Remote administration of computer access settings

• US 8,166,560 B2
• Filed: 10/30/2007
• Issued: 04/24/2012
• Est. Priority Date: 09/16/2003
• Status: Active Grant

• Current Assignee: Fernham Technologies LLC (Intellectual Ventures LLC)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Patrawala, Zakir S., Virani, Samira S., Chebolu, Anil Kumar, Hill, Timothy A., McMenamin, Marie Louiise
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US11/929,101
• Publication Number:
  US 20080066164A1
• Time in Patent Office: 1,638 Days
• Field of Search: 713/150, 713/155, 713/161, 713/164, 713165-167, 726 26- 27
• US Class Current: 726/27
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

The present disclosure provides systems and methods for controlling computer access. Briefly described in architecture, some embodiments of such a system provide a control unit for controlling user access to a computer in accordance with a user profile. An administrator of the computer is enabled to remotely access and modify the user profile. The user profile is stored at least in a remote database that is accessible via a server. Other systems and methods are also provided.

Claims

1. A method to control computer access, comprising:

storing a user profile in local memory of a computer, the user profile having settings customized for a user of the computer, the settings specifying types of information that the user is authorized to access on the computer;

remotely storing a copy of the user profile in a database of a server that communicates with the computer;

detecting an event at the computer that initiates a synchronization procedure;

retrieving a time associated with the copy of the user profile stored in the server;

comparing the time associated with the copy to another time associated with the user profile stored in the local memory of the computer, whereby the copy is synchronized to a latest version stored in the computer;

producing a prompt at the computer to identify the user of the computer;

receiving a password that identifies the user of the computer;

querying the copy of the user profile stored in the server for the password to verify the password;

detecting no response from the server to verify the password;

querying the user profile stored in the memory of the computer for the password when the server fails to respond;

determining the password matches the user profile stored in the memory of the computer; and

controlling access to the computer in accordance with the user profile.

2. The method of claim 1, further comprising storing an allow list of Internet addresses to which access is permitted.

3. The method of claim 1, further comprising storing a block list of Internet addresses to which access is denied.

4. The method of claim 1, further comprising prohibiting, in the settings, a computer application on the computer.

5. The method of claim 1, further comprising modifying access privileges for the user via the world wide web.

6. A non-transitory computer-readable storage medium storing processor-executable instructions for performing a method, the method comprising:

storing a user profile in local memory of a computer, the user profile having settings customized for a user of the computer, the settings specifying types of information that the user is authorized to access on the computer;

remotely storing a copy of the user profile in a database of a server that communicates with the computer;

detecting an event at the computer that initiates a synchronization procedure;

retrieving a time associated with the copy of the user profile stored in the server;

comparing the time associated with the copy to another time associated with the user profile stored in the local memory of the computer, whereby the copy is synchronized to a latest version stored in the computer;

producing a prompt at the computer to identify the user of the computer;

receiving a password that identifies the user of the computer;

querying the copy of the user profile stored in the server for the password to verify the password;

detecting no response from the server to verify the password;

querying the user profile stored in the memory of the computer for the password when the server fails to respond;

determining the password matches the user profile stored in the memory of the computer; and

controlling access to the computer in accordance with the at least one user profile.

7. The computer readable storage medium of claim 6, further comprising instructions for accessing an allow list of Internet addresses to which access is permitted.

8. The computer readable storage medium of claim 6, further comprising instructions for accessing a block list of Internet addresses to which access is denied.

9. The computer readable storage medium of claim 6, further comprising instructions for prohibiting, in the settings, a computer application on the computer.

10. The computer readable storage medium of claim 6, further comprising instructions for modifying access privileges for the user via the World Wide Web.

11. A system for controlling access to a computer, comprising:

a processor;

memory; and

instructions stored in the memory that cause the processor at least to;

store a user profile in the memory having settings customized for a user of the computer, the settings specifying types of information that the user is authorized to access on the computer;

remotely store a copy of the user profile;

detect an event by the processor that initiates a synchronization procedure;

retrieve a time associated with the copy of the user profile;

compare the time associated with the copy to another time associated with the user profile stored in the memory, wherein the copy is synchronized to a latest version stored in the computer;

produce a prompt at the computer to identify the user of the computer;

receive a password that identifies the user of the computer;

query the copy of the user profile stored in the server for the password to verify the password;

detect no response from the server to verify the password;

query the user profile stored in the memory of the computer for the password when the server fails to respond;

determine the password matches the user profile stored in the memory of the computer; and

control access to the computer in accordance with the user profile.

12. The system of claim 11, further comprising instructions that cause the processor to access an allow list of Internet addresses to which access is permitted.

13. The system of claim 12, further comprising instructions that cause the processor to:

intercept a message for opening a new window associated with a requested Uniform Resource Indicator;

compare the Uniform Resource Indicator to a prohibited list of Uniform Resource Indicators;

prohibit opening the new window associated with the requested Uniform Resource Indicator when the requested Uniform Resource Indicator is found in the prohibited list of Uniform Resource Indicators, thus denying access to the requested Uniform Resource Indicator, as the user is not authorized to access the requested Uniform Resource Indicator; and

open the new window associated with the requested Uniform Resource Indicator when the requested Uniform Resource Indicator is not found in the prohibited list of Uniform Resource Indicators as the user is authorized to access the requested Uniform Resource Indicator.

14. The system of claim 11, further comprising instructions that cause the processor to access a list of prohibited computer applications.

15. The system of claim 11, further comprising instructions that cause the processor to modify the settings.