Mobility device platform

• US 20060253894A1
• Filed: 01/05/2006
• Published: 11/09/2006
• Est. Priority Date: 04/30/2004
• Status: Abandoned Application

• Current Assignee: Inaura, Inc.
• Original Assignee: Inaura, Inc.
• Inventors: Anderer, Michael, Bookman, Peter, White, Rick Charles
• Application Number:
  US11/326,008
• Publication Number:
  US 20060253894A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 8/00 Network data management
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A mobility device platform allowing for secure mobile computing is provided. In an illustrative implementation, an exemplary mobility device platform comprises a mobility device operable to communicate with at least one host environment through one or more communications interfaces. The mobility device is further operable to process and store data. The plafrom can further comprise, a communications network operable to communicate data and the mobility originating from one or more cooperating components and a mobility device management server operable to generate, process, store, communicate and encrypt data to the mobility device. Further, the mobility device management server ca be operable to perform one or more mobility device provisioning, administration, and management functions and to authenticate and verify cooperating mobility devices according to a seleted trust model. In the illustrative implementation, the mobility device can operte with various host environmnets using various communications protocols and paradigms.

Claims

1. A mobility device platform comprising:

a mobility device having independent computing capabilities operable to interface with a host environment such that the mobility device is operable to control the host environment; and

a mobility device management server cooperating with the mobility device to provide data to the mobility device.

2. The platform as recited in claim 1 further comprising a communications network operative to communicate data between the mobility device and the mobility device management server.

3. The platform as recited in claim 1 further comprising a trust model.

4. The platform as recited in claim 3 wherein the trust model comprises at least one instruction set to instruct the mobility device to cooperate with the host computer according to one or more selected security parameters.

5. The platform as recited in claim 3 wherein the trust model comprises at least one instruction set to instruct the mobility device management server to cooperate with the mobility device according to one more selected parameters comprising, security parameters, authentication parameters, verification parameters, data communication encryption/decryption parameters, virtual private network (VPN) parameters, and authorization parameters.

6. The platform as recited in claim 5 wherein the trust model comprises a portion of the mobility device management server.

7. The platform as recited in claim 6 wherein the trust model comprises a portion of an administration application executing on the mobility device management server.

8. The platform as recited in claim 1 further comprising a communications interface operative to connect the mobility device with the host environment.

9. The platform as recited in claim 8 wherein the communications interface is embedded in the mobility device.

10. The platform as recited in claim 8 wherein the communications interface comprises any of universal serial bus (USB), IEEE 1394 communications interface (Firewire), 802.XX communications interface, blutetooth communications interface, personal computer interface, small computer serial interface, powered Ethernet, and wireless application protocol (WAP) communications interface.

11. The platform as recited in claim 10 wherein the host environment comprises any of a stand alone computing environment, a networked computer environment, an apparatus having computing capability, and an embedded computing environment.

12. The platform as recited in claim 1 wherein in the mobility device further comprises one or more mobile desktop environments operable to provide control over one or more mobility device functions.

13. The platform as recited in claim 12 wherein the one or more mobile desktop environments are displayable on the host environment.

14. The platform as recited in claim 12 wherein the mobility device cooperates with host environment to display the mobile desktop environment operative to receive and process commands inputted through one or more peripherals coupled to the host environment to control, manipulate, and manage data and applications provided by the mobility device.

15. The platform as recited in claim 12 wherein the mobility device supports unique authentication and verification for each of the one or more mobility desktop environments.

16. The platform as recited in claim 1 wherein the mobility device management server cooperates with other mobility management device servers to provide data and/or applications to the mobility device.

17. The platform as recited in claim 16 wherein the mobility device management server provides web services to the mobility device.

18. A method for communicating data comprising:

providing a mobility device having independent computing capabilities operable to interface with a host; and

providing a mobility device management server cooperating with the mobility device to provide data to the mobility device.

19. The method as recited in claim 18 further comprising establishing a communications link between the mobility device and the host environment.

20. The method as recited in claim 19 further comprising establishing a communications link between the mobility device and the mobility device management server.

