home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Night Owl 6
/
Night Owl's Shareware - PDSI-006 - Night Owl Corp (1990).iso
/
011a
/
tl082791.zip
/
TIMELOCK.DOC
< prev
next >
Wrap
Text File
|
1991-08-27
|
45KB
|
930 lines
TimeLock <27Aug91>
-
(C) Copyright 1990-91
The PC Consultant
P.O. Box 42086
Houston TX 77242-2086
-
Phone No's
Office 713/826-2629 (voice-mail no answer)
BBS 713/870-1508 (support board)
TimeLock table of Contents
I. Abstract . . . . . . . . . . . . . . . . . 1
II. Detail . . . . . . . . . . . . . . . . . . 1
Files included with this release . . . . . . . . 1
Attention character . . . . . . . . . . . . 2
Unloading from memory . . . . . . . . . . . . 3
Hot Keys . . . . . . . . . . . . . . . . 3
Instant lockout . . . . . . . . . . . . . 3
Screen blanking . . . . . . . . . . . . . 4
Override password . . . . . . . . . . . . . 4
Invisible operation . . . . . . . . . . . . 5
III. Configuring Using TLPatch . . . . . . . . . . . 5
What is TLPatch . . . . . . . . . . . . . . 5
TLPatch command line . . . . . . . . . . . . 6
TLPatch queries . . . . . . . . . . . . . . 6
Copy of TimeLock to patch . . . . . . . . . 6
Keyboard lockout time . . . . . . . . . . . 6
Specifying passwords . . . . . . . . . . . 7
Timeout warning tone time . . . . . . . . . 8
Timeout warning tone duration . . . . . . . . 8
Enabling pop up window . . . . . . . . . . 8
Location of pop up window . . . . . . . . . 9
Screen blanking feature . . . . . . . . . . 9
Lockout advisory tone duration . . . . . . . . 10
HotKey attention key combination . . . . . . . 10
Password entry keystroke idle time . . . . . . 10
Multiplex interrupt number . . . . . . . . . 11
System clock interrupt . . . . . . . . . . 11
Examples . . . . . . . . . . . . . . . . 12
IV. Miscellaneous Information . . . . . . . . . . . 13
V. Licensing . . . . . . . . . . . . . . . . . 14
VI. Closing . . . . . . . . . . . . . . . . . 16
TimeLock <27Aug91> Page: 1
---- I -------------------------------------------------------------------------
------- Abstract ---------------------------------------------------------------
Note: To make this document printable on dot-matrix printers,
all characters above ASCII 127 were converted to their printable
counterparts. Certain items like the 'keyboard is locked' window
will appear with line drawing characters in the programs.
TimeLock is an assembly language memory resident utility that
locks the PC keyboard and disables a Microsoft compatible mouse after
a user-specified period of keyboard inactivity and optionally blanks
the screen. This security feature protects your PC (and, more
importantly, a LAN/mainframe userid or sensitive application program)
from spying eyes and curious fingers while you are away. Since the
program locks the keyboard and disables the mouse automatically, you
don't have to remember to activate it before walking away. The
timeout can range from six seconds to one second shy of an hour.
It's this automatic keyboard lock that separates TimeLock from
most other keyboard based security programs. Users need not remember
to secure their PC before walking away - it's done for them! Also,
by installing TimeLock from the autoexec file, you obviously don't
even need to remember to load it. The only time TimeLock presents
itself to the user is when he/she returns to the PC after an absence
so the utility itself in not intrusive to the user.
---- II ------------------------------------------------------------------------
------- Detail -----------------------------------------------------------------
>>>> Files Included With This Release <<<<
There are a number of files included with this release. Each
file is described below:
timelock.com TimeLock memory resident program file.
tl_demo.com Demo version of TimeLock. Exactly the same
as timelock.com except a password is already
setup for you to allow for an easy demo.
tl_mouse.com TimeLock memory resident program file
including code to disable a Microsoft
compatible mouse. Identical to TimeLock.com
except for the mousetrap code.
timelock.doc This file.
tlpatch.exe TimeLock configuration program.
readme.1st Contains notes, demo instructions, and other
information of immediate interest.
