Computer security monitoring apparatus and system

• US 6,507,914 B1
• Filed: 03/11/1998
• Issued: 01/14/2003
• Est. Priority Date: 11/15/1994
• Status: Expired due to Term

• Current Assignee: Absolute Software Corporation
• Original Assignee: Absolute Software Corporation
• Inventors: Nguyen, Thanh Cam, Cotichini, Christian, Cain, Fraser
• Primary Examiner(s): Gaffin, Jeffrey
• Assistant Examiner(s): Mai, RiJue
• Application Number:
  US09/041,112
• Time in Patent Office: 1,770 Days
• Field of Search: 713/200-202, 713/190, 713/192, 379/40, 379/37, 379/58, 379/59, 342/450, 342/657, 709/200, 709/201, 709/203, 709/202, 709/217, 710/7, 710/15, 710/19
• US Class Current: 726/35
• CPC Class Codes: G01S 1/02 using radio waves G01S19/00 takes precedence
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 13/126 and has means for transferring I/O instructions and statuses between control unit and main processor
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A system for locating and monitoring electronic devices utilizing a security system that is secretly and transparently embedded within the computer. This security system causes the client computer to periodically and conditionally call a host system to report its serial number via an encoded series of dialed numbers. A host monitoring system receives calls from various clients and determines which calls to accept and which to reject by comparing the decoded client serial numbers with a predefined and updated list of numbers corresponding to reported stolen computers. The host also concurrently obtains the caller ID of the calling client to determine the physical location of the client computer. The caller ID and the serial number are subsequently transmitted to a notifying station in order to facilitate the recovery of the stolen device. The security system remains hidden from the user, and actively resists attempts to disable it.

Claims

1. A security monitoring apparatus for a computer having visual and audible user interfaces, comprising a transparent agent controlling means in the computer for initiating communication with and sending signals to a host monitoring system via a telecommunication link at a predetermined schedule without signaling visual or audible user interface, said signals including identifying indicia for said computer, whereby the host monitoring system could identify whether the computer has been reported lost based on the identifying indicia.

2. An apparatus as in claim 1, wherein the transparent agent controlling means includes a telecommunication interface connectable to a communication link.

3. An apparatus as in claim 1, wherein the transparent agent controlling means sends signals at regular periodic intervals.

4. A computer security monitoring system, comprising:

a computer having visual and audible user interfaces;

a telecommunication interface operatively connected to the computer; and

agent means embedded in the computer for sending signals to the telecommunication interface including signals for contacting a host monitoring system without signaling the visual or audible user interface, and for providing the host monitoring system with identification indicia of the computer, whereby the host monitoring system could identify whether the computer has been reported lost based on the identifying indicia.

5. A system as claimed in claim 4, wherein the computer has addressable memory (such as read-only memory or random-access memory), and the agent means includes software.

6. A method for providing a computer with an agent security system, comprising the steps of preparing software for the computer with instructions for dialing a host monitoring system number without visual or audile signals and transmitting identification indicia, and programming the software into addressable memory of the computer at a location not normally accessible to operating software for the computer.

7. A monitoring system for a computer having visual and audible user interfaces, comprising an agent controlling means for initiating communication with and sending signals to a host monitoring system via a communication link, routinely at a predetermined schedule without signaling visual or audible user interface, said signals including identifying indicia for said computer, whereby the host monitoring system could identify whether the computer has been reported lost based on the identifying indicia.

8. A monitoring system as in claim 7 wherein the routine predetermined schedule is independent of external triggering events.

9. A security monitoring apparatus for a computer comprising a transparent agent means for initiating communication with and sending signals to a host monitoring system via a communication link, said signal including identifying indicia for said computer, said agent means hiding within the computer and operating without interfering with the regular operation of the computer in a manner such that presence or function of the agent means is not noticeable to a user of the computer arising from such operation.