System, Method, and Apparatus for Control of Remote Desktop Connections
AssigneePC Matic, Inc.
InventorAndrew G. Tuch
Life of this patent
Estimating the term…
Abstract
A system for control of remote desktop connections includes security software that interfaces with the operating system of the target device and periodically monitors existing connections (e.g., remote desktop connections) to determine if the connecting device (e.g., the remote computer) is authorized to connect with the target device based upon the name of the connecting device. In some embodiments, as hackers often perform their activities when users are not generally expected to be active, the system for control of remote desktop connections provides a scheduling capability that allows connections only during certain time periods such as 9:00 AM-5:00 PM on Mondays through Fridays.
Claims19
A system for computer security, the system comprising:
- security software running on a target device, the security software having connection control data;
- upon initialization of the security software, the security software sets a timer;
- and
- when the timer expires, the security software resets the timer and the security software makes a request for status of all remote computer connections from an operating system, responsive to the request, the operating system returns a list of all remote computer connections and, for each entry in the list of all remote computer connections, the security software uses the connection control data to determine if a connecting computer of the entry is authorized to be connected to the target device and when the security software determines that a connecting computer of the entry is unauthorized to be connected to the target device, the security software requests that the operating system of the target device disconnect a connection between the connecting computer of the entry and the target device.
A method of protecting a target device, the target device having a processor, the method comprising:
- installing security software on the target device, the security software running on the processor;
- upon initialization of the security software on the processor, loading connection control data by the security software;
- and
- periodically:
- the security software obtaining a list of connections from an operating system that is running on the target device;
- and
- for each item in the list of connections, the security software using the connection control data to determine if a computer name of the item is authorized to be connected to the target device and when the computer name of the item is not authorized to be connected to the target device, the security software instructing the operating system to disconnect a connection between the computer having that computer name and the target device.
Program instructions tangibly embodied in a non-transitory storage medium of a target device for providing security to the target device, wherein the program instructions comprise:
- after the target device is initialized, computer readable instructions running on a processor of the target device reads connection control data;
- and
- periodically:
- the computer readable instructions running on the processor obtain a list of connections from an operating system that is running on the target device;
- and
- for each item in the list of connections, the computer readable instructions running on the processor determines if a computer name of the item is authorized to be connected to the target device using the connection control data and if the computer name of the item is not authorized to be connected to the target device, the computer readable instructions running on the processor instruct the operating system to disconnect a connection between the computer name and the target device.
Dependencies are inferred from the claim text.