Method and system of securing accounts

Abstract

A method and system of securing account is provided. When a client computer requests access to an account accessible via a server, the server determines a MAC address associated with the client computer and compares it to a MAC address associated with the account. If the MAC address of the client computer is not the same as the MAC address associated with the account, the server initially denies access to the client computer, but may allow access after verification of the client computer by the user associated with the account.

I claim: 
     
       1. A non-transitory computer-readable medium that stores instructions executable by one or more processors to perform a method for enhancing security between a client computer and a software server, the method comprising:
 providing a software server; 
 providingcommunicating with a database, which is accessible by the software server, said database comprising a record associated with an account, said account associated with at least one profile identifier, wherein said account is associated with a geographic area, said software server receives a geographic area associated with an IPInternet Protocol (IP) address associated with said client computer, the software server comprises a security protocol, said security protocol indicating 1) which profile identifiersof at least one profile identifier of athe client computer must match thoseat least one profile identifier on athe client account and 2) how many profile identifiersof at least one profile identifier of athe client computer must match thoseat least one profile identifier on athe client account, and the profile identifiers areat least one profile identifier is selected from the group consisting of: 
 a. CPU Computer Processing Unit (CPU) serial and/or model number;,  
 b. Motherboard serial and/or model number;,  
 c. Hard Drive serial and/or model number;,  
 d. Admin SSID Service Set Identifier (SSID) or UUID Universally Unique Identifier (UUID) provided by the operating system;,  
 e. Manufacturer assigned computer system serial number and/or model number;,  
 f. CD-ROM Compact Disk Read Only Memory (CD-ROM), DVD-ROM Digital Versatile Disk Read Only Memory (DVD-ROM) or other internal mass media storage device serial and/or model number;,  
 g. BIOS Basic Input Output System (BIOS) serial and/or model number;,  
 h. MAC Media Access Control (MAC) address, 
 i. Monitor serial and/or model number, 
 j. RAM Random Access Memory (RAM) serial and/or model number;,  
 k. An universally unique identifier (UUID) or globally unique identifier (GUID) associated with the client computer or a vendor of the client computer, 
 l. BIOS Manufacturer, 
 m. BIOS Release Date;, and 
 n. Vendor and Device IDs Identifiers (IDs) of all installed PCI Peripheral Component Interconnect (PCI) devices on the client computer; 
 receiving from the client computer, by the software server, at least one profile identifier associated with said client computer; 
 comparing said at least one profile identifier associated with said client computer to said at least one profile identifier associated with said account; 
 comparing the geographic area associated with the IP address of the client computer to the geographic area associated with the account;  
 when said at least one profile identifier associated with said client computer is the same as said at least one profile identifier associated with said account, permitting access to said account; 
 when said at least one profile identifier associated with said client computer is not the same as said at least one profile identifier associated with said account, communicating with said client computer to determine if access to said account should be permitted; 
 denying access to said account, if said geographic area associated with said IP address is not the same as said geographic area associated with said account or said at least one profile identifier of said client computer is not the same as said at least one profile identifier associated with said account,; and 
 notifying a law enforcement authority an administrator of the IP address and at least one profile identifier of said client computer, if said geographic area associated with said IP address is not the same as said geographic area associated with said account and said at least one profile identifier of said client computer is not the same as said at least one profile identifier associated with said account. 
 
     
     
       2. The non-transitory computer-readable medium of  claim 1 , wherein said account is associated with biometric information related to a user. 
     
     
       3. The non-transitory computer-readable medium of  claim 2 , wherein said software server receives said biometric information from said client computer. 
     
