User access verification

• US 9,942,761 B1
• Filed: 10/10/2016
• Issued: 04/10/2018
• Est. Priority Date: 10/10/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Cheng, Kangguo, Fetterolf, Shawn P.
• Primary Examiner(s): Ho, Dao
• Application Number:
  US15/289,455
• Publication Number:
  US 20180103373A1
• Time in Patent Office: 547 Days
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 72/0453 Resources in frequency domain, e.g. a carrier in FDMA

Abstract

Embodiments are directed to a method of providing access verification for a system that includes activating a security control device, which is in communications with a host device. The method also includes having the security control device receiving a verification signal coming from outside the system while being locally-based, and comparing the verification signal to a table of stored criteria values. The device then chooses a response based on that comparison and sends an access determination signal based on the response.

Claims

1. A method of providing access verification for an electronic system, the method comprising:

activating a security control device by a host device, wherein the security control device is communicatively coupled to the host device, and wherein the host device comprises an electronic device having at least communications, power, input/output, and processing capability, wherein the host device and the security control device are physically integrated with one another on an integrated circuit;

receiving, by the security control device, two or more verification signals, wherein the two or more verification signals originate from outside the system and are locally-based, and wherein the two or more verification signals include a global positioning satellite signal, an internet protocol signal originating from a server, switch, or gateway, a wireless router signal, and a radio frequency signal, wherein the plurality of verification signals are present simultaneously;

comparing, by the security control device, the two or more verification signals to a table of stored criteria values to determine whether the two or more verification signals are valid signals or invalid signals, wherein the table of stored criteria values include a database of preselected signals based on location;

choosing, by the security control device, a positive response or negative response based on the comparison, wherein the positive response results from two or more valid signals received by the security control device, and enables the host device to continue operating, and wherein the negative response results from two or more invalid signals received by the security control device, and disables the host device by restricting one or more functions of the host device including communications, power, input/output, and processing capability; and

sending an access determination signal to the system based on the positive response or negative response.

2. The method of claim 1, wherein the negative response includes causing physical damage to one or more of memory, communication ports, power connections, and processors.

3. The method of claim 1, wherein the negative response is includes temporarily disabling the host device.

4. The method of claim 1, wherein the positive response or the negative response includes sending a location signal of the host device to a remote site.

5. The method of claim 1, wherein the two or more verification signals includes a cell phone transmission.

6. The method of claim 5, wherein the cell phone transmission includes a signal from an individual cell phone.

7. The method of claim 5, wherein the cell phone transmission includes a signal from a local cell tower.

8. The method of claim 1, wherein the two or more verification signals includes an internet protocol address.

9. The method of claim 8, wherein the internet protocol signal includes an internet protocol address of the server.

10. A device to provide access verification for a system, the device comprising:

a security control device activated by a host device and, communicatively coupled to the host device, wherein the host device comprises an electronic device having at least communications, power, input/output, and processing capability, wherein the host device and the security control device are physically integrated with one another on an integrated circuit;

two or more verification signals originating from outside the system and are locally-based, wherein the two or more verification signals include a global positioning satellite signal, an internet protocol signal originating from a server, switch, or gateway, a wireless router signal, and a radio frequency signal, wherein the plurality of verification signals are present simultaneously;

a table of stored criteria values located within the security control device, wherein the stored criteria values are used to determine whether the two or more verification signals are valid signals or invalid signals, and wherein the stored criteria values include a database of preselected signals based on location;

a processor, located within the security control device, wherein the processor compares the two or more verification signals to the table of stored criteria values and chooses a positive response or a negative response based on the comparison, wherein the positive response results from two or more valid signals being present, and enables the host device to continue operating, and wherein the negative response results from two or more invalid signals being present, and disables the host device by restricting one or more functions of the host device including communications, power, input/output, and processing capability; and

an access determination signal based on the response.