Patent Grant
12169546
The embodiments are directed to a device and related methods for wirelessly locking a computer based on connection or lack of connection with a wireless device.
Security features within computing are a major issue faced by small and large companies. The classic issue is that a computer is left on and open, and the user steps away from their desk, even for just a minute. In that time, a bad actor accesses the computer. The access can be as simple as peeping at files, or downloading files, or uploading malware or other programs. The access can also be theft of the entire device and because it is unlocked allows substantial, if not complete, access to the computer and files therein.
In certain instances, access is not just to the individual computer, but to the system on which it is also connected. Many companies utilize a firewall device or other mechanical or software-based firewall to prevent bad actions, whether by software or hardware access. However, a computer that is completely logged into the company system may also bypass all of the safety mechanisms put into place. Thus, a compromised computer can lead to theft and serious issues for the company. This occurs not only in the private sector, but also in the public sector. Indeed, theft of confidential information and sabotage is a major issue in current world politics.
Current devices for automatic cutoff fail for several reasons. These include that the devices are a key to both lock and unlock and are otherwise connected to a third party network and therefore the device can be manipulated. Some devices fail because they only lock down a part of the system, but not the system at a base level. Other devices fail because they can only work on personal computers and not tablets and phones which may also be connected to the company networks.
Applicant has derived a new and elegant solution that provides for an automatic locking of a computer device or system as a whole at a system or zero-trust status, by blocking all methods of interaction of the device and returning the device to a preauthenticated state upon a distance threshold being met or other setting as defined by the user.
In a preferred embodiment, a wireless kill switch comprising a continuous service transmission and an intermittent transmission, receipt of both which is necessary to provide normal operations to a computer.
In a preferred embodiment, a system for automatically locking a computer comprising: a computer comprising a processor, memory, and operable software, said computer further comprising a receiver, and a wireless kill switch, said wireless kill switch comprising a transmitter and not a receiver, said transmitter operable for transmitting a continuous service signal transmission and an encrypted intermittent heartbeat transmission, receipt of both of which is necessary to provide normal operations of the computer, and wherein upon interruption of at least one of the continuous service transmission or intermittent transmission, the system, via the software, performs an operable function to modify the normal operation to a second state.
In a preferred embodiment, a method for increasing computer hygiene of a computer comprising: transmitting a continuous signal and an intermittent heartbeat signal from a wireless transmitter; receiving the continuous signal and the intermittent heartbeat signal at a receiver on said computer; creating a normal state of said computer when receiving both the continuous signal and the intermittent heartbeat signal; and creating a second state on said computer upon interruption of at least one of the continuous signal or the intermittent heartbeat signals.
In a preferred embodiment, a wireless kill switch comprising: a housing, a radio transmitter, a microcontroller, an operable button, and a battery; said housing encasing the radio transmitter, the microcontroller, and the battery and allowing for operation of the operable button; and wherein the radio transmitter transmits a continuous signal and generates a heartbeat signal on a regularly timed interval.
In a further preferred embodiment, the wireless kill switch wherein said heartbeat signal is a data packet transmitted with said continuous signal.
In a further preferred embodiment, the wireless kill switch wherein said heartbeat signal is transmitted at between 0.1 second and 60 seconds.
In a further preferred embodiment, the wireless kill switch wherein the operable button stops the continuous signal and/or the heartbeat signal. In a further preferred embodiment, wherein the operable button transmits a data packet to be received by the receiver to perform an operable action.
In a further embodiment, a system comprising: a wireless kill switch and a computer; said wireless kill switch comprising: a housing, a radio transmitter, a microcontroller, an operable button, a gyroscope, and a battery; said housing encasing the radio transmitter, the microcontroller, and the battery and allowing for operation of the operable button; the radio transmitter transmitting a continuous signal to be received by a receiver on said computer and a heartbeat signal generated as a data packet on a first predetermined time basis; wherein said system maintains an operational state upon receipt of the continuous signal and receipt of the heartbeat signal at a second predetermined time basis; and wherein the system modifies the computer to a different state than the operational state upon omission of the continuous signal or the heartbeat signal.
In a further preferred embodiment, the system further comprising a user-defined signal threshold, wherein the modification to a different state than the operation state is performed when the continuous signal is received at a signal power level below a user defined signal threshold.
In a further preferred embodiment, the system wherein the user-defined signal threshold corresponds to a distance of under 10 meters. In a further preferred embodiment, the system wherein the user-defined signal threshold is an RSSI decibel level between a weakest signal of −99 dBm and a highest decibel reading of −1 dBm. In a more preferred embodiment, the system wherein the RSSI decibel level is between −89 dBm and −10 dBm, more preferably between −70 dBm and −30 dBm.
In a further preferred embodiment, the system wherein the continuous signal is a radio signal. In a preferred embodiment, wherein the radio signal is a Bluetooth Low Energy (BLE) signal.
