System and method for managing access to functions supported by a multi-function port

• US 7,725,731 B2
• Filed: 08/16/2004
• Issued: 05/25/2010
• Est. Priority Date: 08/16/2004
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Brown, Norman P., Cao, Roger A.
• Primary Examiner(s): Abrishamkar; Kaveh
• Application Number:
  US10/918,908
• Publication Number:
  US 20060037084A1
• Time in Patent Office: 2,108 Days
• Field of Search: None
• US Class Current: 713/183
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices

Abstract

According to at least one embodiment, a system comprises an interface means for supporting a plurality of functional accesses; and means for selectively limiting on a per user basis access to certain ones of said plurality of functional accesses via the interface means.

Claims

1. A method for managing access to a plurality of different functions supported by a multi-function port of a processor-based device, the method comprising:

according to configuration information stored in the processor-based device, selecting on a per user basis to limit access to at least one function of the plurality of different functions supported by the multi-function port, wherein the multi-function port is configured to connect to any one of a plurality of different external devices, and wherein the processor-based device is responsive to requests to initiate performance of corresponding ones of the plurality of different functions;

detecting an attempt by a specific user to access the at least one function via the multi-function port;

determining whether the specific user is authorized to access the at least one function, wherein determining whether the specific user is authorized to access the at least one function comprises determining whether the at least one function is disabled for the specific user, and wherein determining whether the at least one function is disabled for the specific user comprises accessing a registry key for a class driver associated with the at least one function; and

enabling access by the specific user to the at least one function supported by the multi-function port if said user is authorized.

2. The method of claim 1, further comprising establishing a configuration that an operating system (OS) of the processor-based device uses to verify access to the at least one function, the configuration comprising the at least one function, authorization information, and a user identification associated with the specific user.

3. The method of claim 2, wherein:

the configuration is stored at a registry, configuration file, or database; and

the authorization information comprises the at least one function associated with an access level parameter that establishes whether the specific user is authorized to access the at least one function.

4. The method of claim 1 wherein the plurality of different functions comprise a plurality of ones selected from the group consisting of:

audio function, printing function, mass storage function, human input function, communications function, and networking function.

5. The method of claim 1, wherein determining whether the specific user is authorized to access the at least one function further comprises:

determining whether the at least one function is restricted via password for the specific user; and

prompting the specific user to enter a password; and

authorizing access to the at least one function in response to receiving the right password from the specific user.

6. The method of claim 1, wherein determining whether the at least one function is disabled for the specific user further comprises:

loading the class driver specified at the registry key; and

restricting access to the at least one function via the multifunction port if the class driver comprises a dummy driver.

7. The method of claim 1 wherein the multi-function port comprises a Universal Serial Bus (USB) port.

8. The method of claim 1, further comprising:

indicating, with the configuration information, that access to a second one of the plurality of functions is unrestricted, wherein the second function is different from the at least one function; and

allowing unrestricted access to the second function in response to a request for the second function by the specific user.

9. The method of claim 8, wherein the at least one function is a printing function or mass storage function, and the second function is selected from among an audio function, human input function, communications function, and networking function.

10. A method for managing access to a plurality of functions in a processor-based device supported by a multi-function port of the processor-based device, the method comprising:

selecting to limit access to at least one function of the plurality of functions supported by the multi-function port that is connectable to any one of a plurality of different external devices;

storing the selection as a configuration that an operating system (OS) in the processor-based device uses to verify access to the at least one function;

detecting, by the processor-based device, an attempt to access the at least one function via the multi-function port;

determining, by the processor-based device, whether said access to the at least one function is authorized by reading the stored configuration, wherein determining whether said access to the at least one function is authorized comprises determining whether the at least one function is disabled for a specific user, and wherein determining whether the at least one function is disabled for said user comprises accessing a registry key for a class driver associated with the at least one function;

enabling, by the processor-based device, access to the at least one function supported by the multi-function port if said access is authorized;

enabling unrestricted access to a second one of the plurality of functions, wherein the second function is different from the at least one function; and

in response to a request for the second function, allowing unrestricted access to the second function by the processor-based device.

11. The method of claim 10, wherein the configuration comprises the at least one function associated with an access level parameter that establishes whether access to the at least one function is authorized.

