Method and apparatus for controlling data and software access

• US 7,373,657 B2
• Filed: 03/10/2003
• Issued: 05/13/2008
• Est. Priority Date: 03/10/2003
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Technology Corporation Miami Lakes FLA US
• Inventors: Walker, William T.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Chai, Longbit
• Application Number:
  US10/385,817
• Publication Number:
  US 20040181695A1
• Time in Patent Office: 1,891 Days
• Field of Search: 726/4
• US Class Current: 726/4
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

A proximity based computer access system is provided. According to the invention, a local key associated with a workstation wirelessly communicates with a local key which is associated with a user. If the user, and remote key, are outside of a preset radius of the workstation, access to the workstation is disabled. Accordingly, a workstation is secured from unauthorized access when an authorized user is not nearby. The present invention allows organizations to efficiently secure sensitive data from unauthorized access while reducing the requirements of users to manually enable and disable access to the sensitive data through the workstation.

Claims

1. In a system comprising at least one stationary transmitter and a wireless proximity detector in communication with and connected physically to a mobile computational device, a method comprising:

while the stationary transmitter is not physically connected from the mobile computational device, granting a user access, by the wireless proximity detector, to the mobile computational device'"'"'s local software and/or data, when the wireless proximity detector determines that the detector and mobile computational device are within a selected range of the stationary transmitter; and

while the stationary transmitter is disconnected physically from the computational device, prohibiting user access, by the wireless proximity detector, to of the mobile computational device'"'"'s local software and/or data, when the wireless proximity detector determines that the detector and mobile computational device are not within the selected range of the stationary transmitter, wherein, in the absence of a range determination by the detector, the ability of the mobile computational device to provide the user access to the local software and/or data is prohibited and is independent of the distance between the mobile computational device and the stationary transmitter.

2. The method of claim 1, wherein the wireless proximity detector determines that the wireless proximity detector is (a) within the selected range when a wireless signal transmitted by the stationary transmitter has at least a determined signal strength and (b) outside of the selected range when the wireless signal does not have at least a determined signal strength.

3. The method of claim 1, wherein the wireless proximity detector determines that the wireless proximity detector is (a) within the selected range when a wireless signal transmitted by the stationary transmitter is received by the detector and (b) outside of the selected range when the wireless signal is not received by the detector.

4. The method of claim 1, wherein the mobile computational device is, in the absence of a range determination by the detector, able to provide the user with access to the local software and/or data.

5. A computer readable medium comprising processor executable instructions operable to perform the steps of claim 1.

6. The method of claim 1 wherein said selected range is contained with a company office.

7. A system comprising:

at least one stationary transmitter;

a mobile computational device; and

a wireless proximity detector, in communication with and connected physically to the mobile computational device, operable to;

while the stationary transmitter is not physically connected from the computational device, grant a user access, by the wireless proximity detector, to the mobile computational device'"'"'s local software and/or data, when the wireless proximity detector determines that the detector and mobile computational device are within a selected range of the stationary transmitter; and

while the stationary transmitter is disconnected physically from the computational device, prohibit user access, by the wireless proximity detector, to the mobile computational device'"'"'s local software and/or data, when the wireless proximity detector determines that the detector and mobile computational device are not within a selected range of the stationary transmitter, wherein, in the absence of a range determination by the detector, the ability of the mobile computational device to provide the user access to the local software and/or data is prohibited and is independent of the distance between the mobile computational device and the stationary transmitter.

8. The system of claim 7, wherein the wireless proximity detector determines that the wireless proximity detector is (a) within the selected range when a wireless signal transmitted by the stationary transmitter has at least a determined signal strength and (b) outside of the selected range when the wireless signal does not have at least a determined signal.

9. The system of claim 7, wherein the wireless proximity detector determines that the wireless proximity detector is (a) within the selected range when a wireless signal transmitted by the stationary transmitter is received by the detector and (b) outside of the selected range when the wireless signal is not received by the detector.

10. The system of claim 7, wherein the mobile computational device is, in the absence of a range determination by the detector, able to provide the user with access to the local software and/or data.

11. The system of claim 7, further comprising:

a local key operably connected to said mobile computational device, the local key being operable to enable access to said local software and/or data; and

a remote key operable to wirelessly communicate with said local key, wherein, when said remote key is outside of a predefined radius, said local key disables access to said local software and/or data, and, when said remote key is within said predefined radius, said local key enables access to said local software and/or data.

12. The system of claim 11, wherein said remote key includes:

a wireless transceiver operable to receive transmissions from and send transmissions to said local key;

a processing portion in communication with said wireless transceiver; and

a memory portion in communication with said processing portion.

13. The system of claim 12, wherein said local key comprises a dongle operatively connected to said mobile computational device.

14. The system of claim 13, wherein said dongle is adapted to connect to one of a parallel port, a serial port, and a universal serial bus port.

15. The system of claim 12, wherein said remote key is included in an identification badge.

16. The system of claim 7, wherein the selected range corresponds to a size of a company office.

17. A method, comprising:

providing a portable device, the portable device comprising a wireless proximity detector, and a stationary transmitter, the stationary transmitter transmitting a wireless signal having a selected range;

while the stationary transmitter is not physically connected from the portable device, granting user access, by the wireless proximity detector, to the portable device'"'"'s local software and/or data, when the wireless proximity detector determines that the detector and portable device are within the selected range of the stationary transmitter; and

while the stationary transmitter is disconnected physically from the portable device, prohibiting a user access, by the wireless proximity detector, to portable device'"'"'s local software and/or data, when the wireless proximity detector determines that the detector and portable device are not within the selected range, the local software and/or data of the portable device being otherwise user accessible when the wireless proximity determines that the detector and portable device are not within the selected range, and, in the absence of a range determination by the detector, the ability of the portable device to provide the user access to the local software and/or data is prohibited and is independent of the distance between the portable device and the stationary transmitter.

18. The method of claim 17, wherein, the wireless proximity detector determines that the wireless proximity detector is (a) within the selected range when a wireless signal transmitted by the stationary transmitter has at least a determined signal strength and (b) outside of the selected range when the wireless signal does not have at least a determined signal strength.

19. The method of claim 17, wherein, the wireless proximity detector determines that the wireless proximity detector is (a) within the selected range when a wireless signal transmitted by the stationary transmitter is received by the detector and (b) outside of the selected range when the wireless signal is not received by the detector.

20. The method of claim 17, wherein the portable device is, in the absence of a range determination by the detector, able to provide the user with access to the local software and/or data.

21. The method of claim 17, wherein said selected range is a predetermined transmission radius of the stationary transmitter.

22. The system of claim 17, wherein the selected range marks a perimeter of at least part of a company facility.

23. A computer readable medium comprising processor executable instructions to perform the steps of claim 17.