In a further preferred embodiment, the system wherein the data packet is transmitted at between 1 second and 30 seconds.
In a further preferred embodiment, the system wherein the different state is a nonauthenticated state.
In a further preferred embodiment, the system wherein the different state disables one or more selected from the group consisting of: a microphone, a camera of the computer, USB mass storage of the computer, WiFi, and Ethernet networking connections of the computer, deleting temporary files, system cache, and user-selected files on the computer, and combinations thereof.
In a further preferred embodiment, the system wherein said system is locked upon activation of the operable button.
In a further embodiment, a method of wirelessly locking down a computer comprising: (a) receiving a continuous signal and a heartbeat signal data packet from a transmitter; (b) determining whether the continuous signal is above a predefined signal level threshold; (c) determining whether the heartbeat signal data packet is received within a predefined time period; and (d) locking down said computer when either the continuous signal is below the predefined threshold or the heartbeat signal data packet is not received within the predefined time period.
In a further preferred embodiment, the method further comprising a startup phase providing a delay of a predetermined amount of time when the transmitter is first connected to the computer. In a further preferred embodiment, the method wherein the startup delay is between 10 seconds and 60 seconds.
In a preferred embodiment, a wireless kill switch comprising: a housing, a radio transmitter, a microcontroller, an operable button, and a battery; said housing encasing the radio transmitter, the microcontroller, and the battery and allowing for operation of the operable button; and wherein the radio transmitter transmits a continuous service signal and transmits a heartbeat signal on a regularly timed interval.
In a further preferred embodiment, the wireless kill switch wherein said heartbeat signal is a data packet transmitted intermittently with said continuous service signal. In a further preferred embodiment, the wireless kill switch wherein said heartbeat signal is transmitted at between 0.1 second and 60 seconds.
In a further preferred embodiment, the wireless kill switch wherein the operable button ceases transmission of the continuous service signal, the heartbeat signal, or both.
In a further preferred embodiment, the wireless kill switch wherein the continuous service signal is generated as a Bluetooth Low Energy transmission, said Bluetooth Low Energy transmission being a data packet transmitted from the radio transmitter at between every 1 millisecond and every 10 seconds.
In a further preferred embodiment, the wireless kill switch wherein the wireless kill switch does not contain a receiver.
In a further preferred embodiment, the wireless kill switch further comprising one or more of: a gyroscope, a wireless charging device, a charging port, an LED indicator, and combinations thereof. In a further preferred embodiment, the wireless kill switch wherein the gyroscope modifies the wireless kill switch from a first power state to a second power state. In a further preferred embodiment, the wireless kill switch further comprising firmware sufficient to operate hardware on said wireless kill switch.
In a preferred embodiment, a method of remotely modifying a state of a computer comprising: (a) receiving a continuous service signal and a heartbeat signal from a paired device having transmission capabilities and not receiving capabilities; (b) after receiving the continuous service signal, determining whether the continuous service signal is above a predefined threshold; (c) determining whether the heartbeat signal is received within a predefined time period; and (d) performing an operable action upon receipt of the continuous service signal at below the predefined threshold, receipt of the heartbeat signal outside of the predefined time period, or both; wherein the operable action takes the computer from a first operational state to a second state.
In a further preferred embodiment, the method further comprising wherein the continuous service signal is generated from a transmitter within said paired device, wherein said transmission capabilities are Bluetooth Low Energy transmission.
In a further preferred embodiment, the method wherein the continuous service signal is transmitted at between every 1 millisecond and every 10 seconds. In a further preferred embodiment, the method wherein the heartbeat signal is transmitted as a data packet intermittently with the continuous service signal at between every 10 milliseconds and every 60 seconds.
In a further preferred embodiment, the method wherein the continuous service signal and the heartbeat signal are encrypted.
In a further preferred embodiment, the method wherein the predefined threshold is based upon a received signal strength indicator. In a further preferred embodiment, the method wherein the received signal strength indicator is defined between −99 dBm and −1 dBm.
In a preferred embodiment, a system comprising: a wireless kill switch and a computer; said wireless kill switch comprising a housing, a radio transmitter, a microcontroller, an operable button, a battery, and firmware sufficient to operate and transmit a signal from said radio transmitter; said housing encasing the radio transmitter, the microcontroller, and the battery and allowing for operation of the operable button; the radio transmitter transmitting a continuous service signal to be received by a receiver on said computer and a heartbeat signal generated as a data packet on a first predetermined time basis; wherein said system maintains an operational state upon receipt of the continuous service signal and receipt of the heartbeat signal received within at least a second predetermined time basis; and wherein the system modifies the computer through an operable action to a different state than the operational state upon omission of the continuous service signal or receipt of the heartbeat signal outside of the second predetermined time basis.