TimeLock <27Aug91> Page: 2
>>>> Attention Character <<<<
The 'Attention Character' is a character automatically prepended
to your password by TimeLock. When unlocking the keyboard, you must
strike the Attention Character then enter your password.
Also note that TimeLock sees password characters as merely a
stream of scan codes. Because of this, passwords are *not* case
sensitive. In fact, if you attempt to use any 'non-key' (such as
shift) in conjunction with your password, TimeLock will refuse to
unlock. Shift keys and the like simply transmit extraneous scan
codes that TimeLock sees as password characters. This is also why
BackSpace and Escape do not work like you'd think they would.
Reasons for the attention character and what it does:
1)
Since TimeLock disposes of all keystrokes after the keyboard is
locked, there had to be a way to get TimeLock's attention - informing
it to interrogate the following keystrokes for a possible password
match. The Attention Character informs TimeLock to start paying
attention to what you type - looking for the password.
2)
The Attention Character flushes any portion of the password you
might have entered. The reason is this: Due to the way TimeLock
interrogates the keyboard controller chip, you cannot use the
BackSpace key to correct a typing error made while entering the
password - nor will the Esc key erase the queued keystrokes. If you
mis-key a character while entering the password, you must START OVER
by pressing the Attention Character followed by the password again.
The Attention Character ALWAYS precedes the first character of
the password even though it's technically not part of the password.
You do not specify the attention character during TLPatch setup.
It's automatically added by TimeLock at execution. But for the
purpose of using and understanding TimeLock, you can just 'think' of
the attention character as the first password character.
The attention character is the period (.) and cannot be changed.
TimeLock <27Aug91> Page: 3
>>>> Unloading From Memory <<<<
TimeLock can be unloaded from memory by issuing the following
command from the DOS command line:
timelock u
Memory resident programs are not relocatable, so in order for
TimeLock to be safely removed from memory, it must currently be the
last resident program loaded. Unloading TimeLock even though it's
not last in memory won't actually hurt anything but DOS will not be
able to reclaim it's memory, ergo a hole will remain. By using
commonly available TSR management tools (MARK and RELEASE) you'll
have more control over memory.
>>>> Hot Keys <<<<
Hot keys are a way to invoke TimeLock functions instantly from
the keyboard. TimeLock has, at this time, three hot key functions.
1) an instant keyboard lockout, 2) a screen blanker, and 3) both
above as one key.
Hot key functions are activiated by pressing a certain
combination of keys. With TimeLock, there are two parts to each hot
key. The 'combo-keys' and the 'function-key'. You must press and
hold the combo-keys then tap the function-key in order to invoke the
particular operation.
ie: combo-keys function-key
------------- ------------
Instant Lockout: Alt LeftShift L
Screen Blanker: Alt LeftShift B
(both above) Alt LeftShift K
TLPatch will allow you to change the combo-key portion of the
hot key to maintain compatibility with other, less flexible, software
that might hard-code it's hot keys. You can select any two, three,
or four of the following combo-keys: A=Alt, C=Ctrl, L=Left Shift,
R=Right Shift. The combo-keys are the same for all hot key
functions.
The function-key portion is the actual designator for the
operation you wish to invoke and cannot be changed.
1. Instant Lockout
TimeLock has two instant lockout features. You can lockout the
keyboard from the DOS command line (or batch file) by issuing the
following command:
timelock !
TimeLock <27Aug91> Page: 4
Given the above command, TimeLock will lock the keyboard and go
resident if not already. It will not replicate itself in memory.
You can also lock the keyboard using a special hot key. The
default instant lockout hot key is Alt-LeftShift L.
2. Screen Blanking
TimeLock has a screen blanking feature that both protects the
video screen from burn-in and serves as a security measure by
securing from view any potentially sensitive information on screen
while you are away.
This screen blanking feature can be activated by both an
automatic timer or by pressing a hotkey. The default hot key for
instantly blanking the screen is Alt-LeftShift B.
