Remote computer lockdown

Patent metadata

Field	Value
Publication number	US-9792453-B2
Application number	US-86159707-A
Country	US
Kind code	B2
Filing date	Sep 26, 2007
Priority date	Sep 26, 2007
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

A method and system are disclosed for placing a computer in a safe and secure lock down state from a remote location using a remote command device such as a cellular telephone. The method and system includes optional security provisions before restarting the computer.

First claim

What is claimed is:

1. A method comprising:
preparing a message at a personal computing system, said message comprising a unique code based on an address of a hardware component associated with the personal computing system and data specifying a desired lockdown command action;
establishing a communications link between said personal computing system and a cellular telephone;
uploading said message to said cellular telephone;
thereafter receiving, at the personal computing system, data comprising said message from the cellular telephone by way of a network; and
locking-down said personal computing system in response to receipt of said message comprising said unique code associated with said personal computing system and said desired lockdown command action:
said locking-down comprising:
responsive to the personal computing system receiving said message in a running state, transitioning into a password protected state; and
responsive to the personal computing system receiving said message in a suspended state, awakening the personal computing system and thereafter transitioning to a password protected state.

2. The method as described by claim 1 wherein said message is formatted in accordance with one of the group consisting of a Magic Packet and a short text message.

3. The method as described by claim 1 wherein said locking-down comprises a transition from a S 0 (operating system running) state to a state chosen from a group consisting of S 4 (hibernate) state and S 5 (off) state.

4. The method as described by claim 1 wherein said locking-down comprises transitioning from an S 3 (suspend) state initially to an S 0 (operating system running) state, and subsequently to a state chosen from a group consisting of S 4 (hibernate) state and S 5 (off) state.

5. The method as described by claim 1 , further comprising:
determining that said message includes an instruction specifying a security policy to be followed for restarting of said personal computing system;
setting a flag signifying that said instruction has be received; and
implementing said security policy.

6. The method in accordance with claim 5 where said security policy requires use of security password to restart said personal computing system.

7. The method in accordance with claim 5 where said security policy provides for remote setting of a security password.

8. Apparatus comprising:
an electronic memory which stores data and executable software code;
a network interface card that has an address and can detect a message;
a processor, operatively coupled to said electronic memory and to said network interface card, and that executes said executable software code that:
prepares and uploads, to a cellular telephone, a message comprising a unique code based on the address and data specifying a desired lockdown command action;
determines that data comprising said message has been received from said cellular telephone after said message has been prepared and uploaded to the cellular telephone; and
locks-down the apparatus in response to receipt of said message comprising said unique code associated with said network interface card and said desired lockdown command action:
wherein the apparatus locks-down by:
responsive to the apparatus receiving said message in a running state, transitioning into a password protected state; and
responsive to the apparatus receiving said message in a suspended state, awakening the apparatus and thereafter transitioning to a password protected state.

9. Apparatus, in accordance with claim 8 , where said processor further:
determines that said message includes an instruction specifying security policy to be followed for restarting of said apparatus;
sets a flag signifying that said remotely transmitted message has been received; and
implements said security policy.

10. Apparatus, in accordance with claim 8 , where said security policy requires use of security password to restart said apparatus.

11. Apparatus, in accordance with claim 8 , where said security policy provides for remote setting of security password.

12. A computer-usable memory device having computer readable instructions stored thereon, for execution by a processor, to:
prepare a message at a personal computing system, said message comprising a unique code based on an address of a hardware component associated with the personal computing system and data specifying desired lockdown command action;
establish a communications link between said personal computing system and cellular telephone;
upload said message to said cellular telephone;
thereafter receive, at the personal computing system, data comprising said message from the cellular telephone by way of a network; and
lock-down said personal computing system in response to receipt of said message comprising said unique code associated with said personal computing system and said desired lockdown command action:
said lock-down comprising:
responsive to the personal computing system receiving said message in a running state, transitioning into a password protected state; and
responsive to the personal computing system receiving said message in a suspended state, awakening the personal computing system and thereafter transitioning to a password protected state.

13. A computer-usable memory device, in accordance with claim 12 , wherein said lock-down comprises transitioning from a S 0 (operating system running) state to a state chosen from a group consisting of S 4 (hibernate) state and S 5 (off) state.

14. A computer-usable memory device, in accordance with claim 12 , wherein said lock-down comprises transitioning from an S 3 (suspend) state initially to an S 0 (operating system running) state, and subsequently to a state chosen from a group consisting of S 4 (hibernate) state and S 5 (off) state.

15. A computer-usable memory device, in accordance with claim 12 , wherein said computer readable instructions are further executable by the processor to determine that said remotely transmitted message includes an instruction specifying a security policy to be followed for restarting of said personal computing system;
set a flag signifying that said instruction has been received; and
in response to said flag, implement said security policy.

16. A computer-usable memory device, in accordance with claim 15 , wherein said security policy requires use of security password to restart said personal computing system.

17. A computer-usable memory device, in accordance with claim 15 , wherein said security policy provides for remote setting of security password.

Assignees

• Challener David Carroll
• Cromer Daryl
• Locker Howard
• Springfield Randall Scott
• Lenovo Singapore Pte Ltd

Inventors

• Challener David Carroll
• Cromer Daryl
• Locker Howard
• Springfield Randall Scott

Classifications

• G06F21/74

  operating in dual or compartmented mode, i.e. at least one secure mode · CPC title

• G06F2221/2105

  Dual mode as a secondary aspect · CPC title

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• G06F21/6209 Primary

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F2221/2103

  Challenge-response · CPC title