Data processing system and method for disabling a portable computer outside an authorized area

• US 6,166,688 A
• Filed: 03/31/1999
• Issued: 12/26/2000
• Est. Priority Date: 03/31/1999
• Status: Expired due to Term

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Cromer, Daryl Carvis, Locker, Howard, Kern, Eric Richard, Dayan, Richard Alan, Ellison, Brandon Jon
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): PHAN, DAO LINDA
• Application Number:
  US09/282,394
• Time in Patent Office: 636 Days
• Field of Search: 342/357.17, 342/357.01, 342/357.06, 342/450, 342/451, 342/457, 701/213, 340/825.31, 340/825.54, 455/13.4
• US Class Current: 342/357.74
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G08B 13/1418 Removal detected by failure in electrical connection between the appliance and a control centre, home control panel or a power supply
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A data processing system and method are disclosed for disabling a portable computer in response to the portable computer being moved outside of an authorized area of use. An authorized, geographical area of use is established. The authorized, geographical area is any geographical area capable of being defined. The geographical area is not limited to areas within an enclosure, and is not bounded by a transmitter'"'"'s broadcast range. A determination is made regarding whether the portable computer is located outside of the authorized area. If the portable computer is moved outside of the authorized area, the portable computer is disabled. The portable computer is inoperable when disabled.

Claims

1. A method in a data processing system for disabling a portable computer in response to said portable computer being moved outside of an authorized area of use, said method comprising the steps of:

establishing an authorized, geographical area of use, said authorized, geographical area being any geographical area capable of being defined, not limited to areas within an enclosure, and not bounded by a transmitter'"'"'s broadcast range;

determining whether said portable computer is located outside of said authorized area; and

in response to said portable computer being moved outside of said authorized area, said portable computer disabling itself, wherein said portable computer is inoperable when disabled.

2. The method according to claim 1, wherein said step of determining whether said portable computer is located outside of said authorized area further comprises the step of said portable computer determining whether said portable computer is located outside of said authorized area.

3. The method according to claim 2, further comprising the steps of:

establishing a location detection device within said portable computer for continuously receiving positioning information, said location detection device receiving constant auxiliary power;

utilizing said received positioning information to determine a current geographical location of said portable computer; and

in response to said current geographical location being outside of said authorized area, disabling said portable computer.

4. The method according to claims 3, further comprising the step of in response to said portable computer being disabled, re-enabling said portable computer in response to a correct entry of a privileged access password.

5. The method according to claims 4, further comprising the step of permitting a modification of said authorized, geographical area only in response to a correct entry of said privileged access password.

6. The method according to claims 5, further comprising the steps of:

establishing a power security unit for storing said privileged access password and said authorized area;

said power security unit being coupled to a power supply and to a global positioning device, said power supply capable of supplying full system power required for said portable computer to operate;

said power security unit receiving said positioning information from said global positioning device;

said power security unit determining said current geographical location of said portable computer;

in response to said power security unit determining that said current geographical location of said portable computer is outside of said authorized area, said power security unit transmitting a power control signal to said power supply; and

in response to a receipt of said power control signal by said power supply, said power supply ceasing supplying full system power.

7. The method according to claim 6, wherein said step of establishing an authorized, geographical area of use further comprises the step of establishing an authorized area being defined by an area included within a radius from a center longitude and center latitude point.

8. The method according to claim 7, further comprising the steps of:

establishing a gate capable of transmitting and receiving wireless signals;

moving said portable computer through said gate;

in response to said movement of said portable computer through said gate, said gate transmitting a wireless signal to said portable computer including an updated authorized, geographical area.

9. The method according to claim 8, further comprising the steps of:

said gate being coupled to a server computer system;

in response to said movement of said portable computer through said gate, said portable computer transmitting an identifier signal to said gate, said identifier signal including information identifying said portable computer;

in response to said gate receiving said identifier signal, said gate transmitting a request to said server computer system; and

in response to said server receiving said request, said server transmitting a reply signal to said gate including said updated authorized, geographical region.

10. A data processing system for disabling a portable computer in response to said portable computer being moved outside of an authorized area of use, comprising:

said portable computer executing code for establishing an authorized, geographical area of use, said authorized, geographical area being any geographical area capable of being defined, not limited to areas within an enclosure, and not bounded by a transmitter'"'"'s broadcast range;

said portable computer system executing code for determining whether said portable computer is located outside of said authorized area; and

in response to said portable computer being moved outside of said authorized area, means for said portable computer disabling itself, wherein said portable computer is inoperable when disabled.

