Remote computer lockdown

• US 9,792,453 B2
• Filed: 09/26/2007
• Issued: 10/17/2017
• Est. Priority Date: 09/26/2007
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Challener, David Carroll, Cromer, Daryl, Locker, Howard, Springfield, Randall Scott
• Primary Examiner(s): Huynh, Kim
• Assistant Examiner(s): KINSEY, BRANDON MICHAEL
• Application Number:
  US11/861,597
• Publication Number:
  US 20090083555A1
• Time in Patent Office: 3,674 Days
• Field of Search: 713300, 713310, 709217
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A method and system are disclosed for placing a computer in a safe and secure lock down state from a remote location using a remote command device such as a cellular telephone. The method and system includes optional security provisions before restarting the computer.

Claims

1. A method comprising:

preparing a message at a personal computing system, said message comprising a unique code based on an address of a hardware component associated with the personal computing system and data specifying a desired lockdown command action;

establishing a communications link between said personal computing system and a cellular telephone;

uploading said message to said cellular telephone;

thereafter receiving, at the personal computing system, data comprising said message from the cellular telephone by way of a network; and

locking-down said personal computing system in response to receipt of said message comprising said unique code associated with said personal computing system and said desired lockdown command action;

said locking-down comprising;

responsive to the personal computing system receiving said message in a running state, transitioning into a password protected state; and

responsive to the personal computing system receiving said message in a suspended state, awakening the personal computing system and thereafter transitioning to a password protected state.

2. The method as described by claim 1 wherein said message is formatted in accordance with one of the group consisting of a Magic Packet and a short text message.

3. The method as described by claim 1 wherein said locking-down comprises a transition from a S0 (operating system running) state to a state chosen from a group consisting of S4 (hibernate) state and S5 (off) state.

4. The method as described by claim 1 wherein said locking-down comprises transitioning from an S3 (suspend) state initially to an S0 (operating system running) state, and subsequently to a state chosen from a group consisting of S4 (hibernate) state and S5 (off) state.

5. The method as described by claim 1, further comprising:

determining that said message includes an instruction specifying a security policy to be followed for restarting of said personal computing system;

setting a flag signifying that said instruction has be received; and

implementing said security policy.

6. The method in accordance with claim 5 where said security policy requires use of security password to restart said personal computing system.

7. The method in accordance with claim 5 where said security policy provides for remote setting of a security password.

8. Apparatus comprising:

an electronic memory which stores data and executable software code;

a network interface card that has an address and can detect a message;

a processor, operatively coupled to said electronic memory and to said network interface card, and that executes said executable software code that;

prepares and uploads, to a cellular telephone, a message comprising a unique code based on the address and data specifying a desired lockdown command action;

determines that data comprising said message has been received from said cellular telephone after said message has been prepared and uploaded to the cellular telephone; and

locks-down the apparatus in response to receipt of said message comprising said unique code associated with said network interface card and said desired lockdown command action;

wherein the apparatus locks-down by;

responsive to the apparatus receiving said message in a running state, transitioning into a password protected state; and

responsive to the apparatus receiving said message in a suspended state, awakening the apparatus and thereafter transitioning to a password protected state.

9. Apparatus, in accordance with claim 8, where said processor further:

determines that said message includes an instruction specifying security policy to be followed for restarting of said apparatus;

sets a flag signifying that said remotely transmitted message has been received; and

implements said security policy.

10. Apparatus, in accordance with claim 8, where said security policy requires use of security password to restart said apparatus.

11. Apparatus, in accordance with claim 8, where said security policy provides for remote setting of security password.

12. A computer-usable memory device having computer readable instructions stored thereon, for execution by a processor, to:

prepare a message at a personal computing system, said message comprising a unique code based on an address of a hardware component associated with the personal computing system and data specifying desired lockdown command action;

establish a communications link between said personal computing system and cellular telephone;

upload said message to said cellular telephone;

thereafter receive, at the personal computing system, data comprising said message from the cellular telephone by way of a network; and

lock-down said personal computing system in response to receipt of said message comprising said unique code associated with said personal computing system and said desired lockdown command action;

said lock-down comprising;

responsive to the personal computing system receiving said message in a running state, transitioning into a password protected state; and

responsive to the personal computing system receiving said message in a suspended state, awakening the personal computing system and thereafter transitioning to a password protected state.

13. A computer-usable memory device, in accordance with claim 12, wherein said lock-down comprises transitioning from a S0 (operating system running) state to a state chosen from a group consisting of S4 (hibernate) state and S5 (off) state.

14. A computer-usable memory device, in accordance with claim 12, wherein said lock-down comprises transitioning from an S3 (suspend) state initially to an S0 (operating system running) state, and subsequently to a state chosen from a group consisting of S4 (hibernate) state and S5 (off) state.

15. A computer-usable memory device, in accordance with claim 12, wherein said computer readable instructions are further executable by the processor to determine that said remotely transmitted message includes an instruction specifying a security policy to be followed for restarting of said personal computing system;

set a flag signifying that said instruction has been received; and

in response to said flag, implement said security policy.

16. A computer-usable memory device, in accordance with claim 15, wherein said security policy requires use of security password to restart said personal computing system.

17. A computer-usable memory device, in accordance with claim 15, wherein said security policy provides for remote setting of security password.