Computer system for sending an alert signal over a network when a cover of said system has been opened

• US 5,945,915 A
• Filed: 11/06/1997
• Issued: 08/31/1999
• Est. Priority Date: 11/06/1997
• Status: Expired due to Term

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Dang, Thi N., Locker, Howard J., Cromer, Daryl C., Rhoades, David, Janick, Jan M.
• Primary Examiner(s): TONG, NINA C
• Application Number:
  US08/965,140
• Time in Patent Office: 663 Days
• Field of Search: 340/568.1, 340/571, 340/572.8, 340/686.1, 340/568.4, 340/687, 340/652
• US Class Current: 340/686.1
• CPC Class Codes: G06F 1/181 Enclosures for portable computers G06F1/1613
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G08B 29/046 prevention of tampering with detection circuits

Abstract

Described is a computer system which is coupled to a remote computer via a network cable. The computer system has a normally closed enclosure and is capable of securing data retained within the system against unauthorized access and notifying the remote computer when an unauthorized access has occurred. The computer system includes an erasable memory element mounted within the enclosure for selective activation to active and inactive states and for receiving and storing a security password when in the active state. A manually operable option switch is mounted within the enclosure. The option switch is manually settable by a user of the computer system for setting the memory element to the active and inactive states. A tamper detection switch is mounted within the enclosure and operatively connected with the memory element for detecting opening of the enclosure and for generating a tamper alert signal and clearing any stored security password from the memory element in response to any switching of the tamper switch. The computer system further includes a network connector which is operative to receive the tamper alert signal and upon so receiving, transmit an alert packet over the communication line to the remote computer. The alert packet contains an alert message and information which specifically identifies the computer system.

Claims

1. A computer system coupled to a remote computer via a data communication line and being capable of securing data retained within the system against unauthorized access and notifying said remote computer when an unauthorized access has occurred, said system comprising:

a normally closed enclosure,

an erasable memory element mounted within said enclosure for selective activation to active and inactive states and for receiving and storing a security password when in the active state,

a manually operable option switch mounted within said enclosure, said option switch being operatively connected with said erasable memory element and manually settable by a user of the computer system for setting said erasable memory element to the active and inactive states,

a tamper detection switch mounted within said enclosure and operatively connected with said erasable memory element for detecting opening of said enclosure and for generating a tamper alert signal and clearing any stored security password from said erasable memory element in response to any switching of said tamper detection switch,

a central processing unit mounted within said enclosure and operatively connected with said erasable memory element for controlling access to at least certain levels of data stored within the system by distinguishing between the active and inactive states of said memory element and between entry and non-entry of any stored security password,

a network connector in circuit communication with said CPU, said network connector being operative to receive said tamper alert signal and upon so receiving, transmit an alert packet over the communication line to said remote computer, said alert packet containing an alert message and information which specifically identifies said local computer system, and

said network connector being supplied with auxiliary power and being operative to receive said tamper alert signal and generate said alert packet regardless of a power state that said computer system is in.

2. The computer system of claim 1, wherein said network connector is a connector selected from the group consisting of a LAN adapter and a LAN subsystem.

3. The computer system of claim 1, wherein said security password is a privileged access password.

5. The computer system of claim 1, wherein said computer system is in an off state.

4. The computer system of clam 1, further including a logic circuit coupled to said tamper detection switch, said logic circuit being settable by a user between an enabled state and a disabled state,

wherein when said logic circuit is in the enabled state, said switching of said tamper detection switch clears said security password and wherein when said logic circuit is in said disabled state said switching of said tamper detection switch does not clear said security password.

6. A computer system coupled to a remote computer via a data communication line and being capable of securing data retained within the system against unauthorized access and notifying said remote computer when an unauthorized access has occurred, said system comprising:

a normally closed enclosure,

a first erasable memory element mounted within said enclosure for selective activation to active and inactive states and for receiving and storing a privileged access password when in the active state,

a manually operable option switch mounted within said enclosure and operatively connected with said first erasable memory element for setting said first erasable memory element to the active and inactive states,

a second erasable memory element mounted within said enclosure for receiving and storing data indicative of the state of said first erasable memory element and of correct entry of any stored privileged access password,

a tamper detection switch mounted within said enclosure and operatively connected with said second erasable memory element for detecting unauthorized opening of said enclosure and for generating a tamper alert signal and invalidating any privileged access password stored in said first erasable memory element in response to any switching of said tamper detection switch,

a central processing unit mounted within said enclosure and operatively connected with said erasable memory elements for controlling access to at least certain levels of data stored within the system by distinguishing between the active and inactive states of said first memory element and between entry and non-entry of any valid stored privileged access password,

a network connector in circuit communication with said CPU, said network connector being operative to receive said tamper alert signal and upon so receiving, transmit an alert packet over the communication line to said remote computer, said alert packet containing an alert message and information which specifically identifies said local computer system, and

said network connector being supplied with auxiliary power and being operative to receive said tamper alert signal and generate said alert packet regardless of a power state that said computer system is in.

7. The computer system of claim 6, wherein said network connector is a connector selected from the group consisting of a LAN adapter and a LAN subsystem.

8. The computer system of claim 6, wherein said security password is a privileged access password.

9. The computer system of clam 6, further including a logic circuit coupled to said tamper detection switch, said logic circuit being settable by a user between an enabled state and a disabled state,

wherein when said logic circuit is in the enabled state, said switching of said tamper detection switch clears said security password and wherein when said logic circuit is in said disabled state said switching of said tamper detection switch does not clear said security password.

10. A method of operating a computer system coupled to a remote computer via a data communication line, said computer system having an enclosure, a central processing unit mounted within the enclosure, a network connector for coupling said computer system to said communication line, a selectively activable erasable memory element mounted within the enclosure, a manually operable option switch mounted within the enclosure manually settable by a user of the computer system for setting the memory element to active and inactive states, and a tamper detection switch mounted within the enclosure for detecting opening of the enclosure, the method comprising the steps of:

manually setting the option switch and selectively setting the memory element into the active state,

storing a privileged access password in the active memory element,

controlling access to at least certain levels of data stored within the system by distinguishing between the active and inactive states of the memory element and between entry and non-entry of the privileged access password,

invalidating the privileged access password stored in the memory element in response to any switching of the tamper detection switch,

generating a tamper alert signal to said network connector in response to any switching of the tamper detection switch regardless of a power state that said computer system is in, and

transmitting an alert packet over the communication line to said remote computer regardless of a power state that said computer system is in, said alert packet containing an alert message and information which specifically identifies said local computer system.