Remote monitoring of user input devices

• US 8,001,237 B2
• Filed: 03/21/2008
• Issued: 08/16/2011
• Est. Priority Date: 03/21/2008
• Status: Expired due to Fees

• Current Assignee: Young Yee
• Original Assignee: Young Yee
• Inventors: Yee, Young
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US12/053,415
• Publication Number:
  US 20090240800A1
• Time in Patent Office: 1,243 Days
• Field of Search: 709/217, 709/219, 709/223, 709/224, 709/225, 709/250
• US Class Current: 709/224
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2151 Time stamp

Abstract

A precision data capture recorder/security device non-intrusively and precisely captures and records information from computerized input devices (e.g., computer keyboards and mouses). Information collected by a data capture recorder co-located with a client can be precisely date and time tag user input to a user interface (e.g., keyboard) and transmitted to a base collection station for archiving and analysis. Archived information provides accurate history logs for regulatory audit compliance, data security, and system administrative troubleshooting. Analysis can help determine whether user data input patterns at the user interface are authorized.

Claims

1. A data security system, comprising:

a standalone data capture recorder that does not require a host computer for its installation or operation, installed in the communications path between a user interface and a user computer system connected to the user interface, said data capture recorder non-intrusively captures in real-time user'"'"'s input directly from said user interface, said data capture recorder adapted to record, time stamp user inputs at the user interface and transmit user input data to a base collection station, wherein said user interface comprises one or more of the following;

a computer keyboard, a user input pad, or a mouse;

an accurate time module adapted to provide an accurate said time stamp from at least one atomic clock transmission for said user inputs entered at said user interface;

a base collection station located remote from the data capture recorder, the user interface and the user computer system and adapted to receive user input data comprising at least one of timing or cadence of each key stroke for archiving in a memory associated with the base collection station; and

an analysis module that compares user input received from said data capture recorder with data input patterns stored in said memory associated with said base collection system, wherein if said user input deviates from defined said data input patterns, a notification is provided by said base collection station in real time.

17. The data security system of claim 1, wherein if an input cadence does not match a profile associated with a registered user of a computer associated with said data capture recorder in said analysis module, notification is provided in real time by said base collection station.

18. The data security system of claim 1, wherein said data capture recorder further performs encryption functions on said time stamped user inputs.

19. The data security system of claim 1 wherein said base collection station collects at least one of the data capture recorder identification information to identify an origin of the key stroke biometric information collected from said computer system.

2. A method of providing data security at a computer system, comprising:

providing a standalone data capture recorder that does not require a host computer for its installation or operation along a communication path between a user input device and a computer system;

recording non-intrusively real-time user data input entries directly at the user input device with the data capture recorder, wherein said user input device comprises one or more of the following;

a computer keyboard, a user input pad, or a mouse;

providing an accurate time module adapted to provide an accurate said time stamp from at least one atomic clock transmission for said user inputs entered at said user input device,

transmitting real-time data entries comprising at least one of timing or cadence of each key stroke from the data capture recorder to a remote base collection station;

analyzing said real-time data entries using an analysis module associated with said base collection station to determine user identity; and

notifying in real time deviations of said real-time data entries from a defined data entry patterns or if input cadence does not match a profile associated with a registered user associated with said data capture recorder.

3. The method of providing data security at a computer system of claim 2, including the step of providing accurate date and time information for real-time user data input entries at the user input device before the step of transmitting real-time data entries from the data capture recorder to a remote base collection station.

4. The method of providing data security at a computer system of claim 2, wherein the real-time user data input entries at the accurate date and time information is transmitted by the data capture recorder to the base station controller via at least one of a wireless connection and network cable connection.

5. The method of providing data security at a computer system of claim 2, wherein at least one of the user input device and the data capture recorder is uniquely identified to the base station controller with at least one of a product code, identification number and address.

6. The method of providing data security at a computer system of claim 2, including the step of providing accurate date, time and at least one of product code, identification number and address information for real-time user data input entries at the user input device before the step of transmitting real-time data entries from the data capture recorder to a remote base collection station,

7. The method of providing data security at a computer system of claim 6, wherein at least one of an assigned location and physical location information for at least one of the data capture recorder is stored at said base collection station.

8. The method of providing data security at a computer system of claim 6, wherein data including the real-time user data input entries, and accurate date and time information for the real-time user data input entries, for at least one of the user input device and the data capture recorder are received by a base station controller wherein the data is archived.

9. The method of providing data security at a computer system of claim 6, wherein data including the real-time user data input entries, accurate date and time information for the real-time data entries, and location information for at least one of the user input device and the data capture recorder are received by a base station controller wherein the data is archived and analyzed to determine if real-time data entries deviate from a defined data entry patterns or if input cadence does not match a profile associated with a registered user of a computer associated with the data capture recorder.

10. A method of providing data security at a computer system, comprising:

providing a standalone data capture recorder that does not require a host computer for its installation or operation along a communication path between a user input device and a computer system;

recording non-intrusively real-time data entries by a user directly at the user input device with the data capture recorder wherein said user input device comprises one or more of the following;

a computer keyboard, a user input pad, or a mouse;

providing accurate date and time information provided by at least one of atomic clock information for the real-time data entries at the user input device;

transmitting real-time data comprising at least one of timing or cadence of each key stroke from the data capture recorder to a remote base collection station via at least one of a wireless connection and network cable connection, wherein the real-time data entries are archived;

analyzing said real-time data entries using an analysis module associated with said base collection station to determine user identity; and

notifying in real time deviations of said real-time data entries from a defined data entry patterns or if input cadence does not match a profile associated with a registered user associated with said data capture recorder.

11. The method of providing data security at a computer system of claim 10, wherein at least one of the user input device and the data capture recorder is uniquely identified to the base station controller with at least one of a product code, identification number and address.

12. The method of providing data security at a computer system of claim 10, including the step of obtaining location information for real-time data entries at the user input device together with the real-time data entries and accurate date and time information before the step of transmitting real-time data entries from the data capture recorder to a remote base collection station, and transmitting the location information to the base controller system with the real-time data entries and accurate date and time information to the base controller system.

13. The method of providing data security at a computer system of claim 12, wherein location information for at least one of the data capture recorder and the user input device is obtained using said atomic clock.

14. The method of providing data security at a computer system of claim 12, wherein data including the real-time user data input entries, accurate date and time information for the real-time user data input entries, and location information for at least one of the user input device and the data capture recorder are received by a base station controller wherein the data is archived.

15. The method of providing data security at a computer system of claim 12, wherein data including the real-time user data input entries, accurate date and time information for the real-time data entries, and location information for at least one of the user input device and the data capture recorder are received by a base station controller wherein the data is archived and analyzed to determine if real-time data entries deviate from a defined data entry patterns or if input cadence does not match a profile associated with a registered user of a computer associated with the data capture recorder.

16. The method of providing data security at a computer system of claim 12, wherein data including the real-time user data input entries and at least one of accurate date and time information for the real-time user data input entries, and location information for at least one of the user input device and the data capture recorder, are received by a base station controller wherein the data is analyzed to determine if real-time data entries deviate from a defined data entry patterns or if input cadence does not match a profile associated with a registered user of a computer associated with the data capture recorder.