11. The system according to claim 10, further comprising:

a location detection device included within said portable computer for continuously receiving positioning information, said location detection device receiving constant auxiliary power;

said portable computer executing code for utilizing said received positioning information to determine a current geographical location of said portable computer; and

in response to said current geographical location being outside of said authorized area, said portable computer capable of being disabled.

12. The system according to claims 11, further comprising in response to said portable computer being disabled, said portable computer capable of being re-enabled in response to a correct entry of a privileged access password.

13. The system according to claims 12, further comprising said portable computer executing code for permitting a modification of said authorized, geographical area only in response to a correct entry of said privileged access password.

14. The system according to claims 13, further comprising:

a power security unit included within said portable computer for storing said privileged access password and said authorized area;

said power security unit capable of being coupled to a power supply and to a global positioning device, said power supply capable of supplying full system power required for said portable computer to operate;

said power security unit capable of receiving said positioning information from said global positioning device;

said power security unit executing code for determining said current geographical location of said portable computer;

in response to said power security unit determining that said current geographical location of said portable computer is outside of said authorized area, said power security unit capable of transmitting a power control signal to said power supply; and

in response to a receipt of said power control signal by said power supply, said power supply capable of ceasing supplying full system power.

15. The system according to claim 14, further comprising said portable computer executing code for establishing an authorized area being defined by an area included within a radius from a center longitude and center latitude point.

16. The system according to claim 15, further comprising:

a gate capable of transmitting and receiving wireless signals;

said portable computer capable of being moved through said gate; and

in response to said movement of said portable computer through said gate, said gate capable of transmitting a wireless signal to said portable computer including an updated authorized, geographical area.

17. The system according to claim 16, further comprising:

said gate capable of being coupled to a server computer system;

in response to said movement of said portable computer through said gate, said portable computer executing code for transmitting an identifier signal to said gate, said identifier signal including information identifying said portable computer;

in response to said gate receiving said identifier signal, said gate capable of transmitting a request to said server computer system; and

in response to said server receiving said request, said server executing code for transmitting a reply signal to said gate including said updated authorized, geographical region.

18. A data processing system for disabling a portable computer in response to said portable computer being moved outside of an authorized area of use, comprising:

said portable computer executing code for establishing an authorized, geographical area of use, said authorized, geographical area being any geographical area capable of being defined by a radius and a center longitude and center latitude point, not limited to areas within an enclosure, and not bounded by a transmitter'"'"'s broadcast range, said authorized area being defined by an area included within a radius from a center longitude and center latitude point;

a location detection device included within said portable computer for continuously receiving positioning information, said location detection device receiving constant auxiliary power;

a power security unit included within said portable computer for storing a privileged access password and said authorized area;

said power security unit capable of being coupled to a power supply and to a global positioning device, said power supply capable of supplying full system power required for said portable computer to operate;

said power security unit capable of receiving said positioning information from said global positioning device;

said power security unit executing code for determining a current geographical location of said portable computer;

in response to said power security unit determining that said current geographical location of said portable computer is outside of said authorized area, said power security unit capable of transmitting a power control signal to said power supply;

in response to a receipt of said power control signal by said power supply, said power supply capable of ceasing supplying full system power, wherein said portable computer is disabled;

in response to said portable computer being disabled, said portable computer capable of being re-enabled in response to a correct entry of a privileged access password;

said portable computer executing code for permitting a modification of said authorized, geographical area only in response to a correct entry of said privileged access password;

a gate capable of transmitting and receiving wireless signals;

said portable computer capable of being moved through said gate;

in response to said movement of said portable computer through said gate, said gate capable of transmitting a wireless signal to said portable computer including an updated authorized, geographical area;

said gate capable of being coupled to a server computer system;

in response to said movement of said portable computer through said gate, said portable computer executing code for transmitting an identifier signal to said gate, said identifier signal including information identifying said portable computer;

in response to said gate receiving said identifier signal, said gate capable of transmitting a request to said server computer system;

in response to said server receiving said request, said server executing code for transmitting a reply signal to said gate including said updated authorized, geographical region.

20. The method according to claims 18, further comprising the step of permitting a modification of said authorized, geographical area only in response to a correct entry of said privileged access password.

21. The method according to claims 20, further comprising the steps of:

establishing a power security unit for storing said privileged access password and said authorized area;

said power security unit being coupled to a power supply and to a global positioning device, said power supply capable of supplying full system power required for said portable computer to operate;

said power security unit receiving said positioning information from said global positioning device;

said power security unit determining said current geographical location of said portable computer;

in response to said power security unit determining that said current geographical location of said portable computer is outside of said authorized area, said power security unit transmitting a power control signal to said power supply; and

in response to a receipt of said power control signal by said power supply, said power supply ceasing supplying full system power.

