Enabling surveillance of network connected device

• US 7,058,709 B2
• Filed: 11/07/2001
• Issued: 06/06/2006
• Est. Priority Date: 11/14/2000
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Thubert, Pascal, Lamberton, Marc, Levy-Abegnoli, Eric
• Primary Examiner(s): Vaughn, Jr., William O.
• Assistant Examiner(s): Bengzon, Greg C.
• Application Number:
  US10/035,724
• Publication Number:
  US 20020091813A1
• Time in Patent Office: 1,672 Days
• Field of Search: 709/224, 709/223
• US Class Current: 709/224
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The invention enables the surveillance of computer-like devices while they are connected to a communications network. This latter includes a Network Surveillance Server (NSS). Upon joining said communications network, a device is first required to log-in to NSS. After which, NSS polls it while connected on the network so that an alarm can be issued, from NSS, to a central surveillance unit, if the device fails responding to polling. Hence, prior to leaving the communications network, the computer-like device is also required to log-out to NSS. Thus, as long as it is connected to the communications network, the computer-like device is watched.

Claims

1. A method comprising:

enabling surveillance of a computer device connected to a communications network including a Network Surveillance Server (NSS), said network including the steps of;

upon joining said communications network, said computer device logging-in to said NSS;

discovering at least one said NSS within said communications network;

selecting one of said at least one NSS to perform the surveillance of said computer device;

sending credentials to said selected NSS;

thereby, if accepted by said selected NSS;

completing login;

however, if not accepted;

aborting log-in;

said NSS polling said computer device while connected on said communications network, said polling step including said NSS determining if said computer device responds, and if so, collecting information about said computer device and a registered user of said computer device, and comparing if said collected information matches records, in said NSS, about said computer device and said registered user, said collecting step and said comparing step being performed on top of said polling step and said checking step;

said NSS issuing an alarm, to a central surveillance unit if said computer device fails responding to polling;

wherein said collected information about said user includes a typing speed over a keyboard or a voice intonation; and

wherein said collected information about said computer device includes a current geographic location and an identification of a portal through which said communications network is accessed;

prior to leaving said communications network, when it is desired to leave said communications network, said computer device sending credentials to said selected NSS, wherein said credentials include knowing a personal identification number (PIN);

knowing a password; and

possessing a token or a smartcard;

thereby, if log-out is accepted by said NSS stops polling, said computer device thus completing log-out;

however, if log-out is not accepted, said NSS keeps polling, said computer device thus failing to complete log-out;

said computer device lagging-out from said NSS; and

allowing said computer device to be watched by NSS while being connected to said communications network.

2. The method according to claim 1, wherein there are a plurality of said NSS present in said communications network.

3. The method according to claim 1, wherein said communications network is an IP network and said polling step utilizes the IP ‘

PING’

command.

4. The method according to claim 1, wherein said communications network is an TP network and said polling step utilizes the IP Address Resolution Protocol (ARP).

5. The method according to claim 1, wherein said computer device is a mobile device.

6. The method according to claim 1, wherein said computer device is voice enabled.

7. A system for enabling the surveillance of computer devices connected onto a network, comprising means adapted for carrying out the method according to claim 1.

8. A computer readable medium comprising instructions for carrying out the method according to claim 1.

9. An article of manufacture comprising a computer usable medium having computer readable program code means embodied for causing enablement of surveillance of a computer device connected to a communications network, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 1.

10. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for enabling surveillance of a computer device connected to a communications network, said method steps comprising the steps of claim 1.

11. A computer program product comprising a computer usable medium having computer readable program code means embodied therein for causing a system for causing enablement of surveillance of a computer device connected to a communications network, the computer readable program code means in said computer program product comprising computer readable program code means for causing a computer to effect the functions of claim 7.