Peripheral Device Locking via User Presence Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing device locking mechanisms struggle to balance security and usability, as they require predicting user inactivity periods and may fail if the device's security is compromised by malware, allowing unauthorized access.

Innovation Solution

Implementing multiple device locking procedures that include a security module driver and a management module to monitor user inactivity and presence, using timers and authentication modules to automatically lock peripheral devices like keyboards and displays, even if the security module is compromised by malware.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a device lock mechanism is implemented after a predetermined period of user inactivity, then device security is improved, but the system requires manual prediction of inactivity periods and may fail if security is compromised by malware

Engineering Contradiction:
Improvedevice securityVSAvoidusability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by monitoring user presence continuously and preparing lock instructions in advance. The subscription module proactively detects user absence and triggers lock instructions before unauthorized access can occur, eliminating the need for manual prediction of inactivity periods

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms by continuously monitoring user presence and system security status. The management module receives feedback from the subscription module about user absence and adjusts locking behavior dynamically, allowing the system to respond to compromised security conditions automatically

Inventive Principle:
Principle #23Feedback

2Reliability

If multiple device locking procedures are implemented with subscription modules and management modules, then device security is enhanced against malware compromise, but device complexity increases

Engineering Contradiction:
Improvedevice securityVSAvoidsystem architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments security functions into distinct modules: a subscription module for monitoring user presence, a management module for coordinating lock instructions, and peripheral device controllers. This segmentation allows each component to have a specific, simplified function while collectively providing robust security against malware compromise

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The management module acts as an intermediary between the subscription module and peripheral device controllers. It receives lock instructions from the subscription module and distributes them to appropriate peripheral devices, simplifying the architecture by centralizing coordination logic in a single mediator component

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS10049234B2Secure access management of devices
Publication Date: 2018.08.14 INTEL CORP
  • US10049234B2 patent drawing
  • US10049234B2 patent drawing
  • US10049234B2 patent drawing

AI summary

Systems and methods may provide implementing one or more device locking procedures to block access to a device. In one example, the method may include receiving an indication that a user is no longer present, initiating a timing mechanism to set a period to issue a first device lock instruction to lock a peripheral device, relaying timing information from the timing mechanism to a controller module associated with the peripheral device; and locking the peripheral device upon expiration of the period.