>>>> Override Password <<<<
TimeLock provides registered users a means to unlock the
keyboard using an optional override password. This password, if
enabled, can be of your choosing. There are both advantages and
disadvantages to having an override password. Some are:
An advantage is that a LAN/PC/site administrator can unlock a
user's keyboard if the password was inadvertently forgotten,
potentially saving the user much trauma if there is important unsaved
work present.
The obvious disadvantage is that if the override password gets
out, and if it's the same on all PC installations, TimeLock security
will go down the toilet. This issue may be partially eliminated by
configuring the override password based on something specific to the
individual PC. IE: A derivative of the office number, user's name,
telephone extension, etc.
In any event, use caution if you decide to enable this feature.
I, like most administrators, enjoy having all the keys to the
kingdom. Full network access rights, computer room access, master
keys, etc. So I included this capability in TimeLock. There is no
default override password and the feature is initially disabled so
you must manually enable it for it to work.
Configuring the override password requires an undocumented
command to be specified on the TLPatch command line. This special
command will be issued only to REGISTERED administrators to help
prevent others from tampering with the override password.
Additionally, due to serialization, the TLPatch program registered to
company 'A' will not work on company 'B's TimeLock program file.
Like the regular user password, the override password can be changed
only if the old password is known.
TimeLock <27Aug91> Page: 5
NOTE: There are absolutely NO 'backdoor' passwords! I, for
instance, could not walk up to a PC running TimeLock outside my
company and summarily gain access. The override password mentioned
above is the *only* additional entry point and it's FULLY
configurable and can be enabled/disabled by the customer!
>>>> Invisible Operation <<<<
Normally, TimeLock issues a warning tone just before it locks
the keyboard to give the user a chance to reach over and tap a key if
sitting nearby. Additionally, TimeLock pops up a small window and
sounds a tone if a key is struck while the keyboard is locked.
If desired, you can disable all beeps and the window making
TimeLock totally invisible. Configured as such, a locked PC will
simply appear 'dead' to the world. But, of course, the proper user
will know better. Once the password is successfully keyed in, an
astonishing resurrection will take place! This invisible operation
may be achieved by answering the following questions in this manner:
Time to elapse before sounding timeout warning? (04:45) >00:00
Should the 'Keyboard Locked' window appear? (Yes) >no
Time to elapse before blanking screen? (05:00) >00:00
Duration of lockout advisory beep (ticks)? (04) >0
---- III -----------------------------------------------------------------------
------- Configuring using TLPatch ----------------------------------------------
>>>> What is TLPatch <<<<
Before TimeLock can be used for the first time, you'll need to
run the TLPatch program to configure it. TLPatch sets your password,
all configurable timers, and other items necessary for proper
TimeLock operation.
If you're new to TimeLock then I recommend experimenting first
using low timeout values. Ten to fifteen seconds might be useful.
Once you're familiar with TimeLock's operation you can reconfigure it
with real-world timeout values, etc...
TLPatch does just what the name implies. It patches, or
modifies, the TimeLock.com program file. Therefore you should save
an unconfigured copy of TimeLock for future use. Just keep the .ZIP
file TimeLock was distributed in and you'll be in good shape.
TLPatch will ask a number of questions regarding TimeLock. All
questions with the exception of the password have a default value
that you can use. The original defaults represent good operating
parameters that you might use. But you're always free to change them
to whatever you wish. Subsequent executions of TLPatch against the
same copy of TimeLock will remember all previous parameters allowing
you to default until you reach items to change.
TimeLock <27Aug91> Page: 6
>>>> TLPatch Command Line <<<<
TLPatch normally asks only three questions. 1) The copy of
TimeLock to patch, 2) the inactive keyboard lockout time, and 3) the
user unlock password. To use this abbreviated form, just say
'TLPatch' from the DOS command line.
If desired, you can force TLPatch to ask a whole series of
questions that allow you to tweak TimeLock just to your liking.
TLPatch -all will force TLPatch to ask all configuration
questions. All questions are described
below under 'TLPatch Queries'.
