COMPUTING DEVICE WITH DEVELOPER MODE

• US 20110087870A1
• Filed: 03/10/2010
• Published: 04/14/2011
• Est. Priority Date: 10/13/2009
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Staaf, Anton, Spangler, Randall R., Papakipos, Matthew, Masone, Christopher, Tabone, Ryan
• Granted Patent: US 8,464,038 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: G06F 11/1415 at system level
• CPC Class Codes: G06F 11/1446 Point-in-time backing up or restoration of persistent data
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2201/84 Using snapshots, i.e. a logical point-in-time copy of the data
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/72 Signcrypting, i.e. digital signing and encrypting simultaneously
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Methods and apparatus for implementing modes of operation of computing device are disclosed. An example apparatus includes a mode-selection input device having a first state and a second state. The example apparatus also includes firmware operably coupled with the mode-selection input device. In the example apparatus, when the mode-selection input device is in the first state, the firmware is configured to cause the computing device to operate in a first mode of operation, a user mode. In the example apparatus, when the mode-selection input device is in the second state, the firmware is configured to cause the computing device to operate in second mode of operation, a developer mode.

Claims

1. A computing device comprising:

a mode-selection input device having a first state and a second state; and

firmware operably coupled with the mode-selection input device, wherein;

when the mode-selection input device is in the first state, the firmware is configured to cause the computing device to;

determine whether machine-readable instructions executed by the computing device are digitally signed by a trusted supplier of an operating system of the computing device, and

wherein;

when the machine-readable instructions are digitally signed by the trusted supplier, the computing device is configured to execute the machine-readable instructions; and

when the machine-readable instructions are not digitally signed by the trusted supplier, the computing device is configured to execute a recovery procedure to install machine-readable instructions that are digitally signed by the trusted supplier on the computing device; and

when the mode-selection input device is in the second state, the firmware is configured to cause the computing device to operate in a developer mode, such that the computing device executes machine-readable instructions that are not digitally signed by the trusted supplier.

2. The computing device of claim 1, wherein the mode-selection input device comprises a mode-selection switch.

3. The computing device of claim 2, further comprising a removable cover, the removable cover being configured to conceal the mode-selection switch when the cover is in place on the computing device.

4. The computing device of claim 2, further comprising a battery, wherein the mode-selection switch is located underneath the battery of the computing device.

5. The computing device of claim 1, wherein the machine-readable instructions comprise at least a portion of an operating system of the computing device.

6. The computing device of claim 1, wherein determining whether the machine-readable instructions executed by the computing device are digitally signed by the trusted supplier comprises determining whether at least a portion of an operating system kernel of the computing device is digitally signed by the trusted supplier.

7. The computing device of claim 1, wherein executing the recovery procedure comprises:

displaying, by the computing device, instructions for;

obtaining and storing a recovery image on a removable storage device; and

operably coupling the removable storage device with the computing device after storing the recovery image thereon;

verifying the recovery image stored on the removable storage device is digitally signed by the trusted supplier; and

installing the recovery image onto the computing device from the removable storage device, wherein the recovery image replaces a previous image.

8. The computing device of claim 1, wherein the computing device is configured to determine the state of the mode-selection input device upon booting the computing device.

9. The computing device of claim 1, wherein the computing device is configured to determine the state of the mode-selection input device upon the computing device resuming operation from a suspend mode.

10. The computing device of claim 1, further comprising a recovery mode selection device, the computing device being configured to execute the recovery procedure in response to engagement of the recovery mode selection device.

11. The computing device of claim 1, wherein the computing device is configured to execute the recovery procedure in response to one of a recovery-mode selection device and determining the machine-readable instructions are not digitally signed by the trusted supplier, the recovery procedure comprising:

determining a state of the mode-selection input device;

if the mode-selection input device is in the first state;

locating an image stored on a removable storage device coupled with the computing device;

determining if the image is digitally signed by the trusted supplier;

if the image is digitally signed by the trusted supplier, replacing a current image on the computing device with the image stored on the removable storage device; and

if the image is not digitally signed by the trusted suppler, displaying, by the computing device, an indication that the image stored on the removable storage device is not a trusted image.