21. The method as recited in claim 20 further comprising executing a trust model.

22. The method as recited in claim 21 further comprising receiving a request for data from the mobility device to the mobility device management server.

23. The method as recited in claim 21 further comprising receiving a request for a web service from the mobility device to the mobility device management server using server object access protocol (SOAP).

24. A mobile computing environment platform comprising:

a first means for interfacing with a cooperating computing environment, the first means having independent computing capabilities; and

a second means for providing data and/or applications to the first means according to a selected trust model.

25. The platform as recited in claim 24 further comprising a third means for operatively linking the first and second means together.

26. A method to remotely obtain secure data comprising:

configuring a mobility device with a cooperating computing environment such that the mobility device is operable to execute one or more computing applications on the cooperating computing environment;

establishing communications with at least one cooperating mobility device management server;

authenticating at the mobility device management server the mobility device to determine the rights, access, and privileges of the mobility device to access data on the mobility device management server;

receiving requests for data from the mobility device at the mobility device management server;

processing the requests for data using the mobility device authentication information;

retrieving data to satisfy data requests by the mobility device;

encrypting the data according to a selected encryption protocol; and

communicating the requested data to the mobility device for use on the cooperating computing environment.

27. The method as recited in claim 26 further comprising performing an auto-run of at least one application or routine found on the mobility device when configuring the mobility device with the cooperating computing environment.

28. The method as recited in claim 26 further comprising retrieving bio-metric information from the mobility device as part of the authenticating step.

29. The method as recited in claim 26 further comprising presenting a graphical user interface on the cooperating computing environment, the graphical user interface being part of an X-WINDOWS presentation paradigm.

30. The method as recited in claim 26 further comprising executing one or more JAVA virtual machines on the mobility device to facilitate cooperation between the mobility device and the cooperating computing environment.

31. A mobile device platform comprising:

a mobility device having independent computing capability operable to mount onto a host environment; and

a mobility device management server cooperating with the mobility device to provide data and/or applications to the mobility device according to a selected trust model.

32. The platform as recited in claim 31 wherein the mobility device is operable to interact with a participating user through one or more peripherals comprising a display connected to the host environment, a keyboard directly connected to the host environment, an embedded display on the mobility device, an embedded keyboard on the mobility device, a virtual display, and a virtual keyboard.

33. The platform as recited in claim 31 wherein the mobility device comprises one or more sensors comprising environmental sensors and bio-metric sensors.

34. The platform as recited in claim 33 wherein the environmental sensors comprise a particulate sensor, a location sensor, and orientation sensor.

35. The platform as recited in claim 34 wherein the environmental sensors comprise RFID tags and RFID-enabled SIM cards.

36. The platform as recited in claim 33 wherein the bio-metric sensors comprise a fingerprint reader and DNA sensors.

37. The platform as recited in claim 36 wherein the environmental sensors comprise RFID tags and RFID-enabled SIM cards.

38. The platform as recited in claim 31 further comprising a Trusted Platform Module operable to perform key management and ensure data integrity management and verification of code segments prior to code segment execution.

39. The platform as recited in claim 38 wherein the mobility device lends trust to a participating user according to a selected trust model.

40. The platform as recited in claim 31 wherein the mobility device cooperates with the host environment according to a selected pass-through scheme.

41. The platform as recited in claim 40 wherein the selected pass-through scheme comprises USB to virtual device pass-through scheme, smart device to USB pass-through scheme, Ethernet to USB pass-through device, and generic processing device to USB pass-through scheme.

42. A method to communicate data comprising:

providing a mobility device having an independent computing capability that is mountable on a host environment according to a selected device/host mounting protocol; and

providing a mobility device management server operable to communicate data and/or applications to the mobility device according to a selected trust model.

43. The method as recited in claim 42 further comprising providing a migratory display server capable of providing processing snapshots and logging operations that can be injected onto the host environment.

44. The method as recited in claim 42 further comprising configuring the mobility device to mount to the host environment utilizing a selected pass-through device driver protocol.

45. The method as recited in claim 44 further comprising configuring the mobility device to mount to the host environment by presenting the mobility device through a USB/CD-ROM startup procedure employed by the host environment to present the mobility device as a CD-ROM device to the host environment.