The only other command line parameter allows you to configure
the override password. For reasons mentioned above under the heading
'Override Password', this parameter will be given only to registered
LAN/PC/site administrators.
>>>> TLPatch Queries <<<<
Below outlines each question asked by TLPatch. Only questions #
1,2,4 will be asked unless you specify the '-all' parameter when
executing TLPatch. (Question #3 will be asked if this copy of
TimeLock has been previously configured)
1. Copy of TimeLock to Patch?
-----------------------------
Enter the name of the particular copy of TimeLock you wish to
configure. If it's not in the default directory then specify all
necessary path information. By allowing you to specify which
TimeLock to patch, you can keep several differently configured copies
lying around.
2. Time to elapse before locking keyboard?
------------------------------------------
Time, in minutes and seconds, that TimeLock will wait before
locking an idle keyboard. Specify as MM:SS (minutes:seconds).
The minimum legal time is 00:06 and the maximum is 59:59. If
either sub-field (MM or SS or both) is less than ten then include a
leading zero - or TLPatch will complain. IE: Nine minutes and five
seconds would be entered as '09:05' and not as '9:5'.
TimeLock <27Aug91> Page: 7
3. 1st: Enter OLD unlock password? (c/r to keep OLD)
----------------------------------------------------
If TimeLock has previously been configured, you must enter the
old password before being allowed to change it. This is a small
security enhancement to prevent other users from changing the user
password for this copy.
If you are configuring a virgin copy of TimeLock, this query
will not appear.
4. NEW Keyboard unlock password? Min: 4 chars, Max: 14 chars
-------------------------------------------------------------
This is the secret password necessary to unlock the keyboard
once TimeLock has locked it. Legal password characters are A-Z, 0-9,
space-bar, and the following special characters: -=[];,
The password is not case sensitive. A minimum of four and a
maximum of fourteen characters may be used. Normally, to unlock the
keyboard after TimeLock has seized it, you must hit the (enter) key
after typing the password. If you wish to have TimeLock unlock the
keyboard immediately after hitting the last character of the
password, then precede the password with the '@' sign at this prompt.
The '@' sign will not become part of the password. It's simply a
flag to TimeLock to not expect (enter) after the password is keyed
in.
I recommend against using the '@' to eliminate the (enter) key
for the user community at large. Most folks are psychologically
accustomed to hitting (enter) after typing in an item of required
input and will by force of human nature and habit strike the enter
key after keying said input. If (enter) expectancy is disabled
here, then the (enter) that the user will invariably hit will be fed
to the foreground application - with sometimes undesirable results.
This is not a theory of mine. TimeLock originally never needed the
(enter) key. I added it as the default after watching numerous users
frustrate themselves by the apparently extraneous (enter) key. I
included the '@' capability as a bypass for me because I prefer *not*
hitting enter. Human nature is hard to fight. I just included this
observation for your own consideration, that's all.
If you are configuring a customized site copy (TLPatch -all) for
mass user distribution and do not want a password configured, then
answer this query with a '$'. Doing so will allow you past this
query without actually configuring a password. This bypass feature
will work only on a virgin copy of TimeLock and only with the '-all'
parameter when executing TLPatch. Be sure to instruct users on how
to configure their own password.
Note that when you actually unlock the keyboard after TimeLock
has seized it, you must precede the password with the ATTENTION
CHARACTER. This character is the period (.). For more information
on the this, please see 'Attention Character' under the heading
titled 'Detail'.
TimeLock <27Aug91> Page: 8
5. Time to elapse before sounding timeout warning?
--------------------------------------------------
Time, in minutes and seconds, that TimeLock will wait before
sounding a warning tone before actually locking an idle keyboard.
This timer should generally be set to sound the warning tone a few
seconds prior to actual lockout to give you time to reach over and
tap a key if sitting nearby. Specify as MM:SS (minutes:seconds). To
disable this feature, enter 00:00.
The minimum legal time is 00:05 and the maximum is one second
less than the lockout time. If either sub-field (MM or SS or both)
is less than ten then include a leading zero - or TLPatch will
complain. IE: Nine minutes and five seconds would be entered as
'09:05' and not as '9:5'.