In a further preferred embodiment, the system further comprising a user-defined signal threshold wherein the operational state is maintained when the continuous service signal is received at above the user-defined signal threshold. In a further preferred embodiment, the system wherein the user-defined signal threshold corresponds to a measured decibel level from the continuous service signal.
In a further preferred embodiment, the system wherein the continuous service signal is a radio signal. In a further preferred embodiment, the system wherein the continuous service signal is Bluetooth Low Energy.
In a further preferred embodiment, the system wherein the data packet is transmitted at between 10 millisecond and 60 seconds.
In a further preferred embodiment, the system wherein the first predetermined time basis is between 10 millisecond and 60 seconds and wherein the second predetermined time basis is equal to or longer than the first predetermined time basis.
In a further preferred embodiment, the system wherein the different state is selected from the group consisting of: deleting files, cleaning random access memory (RAM), cleaning cache, cleaning swap space, disabling a camera, disabling a microphone, disabling a network adapter, disabling wireless transmission or wireless communication, disabling Bluetooth, disabling features such as “find my device,” placing the computer into a nonauthenticated state, shutdown of the computer, and combinations thereof.
In a further preferred embodiment, the system wherein upon activation of the operable button the operable action is performed.
In a further preferred embodiment, the system further comprising a startup phase providing a delay of a predetermined amount of time before performing the operable action when the computer is first authenticated.
In a preferred embodiment, a method of increasing hygiene of a computer comprising: (a) receiving a continuous service signal and a heartbeat signal from a transmitter; (b) determining whether the continuous service signal is above a predefined threshold; (c) determining whether the heartbeat signal is received within a predefined time period; and (d) performing an operable action, wherein a software loaded on the computer performs the operable action when either the continuous service signal is received below a user-defined threshold or the heartbeat signal is not received within the user-defined threshold, thereby moving the computer from a first operational state to a second state.
In a further preferred embodiment, the method further comprising wherein transmission of the continuous service signal is generated from the transmitter, wherein the transmitter is paired with a computer, wherein said transmission is a Bluetooth Low Energy transmission.
In a further preferred embodiment, the method wherein the continuous service signal is transmitted at between every 1 millisecond and every 10 seconds. In a further preferred embodiment, the method wherein the heartbeat signal is transmitted as a data packet intermittently with the continuous service signal at between every 10 milliseconds and every seconds.
In a further preferred embodiment, the method wherein the continuous service signal and the heartbeat signal are encrypted.
In a further preferred embodiment, the method wherein the predefined threshold is based upon a received signal strength indicator. In a further preferred embodiment, the method wherein the received signal strength indicator is defined between −99 dBm and −1 dBm.
Various embodiments are described more fully hereinafter with reference to the accompanying drawings, which form a part hereof, and which show, by way of illustration, specific exemplary embodiments by which the innovations may be practiced. The embodiments may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the embodiments to those skilled in the art. Among other things, the various embodiments may be methods, systems, media, devices, or any similar or equivalent arrangements known to those skilled in the art. Accordingly, the various embodiments may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. The following detailed description is, therefore, not to be taken in a limiting sense.
As used herein, the below terms will have the following meanings as may be supplemented elsewhere in this specification:
As used in this application, the words “a,” “an,” and “one” are defined to include one or more of the referenced items unless specifically stated otherwise. The terms “approximately” and “about” are defined to mean±10%, unless otherwise stated. Also, the terms “have,” “include,” “contain,” and similar terms are defined to mean “comprising” unless specifically stated otherwise. Furthermore, the terminology used in the specification provided above is hereby defined to include similar and/or equivalent terms, and/or alternative embodiments that would be considered obvious to one skilled in the art given the teachings of the present patent application.
As used herein, the term “computer” refers to any computing device that comprises a processor, memory, a and receiver and is able to execute code to store or retrieve information, and other such necessary hardware, firmware, and software to perform the necessary tasks for carrying out the receiving of signals as defined herein, such devices therefore include but are not limited to a laptop computer, personal computer, a desktop computer, netbook, a tablet, a mobile phone, a smartwatch, wireless or wired payment stations, and other such wearable devices.
As used herein, Bluetooth Low Energy (BLE) means a Bluetooth protocol operating within the 2.4 GHz ISM band.
As used herein, the term “continuous service signal” means the generation of data from a radio transmitter, preferably under the BLE protocol to maintain noninterrupted service of communication between the transmitter and the receiver. Typically, BLE generates data from the transmitter and then turns off the transmitter, even for milliseconds, before sending a further transmission. As received by the receiver, this provides continuous service, even if the transmission itself is not transmitting at every timepoint between time0 and time1. This is analogous to a motion picture, wherein the picture, while it appears continuous, is a series of still images rotated at a rate, such as 60 frames per second or 120 frames per second. Accordingly, the continuous service provides transmission at about every 1 millisecond to every 10 seconds.
