Smart card security for computer system
View Patent ↗A computer security system utilizing smart cards for computer access. A system for home or small business use generally is presented in which smart cards are utilized to gain access to computer functions. The user is presented with a login prompt that permits login using the smart card. The user is permitted to bypass use of the smart card and obtain access to the computer system, but such use of the computer system is logged for review by an administrator.
1. A method of controlling access to a computer system, comprising:
receiving a request to log into the computer system, wherein the request is associated with a first log in window;
determining if a smart card is being used as a part of a login protocol to log in to the computer system;
if the smart card is being used, permitting use of the computer system based on access restrictions embedded on the smart card and logging use of the computer for the user associated with the smart card; and
if the smart card is not being used, permitting use of the computer system, logging use of the computer system to an unknown user, and setting an alert on the computer system, wherein the alert is associated with a second log in window.
2. The method according to claim 1 , wherein the alert comprises changing a visual appearance of an icon.
3. The method according to claim 1 , further comprising clearing the alert if the user associated with the smart card has rights to clear alerts when the smart card is being used as a part of the login protocol.
4. The method according to claim 1 , further comprising determining an access restriction associated with a user associated with the smart card and permitting use of the computer system subject to the access restriction when the smart card is being used as a part of the login protocol.
5. The method according to claim 4 , further comprising denying access to the computer system when the access restriction is not met.
6. The method according to claim 4 , wherein the access restriction comprises restriction of time of day that use of the computer system is permitted.
7. The method according to claim 4 , wherein the access restriction comprises restriction of computer programs that can be executed on the computer system.
8. The method according to claim 1 , further comprising:
setting a timer to measure a time period whenever use of the computer system is permitted;
resetting the timer when the computer system is actively being used; and
carrying out an automatic logout when the computer system has not been actively used during the time period.
9. The method according to claim 1 , further comprising permitting initialization of a smart card if the user associated with the smart card has rights to initialize a smart card, when the smart card is being used as a part of the login protocol.
10. The method according to claim 9 , wherein the initialization further comprises establishing access restriction for a user of the smart card.
11. The method according to claim 1 , wherein the use logging comprises making entries into a log file of a user name, time and date of the computer system use.
12. The method according to claim 11 , wherein the use slogging further comprises making entries into the log file of computer programs accessed.
13. A computer readable storage medium storing instructions that, when executed on a programmed processor, carry out the method according to claim 1 .
14. A method of controlling access to a computer system, comprising:
receiving a request to log into the computer system, wherein the request is associated with a first login window;
determining if a smart card is being used as a part of a login protocol to log in to the computer system;
if the smart card is being used, permitting use of the computer system based on access restrictions embedded on the smart card and logging use of the computer for the user associated with the smart card; and
if the smart card is not being used, permitting use of the computer system, logging use of the computer system to an unknown user, and setting an alert on the computer system, wherein the alert is associated with a second log in window;
determining an access restriction associated with a user associated with the smart card and permitting use of the computer system subject to the access restriction when the smart card is being used as a part of the login protocol;
denying access to the computer system when the access restriction is not met;
setting a timer to measure a time period whenever use of the computer system is permitted;
resetting the timer when the computer system is actively being used; and
carrying out an automatic logout when the computer system has not been actively used during the time period; and
wherein the use logging comprises making entries into a log file of a user name, time and date of computer system use.
15. A computer system having an access control system, comprising:
a central processor;
a smart card reader accessible by the central processor;
a security program running on the central processor that:
receives a first request to log into the computer system;
determines if a smart card is being used as a part of a login protocol to log in to the computer system;
if the smart card is being used, permitting use of the computer system based on access restrictions embedded on the smart card and logging use of the computer for the user associated with the smart card; and
if the smart card is not being used, permitting use of the computer system, logging use of the computer system to an unknown user, and setting an alert on the computer system, wherein the alert is viewable when receiving a second request to log into the computer system.
16. The apparatus according to claim 15 , wherein the alert comprises changing a visual appearance of an icon.
17. The apparatus according to claim 15 , wherein the security program further determines an access restriction associated with a user associated with the smart card and permits use of the computer system subject to the access restriction when the smart card is being used as a part of the login protocol, and denies access to the computer system when the access restriction is not met.
18. The apparatus according to claim 15 , wherein the security program also:
sets a timer to measure a time period whenever use of the computer system is permitted;
resets the timer when the computer system is actively being used; and
carries out an automatic logout when the computer system has not been actively used during the time period.
19. The apparatus according to claim 15 , wherein the use logging comprises making entries into a log file of a user name, time and date of computer system use.