Programmer 7500

home *** CD-ROM | disk | FTP | other *** search

/ Programmer 7500 / MAX_PROGRAMMERS.iso / PROGRAMS / UTILS / TECLADO / TL263.ZIP / TIMELOCK.DOC < prev next >

Wrap

Text File | 1990-10-17 | 23.0 KB | 515 lines

TimeLock v 2.6.3 - (C) Copyright Robert K. Ricketts P.O. Box 42086 Houston TX 77242-2086 - PC Consultant - MultiLine PCBoard BBS (713)870-1508 - Node 1 (713)870-0191 - Voice -------/ Abstract /--------------------------------------------------------- ╓──────────────────────────────────────────────────────────────╖ ║ ║ ║ If you read nothing else, at least read the section called ║ ║ ║ ║ " NOTE ON ATTENTION CHARACTER " and the "license" file ║ ║ ║ ╙──────────────────────────────────────────────────────────────╜ TimeLock is an assembly language memory resident utility that locks the PC keyboard after a user-specified period of keyboard inactivity. This security feature protects your PC (and, more importantly, a LAN/mainframe userid or sensitive application program) from spying eyes and curious fingers while you are away. Since the program locks the keyboard automatically, you don't have to remember to activate it before walking away. The timeout can range from six seconds to one hour. TimeLock is simple to use but **PLEASE** read the documentation so you'll fully understand what it does and how it works!!!! If you don't have sufficient understanding prior to use, you'll likely find yourself powering off/on your computer because TimeLock seized the keyboard. And you without the understanding to release it!! -------/ Detail /----------------------------------------------------------- TimeLock works by intercepting the output from the keyboard controller chip after an internal timer expires. Each time you press a key during your work session, TimeLock resets this internal timer - the unlocked keyboard idle timer. Once TimeLock has locked the keyboard, all keystrokes are intercepted and not passed to higher level programs or applications. Even Ctrl-Alt-Del (the three finger salute) warmboot key sequence is disabled! The *only* way to gain access is to key in the proper password or cold-boot (power off/on) the machine. And since cold-booting will log you off your network your sensitive userid is protected. Some programs, like TimeLock, hook (or intercept) the keyboard service routines also. TimeLock peacefully co-exists with most programs of this type - but not quite all. Fortunately, only a tiny minority of software plays with the hardware in this way. TimeLock has features to deal with these 'rude' programs. TimeLock has a number of internal timers that control different functions. Most internal timer values can be configured to values you find desirable. TimeLock can also be configured to remain 'invisible' on your PC. It'll unceremoniously lock the keyboard without bells, beeps, or windows. See the end of the Setup section for more details on this mode. Of course, you can enable any combination of bells, beeps, and windows if you desire. INSTANT LOCKOUT TimeLock has two instant lockout features. You can lockout the keyboard from the DOS command line or from a batch file by issuing the following command: timelock ! Given the above command, TimeLock will lock the keyboard and go resident if not already. It will not replicate itself in memory. You can also lock the keyboard using a special hot key. Please refer to the 'setup' section for instructions on setting up the hot key attention key sequence (#9). The instant lockout hot key function character is 'L'. You'll hear a quick confirmation tone when this feature is used. NOTE ON ATTENTION CHARACTER Reasons for the attention character and what it does: 1) Since TimeLock disposes of all keystrokes after the keyboard is locked, there had to be a way to get TimeLock's attention - informing it to interrogate the following keystrokes for a possible password match. The attention character informs TimeLock to start paying attention to what you type - looking for the password. 2) The attention character flushes any portion of the password you might have entered. The reason is this: Due to the way TimeLock is coded, you cannot use the BackSpace key to correct a typing error made while entering the password - nor will the Esc key erase the queued keystrokes. If you mis-key a character while entering the password, you must START OVER by pressing the attention character followed by the password again. The Attention Character ALWAYS preceeds the first character of the password even though it's technically not part of the password. You do not specify the attention character during TLPatch setup. It's automatically added by TimeLock at execution. But for the purpose of using and understanding TimeLock and explaining its use to others, you can just 'think' of the attention character as the first character in the password. The attention character is the period (.) and cannot be changed. -------/ Setup /------------------------------------------------------------ Before TimeLock can be used for the first time, you'll need to run the TLPatch program to configure it. TLPatch sets your password, all configurable timers, and other items necessary for proper TimeLock operation. If you're new to TimeLock then I recommend experimenting first using low timeout values. Ten to fifteen seconds might be useful. Once you're familiar with TimeLock's operation you can reconfigure it with real-world timeout values, etc... TLPatch does just what the name implies. It patches, or modifies, the TimeLock.com program file. Therefore you should save an unconfigured copy of TimeLock for future use. Just keep the .ZIP file TimeLock was distributed in and you'll be in good shape. TLPatch will ask a number of questions regarding TimeLock. All questions with the exception of the password have a default value that you can use. The original defaults represent good operating parameters that you might use. But you're always free to change them to whatever you wish. Subsequent executions of TLPatch against the same copy of TimeLock will remember all previous parameters - allowing you to default until you reach items to change. *** NOTE *** If you just say 'TLPatch' at the DOS command line with no parameters, then TLPatch will ask only the first four questions listed below. This eases configuration for novices. If you specify the '-all' parameter (TLPatch -all), then TLPatch will ask all the questions listed below. This allows you to tweak TimeLock to your exact needs. Below outlines each question asked by TLPatch: 1. Copy of TimeLock to Patch? ----------------------------- Enter the name of the particular copy of TimeLock you wish to configure. If it's not in the default directory then specify all necessary path information. 2. Time to elapse before locking keyboard? ------------------------------------------ Time, in minutes and seconds, that TimeLock will wait before locking an idle keyboard. Specify as MM:SS (minutes:seconds). The minimum legal time is 00:06 and the maximum is 59:59. If either sub-field (MM or SS or both) is less than ten then include a leading zero - or TLPatch will complain. IE: Nine minutes and five seconds would be entered as '09:05' and not '9:5'. 3. 1st: Enter OLD unlock password? (c/r to keep OLD) ---------------------------------------------------- If TimeLock has previously been configured, you must enter the old password before being allowed to change it. This is a small security enhancement to prevent other users from changing the user password for this copy. If you are configuring a virgin copy of TimeLock, this query will not appear. 4. NEW Keyboard unlock password? Min: 4 chars, Max: 14 chars ------------------------------------------------------------- This is the secret password necessary to unlock the keyboard once TimeLock has locked it. Legal password characters are A-Z, 0-9, space-bar, and the following special characters: -=[];/, The password is not case sensitive. A minimum of four and a maximum of fourteen characters may be used. Normally, to unlock the keyboard after TimeLock has seized it, you must hit the (enter) key after typing the password. If you wish to have TimeLock unlock the keyboard immediately after hitting the last character of the password, then preceed the password with the '@' sign at this prompt. The '@' sign will not become part of the password. It's simply a flag to TimeLock to not expect (enter) after the password is keyed in. Note that when you actually unlock the keyboard after TimeLock has seized it, you must preceed the password with the ATTENTION CHARACTER. This character is the period (.). For more information on the Attention Character, please see 'NOTE ON ATTENTION CHARACTER' in the section labeled 'Detail'. 5. Time to elapse before sounding timeout warning? (optional) -------------------------------------------------- Time, in minutes and seconds, that TimeLock will wait before sounding a warning tone before actually locking an idle keyboard. This timer is generally set to sound the warning tone a few seconds prior to actual lockout to give you time to reach over and tap a key if sitting nearby. Specify as MM:SS (minutes:seconds). To disable this feature, enter 00:00. The minimum legal time is 00:05 and the maximum is one second less than the lockout time. If either sub-field (MM or SS or both) is less than ten then include a leading zero - or TLPatch will complain. IE: Nine minutes and five seconds would be entered as '09:05' and not '9:5'. 6. Duration of timeout warning beep (ticks)? -------------------------------------------- In addition to specifying -when- the timeout warning tone will sound, you can also specify it's -duration-, or how long the beeper will actually sound. The value is entered as system clock ticks. Each tick equals 1/18th of a second. Specify a low value for a quick beep or a higher value for a longer, more solid tone. The minimum value is one and the maximum is sixteen. IE: A value of nine (ticks) would equal 1/2 second. This question is asked only if you elected to enable the timeout warning beep on the previous question. 