Secure configuration of a computing device

• US 8,214,648 B2
• Filed: 09/09/2010
• Issued: 07/03/2012
• Est. Priority Date: 07/26/2005
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Wysocki, Christopher R., Ward, Alan
• Primary Examiner(s): Truong, Thanhnga B
• Assistant Examiner(s): Rahman, Mahfuzur
• Application Number:
  US12/878,201
• Publication Number:
  US 20110007895A1
• Time in Patent Office: 663 Days
• Field of Search: 713/180, 713/181
• US Class Current: 713/181
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

In accordance with a broad aspect, a method is provided to securely configure a computing device. A configuration indication is received into the computing device, including receiving a digital signature generated based on the configuration indication. Generation of the digital signature accounts for a unique identifier nominally associated with the computing device. The received configuration indication may be verified to be authentic including processing the unique identifier, the received configuration indication and the received digital signature. The computing device may be operated or interoperated with in accordance with the received configuration indication. In one example, a service interoperates with the computing device. For example, the computing device may be a portable media player, and the service may provide media to the computing device based on a capacity indication of the configuration indication.

Claims

1. A method of securely configuring a computing device, the method comprising:

receiving a configuration indication into the computing device, the configuration indication including a configuration file and an encrypted digest of the configuration file, the encrypted digest being formed by producing a digest of the configuration file and encrypting the digest, the configuration file including a unique identifier associated with the computing device;

verifying, at the computing device, that the received configuration indication is authentic including;

generating a digest of the configuration file;

decrypting the received encrypted digest; and

comparing the generated digest with the decrypted digest;

operating or interoperating with the computing device in accordance with the received configuration file when the generated digest and the decrypted digest match; and

operating or interoperating with the computing device in accordance with another configuration file of the computing device when the generated digest and the received decrypted digest do not match,

wherein the received encrypted digest is encrypted using a private key of a public/private key pair;

wherein the decrypting of the encrypted digest uses a public key of the public/private key pair, and

wherein the verifying comprises comparing the unique identifier provided in the configuration file to a unique identifier previously assigned to the computing device.

2. The method of claim 1, wherein the configuration indication is a collection of data indicating a configuration for at least a plurality of operations of the computing device.

3. The method of claim 2, wherein the collection of data includes a collection of key/value pairs.

4. The method of claim 3, wherein the collection of key/value pairs is defined by a markup language.

5. The method of claim 4, wherein the markup language is an extensible markup language.

6. The method of claim 4, wherein the collection of data includes a binary encoding of the markup language.

7. A method of securely configuring a computing device, the method comprising:

receiving a configuration indication into the computing device, the configuration indication including a configuration file and an encrypted digest of the configuration file, the encrypted digest being formed by producing a digest of the configuration file and encrypting the digest, the configuration file including a unique identifier associated with the computing device;

verifying, at the computing device, that the received configuration indication is authentic including;

generating a digest of the configuration file;

decrypting the received encrypted digest; and

comparing the generated digest with the decrypted digest;

operating or interoperating with the computing device in accordance with the received configuration file when the generated digest and the decrypted digest match; and

operating or interoperating with the computing device in accordance with another configuration file of the computing device when the generated digest and the received decrypted digest do not match,

wherein the configuration indication and the encrypted digest are generated by a service,

wherein the configuration indication and the encrypted digest are provided from the service to the computing device, for the configuration indication and the encrypted digest to be received by the computing device,

wherein further comprises providing the configuration indication and the encrypted digest from the computing device back to the service, and

wherein interoperating with the computing device in accordance with the received configuration indication includes the service interoperating with the computing device in accordance with the configuration indication provided back to the service.

8. The method of claim 7, wherein the received encrypted digest is created in association with a provider of the configuration indication based on a private key of a public/private key pair;

and

wherein the decrypting of the encrypted digest uses a public key of the public/private key pair.

9. The method of claim 8, wherein the verifying comprises:

comparing the unique identifier provided in the configuration file to a unique identifier previously assigned to the computing device.

10. The method of claim 7, further comprising:

performing an action by a user that causes initiation of the configuration indication generating step.

11. The method of claim 10, wherein:

the action by the user is with respect to the computing device,

the action by the user is with respect to the service,

the service includes a user application executing on a client computer and server-based functionality, and

the action by the user with respect to the service is an action by the user with respect to the user application executing on the client computer.

12. The method of claim 11, wherein:

the server-based functionality includes commerce functionality to regulate the user application, including regulating whether the user application can generate the configuration indication and the encrypted digest.

13. The method of claim 12, wherein:

the commerce functionality includes functionality to receive remuneration in exchange for allowing the user application to generate the configuration indication and the encrypted digest.

14. The method of claim 10, wherein:

the action corresponds to a direct request by a user to request a new or modified configuration.

15. The method of claim 10, wherein:

the action corresponds to a request by a user to perform an action, wherein the action requires a new or modified configuration.

16. The method of claim 15, wherein:

the action by the user with respect to the computing device causes the service to generate the configuration indication and the encrypted digest.

17. The method of claim 16, wherein:

the computing device is connected to the service via a wireless network.

18. The method of claim 17, wherein:

the wireless network is provided by a wireless carrier; and

the service is provided in cooperation with the wireless carrier.

19. The method of claim 18, wherein:

the computing device has wireless communication functionality;

the wireless network is a network provided by a mobile telephone service provider; and

the service is provided in cooperation with the mobile telephone service provider.

20. A non-transitory computer readable medium including at least computer program code stored therein for securely configuring a computing device, the non-transitory computer readable medium comprising:

computer program code for receiving a configuration indication at the computing device, the configuration indication including a configuration file and an encrypted digest of the configuration file, the encrypted digest being formed by producing a digest of the configuration file and encrypting the digest, the configuration file including a unique identifier associated with the computing device;

computer program code for verifying that the received configuration indication is authentic, the verifying including at least generating a digest of the configuration file, decrypting the received encrypted digest, and comparing the generated digest with the decrypted digest;

computer program code for causing the computing device to operate in accordance with the received configuration file when the generated digest and the decrypted digest match; and

computer program code for causing the computing device to operate in accordance with another configuration file of the computing device when the generated digest and the received decrypted digest do not match,

wherein the received encrypted digest is encrypted using a private key of a public/private key pair;

wherein the decrypting of the encrypted digest uses a public key of the public/private key pair, and

wherein the computer program code verifying comprises computer program code for comparing the unique identifier provided in the configuration file to a unique identifier previously assigned to the computing device.