6. Duration of timeout warning beep (ticks)?
--------------------------------------------
In addition to specifying -when- the timeout warning tone will
sound, you can also specify it's -duration-. The value is entered as
system clock ticks. Each tick equals 1/18th of a second. Specify a
low value for a quick beep or a higher value for a longer, more solid
tone. IE: Specifying 4 equals about 1/4 second. The minimum value
is one and the maximum is sixteen.
This question is asked only if you elected to enable the timeout
warning beep on the previous question.
7. Should the 'Keyboard Locked' window appear?
----------------------------------------------
TimeLock has a small window that pops up when a key is pressed
on a LOCKED keyboard. This window advises the would-be culprit (or
whoever) that the keyboard is locked and that a password is required.
This question asks if you want this window enabled or not. The
window looks like this:
|====================|
| Keyboard is Locked |xx
| * Enter Password * |xx
|====================|xx
xxxxxxxxxxxxxxxxxxxxx
The 'x's indicate the window's drop shadow. This provides a
nice 3D effect.
TimeLock will save the text under the window before popping it
up. Once the password is correctly entered or if no other keys are
pressed for a few seconds, the window will disappear and the original
text restored.
TimeLock <27Aug91> Page: 9
8. Row:Col on screen for pop up window?
---------------------------------------
Normally, TimeLock places the 'keyboard is locked' pop up window
at row 5 column 11 on the screen. This query allows you to choose
where on the screen to place the window. The window (including drop
shadow) is 5 lines deep and 24 columns wide. The row:col value given
here is for the top-left corner as illustrated by the mark (X).
The legal values are: Row 1-21 and X====================|
Col 1-57. Even if your video card supports | Keyboard is Locked |xx
more than 25 lines per screen, you cannot | * Enter Password * |xx
configure TimeLock to use them. The reason |====================|xx
is simple. MANY application programs reset xxxxxxxxxxxxxxxxxxxxx
the video mode to 25 lines regardless of your
prior setting. And since TimeLock must function within these
programs, it would be unwise to use anything other than a standard
25x80 screen format. Video confusion could occur otherwise.
9. Time to elapse before blanking screen?
-----------------------------------------
Time, in minutes and seconds, that TimeLock will wait before
blanking out the video screen if the keyboard is idle. Specify as
MM:SS (minutes:seconds). Contents will be preserved during the
blanked out period and will re-appear when the screen is restored.
The minimum legal time is 00:06 and the maximum is 59:59. If
either sub-field (MM or SS or both) is less than ten then include a
leading zero - or TLPatch will complain. IE: Nine minutes and five
seconds would be entered as '09:05' and not as '9:5'. To disable the
automatic timed blanking feature, enter '00:00' for the time.
Any key (including such 'non-keys' as shift, alt, etc.) will
restore the screen with any changes that might have occured during
the blank out. In fact, it's advised that you restore the screen
using such a non-key, since a regular key will be read by the
foreground program currently executing.
Depending on the type of video card and the mode it operates in,
it's possible that a blanked screen might 'restore itself' if the
application program performs certain BIOS calls during the blank out
period. Future versions of TimeLock may include code to counter this
effect. But under most circumstances, once the screen is blanked
out, it'll stay that way.
You cannot restore a blanked out screen if the keyboard is
locked. This is a security feature to further prevent spying eyes
from peering around while you are away.
TimeLock <27Aug91> Page: 10
10. Duration of lockout advisory beep (ticks)?
----------------------------------------------
TimeLock can sound a tone when a key is pressed on a LOCKED
keyboard. This tone is designed to call your attention that the
keyboard is locked. Sometimes folks will start typing without
looking at the screen (and missing the pop up window) so this tone
will alert that the keyboard is locked - saving wasted keystrokes.
The value is entered as system clock ticks. Each tick equals
1/18th of a second. IE: A value of 4 equals about 1/4 second.
Specify a low value for a quick beep or a higher value for a longer,
more solid tone. The minimum value is one and the maximum is
eighteen. To disable this feature, enter '0'.
