Methods and system for providing data and telephony security

• US 6,145,083 A
• Filed: 09/28/1998
• Issued: 11/07/2000
• Est. Priority Date: 04/23/1998
• Status: Expired due to Term

• Current Assignee: RPX Corporation
• Original Assignee: Siemens Information And Communication Networks, Inc.
• Inventors: Shaffer, Shmuel, Beyda, William J.
• Primary Examiner(s): HUA, LY
• Application Number:
  US09/162,351
• Time in Patent Office: 771 Days
• Field of Search: 713/200, 713/201, 713/202, 340/825.3, 455/410, 455/411, 709/225, 709/229
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A method and system for providing security for a computing device include resolving conflicts between a password-protected screen saver and communication notification capabilities by selectively enabling access to specific communications when the computing device is in a locked mode. The screen saver of the computing device is configured to switch the device from a normal operative mode to a locked mode in response to detection of a preset condition, such as the expiration of an idle-time timer. The computing device then remains in the locked mode until a preset authorization condition is recognized, e.g., entering a password. However, with the computing device in the locked mode, a subset of communication access capabilities is enabled. Specifically, notification of incoming communications is enabled. Preferably, connectivity for select types of outgoing calls is also enabled, e.g., connectivity for emergency calls. In the preferred embodiment, the conflicts are resolved by integrating the screen saver with communication access capabilities in a single software package. Also in the preferred embodiment, the communication access capabilities are provided by a telephony over LAN application and a switch to the locked mode is disabled during communication sessions involving the computing device. In other embodiments, while in a locked mode, incoming calls may be preconfigured by the user to selectively break through security features based on caller identification information.

Claims

1. A method of maintaining security for a computing device connected to a network to receive incoming communications comprising steps of:

configuring said computing device such that said computing device switches from an operative mode to a locked mode in response to detection of a preset condition and switches from said locked mode to said operative mode in response to detection of a preset authorization condition, said locked mode establishing a security condition with respect to data access capabilities and communication access capabilities of said computing device;

enabling notification at said computing device when an incoming communication is directed to said computing device; and

enabling access to said communication access capabilities of said computing device in response to detecting said notification that said incoming communication is directed to said computing device, including providing access to handling said incoming communication while maintaining said security condition with respect to said data access capabilities until said detection of said preset authorization condition.

2. The method of claim 1 wherein said step of configuring said computing device includes setting parameters of a password protected screen saver that is responsive to said detection of said preset condition, including setting a password such that input of said password satisfies said preset authorization condition.

3. The method of claim 1 wherein said step of enabling access to said communication access capabilities includes limiting said access to handling said incoming communication, such that initiation of outgoing communications is denied in the absence of said preset authorization condition.

4. The method of claim 3 wherein said step of configuring said computing device includes setting operational parameters of a telephony-over-LAN (TOL) application, said incoming communication being a telephone call that includes at least one of voice and video information.

5. The method of claim 4 further comprising a step of installing said TOL application in said computing device such that said TOL application is integrated with a screen saver that is configurable with respect to selection of said preset authorization condition, said step of configuring said computing device including selecting operational parameters of said screen saver.

6. The method of claim 4 further comprising steps of installing said TOL application and installing a screen saver application in said computing device, said TOL and screen saver applications being operationally compatible with respect to switching said communication access capabilities of said computing device from said locked mode to said operative mode while maintaining said data access capabilities in said locked mode when said notification is detected separately from said preset authorization condition.

7. The method of claim 1 wherein said step of configuring said computing device includes defining limitations on utilizing said communication access capabilities when said computing device is in said locked mode, including identifying limited types of outgoing telephone calls that can be initiated in the absence of detecting said preset authorization condition.

8. The method of claim 1 wherein said step of configuring said computing device includes setting operational parameters of an email application, said incoming communication being an email message.

9. The method of claim 1 wherein said step of configuring said computing device includes defining limitations on utilizing said communication access capabilities when said computing device is in said locked mode, said limitations including identifying limited types of incoming telephone calls that can be received in the absence of detecting a second preset authorization condition, said limited types defined by previously configured predetermined caller identification information.

10. The method of claim 9 wherein said second preset authorization condition and said preset authorization condition are different.