     
       4. A non-transitory computer-readable medium that stores instructions executable by one or more processors to perform a method for enhancing security, the method comprising:
 providing an account;   communicating with a database accessible by a software server having a security protocol for permitting access to the account, the database comprising at least one profile identifier associated with the account and a geographic area associated with the account;   receiving from a client computer, by the software server, at least one profile identifier associated with the client computer and a geographic area associated with an Internet Protocol (IP) address of the client computer;   comparing the at least one profile identifier associated with the client computer to the at least one profile identifier associated with the account;   comparing the geographic area associated with the IP address of the client computer to the geographic area associated with the account;   wherein when the at least one profile identifier associated with the client computer is the same as the at least one profile identifier associated with the account, permitting the client computer access to the account;   wherein when the at least one profile identifier associated with the client computer is not the same as the at least one profile identifier associated with the account, communicating with the client computer to determine if access to the account should be permitted;   wherein when the geographic area associated with the IP address of the client computer is not the same as the geographic area associated with the account and when the at least one profile identifier associated with the client computer is not the same as the at least one profile identifier associated with the account, notifying an administrator;   wherein the at least one profile identifier associated with the account is selected from the group consisting of: a Computer Processing Unit (CPU) serial number, a CPU model number; a motherboard serial number, a motherboard model number, a hard drive serial number, a hard drive model number, an admin Service Set Identifier (SSID) provided by the operating system, an admin Universally Unique Identifier (UUID) provided by the operating system, a manufacturer assigned computer system serial number, a manufacturer assigned computer system model number, a Compact Disk Read Only Memory (CD-ROM) serial number, a CD-ROM model number, a Digital Versatile Disk Read Only Memory (DVD-ROM) serial number, a DVD-ROM model number, an internal mass media storage device serial number, an internal mass media storage device model number, a Basic Input Output System (BIOS) serial number, a BIOS model number, a Media Access Control (MAC) address, a monitor serial number, a monitor model number, a Random Access Memory (RAM) serial number, a RAM model number, a universally unique identifier (UUID) associated with the client computer, a universally unique identifier (UUID) associated with a vendor of the client computer, a globally unique identifier (GUID) associated with the client computer, a globally unique identifier (GUID) associated with a vendor of the client computer, a BIOS manufacturer, a BIOS release date, vendor and device Identifiers (IDs) of all installed Peripheral Component Interconnect (PCI) devices on the client computer;   wherein the at least one profile identifier associated with the client computer is selected from the group consisting of: a CPU serial number, a CPU model number; a motherboard serial number, a motherboard model number, a hard drive serial number, a hard drive model number, an admin SSID provided by the operating system, an admin UUID provided by the operating system, a manufacturer assigned computer system serial number, a manufacturer assigned computer system model number, a CD-ROM serial number, a CD-ROM model number, a DVD-ROM serial number, a DVD-ROM model number, an internal mass media storage device serial number, an internal mass media storage device model number, a BIOS serial number, a BIOS model number, a MAC address, a monitor serial number, a monitor model number, a RAM serial number, a RAM model number, a universally unique identifier (UUID) associated with the client computer, a universally unique identifier (UUID) associated with a vendor of the client computer, a globally unique identifier (GUID) associated with the client computer, a globally unique identifier (GUID) associated with a vendor of the client computer, a BIOS manufacturer, a BIOS release date, vendor and device IDs of all installed PCI devices on the client computer.    
     
     
       5. The non-transitory computer-readable medium of claim 4, wherein the account is associated with biometric information related to a user of the account.  
     
     
       6. The non-transitory computer-readable medium of claim 5, wherein the software server receives said biometric information from the client computer.  
     
     
       7. The non-transitory computer-readable medium of claim 4, wherein the database is accessible by the software server.  
     
     
       8. The non-transitory computer-readable medium of claim 4, wherein communicating with the database comprising the at least one profile identifier associated with the account and the geographic area associated with the account, comprises:
 registering the account with the at least one profile identifier associated with the account and the geographic area associated with the account.    
     
     
       9. The non-transitory computer-readable medium of claim 8, wherein registering the account with the at least one profile identifier associated with the account and the geographic area associated with the account comprises automatically registering the account with the at least one profile identifier associated with the account and the geographic area associated with the account.  
     
     
       10. The non-transitory computer-readable medium of claim 4, wherein the administrator is an administrator of the software server.  
     
     
       11. The non-transitory computer-readable medium of claim 4, wherein when the geographic area associated with the client computer is not the same as the geographic area associated with the account or when the at least one profile identifier associated with the client computer is not the same as the at least one profile identifier associated with the account, denying the client computer access to the account.  
     
     
       12. The non-transitory computer-readable medium of claim 11, wherein notifying the administrator comprises notifying the administrator of the geographic area associated with the client computer and the at least one profile identifier associated with the client computer.  
     