As used herein, the term “heartbeat signal” refers to an intermittently transmitted signal that can be transmitted with the continuous service signal or through a separate transmission on a regular but intermittent basis. In practice the heartbeat signal will never be sent as much as the continuous service signal. The heartbeat signal is transmitted most preferably at between about every 10 milliseconds and about every 60 seconds depending on the particular use case desired by the user.
As used herein, the term RSSI means the received signal strength indicator and is the power present in a received radio signal. Typically, this is measured in decibels, with a nominal range of between −99 dBm and −1 dBm and most commonly received at between −89 dBm and −20 dBm.
As used herein, the term “nonauthenticated state” is used when in reference to a computer and refers to a state of the computer wherein credentials (such as a password, a code, a unique ID, or the like) are required to provide access for a given user to access the computer. This may include preauthenticated states such as before the system has verified the identity and right to access the device, a locked system such as where the system locks access due to inactivity or via action of a user, or any other time where access to the computer is limited or denied and requires entry of credentials to grant access.
Accordingly, the embodiments of the present disclosure provide for new devices, systems, and methods for increasing the safety of computing. Safe computing is a key issue faced by many companies. By safe computing, it is understood that access to files and servers from a computer is limited to the authorized user and not to some outside actor. Theft of information from a computer or the computer network has been documented to lead to losses, including theft of credit card numbers, social security numbers, medical history, other personal information, etc. When a bad actor is able to gain unauthorized access through an unlocked computer, an opportunity was missed to use the embodiments of the present disclosure to lock down the computer and prevent such theft.
Typical computing access point devices allow both access and deaccess to the computer. This is problematic, however, as allowing access then allows for the theft of the access point device to gain unauthorized entry to the computer. Thus, instead of stealing only the computer, a bad actor merely needs to also steal the access point device, or, in some cases only steal the access point device to gain access via another computer.
Users of computing systems, however, are prone to lapses in judgment or protocols that leave a critical computing system vulnerable. One prominent issue is that while users understand the security risk, they become complacent to safety standards as they feel that nothing is going to happen to them. This is a common fallacy in which a user on a system fails to recognize that they are being targeted until the bad actor has already penetrated the computer system. This complacency allows users to leave their access point device in easy to access locations or to simply not lock their computer when leaving.
Another common issue with existing computing accessing point devices is that they allow for two-way communication between the computer and the computing access device. This allows for a bad actor to intercept these messages and to falsify, for example, a credential, to maintain access or grant access, when access should be denied. Such systems create perceived safety, but which can be easily manipulated in planned attacks.
Applicant has created an improved system for performing an operable action, such as locking the computer down to the zero-trust status (e.g., a nonauthenticated state) and blocking all methods of interaction for the computer and to return the computer back to a nonauthenticated state or another predetermined action. This provides for an advantage over existing cybersecurity devices and improves cybersecurity hygiene for users by allowing an operable action to be automatically performed. Each computer includes the appropriate hardware, firmware, and software to enable the computer to function as intended and as needed to implement features detailed herein. For example, a general-purpose computer may include, without limitation, a chipset, processor, memory, storage, graphics subsystem, and applications. The chipset may provide communication among the processor, memory, storage, graphics subsystem, and applications. The processor may be any processing unit, processor, or instruction set computers or processors as is known in the art. For example, the processor may be an instruction set based computer or processor (e.g., x86 instruction set compatible processor), dual/multicore processors, dual/multicore mobile processors, or any other microprocessing or central processing unit (CPU) Likewise, the memory may be any suitable memory device such as random access memory (RAM), dynamic random access memory (DRAM), or Static RAM (SRAM), without limitation. The processor together with at least the memory may implement system and application software including instructions, including methods, disclosed herein. Examples of suitable storage includes magnetic disk drives, optical disc drives, tape drives, an internal storage device, an attached storage device, flash memory, hard drives, and/or solid-state drives (SSD), although embodiments are not so limited.
The wireless kill switch, as described herein, is a physical hardware device that comprises a transmitter that broadcasts a signal on a regular or continuous basis to generate a continuous service with a connected computer. Notably, the wireless kill switch does not contain a receiver, and thus the device only transmits. As shown in
The transmitter (6) is preferably utilizing radio communications, for example, Bluetooth Low Energy (BLE). The transmitted signals are then received by an appropriate receiver operably connected to a computer comprising the receiver, wherein the computer comprises certain software to manage and control the receipt of signals from the wireless kill switch (5). The transmitter and receiver are preferably communicating via a BLE signal. Software operable on the computer creates a connection between the transmitter and the receiver and then the software creates certain instructions to perform one or more actions upon the receipt of or lack of the continuous service signal and/or the heartbeat signal.
