Selective prevention of undesired communications within a computer network

• US 20020083337A1
• Filed: 12/21/2000
• Published: 06/27/2002
• Est. Priority Date: 12/21/2000
• Status: Active Grant

• Current Assignee: Jon Ryan Welcher
• Original Assignee: Jon Ryan Welcher
• Inventors: Welcher, Jon Ryan, Marcroft, Sacha Laurent
• Granted Patent: US 7,036,144 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A system for controlling communication-access within a computer network, includes an access-prevention device connected in series with a computer'"'"'s bi-directional network-communication port for preventing the computer from receiving and/or transmitting any communications from and/or to another computer within the network; and a control device for selectively controlling the access-prevention device. Such an access-prevention device including a control terminal for connection to the control device is disposed within a communication-access control apparatus that may be connected between the computer network and the computer. Alternatively, the access-prevention device is disposed within the computer chassis, the modem, an external network-access terminal or a firewall device. The control device includes a manual switch actuator disposed on a chassis containing the access-prevention device, or a remote-control device, or a computer keyboard or a mouse, or a presence detector, or an inactivity detector.

Claims

1. An apparatus for controlling communication-access between a computer network and either a computer or a modem that has a given port for bi-directional communication by the computer or the modem with the network, the apparatus comprising

an access-prevention device having a control terminal, a first connector for connection to the given port, a second connector for connection to the network, and electrically powered switching means connected in series between the first and second connectors and operable in response to a given control signal for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector;

and

a control terminal connected to the switching means for providing said given control signal to the switching means from an external source.

2. An apparatus according to claim 1 further comprising manually actuated means for providing said given control signal to the switching means.

3. An apparatus according to claim 1, further comprising a power terminal connected to the switching means for providing electrical power to the switching means from an external source.

4. An apparatus according to claim 1, further comprising

a control device connected to the control terminal for automatically controlling the switching means of the access-prevention device in response to a given measured interval exceeding a predetermined duration to prevent the first connector from receiving any network communications from the second connector and/or to prevent the second connector from receiving any network communications from the first connector.

5. An apparatus according to claim 4, wherein the control device comprises:

sensing means for sensing whether or not an operator is present within a predetermined space adjacent the computer; and

means coupled to the sensing means for measuring each interval when an operator is not present within said predetermined space and for providing said given control signal to the control terminal whenever the measured interval exceeds a predetermined duration;

wherein said automatic control of the access-prevention device is in response to said given control signal.

6. An apparatus according to claim 4, wherein the control device comprises:

a timer, including means for selecting a predetermined duration, means for measuring an interval beginning upon actuation of the timer and means for providing said given control signal to the control terminal whenever the measured interval exceeds the predetermined duration;

wherein said automatic control of the access-prevention device is in response to said given control signal.

7. An apparatus according to claim 1, wherein the switching means is connected only for preventing the first connector from receiving any network communication from the second connector.

8. An apparatus according to claim 1, wherein the switching means is connected only for preventing the second connector from receiving any network communication from the first connector.

9. An apparatus according to claim 1, wherein the switching means is connected for preventing any network communication between the first connector and the second connector.

10. An apparatus for controlling communication-access between a computer network and either a computer or a modem that has a given port for bi-directional communication by the computer or the modem with the network, the apparatus comprising

an access-prevention device having a first connector for connection to the given port, a second connector for connection to the network, and switching means connected in series between the first and second connectors for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector;

and

a control device for controlling the switching means of the access-prevention device to selectively prevent the first connector from receiving any network communications from the second connector and/or to selectively prevent the second connector from receiving any network communications from the first connector.

11. A system for controlling communication-access within a computer network, comprising:

a computer having a given port for bi-directional communication by the computer with another computer within the network;

an access-prevention device connected in series with the given port for preventing the computer from receiving and/or transmitting any communications from and/or to another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device is disposed within a chassis that contains the computer.

12. A system according to claim 11, wherein the control device is disposed on said chassis.

13. A system according to claim 11, further comprising a keyboard connected to the computer for controlling operation of the computer;

wherein the control device includes the keyboard.

14. A system according to claim 11, further comprising a mouse connected to the computer for controlling operation of the computer;

wherein the control device includes the mouse.

15. A system according to claim 11, wherein the control device comprises a manually operable remote-control device for transmitting a given control signal;

and

wherein the access-prevention device is controlled in response to said given control signal.

16. An apparatus according to claim 11, wherein the control device comprises:

sensing means for sensing whether or not an operator is present within a predetermined space adjacent the computer; and

means coupled to the sensing means for measuring each interval when an operator is not present within said predetermined space and for providing a given control signal whenever the measured interval exceeds a predetermined duration;

wherein said automatic control of the access-prevention device is in response to said given control signal.

17. An apparatus according to claim 11, wherein the control device comprises:

means for measuring each interval when the computer is not performing a routine in response to an input received from an input device connected directly to the computer and for providing a given control signal whenever the measured interval exceeds a predetermined duration;

wherein said control of the access-prevention device is in response to said given control signal.

19. A system according to claim 18, wherein the control device is disposed on the chassis that contains the modem.

20. A system according to claim 18, wherein the control device comprises a manually operable remote-control device for transmitting a given control signal;

and

wherein said control of the access-prevention device is in response to said given control signal.

18. A system for controlling communication-access within a computer network, comprising:

a computer having a given port for bi-directional communication by the computer with another computer within the network;

a modem connected to the given port for processing said bi-directional communication by the computer with another computer within the network;

an access-prevention device connected in series with the given port and the modem for preventing the computer from receiving and/or transmitting any communications from and/or to another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device is disposed within a chassis that contains the modem.

21. A system for controlling communication-access within a computer network, comprising:

a computer having a given port for bi-directional communication by the computer with another computer within the network;

an external network-access terminal for enabling said bi-directional communication by the computer with another computer within the network;

an access-prevention device connected in series with the given port and the external network-access terminal for preventing the computer from receiving and/or transmitting any communications from and/or to another computer within the network; and

a control device for controlling the access-prevention device;

wherein the given port is connected in series with the external access terminal for enabling said bi-directional communication with the network; and

wherein the access-prevention device is disposed within a housing that contains the external network-access terminal.

22. A system according to claim 21, wherein the control device is disposed on the housing that contains the external network-access terminal.

23. A system according to claim 21, wherein the control device comprises a manually operable remote-control device for transmitting a given control signal;

and

wherein said control of the access-prevention device is in response to said given control signal.

25. A system according to claim 24, wherein the control device is disposed on the housing that contains the external firewall device.

26. A system according to claim 24, wherein the control device comprises a manually operable remote-control device for transmitting a given control signal;

and

wherein said control of the access-prevention device is in response to said given control signal.

24. A system for controlling communication-access within a computer network, comprising:

a computer having a given port for bi-directional communication by the computer with another computer within the network;

an external firewall device connected to the given port for providing firewall protection for the computer;

an access-prevention device connected in series with the given port and the external firewall device for preventing the computer from receiving and/or transmitting any communications from and/or to another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device is disposed within a housing that contains the external firewall device.