11. In a computing device connected to a network to receive incoming communications, a security system comprising:

screen saver means for selectively establishing a security condition with respect to disabling data access capabilities and communication access capabilities of said computing device, said screen saver means having a locked mode and an operative mode, said screen saver means being in said locked mode when said security condition is established;

means for recognizing a predefined authorization sequence to override said locked mode of said screen saver means, thereby switching said screen saver means from said locked mode to said operative mode in which said data access and communication access capabilities are enabled; and

means for enabling a first set of communication access capabilities of said computing device in response to detection of an incoming communication with said screen saver means in said locked mode, said first set including enabling handling of said incoming communication while said screen saver means remains in said locked mode with respect to said data access capabilities and with respect to a second set of said communication access capabilities.

12. The security system of claim 11 wherein said communication access capabilities include telephone means for enabling a telephone connection.

13. The security system of claim 12 wherein said first set of said communication access capabilities relates to connectivity of said telephone means to receive incoming calls and to initiate specified types of outgoing calls, and wherein said second set of communication access capabilities relates to connectivity of said telephone means to initiate remaining types of said outgoing calls.

14. The security system of claim 12, further comprising means for recognizing a second predefined authorization sequence to prevent said enabling means from enabling said first set of communication access capabilities when said second predefined authorization sequence is not recognized, and wherein said first set of said communication access capabilities relates to connectivity of said telephone means to initiate specified types of outgoing calls and to receive selected incoming calls, wherein said selected incoming calls received are determined from a preconfigured set of caller identification information, and wherein said second set of communication access capabilities relates to connectivity of said telephone means to initiate remaining types of said outgoing calls.

15. The security system of claim 11 wherein said screen saver means and said means for enabling are integrated in computer software.

16. The security system of claim 11 wherein said means for enabling includes configurable memory for defining said first and second sets of communication access capabilities.

17. The security system of claim 16 wherein said screen saver means is configurable software having password protection, said means for recognizing being a program module for identifying a specified password.

18. A method of maintaining security for a computing device connected to a network to handle incoming and outgoing telephone calls having at least one of voice and video information, said method comprising steps of:

timing periods of inactivity by said computing device;

automatically switching said computing device from an operative mode to a screensaver mode when a period of inactivity exceeds a predetermined time period, including securing access to data and outgoing call capabilities of said computing device while enabling notification of an incoming call;

monitoring a communications line connecting said communication device to said network to detect incoming calls;

providing a notification at said computing device in response to detecting an incoming call;

enabling handling of said incoming call while maintaining said computing device in said screensaver mode with respect to data and outgoing call capabilities; and

switching said computing device from said screensaver mode to said operative mode in response to input of a password to said computing device.

19. The method of claim 18 wherein said step of securing access to data and outgoing call capabilities includes freeing said computing device to initiate preselected types of outgoing calls while said computing device is in said screensaver mode.

20. The method of claim 18 wherein said step of freeing said computing device includes enabling emergency calls when said computing device is in said screensaver mode.

21. The method of claim 18 wherein each of said steps of said method is executed in computer software.

22. The method of claim 18 wherein said step of providing said notification includes triggering an image on a monitor screen of said computing device.

23. The method of claim 18 further comprising the step of defining selected incoming calls to be prevented from being handled without recognition of an authorization condition, wherein said authorization condition is preconfigured to be different from said password and said wherein said defining step is based on caller identification information of said selected incoming calls, and wherein said notification providing step occurs if said incoming call is authorized to be handled.

24. The method of claim 23 wherein said notification providing step includes triggering caller identification information of said incoming call on a monitor screen of said computing device.

25. A method of maintaining security for a computing device connected to a network to receive incoming communications comprising steps of:

enabling screen saver capability for protecting data accessible via said computing device;

establishing an idle time threshold for switching said screen saver capability from a normal operation mode to a locked mode in which said data is protected from access;

monitoring data accesses and communication sessions involving said computing device to detect periods of inactivity exceeding said idle time threshold;

triggering a switch from said normal operation mode to said locked mode upon detecting an absence of a data access and a communication session for a period exceeding said idle time threshold; and

returning said computing device to said normal operation mode upon detecting a preset authorization condition.