The continuous service signal enables the software to determine signal strength, which functions as a metric of distance between the transmitter and the receiver. The receiver uses a received signal strength indicator (RSSI) to measure the power level at a corresponding receiver in decibels on a logarithmic scale, with the received signal corresponding to a distance between the transmitter and the receiver. Upon receiving the signal, the software on the computer will interpret and translate actions to the computer to take some operable action, if appropriate. These actions may include but are not limited to: doing nothing, muting or unmuting a microphone, enabling or disabling a camera, enabling or disabling a drive, enabling or disabling wireless transmission, locking one or more functions on the computer, locking all functions on the computer, moving the computer to a nonauthenticated state, and combinations thereof, as nonlimiting examples.
The computer (2) serves as the target device and comprises a receiver (12) to receive the transmission from the transmitter (6), as well as appropriate hardware to store and execute software to recognize the data received from the transmitter. Thus, the computer (2) receiving the transmission comprises the software that is running on the computer (2), as understood by those of ordinary skill in the art, to interpret the signals being transmitted from the wireless kill switch (5). A connection between the transmitter and the receiver preferably allows for encoded or unique connection between the two devices in order to maintain security.
Accordingly, the wireless kill switch (5) does at least two things. First, through the transmitter (6), a continuous service signal is transmitted. Second, a heartbeat signal is intermittently transmitted at a regular time basis, but not continuously. For example, the heartbeat signal is transmitted every few seconds, instead of at the higher rate of the continuous service signal. These two aspects work in conjunction to define a connection from the wireless kill switch (5) and to transmit an appropriate signal to be received by a receiver (12) positioned on or within the computer (2). The continuous service signal, when received at the receiver is determining a power level, whereas the heartbeat is a failsafe signal that is confirming that the continuous service signal is not being manipulated or some other malicious issue has occurred. The continuous service signal is preferably a small packet of data (service packet) sent every 1 millisecond to about every 10 seconds in order to maintain the continuous service, and most preferably every 3 milliseconds to every 1 second, whereas the heartbeat is then preferably attached to a normal service packet intermittently, such as every 10 milliseconds to about every 60 seconds but not as frequently as the continuous service signal. Thus, the heartbeat serves as a failsafe between the application software and the operating system that controls the driver receiving the service that the device is still operating normally.
The transmitter (6) is a wireless transmission device that provides a transmission of a signal, for example, Bluetooth Low Energy (BLE). Nominally, this transmission is a signal that has a defined strength that can be measured at the receiver, for example, by RSSI. The strength of the signal, as received by the receiver (12) decreases as the distance between the transmitter (6) and the receiver (12) increases. Thus, at a distance of one meter, the received signal will be stronger than the received signal when transmitted at a distance of twenty meters. Thus, the signal strength can be used to quantify a distance between the transmitter and a receiver. Typically, an RSSI will be between −99 dBm and −1 dBm. The distance between the wireless kill switch (5) and the computer is detailed with a distance D1 (3). The signal is provided so as to generate a continuous service connection, and thus data is transmitted and is received by the receiver (12) on a basis sufficient to maintain this continuous service. Thus, a data packet may be sent every 1 millisecond to every several seconds, even 10 or more seconds, and maintain continuous service connection. However, as known to those of ordinary skill in the art, the signal can be interrupted from time to time and maintain this continuous service. Momentary interruptions are intended to be captured within this “continuous” definition; however, such interruptions longer than a just a few seconds may fail a heartbeat signal and may cause the software to take a predetermined operable action.
While the wireless kill switch (5) generates the continuous service signal, it simultaneously disseminates a heartbeat signal, for example once every 10 milliseconds to every 60 seconds, with all time points in between. Preferably, the heartbeat signal is provided at between 1 second and 10 seconds in order to maximize battery life. The heartbeat signal is layered on top of the continuous service signal, such that both the continuous service signal and the heartbeat signal are transmitted by the transmitter and then received by the receiver (12). The heartbeat signal may be a packet of data that is transmitted over the continuous service signal or via another transmission that can be generated by the transmitter (6). This provides two layers of transmission and reception between the wireless kill switch (5) and the receiver (12) on the computer (2) in order to provide layers of security.
As the transmission is occurring, the transmitted signal is received by a receiver (12) on a computer (2). The computer (2) comprises software that decodes the received transmission and takes appropriate actions based upon the received transmission. This leads to several different states, for example: (a) normal operations; (b) kill of one or more elements on the computer based on no signal being received; (c) kill of one or more elements on the computer based on the RSSI being below a predefined threshold; (d) kill of one or more elements on the computer based on no heartbeat being received; (e) an action based on operation of the manual switch on the wireless kill switch (5); and (f) combinations of the above.
