Limited Functionality Mode for Secure, Remote, Decoupled Computer Ownership

• US 20090183245A1
• Filed: 01/10/2008
• Published: 07/16/2009
• Est. Priority Date: 01/10/2008
• Status: Abandoned Application

• Current Assignee: Advanced Micro Devices, Inc.
• Original Assignee: Advanced Micro Devices, Inc.
• Inventors: Findeisen, Ralf, Rawson, Andrew R., Strongin, Geoffrey, Simpson, Gary H., Hillman, Garth D.
• Application Number:
  US11/972,351
• Publication Number:
  US 20090183245A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

In one embodiment, a computer system comprises one or more components and a secure computing environment coupled to the components. The secure computing environment is configured to program at least one of the components to enter a limited functionality mode responsive to expiration of a use right to the computer system, wherein operation of the computer system in the limited functionality mode is reduced compared to operation when the use right has not expired. The secure computing environment is configured to monitor the components in the limited functionality mode to detect that a limited functionality mode configuration has been modified by an unauthorized entity and to cause the computer system to enter a second mode in which operation of the computer system is reduced compared to operation in the limited functionality mode in response. In another embodiment, the secure computing environment detects a non-temporal event that indicates a violation of an owner-imposed restriction and enters a limited functionality mode.

Claims

1. A computer system comprising:

one or more components; and

a secure computing environment coupled to the components and configured to program at least one of the components to enter a limited functionality mode responsive to expiration of a use right to the computer system, wherein operation of the computer system in the limited functionality mode is reduced compared to operation when the use right has not expired, and wherein the secure computing environment is configured to monitor the components in the limited functionality mode to detect that a limited functionality mode configuration has been modified by an unauthorized entity, and wherein the secure computing environment is configured to cause the computer system to enter a second mode in which operation of the computer system is reduced compared to operation in the limited functionality mode in response to detecting that the limited functionality mode configuration has been modified.

2. The computer system as recited in claim 1 wherein the second mode comprises a mode in which the computer system does not provide any user operation.

3. The computer system as recited in claim 2 wherein, in the second mode, the secure computing environment is configured to display a message for a user, wherein the message explains a corrective measure to be taken by the user.

4. The computer system as recited in claim 1 wherein the secure computing environment is further configured to program the component to enter the limited functionality mode responsive to an external event.

5. The computer system as recited in claim 4 wherein the external event is a command received from another computer system owned by an owner of the computer system.

6. The computer system as recited in claim 4 wherein the external event is a change in geographic location of the computer system.

7. The computer system as recited in claim 4 wherein the external event is a failure to identify an authorized user.

8. The computer system as recited in claim 1 wherein the secure computing environment is further configured to program the component to enter the second mode responsive to an external event.

9. A method comprising:

programming at least one of one or more components in a computer system to enter a limited functionality mode responsive to expiration of a use right to the computer system, wherein operation of the computer system in the limited functionality mode is reduced compared to operation when the use right has not expired;

monitoring the components in the limited functionality mode to detect that a limited functionality mode configuration has been modified by an unauthorized entity; and

entering a second mode in which operation of the computer system is reduced compared to operation in the limited functionality mode in response to detecting that the limited functionality mode configuration has been modified.

10. The method as recited in claim 9 wherein the second mode comprises a mode in which the computer system does not provide any user operation.

11. The method as recited in claim 10 further comprising, in the second mode, displaying a message for an individual who finds the computer system, wherein the message directs the individual to return the computer system to a specified vendor location.

12. The method as recited in claim 11 further comprising providing the individual with a reward for returning the computer system to the specified vendor location.

13. The method as recited in claim 11 further comprising returning the computer system to a return service provider from the vendor location, wherein the return service provider provides a return service to which an owner of the computer system subscribes.

14. The method as recited in claim 13 further comprising returning the computer system from the return service provider to the owner.

15. The method as recited in claim 9 further comprising programming the at least one component to enter the limited functionality mode responsive to an external event.

16. The method as recited in claim 9 further comprising entering the second mode responsive to an external event.

17. A computer accessible storage medium storing a plurality of instructions which, when executed, implement the method as recited in claim 9

18. A computer system comprising:

one or more components; and

a secure computing environment coupled to the components and configured to detect a non-temporal event that indicates a violation of a restriction imposed by an owner of the computer system, and wherein the secure computing environment is configured to program at least one of the components to enter a limited functionality mode responsive to detecting the event, wherein operation of the computer system in the limited functionality mode is reduced compared to operation in a normal mode.

19. The computer system as recited in claim 18 wherein the event comprises a change in geographic location.