Security system

• US 8,206,460 B2
• Filed: 12/05/2006
• Issued: 06/26/2012
• Est. Priority Date: 12/05/2006
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Posamentier, Joshua
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US11/633,787
• Publication Number:
  US 20080134299A1
• Time in Patent Office: 2,030 Days
• Field of Search: None
• US Class Current: 726/35
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Described herein are one or more implementations of a security system for one or more protected devices. The security system implements an authentication system that enables protected devices. Protected devices are enabled for a particular network, and are disabled when the protected devices leave the network.

Claims

1. A method implemented by a device, the method comprising:

attempting to establish a connection between the device and a network access point;

determining whether the device successfully established a connection with the network access point;

disabling the device if the device does not successfully establish a connection with the network access point;

requesting, over the connection, authentication from an authentication system using a security key stored in a security key module; and

disabling the device if the device is not successfully authenticated by the authentication system.

2. A method as described in claim 1, further comprising enabling the device if the device successfully establishes a connection with the network access point.

3. A method as described in claim 1, wherein the network access point is a wireless access point.

4. A method as described in claim 1, wherein the network access point is a particular network access point associated with the device.

5. A method as described in claim 1, wherein attempting to establish a connection between the device and the network access point occurs during device initialization.

6. One or more non-transitory computer-readable media having stored thereon computer executable instructions that, when executed, perform a method comprising:

receiving a request to activate a device;

attempting to establish a connection between the device and a particular network access point;

determining whether a connection was successfully established between the device and the particular network access point;

disabling the device if a connection was not successfully established between the device and the particular network access point;

requesting, over the connection, authentication from an authentication system using a security key stored in a security key module; and

disabling the device if the device is not successfully authenticated by the authentication system.

7. One or more computer-readable media as described in claim 6, wherein the computer executable instructions further enable the device if a connection was successfully established between the device and the particular network.

8. One or more computer-readable media as described in claim 6, wherein attempting to establish a connection between the device and a particular network access point includes multiple attempts to establish a connection between the device and a particular network access point.

9. One or more computer-readable media as described in claim 6, wherein, if a connection was successfully established between the device and the particular network access point, the computer executable instructions further:

waiting a predetermined time after establishing a connection between the device and the particular network access point;

attempting to reestablish a connection between the device and the particular network access point; and

preventing enabling of the device if a connection was not reestablished between the device and the particular network access point.

10. An apparatus comprising:

one or more processors;

a communication module coupled to the one or more processors;

a security key module adapted to store a security key, coupled to the one or more processors; and

a device activation module coupled to the communication module, wherein the device activation module includes computer executable instructions stored in a non-transitory computer-readable media which when executed by the one or more processors;

attempt to establish a wireless connection between the apparatus and a network access point;

authenticate the apparatus with an authentication system coupled to the network access point, using the security key stored in the security key module;

determine whether a wireless connection was successfully established between the apparatus and the network access point and whether the apparatus was authenticated, and further to disable the apparatus if a wireless connection was not successfully established or the apparatus was not authenticated.

11. An apparatus as described in claim 10, wherein the device activation module includes instructions that when executed by the one or more processors attempts to reactivate a non-enabled apparatus a predetermined time period after the apparatus is prevented from being enabled.

12. An apparatus as described in claim 10, wherein the device activation module includes instructions that when executed by the one or more processors periodically attempt to establish a wireless connection between the apparatus and the network access point, regardless of whether the apparatus was previously prevented from being enabled.