In certain embodiments, the wireless kill switch further comprises a gyroscope (10). The gyroscope (10) can be further utilized in certain applications to modify the signal strength, timing for signal transmission, transfer speeds, or other aspects related to the transmission of signals from the transmitter (6). The gyroscope (10) can thus increase or decrease any such of these elements upon movement or after no movement for a predetermined time, such as after one minute, two minutes, five minutes, ten minutes, thirty minutes, sixty minutes, etc. This allows for further power usage of the kill switch. For example, when the gyroscope (10) does not detect any movement, and the RSSI is strong, an assumption may be made that the wireless kill switch (5) is held adjacent to the computer and computing is safe. Thus, the transmission rate may be reduced in time or power, or transfer speed, or another variable. However, upon movement detected at the gyroscope (10), the wireless kill switch (5) goes from a rest phase to an awake phase and returns to a full power transmission. This allows for certain power consumption savings to extend battery life of the wireless kill switch (5) or to perform certain other functionalities based upon a sleeping or awake state as determined by the gyroscope (10).
When the wireless kill switch (5) is within the envelope (21), e.g., at position (5a), the receiver (12) operably connected to the computer receives the continuous service signal and typically maintains normal computer system operations. This is the normal or operable “on” state for the computer and is assumed that the wireless kill switch (5) is safely allowing use of the computer. However, upon passing beyond the circumference (4), and outside of the working envelope (21) to a wireless kill switch at position (5b), the continuous service signal would not be received by the receiver (12), and the computer (2) would then, via the software, perform an operable action, such as to default down to a nonauthenticated state or other state as defined by the software/user on the computer.
D1 (3) is an operational limit. However, the user can further define a distance threshold, which is measured by the signal strength, to be utilized for the on and off state. For example, while distance D1 (3) is the operating distance and defined in
As a layer within this system (1), the continuous service signal is also provided with a heartbeat signal. Thus, as the continuous service signal is generated, a heartbeat signal is provided on a regular interval but less frequently than the continuous service signal. The wireless kill switch (5) and the computer (2) also interact with the heartbeat signal to ensure that a heartbeat signal is received at this regular interval but less frequently than the continuous service signal. The system will detect the heartbeat signal, and if no heartbeat signal is received for a predetermined period, despite the receipt of the continuous service signal within the RSSI threshold, the system, via the software, would perform the operable action, such as going into the predetermined lockdown state.
This second layer is created to ensure that if the wireless kill switch has been tampered with or encountered another error, or the computer (2) itself has been tampered with, access will be terminated. The layered approach increases the safety of the system to prevent unauthorized access. Thus, it will be necessary to maintain both the ordinary continuous service signal as well as the heartbeat signal to maintain normal operations of the computer (2). Thus, while receipt of a continuous service signal at a decibel below a user defined threshold as measured by the RSSI will cause the operable action to occur, the lack of a received heartbeat signal will also signify that something has occurred that requires performing of the operable action, such as a lockdown action of the computer (2). Thus, the system can be configured to measure the time since the last heartbeat was received and upon a predetermined amount of time since such occurrence, perform the operable action. The heartbeat signal may be generated every one second and serves the first predetermined time period (the timing for transmission of each heartbeat signal). However, the user may set a second predetermined time period, for example, if the time since the last heartbeat signal received is set at five seconds, if no heartbeat is received by the computer (2) for five seconds, the computer will perform the operable action as dictated by the system. Of course, the first and second predetermined time periods may be set to be the same time.
Finally, the system can operate by manual iteration of a button on the wireless kill switch. Physical button (11) is a simple on/off switch or another switch (binary, tertiary, or other), that allows a normal resting state (button not pressed), and then activation by pressing the button or activation of one or more different positions (i.e., a tertiary switch). Here, as one nonlimiting example, pressing the button serves as a manual kill switch. Pressing this button overrides the heartbeat and the continuous service signal to take the predefined operable action. One can imagine such a scenario where the user notices a theft in progress, or some other issue requires locking the computer while the wireless kill switch (5) is still in proximity to the computer (2) itself. Upon pressing or activation of the physical button (11), the action can function by the wireless kill switch (5) transmitting a data packet or, can cease transmission as nonlimiting examples of how to perform the manual kill operation.
This lends itself to use of the wireless kill switch (5) as something carried on a person. It is envisioned that the wireless kill switch (5) is something like a dongle or attachment that can be attached to a purse, a wallet, a belt, held in a pocket, attached to a car key, attached to a lanyard, a key fob, or other security feature that are normally used to hold keys, key cards, and the like. Thus, a person moving away from their computer, will automatically reach the kill distance and lock the computer, or the user is able to manually lock the computer if they are otherwise in range of the device and require such lockdown.
Thus, in a preferred embodiment, the system operates by maintaining a continuous service signal being deployed and that is received by the receiver within a predetermined signal strength threshold. Setting this example as within ten meters (corresponding to a decibel measure at the receiver of −50 dBm) that means that the wireless kill switch, being within the ten meters (i.e., the strength received is above −50 dBm), will operate the computer normally. However, by stepping to eleven meters away, an RSSI of −55 dBm for example, the computer will perform some operable action. Simultaneously, a heartbeat signal is being transmitted every seconds and is required to be received every 15 seconds (5 seconds and 15 seconds being parameters set by the user) to maintain the normal operational state of the computer (2). The system will only maintain unlocked normal operation if both the continuous service signal and the heartbeat signal are received within the −50 dB level, and where the heartbeat signal is received at least every 15 seconds.
