Security access and monitoring system for personal computer

Claim 3

The method of claim 1 wherein said user identification fails to match said stored authorized user identification when said key device is disconnected from said processor.

Claim 4

The method of claim 1 further comprising the computer-implemented step of: storing said user identification in an audit trail data file of said system memory when said user identification fails to match said stored authorized user identification and said user identification data is coupled to said processor.

Claim 5

The method of claim 1 further comprising the computer-implemented step of storing said user identification in an audit trail data file of said system memory when said user identification matches said stored authorized user identification.

Claim 6

The method of claim 3 or 4 further comprising the computer-implemented step of storing in said audit trail data file the date and time of said coupling of said user identification data.

Claim 7

The method of claim 1 further comprising the computer-implemented steps of: following said disabling of said at least one device and responsive to subsequent system timer interrupts, periodically reading said user identification from said key device and comparing said read user identification with said stored authorized user identification; and enabling said at least one I/O device when said read user identification matches said stored authorized user identification.

Claim 8

The method of claim 1 wherein said step of reading occurs once for each period of nine system timer interrupts.

Claim 9

The method of claim 1 wherein said at least one I/O device comprises a keyboard, said method further comprising the computer-implemented steps of: capturing a keyboard interrupt; and responsive to said interrupt, immediately returning execution of said processor.

Claim 10

The method of claim 1 wherein said at least one I/O device comprises a floppy disk drive.

Claim 11

The method of claim 1 wherein said at least one I/O device comprises a monitor.

Claim 12

The method of claim 1 wherein said at least one I/O device comprises one or more of a mouse, monitor, keyboard, mass storage device and communications device.

Claim 13

The method of claim 1 wherein said at least one authorized user identification comprises up to 100 separate authorized user identifications.

Claim 14

The method of claim 1 further comprising the computer-implemented step of storing an authorized user identification in said system memory corresponding to said removably coupled data of a user identification.

Claim 15

The method of claim 1 wherein said system memory includes an interrupt vector table for storing interrupt request address entries used in directing said processor execution of interrupt services, said step of capturing a system timer interrupt further comprising the computer-implemented step of replacing the interrupt timer request address entry stored in said interrupt vector table with a new address entry corresponding to an interrupt service for performing said reading, comparing and disabling steps.

Claim 18

The method of claim 15 wherein said initialization procedure executed in said processor includes loading of installable device drivers into said system memory and said computer includes a keyboard connected to said processor, said method further comprising the computer-implemented step of capturing a keyboard interrupt during said loading of installable device drivers to disable said keyboard responsive to said interrupt.

Claim 19

The method of claim 15 wherein said mass storage device comprises a hard disk drive and said computer further includes a floppy disk drive coupled to said processor, further comprising the computer-implemented step of disabling said floppy disk drive as part of said initialization procedure to prevent circumvention of said disk operating system loading from said hard disk drive.

Claim 22

The method of claim 18 wherein said step of entering at least one utility menu option comprises the computer-implemented step of viewing said at least one authorized user identification stored in said memory.

Claim 23

The method of claim 18 wherein said step of entering at least one utility menu option comprises the computer-implemented step of adding a new authorized user identification to said data file.

Claim 24

The method of claim 18 wherein said step of entering at least one utility menu option comprises the computer-implemented step of deleting an authorized user identification from said data file.

Claim 25

The method of claim 18 wherein said step of entering at least one utility menu option comprises the computer-implemented step of displaying a user identification corresponding to said coupled data.

Claim 26

The method of claim 18 wherein said step of entering at least one utility menu option comprises the computer-implemented step of storing selected interrupts in an interrupt request mask register of said processor, said interrupts corresponding to I/O devices to be disabled in said disabling step

Claim 27

The method of claim 18 further comprising the computer-implemented step of storing an access data file in said system memory of said user identifications read by said processor.

Claim 28

The method of claim 18 wherein said step of entering said at least one utility menu option comprises the computer-implemented step of viewing said user identifications stored in said access data file.

Claim 29

Apparatus for controlling user access to a computer, said computer having a processor, a system timer, a system memory and at least one input/output device connected to said processor, said processor being directed by interrupts for execution of interrupt services, said apparatus comprising: an input/output port coupled to said processor; key means including data terminals for connection to said input/output port for removably coupling data to said processor indicating a user identification; a data file stored in said system memory indicating at least one authorized user identification; logic stored in said system memory and executed in said processor for capturing a system timer interrupt; security logic stored in said system memory and executed in said processor responsive to said system timer interrupt for periodically reading said user identification from said key means and comparing said read user identification with said stored authorized user identification; and said security logic for disabling said at least one I/O device when said read user identification fails to match said stored authorized user identification.

