NL1028532C1 - Controlling user access time to computer, e.g. for restricting child access to PC, requires user to register for session and access is denied to unauthorised users and when session time is used up - Google Patents

Abstract

Access time is controlled using a method comprising the following steps: (A) providing a system for restricting the access time to the computer system (1); (B) displaying a registration screen on the system monitor (2) via which a user can register for a computer session by entering registration information; (C) comparing the entered information with stored information on possible system users; (D) denying access to the system if no match is made or determining the length of access time if a match is made and if the user still has access time left; and (E) denying access once the user`s time has run out.

Description

TERM OF USE FOR ACCESS TO A COMPUTER SYSTEM

The present invention relates to a method for limiting the duration of use in which one or more users have access to a computer system. The present invention also relates to a computer system provided with a system for limiting access to the computer, in particular a computer program.

When using a computer system, such as for example a personal computer, any user can load the operating system, such as for example the Windows operating system of Microsoft Corp. or the Linux operating system, and possibly after entering a user-specific password, gain access to the computer system.

Once the user has gained access to the computer system, he can in principle use the computer system for an unlimited period of time. This can lead to problems in some situations. For example, when the computer system is used by children, from a pedagogical point of view and perhaps also for health reasons, it is not wise to allow the children to use the computer for too long a period of time.

The computer system could be turned off automatically after a preset period. However, if several users are entitled to access the same computer system, this would mean that for all users, including for example the parents of the children, only a limited access time is available on the computer. In addition, switching off and restarting the computer would restart the preset period. It is clear that this is not the intention.

It is therefore an object of the present invention to provide a method and a computer system in which these drawbacks are obviated.

According to a first aspect of the invention, a method is provided for limiting the duration of use in which at least one user has access to a computer system, the method comprising the steps of: a) loading a system for limiting the computer access duration, which system is arranged for: b) displaying on the screen of the computer system a login screen on which the user can register for a computer session by entering login data; c) comparing the input login data with a list of pre-stored input data associated with the potential user (s) of the computer system; Dl) preventing access to the computer system from appearing on the list in the event that the input data entered does not correspond to that on the list; and d2) otherwise determining the time remaining for the logged-in user For access to the computer system; e) if the user still has computer access time left, providing the user with access to the computer system; f) determining access, once access has been granted, to the remaining computer usage time for the registered user; g) when the computer usage time has expired, preventing access to the computer system.

1028532 3

The computer system can herein be a server-client computer system in which, for example, the user logs in to a client and data such as the remaining usage time are stored on the server. In many cases, however, the computer system is a stand-alone computer, for example a personal computer for home use that is accessible to different housemates.

For each user of the computer system, therefore, a record is kept of how much time the user still has to have access to the computer system. As soon as the time expires, the user is denied access to the computer. Even if, for example, the user has already used his access time, he / she will be denied access to the computer system. The length of time during which a certain user has maximum access to the computer can be set by the supervisor of the computer, for example one of the users with special rights, and stored in the computer system. Every time a user logs in, the remaining time stored is retrieved from the computer so that it is clear how long the user in question still has access to the system.

In a preferred method, the method comprises loading the computer usage duration limiting system, for example from a hardware component (boot memory element) physically built into the computer system before the operating system is booted. An advantage hereof is that the data and codes required in one or more of the steps of the method can be stored on this boot memory element 30, so that the usage time limitation is maintained upon removal or reinstallation of the operating system. Moreover, the data on this element cannot be accessed from the operating system, 1028532 4, which increases security. Moreover, removal of the system is only possible by physically removing the boot memory element from said housing.

When for any reason it is inconvenient to add a hardware component to the computer system, the method preferably comprises loading at least a part of the computer system's operating system before step a and step e comprises loading the remaining part of the operating system.

In order to encourage the user to use computer time in an economical and policy-oriented manner, the method preferably comprises determining the computer usage time remaining by the user terminated by the logged-in user and storing the computer usage duration thus determined. on a storage medium, preferably on the storage medium of the computer system itself. When next time the same user logs in to the computer system, he retrieves the stored remaining computer usage time and the user can still gain access to the computer.