11. HotKey attention key combination?
------------------------------------
TimeLock has code to support hot keys for various functions
(currently one). Hot keys are activated by pressing and holding some
combination of the Left shift, Right shift, Ctrl, and/or Alt keys
together then touching the letter that performs the function you
want. IE: Hot key 'L' forces an instant keyboard lockout.
TLPatch allows you to configure the multiple keypress to be
compatible with other non-configurable software. IE: You might have
a note pad TSR or the like that has Alt-LeftShift hardwired. If so,
you can change TimeLock to an unused combination.
This query asks you to define the multi-key combination to be
used in conjunction with the hot key function character. The default
is 'AL' meaning 'Alt' and 'LeftShift'. Available keys are 'L'=Left
shift, 'R'=Right shift, 'C'=Ctrl, and 'A'=Alt. You must specify at
least two of these keys and you may specify up to all four - or take
the default.
12. Maximum password entry keystroke idle time (seconds)?
---------------------------------------------------------
While entering the password to unlock the keyboard, you have
only a certain amount of idle time -between- keystrokes before
TimeLock flushes the password and pops down the window (if enabled).
This does *not* mean you have only x number of seconds to enter the
entire password, but rather x number of seconds between EACH
keystroke - good or bad.
IE: If you specify '5' seconds here then you'll have five
seconds between each keystroke while typing in the password. Each
time you press a key while the keyboard is LOCKED, TimeLock will
reset the 'locked idle' timer to zero and start again. If this timer
expires, TimeLock assumes you were a curious intruder and will reset
the password input queue (flush buffer, remove pop up window, and
remain LOCKED).
TimeLock <27Aug91> Page: 11
It's been my observation that some folks have trouble grasping
the meaning of this query - probably because of my overly technoid
explanation. Therefore, a picture is in order. Let's assume the
keyboard is LOCKED and your password is 'COLD'. Follow along.....
-------------------------------------------------------------------
press period & you type you type
window appears | |
v v v
. (upto 5 secs) C (upto 5 secs) O (upto 5 secs)
-------------------------------------------------------------------
-------------------------------------------------------------------
you type you type you type
| | | Keyboard is
v v v now unlocked
L (upto 5 secs) D (upto 5 secs) <enter>
-------------------------------------------------------------------
If you delay longer than five seconds at any time while entering
your password, TimeLock will pop down the window and wait for the
next attempt. You must now completely retype the password starting
with the period (.) - the attention character.
13. TimeLock's multiplex interrupt number?
------------------------------------------
TimeLock requires the shared use of the DOS multiplex interrupt
x'2F'. Even though TimeLock shares this interrupt, it does require a
dedicated multiplex interrupt number to ensure that the resident code
acts only upon interrupts intended for TimeLock. The DOS multiplex
interrupt provides that user programs may utilize numbers x'C0' thru
x'FF'. The TimeLock default number is x'CC'. Changing this number
is only necessary if another program requires x'CC' - which is HIGHLY
unlikely. BUT, to further ensure TimeLock compatibility, I give you
the choice.
14. TimeLock's system clock interrupt?
--------------------------------------
TimeLock requires the shared use of a system clock interrupt.
There are two such interrupts available on all PC compatible type
machines. One is called the 'soft' (x'1C') system clock, the other
is called the 'hard' (x'08') system clock. It's through this
interrupt that TimeLock recognizes the passing of time. (The
recommended clock is 'soft' - read on...)
TimeLock <27Aug91> Page: 12
Many software programs also require the use of a system clock
interrupt to control their own functions. Virtually all programs
that do use the clock interrupts are well designed such that they
pass clocking control down the interrupt chain after it's use.
However, there are some programs that are not 'well behaved' in their
interrupt management and sometimes refuse to properly pass interrupts
down the chain. Sidekick is a good example of that and has been
banned from all computers I use.
Most programs that need a system clock interrupt use the 'soft'
system clock. I recommend using the soft clock for TimeLock also.