12. The computing device of claim 1, wherein the computing device is configured to execute the recovery procedure in response to one of a recovery-mode selection device and determining the machine readable instructions are not digitally signed by the trusted supplier, the recovery procedure comprising:

determining a state of the mode-selection input device;

if the mode-selection input device is in the second state;

locating an image stored on a removable storage device coupled with the computing device;

determining if the image is digitally signed by the trusted supplier;

if the image is digitally signed by the trusted supplier, replacing a current image on the computing device with the image stored on the removable storage device;

if the image is not digitally signed by the trusted supplier;

determining if a digital signature of the image stored on the removable storage device matches a digital signature of the current image of the computing device;

if the digital signature of the image stored on the removable storage device matches the digital signature of the current image of the computing device, replacing the current image on the computing device with the image stored on the removable storage device; and

if the digital signature of the image stored on the removable storage device does not match the digital signature of the current image of the computing device, executing a new image installation procedure.

13. The computing device of claim 12, wherein the new image installation procedure comprises:

displaying, by the computing device, for a predetermined period of time, a notification that the image stored on the removable storage device is not digitally signed by the trusted supplier; and

replacing the current image on the computing device with the image stored on the removable storage device after the predetermined period of time has elapsed.

14. The computing device of claim 13, wherein the new image installation procedure further comprises requesting user input during the predetermined period of time.

15. The computing device of claim 13, wherein the predetermined period of time is more than approximately five minutes.

16. The computing device of claim 13, wherein the new image installation procedure further comprises playing an audio notification during the predetermined period of time.

17. The computing device of claim 1, wherein operating in the developer mode comprises:

determining if an operating system kernel of the computing device is digitally signed by the trusted supplier; and

when the operating system kernel of the computing device is digitally signed by the trusted supplier;

halting operation of the computing device;

displaying, by the computing device, instructions for changing the mode-selection input device from the second state to the first state; and

resuming operation of the computing device in response to the mode-selection input device being changed to the first state.

18. The computing device of claim 1, wherein operating in the developer mode comprises:

determining if an operating system kernel of the computing device is digitally signed by the trusted supplier; and

when the operating system kernel of the computing device is not digitally signed by the trusted supplier;

displaying, by the computing device, a notification that the computing device is running an operating system that is not digitally signed by the trusted supplier.

19. The computing device of claim 18, wherein operating in the developer mode when the operating system kernel of the computing device is not digitally signed by the trusted supplier further comprises:

displaying the notification for a predetermined period of time;

playing an audio notification during the predetermined period of time; and

booting the computing device after the predetermined period of time.

20. The computing device of claim 19, wherein the predetermined period of time is more than approximately thirty seconds.

21. The computing device of claim 19, wherein operating in the developer mode if the operating system kernel of the computing device is not digitally signed by the trusted supplier further comprises:

bypassing the displayed notification and the audio notification in response to entry of a specific key sequence on the computing device.

22. The computing device of claim 21, wherein operating in the developer mode when the operating system kernel of the computing device is not digitally signed by the trusted supplier further comprises initiating the recovery procedure in response to entry of a key sequence other than the specific key sequence for bypassing the displayed notification.

23. The computing device of claim 1, wherein the state of the mode-selection input device is changed by scanning a bar code.

24. The computing device of claim 1, further comprising a recovery mode selection device, wherein:

the computing device is configured to execute the recovery procedure in response to engagement of the recovery mode selection device; and

in the event the mode-selection input device is in the second state prior to engagement of the recovery mode selection device, engagement of the recovery mode selection device changes the mode-selection input device from the second state to the first state.

25. The computing device of claim 1, wherein the firmware comprises executable instructions that, when executed by the computing device, provide for determining the state of the mode-selection input device.

26. The computing device of claim 25, wherein the firmware comprises:

a write-protected portion comprising a boot-stub and instructions for executing a recovery procedure for the computing device; and

a writeable portion including one or more boot images for the computing device.

27. The computing device of claim 26, wherein the computing device is configured such that a circuit modification to a system board of the computing device allows for writing of the write-protected portion of the firmware.

28. A computer implemented method, comprising:

determining, by a computing device, a state of a mode-selection input device of the computing device, the mode-selection input device having a first state and a second state;

when the mode-selection input device is in the first state, operating the computing device in a user mode, the user mode comprising;

determining whether machine-readable instructions executed by the computing device are digitally signed by a trusted supplier of an operating system of the computing device,

wherein;

when the machine-readable instructions are digitally signed by the trusted supplier, executing, by the computing device, the machine-readable instructions; and

when the machine-readable instructions are not digitally signed by the trusted supplier, executing, by the computing device, a recovery procedure to install an operating system recovery image on the computing device; and

when the mode-selection input device is in the second state, operating the computing device in a developer mode, such that the computing device executes machine-readable instructions that are not digitally signed by the trusted supplier.

