Method and system for protecting against unauthorized modification of products

• US 20040128260A1
• Filed: 12/30/2002
• Published: 07/01/2004
• Est. Priority Date: 12/30/2002
• Status: Abandoned Application

• Current Assignee: Nokia, Inc. (Nokia Corporation)
• Original Assignee: Nokia, Inc. (Nokia Corporation)
• Inventors: Hahn, Chris, Diniz, Antero, Frechette, Michael, Horvath, Joseph, Cao, Tieliang, White, Garret, Amedure, Jeannie
• Application Number:
  US10/330,683
• Publication Number:
  US 20040128260A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A method and system for protecting against unauthorized modification of a product to enhance its performance or function are disclosed. Low end products that are part of an electronic product family can be safeguarded against unauthorized enhancement of the product by hardware, software, and firmware bypasses. The operating software of the products can detect the unauthorized modification of the product or input/output device connecting to the product by reading the unique product group ID code and determining the validity of the code. Other background measures including hardware and firmware safeguards can be used to hinder or prevent the unauthorized modification. Other product specific information data can also be used to verify that the product group ID code has not been modified in an attempt to bypass the software safeguard.

Claims

1. A method for protecting against unauthorized modification of a product, comprising:

operating the product by a version of firmware specifically configured for the product;

reading product information data;

determining whether the product information data is valid; and

configuring at least one feature of the product, based on the determining step.

2. The method of claim 1, wherein product information data comprises a product group identification code.

3. The method of claim 2, wherein the product group identification code is stored in memory.

4. The method of claim 3, wherein the product group identification code comprises a data field that corresponds to the product.

5. The method of claim 3, wherein the product group identification code corresponds to an input/output card.

6. The method of claim 3, wherein the memory includes product initiation code.

7. The method of claim 3, wherein the memory comprises programmable read only memory.

8. The method of claim 1, wherein product information data comprises product specific information data.

9. The method of claim 1, further comprising the step of configuring a common platform of the product based upon a hardware safeguard specifically configured for the product.

10. The method of claim 9, wherein the hardware safeguard defines an allowable bus width.

11. The method of claim 9, wherein the hardware safeguard comprises an exclusion of certain hardware components.

12. The method of claim 1, wherein the version of firmware defines behavior of at least one control signal.

13. The method of claim 12, wherein the at least one control signal defines a processor bus speed of the product.

14. The method of claim 12, wherein the at least one control signal defines an allowable bus speed of an input/output device.

15. The method of claim 12, wherein the at least one control signal defines an allowable memory capacity of the product.

16. The method of claim 1, wherein a programmable logic device comprises the version of firmware.

17. The method of claim 16, wherein the programmable logic device is interconnected with a common platform of the product.

18. The method of claim 1, wherein the product comprises an input/output card.

19. The method of claim 1, wherein the step of reading the product information data is performed by software.

20. The method of claim 19, wherein the software is stored within a memory of the product.

21. The method of claim 1, further comprising the step of storing a table of valid product information data.

22. The method of claim 21, wherein the table of valid product information data is stored within software.

23. The method of claim 21, wherein the step of determining whether the product information data is valid comprises:

querying the table of valid product information data against the read product information data; and

determining whether the product information data matches an entry in the table of valid product information data.

24. The method of claim 21, wherein product information data comprises a product group ID code, further comprising the steps of:

reading product specific information data from memory in the product; and

querying a table of valid product specific information data;

wherein the step of determining whether the product information data is valid comprises;

checking the table of valid product specific information data and corresponding product group identification codes against the read product group identification code and the read product specific information data; and

determining whether the product specific information data verifies the product group identification code.

25. The method of claim 24, wherein the product specific information data comprises a product serial number.

26. The method of claim 24, wherein the step of determining whether the product specific information data verifies the product group identification code comprises matching the product group identification code against a range of valid product specific information data.

27. The method of claim 1, wherein, upon determining that the product information data is valid, the step of configuring at least one feature of the product comprises enabling the at least one feature of the product according to the product information data.

28. The method of claim 27, wherein software enables and disables the at least one feature of the product according to the product information data.

29. The method of claim 1, wherein, upon determining that the product information data is invalid, the step of configuring the at least one feature of the product comprises disabling the at least one feature of the product.

30. The method of claim 29, wherein the step of configuring the at least one feature of the product further comprises transmitting an error message corresponding to the invalid product information data.

31. The method of claim 29, wherein the at least one feature of the product includes a plurality of features of the product.

32. The method of claim 29, wherein disabling the at least one feature of the product includes only features of the product not included in a lower end product in a same product family.

33. The method of claim 29, wherein disabling the at least one feature of the product is performed by a programmable logic device comprising the version of firmware.

34. The method of claim 29, wherein disabling the at least one feature of the product is performed by software stored within memory.

35. A method for protecting against unauthorized modification of a product, comprising:

reading a product group identification code;

reading product specific information data;

determining whether the product group identification code is valid;

determining whether the product specific information data is valid based on the product group identification code; and

configuring at least one feature of the product based on the determining steps.

36. The method of claim 35, further comprising the step of operating the product by a version of firmware specifically configured for the product.

37. The method of claim 36, further comprising the step of configuring a common platform of the product based upon a hardware safeguard specifically configured for the product.

38. A method for protecting against connection of an unauthorized device to a product, comprising:

operating the product by a version of firmware specifically configured for the product;

receiving device identification data from the device;

determining whether the device identification data is valid to permit connection of the device to the product; and

configuring at least one feature of the product based on the determining step.

39. The method of claim 38, further comprising:

reading a product group identification code from the product to which the device is attached;

wherein the step of determining whether the device identification data is valid to permit connection, comprises;

querying a table of valid device identification data and corresponding product group identification codes for the read product group identification code and the read device identification data to determine whether the device identification data is valid for the read product group ID code.

40. The method of claim 39, wherein, upon determining that the device identification data is valid to permit connection of the device, the step of configuring at least one feature of the product comprises enabling the product to recognize the device.

41. The method of claim 39, wherein upon determining that the device identification data is invalid to permit connection of the device, the step of configuring at least one feature of the product comprises failing to enable the product to recognize the device.

42. A system providing protection against unauthorized modification, comprising:

a firmware component to operate the system and configured specifically for the system; and

a software component to enable and/or disable at least one feature of the product based upon the validity of a product group identification code.

43. The system of claim 42, further comprising a hardware component configured specifically for the system.

44. The system of claim 42, wherein the software component reads the product group identification code and determines the validity of the product identification group code.

45. The system of claim 44, wherein the software component comprises a table of valid product group identification codes.

46. The system of claim 44, wherein the software component reads product specific information data to determine the validity of the product group identification code.

47. The system of claim 46, wherein the software component comprises a table of product specific information data and corresponding valid product group identification codes.