As soon as information regarding the remaining access time has been retrieved from the storage medium, the remaining access time is each time determined by subtracting the duration of the current session from the value of the retrieved remaining access time. When the remaining computer access time has now reached a certain minimum value, a preferably a warning signal is issued, so that the user receives an indication that the access time is only limited. A further preferred method comprises the step of issuing a second warning signal when the determined remaining computer usage time has reached a second pre-stored value, smaller than the first pre-stored minimum value, 1028532. Thus, warning signals, which are preferably of a different nature, can indicate to the user that the usage time has almost elapsed.

In a particular embodiment, step g of the method comprises periodically determining the current remaining computer access duration during the session, the remaining access duration thus determined being displayed on the screen of the computer system.

The information stored on the storage medium of the computer system 10 about the remaining period of use of a user can be adapted, for example by the first-mentioned supervisor, and stored on the storage medium. In another embodiment, the information stored on the storage medium over the remaining period of use is automatically increased periodically. The system may, for example, be arranged to provide certain users, whether or not taking into account any 'Saved' duration, a new amount of usage duration each week.

Preferably, the method comprises storing one or more predetermined sets of standard access time durations, such as, for example, a computer time to be spent in a given time period per calendar day. During the holiday period, for example, the children receive more time per day to use the computer system than during 25 school weeks. A predetermined standard set of time periods for the holiday period can then be set simply and quickly.

Accessing the computer system in a particular preferred embodiment comprises loading the remaining part of the operating system.

The security system is preferably arranged to be deactivated or removed only after receiving a correct removal code. This prevents a user, once he has gained access to the computer system, from disabling or disabling the security system.

According to another aspect of the present invention, a computer system is provided with a central processing unit, a display, a memory, a storage medium, and input means, the system being programmed to perform the steps of the method. Further advantages, features and details of the present invention will be elucidated on the basis of the following description of a preferred embodiment thereof. Reference is made in the description to the accompanying figures, in which:

Figure 1 shows a schematic representation of a preferred embodiment of a computer system according to the invention;

Figure 2 is a flow chart of a logon procedure in which the user can gain access to the computer; Figure 3 is a flow chart of the steps performed by the security system once a user is logged in; and

Figure 4 is a flow chart of the steps for alerting the user performed by the security system once a user is logged in.

Figure 1 shows a personal computer 1 which is built up in known manner from a screen 2, a keyboard 11, a mouse connection 12 and a housing 3 in which, inter alia, a central processing unit (CPU) 4 for, a RAM memory 5, a ROM memory 6, a data storage medium such as a hard disk 7 and / or a floppy disk drive 8 and / or an optical disk read-write device 9. Furthermore, in the illustrated embodiment __ 1028532 __________ · 7 a memory start-up element 15 is provided. In another embodiment, element 15 may be omitted, as will be explained later. The said components are connected to one another by means of one or more system buses 10 so that the components can communicate with each other. The computer 1 can further be connected to the Internet via a modem 13.

When a user wishes to gain access to the computer 1, he switches on the power supply of the computer by operating switch 14. As soon as the computer is switched on, the central processing unit reads a boot ROM memory and a start is made with the start-up procedure.

The start-up procedure according to a preferred embodiment of the invention is explained in more detail in the flow chart of Figure 2. In step 110, user A switches on the personal computer 1, so that the operating system of the computer is partially loaded in the manner described above (step 120). After the operating system has been partially loaded, the processing proceeds to step 130 in which the security program stored on the storage medium of the computer (hereafter also referred to as the program) is read. The program now ensures that a login screen is displayed on the screen 2 of the computer 1 (step 140) with which the user can enter login codes, such as for example his name (for example user A) and his password, by operating the input means, for example the keyboard 11 and / or the mouse 12.