29. The method of claim 28, wherein determining whether the machine-readable instructions executed by the computing device are digitally signed by the trusted supplier comprises determining whether at least a portion of an operating system kernel of the computing device is digitally signed by the trusted supplier.

30. The method of claim 28, wherein executing the recovery procedure comprises:

displaying, by the computing device, instructions for;

obtaining and storing a recovery image on a removable storage device; and

operably coupling the removable storage device with the computing device after storing the recovery image thereon;

verifying the recovery image stored on the removable storage device is digitally signed by the trusted supplier; and

installing the recovery image onto the computing device from the removable storage device, wherein the recovery image replaces a previous image.

31. The method of claim 28, further comprising, determining the state of the mode-selection input device upon booting the computing device.

32. The method of claim 28, further comprising, determining the state of the mode-selection input device upon the computing device resuming operation from a suspend mode.

33. The method of claim 28, further comprising, executing the recovery procedure in response to engagement of a recovery mode selection device of the computing device.

34. The method of claim 28, further comprising, executing the recovery procedure in response to one of a recovery-mode selection device and determining the machine readable instructions are not digitally signed by the trusted supplier, the recovery procedure comprising:

determining a state of the mode-selection input device;

if the mode-selection input device is in the first state;

locating an image stored on a removable storage device coupled with the computing device;

determining if the image is digitally signed by the trusted supplier;

if the image is digitally signed by the trusted supplier, replacing a current image on the computing device with the image stored on the removable storage device; and

if the image is not digitally signed by the trusted suppler, displaying, by the computing device, an indication that the image stored on the removable storage device is not a trusted image.

35. The method of claim 28, further comprising, executing the recovery procedure in response to one of a recovery-mode selection device and determining the machine readable instructions are not digitally signed by the trusted supplier, the recovery procedure comprising:

determining a state of the mode-selection input device;

if the mode-selection input device is in the second state;

locating an image stored on a removable storage device coupled with the computing device;

determining if the image is digitally signed by the trusted supplier;

if the image is digitally signed by the trusted supplier, replacing a current image on the computing device with the image stored on the removable storage device;

if the image is not digitally signed by the trusted supplier;

determining if a digital signature of the image stored on the removable storage device matches a digital signature of the current image of the computing device;

if the digital signature of the image stored on the removable storage device matches the digital signature of the current image of the computing device, replacing the current image on the computing device with the image stored on the removable storage device; and

if the digital signature of the image stored on the removable storage device does not match the digital signature of the current image of the computing device, executing a new image installation procedure.

36. The method of claim 28, wherein operating in the developer mode comprises:

determining if an operating system kernel of the computing device is digitally signed by the trusted supplier; and

when the operating system kernel of the computing device is digitally signed by the trusted supplier;

halting operation of the computing device;

displaying, by the computing device, instructions for changing the mode-selection input device from the second state to the first state; and

resuming operation of the computing device in response to the mode-selection input device being changed to the first state.

37. The method of claim 28, wherein operating in the developer mode comprises:

determining if an operating system kernel of the computing device is digitally signed by the trusted supplier; and

when the operating system kernel of the computing device is not digitally signed by the trusted supplier;

displaying, by the computing device, a notification that the computing device is running an operating system that is not digitally signed by the trusted supplier.

38. The method of claim 37, wherein operating in the developer mode when the operating system kernel of the computing device is not digitally signed by the trusted supplier further comprises:

displaying the notification for a predetermined period of time;

playing an audio notification during the predetermined period of time; and

booting the computing device after the predetermined period of time.

39. The method of claim 38, wherein operating in the developer mode if the operating system kernel of the computing device is not digitally signed by the trusted supplier further comprises:

bypassing the displayed notification and the audio notification in response to entry of a specific key sequence on the computing device.

40. The method of claim 39, wherein operating in the developer mode when the operating system kernel of the computing device is not digitally signed by the trusted supplier further comprises initiating the recovery procedure in response to entry of a key sequence other than the specific key sequence for bypassing the displayed notification.

