Security system and method for controlling access to computing resources

What is this patent about?

’332 is related to the field of proximity-based security for computing resources. It addresses the administrative burden and security risks associated with managing multiple passwords and sensitive files across various devices. The background context involves the need for a non-intrusive, automatic way to secure local files and third-party system logins without requiring the user to manually encrypt data or memorize a vast array of credentials.

The underlying idea behind ’332 is the decoupling of security instructions from the actual credentials required for access. By utilizing a personal digital key (PDK) as a portable hardware token, the system ensures that sensitive credentials never reside permanently on the host computer. Instead, the host stores only the logic for how to handle a resource, while the physical presence of the PDK provides the necessary data to unlock it, creating a seamless security perimeter that moves with the user.

The claims of ’332 focus on a tripartite architecture consisting of a PDK, a reader, and a computing device that utilizes a vault storage located in a dedicated encrypted portion of the host memory. This vault contains security setup data—user-defined rules and logic for different resources—but specifically lacks the actual security data (credentials) needed for access. The claims also emphasize the use of exit-based rules that automatically terminate access or trigger security actions when the PDK moves out of a predefined wireless range.

In practice, the system functions through a detection engine that monitors for triggers, such as a web browser displaying a sign-on screen or a user attempting to open a protected directory. When a trigger is detected, the engine checks for a linked PDK via the reader. If the key is present, the system retrieves the specific handling instructions from the vault and the required credentials from the PDK to automate the login or decryption process. This allows for granular control, where different resources can require different levels of authentication, such as adding a biometric confirmation for high-security files.

This approach differs from prior solutions by eliminating the need for the user to manually specify which files are encrypted or to interact with complex management software during daily use. Unlike standard proximity locks that merely lock the entire workstation, this invention provides resource-specific security actions and automated credential injection. By storing the 'how-to' logic locally and the 'secret' data on the portable key, it ensures that even if the computer is compromised, the sensitive credentials remain physically isolated from the machine once the user walks away.