System and method for delivery of a modular operating system

• US 20060282899A1
• Filed: 06/08/2005
• Published: 12/14/2006
• Est. Priority Date: 06/08/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Raciborski, Bohdan
• Granted Patent: US 8,353,046 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: Y02D 10/00 Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

An operating system and method for use include a core function module, or basic kernel, providing fundamental operating system support and one or more add-on modules that allow customization of the operating system as desired. Add-on modules may provide support or extended capability to the computer including hardware, applications, peripherals, and support. A digital signature may be used to confirm the integrity of an add-on module prior to installation. Certification may be verified to determine if installation of the add-on module is authorized. By withholding certification, a service provider may manage illegal or undesired modifications to a provided computer. Digital rights management may be used to enforce terms of use of the add-on module in keeping with licensing arrangements.

Claims

1. An operating system for a computer comprising:

a core function module;

a license validation module; and

a plurality of add-on modules, each of the plurality of add-on modules comprising a function module and authorization data, wherein, at least one add-on module is added to the core function module after the authorization data is confirmed by the license validation module.

2. The operating system of claim 1, wherein the at least one add-on module further comprises an expiration date and a digital signature.

3. The operating system of claim 1, wherein the at least one of the plurality of add-on modules further comprises a certification, wherein only add-on modules with the certification are activated by the operating system.

4. The operating system of claim 3, wherein the certification is made by at least one of a licensee, an author, or a publisher.

5. The operating system of claim 1, wherein the at least one add-on module enables installation of a non-certified application program.

6. The operating system of claim 1, wherein the operating system further comprises a login module supporting a plurality of users, wherein each of the plurality of users has a designated set of the plurality of add-on modules.

7. The operating system of claim 1, wherein the operating system further comprises a memory activation module, wherein the at least one add-on module cooperates with the memory activation module to permit use of an additional memory.

8. The operating system of claim 7, wherein the operating system requires the additional memory to implement a capability.

9. The operating system of claim 1, wherein the at least one add-on module corresponds to features associated with a tool suite.

10. The operating system of claim 1, wherein the at least one add-on module corresponds to a number of concurrent windows.

11. The operating system of claim 1, wherein the at least one add-on module corresponds to a number of concurrent applications active at a time.

12. The operating system of claim 1, wherein the at least one add-on module comprises digital rights management corresponding to at least one of a number of uses of the add-on module, an expiration date of the add-on module, or a cumulative uses of the add-on module.

13. A method of delivering operating system functionality comprising:

providing a core operating system function;

determining when a first add-on module is available;

determining that digital rights criteria are satisfied; and

starting the first add-on module, wherein the first add-on module adds additional functionality to the function of the core operating system.

14. The method of claim 13, further comprising:

presenting a plurality of add-on modules;

receiving a selection of a first add-on module from the plurality of add-on modules;

confirming a digital signature corresponding to the first add-on module; and

installing the first add-on module.

15. The method of claim 14, further comprising:

confirming a certification authorizing installation of the first add-on module.

16. A computer adapted for use with a modular operating system comprising:

a memory for storing the modular operating system and at least one add-on module, the modular operating system comprising a core function module, wherein the at least one add-on module adds additional functionality to the core function module;

a display adapter for interfacing with a display;

a communication port for bidirectional data transport;

a peripheral interface for interfacing with an external peripheral;

a cryptographic service comprising at least one of digital signature support or digital rights management support; and

a processor coupled to the memory, the display adapter, the communication port and the peripheral interface, the processor for executing instructions under the control of the modular operating system, wherein the processor executes the core function module and executes the at least one add-on module responsive to the cryptographic service.

17. The computer of claim 16, wherein the at least one add-on module comprises at least one of a digital signature, a certification, a digital rights indicia, and a function.

18. The computer of claim 16, wherein the at least one add-on module comprises a function, wherein the function provides capability corresponding to at least one of power management, removable memory support, a metered disk drive, a number of processors supported, a screen resolution, a screen color depth, and a 3D acceleration.

19. The computer of claim 16, wherein the at least one add-on module comprises a function, wherein the function provides capability corresponding to at least one of peripheral accessories, network interfaces, and peer-to-peer networking.

20. The computer of claim 16, wherein the at least one add-on module comprises a function, wherein the function provides capability corresponding to at least one of a number of concurrent windows, a number of concurrent applications, advanced sound support, themes/styles, a game controller support, increased video memory, high speed disk access, network drive support, and network printing.