Securing a Keyboard from unauthorised access.

[Jnr]

Hi Chaps,

I need to look into available options for securing a keyboard in a controlled trackable manner.

Either by a card system or biometric that can give multiple access which can be tracked for audit trail.

When the keyboard is locked the screen needs to remain active for monitoring to continue.... OS is XP

Has anybody done the same or similar and can point me in the right direction?

All advice greatly received!!!


Cheers

Jnr

[randlemarcus]

Does this mean you need a simple system that you can prevent use of the computer by means of a biometric keyboard, or a more complex one where the computer remains useable via mouse etc, while the keyboard is disabled.

Option 1 = cheap and easy
Option 2 = not.
For a simple solution, with security flaws, for option 2, use a USB keyboard, and unplug it when not needed. No biometrics or useable audit trail etc

Marcus

[Jnr]

Both mouse and keyboard need to be locked.

Mulitple access is needed and has to be logged.

[tallbloke]

A cheap way to do this is to install VNC server on it as a service, and log in remotely with the 'disable local keyboard and mouse' option enabled when you need to lock out the local users. This assumes that the computer is networked and if you are at a different location, that you can set up remote access through t'internet. Mail me offline if you need further advice.

www.tightvnc.com

[Jnr]

Remote login to the machine would be non-compliant.

System is a multi mainframe master console running from a pc and can only be operated from the one keyboard.

[zumbruk]

RSA do a card based system for this - the card reader plugs into a USB port and locks the KB/mouse until a user plugs in their card and enters a PIN. Have a look at www.rsa.com (I'd give you a better URL but our Internet connection's on the fritz at the moment...)

[Jnr]

zumbruk said:

RSA do a card based system for this - the card reader plugs into a USB port and locks the KB/mouse until a user plugs in their card and enters a PIN. Have a look at www.rsa.com (I'd give you a better URL but our Internet connection's on the fritz at the moment...)

Thanks for the link, I have had an enlightening conversation with these chaps today!!!

Cheers

[lanciachris]

Unplug keyboard + mouse, remove

[zumbruk]

lanciachris said:

Unplug keyboard + mouse, remove

Doesn't stop a malicious user bringing their own keyboard.

[ultimasimon]

You need Spy Agent. It will log everything from connenctions to users and screenshots. it can be configured to send email autonomously and it reports evrything either remotely or holds secure logs.

Also you can rename the instalation so most 'Anti spyware' programs do not know where to look. It also is a keylogger and it is very powerful for picking up passwords, which is useful in an Admin position as a security check.

We have used it as a security product during marriage/divorce and allimony cases to provide evidence. It has also been used to enforce IT policy to unruly users.

www.spytech-web.com/spyagent.shtml

[tallbloke]

zumbruk said:

lanciachris said: Unplug keyboard + mouse, remove Doesn't stop a malicious user bringing their own keyboard.

Some sort of basic security policy would prevent them logging in and using the mainframe config software anyway.