Networked device access control

• US 9,363,264 B2
• Filed: 11/25/2013
• Issued: 06/07/2016
• Est. Priority Date: 11/25/2013
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Andrews, Stephanie, Smith, Gary, Novack, Brian M., Arora, Aditya, Jeffrey, Emlyn C.
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US14/088,841
• Publication Number:
  US 20150150101A1
• Time in Patent Office: 925 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G07C 9/00904 for hotels, motels, office buildings or the like
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A computer apparatus is remotely initiated. Confirmation of a detected and authenticated presence of a user is detected and confirmed remote from the computer apparatus. A dedicated resource that will be implemented using the computer apparatus is logged in in a protected workstate that prevents access to the computer apparatus until a local presence of the user is detected and authenticated. The workstate of the computer apparatus is unprotected upon confirmation of the local presence of the user. Access to the user is allowed upon unprotecting the workstate of the computer apparatus.

Claims

1. A method of remotely initiating a computer apparatus, comprising:

receiving, over a network, confirmation of a detected and authenticated presence of a user remote from the computer apparatus;

logging in, based on receiving confirmation of the detected and authenticated presence of the user remote from the computer apparatus, to a dedicated user resource that will be implemented using the computer apparatus in a protected workstate that prevents access to the computer apparatus while the user is remote and until a local presence of the user is detected and authenticated;

unprotecting the workstate of the computer apparatus upon confirmation of the local presence of the user, and

allowing access to the user upon unprotecting the workstate of the computer apparatus.

2. The method of claim 1, further comprising:

logging in to a customized set of applications on the computer apparatus in the protected workstate prior to the confirmation of the local presence of the user.

3. The method of claim 2,

wherein the confirmation of the detected and authenticated presence of the user remote from the computer apparatus and the confirmation of the local presence of the user are each based upon a biometric input from the user.

4. The method of claim 1, further comprising:

powering-up the computer apparatus prior to logging in to the computer apparatus and based upon the confirmation of the detected and authenticated presence of the user remote from the computer apparatus.

5. The method of claim 1,

wherein the network comprises a private local area network.

6. The method of claim 1, further comprising:

logging in to a plurality of computer apparatuses in a protected workstate that prevents access to the plurality of computer apparatuses until a local presence of the user is confirmed;

unprotecting the workstate of the plurality of computer apparatuses upon confirmation of the local presence of the user, and

allowing access to the user upon unprotecting the workstate of the plurality of computer apparatuses.

7. The method of claim 1, further comprising:

allowing access to another user upon unprotecting the workstate of the computer apparatus.

8. The method of claim 1,

wherein the detected and authenticated presence is at a controlled entrance of a facility, and the computer apparatus is within the facility.

9. The method of claim 1,

wherein the detected and authenticated presence is authenticated using a biometric input from the user.

10. The method of claim 9,

wherein the biometric input is a fingerprint.

11. The method of claim 1,

wherein a security system confirms both the authenticated presence of the user remote from the computer apparatus and the local presence of the user at the computer apparatus.

12. The method of claim 1,

wherein the logging in to the computer apparatus in a protected workstate is automatically performed based on receiving confirmation of the detected and authenticated presence of the user remote from the computer apparatus.

13. The method of claim 1,

wherein the logging in to the computer apparatus in the protected workstate is performed based on receiving confirmation of the detected and authenticated presence of the user remote from the computer apparatus and based on confirmation from the user that the logging in should be performed.

14. The method of claim 1,

wherein the detected and authenticated presence of the user remote from the computer apparatus is detected and authenticated at an entrance to a facility that contains the computer apparatus.

15. The method of claim 1, further comprising:

provisioning the computer apparatus from a cloud network in accordance with a profile for the user following and based on logging in to the computer apparatus in the protected workstate.

16. The method of claim 1, further comprising:

confirming that no other user is logged into and using the computer apparatus prior to logging in to the computer apparatus in the protected workstate.

17. The method of claim 1,

wherein the computer apparatus is used by multiple users.

18. The method of claim 1,

wherein the computer apparatus is provided in a call center.

19. A tangible computer readable storage medium that stores a computer program for remotely initiating a computer apparatus, the computer program, when executed by a processor, causing the computer apparatus to perform a process comprising:

receiving, over a network, confirmation of a detected and authenticated presence of a user remote from the computer apparatus;

logging in, based on receiving confirmation of the detected and authenticated presence of the user remote from the computer apparatus, to a dedicated user resource that will be implemented using the computer apparatus in a protected workstate that prevents access to the computer apparatus while the user is remote and until a local presence of the user is detected and authenticated;

unprotecting the workstate of the computer apparatus upon confirmation of the local presence of the user, and

allowing access to the user upon unprotecting the workstate of the computer apparatus.

20. A computer apparatus, comprising:

a memory that stores instructions, and

a processor that executes the instructions,

wherein, when executed by the processor, the instructions cause the processor to perform operations comprising;

receiving, over a network, confirmation of a detected and authenticated presence of a user remote from the computer apparatus;

logging in, based on receiving confirmation of the detected and authenticated presence of the user remote from the computer apparatus, to a dedicated user resource that will be implemented using the computer apparatus in a protected workstate that prevents access to the computer apparatus while the user is remote and until a local presence of the user is detected and authenticated;

unprotecting the workstate of the computer apparatus upon confirmation of the local presence of the user, and

allowing access to the user upon unprotecting the workstate of the computer apparatus.