Controlling a computer system

• US 9,531,741 B1
• Filed: 06/11/2015
• Issued: 12/27/2016
• Est. Priority Date: 06/11/2015
• Status: Active Grant

• Current Assignee: SSH Communications Security Oyj
• Original Assignee: SSH Communications Security Oyj
• Inventors: Parviainen-Jalanko, Kimmo
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US14/736,783
• Publication Number:
  US 20160366166A1
• Time in Patent Office: 565 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G05B 15/02 electric
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users

Abstract

A method and apparatus for control of a computer system are disclosed. The computer system includes a terminal for operator based monitoring of the computer system. A monitoring device is provided to determine information about the state of the operator based monitoring. The information is communicated to a controller of the data security system. The controller then controls the data security system based at least in part on the information.

Claims

1. A method of controlling a computer system, the computer system comprising a data security system adapted to be monitored by an operator, the method comprising:

receiving, at a controller of the data security system, a signal comprising information about the state of the data security system that is monitored by the operator, and

controlling, by the controller, the data security system based at least in part on the signal, wherein

in response to a determination based on the signal that the computer system is not currently monitored by the operator, preventing at least a part of data communications in and/or out of the computer system, allowing only a predefined type of data communications in and/or out of the computer system and preventing other types of data communications.

2. The method according to claim 1, wherein the signal indicates at least one of presence state of the operator, activity state of the operator, log in state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system.

3. The method according to claim 1, wherein the information about the operator is received from an apparatus comprising at least one of a camera, a user interface controller, a processor of a terminal of the operator, a dead man switch, a presence sensor, building access control system, building lighting control system, a controller determining length of audit backlog, and a burglar alarm.

4. The method according to claim 1, comprising, in response to determination based on the signal that the computer system is not currently monitored by the operator, buffering at least a part of data communications in and/or out of the computer system until it is determined that the computer system is again monitored by the operator.

5. The method according to claim 1, comprising switching by the controller the data security system between different modes of operation based at least in part on the signal.

6. The method according to claim 1, wherein the data security system comprises a security gateway such as a firewall.

7. A method for a computer system, the computer system comprising a data security system and a terminal adapted to monitor the data security system through an operator, the method comprising:

determining, at a monitoring device, information about the state of the data security system that is monitored by the operator, and

sending the information to a controller of the data security system for use in controlling the data security system based at least in part on that information, wherein

in response to a determination based on the information that the data security system is not currently monitored by the operator, preventing at least a part of data communications in and/or out of the computer system, allowing only a predefined type of data communications in and/or out of the computer system and preventing other types of data communications.

8. The method according to claim 7, wherein the information indicates at least one of presence state of the operator, activity state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system.

9. The method according to claim 7, comprising determining information about the operator based on at least one of a camera, a user interface controller, a processor of a terminal of the operator, a dead man switch, a presence sensor, building access control system, building lighting control system, length of audit backlog, and a burglar alarm.

10. A control apparatus for a data security system of a computer system adapted to be monitored by an operator, the control apparatus comprising at least one processor, and at least one memory including computer program code, wherein the at least one memory and the computer program code are configured, with the at least one processor, to cause the control apparatus to:

receive a signal comprising information about the state of the data security system that is monitored by the operator, and

control the data security system based at least in part on the signal, wherein

in response to a determination based on the signal that the computer system is not currently monitored by the operator, preventing at least a part of data communications in and/or out of the computer system, allowing only a predefined type of data communications in and/or out of the computer system and preventing other types of data communications.

11. The control apparatus according to claim 10, wherein the signal indicates at least one of presence state of the operator, activity state of the operator, log in state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system.

12. The control apparatus according to claim 10, configured to, in response to determination that the computer system is not monitored by the operator, buffer at least a part of data communications in and/or out of the computer system until determination that the computer system is monitored by the operator.

13. The control apparatus according to claim 10, configured to switch the data security system between different modes of operation based at least in part on the signal.

14. The control apparatus according to claim 10, wherein the data security system comprises a firewall.

17. The monitoring apparatus according to claim 11, comprising at least one of a camera, a user interface controller, a processor of a terminal of the operator, a dead man switch, a presence sensor, building access control system, building lighting control system, and a burglar alarm.

15. A monitoring apparatus for a computer system comprising a data security system, wherein the data security system comprises a terminal adapted to monitor the data security system through an operator, the monitoring apparatus comprising:

at least one controller device for determining information about the state of the data security system that is monitored by the operator, and

an interface device for communicating the information to a control apparatus of the data security system for use in controlling the data security system based at least in part on the information, wherein

in response to a determination based on the information that the computer system is not currently monitored by the operator, preventing at least a part of data communications in and/or out of the computer system, allowing only a predefined type of data communications in and/or out of the computer system and preventing other types of data communications.

16. The monitoring apparatus according to claim 15, configured to generate information indicative at least one of presence state of the operator, activity state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system.