22. The method according to claim 21, wherein said step of establishing an authorized, geographical area of use further comprises the step of establishing an authorized area being defined by an area included within a radius from a center longitude and center latitude point.

23. The method according to claim 22, further comprising the steps of:

establishing a gate capable of transmitting and receiving wireless signals;

moving said portable computer through said gate;

in response to said movement of said portable computer through said gate, said gate transmitting a wireless signal to said portable computer including an updated authorized, geographical area.

24. The method according to claim 23, further comprising the steps of:

said gate being coupled to a server computer system;

in response to said movement of said portable computer through said gate, said portable computer transmitting an identifier signal to said gate, said identifier signal including information identifying said portable computer;

in response to said gate receiving said identifier signal, said gate transmitting a request to said server computer system; and

in response to said server receiving said request, said server transmitting a reply signal to said gate including said updated authorized, geographical region.

19. A method in a data processing system for disabling a portable computer in response to said portable computer being moved outside of an authorized area of use, said method comprising the steps of:

establishing an authorized, geographical area of use, said authorized, geographical area being any geographical area capable of being defined, not limited to areas within an enclosure, and not bounded by a transmitter'"'"'s broadcast range;

determining whether said portable computer is located outside of said authorized area;

in response to said portable computer being moved outside of said authorized area, disabling said portable computer, wherein said portable computer is inoperable when disabled;

establishing a location detection device within said portable computer for continuously receiving positioning information, said location detection device receiving constant auxiliary power;

utilizing said received positioning information to determine a current geographical location of said portable computer;

in response to said current geographical location being outside of said authorized area, disabling said portable computer; and

in response to said portable computer being disabled, re-enabling said portable computer in response to a correct entry of a privileged access password.

25. A data processing system for disabling a portable computer in response to said portable computer being moved outside of an authorized area of use, comprising:

said portable computer executing code for establishing an authorized, geographical area of use, said authorized, geographical area being any geographical area capable of being defined, not limited to areas within an enclosure, and not bounded by a transmitter'"'"'s broadcast range;

said portable computer system executing code for determining whether said portable computer is located outside of said authorized area;

in response to said portable computer being moved outside of said authorized area, said portable computer capable of being disabled, wherein said portable computer is inoperable when disabled;

a location detection device included within said portable computer for continuously receiving positioning information, said location detection device receiving constant auxiliary power;

said portable computer executing code for utilizing said received positioning information to determine a current geographical location of said portable computer;

in response to said current geographical location being outside of said authorized area, said portable computer capable of being disabled; and

in response to said portable computer being disabled, said portable computer capable of being re-enabled in response to a correct entry of a privileged access password.

26. The system according to claims 25, further comprising said portable computer executing code for permitting a modification of said authorized, geographical area only in response to a correct entry of said privileged access password.

27. The system according to claims 26, further comprising:

a power security unit included within said portable computer for storing said privileged access password and said authorized area;

said power security unit capable of being coupled to a power supply and to a global positioning device, said power supply capable of supplying full system power required for said portable computer to operate;

said power security unit capable of receiving said positioning information from said global positioning device;

said power security unit executing code for determining said current geographical location of said portable computer;

in response to said power security unit determining that said current geographical location of said portable computer is outside of said authorized area, said power security unit capable of transmitting a power control signal to said power supply; and

in response to a receipt of said power control signal by said power supply, said power supply capable of ceasing supplying full system power.

28. The system according to claim 27, further comprising said portable computer executing code for establishing an authorized area being defined by an area included within a radius from a center longitude and center latitude point.

29. The system according to claim 28, further comprising:

a gate capable of transmitting and receiving wireless signals;

said portable computer capable of being moved through said gate; and

in response to said movement of said portable computer through said gate, said gate capable of transmitting a wireless signal to said portable computer including an updated authorized, geographical area.

30. The system according to claim 29, further comprising:

said gate capable of being coupled to a server computer system;

in response to said movement of said portable computer through said gate, said portable computer executing code for transmitting an identifier signal to said gate, said identifier signal including information identifying said portable computer;

in response to said gate receiving said identifier signal, said gate capable of transmitting a request to said server computer system; and

in response to said server receiving said request, said server executing code for transmitting a reply signal to said gate including said updated authorized, geographical region.