Computer information access based on a transmitted identification signal

• US 7,107,455 B1
• Filed: 11/04/1999
• Issued: 09/12/2006
• Est. Priority Date: 11/04/1999
• Status: Expired due to Term

• Current Assignee: Dell USA LP (Dell Technologies Inc.)
• Original Assignee: Dell USA LP (Dell Technologies Inc.)
• Inventors: Merkin, Cynthia M.
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US09/434,770
• Time in Patent Office: 2,504 Days
• Field of Search: 713/200, 713/182, 713/185, 713/186, 713/168, 713/176, 455/410, 455/411
• US Class Current: 713/182
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A system for restricting access to computer information accessible by a computer system. A computer system having access to computer information includes a detection circuit for receiving a wireless identification signal from a transmitting circuit of an identification object such as an identification badge. The identification signal includes identification information regarding the assigned possessor of the security object. In one embodiment, the detection circuit determines whether the assigned possessor of the security object as indicated by the wireless identification signal has authorized access to computer information accessible by the computer system. A user is given access if the identification information contained in the identification signal indicates that the assigned possessor is an authorized user. The computer system is placed in a condition to deny access to computer information accessible by the computer system in response to the identification signal detection circuit not having received for a predetermined period of time, a wireless identification signal containing identification information from an assigned possessor having authorized access.

Claims

1. A system comprising:

a multipurpose authorized user identification device providing physical access to a premesis and access to a computer system on the premesis;

at least one processor coupled to the computer system;

a first Bluetooth device provided on the identification device providing a communication capability with a second Bluetooth device provided in the computer system including a non-line-of-sight proximity range actuated identification signal detection circuit for receiving a wireless identification signal from the identification device, the wireless identification signal containing identification information regarding one or more users of the device;

a memory having means for determining whether the user of the identification device as indicated by the wireless identification signal, has authorized access to computer information accessible by the computer system;

means for maintaining the computer system in a low power state except when the user identification device is in the proximity range; and

means for granting and maintaining access to computer information accessible by the computer system if it is determined that the user as indicated by the wireless identification signal is authorized access and remains in the proximity range, wherein the granting access to computer information accessible by the computer system further includes placing the computer system in a higher power state from the lower power state.

2. The system of claim 1 further comprising:

a memory circuit programmable to store a list of at least one user having authorized access to computer information assessable by the computer system.

3. The system of claim 1 wherein placing the computer system in a condition to deny further includes logging a user off of the computer system in response to the identification signal detection circuit not having received for a predetermined period of time, a wireless identification signal containing identification information from the user having authorized access.

4. The system of claim 1 wherein placing the computer system in a condition to deny further includes placing the computer system in a locked state in response to the identification signal detection circuit not having received for a predetermined period of time, a wireless identification signal containing identification information from the user having authorized access.

5. The system of claim 1 further comprising:

a memory circuit storing operating system code whose execution by the at least one processor implements an operating system for controlling the operation of the computer system; and

wherein the operating system code includes code whose execution places the computer system in a condition to deny access to computer information accessible by the computer system in response to the identification signal detection circuit not having received for a predetermined period of time, a wireless identification signal containing identification information from the user having authorized access.

6. The system of claim 1 wherein:

the memory having means for determining that the identification signal detection circuit has not received the wireless identification signal for a predetermined period of time is implemented in the identification signal detection circuit; and

the identification signal detection circuit provides a response signal in response to a determination that the identification signal detection circuit has not received for a predetermined period of time, a wireless identification signal containing identification information from the user having authorized access.

7. The system of claim 6 wherein the identification signal detection circuit generates an interrupt in response to a determination that the identification signal detection circuit has not received the wireless identification signal for a predetermined period of time.

8. The system of claim 6 wherein the identification signal detection circuit asserts a #PME signal in response to a determination that the identification signal detection circuit has not received the wireless identification signal for a predetermined period of time.

9. The system of claim 8 further comprising:

a chipset circuit having an input to receive the #PME signal from the identification signal detection circuit.

10. The system of claim 1 wherein the memory having means for determining whether the user of the device and the memory having means for determining that the identification signal detection circuit has not received the wireless identification signal for a predetermined period of time, are both implemented in the same memory circuit of the identification circuit.

11. The system of claim 1 wherein the identification signal detection circuit is operably coupled to a power managed computer bus.

12. The system of claim 1 wherein:

the identification signal detection circuit has an output to provide an indication signal indicating that the identification signal detection circuit has received a wireless identification signal containing identification information of the user of the device determined to have authorized access; and

wherein the indication signal is provided in response to receiving a wireless identification signal containing identification information of the user of the device determined to have authorized access after a predetermined period of time of not receiving an identification signal containing identification information of the user of the device determined to have authorized access.

13. The system of claim 12 wherein:

the identification signal detection circuit is operably coupled to the at least one processor via a computer bus substantially conforming to a PCI Local Bus Specification; and

the indication signal includes an assertion of the #PME signal.

14. The system of claim 1 further comprising:

a memory having means for placing the computer system in a higher power state from a lower power state if it is determined that the identification signal detection circuit has received a wireless identification signal containing identification information of the user having authorized access.

15. A method for controlling access to computer information comprising:

providing a multipurpose authorized user identification device for physical access to a premesis and access to a computer system on the premesis;

providing a computer system;

providing a first Bluetooth device provided on the identification device providing a communication capability with a second Bluetooth device provided in the computer system including determining whether the user as indicated by the wireless identification signal has authorized access to computer information accessible by the computer system;

maintaining the computer system in a low power state except when the user identification device is in the proximity range; and

granting and maintaining access to computer information accessible by the computer system if it is determined that the user as indicated by the wireless identification signal is authorized access and remains in the proximity range, wherein the granting access to computer information accessible by the computer system further includes placing the computer system in a higher power state from the lower power state.