Electronic Device With Protection From Unauthorized Utilization

• US 20090300771A1
• Filed: 08/07/2009
• Published: 12/03/2009
• Est. Priority Date: 08/23/2003
• Status: Active Grant

• Current Assignee: Softex LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Softex Incorporated
• Inventors: Rangarajab, Gayathri, Dube, Shradha, Raikar, Rayesh Kashinath, Kapila, Ranjit, Bhansali, Apurva Mahendrakumar, Jain, Manoj Kumar, Tucker, Thomas David, Dhanani, Kamal Mansukhlal, Patel, Mehul Ramjibhai, Varghese, Elza Abraham
• Granted Patent: US 8,287,603 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

An electronic device has software for protecting the electronic device from unauthorized utilization. When executed, the software causes the electronic device to execute an application component, wherein the application component is configured to automatically ascertain whether the electronic device has been reported stolen, based on information received from a server system. The electronic device also automatically determines whether the application component is operating correctly, and if so, automatically provides a basic input/output system (BIOS) component of the electronic device with information indicating that the application component is operating correctly. During a subsequent boot process for the electronic device, the software automatically prevents the electronic device from completing the boot process if the BIOS component does not find the information from the application component indicating that the application component was operating correctly. Other embodiments are described and claimed.

Claims

1-20. -20. (canceled)

21. A method for protecting an electronic device from unauthorized utilization, the method comprising:

executing, on the electronic device, an application component, wherein the application component is configured to automatically ascertain whether the electronic device has been reported stolen, based on information received from a server system;

automatically determining whether the application component is operating correctly;

in response to a determination that the application components is operating correctly, automatically providing a basic input/output system (BIOS) component of the electronic device with information indicating that the application component is operating correctly; and

during a subsequent boot process for the electronic device, automatically preventing the electronic device from completing the boot process if the BIOS component does not find the information from the application component indicating that the application component was operating correctly.

22. The method of claim 21, further comprising:

automatically detecting an Internet connection on the electronic device;

automatically attempting to contact a primary server from the electronic device;

in response to successfully contacting the primary server, automatically sending an encrypted message to the primary server, wherein the encrypted message includes data to identify the electronic device; and

after sending the encrypted message to the primary server, receiving a response from the primary server, wherein the response indicates status of whether or not the electronic device is reported stolen.

23. The method of claim 22, further comprising:

if the response indicates that the electronic device is not reported stolen, automatically waiting a substantially random interval and then sending another encrypted message to the primary server in response to the response indicating that the electronic device is not reported stolen; and

if the response indicates that the electronic device is reported stolen, automatically performing one or more actions, based on user selected service options for protecting the electronic device from unauthorized utilization.

24. The method of claim 23, wherein the one or more actions include at least one action from the group consisting of disabling the electronic device and erasing a hard disk drive in the electronic device.

25. The method of claim 23, further comprising:

if the response indicates that the electronic device is reported stolen, and if a disable electronic device service has been selected, automatically providing information to the BIOS component indicating that the electronic device should be disabled;

in response to an unsuccessful attempt to contact the primary server, automatically attempting to contact a secondary server;

in response to an unsuccessful attempt to contact the secondary server, automatically warning a user of the electronic device that the primary server and secondary server can not be accessed; and

automatically disabling the electronic device after a predetermined number of unsuccessful attempts at contacting the primary server or secondary server.

26. The method of claim 25, further comprising:

using security hardware to generate the encrypted message; and

including a serial number or a model number for the electronic device in the encrypted message.

27. The method of claim 25, further comprising:

in conjunction with a successful attempt to contact the secondary server, querying the secondary server regarding operational status of the primary server.

28. The method of claim 25, wherein the operation of warning the user that the primary server and secondary server cannot be accessed comprises instructing the user to correct the problem within five device boots or enter an override code to continue operation of the device.

29. The method of claim 28, further comprising:

providing the override code to the user from a website, a call center, or an automated response system.

30. The method of claim 21, further comprising:

using specialized security hardware on the electronic device to check integrity of the application component.

41. An article of manufacture for protecting an electronic device from unauthorized utilization, the article of manufacture comprising:

a machine-readable medium; and

instructions in the machine-readable medium, wherein the instructions, when executed by an electronic device, cause the electronic device to perform operations comprising;

executing an application component, wherein the application component is configured to automatically ascertain whether the electronic device has been reported stolen, based on information received from a server system;

automatically determining whether the application component is operating correctly;

in response to a determination that the application components is operating correctly, automatically providing a basic input/output system (BIOS) component of the electronic device with information indicating that the application component is operating correctly; and

during a subsequent boot process for the electronic device, automatically preventing the electronic device from completing the boot process if the BIOS component does not find the information from the application component indicating that the application component was operating correctly.

