Hardware access and monitoring control
Various embodiments described and illustrated here include one or more of systems, methods, software, and data structures that may be used to implement policies for hardware access and monitoring control. One embodiment includes obtaining device property data from each device coupled to a system and determining if each device is a device authorized for use with the system. Such embodiments may further include allowing only devices authorized for use with the system to be accessed by processes of the system.
1. A computer-readable storage device, with instructions thereon that are executable by a computer to:
maintain a list of devices coupled to a computer;
determine if each device in the list is communicatively coupled to the computer; and
upon determining a device in the list is not physically coupled to the computer, send a notice to a premises security system that controls ingress and egress of individuals to and from a premises that the device is not communicatively coupled to the computer, the notice identifying one or more users of the computer to instruct the premises security system to prevent the one or more users of the computer from passing through the premises security system.
2. The computer-readable storage device of claim 1 , with further executable instructions to:
receive a request to determine if all devices included in the list of devices are communicatively coupled to the computer; and
send a response indicating if any devices in the list of devices are not communicatively coupled to the computer.
3. A system comprising:
a bus;
a network interface coupled to the bus;
a peripheral device coupled to the bus;
a processor coupled to the bus and including an out-of-band controller, wherein the out-of-band controller is operable when the system is turned off to:
receive a request from a premises security system over the network interface to determine if the peripheral device is coupled to the bus, the premises security system controlling ingress and egress of individuals to and from a premises;
request and receive, over the bus, property data from the peripheral device;
compare the property data to known property data of the peripheral device to confirm the peripheral device has expected properties; and
send data to the premises security system, the data identifying if the peripheral device has the expected properties to instruct the premises security system to prevent one or more users of the computer from passing through the premises security system.
4. The system of claim 3 , wherein the known property data of the peripheral device is stored in a non-volatile memory coupled to the bus and accessible by the out-of-band controller.
5. The system of claim 3 , wherein:
the peripheral device is a data storage device; and
the known property data of the peripheral device includes a serial number of the data storage device.
6. The system of claim 3 , wherein the out-of-band controller includes a microprocessor and a non-volatile memory.
7. The system of claim 3 , wherein the peripheral device is a Peripheral Component Interface (“PCI”) device.
8. The system of claim 7 , wherein the PCI device is a data storage device.
9. A method comprising:
maintaining a list of devices coupled to a computer;
determining if each device in the list is communicatively coupled to the computer; and
upon determining a device in the list is not physically coupled to the computer, sending a notice to a premises security system that controls ingress and egress of individuals to and from a premises that the device is not communicatively coupled to the computer, the notice identifying one or more users of the computer to instruct the premises security system to prevent the one or more users of the computer from passing through the premises security system.
10. The method of claim 9 , further comprising:
receiving a request to determine if all devices included in the list of devices are communicatively coupled to the computer; and
sending a response indicating if any devices in the list of devices are not communicatively coupled to the computer.