unlocked in response to determining that the access is to be permitted.

4. The control system of claim 1, wherein a user exiting from a predetermined section by passing through the area is subjected to identification and the protected function of the information device exiting from the predetermined section with the user is controlled to be locked.

5. The control system of claim 1, wherein the control system further comprises:

a transmit device in communication with the control computer, the transmit device being configured to transmit a confirmation signal so as to extend an effective time during which access to the protected function is permitted while the information device is in a predetermined section where the information device enters by passing through the area.

6. The control system of claim 5, wherein the registered user includes an owner, the transmit device being further configured to:

terminate the confirmation signal to extend the effective time for the information device related to an owner in response to detecting exit of the owner from the predetermined section.

7. The control system of claim 1, wherein the registered user includes a plurality of necessary owners, and access to the protected function is denied if any one of the necessary owners is out of a predetermined section.

8. The control system of claim 1, wherein the registered user includes a plurality of owners, and access to the protected function is permitted if any one of the owners is staying in a predetermined section.

9. The control system of claim 1, wherein the registered user includes one or more white-listed users, and access to the protected function is denied if any user other than the one or more white-listed users is staying in a predetermined section.

10. The control system of claim 1, wherein the registered user includes one or more black-listed users, and access to the protected function is denied if any one of the one or more black-listed users is staying in a predetermined section.

11. The control system of claim 1, wherein the control system further comprises:

an alarm device in communication with the control computer, the alarm device being configured to alarm if the information device exits from a predetermined section by passing through the area even though owner is staying in the predetermined section and/or to alarm if owner exit from the predetermined section even though the information device related to the owner is staying in the predetermined section.

12. The control system of claim 1, wherein the protected function is a secured storage region on the information device, identification of users is performed by using an identification badge assigned to each user who is allowed to access to the secured storage region of the information device and the communication device is a wireless communication device.

13. The control system of claim 1, wherein the communication device includes a plurality of communication devices, each being provided in each section among a plurality of sections, the database is further configured to store relationship between the information device and an allowable section, and access to the protected function is denied if the information device is not staying in a corresponding allowable section.

14. A method for controlling access to a protected function of an information device by a control computer, the method comprising:

identifying a user entering an area with the information device;

receiving an identifier from the information device entering the area by a communication device communicably connected to the control computer;

determining whether or not to permit access to the protected function based on the identified user and a registered user in relation to the identifier; and

transmitting a control signal to the information device by the communication device so as to unlock or lock the protected function based on a result of determination whether or not to permit access.

15. The method of claim 14, wherein the method further comprises:

generating a new identifier used to identify the information device;

sending the new identifier to the information device via the communication device; and

overriding the new identifier for the information device.

16. A control computer for controlling access to a protected function of an information device, the control computer being configured to perform the method of claim 14.

17. A computer program product for controlling access to a protected function of an information device, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform the method of claim 14.

18. An information device, comprising:

a communication device configured to communicate with a control computer in entering an area;

a protected module, access to the protected module being controlled by the control computer;

a control module configured to block access to the protected module if the protected module is locked; and

an interface for accessing the protected module via the control module;

wherein the control module is further configured to;

send an identifier used to identify the information device to the control computer by the communication device;

receive a control signal from the control computer by the communication device; and

unlock or lock the protected module in response to receiving the control signal.

19. The information device of claim 18, wherein the control module is further configured to:

receive new identifier used to identify the information device; and

set the new identifier to the information device in order to send the new identifier for next time.

20. The information device of claim 18, wherein the information device further comprises:

a counter configured to count down an effective time during which access to the protected module is permitted in response to being powered on;

wherein the control module is further configured to refresh the counter in response to receiving a confirmation signal, the confirmation signal being transmitted from a transmit device communicably connected to the control computer while the information device is in a predetermined section where the information device enters by passing through the area.