In the next step (step 150), the login codes are compared by the processing unit with user data stored in advance on the storage means 7, 8, 9. Next, it is checked whether the entered user name and password combination matches the user data stored in advance of 1028532 δ (step 150). If not, the processing of the program returns to step 140, so that the login screen is again displayed on the screen 2.

5 As an alternative (not shown), the computer can be switched off if the login codes and the pre-stored user data do not match. In yet another embodiment, after step 150 in which the user name and password combination is compared with the pre-stored user data, a further check is performed (step 155). This step checks how often the user has already entered his password and username. For example, if that happened a K times consecutively (e.g., K = 3), the program assumes that user A has no right to access the computer and the program will automatically shut down the computer (step 156). ). If the number of times the user has tried to log in is less than the preset value, the program proceeds to step 140 and the logon screen is displayed again.

After in step 150 the login codes have been compared with the user data previously stored on the computer and a match has been found -> the program determines.

How much time the specific user, in this case user A, has left (step 160). For this purpose, the user data stored on the storage means of the computer comprise an indication of the remaining time for the relevant user. When the user logs in for the first time or when the user data has recently been updated, the user data contains an indication of the standard usage time that has been previously stored (for example by the supervisor), for example two hours of computer time. If the user has already been logged in one or more times and the user data has not been updated in the meantime, the user data contains an indication of the remaining period of use stored in an earlier session on the storage medium.

The program then proceeds to step 170 in which it is checked whether the relevant user (user A) still has sufficient remaining usage time. If the remaining duration thus determined is sufficiently large, for example more than 5 minutes, the remaining part of the operating system is loaded (step 180), so that the user A has full access to the computer. However, if no time or insufficient time remains, the processing proceeds to step 140 and the previously described logon screen is displayed on the screen 2 of the computer.

Once the user has gained access to the computer and the remaining part of the operating system has been loaded, he will have full access to the computer. However, the program remains active and periodically records, on the basis of the system clock of the computer 1, how much time has elapsed since the specific user (user A) has logged into the computer. To this end, the remaining computer usage time is calculated by subtracting the elapsed time from previously determined computer usage time (200). Next, it is checked whether there is any remaining computer usage time (step 210). If that is the case, the program returns to the determination of the remaining computer usage time (200) and this process is repeated periodically. If it is determined in step 210 that there is no remaining time remaining, the relevant user logs out of the operating system and the program returns to step 140, in which the logon screen is unhealed on the screen 2. This offers another user the opportunity to gain access to the computer. It will be clear that in an alternative embodiment of the program, if it is determined in step 210 that there is not sufficient usage time 5 left, it proceeds to step 220 (not shown), in which the program automatically switches off the computer 1.

If it is determined in step 210 that there is insufficient remaining computer usage time, the program does not return to step 140 earlier to display a new login screen, or the program does not advance to step 220 to turn off the computer until after the program closes the currently running programs in a regular manner and possibly stores the associated data, for example by storing the files in use on the storage medium, so that no data is lost and the user will no longer lose his work during a subsequent session can resume.

In a further preferred embodiment, the user is warned one or more times about approaching the end of the session, because the computer usage time 20 has almost expired. In this embodiment, step 210 in Figure 3 is replaced by steps 211 to 218 shown in Figure 4. Step 211 checks whether the remaining computer usage time is shorter than a predetermined value (less than L minutes, where in L, for example, 25 equals ten). If not, the program returns to step 200, as shown in Figure 3. When the remaining computer usage time is less than L minutes, the program proceeds from step 211 to step 215 and generates a first warning for the user, for example in the form of a pop-up window, is displayed on the screen 2 of the computer and / or by means of a first acoustic warning signal. The computer user now knows that he only has 10 minutes left 1028532 11 and can finish his work quickly. Thereafter, the remaining period of use is determined in each step in step 216 and a check is made in step 217 whether the remaining period of time is sufficient, for example whether the remaining period of time is equal to 0 minutes. If the usage time has elapsed, the computer is turned off in step 218. If the duration has not yet elapsed, the operation returns to step 216.