     
       13. A non-transitory computer-readable medium that stores instructions executable by one or more processors to perform a method, the method comprising:
 providing an account, wherein the account is associated with a user;   providing a security protocol;   communicating with a database;   storing at least one profile identifier and a geographic location associated with the account on the database;   detecting an attempt to access the account by a computer;   determining at least one profile identifier associated with the computer and a geographic location associated with the computer;   comparing the at least one profile identifier associated with the account to the at least one profile identifier associated with the computer;   comparing the geographic location associated with the account to the geographic location associated with the computer;   permitting the computer access to the account when 1) the at least one profile identifier associated with the account is the same as the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is the same as the geographic location associated with the computer;   communicating with the user to determine if access to the account should be permitted when the at least one profile identifier associated with the account is different from the at least one profile identifier associated with the computer;   reporting the at least one profile identifier associated with the computer and the geographic location associated with the computer to an administrator of the at least one profile identifier when 1) the at least one profile identifier associated with the account is different from the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is different from the geographic location associated with the computer;   wherein said at least one profile identifier associated with said account is selected from the group consisting of: a Computer Processing Unit (CPU) serial number, a CPU model number; a motherboard serial number, a motherboard model number, a hard drive serial number, a hard drive model number, an admin Service Set Identifier (SSID) provided by the operating system, an admin Universally Unique Identifier (UUID) provided by the operating system, a manufacturer assigned computer system serial number, a manufacturer assigned computer system model number, a Compact Disk Read Only Memory (CD-ROM) serial number, a CD-ROM model number, a Digital Versatile Disk Read Only Memory (DVD-ROM) serial number, a DVD-ROM model number, an internal mass media storage device serial number, an internal mass media storage device model number, a Basic Input Output System (BIOS) serial number, a BIOS model number, a Media Access Control (MAC) address, a monitor serial number, a monitor model number, a Random Access Memory (RAM) serial number, a RAM model number, a universally unique identifier (UUID) associated with the client computer, a universally unique identifier (UUID) associated with a vendor of the client computer, a globally unique identifier (GUID) associated with the client computer, a globally unique identifier (GUID) associated with a vendor of the client computer, a BIOS manufacturer, a BIOS release date, vendor and device Identifiers (IDs) of all installed Peripheral Component Interconnect (PCI) devices on the client computer;   wherein said at least one profile identifier associated with said client computer is selected from the group consisting of: a CPU serial number, a CPU model number; a motherboard serial number, a motherboard model number, a hard drive serial number, a hard drive model number, an admin SSID provided by the operating system, an admin UUID provided by the operating system, a manufacturer assigned computer system serial number, a manufacturer assigned computer system model number, a CD-ROM serial number, a CD-ROM model number, a DVD-ROM serial number, a DVD-ROM model number, an internal mass media storage device serial number, an internal mass media storage device model number, a BIOS serial number, a BIOS model number, a MAC address, a monitor serial number, a monitor model number, a Identifiers RAM serial number, a RAM model number, a universally unique identifier (UUID) associated with the client computer, a universally unique identifier (UUID) associated with a vendor of the client computer, a globally unique identifier (GUID) associated with the client computer, a globally unique identifier (GUID) associated with a vendor of the client computer, a BIOS manufacturer, a BIOS release date, vendor and device IDs of all installed Peripheral Component Interconnect PCI devices on the client computer.    
     
     
       14. The non-transitory computer-readable medium of claim 13, wherein the reporting the at least one profile identifier associated with the computer and the geographic location associated with the computer to the administrator of the at least one profile identifier when 1) the at least one profile identifier associated with the account is different from the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is different from the geographic location associated with the computer comprises:
 notifying the administrator of the at least one profile identifier associated with the computer and the geographic location associated with the computer.    
     
     
       15. The non-transitory computer-readable medium of claim 14, further comprising communicating with the user to confirm whether the user attempted to access the account with the computer when 1) the at least one profile identifier associated with the account is different from the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is different from the geographic location associated with the computer.  
     
     
       16. The non-transitory computer-readable medium of claim 15, further comprising:
 when the user confirms that the user attempted to access the account with the computer:
 permitting the computer access to the account, and 
 storing the at least one profile identifier and the geographic location associated with the computer on the database as another at least one profile identifier and another geographic location associated with the account; 
   when the user does not confirm that the user attempted to access the account with the computer:
 suspending the account, and 
 notifying the administrator.  
   