One way to tell if TimeLock is not functioning properly due to system
clock hogging by other programs is if TimeLock never seems to lock
the keyboard - even when testing with very low timeout values. If
this is the case, then try using the 'hard' system clock with
TimeLock. If the problem was indeed due to a system clock conflict,
this may well fix it.
Again, there is only a small chance this will affect you. But I
included the two-interrupt choice for just those chances.
******** Note for Banyan VINES local area network users ********
The Banyan shell (epcbfs or redir) 25th line message (purple
bar) handling code does not properly pass the soft system clock down
the interrupt chain. If your messages are set to stay on screen
until Ctrl-X is pressed then you must use the 'hard' system clock for
TimeLock. In fact, it's advised to use the hard system clock for any
Banyan VINES installation.
>>>> Examples <<<<
Included is an example of the TLPatch configuration process.
Questions are abbreviated here. The actual questions asked when
executing TLPatch include a help blurb at the bottom of the screen
and defaults listed for all but the password.
Execute the TLPatch configuration utility with the '-all'
parameter - the following questions will be asked in this order.
1. Copy of TimeLock to Patch? (TimeLock.com) > (enter)
2. Time to elapse before locking keyboard? (10:00) >03:00
3. 1st: Enter OLD unlock password? (c/r to keep OLD) > (enter)
4. NEW Keyboard unlock password? Min: 4 chars, Max: 14 chars >letsgo
5. Time to elapse before sounding timeout warning? (04:45) >02:45
6. Duration of timeout warning beep (ticks)? (04) > (enter)
7. Should the 'Keyboard Locked' window appear? (Yes) > (enter)
8. Row:Col on screen for pop up window? (05:11) > (enter)
9. Time to elapse before blanking screen? (05:00) > (enter
10. Duration of lockout advisory beep (ticks)? (04) > (enter)
11. HotKey attention key combination? (AL) > (enter)
12. Maximum password entry keystroke idle time (seconds)? (5) > (enter)
13. TimeLock's multiplex interrupt number? (CC) > (enter)
14. TimeLock's system clock interrupt? (soft) > (enter)
TimeLock <27Aug91> Page: 13
Question six is asked only if enabled in question five.
Question eight is asked only if enabled in question seven.
In this example, TimeLock will alert the user of an upcoming
keyboard lockout after two minutes and forty-five seconds and
actually lock the keyboard after three minutes - fifteen seconds
after the alert. The pop up window will appear along with sounding
the lockout attention tone as the user begins typing the password.
The screen will blank after five minutes if there is no keyboard
activity. All duration timers were allowed to default.
The keyboard will be immediately released after the following
keyin is made:
.letsgo(enter)
^\----/\-----/
| | |
| | \---- Keyboard released after (enter) pressed
| \----------- Password
\-------------- Attention Character (hardcoded as period)
---- IV ------------------------------------------------------------------------
------- Miscellaneous Information ----------------------------------------------
In General
----------
If you are a LAN/PC/site administrator charged with
configuration and maintenance of PC software for your company then
these suggestions may assist you with the installation of TimeLock.
Most users don't want to be bothered with the technicalities
that make TimeLock work or to worry about setting it up. Even though
the defaults built into TimeLock will serve well in most situations,
you may wish to adjust them for a particular purpose. If you decide
to do so, it is suggested that you adjust them yourself and send the
modified versions to your users or install TimeLock for them.
TLPatch (using the -all parameter) will allow you to tweak
TimeLock to your liking for your particular user community. When
using the '-all' parameter and specifying the '$' sign as the
password, TLPatch will allow you to skip having to enter a real
password at this time. Since TimeLock will not load unless a valid
password is given then the user must execute TLPatch themselves (most
likely without the -all parameter) to setup a password. This is
handy for the administrator since it allows customization of TimeLock
without setting the user password.
TimeLock <27Aug91> Page: 14
Override Passwords
------------------
In the event you (after registering TimeLock) obtain the
instructions for using the override password, and elect to enable
same then please heed the following advice regarding override
password management. There are several approaches to take regarding
how to choose the override password.
1) Make the override password the same for all TimeLock
installations. This is the easiest to maintain but you must
take great care not to let the password out or you'll face
having to reinstall TimeLock on all affected PCs. Actually,
an easy task for networked PCs.
