Integral security apparatus for remotely placed network devices

• US 7,295,112 B2
• Filed: 04/04/2005
• Issued: 11/13/2007
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Bowser, Robert, Theobold, David
• Primary Examiner(s): Lee; Benjamin C.
• Application Number:
  US11/098,251
• Publication Number:
  US 20060220850A1
• Time in Patent Office: 953 Days
• Field of Search: None
• US Class Current: 340/568.1
• CPC Class Codes: G08B 13/1418 Removal detected by failure in electrical connection between the appliance and a control centre, home control panel or a power supply
• CPC Class Codes: G08B 25/01 characterised by the transmission medium

Abstract

Integral electronic security is provided for a remotely placed network device to reduce the risk of theft, vandalism, or tampering. Sensors monitor the environment surrounding the remotely placed network device. When tampering is detected, a message is sent to a monitoring station. Optionally, the network device can clear its own configuration to prevent the loss of sensitive data.

Claims

1. An apparatus, comprising:

a sensor;

a signal conditioning module comprising logic for processing a signal sent by the sensor, the signal indicative of tampering; and

a motherboard comprising a central processing unit responsive to the signal conditioning module receiving the signal indicative of tampering to send a message to a monitoring device;

wherein the central processing unit is responsive to determining that the central processing unit is coupled to a network to authenticate with an authentication server coupled to the network; and

wherein the central processing unit is further responsive to maintenance requests, the central processing unit sending sensitive data to the network before the maintenance is performed and the central processing unit restoring the sensitive data when the maintenance is completed and after re-authentication.

2. An apparatus according to claim 1, wherein the signal conditioning module is located on the motherboard of the network device.

3. An apparatus according to claim 1, wherein the signal conditioning module is located between the sensor and the motherboard.

4. An apparatus according to claim 1, wherein the central processing unit is further responsive to the signal conditioning module to delete data from a non-volatile memory.

5. An apparatus according to claim 4, wherein the non-volatile memory contains configuration data for the network device.

6. An apparatus according to claim 5, wherein the configuration data comprises an encryption key used by the network device to communicate on the network.

7. An apparatus according to claim 5, wherein the central processing unit is responsive to multiple alarm levels, the central processing unit sending the message to the monitoring device responsive to a first alarm level and to delete data from the non-volatile memory responsive to a second alarm level.

8. An apparatus according to claim 1, wherein the sensor is at least one of the group consisting of

a passive infrared detector;

a retro-reflective sensor;

a tilt switch;

an accelerometer;

a lever switch; and

a field sensor for detecting a human body.

9. An apparatus according to claim 1, wherein the logic for processing a signal sent by the sensor comprises at least one of:

logic for de-bouncing the signal;

logic to digitize the signal; and

logic to determine whether the signal has exceeded a predetermined threshold.

10. An apparatus according to claim 1, wherein the sensor reflects a signal off of a suspect object and wherein the conditioning module determines the suspect object distance from the apparatus.

11. An apparatus according to claim 10, wherein the signal conditioning module can be tuned so that a signal is sent based on the distance and time the suspect object is within a predetermined area.

12. An apparatus according to claim 1, wherein the central processing unit is further responsive to a plurality of the signals indicative of tampering over a time period, to send a message to a monitoring station to preemptively prevent an intrusion.

13. An apparatus, comprising:

a sensor;

a signal conditioning module comprising logic for processing a signal sent by the sensor, the signal indicative of tampering; and

a motherboard comprising a central processing unit responsive to the signal conditioning module receiving the signal indicative of tampering to send a message to a monitoring device;

wherein the central processing unit is responsive to determining that the central processing unit is coupled to a network to authenticate with an authentication server coupled to the network; and

wherein the central processing unit is further responsive to the signal indicative of tampering, the central processing unit sending sensitive data to the network, and when there is no further threat of tampering, restoring the sensitive data from the network.

14. An apparatus according to claim 13, wherein the signal conditioning module is located on the motherboard of the network device.

15. An apparatus according to claim 13, wherein the signal conditioning module is located between the sensor and the motherboard.

16. An apparatus according to claim 13, wherein the central processing unit is further responsive to the signal conditioning module to delete data from a non-volatile memory.

17. An apparatus according to claim 16, wherein the non-volatile memory contains configuration data for the network device.

18. An apparatus according to claim 17, wherein the configuration data comprises an encryption key used by the network device to communicate on the network.

19. An apparatus according to claim 17, wherein the central processing unit is responsive to multiple alarm levels, the central processing unit sending the message to the monitoring device responsive to a first alarm level and to delete data from the non-volatile memory responsive to a second alarm level.

20. An apparatus according to claim 13, wherein the sensor is at least one of the group consisting of

a passive infrared detector;

a retro-reflective sensor;

a tilt switch;

an accelerometer;

a lever switch; and

a field sensor for detecting a human body.

21. An apparatus according to claim 13, wherein the logic for processing a signal sent by the sensor comprises at least one of:

logic for de-bouncing the signal;

logic to digitize the signal; and

logic to determine whether the signal has exceeded a predetermined threshold.

22. An apparatus according to claim 13, wherein the sensor reflects a signal off of a suspect object and wherein the conditioning module determines the suspect object distance from the apparatus.

23. An apparatus according to claim 22, wherein the signal conditioning module can be tuned so that a signal is sent based on the distance and time the suspect object is within a predetermined area.

24. An apparatus according to claim 13, wherein the central processing unit is further responsive to a plurality of the signals indicative of tampering over a time period, to send a message to a monitoring station to preemptively prevent an intrusion.