# US 2016/0366166 A1 · Controlling a computer system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2016/0366166 A1 - Document ID: US20160366166A1 - Status: Published application - Kind: A1 - Application number: 14/736,783 - Filed: 2015-06-11 - Published: 2016-12-15 - Earliest claimed: 2015-06-11 - Assignees: SSH Communications Security OYJ - Applicants: SSH Communications Security OYJ - Inventors: Kimmo PARVIAINEN-JALANKO - Web page: https://patentgrep.com/patent/US20160366166A1 ## CPC - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - G05B 15/02: electric - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 43/08: Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L 67/54: Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) ## Abstract A method and apparatus for control of a computer system are disclosed. The computer system includes a terminal for operator based monitoring of the computer system. A monitoring device is provided to determine information about the state of the operator based monitoring. The information is communicated to a controller of the data security system. The controller then controls the data security system based at least in part on the information. ## Claims ### Claim 1 A method of controlling a computer system, the computer system comprising a data security system and being configured for an operator based monitoring, the method comprising: receiving, at a controller of the data security system, a signal comprising information about the state of the operator based monitoring, and controlling, by the controller, the data security system based at least in part on the signal. ### Claim 2 (depends on 1) The method according to claim 1, wherein the signal indicates at least one of presence state of the operator, activity state of the operator, log in state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system. ### Claim 3 (depends on 1) The method according to claim 1, wherein the information about the operator is received from an apparatus comprising at least one of a camera, a user interface controller, a processor of a terminal of the operator, a dead man switch, a presence sensor, building access control system, building lighting control system, a controller determining length of audit backlog, and a burglar alarm. ### Claim 4 (depends on 1) The method according to claim 1, comprising, in response to determination based on the signal that the computer system is not currently monitored by the operator, preventing at least a part of data communications in and/or out of the computer system. ### Claim 5 (depends on 4) The method according to claim 4, comprising allowing only a predefined types of data communications in and/or out of the computer system and preventing other types of data communications. ### Claim 6 (depends on 1) The method according to claim 1, comprising, in response to determination based on the signal that the computer system is not currently monitored by the operator, buffering at least a part of data communications in and/or out of the computer system until it is determined that the computer system is again monitored by the operator. ### Claim 7 (depends on 1) The method according to claim 1, comprising switching by the controller the data security system between different modes of operation based at least in part on the signal. ### Claim 8 (depends on 1) The method according to claim 1, wherein the data security system comprises a security gateway such as a firewall. ### Claim 9 A method for a computer system, the computer system comprising a terminal for operator based monitoring of the computer system, the method comprising: determining, at a monitoring device, information about the state of the operator based monitoring, and sending the information to a controller of the data security system for use in controlling the data security system based at least in part on the information. ### Claim 10 (depends on 9) The method according to claim 9, wherein the information indicates at least one of presence state of the operator, activity state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system. ### Claim 11 (depends on 9) The method according to claim 9, comprising determining information about the operator based on at least one of a camera, a user interface controller, a processor of a terminal of the operator, a dead man switch, a presence sensor, building access control system, building lighting control system, length of audit backlog, and a burglar alarm. ### Claim 12 A control apparatus for a data security system of a computer system configured for an operator based monitoring, the control apparatus comprising at least one processor, and at least one memory including computer program code, wherein the at least one memory and the computer program code are configured, with the at least one processor, to cause the control apparatus to receive a signal comprising information about the state of the operator based monitoring, and control the data security system based at least in part on the signal. ### Claim 13 (depends on 12) The control apparatus according to claim 12, wherein the signal indicates at least one of presence state of the operator, activity state of the operator, log in state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system. ### Claim 14 (depends on 12) The control apparatus according to claim 12, configured to prevent at least a part of data communications in and/or out of the computer system in response to determination that the computer system is not monitored by the operator and/or to allow only a predefined types of data communications in and/or out of the computer system and prevent other types of data communications in response to determination that the computer system is not monitored by the operator. ### Claim 15 (depends on 12) The control apparatus according to claim 12, configured to, in response to determination that the computer system is not monitored by the operator, buffer at least a part of data communications in and/or out of the computer system until determination that the computer system is monitored by the operator. ### Claim 16 (depends on 12) The control apparatus according to claim 12, configured to switch the data security system between different modes of operation based at least in part on the signal. ### Claim 17 (depends on 12) The control apparatus according to claim 12, wherein the data security system comprises a firewall. ### Claim 18 A monitoring apparatus for a computer system, wherein the computer system comprises a terminal for operator based monitoring of the computer system, the monitoring apparatus comprising: at least one controller for determining information about the state of the operator based monitoring, and an interface for communicating the determined information to control apparatus of the data security system for use in controlling the data security system based at least in part on the information. ### Claim 19 (depends on 18) The monitoring apparatus according to claim 18, configured to generate information indicative at least one of presence state of the operator, activity state of the operator, state of the operator determined based on usage of a terminal associated with the operator, and whether the operator has recently performed or is currently performing a control operation on the computer system. ### Claim 20 (depends on 13) The monitoring apparatus according to claim 13, comprising at least one of a camera, a user interface controller, a processor of a terminal of the operator, a dead man switch, a presence sensor, building access control system, building lighting control system, and a burglar alarm.