7. Should the 'Keyboard Locked' window appear? (optional) ---------------------------------------------- TimeLock has a small window that pops up when a key is pressed on a LOCKED keyboard. This window advises the would-be culprit (or whoever) that the keyboard is locked and that a password is required. This question asks if you want this window enabled or not. The window appears near the top-left of the screen and looks like this: ╒════════════════════╕ │ Keyboard is Locked │ │ ■ Enter Password ■ │ ╘════════════════════╛ TimeLock will save the text under the window before popping it up. Once the password is correctly entered or if no other keys are pressed for a few seconds, the window will disappear and the orginal text restored. 8. Duration of lockout advisory beep (ticks)? (optional) --------------------------------------------- TimeLock can sound a tone when a key is pressed on a LOCKED keyboard. This tone is designed to call your attention that the keyboard is locked. Sometimes folks will start typing without looking at the screen (and missing the pop up window) so this tone will alert that the keyboard is locked - saving wasted keystrokes. The value is entered as system clock ticks. Each tick equals 1/18th of a second. Specify a low value for a quick beep or a higher value for a longer, more solid tone. The minimum value is one and the maximum is eighteen. IE: A value of nine (ticks) would equal 1/2 second. To disable this feature, enter '0'. 9. HotKey attention key combination? ------------------------------------ TimeLock has code to support hot keys for various functions (currently one). Hot keys are activated by pressing and holding some combination of the Left shift, Right shift, Ctrl, and/or Alt keys together then touching the letter that performs the function you want. IE: Hot key 'L' forces an instant keyboard lockout. This query asks you to define the multi-key press combination to be used in conjunction with the hot key function character. The default is 'LA' meaning 'Left-shift' and 'Alt'. Available keys are 'L'=Left shift, 'R'=Right shift, 'C'=Ctrl, and 'A'=Alt. You must specify at least two of these keys and you may specify upto all four. Reason for this query: SideKick and some other memory resident programs use hot keys of their own in activate their functions. IE: SideKick uses the two shift keys. TLPatch allows you to specify your own multi-key sequence so as to not interfere with another program's key sequence. Simply select a key sequence that no other program uses or one that feels good to you. 10. Maximum password entry keystroke idle time (seconds)? --------------------------------------------------------- While entering the password to unlock the keyboard, you have only a certain amount of idle time -between- keystrokes before TimeLock flushes the password. If the pop up window is enabled it will pop down when this timer expires - and be ready for the next possible intruder. This does *not* mean you have only x number of seconds to enter the entire password, but rather x number of seconds between EACH keystroke - bad or good. IE: If you specify '5' seconds here then you'll have five seconds between each keystroke while typing in the password. Each time you press a key while the keyboard is LOCKED, TimeLock will reset the 'locked idle' timer to zero and start again. If this timer expires, TimeLock assumes you were a curious intruder and will reset the password input queue (flush buffer, remove pop up window, and remain LOCKED). It's been my observation that many people have trouble grasping the meaning of this query. Therefore, a picture is in order. Let's assume the keyboard is LOCKED and your password is 'COLD'. Follow along..... ─────────────────────────────────────────────────────────────────── press period & you type you type window appears │ │ . (upto 5 secs) C (upto 5 secs) O (upto 5 secs) ─────────────────────────────────────────────────────────────────── you type you type you type │ │ │ Keyboard is now unlocked L (upto 5 secs) D (upto 5 secs) <enter> ─────────────────────────────────────────────────────────────────── If you deley longer than five seconds at any time while entering your password, TimeLock will pop down the window and wait for the next attempt. You must now completely retype the password starting with the period (.) - the attention character. 