If one of the continuous service signal or the heartbeat signal parameters are not met, the computer will automatically take the operable action. This operable action may be one of any number of hygiene applications, and most preferably to lock the computer. The action can be modified based on the needs of the user, but preferably the system is restored to a nonauthentication state, or a zero-trust state, which prevents unauthorized use of any of the components of the computer.
Other actions may be taken by the system in response to either the receipt of a signal weaker than the predetermined threshold or the lack of a heartbeat signal, which including at least: deleting files, cleaning random access memory (RAM), cleaning cache, cleaning swap space, disabling a camera, disabling a microphone, disabling a network adapter, disabling wireless transmission or wireless communication, disabling Bluetooth, disabling features such as “find my device,” placing the computer into a nonauthenticated state, shutdown of the computer, and combinations thereof. These features and options are in addition to any other actions deemed appropriate by the systems administrator.
Notably, the wireless kill switch (5) is able to be utilized with nearly any computer in order to create safer computing by increasing the safety for the use of such devices. Thus, such wireless kill switch (5) has a wide set of potential uses in order to provide security for such computers.
The above system also may include a “startup phase” wherein, the system as a whole, is first initiated, there is a grace period for activating the wireless kill switch (5). This startup phase and grace period is required so that if the wireless kill switch (5) is missing, damaged, or otherwise not present for some reason, the computer can still be utilized (although, without this security layer). Thus, upon startup, there is a predefined time window, e.g., 10, 30, 60, 90, or 120 seconds (inclusive of all times in between), where the wireless kill switch system can be deactivated if the wireless kill switch (5) is missing for these reasons, for example with a specific credential that is the same as or unrelated to the access credential. The startup would proceed with normal credentials, or a normal security beacon for authorized access being completed to verify the authorization to the computer and system as a whole. Indeed, the wireless kill switch is not utilized for activation or authorization, instead it only deactivates or deauthorizes the system back to the zero-state status. Indeed, this is one of the key security elements, that the wireless kill switch does not contain a receiver to allow for two-way communication between the computer and the wireless kill switch itself.
In certain embodiments, the system comprises an administrative wireless kill switch (5), wherein the administrative wireless kill switch has certain permissions that may be granted by an enterprise entity, for example. A limited number of such administrative wireless kill switches could be provided, wherein the administrative wireless kill switch has certain permissions to some or all computers within a given company or network. Thus, if a user forgets a wireless kill switch that is particular to the user's device, the user could obtain an administrative wireless kill switch to access their computer. The administrator could then assign a new wireless kill switch (5), authorize a temporary wireless kill switch (5), deactivate the software on the computer, or perform some other action as deemed appropriate.
In certain embodiments, the wireless kill switch (5) also comprises an LED indicator (14) to display the status of the wireless kill switch for example, the connection, the battery level, the activation of the physical button. Such an LED indicator (14) can serve as indicator lights and in conjunction with the microcontroller, display one or more lights, colors, patterns, etc. in order to provide a status indicator or to troubleshoot the device, as is necessary. Other indicators, such as sounds may replace the LED indicator (14) or work in conjunction with the same in order to provide status information.
In certain embodiments, the hardware further optionally comprises a wireless charging component (13), as depicted in
Bluetooth Low Energy allows for virtually an unlimited number of pairings between the wireless kill switch (5) and a computer (having a receiver). Thus, a pairing may be made between a single wireless kill switch (5) and multiple different computers. A use case might include a single wireless kill switch (5) paired to a laptop, a table, a smart phone, and a wearable device, such as a smart watch owned by one user. Each of these devices would have created a connection between the wireless kill switch (5) and the computer, with certain software run on each computer that would allow connection to the unique ID of the wireless kill switch (5), such as a BLE ID, a MAC address, or another identification or unique ID to the particular wireless kill switch (5). Software on the computer then accepts and pairs the wireless kill switch (5) to the given computer, as is performed to create a pair with any such device.
Thus, the wireless kill switch (5) is able to be utilized with nearly any computer. For example, use of a wireless kill switch (5) with a laptop computer would allow for an operable action, such as returning the computer to a nonauthenticated state if the laptop was stolen while it was authenticated, because the wireless kill switch (5) would quickly perform the operable action once the continuous service signal was received at lower than the predetermined signal strength as set for the given computer (beyond the user defined envelope), or if the heartbeat was missing.
The same actions could be performed where the computer is a handheld tablet that is stolen when it is in an unlocked stated. As soon as the thief moves the handheld tablet beyond the user defined envelope, the continuous signal would be received below the RSSI threshold and perform the operable action. This could immediately lock the tablet. A thief may understand that the locked tablet is thus worthless and drop the tablet and move on.