12. The method of claim 10, wherein the plurality of functions comprise a plurality of ones selected from the group consisting of:

audio function, printing function, mass storage function, human input function, communications function, and networking function.

13. The method of claim 10, wherein determining whether said access to the at least one function is authorized further comprises:

determining whether the at least one function is restricted via password for a specific user; and

prompting the user to enter a password; and

authorizing access to the at least one function in response to receiving the right password from the user.

14. The method of claim 10, wherein determining whether the at least one function is disabled for said user further comprises:

loading the class driver specified at the registry key; and

restricting access to the at least one function via the multifunction port if the class driver comprises a dummy driver.

15. The method of claim 10, where the multi-function port comprises a Universal Serial Bus (USB) port.

16. The method of claim 10, wherein the attempt to access the at least one function is performed when a first one of the plurality of external devices is connected to the multi-function port, and

wherein the request for the second function is performed when a second, different one of the plurality of external devices is connected to the multi-function port.

17. A system for managing access to a plurality of functions supported by a multi-function port, the system comprising:

a processor;

at least one multi-function port operable to support the plurality of functions, wherein the at least one multi-function port is connectable to any one of a plurality of different external devices;

a data storage device to store information that defines for a specific user of a plurality of users whether access for the specific user to at least one function of the plurality of functions is authorized, the information to further indicate that access to a second, different one of the plurality of functions is unrestricted;

process executable on the processor to determine, upon a requested access from the specific user for the at least one function via the multi-function port, whether said requested access is authorized based at least in part on said stored information, wherein the process is to determine whether the specific user is authorized to access the at least one function by determining whether the at least one function is disabled for the specific user, and wherein the at least one function is determined to be disabled for the specific user by accessing a registry key for a class driver associated with the at least one function, and

the process executable to further determine, in response to a request from the specific user for the second function, to allow unrestricted access to the second function.

18. The system of claim 17, wherein the information comprises the at least one function, authorization information, and a user identification associated with the specific user.

19. The system of claim 17, wherein the plurality of functions comprises a plurality of ones selected from the group consisting of:

audio function, printing function, mass storage function, human input function, communications function, and networking function.

20. The system of claim 17, the process further executable to determine whether said requested access is authorized by:

determining whether the at least one function is restricted via password for the specific user; and

prompting the user to enter a password; and

authorizing access to the at least one function in response to receiving the right password from the specific user.

21. The system of claim 17, wherein determining whether the at least one function is disabled for the specific user further comprises:

loading the class driver specified at the registry key; and

restricting access to the at least one function via the multifunction port if the class driver comprises a dummy driver.

22. The system of claim 17, wherein the multi-function port comprises a Universal Serial Bus (USB) port.

23. The system of claim 17, wherein the requested access to the at least one function is performed when a first of the plurality of external devices is connected to the at least one multi-function port, and wherein the request for the second function is performed when a second, different one of the external devices is connected to the at least one multi-function port.

24. The system of claim 19, wherein the plurality of different external devices comprise a plurality of ones selected from the group consisting of:

audio device, printer, mass storage device, human input device, communications device, and networking device.

25. A processor-based device comprising:

a processor;

at least one Universal Serial Bus (USB) port operable to support a plurality of functions, where access by a specific user to at least one function of the plurality of functions is limited, and access to a second, different one of the plurality of functions is unrestricted;

a registry key; and

process executable on the processor to determine, upon a requested access from the specific user for the at least one function via the at least one USB port, whether the requested access is authorized, wherein the process is executable to further allow unrestricted access to the second function in response to a request for the second function, wherein the process is to determine whether the requested access is authorized by determining whether the at least one function is disabled for the specific user, and the process is to determine whether the at least one function is disabled by accessing the registry key for a class driver associated with the at least one function.

26. The system of claim 25 further comprising;

wherein the class driver is a dummy class driver that restricts access to the at least one function via the USB port.

27. The system of claim 25, wherein the at least one function limited from being accessed by the user via the at least one USB port comprises a mass storage function.

28. The processor-based device of claim 25, wherein the at least one USB port is connectable to any one of a plurality of different external devices, wherein the at least one function is provided by a first of the external devices, and the second function is provided by a second of the external devices.

29. The processor-based device of claim 25, further comprising a storage to store configuration information specifying the limited access to the at least one function, and the unrestricted access to the second function.