Network connected device protection

• US 5,630,058 A
• Filed: 10/13/1994
• Issued: 05/13/1997
• Est. Priority Date: 10/13/1994
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Zalph, Walter N., Mosley, Joseph M.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Palys, Joseph E.
• Application Number:
  US08/322,627
• Time in Patent Office: 943 Days
• Field of Search: 395/187.01, 395/186, 395/185, 395/182.02, 395/183.19, 395/185.01, 395/183.01, 371/20.1, 371/20.5, 371/20.6
• US Class Current: 726/35
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 11/3093 Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
• CPC Class Codes: G06F 11/327 Alarm or error message display

Abstract

A network protection method and apparatus are disclosed for alerting an operator when a terminal device is disconnected from the network. A network controller adapter is connected to a network control computer. The network controller periodically stops normal data communication and scans some or all of the network ports to ascertain the present and absent status of a terminal device at each port. Status is detected by passing a current through a port and measuring the feedback voltage. If the status changes between scans, an operator is alerted by sounding an alarm at the network control computer or by other steps such as dialing a telephone number and transmitting a stored message or by transmitting an alarm message over the network to one of the terminal devices such as a personal computer.

Claims

1. A network controller comprising:

a security signal generator for periodically providing a security signal on at least one port of said network, said port performing normal data transfers between said periods when said security signal is provided;

a security sensor connected to said port for sensing during one period, a first feedback signal from said port, said first feedback signal being a response by a normal impedance of a terminal device to said security signal without regard to operation of said terminal device and providing a first security data during said one period, said security sensor sensing during another period, a second feedback signal when a terminal device is not connected to said port, and providing a second security data during said another period;

security logic connected to said sensor and responsive to said sensor for comparing said first security data with said second security data in order to determine if said terminal device has been removed from said port and to determine if said terminal device has been added to said port; and

an alarm connected to said security logic and responsive to said security logic for alerting an operator when said security logic has determined that said terminal device has been removed from said port and when said security logic has determined that said terminal device has been added to said port.

2. The network controller of claim 1 wherein:

said security signal generator is a current generator; and

said security signal sensor is a voltage sensor.

3. The network controller of claim 1 wherein said security logic further comprises:

a comparator for comparing said feedback signals with a reference signal to generate said security data for said port;

register control logic connected to said comparator for storing an identification of said port and for storing said security data.

4. The network controller of claim 3 further comprising:

comparison logic in said security logic for comparing said security data for said port with a previous security data for said port and determining that said terminal device has been disconnected from said port when said security data represents a second feedback signal and said previous security data represents a first feedback signal.

5. The method of controlling a network comprising the steps of:

periodically providing a security signal on at least one port of said network, said port performing normal data transfers between said periods when said security signal is provided;

sensing during one period, a first feedback signal from said port, said first feedback signal being a response by a normal impedance of a terminal device to said security signal without regard to operation of said terminal device and providing a first security data during said one period, said security sensor sensing during another period, a second feedback signal when a terminal device is not connected to said port, and providing a second security data during said another period;

responding to said sensor and comparing said first security data with said second security data in order to determine if said terminal device has been removed from said port and to determine if said terminal device has been added to said port; and

alerting an operator when said security logic has determined that said terminal device has been removed from said port and when said security logic has determined that said terminal device has been added to said port.

6. The method of claim 5 further comprising the steps of:

comparing said feedback signals with a reference signal to generate said security data for said port;

storing an identification of said port and storing said security data.

7. The method of claim 6 further comprising the steps of:

comparing said security data for said port with a previous security data for said port and determining that said terminal device has been disconnected from said port when said security data represents a second feedback signal and said previous security data represents a first feedback signal.