Selective prevention of undesired communications within a computer network

• US 7,036,144 B2
• Filed: 12/21/2000
• Issued: 04/25/2006
• Est. Priority Date: 12/21/2000
• Status: Expired due to Fees

• Current Assignee: Jon Ryan Welcher
• Original Assignee: Jon Ryan Welcher
• Inventors: Welcher, Jon Ryan, Marcroft, Sacha Laurent
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US09/746,350
• Publication Number:
  US 20020083337A1
• Time in Patent Office: 1,951 Days
• Field of Search: 709/219, 709/223, 709/224, 713/200, 713/201, 726/16, 726/34, 726/36
• US Class Current: 726/16
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A system for controlling communication-access within a computer network, includes an access-prevention device connected in series with a computer'"'"'s bi-directional network-communication port for preventing the computer from receiving and/or transmitting any communications from and/or to another computer within the network; and a control device for selectively controlling the access-prevention device. Such an access-prevention device including a control terminal for connection to the control device is disposed within a communication-access control apparatus that may be connected between the computer network and the computer. Alternatively, the access-prevention device is disposed within the computer chassis, the modem, an external network-access terminal or a firewall device. The control device includes a manual switch actuator disposed on a chassis containing the access-prevention device, or a remote-control device, or a computer keyboard or a mouse, or a presence detector, or an inactivity detector.

Claims

1. An access-prevention device for controlling communication-access between a computer network and either a computer or a modem that has a given port for bi-directional communication by the computer or the modem with the network, the access-prevention device consisting of

a first connector for connection to the given port,

a second connector for connection to the network,

hardware-implemented electrically powered switching means connected in series between the first and second connectors and operable in response to a given control signal for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector, and

a control terminal connected to the switching means for providing said given control signal to the switching means from an external source.

2. The access-prevention device according to claim 1 in combination with manually actuated means for providing said given control signal to the switching means.

3. The access-prevention device according to claim 1 in combination with a power terminal connected to the switching means for providing electrical power to the switching means from an external source.

4. The access-prevention device according to claim 1 in combination with a control device connected to the control terminal for automatically controlling the switching means of the access-prevention device in response to a given measured interval exceeding a predetermined duration to prevent the first connector from receiving any network communications from the second connector and/or to prevent the second connector from receiving any network communications from the first connector.

5. The combination of the access-prevention device and the control device according to claim 4, wherein the control device comprises:

sensing means for sensing whether or not an operator is present within a predetermined space adjacent the computer; and

means coupled to the sensing means for measuring each interval when an operator is not present within said predetermined space and for providing said given control signal to the control terminal whenever the measured interval exceeds a predetermined duration;

wherein said automatic control of the access-prevention device is in response to said given control signal.

6. The combination of the access-prevention device and the control device according to claim 4, wherein the control device comprises:

a timer, including means for selecting a predetermined duration, means for measuring an interval beginning upon actuation of the timer and means for providing said given control signal to the control terminal whenever the measured interval exceeds the predetermined duration;

wherein said automatic control of the access-prevention device is in response to said given control signal.

7. The access-prevention device according to claim 1, wherein the switching means is connected only for preventing the first connector from receiving any network communication from the second connector.

8. The access-prevention device according to claim 1, wherein the switching means is connected only for preventing the second connector from receiving any network communication from the first connector.

9. The access-prevention device according to claim 1, wherein the switching means is connected for preventing any network communication between the first connector and the second connector.

10. An access-prevention device for controlling communication-access between a computer network and either a computer or a modem that has a given port for bi-directional communication by the computer or the modem with the network, the access-prevention device consisting of

a first connector for connection to the given port,

a second connector for connection to the network, and

hardware-implemented switching means connected in series between the first and second connectors for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector.

11. A combination of an access-prevention device and a control device for controlling communication-access within a computer network to a given computer that has a given port for bi-directional communication by the given computer with another computer within the network, said combination comprising:

an access-prevention device connected in series with the given port for preventing the given computer from receiving and/or transmitting any communications from and/or to said another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device consists of a first connector for connection to the given port, a second connector for connection to the network, hardware-implemented electrically powered switching means connected in series between the first and second connectors and operable in response to a given control signal for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector, and a control terminal connected to the switching means for providing said given control signal to the switching means from the control device; and

wherein the access-prevention device is disposed within a chassis that contains the given computer.

12. The combination of the access-prevention device and the control device according to claim 11, wherein the control device is disposed on said chassis.

13. The combination of the access-prevention device and the control device according to claim 11, further comprising a keyboard connected to the given computer for controlling operation of the given computer;

wherein the control device includes the keyboard.

