Computer security system

• US 5,355,414 A
• Filed: 01/21/1993
• Issued: 10/11/1994
• Est. Priority Date: 01/21/1993
• Status: Expired due to Term

• Current Assignee: Jingpin Technologies, LLC (Intellectual Ventures LLC)
• Original Assignee: AST Research, Inc. (Samsung Electronics Co. Ltd.)
• Inventors: Hale, Robert P., Kurashige, Jason T.
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/007,170
• Time in Patent Office: 628 Days
• Field of Search: 380/4, 380/25, 364/709.05, 364/234, 364/234.2, 364/928, 364/928.2
• US Class Current: 726/34
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

A computer security device for preventing unauthorized access to a computer system automatically disables peripheral device access to the computer system after the peripheral input devices remain inactive for a predetermined period. The system comprises a host computer which is in communication with a keyboard controller and a display. The keyboard controller is in communication with one or more peripheral input devices such as a keyboard and a mouse. The computer security device operates in the keyboard controller, independent from the host. The keyboard controller activates security after a preset time period during which the mouse and keyboard remain inactive. When the security is active, the keyboard controller disables transfers to the host computer from the peripheral input devices. In order to re-enable peripheral device access to the host computer, a user enters a correct password on the keyboard. In a preferred embodiment, the display is also deactivated when security is active. Thus, if the user leaves a computer station, any information which was displayed on the screen is not viewable.

Claims

1. A security system for a computer, said security system operating independently of a host computer to disable access to an operating system of the host computer when security measures are activated, said security system comprising:

at least one peripheral input device; and

a microprocessor based peripheral device controller in communication with said host computer and said at least one peripheral input device, said peripheral device controller providing an interface between said at least one peripheral input device and said host computer, said peripheral device controller, independent of said host computer, responsive to the elapsing of a predetermined period during which said at least one peripheral input device remains inactive to automatically inhibit access to said host computer after said predetermined period has elapsed, said peripheral device controller further responsive to entry of predesignated signals from said at least one peripheral input device to permit access to said host computer.

2. The security system of claim 1, wherein said host computer is in communication with a display, said peripheral device controller further responsive to said predetermined period during which said at least one peripheral input device remains inactive to send signals to said host to deactivate said display so that information visible on said display is not viewable, said at least one peripheral input device further responsive to said predesignated signals from said peripheral input device to restore operation of said display.

3. A computer security system for use with a host computer, the security system operating independently of said host computer to prevent access to an operating system of the host computer when security has been activated, said security system comprising:

at least one peripheral input device; and

a peripheral controller in communication with said at least one peripheral input device and with said host computer, said peripheral controller providing an interface between said peripheral input device and the host computer, said peripheral controller, independent of said host computer, responsive to the elapsing of a predetermined period of inactivity during which said at least one peripheral input device remains inactive, and during which said host does not request data from said peripheral controller, to automatically disable access to said host computer through said peripheral controller after said predetermined period of inactivity has elapsed.

4. The computer security system of claim 3, wherein said host computer is in communication with a display, said peripheral controller further responsive to the elapsing of said predetermined period of inactivity to send signals to said host to deactivate said display.

5. A computer security system for use with a host computer which utilizes a peripheral device controller as an interface between peripheral devices and the host computer, said host computer in communication with said peripheral device controller, the security system controlled by the peripheral device controller independent of the operation of the host computer, the security system preventing access to an operating system of the host computer when security measures have been activated, said security system comprising:

at least one peripheral input device in communication with said peripheral device controller;

at least one polling block stored in a memory for said peripheral device controller and executable by said peripheral device controller, said polling block, during execution, monitoring a period of inactivity of said at least one peripheral input device and detecting when said period of inactivity is equal to or greater than a predetermined period of inactivity; and

at least one security measures block stored in said memory for said peripheral device controller, said security measures block executable by said peripheral device controller, said security measures block, during execution, responsive to the detection by said polling block to automatically disable access to said host computer through said keyboard controller.

6. The computer security system of claim 5, wherein said host computer is in communication with a display, said security measures block further responsive to the detection by said polling block to send signals to said host to deactivate said display.

7. The computer security system of claim 6, wherein said security measures block comprises instructions to which said peripheral device controller responds to cause said host to deactivate said display by blanking said display.

8. The computer security system of claim 6, wherein the security measures block deactivates said display by displaying data other than data visible on said display before said detection.

9. The computer security system if claim 5, further comprising a enable access block stored in said memory and executable by said peripheral device controller, said enable access block, during execution, responsive to the entry of predesignated data from said peripheral input device to enable access to said host computer.

10. The computer security system of claim 9, wherein said peripheral input device comprises a keyboard and said predesignated data comprises a predefined password.

11. A method of preventing unauthorized access to a host computer, the host computer in communication with a keyboard controller, the keyboard controller further in communication with at least one peripheral input device, said method implemented in said keyboard controller independent of said host computer, said keyboard controller executing said method to monitor input to said host from said peripheral input device, said method comprising the steps of:

monitoring said peripheral input device with said keyboard controller for inactivity;

detecting with said peripheral controller when said peripheral input device has remained inactive for a predetermined period of inactivity; and

after detecting that said peripheral device has remained inactive for said predetermined period of inactivity, preventing data from said peripheral input device from passing to said host computer through the keyboard controller.

12. The method of claim 11, further comprising the steps of:

monitoring said peripheral input device with said keyboard controller to detect the receipt of data from said peripheral input device;

comparing data from said peripheral input device to prespecified data to detect when said data from said peripheral input device is equivalent to said prespecified data; and

when data from said peripheral input device is equivalent to said prespecified data, permitting subsequent data from said peripheral input device to pass through said keyboard controller to said host computer.

13. The method of claim 12, wherein said peripheral input device comprises a keyboard and said prespecified data comprises a password, said steps of monitoring and comparing comprising the steps of:

monitoring said keyboard for input data with said keyboard controller;

ignoring input data that is not said password; and

detecting when said input is said correct password.

14. The method of claim 11, wherein said host computer is further in communication with a display, said method further comprising the step of indicating to said host to deactivate said display after said predetermined period of inactivity by blanking said display.

15. The method of claim 11, wherein said host computer is further in communication with a display, said method further comprising the step of, when data is visible on said display, deactivating said display after said predetermined period of inactivity by initiating display of data other than data which was visible on said display before said predetermined period of inactivity.

16. A security system for a computer comprising:

a host computer having a main central processing unit and associated circuitry;

a peripheral device interface coupled to said main host computer and coupled to at least one peripheral device, said peripheral device interface providing an interface between said host and said at least one peripheral device;

a memory coupled to said peripheral device interface and accessible by said peripheral device interface for execution of instructions stored in said memory, said memory generally inaccessible to said host computer;

a period of inactivity detection module stored in said memory for execution by said peripheral device interface, said period of inactivity detection module configured to, during execution, monitor said at least one peripheral device for inactivity and monitor said host for lack of communication directed to said peripheral device interface; and

a disable access module stored in said memory for execution by said peripheral device interface, said disable access module responsive to the detection of the predetermined period of time of inactivity of said peripheral device and to the detection of lack of communication directed from said host to said peripheral device interface to disable access to said host computer by said peripheral device.

17. The security system of claim 16, wherein said peripheral device comprises a keyboard, further comprising a password monitor module stored in said memory for execution by said peripheral device interface, said password monitor module configured to monitor said peripheral device for entry of a predefined password and to allow access to said host computer by said keyboard upon entry of said predefined password.

18. The security system of claim 16, wherein said memory is further generally inaccessible said peripheral device.