2) Make the override password for each TimeLock installation a
derivative of the individual PCs location, user's name,
telephone extension of the PC users' office, or dept. code,
etc. Keep your derivation formula secret.
3) Choose a unique override password for each TimeLock
installation and maintain a listing of each PC/user
indicating the override password. This way, there is no
prescribed formula thus making a calculated password
determination impossible. Also, since all override
passwords are arbitrary, you can simply tell the user who
forgot his/her password what the override is rather than
strolling down to do it personally.
Any way you look at it, override passwords are something to
consider and use carefully.
---- V -------------------------------------------------------------------------
------- Licensing --------------------------------------------------------------
The terms of THIS license apply to THIS version of TimeLock!
As with all software, this program is not warranted in any way.
However, bug reports (and new feature ideas) are welcome and
encouraged. Since I strive to make TimeLock a valuable and reliable
security product, I'll certainly be interested in fixing bugs as they
are discovered.
TimeLock is an absolutely copyrighted shareware product,
carrying all the usual tariffs thereof, blah blah. The author
maintains sole rights to TimeLock. You may not sell TimeLock or
include it in another piece of 'for-sale' software. You're welcome
to give TimeLock away to BBSs, friends, enemies, allies, and aliens.
TimeLock <27Aug91> Page: 15
Registration
------------
Please use TimeLock for thirty days free of charge and without
obligation of any kind to evaluate the program and decide if it's
what you need and that it will function properly in your environment.
Load and test all software that you plan to use while TimeLock is
resident. TimeLock is very well behaved but some applications are
not. TimeLock works with the vast majority of programs (even other
TSRs) with no sweat. But I want to be sure! If you decide to keep
and use TimeLock after the initial thirty day evaluation period, then
register using the schedule below.
The registration fee is twenty five dollars for the first PC and
five dollars for each PC thereafter regardless of the number of PCs
being registered. If you have fifteen PCs then the total
registration fee is $95 dollars. One Hundred PCs would be $520
etc... A site or corporate wide license can be negotiated, if
desired.
Being that my intent is to market many multiple copies per
company, I set the license fee for each PC to be very low and
affordable. The individual PC license fee is low enough that your
company should be able to afford a copy for each PC on your network -
thereby relieving you of licensing only certain PCs.
If you register sixteen or more PCs, you'll be entitled to
receive new releases on diskettes free of charge as they become
available for a one year period. New releases AFTER the first year
will be licensed at twenty five dollars for the first PC, five
dollars per additional PC to a maximum of 100, with all remaining PCs
beyond 100 free of charge.
Once your registration for sixteen or more copies of TimeLock is
received, you'll be granted a complementary one year subscription to
the PC Consultant Bulletin Board System. This board serves as the
TimeLock support board but there are many other offerings as well.
You will be validated not only on the 'free' line but the other two
subscription-only lines as well.
There are no additional charges for shipping and handling.
Method of Payment
-----------------
We accept cash, check, money order, MasterCard, or Visa for
registration of this product. To ensure that all necessary
information is provided, a summary of questions is included on the
next page.
TimeLock <27Aug91> Page: 16
Please send check or money order the address given below. If
you want to register using Visa/MC then please supply the following
information on a sheet of paper and mail to address below. Or, if
you wish, you can register using Visa/MC by telephone.
1) Name as appears on card
2) Your address
3) Your phone number(s)
4) Credit card type (Visa or MasterCard)
5) Account number
6) Expiration date
7) Amount of registration. $25 for 1st PC, $5 for 2nd on up.
8) Your signature
I reserve the right to change the terms of registration at any
time. But such changes in terms will generally not affect those
already registered.
The PC Consultant
P.O. Box 42086
Houston TX 77242-2086
Bus. Ph. 713/826-2629 (voice-mail no answer)
---- VI ------------------------------------------------------------------------
------- Closing ----------------------------------------------------------------
Thank you for your interest in TimeLock!
I'm certain you'll find TimeLock an invaluable addition to your
company's PC security arsenal!