In another embodiment, it is determined in a known manner in step 211 whether the remaining user time is smaller than the predetermined minimum value of L minutes.

If not, the program returns to step 200 as shown in Figure 4. If it is, the program proceeds to a next step, in which it is checked whether the remaining computer user time is less than a second minimum. value of M minutes, where M is less than L. In the example where L is less than ten minutes, M could be less than five minutes, for example. If it is determined that the remaining computer usage time is less than L minutes and greater than M minutes, the first warning signal (step 215) is output. However, if it is determined that the remaining computer time is both less than L minutes but also less than K minutes, a second warning signal is given. The user knows in such a case that the remaining computer usage time is starting to become very small. It will be clear that in other embodiments more warnings can be given, for example at one minute, five minutes, ten 30 minutes and thirty minutes before the end of the computer usage time.

In another preferred embodiment, in a window on the screen 2 of the computer 1, an indication is given of the remaining computer usage time. For example, a time indication in figures or an indication in the form of a bar graph in which the length of the bar is indicative of the remaining computer usage time. It will be clear that numerous variants of such an indication are possible, all of which are within the scope of the invention.

Insofar as applicable, an authorized user (the supervisor) may, after possibly performing an additional verification procedure, adjust the remaining access times stored on the storage medium for the various users. The adjusted access duration of each of the users is stored on a storage medium so that in a subsequent session the user has an adjusted (i.e. longer or shorter) cora-computer time at his disposal. Instead of or in addition to the said adjustment by the supervisor who programs the remaining computer usage times in the manner described above, this can also be performed automatically by the program 20, for example through the remaining computer usage times periodically, e.g. once a week, or in the month. This can be done on an individual basis, i.e. for each of the users individually, or for all users together. It is also possible to adjust (usually increase, sometimes decrease) computer access times based on one or more predetermined sets of standard computer access times. This means that the supervisor can choose from a number of standard programming settings, so that programming of the remaining computer usage times can be simplified for each user. Examples of such series are a first week program Wj of a student who is not free and a second week program W2 1028532 13 of a student who is free. Depending on the situation, the supervisor, such as the student's parent, can easily set the maximum computer usage times for the relevant week by choosing the correct weekly program.

In order to prevent a user, once he has properly gained access to a computer, makes the security program inactive or even deletes, the system is arranged to receive a correct deletion code only after receiving a correct deletion code, for example only from the supervisor. known to have the security system deactivated or removed.

One of the options is to have a code entered by the supervisor during the installation; this code is again required for removal. This code must be devised by the supervisor himself.

Another option is to let the program provide the code itself during the installation. This must be written down and saved. This code is requested when deleting. The supervisor cannot change this; the program gives this code. An advantage of this is that it is generated automatically. This prevents easy codes from being selected by the supervisor.

A third option is a de-installation code which must be requested via the internet. If installation via the internet can also be done via a code, the manufacturer will also know how many packages are outstanding in the market. In addition, a user registration can be linked, which is fully automatic. This internet site 30 can, for example, generate codes for installation and uninstallation.

In the example discussed above, the operating system of the computer is initially only partially loaded 1028532 and the remaining portion is loaded once the logon procedure has been successful. This means, for example, that when the Windows operating system is used, the Desktop will only become available to the user after the security program has checked the user's login codes and remaining usage time in the manner described herein. In other embodiments of the invention, however, the usual entire operating system is activated before the security program performs the security steps described herein.

The entered login codes, for example user name and password combinations, and the user data such as the data indicative of the remaining computer usage time for each of the users, any verification codes and / or deletion codes, are preferably stored in a secure and encrypted database on one of the storage media, so that users cannot wrongly adjust the information contained therein.

