Security system and method for controlling access to computing resources

Patent metadata

Field	Value
Publication number	US-12554825-B2
Application number	US-202117394837-A
Country	US
Kind code	B2
Filing date	Aug 5, 2021
Priority date	Dec 19, 2007
Publication date	Feb 17, 2026
Grant date	Feb 17, 2026

Abstract

A security system comprises a personal digital key (PDK), a reader and a computing device. The PDK is a portable, personal transceiver that includes a controller and one or more passwords or codes. The computing device includes a detection engine, vault storage and a set up module. The detection engine detect events relating to the access of any files and third-party systems by the computing device and receives information from the reader as to whether the PDK is present/linked. The detection engine controls whether a user is able to access any of the functionality provided by the computing device based upon whether the PDK is in communication with the reader or not. The present invention also includes a number of methods such as a method for initializing the security system, a method for setting up a computing device, and a method for controlling access to computing resources.

First claim

The invention claimed is:

1 . A method comprising:
detecting a portable device within a proximity range of a reader device coupled to a computing device; responsive to detecting that the portable device is within the proximity range of the reader device coupled to the computing device, unlocking a vault storage storing a plurality of access control files on the computing device and retrieving an access control file from the vault storage, the access control file being stored per pair of the computing device and the portable device in the vault storage and defining only a security action to automatically perform to enable access to a functionality provided by the computing device; validating the portable device based on the access control file; responsive to the validating, initiating wireless transmission of login information from the portable device; determining, from the access control file, the security action and automatically performing the security action using the login information; and enabling access to the functionality provided by the computing device based on the security action being automatically performed.

2 . The method of claim 1 , further comprising:
responsive to detecting that the portable device is no longer within the proximity range of the reader device coupled to the computing device, automatically disabling the access to the functionality provided by the computing device.

3 . The method of claim 1 , wherein initiating the wireless transmission of the login information from the portable device comprises wirelessly receiving the login information from a secure memory element of the portable device.

4 . The method of claim 1 , wherein the portable device is a cellular phone.

5 . The method of claim 1 , wherein the access control file is stored in an encrypted memory of the computing device.

6 . The method of claim 1 , wherein the login information comprises a username and a password.

7 . The method of claim 1 , further comprising determining the login information from the access control file responsive to the validating.

8 . The method of claim 1 , wherein automatically enabling access to the functionality provided by the computing device comprises automatically filling in fields of a login screen using the login information and submitting the login information.

9 . The method of claim 1 , wherein the functionality provided by the computing device comprises one from a group of an application, a file, a directory, a storage device, and a third-party system.

10 . The method of claim 1 , wherein initiating the wireless transmission of the login information from the portable device is subsequent to a biometric authentication of a user associated with the portable device.

11 . A system comprising:
a computing device including a reader device and a memory including instructions that, when executed by the computing device, cause the system to:
detect a portable device within a proximity range of the reader device coupled to the computing device;
responsive to a detection of the portable device within the proximity range of the reader device coupled to the computing device, unlock a vault storage storing a plurality of access control files on the computing device and retrieve an access control file from the vault storage, the access control file being stored per pair of the computing device and the portable device in the vault storage and defining only a security action to automatically perform to enable access to a functionality provided by the computing device;
validate the portable device based on the access control file;
responsive to a validation of the portable device, initiate wireless transmission of login information from the portable device;
determine, from the access control file, the security action and automatically perform the security action using the login information; and
enable access to the functionality provided by the computing device based on the security action being automatically performed.

12 . The system of claim 11 , wherein the instructions, when executed by the computing device, further cause the system to:
automatically disable the access to the functionality provided by the computing device responsive to detecting that the portable device is no longer within the proximity range of the reader device coupled to the computing device.

13 . The system of claim 11 , wherein to initiate the wireless transmission of the login information from the portable device, the instructions, when executed by the computing device, further cause the system to wirelessly receive the login information from a secure memory element of the portable device.

14 . The system of claim 11 , wherein the portable device is a cellular phone.

15 . The system of claim 11 , wherein the access control file is stored in an encrypted memory of the computing device.

16 . The system of claim 11 , wherein the login information comprises a username and a password.

17 . The system of claim 11 , wherein the instructions, when executed by the computing device, further cause the system to determine the login information from the access control file responsive to the validation.

18 . The system of claim 11 , wherein to automatically enable access to the functionality provided by the computing device, the instructions, when executed by the computing device, further cause the system to automatically fill in fields of a login screen using the login information and submitting the login information.

19 . The system of claim 11 , wherein the functionality provided by the computing device comprises one from a group of an application, a file, a directory, a storage device, and a third-party system.

20 . The system of claim 11 , wherein the instructions, when executed by the computing device, further cause the system to initiate the wireless transmission of the login information from the portable device subsequent to a biometric authentication of a user associated with the portable device.

Assignees

• Proxense Llc

Inventors

• Giobbi John J

Classifications

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F2221/2115

  Third party · CPC title

• G06F21/34

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• G06F21/35 Primary

  communicating wirelessly · CPC title