     
     
       17. The non-transitory computer-readable medium of claim 13, wherein the security protocol is configured to permit the computer access to the account when 1) the at least one profile identifier associated with the account is the same as the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is the same as the geographic location associated with the computer, said security protocol indicating:
 which of the at least one profile identifier associated with the computer must match the at least one profile identifier associated with the account, and   a number of the at least one profile identifier associated with the computer which must match the at least one profile identifier associated with the account.    
     
     
       18. The non-transitory computer-readable medium of claim 13, wherein determining the geographic location associated with the computer, comprises:
 determining an IP address associated with the computer; and   determining the geographic area associated with the computer from the IP address associated with the computer.    
     
     
       19. A non-transitory computer-readable medium that stores instructions executable by one or more processors to perform a method, the method comprising:
 registering an account associated with a user, wherein the account is associated with at least one profile identifier and a geographic location;   determining a geographic location associated with a computer attempting to access the account;   providing a security protocol for permitting access to the account, wherein the security profile determines at least one profile identifier associated with the computer attempting to access the account which must match at least one profile identifier associated with the account;   determining at least one profile identifier associated with the computer attempting to access the account;   comparing the at least one profile identifier associated with the account to the at least one profile identifier associated with the computer;   comparing the geographic location associated with the account to the geographic location associated with the computer;   permitting the computer access to the account when 1) the at least one profile identifier associated with the account is the same as the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is the same as the geographic location associated with the computer;   denying the computer access to the account when the at least one profile identifier associated with the account is not the same as the at least one profile identifier associated with the computer;   communicating with the user or computer to determine if access to the account should be permitted when the at least one profile identifier associated with the account is not the same as the at least one profile identifier associated with the computer;   notifying an administrator when 1) the at least one profile identifier associated with the account is different from the at least one profile identifier associated with the computer and 2) the geographic location associated with the account is different from the geographic location associated with the computer;   wherein said at least one profile identifier associated with said account is selected from the group consisting of: a Computer Processing Unit (CPU) serial number, a CPU model number; a motherboard serial number, a motherboard model number, a hard drive serial number, a hard drive model number, an admin Service Set Identifier (SSID) provided by the operating system, an admin Universally Unique Identifier (UUID) provided by the operating system, a manufacturer assigned computer system serial number, a manufacturer assigned computer system model number, a Compact Disk Read Only Memory (CD-ROM) serial number, a CD-ROM model number, a Digital Versatile Disk Read Only Memory (DVD-ROM) serial number, a DVD-ROM model number, an internal mass media storage device serial number, an internal mass media storage device model number, a Basic Input Output System (BIOS) serial number, a BIOS model number, a Media Access Control (MAC) address, a monitor serial number, a monitor model number, a Random Access Memory (RAM) serial number, a RAM model number, a universally unique identifier (UUID) associated with the client computer, a universally unique identifier (UUID) associated with a vendor of the client computer, a globally unique identifier (GUID) associated with the client computer, a globally unique identifier (GUID) associated with a vendor of the client computer, a BIOS manufacturer, a BIOS release date, vendor and device (IDs) of all installed Peripheral Component Interconnect (PCI) devices on the client computer;   wherein said at least one profile identifier associated with said client computer is selected from the group consisting of: a CPU serial number, a CPU model number; a motherboard serial number, a motherboard model number, a hard drive serial number, a hard drive model number, an admin SSID provided by the operating system, an admin UUID provided by the operating system, a manufacturer assigned computer system serial number, a manufacturer assigned computer system model number, a CD-ROM serial number, a CD-ROM model number, a DVD-ROM serial number, a DVD-ROM model number, an internal mass media storage device serial number, an internal mass media storage device model number, a BIOS serial number, a BIOS model number, a MAC address, a monitor serial number, a monitor model number, a RAM serial number, a RAM model number, a universally unique identifier (UUID) associated with the client computer, a universally unique identifier (UUID) associated with a vendor of the client computer, a globally unique identifier (GUID) associated with the client computer, a globally unique identifier (GUID) associated with a vendor of the client computer, a BIOS manufacturer, a BIOS release date, vendor and device IDs of all installed PCI devices on the client computer.