Authentication using optically sensed relative position

Patent metadata

Field	Value
Publication number	US-10055612-B2
Application number	US-201414570311-A
Country	US
Kind code	B2
Filing date	Dec 15, 2014
Priority date	Dec 15, 2014
Publication date	Aug 21, 2018
Grant date	Aug 21, 2018

Abstract

Systems and methods to safeguard data and hardware may include a memory configured to store a first image and sensitive data, and an optical sensor configured to capture a second image. A sensor signal comprising the captured second image may be generated. A controller having access to the memory may be configured to receive the sensor signal. The controller may be further configured to compare the stored first image to the captured second image, and based on the comparison, to determine whether the sensitive data is accessed.

First claim

The invention claimed is:

1. A method of safeguarding digital data and hardware within a blade server rack, the method comprising:
capturing, using an optical sensor disposed with a first blade server at a first specific position within the blade server rack, a second optical image including at least a portion of an adjacent second blade server at a second specific position within the blade server rack, wherein the first blade server and the second blade server are each configured to operate in a selected operational condition of a plurality of predefined operational conditions that includes a predefined combat condition;
comparing, using a processor of the first blade server, the captured second optical image with a stored first optical image, wherein the stored first optical image corresponds to a predefined arrangement of the first blade server relative to the second blade server; and
initiating, based on a successful comparison, generation of a seed value at the second blade server, wherein each seed value generated by a plurality of blade servers of the blade server rack is executed by the processor to generate a key used to authenticate access to sensitive data.

2. The method of claim 1 , further comprising:
capturing the first optical image using the optical sensor at system startup.

3. The method of claim 1 , wherein determining whether the sensitive data may be accessed further includes multiple comparisons of the stored first optical image with a plurality of captured optical images.

4. The method of claim 1 , wherein comparing the captured second optical image with a stored first optical image includes comparing an internal portion of the stored first optical image to a corresponding internal portion of the captured second optical image.

5. The method of claim 4 , wherein the internal portion of the stored first optical image and the internal portion of the captured second optical image each include a label affixed to the second blade server.

6. The method of claim 1 , further comprising:
generating the key in response to determining that the sensitive data may be accessed.

7. The method of claim 1 , wherein the adjacent second blade server causes the first blade server to initiate generating the seed used to generate the key.

8. The method of claim 1 , wherein determining, based on the comparison, whether the sensitive data may be accessed comprises:
determining whether the captured second optical image and the stored first optical image match within a predetermined threshold.

9. The method of claim 8 , further comprising:
erasing the sensitive data responsive to determining that the captured second optical image and the stored first optical image do not match within the predetermined threshold.

10. The method of claim 8 , wherein the predetermined threshold is based on the selected operational condition.

11. The method of claim 1 , wherein the plurality of predefined operational conditions comprises a first operational condition corresponding to a first tolerance value and a second operational condition corresponding to a second tolerance value greater than the first tolerance value.

12. The method of claim 11 , wherein the second operational condition comprises the predefined combat condition.

13. The method of claim 12 , wherein in the second tolerance value effectively disables a predetermined threshold.

14. A computer-readable storage device comprising instructions, which when executed by a processor of a first blade server of a blade server rack, cause the processor to:
capture, using an optical sensor coupled with the processor, a second optical image including at least a portion of a second blade server of the blade server rack, the second blade server adjacent to the first blade server within the blade server rack, wherein the first blade server and the second blade server are each configured to operate in a selected operational condition of a plurality of predefined operational conditions that includes a predefined combat condition;
compare the captured second optical image with a stored first optical image, wherein the stored first optical image corresponds to a predefined arrangement of the first blade server relative to the second blade server within the blade server rack; and
initiate, based on a successful comparison, generation of a seed value at the second blade server, wherein each seed value generated by a plurality of blade servers of the blade server rack is executed by the processor to generate a key used to authenticate access to sensitive data.

15. The computer-readable storage device of claim 14 , wherein the instructions further cause the processor to:
capture, at a system startup, the first optical image using the optical sensor.

16. The computer-readable storage device of claim 14 , wherein determining whether the sensitive data may be accessed further includes multiple comparisons of the stored first optical image with a plurality of captured optical images.

17. The computer-readable storage device of claim 14 , wherein comparing the captured second optical image with a stored first optical image includes comparing an internal portion of the stored first optical image to a corresponding internal portion of the captured second optical image.

18. The computer-readable storage device of claim 14 , wherein the instructions further cause the processor to:
generate the key in response to determining that the sensitive data may be accessed.

19. The computer-readable storage device of claim 14 , wherein the adjacent second blade server causes the first blade server to initiate generating the seed used to generate the key.

Assignees

• IBM

Inventors

• Bartley Gerald K
• Becker Darryl J
• Doyle Matthew S
• Maxson Mark O

Classifications

• G06F21/88

  Detecting or preventing theft or loss · CPC title

• G06F21/86

  Secure or tamper-resistant housings · CPC title

• G06F2221/2143

  Clearing memory, e.g. to prevent the data from being stolen · CPC title

• G06V20/52 Primary

  Surveillance or monitoring of activities, e.g. for recognising suspicious objects (recognising microscopic objects G06V20/69) · CPC title

• G06F21/64 Primary

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title