14. The combination of the access-prevention device and the control device according to claim 11, further comprising a mouse connected to the given computer for controlling operation of the given computer;

wherein the control device includes the mouse.

15. The combination of the access-prevention device and the control device according to claim 11, wherein the control device comprises a manually operable wireless remote-control device for transmitting said given control signal;

and

wherein the access-prevention device is controlled in response to said given control signal.

16. The combination of the access-prevention device and the control device according to claim 11, wherein the control device comprises:

sensing means for sensing whether or not an operator is present within a predetermined space adjacent the given computer; and

means coupled to the sensing means for measuring each interval when an operator is not present within said predetermined space and for providing a given control signal whenever the measured interval exceeds a predetermined duration;

wherein said automatic control of the access-prevention device is in response to said given control signal.

17. The combination of the access-prevention device and the control device according to claim 11, wherein the control device comprises:

means for measuring each interval when the given computer is not performing a routine in response to an input received from an input device connected directly to the given computer and for providing a given control signal whenever the measured interval exceeds a predetermined duration;

wherein said control of the access-prevention device is in response to said given control signal.

18. Within a computer network that includes a given computer having a given port for bi-directional communication by the given computer with another computer within the network, and a modem connected to the given port for processing said bi-directional communication by the given computer with said another computer within the network, a combination of an access-prevention device and a control device for controlling communication-access between the given computer and said another computer, the combination comprising:

an access-prevention device connected in series with the given port and the modem for preventing the given computer from receiving and/or transmitting any communications from and/or to said another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device consists of a first connector for connection to the given port, a second connector for connection to the network, hardware-implemented electrically powered switching means connected in series between the first and second connectors and operable in response to a given control signal for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector, and a control terminal connected to the switching means for providing said given control signal to the switching means from the control device; and

wherein the access-prevention device is disposed within a chassis that contains the modem.

19. The combination of the access-prevention device and the control device according to claim 18, wherein the control device is disposed on the chassis that contains the modem.

20. The combination of the access-prevention device and the control device according to claim 18, wherein the control device comprises a manually operable wireless remote-control device for transmitting a given control signal;

and

wherein said control of the access-prevention device is in response to said given control signal.

21. Within a computer network that includes a given computer having a given port for bi-directional communication by the given computer with another computer within the network, and an external network-access terminal connected in series with the given port for enabling said bi-directional communication by the given computer with another computer within the network, a combination of an access-prevention device and a control device for controlling communication-access between the given computer and said another computer, the combination comprising:

an access-prevention device connected in series with the given port and the external network-access terminal for preventing the given computer from receiving and/or transmitting any communications from and/or to said another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device consists of a first connector for connection to the given port, a second connector for connection to the network, hardware-implemented electrically powered switching means connected in series between the first and second connectors and operable in response to a given control signal for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector, and a control terminal connected to the switching means for providing said given control signal to the switching means from the control device; and

wherein the access-prevention device is disposed within a housing that contains the external network-access terminal.

22. The combination of the access-prevention device and the control device according to claim 21, wherein the control device is disposed on the housing that contains the external network-access terminal.

23. The combination of the access-prevention device and the control device according to claim 21, wherein the control device comprises a manually operable wireless remote-control device for transmitting a given control signal;

and

wherein said control of the access-prevention device is in response to said given control signal.

24. Within a computer network that includes a given computer having a given port for bi-directional communication by the given computer with another computer within the network, and an external firewall device connected to the given port for providing firewall protection for the given computer, a combination of an access-prevention device and a control device for controlling communication-access between the given computer and said another computer, the combination comprising:

an access-prevention device connected in series with the given port and the external firewall device for preventing the given computer from receiving and/or transmitting any communications from and/or to said another computer within the network; and

a control device for controlling the access-prevention device;

wherein the access-prevention device consists of a first connector for connection to the given port, a second connector for connection to the network, hardware-implemented electrically powered switching means connected in series between the first and second connectors and operable in response to a given control signal for preventing receipt by the first connector of any network communications from the second connector and/or for preventing receipt by the second connector of any network communications from the first connector, and a control terminal connected to the switching means for providing said given control signal to the switching means from the control device; and

wherein the access-prevention device is disposed within a housing that contains the external firewall device.

25. The combination of the access-prevention device and the control device according to claim 24, wherein the control device is disposed on the housing that contains the external firewall device.

26. The combination of the access-prevention device and the control device according to claim 24, wherein the control device comprises a manually operable wireless remote-control device for transmitting said given control signal;

and

wherein said control of the access-prevention device is in response to said given control signal.