This may be even more valuable when it comes to theft of mobile telephones, which are highly sophisticated computers, and often contain many linked payment accounts and other sensitive information for the user. Mobile telephones are a frequent target of criminals, who snatch them when in use, to maintain the unlocked status. However, if the wireless kill switch (5) is used as soon as the mobile telephone passes beyond the user defined envelope, the mobile telephone will lock and render it all but worthless.
Finally, if a criminal seeks to tamper with software on a computer or to damage a wireless kill switch (5) for any reason, such tampering may damage or render the continuous signal or the heartbeat signal void, and thus one or both may be eliminated and thus cause the software on the computer to perform the operable action. Thus, such wireless kill switch (5) has a wide set of potential uses in order to provide security for computers.
It will be appreciated that the embodiments and illustrations described herein are provided by way of example, and that the present invention is not limited to what has been particularly disclosed. Rather, the scope of the present invention includes both combinations and sub combinations of the various features described above, as well as variations and modifications thereof that would occur to persons skilled in the art upon reading the forgoing description and that are not disclosed in the prior art. Therefore, the various systems, devices, and methods may include one or all of the limitations of an embodiment, be performed in any order, or may combine limitations from different embodiments, as would be understood by those implementing the various methods, devices, and systems detailed herein.
This application is a continuation of U.S. patent application Ser. No. 17/805,812 filed on Jun. 7, 2022, which claims the benefit of U.S. Provisional Patent Application No. 63/202,360 filed on Jun. 8, 2021, with the United States Patent and Trademark Office, the contents of which are incorporated herein by reference in their entirety.
| Number | Name | Date | Kind |
|---|---|---|---|
| 8498618 | Ben Ayed | Jul 2013 | B2 |
| 8539559 | Nakhjiri | Sep 2013 | B2 |
| 8625796 | Ben Ayed | Jan 2014 | B1 |
| 9449165 | Potbhare et al. | Sep 2016 | B2 |
| 10440574 | Ledvina et al. | Oct 2019 | B2 |
| 10713923 | Sacks | Jul 2020 | B1 |
| 10742645 | Hevizi | Aug 2020 | B2 |
| 11134385 | Ziraknejad | Sep 2021 | B2 |
| 11140157 | Xia et al. | Oct 2021 | B1 |
| 11343232 | Gehret et al. | May 2022 | B2 |
| 11405748 | Kuenzi et al. | Aug 2022 | B2 |
| 11520870 | Xia et al. | Dec 2022 | B2 |
| 20040252015 | Galperin et al. | Dec 2004 | A1 |
| 20070006290 | Li | Jan 2007 | A1 |
| 20070241888 | Mantovani et al. | Oct 2007 | A1 |
| 20090006846 | Rosenblatt | Jan 2009 | A1 |
| 20120036556 | Lebeau et al. | Feb 2012 | A1 |
| 20130174252 | Weber et al. | Jul 2013 | A1 |
| 20130237190 | Smith et al. | Sep 2013 | A1 |
| 20130268767 | Schrecker | Oct 2013 | A1 |
| 20140173695 | Valdivia | Jun 2014 | A1 |
| 20140240088 | Robinette | Aug 2014 | A1 |
| 20140282877 | Mahaffey | Sep 2014 | A1 |
| 20150172920 | Ben Ayed | Jun 2015 | A1 |
| 20150347738 | Ulrich | Dec 2015 | A1 |
| 20160037345 | Margadoudakis | Feb 2016 | A1 |
| 20160125412 | Cannon | May 2016 | A1 |
| 20170289118 | Khosravi | Oct 2017 | A1 |
| 20170359339 | Hevizi et al. | Dec 2017 | A1 |
| 20170359342 | Magyar | Dec 2017 | A1 |
| 20180241577 | D'Souza | Aug 2018 | A1 |
| 20180338330 | Ledvina et al. | Nov 2018 | A1 |
| 20180365404 | Ulrich et al. | Dec 2018 | A1 |
| 20200233949 | Xia | Jul 2020 | A1 |
| 20220321561 | Jain et al. | Oct 2022 | A1 |
| Number | Date | Country |
|---|---|---|
| 1188102 | Mar 2002 | EP |
| Entry |
|---|
| Written Opinion of the International Preliminary Examining Authority issued in International Application No. PCT/US2022/072794 dated Aug. 9, 2023. |
| International Search Report issued in International Application No. PCT/US2022/072794 dated Sep. 9, 2022. |
| Lindh, Bluetooth® Low Energy Beacons, Oct. 2016, ··- 15. |
| Number | Date | Country | |
|---|---|---|---|
| 20240012895 A1 | Jan 2024 | US |
| Number | Date | Country | |
|---|---|---|---|
| 63202360 | Jun 2021 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 17805812 | Jun 2022 | US |
| Child | 18472510 | US |
