Deterring unauthorized use of electronic devices

• US 7,266,849 B1
• Filed: 12/08/1999
• Issued: 09/04/2007
• Est. Priority Date: 12/08/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Sutton, James A., Girard, Luke E., Gregory, Anne
• Primary Examiner(s): Zia; Syed A.
• Application Number:
  US09/457,492
• Time in Patent Office: 2,827 Days
• Field of Search: 713/200, 713/201, 340/825.31, 340/571, 380/25, 395/186
• US Class Current: 726/34
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G08B 13/1418 Removal detected by failure in electrical connection between the appliance and a control centre, home control panel or a power supply

Abstract

A method for deterring unauthorized use of an electronic device is described. The method includes installing security data in a protected storage area, installing a security routine operable to check for the security data, and prompting a user for identity information if the security data is found, before permitting use of the device. In an implementation, the device is shut down if the identity information is incorrect, and manufacturer contact information may be displayed before shutting down. But if the user responds correctly, the activation process is continued to enable normal operation of the device.

Claims

1. A method for deterring theft of an electronic device, comprising:

installing security data in a protected storage area; and

installing a security routine operable during an activation process to check for the security data when the device is powered on, the security routine including

establishing a network connection with a manufacturer of the electronic device during the activation process,

prompting the manufacturer over the network connection for a network authorization in response to finding the security data,

receiving the network authorization before permitting an initial use of the device, and

continuing the activation process based on the manufacturer responding correctly.

2. The method of claim 1, wherein the security routine further comprises shutting down the device based on the information being incorrect.

3. The method of claim 2, wherein the security routine further comprises displaying manufacturer contact information before said shutting down.

4. The method of claim 1, further comprising disabling the security routine following successful activation.

5. The method of claim 1, further comprising disabling the security data following successful activation.

6. The method of claim 1, wherein the security routine further comprises requiring a user to provide at least one of a password, a special token, oral authentication, or a network authorization before enabling use of the device.

7. The method of claim 1, wherein the security routine further comprises permitting use of the device in response to a failure to find the security data.

8. A method, comprising:

installing a security routine in a basic input/output system (BIOS) of a personal computer (PC), the security routine operable during a boot-up process to check a protected storage area for security data, the boot-up process to ensure that components of the personal computer operate correctly, the security routine comprising;

stopping the boot-up process, establishing a network connection, and prompting for a network authorization over the network connection in response to the security data being found;

receiving the network authorization responsive to the prompting;

maintaining the stop of the boot-up process based on the network authorization being unacceptable;

proceeding with the boot-up process based on the network authorization being acceptable or in response to the security data not being found; and

disabling the security routine after the acceptable network authorization is provided.

9. The method of claim 8, wherein the security routine further comprises shutting down the PC based on the network authorization being incorrect.

10. The method of claim 9, wherein the security routine further comprises displaying an authentication failure message before shutting down.

11. The method of claim 8, further comprising disabling the security data after the acceptable network authorization is provided.

12. The method of claim 8, wherein the security routine further comprises requiring a user to provide at least one of a password, a token, or an oral authentication before enabling use of the device.

13. Computer software embodied in a computer-readable medium, the software comprising instructions for causing an electronic device to:

before permitting use of the device, execute a security routine during a boot-up process to determine whether to permit a user to operate the electronic device, the security routine including

establishing a network connection;

enabling the user to operate the electronic device based on receiving an acceptable network authorization over the network connection; and

preventing the user from operating the electronic device based on receiving an unacceptable network authorization over the network connection; and

permanently deactivate the security routine after the acceptable network authorization is received.

14. The software of claim 13, further comprising instructions to display manufacturer contact information when the unacceptable network authorization is received.

15. The software of claim 13, further comprising instructions to execute the security routine during the boot-up process, the boot-up process ensuring that components of the electronic device operate correctly.

16. A method comprising:

starting a boot-up routine of an electronic device, the routine including

checking a protected storage area for security data to identify an entity permitted to use the electronic device,

in response to locating the security data and before permitting use of the device, establishing a network connection, transmitting information over the network for authentication, receiving data over the network to identify that the entity is permitted to use the electronic device based on the data satisfying a predetermined criterion, and disabling the security routine after the acceptable network authorization is provided, and

in response to a failure to locate the security data, allowing the boot-up routine to continue so that the device becomes operable.

17. The method of claim 16, wherein starting the boot-up routine comprises ensuring that components of the electronic device operate correctly.

18. The method of claim 16, further comprising, in response to locating the security data:

receiving an input from a user; and

identifying that the user is permitted to use the electronic device using the received input and the located security data.

19. The method of claim 18, further comprising, in response to locating the security data, prompting the user for the input.

20. The method of claim 16, wherein transmitting information over the network comprises transmitting information over a telephone network.

21. A method for deterring theft of an electronic device, comprising:

installing security data in a protected storage area; and

installing a security routine operable during an activation process to check for the security data when the device is powered on, the security routine including

in response to a failure to find the security data, permitting use of the device,

in response to finding the security data,

establishing a network connection with a manufacturer of the electronic device during the activation process,

prompting the manufacturer over the network connection for a network authorization in response to finding the security data, and

receiving the network authorization before permitting an initial use of the device.

22. A method, comprising:

installing a security routine in a basic input/output system (BIOS) of a personal computer (PC), the security routine operable during a boot-up process to check a protected storage area for security data, the boot-up process to ensure that components of the personal computer operate correctly, the security routine comprising;

stopping the boot-up process, establishing a network connection, and prompting for a network authorization over the network connection in response to the security data being found;

receiving the network authorization responsive to the prompting;

maintaining the stop of the boot-up process based on the network authorization being unacceptable;

proceeding with the boot-up process based on the network authorization being acceptable or in response to the security data riot being found; and

disabling the security data after the acceptable network authorization is provided.