46. The method as recited in claim 45 further comprising reading data from one or more files on the host environment to generate an IP address for the mobility device.

47. The method as recited in claim 46 further comprising un-mounting the mobility device as a CD-ROM device and remounting it as a network interface card (NIC) upon reading the generated IP address from the host environment by the mobility device.

48. The method as recited in claim 42 further comprising presenting the mobility device to the host environment as a flash drive having an input file and an output file.

49. The method as recited in claim 42 further comprising providing the mobility device operable to process, store, collect, retrieve, and/or manage forensic evidence.

50. The method as recited in claim 42 further comprising providing the mobility device employing a selected parasitic power protocol.

51. The method as recited in claim 42 further comprising providing the mobility device employing a redundant power protocol.

52. The method as recited in claim 42 further comprising securely booting an operating system found on the mobility device.

53. The method as recited in claim 52 further comprising loading trusted software code segments from the mobility device to a cooperating host environment.

54. The method as recited in claim 53 further comprising executing the loaded trusted software code segments on the cooperating host environment.

55. The method as recited in claim 42 further comprising booting the mobility device within the host environment.

56. The method as recited in claim 55 further comprising providing parasitic injection of the host environment and/or the mobility device management server by the mobility device.

57. The method as recited in claim 42 further providing infrastructure services by the mobility device management server to the mobility device comprising security, confidentiality, integrity, authentication, authorization, identity, identity attributes, subscription management, billing/account management, license management, and content management.

58. The method as recited in claim 42 further comprising separating license grants from bundles of content by the mobility device management server as part of selected content distribution and licensing model.

59. The method as recited in claim 45 further comprising separating license grants from bundles of content by the mobility device management server as part of selected content distribution and licensing model.

60. The method as recited in claim 42 further comprising providing one or more personas on the mobility device.

61. The method as recited in claim 60 further comprising separating the one or more personas by the mobility device and/or mobility device management server responsive to how the mobility device is being used on the host environment.

62. The method as recited in claim 61 further comprising hosting the associated keys, profiles, files, and content for the one or more personas by the mobility device in an secure storage area.

63. The method as recited in claim 42 further comprising injecting a BIOS by the mobility device onto the host environment.

64. The method as recited in claim 42 further comprising injecting a virtual machine into the host environment.

65. The method as recited in claim 64 further comprising executing one or more applications on the injected virtual machine.

66. The method as recited in claim 65 further comprising performing license borrowing when executing the one or more applications on the injected virtual machine by the mobility device.

67. The method as recited in claim 42 further comprising recognizing and registering active devices and computing resources found on the mobility device on the host environment by the mobility device.

68. The method as recited in claim 42 further comprising receiving data and/or processing instructions from one or more peripherals connected to the host environment by the mobility device.

69. The method as recited in claim 42 further comprising outputting data and/or processing instructions to one or more peripherals connected the host environment.

70. The method as recited in claim 42 further comprising providing driver abstraction for one or more cooperating input/output peripherals cooperating with the host environment by the mobility device.

71. The method as recited in claim 42 further comprising providing driverless installation for one or more cooperating input/output peripherals cooperating with the host environment by the mobility device.

72. The method as recited in claim 42 further comprising preventing the changing of the system clock of the mobility device by the mobility device.

73. The method as recited in claim 42 further comprising preventing the disabling of synchronization of the mobility device with a secure system clock by the mobility device.

74. The method as recited in claim 42 further comprising separating roles, rights, and/or privileges of the mobility device to identify and employ roles, rights, and/or privileges belonging to one or more of the owner of the mobility device, the user of the mobility device, and an administrator for the mobility device.

75. The method as recited in claim 42 further comprising importing identity data from cooperating flash type memory by the mobility device.

76. The method as recited in claim 42 further comprising checking the state of the host environment by the mobility device.

77. The method as recited in claim 42 further comprising diagnosing the host environment by the mobility device.

78. The method as recited in claim 42 further comprising repairing the host environment by the mobility device.

79. The method as recited in claim 42 further comprising disabling the host environment by the mobility device.

80. The method as recited in claim 42 further comprising performing a back-up of data and/or applications found on the host environment by the mobility device.

