IP Library Granted Patent US 11,528,280
Granted Patent B2
US 11,528,280 · App. 16/740,596 · Granted Dec 13, 2022

Protection of privileged operation access of electronic devices

Inventors: Cesar Augusto Rodriguez Bravo (Alajuela, CR); Kevin Jimenez Mendez (Heredia, CR); David Jaramillo (Durham, NC); David Lee (Round Rock, TX)
Assignee: KYNDRYL, INC.
H04L63/107G06F21/34H04L63/0853H04L63/101H04L63/108H04W4/021H04W4/029H04W64/003
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,528,280
App. No.
16/740,596
Granted
Dec 13, 2022
Kind
B2
Abstract

A method for preventing unauthorized access of privileged operations of a first device. The method provides for one or more processors to detect an initiating action of a privileged operation of a first device. The one or more processors receive a current location of the first device. The one or more processors determine whether a pre-determined location matches the current location of the first device. In response to determining the current location of the first device fails to match the predetermined location, the one or more processors determine whether a pre-determined connection condition exists between the first device and an authorized device, and in response to determining an absence of the pre-determined connection condition between the first device and the authorized device, the one or more processors perform a first action disabling the privileged operation of the first device.

Claims (50)

1. A method for preventing unauthorized access of privileged operations of a first device, the method comprising:

one or more processors detecting an initiating action of a privileged operation of a first device;

the one or more processors receiving a current location of the first device;

the one or more processors determining whether a pre-determined location matches the current location of the first device;

in response to determining the current location of the first device fails to match the pre-determined location, the one or more processors determining whether a pre-determined connection condition exists between the first device and an authorized device; and

in response to determining an absence of the pre-determined connection condition between the first device and the authorized device, the one or more processors performing a first action disabling the privileged operation of the first device, wherein the pre-determined connection condition includes a combination of two or more pre-determined connection conditions.

2. The method of claim 1 , wherein the pre-determined location is a geofence extending a defined distance range from a pre-determined location identified by a global positioning system (GPS) service of the first device.

3. The method of claim 1 , wherein the pre-determined connection condition includes a pre-determined wireless connection between the first device and the authorized device.

4. The method of claim 1 , wherein the pre-determined connection condition includes a physical connection between the first device and the authorized device.

5. The method of claim 1 , wherein the authorized device is identified by a wireless proximity tag added to the authorized device.

6. The method of claim 1 , further comprising:

in response to performing the first action, the one or more processors overwriting data content of the first device.

7. The method of claim 1 , wherein the connection condition is a physical connection with a charging device as the authorized device, and the charging device is uniquely identified by the first device.

8. The method of claim 1 , wherein performing the first action disabling the privileged operation of the first device includes sending the current location of the first device in a message to a pre-determined recipient.

9. The method of claim 1 , wherein the one or more processors performing the first action disabling the privileged operation, further comprises:

the one or more processors disabling a factory reset function as the privileged operation of the first device; and

the one or more processors over-writing data stored on the first device.

10. A computer program product for preventing unauthorized access of privileged operations of a first device, the computer program product comprising:

one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media, the program instructions comprising:

program instructions to detect an initiating action of a privileged operation of a first device;

program instructions to receive a current location of the first device;

program instructions to directly compare the current location of the first device to a pre-determined location to determine whether the current location of the first device is within the pre-determined location;

in response to determining the current location of the first device is not within the pre-determined location, program instructions to determine whether a pre-determined connection condition exists between the first device and an authorized device; and

in response to determining an absence of the pre-determined connection condition between the first device and the authorized device, program instructions to perform a first action disabling the privileged operation of the first device.

11. The computer program product of claim 10 , wherein the pre-determined location is a geofence extending a defined distance range from a pre-determined location identified by a global positioning system (GPS) service of the first device.

12. The computer program product of claim 10 , wherein the pre-determined connection condition includes a wireless connection between the first device and the authorized device.

13. The computer program product of claim 10 , further comprising:

program instructions to determine the pre-determined connection condition, wherein the pre-determined connection condition includes a physical connection between the first device and the authorized device; and

program instructions to determine whether the physical connection between the first device and the authorized device is a wired connection and the authorized device is a uniquely identified charging device.

14. The computer program product of claim 10 , wherein the authorized device is identified by a wireless proximity tag added to the authorized device.

15. The computer program product of claim 10 , wherein the pre-determined connection condition includes a combination of two or more pre-determined connection conditions.

16. A computer system for preventing unauthorized access of privileged operations of a first device, the computer system comprising:

one or more computer processors;

one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media, the program instructions comprising:

program instructions to detect an initiating action of a privileged operation of a first device;

program instructions to receive a current location of the first device;

program instructions to directly compare the current location of the first device to a pre-determined location to determine whether the current location of the first device is within the pre-determined location;

program instructions to determine whether a pre-determined connection condition exists between the first device and an authorized device in response to determining the current location of the first device is not within the pre-determined location; and

program instructions to perform a first action disabling the privileged operation of the first device in response to determining an absence of the pre-determined connection condition between the first device and the authorized device.

17. The computer system of claim 16 , wherein the pre-determined connection condition includes a plurality of pre-determined connection conditions in which detecting at least one of the plurality of pre-determined connection conditions satisfies the pre-determined connection condition requirement between the first device and the authorized device; and

wherein the program instructions further comprise:

program instructions to overwrite data content of the first device in response to performing the first action; and

program instructions to disable access functions of the first device in response to performing the first action.

18. The computer system of claim 16 , wherein the pre-determined connection condition includes a combination of two or more pre-determined connection conditions, and wherein the connection condition comprises a physical connection with a charging device as the authorized device, and the charging device is uniquely identified by the first device.

19. The computer system of claim 16 , wherein performing the first action disabling the privileged operation of the first device includes sending the current location of the first device in a message to a pre-determined recipient.

20. The computer system of claim 16 , wherein the one or more processors performing the first action disabling the privileged operation, further comprises:

the one or more processors disabling a factory reset function as the privileged operation of the first device; and

the one or more processors over-writing data stored on the first device.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 18, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 058213/0912 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 13, 2020
From: RODRIGUEZ BRAVO, CESAR AUGUSTO; JIMENEZ MENDEZ, KEVIN; JARAMILLO, DAVID; LEE, DAVID
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 051491/0100 →