41. A computing device, comprising:

a mode-selection switch having a first position and a second position; and

firmware operably coupled with the mode-selection switch, wherein;

when the mode-selection switch is in the first position, the firmware is configured to cause the computing device to;

determine whether machine-readable instructions executed by the computing device are digitally signed by a trusted supplier of an operating system of the computing device, and

wherein;

when the machine-readable instructions are digitally signed by the trusted supplier, the computing device is configured to execute the machine-readable instructions; and

when the machine-readable instructions are not digitally signed by the trusted supplier, the computing device is configured to execute a recovery procedure to install an operating system recovery image on the computing device; and

when the mode-selection switch in the second position, the firmware is configured to cause the computing device to operate in a developer mode, such that the computing device executes machine-readable instructions that are not digitally signed by the trusted supplier.

42. The computing device of claim 41, further comprising a removable cover, the removable cover being configured to conceal the mode-selection switch when the cover is in place on the computing device.

43. The computing device of claim 41, further comprising a battery, wherein the mode-selection switch is located underneath the battery of the computing device.

44. The computing device of claim 41, wherein the machine-readable instructions comprise at least a portion of an operating system of the computing device.

45. The computing device of claim 41, further comprising a recovery mode selection device, wherein:

the computing device is configured to execute the recovery procedure in response to engagement of the recovery mode selection device; and

in the event the mode-selection switch is in the second position prior to engagement of the recovery mode selection device, engagement of the recovery mode selection device changes the mode-selection switch from the second position to the first position.

46. The computing device of claim 41, wherein the firmware comprises executable instructions that, when executed by the computing device, provide for determining the position of the mode-selection input switch.

47. The computing device of claim 46, wherein the firmware comprises:

a write-protected portion comprising a boot-stub and instructions for executing a recovery procedure for the computing device; and

a writeable portion including one or more boot images for the computing device.

48. The computing device of claim 47, wherein the computing device is configured such that a circuit modification to a system board of the computing device allows for writing of the write-protected portion of the firmware.

49. A computing device, comprising:

a mode-selection switch having a first position and a second position; and

firmware operably coupled with the mode-selection switch, wherein;

when the mode-selection switch is in the first position, the firmware is configured to cause the computing device to;

determine whether machine-readable instructions executed by the computing device are digitally signed by a trusted supplier of an operating system of the computing device, and

wherein;

when the machine-readable instructions are digitally signed by the trusted supplier, the computing device is configured to execute the machine-readable instructions; and

when the machine-readable instructions are not digitally signed by the trusted supplier, the computing device is configured to execute a recovery procedure to install an operating system recovery image on the computing device; and

when the mode-selection switch in the second position, the firmware is configured to cause the computing device to operate in a developer mode, such that the computing device executes machine-readable instructions that are not digitally signed by the trusted supplier,

wherein the computing device is configured to execute the recovery procedure in response to one of a recovery-mode selection device and determining the machine readable instructions are not digitally signed by the trusted supplier, the recovery procedure comprising;

determining a state of the mode-selection input device;

if the mode-selection input device is in the second state;

locating an image stored on a removable storage device coupled with the computing device;

determining if the image is digitally signed by the trusted supplier;

if the image is digitally signed by the trusted supplier, replacing a current image on the computing device with the image stored on the removable storage device;

if the image is not digitally signed by the trusted supplier;

determining if a digital signature of the image stored on the removable storage device matches a digital signature of the current image of the computing device;

if the digital signature of the image stored on the removable storage device matches the digital signature of the current image of the computing device, replacing the current image on the computing device with the image stored on the removable storage device; and

if the digital signature of the image stored on the removable storage device does not match the digital signature of the current image of the computing device, executing a new image installation procedure.

50. The computing device of claim 49, wherein the new image installation procedure comprises:

displaying, by the computing device, for a predetermined period of time, a notification that the image stored on the removable storage device is not digitally signed by the trusted supplier; and

replacing the current image on the computing device with the image stored on the removable storage device after the predetermined period of time has elapsed.

51. The computing device of claim 50, wherein the predetermined period of time is more than approximately five minutes.

52. The computing device of claim 50, wherein the new image installation procedure further comprises playing an audio notification during the predetermined period of time.

53. The computing device of claim 50, wherein the new image installation procedure further comprises requesting user input during the predetermined period of time.