In the embodiments described above, the security system (access time limitation system) is implemented with software. After all, the system comprises a computer program that is embedded in the computer's operating system. However, there are also conceivable embodiments in which the security system is implemented in hardware or in a combination of software and hardware. At an earlier stage, the embodiment has already been mentioned in which a special start-up memory element 15, such as a ROM or an insert card, is provided in the housing 3. Instead of reading in part of the operating system (step 120, figure 1) immediately after starting up the computer (step 110, figure 2), the security program (step 130, figure 1) is read in directly from 1028532 into the boot memory element 15. The method then corresponds to the method previously discussed, on the understanding that in step 180 the entire operating system is read. The present invention is not limited to the preferred embodiments thereof described herein. The rights sought are rather determined by the following claims, within the scope of which many modifications are conceivable.

1028532

Claims (22)

A method for limiting the period of use in which at least one user has access to a computer system, the method comprising the steps of: a) loading a system for limiting the computer access period, which system is arranged for: displaying on the computer system screen a login screen on which the user can register for a computer session by entering login data; c) comparing the input login data 15 with a list of pre-stored login data associated with the possible user (s) of the computer system; dl) preventing access to the computer system from appearing on the list if the entered login data does not match. and d2) otherwise determining the time remaining for the logged-in user to access the computer system; e) providing the user with access to the computer system if the user still has computer access time left; f) as soon as access has been granted, determining the remaining computer usage time for the registered user; g) when the computer usage time has expired, preventing access to the computer system. Method as claimed in claim 1, comprising before step a loading at least a part of the operating system of the computer system and wherein step e comprises loading the remaining part of the operating system. 3. Method as claimed in claim 1 or 2, comprising of determining, upon termination of the computer use by the logged-in user, the remaining computer usage time for the user and storing the remaining computer usage time thus determined. The method of claim 1, 2 or 3, wherein step el comprises retrieving a remaining computer access duration stored in advance on the computer system 10. 5. Method as claimed in any of the foregoing claims, wherein determining the remaining computer access duration comprises subtracting the duration of the current session from the value of the remaining access duration already stored. A method according to claim 5, comprising issuing a warning signal when the determined remaining computer access time has reached a pre-stored minimum value. The method of claim 6, including outputting a second warning signal when the determined remaining computer usage time has reached a second pre-stored value, smaller than the first pre-stored minimum value. A method according to any one of the preceding claims, wherein step g comprises periodically determining the current remaining computer access duration during the session. 9. Method according to claim 8, comprising displaying the current remaining computer access time on a screen. The method of any one of the preceding claims, comprising adjusting the value of the 1028532 remaining computer access time and storing the adjusted remaining computer access time. The method of claim 10, comprising periodically increasing the remaining computer access time. 12. Method as claimed in claim 11, comprising of increasing the remaining computer access duration per calendar day or week. 13. Method as claimed in any of the foregoing claims, comprising of storing one or more predetermined sets of standard computer access times. The method of claim 13, wherein a set of standard computer access time durations comprises a computer time to be spent in a given time period per calendar day. The method of any one of the preceding claims, wherein in step b, logging in includes logging in of the user into the computer system and in step g, preventing access includes logging out of the user from the computer system. A method according to any of the preceding claims, wherein in step e providing access to the computer system comprises loading the remaining part of the operating system. 17. A method according to any one of the preceding claims, wherein the security system is adapted to be deactivated or removed only after receipt of a correct removal code. 18. Computer system provided with a central processing unit, a screen, a memory, a storage medium, and input means, the system being programmed to carry out the steps of the method according to one of the preceding claims. 1028532 19. Computer system as claimed in claim 18, comprising a lockable housing in which at least the central processing unit and the memory are arranged, the housing also being provided with a start-up memory element coupled to the memory and the central processing unit for loading said access duration limiting system before the operating system is loaded. 20. A data carrier comprising a computer access duration limitation system in the form of a computer program stored thereon in execution of which the method according to any one of claims 1-17 is carried out. 21. A data carrier according to claim 20, wherein the data carrier is formed by a boot memory element to be arranged inside the housing of a computer system. A computer program for executing, when run on a computer system, the steps of the method according to any of claims 1-17. 1028532