42. An article of manufacture according to claim 41, wherein the operations further comprise:

automatically detecting an Internet connection on the electronic device;

automatically attempting to contact a primary server from the electronic device;

in response to successfully contacting the primary server, automatically sending an encrypted message to the primary server, wherein the encrypted message includes data to identify the electronic device;

after sending the encrypted message to the primary server, receiving a response from the primary server, wherein the response indicates status of whether or not the electronic device is reported stolen;

if the response indicates that the electronic device is not reported stolen, automatically waiting a substantially random interval and then sending another encrypted message to the primary server in response to the response indicating that the electronic device is not reported stolen; and

if the response indicates that the electronic device is reported stolen, automatically performing one or more actions, based on user selected service options for protecting the electronic device from unauthorized utilization.

43. An article of manufacture according to claim 42, wherein the one or more actions include at least one action from the group consisting of disabling the electronic device and erasing a hard disk drive in the electronic device.

44. An article of manufacture according to claim 42, wherein the operations further comprise:

if the response indicates that the electronic device is reported stolen, and if a disable electronic device service has been selected, automatically providing information to the BIOS component indicating that the electronic device should be disabled;

in response to an unsuccessful attempt to contact the primary server, automatically attempting to contact a secondary server;

in response to an unsuccessful attempt to contact the secondary server, automatically warning a user of the electronic device that the primary server and secondary server can not be accessed; and

automatically disabling the electronic device after a predetermined number of unsuccessful attempts at contacting the primary server or secondary server.

45. An article of manufacture according to claim 44, wherein the operations further comprise:

using security hardware in the electronic device to generate the encrypted message; and

including a serial number or a model number for the electronic device in the encrypted message.

46. An article of manufacture according to claim 44, wherein the operations further comprise:

in conjunction with a successful attempt to contact the secondary server, querying the secondary server regarding operational status of the primary server.

47. An electronic device with software for protecting the electronic device from unauthorized utilization, the electronic device comprising:

a processing unit;

a machine-readable medium responsive to the processing unit; and

instructions in the machine-readable medium, wherein the instructions, when executed by the electronic device, cause the electronic device to perform operations comprising;

executing an application component, wherein the application component is configured to automatically ascertain whether the electronic device has been reported stolen, based on information received from a server system;

automatically determining whether the application component is operating correctly;

in response to a determination that the application components is operating correctly, automatically providing a basic input/output system (BIOS) component of the electronic device with information indicating that the application component is operating correctly; and

during a subsequent boot process for the electronic device, automatically preventing the electronic device from completing the boot process if the BIOS component does not find the information from the application component indicating that the application component was operating correctly.

48. An electronic device according to claim 47, wherein the operations further comprise:

automatically detecting an Internet connection on the electronic device;

automatically attempting to contact a primary server from the electronic device;

in response to successfully contacting the primary server, automatically sending an encrypted message to the primary server, wherein the encrypted message includes data to identify the electronic device;

after sending the encrypted message to the primary server, receiving a response from the primary server, wherein the response indicates status of whether or not the electronic device is reported stolen;

if the response indicates that the electronic device is not reported stolen, automatically waiting a substantially random interval and then sending another encrypted message to the primary server in response to the response indicating that the electronic device is not reported stolen; and

if the response indicates that the electronic device is reported stolen, automatically performing one or more actions, based on user selected service options for protecting the electronic device from unauthorized utilization.

49. An electronic device according to claim 48, wherein the one or more actions include at least one action from the group consisting of disabling the electronic device and erasing a hard disk drive in the electronic device.

50. An electronic device according to claim 48, wherein the operations further comprise:

if the response indicates that the electronic device is reported stolen, and if a disable electronic device service has been selected, automatically providing information to the BIOS component indicating that the electronic device should be disabled;

in response to an unsuccessful attempt to contact the primary server, automatically attempting to contact a secondary server;

in response to an unsuccessful attempt to contact the secondary server, automatically warning a user of the electronic device that the primary server and secondary server can not be accessed; and

automatically disabling the electronic device after a predetermined number of unsuccessful attempts at contacting the primary server or secondary server.