US 8,914,644 B2Granted

System and method of facilitating the identification of a computer on a network

AssigneeInternational Business Machines Corporation

InventorsDmitry Andreev, Galina Grunin, Gregory Vilshansky

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method for facilitating identification of an attacking computer in a network is provided. A user attempting to login to a network application may be presented with a screen prior to the login which lists preconditions of gaining access to the application. If a user concurs with the preconditions, a security module is downloaded to the user's computer and executed which gathers various configuration settings and transmits the gathered information to a predetermined destination. The security module may also attempt to place a call to a predetermined destination over a modem in the computer to cause registration of caller-ID data when answered at the predetermined destination. Once the security check is completed, login may proceed with the network application. Any data gathered by the security module may be stored for later recall and use to identify the computer in the event of an attack.

Claims15

Dependent claims

A computer program product comprising a computer readable storage memory having readable program code embodied in the computer readable storage medium, the computer program product includes at least one component to:

process a login to an application only after capturing a plurality of configuration data of a computer performing the login, wherein the login is received from a login page associated with a graphical user interface (GUI);
recall the plurality of configuration data from a memory;
and match at least portions of the recalled plurality of configuration data to corresponding portions of subsequent captured configuration data of a suspect computer to establish whether the recalled plurality of configuration data and the subsequent captured configuration data are both derived from the computer, wherein when the matching occurs, the computer is verified as possibly attacking the network and, wherein the plurality of configuration data comprises at least:
(i) computer configuration information;
(ii) Ethernet information associated with one or more Ethernet adapters;
(iii) registry information;
and
(iv) hardware configuration information.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/024,894Filed 12 Sep 2013 · continuation
Priority: 14 Dec 2004
Published: US 2014/0013393 A19 Jan 2014
Granted: 16 Dec 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/0876
For authentication of entities: based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or…
G06F 21/60
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting data
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources

Family

Application11/011,869Parent of this continuation · filed 14 Dec 2004
Application13/410,802Parent of this continuation · filed 2 Mar 2012
US 8,195,952 B2Parent of this continuation · filed 5 Jun 2012
US 2014/0013393 A1Pre-grant publication · published 9 Jan 2014
US 8,621,229 B2Parent of this continuation
US 2006/0129831 A1Published application
US 2012/0167215 A1Published application
US 8,914,644 B2This patent

From the US filing history. Foreign family members aren’t listed.