11. TimeLock's internal software interrupt? ------------------------------------------- TimeLock requires exclusive use of a software interrupt for proper operation. Generally, there are seven such interrupts available for user programs (including TimeLock) numbered between 60 and 66 hex. Select a number that is not used by any of your other programs. Most programs do not require software interrupts so you should not have a problem finding an unused one. TLPatch will check the interrupt number you specify to ensure it's not currently in use and will not allow you to specify one that appears to be in use. Note that TLPatch can only tell if it's -currently- in use, ie: LAN drivers, add-in boards, etc. Not if some miscellaneous piece of software ultimately requires it or not. 12. TimeLock's system clock interrupt? -------------------------------------- TimeLock requires the shared use of a system clock interrupt. There are two such interrupts available on all PC compatible type machines. One is called the 'soft' system clock, the other is called the 'hard' system clock. This interrupt is where TimeLock recognizes the passing of time. (The recommended clock is 'soft' - read on...) Many software programs also require the use of a system clock interrupt to control their own functions. Virtually all programs that do use the clock interrupts are well designed such that they pass clocking control down the interrupt chain after it's use. However, there are some programs that are not 'well behaved' in their interrupt management and sometimes refuse to properly pass interrupts down the chain. Sidekick is a good example of such an ill-behaved utility and has been banned from all computers I use. Most programs that need a system clock interrupt use the 'soft' system clock. I recommend using the soft clock for TimeLock also. One way to tell if TimeLock is not functioning properly due to system clock hogging by other programs is if TimeLock never seems to lock the keyboard - even when testing with very low timeout values. If this is the case, then try using the 'hard' system clock with TimeLock. If the problem was indeed due to a system clock conflict, this may well fix it. Again, there is only a small chance this will affect you. But I included the two-interrupt choice for just those chances. ******** Note for Banyan VINES local area network users ******** The Banyan shell (epcbfs or redir) 25th line message (purple bar) handling code does not properly pass the soft system clock down the interrupt chain. If your messages are set to stay on screen until Ctrl-X is pressed then you'll need to use the 'hard' system clock for TimeLock. -------/ Examples /--------------------------------------------------------- Included is an example of the TLPatch configuration process. Questions are abbreviated here. The actual questions asked when executing TLPatch include a help blurb at the bottom of the screen and defaults listed for all but the password. Execute the TLPatch configuration utility - the following questions will be asked in this order. 1. Copy of TimeLock to Patch? (TimeLock.com) (enter) 2. Time to elapse before locking keyboard? (10:00) 03:00 3. 1st: Enter OLD unlock password? (c/r to keep OLD) (enter) 4. NEW Keyboard unlock password? Min: 4 chars, Max: 14 chars letsgo (TLPatch will require retyping for verification) 5. Time to elapse before sounding timeout warning? 02:45 6. Duration of timeout warning beep (ticks)? (09) (enter) 7. Should the 'Keyboard Locked' window appear? (Yes) (enter) 8. Duration of lockout advisory beep (ticks)? (09) (enter) 9. HotKey attention key combination? (CA) (enter) 10. Maximum password entry keystroke idle time (seconds)? (9) (enter) 11. TimeLock's internal software interrupt? (64) 60 12. TimeLock's system clock interrupt? (soft) (enter) Question six is asked only if enabled in question five. In this example, TimeLock will alert the user of an upcoming keyboard lockout after two minutes and forty-five seconds and actually lock the keyboard after three minutes - fifteen seconds after the alert. The pop up window will appear along with sounding the lockout attention tone as the user begins typing the password. All duration timers were allowed to default. In this example, the keyboard will be immediately released after the following keyin is made: .letsgo(enter) ^\----/\-----/ | | | | | \---- Keyboard released after (enter) pressed. | \----------- Password \-------------- Attention Character (hardcoded as period). INVISIBLE OPERATION Some folks prefer TimeLock to remain discreet by not beeping, popping up windows, or otherwise revealing itself but rather just quietly lock the keyboard after the timeout has expired thus confusing would-be culprits into thinking the machine was crashed or otherwise 'ginked'. By disabling all beeps and windows (question #'s 5,7,8), you can make TimeLock invisible on your system. The only indication that TimeLock has tripped is the keyboard's apparent refusal to operate! -------/ Closing /---------------------------------------------------------- Future versions of TimeLock will be released as bugs are discovered/fixed and/or new options/features added. You can always find the LATEST version on my BBS, the PC Consultant. See top of document for the access number. Thank You for evaluating TimeLock - AND for registering if you are happy with it!!