81. The method as recited in claim 42 further comprising performing one or more security operations to secure the host environment by the mobility device.

82. The method as recited in claim 42 further comprising copying files to the host environment from the mobility device.

83. The method as recited in claim 42 further comprising copying files from the host environment to the mobility device.

84. The method as recited in claim 42 further comprising embedding an RFID capability in the mobility device so the mobility device can act as a smart document.

85. The method as recited in claim 84 further comprising providing a bio-metric sensor on the mobility device for use as part of a user authentication protocol.

86. The method as recited in claim 85 further comprising presenting the mobility device as a smart passport having one or more authentication mechanisms comprising RFID authentication and bio-metric authentication.

87. The method as recited in claim 84 further comprising tracking the mobility device through the RFID capability.

88. The method as recited in claim 42 further comprising communicating data between cooperating one or more mobility devices and one or more mobility device management servers based on a selected authorization paradigm.

89. The method as recited in claim 42 further comprising providing trust to other cooperating components cooperating with the mobility device according to a selected trust model.

90. The method as recited in claim 89 further comprising providing a trust model based on content policies/rights and/or profile descriptions of the cooperating components.

91. The method as recited in claim 90 further comprising delivering content to the cooperating components in various degrees of quality based on the selected trust model.

92. The method as recited in claim 89 further comprising allowing the cooperating components to utilize content protection capabilities found on the mobility device.

93. The method as recited in claim 42 further comprising automatically optimizing the distribution and allocation of data and/or computational resources for a process being performed by a host environment comprising a networked computing environment.

94. The method as recited in claim 42 further comprising allowing for the manual management of the distribution and allocation of data and/or computational resources for a process being performed by a host environment comprising a networked computing environment.

95. The method as recited in claim 42 further comprising providing multi-factor authentication of a participating user of the mobility device on the mobility device comprising possession, knowledge of secret data, and bio-metric authentication.

96. The method as recited in claim 42 further comprising correlating intermittently connected mobility devices intermittently connected with the host environment and/or mobility device management server with processes operable to park based on manual configuration.

97. The method as recited in claim 42 further comprising correlating intermittently connected mobility devices intermittently connected with a host environment and/or mobility device management server with one or more processes operable to park automatically based on parameters comprising an operating environment computational capacity (MIPS) and scalability, security of the operating environment, content licensing (rights management) capability, system management capabilities, operating environment stability (uptime), operating environment accessibility, network bandwidth and latency, and storage capacity.

98. The method as recited in claim 42 further comprising providing a secure time-service on the mobility device.

99. The method as recited in claim 42 further comprising providing a data-record time stamping and archival on the mobility device.

100. The method as recited in claim 42 further comprising providing a secondary communications interface on the mobility device comprising a USB and Ethernet communications interface.

101. The method as recited in claim 42 further comprising providing an X-windows proxy system for use on the host environment by the mobility device.

102. The method as recited in claim 42 further comprising providing one or more power interfaces on the mobility device comprising USB power interface, FireWire power interface, and powered Ethernet interface.

103. The method as recited in claim 42 further comprising engaging in RAM borrowing between the mobility device and the host environment.

104. The method as recited in claim 42 further comprising providing a bi-direction trust arbitration model for use by the mobility device and cooperating components.

105. The method as recited in claim 42 further comprising authenticating a participating user on the mobility device using a bio-metric fingerprint reader according to a selected sequence of fingerprints.

106. The method as recited in claim 42 further comprising providing one or more wireless data transceivers on the mobility device operable to allow the mobility device to operate on one or more cooperating wireless communications networks and/or municipal data communications grids comprising 802.XX, CDMA, GSM, BlueTooth, and WAP wireless communications networks and/or municipal data communication grids.

107. The method as recited in claim 106 further comprising selecting the one or more wireless data transceivers based on a selected function or operation being performed by the mobility device.

108. The method as recited in claim 107 further comprising selecting the one or more wireless data transceivers based on one or more use parameters comprising:

cost, availability of the one or more cooperating wireless communications networks and/or municipal data communication grids, and preference of a participating user.