System and Method for Securing a Computer System

• US 20100132054A1
• Filed: 11/25/2008
• Published: 05/27/2010
• Est. Priority Date: 11/25/2008
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Fellingham, Paul James, Dowens, John P.
• Granted Patent: US 8,685,110 B2
• Time in Patent Office: Days
• US Class Current: 726/35
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G08B 13/1436 with motion detection
• CPC Class Codes: G08B 25/001 Alarm cancelling procedures or alarm forwarding decisions, e.g. based on absence of alarm confirmation
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A secured computer system includes a communication interface and an intrusion detection module. The computer system may be portable and configured for wireless communication with a user of the system. The user may activate and configure an alarm monitor, which may be triggered by motion of the computer system. If the triggered alarm is not deactivated, an alarm sequence is activated. If the alarm sequence is not cancelled, then security measures for protecting sensitive data on the computer system from unauthorized access may be executed. The security measures may include removing data or rendering a storage device inaccessible.

Claims

1. A method for securing data stored on a computer system, comprising:

activating an alarm sequence in response to detecting a security breach of the computer system; and

if the alarm sequence is not deactivated within a first time period, completing the alarm sequence, wherein the alarm sequence includes rendering at least a portion of data stored on the computer system unreadable.

2. The method of claim 1, wherein the computer system is a portable computer.

3. The method of claim 1, wherein the security breach is a physical movement of the computer system.

4. The method of claim 1, wherein the alarm sequence further comprises:

generating an audio alarm emanating from the computer system; and

sending an alarm message to a user of the computer system.

5. The method of claim 4, wherein sending the alarm message further comprises:

sending instructions for deactivating the alarm sequence.

6. The method of claim 1, further comprising:

deactivating the alarm sequence during the first time period.

7. The method of claim 6, wherein said deactivating is performed in response to receiving a deactivation message from a user of the computer system.

8. The method of claim 1, wherein the computer system is configured to send and receive wireless communications from a user of the computer system.

9. The method of claim 1, wherein the alarm sequence further comprises:

reformatting a logical volume physically coupled to the computer system.

10. A computer system configured to secure stored data, comprising:

a processor;

a communication interface for communicating between the computer system and an authorized user of said computer system;

a data storage device;

an intrusion detection module; and

a computer-readable medium accessible to the processor, storing program instructions which, when executed by the processor, define the steps of;

initiating an alarm sequence in response to unauthorized intrusion of the computer system, and

completing the alarm sequence if the alarm sequence is not terminated by the authorized user, wherein the alarm sequence includes removing at least some data stored on the data storage device.

11. The computer system of claim 10, wherein said computer-readable medium further comprises program instructions which, when executed by the processor, define the steps of:

completing the alarm sequence after a first time period has elapsed, wherein the first time period begins after the alarm sequence is initiated.

12. The computer system of claim 10, further comprising:

a power lock; and

wherein said computer-readable medium further comprises program instructions which, when executed by the processor, define the steps of;

activating the power lock to lock the power supply.

13. The computer system of claim 10, wherein said computer-readable medium further comprises program instructions which, when executed by the processor, define the steps of:

specifying a portion of data stored on the data storage device for removal according to the alarm sequence.

14. The computer system of claim 13, wherein the specified portion of data comprises one or more data files stored under a logical volume installed on the data storage device.

15. The computer system of claim 14, wherein the specified portion of data comprises a logical address space configured on the data storage device.

16. The computer system of claim 10, wherein the communications interface is configured for wireless communications.

17. The computer system of claim 10, wherein the computer system is a portable computer system, and wherein the intrusion detection module is responsive to motion of the computer system.

18. The computer system of claim 10, further comprising:

a photovoltaic power source coupled to the computer system.

19. Computer-readable medium comprising program instructions for execution on a processor, said instructions defining the steps of:

in response to detecting a triggered alarm indicating unauthorized intrusion of a computer system, execute an alarm sequence after a first time period has elapsed; and

if the alarm sequence is not terminated by a registered user of the computer system prior to the elapse of a second time period, continue to execute the alarm sequence, wherein the alarm sequence includes instructions executable to irreversibly render selected data stored on the computer system inaccessible.

20. The computer-readable medium of claim 19, further comprising program instructions defining the steps of:

selecting the stored data for rendering irreversibly inaccessible.

21. The computer-readable medium of claim 19, further comprising program instructions defining the steps of:

sending an alarm triggered message to the registered user prior to starting the first time period.

22. The computer-readable medium of claim 21, further comprising program instructions defining the steps of:

in response to the alarm triggered message, receiving a trigger message from the registered user.

23. The computer-readable medium of claim 22, wherein the trigger message indicates termination of the alarm sequence.

24. The computer-readable medium of claim 22, wherein the trigger message indicates continuation or acceleration of the alarm sequence.

25. The computer-readable medium of claim 19, further comprising program instructions defining the steps of:

exchanging messages between the registered user and the computer system using wireless communication.

26. A system for securing data stored on a computer system, comprising:

first means for activating an alarm sequence in response to detecting a security breach of the computer system; and

method

second means for completing the alarm sequence if the alarm sequence is not deactivated within a first time period, wherein the alarm sequence includes rendering at least a portion of data stored on the computer system unreadable.

27. The system of claim 27, wherein the computer system is a portable computer.

28. The system of claim 27, wherein the security breach is a physical movement of the computer system.

29. The system of claim 29, wherein the alarm sequence further comprises:

third means for generating an audio alarm emanating from the computer system; and

fourth means for sending an alarm message to a user of the computer system.