Claim 30

Apparatus for controlling user access to a computer, said computer having a processor, a system timer, a system memory and at least one input/output device connected to said processor, said processor being directed by interrupts for execution of interrupt services, said apparatus comprising: an input/output port coupled to said processor; key means including data terminals for connection to said input/output port for removably coupling data to said processor indicating a user identification; a data file stored in said system memory indicating at least one authorized user identification; logic stored in said system memory and executed in said processor for capturing a system timer interrupt; security logic stored in said system memory and executed in said processor responsive to said system timer interrupt for periodically reading said user identification from said key means and comparing said read user identification with said stored authorized user identification; and said security logic for disabling said at least one I/O device when said read user identification fails to match said stored authorized user identification.

Claim 31

The apparatus of claim 26 further comprising logic stored in said system memory and executed in said processor for storing in said system memory an access data file of said user identification and a system time, corresponding to each coupling of data by said key means to said processor.

Claim 32

The apparatus of claim 26 wherein said at least one input/output device of said computer includes a mass data storage device for coupling by a device controller to said processor and for transferring data to said system memory, said apparatus further comprising: access circuitry connected between said mass data storage device and said controller for selectively disabling said transfer of data from said mass data storage device to said system memory responsive to said security logic.

Claim 33

The apparatus of claim 26 wherein said key means comprises: at least one electronic key having a memory for storing said user identification, control logic connected to said key memory for reading data from said key memory and for writing data to said key memory, and an a connector including control lines coupled to said control logic and a data input/output coupled to said memory; a jack for removably receiving said connector; and a cable connecting said jack to said processor.

Claim 34

The apparatus of claim 29 wherein said computer includes an input/output port connected to said processor and said cable connects said jack to said port.

Claim 36

The apparatus of claim 26 wherein said at least one input/output device comprises a keyboard.

Claim 37

The apparatus of claim 26 wherein said at least one input/output device comprises a monitor.

Claim 38

The apparatus of claim 26 wherein said at least one input/output device comprises a mouse.

Claim 39

The apparatus of claim 26 wherein said at least one input/output device comprises a modem.

Claim 40

Apparatus for controlling user access to said computer having a processor, at least one input/output (I/O) port connected to said processor, a system timer, a system memory, a mass storage device coupled by a device controller to said processor for transferring data to said system memory and at least one I/O device connected to said processor, said processor being directed by interrupts for execution of interrupt services, said apparatus comprising: A key device for removably coupling data to said processor indicating a user identification, said key device including at least one electronic key having means for providing said user identification data and a connector coupled to said data means, a jack for removably receiving said connector, and a cable connecting said jack to said processor through said I/O port; a data file stored in said system memory indicating at least one authorized user identification; logic stored in said system memory and executed in said processor for capturing a system timer interrupt; security logic stored in said system memory and executed in said processor responsive to said system timer interrupt for periodically reading said user identification from said key means and comparing said read user identification with Said. stored authorized user identification; said security logic for disabling said at least one I/O device when said read user identification fails to match said stored authorized user identification; and access circuitry connected between said mass data storage device and said controller for selectively disabling said transfer of data from said mass data storage device to said system memory responsive to said security logic.

Claim 41

Apparatus for controlling user access to said computer having a processor, at least one input/output (I/O) port connected to said processor, a system timer, a system memory, a mass storage device coupled by a device controller to said processor for transferring data to said system memory and at least one I/O device connected to said processor, said processor being directed by interrupts for execution of interrupt services, said apparatus comprising: A key device for removably coupling data to said processor indicating a user identification, said key device including at least one electronic key having means for providing said user identification data and a connector coupled to said data means, a jack for removably receiving said connector, and a cable connecting said jack to said processor through said I/O port; a data file stored in said system memory indicating at least one authorized user identification; logic stored in said system memory and executed in said processor for capturing a system timer interrupt; security logic stored in said system memory and executed in said processor responsive to said system timer interrupt for periodically reading said user identification from said key means and comparing said read user identification with Said. stored authorized user identification; said security logic for disabling said at least one I/O device when said read user identification fails to match said stored authorized user identification; and access circuitry connected between said mass data storage device and said controller for selectively disabling said transfer of data from said mass data storage device to said system memory responsive to said security logic.

Claim 42

The apparatus of claim 36 further comprising logic stored in said system memory and executed in said processor for storing in said system memory an access data file of said user identification and a system time, corresponding to each coupling of data by said key device to said processor.

Claim 43

The apparatus of claim 36 wherein said input/output port comprises a parallel printer port.

Claim 44

The apparatus of claim 36 wherein said at least one input/output device comprises a keyboard.

Claim 45

The apparatus of claim 36 wherein said at least one input/output device comprises a monitor.