Locked-down computing environment

• US 8,484,721 B2
• Filed: 08/03/2009
• Issued: 07/09/2013
• Est. Priority Date: 08/04/2008
• Status: Active Grant

• Current Assignee: Open Invention Network LLC
• Original Assignee: MOKA5, INC.
• Inventors: Sapuntzakis, Constantine P., Lam, Monica Sin-Ling
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US12/534,699
• Publication Number:
  US 20100031348A1
• Time in Patent Office: 1,436 Days
• Field of Search: 726/16, 726/19, 711/115, 713/2
• US Class Current: 726/19
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

Some embodiments of the present invention provide a system that presents an alternate computing environment on a host computing device. During operation, this system detects the presence of a removable storage device which is in communication with an interface of the host computing device. The system also locates code which implements the alternate computing environment on the removable storage device. Finally, the system runs the code which presents the alternate computing environment through an environment player on the host device, wherein the environment player prevents a user of the alternate computing environment from interacting directly with a native computing environment of the host computing device.

Claims

1. A computer-implemented method for running an alternate computing environment on a host computing device, comprising:

detecting the presence of a removable storage device which is in communication with an interface of the host computing device; and

in response to detecting the presence of the removable storage device,

automatically locating code which implements the alternate computing environment on the removable storage device, and

automatically running the code which implements the alternate computing environment on an environment player on the host computing device, wherein the environment player prevents a user of the alternate computing environment from interacting directly with a native computing environment of the host computing device, and wherein the environment player runs the alternate computing environment in sandbox which is insulated front the native computing environment so that a user of the alternate computing environment cannot corrupt the native computing environment.

2. The method of claim 1, wherein preventing the user of the alternate computing environment from interacting directly with the native computing environment involves one or more of:

preventing the user from accessing most applications in the native computing environment;

preventing the user from accessing files in the native computing environment; and

preventing the user from accessing another user'"'"'s account in the native computing environment.

3. The method of claim 1, wherein detecting the presence of the removable storage device involves one of:

detecting insertion of the removable storage device into the interface during operation of the host computing device; and

detecting the presence of the removable storage device at the interface during a boot sequence for the host computing device.

4. The method of claim 1, wherein presenting the alternate computing environment involves performing a keyboard and pointing-device lock-in operation, which prevents the user of the alternate computing environment from interacting with other applications and features which are present on the host computing device.

5. The method of claim 1, further comprising allowing the user to interact directly with the native computing environment after the user provides a username and password or some other form of authentication.

6. The method of claim 1, wherein if the removable storage device is associated with an existing account on the host computing device, presently the alternate computing environment involves logging in to the existing account.

7. The method of claim 1, wherein prior to detecting the presence of the removable storage device, the method further comprises having the environment player installed on the host computing device.

8. The method of claim 1, wherein the environment player on the host computing device is implemented as a virtual machine.

9. The method of claim 1, wherein the method is controlled by a system manager component, which allows the method to be performed when the host computing device is in a locked state, wherein during the locked state the host computing device is waiting for a user to log in.

10. A removable storage device that provides an alternate computing environment when coupled to a host computing device, the removable storage device comprising:

an interface for coupling the removable storage device to the host computing device; and

a storage medium storing instructions to be executed by the host computing device, wherein the instructions implement the alternate computing environment;

wherein the instructions are configured to enable the alternate computing environment to execute on an environment player on the host computing device, wherein the environment player automatically executes the alternate computing environment in response to detecting the removable storage device, and prevents a user of the alternate computing environment from interacting directly with a native computing environment of the host computing device, and wherein the environment player runs the alternate computing environment in a sandbox which, is insulated from the native computing environment so that a user of the alternate computing environment cannot corrupt the native computing environment.

11. The removable storage device of claim 10, wherein preventing the user of the alternate computing environment from interacting directly with the native computing environment involves one or more of:

preventing the user from accessing most applications in the native computing environment;

preventing the user from accessing files in the native computing environment; and

preventing the user from accessing another user'"'"'s account in the native computing environment.

12. The removable storage device of claim 10, wherein executing the alternate computing environment involves performing a keyboard and pointing-device lock-in operation, which prevents the user of the alternate computing environment from interacting with other applications and features which are present on the host computing device.

13. A computing device configured to execute an alternate computing environment from a removable storage device, comprising:

an interface configured to receive the removable storage device, wherein the removable storage device contains code which implements the alternative computing environment;

a detection mechanism configured to automatically detect when the removable storage device is in communication with the interface, and in response, to automatically commence execution of the alternate computing environment; and

an environment player configured to execute the code which implements the alternate computing environment from the removable storage device, wherein the environment player is configured to prevent a user of the alternate computing environment from interacting directly with a native computing environment of the host computing device, and wherein the environment player runs the alternate computing environment in a sandbox which is insulated from the native computing environment so that a user of the alternate computing environment cannot corrupt the native computing environment.

14. The host computing device of claim 13, wherein while preventing the user of the alternate computing environment from interacting directly with the native computing environment, the environment player is configured to do one or more of the following:

prevent the user from accessing most applications in the native computing environment;

prevent the user from accessing files in the native computing environment; and

prevent the user from accessing another user'"'"'s account in the native computing environment.

15. The host computing device of claim 13, wherein while detecting the removable storage device, the detection mechanism is configured to:

detect insertion of the removable storage device into the interface during operation of the host computing device;

or

detect the presence of the removable storage device at the interface during a boot sequence for the host computing device.

16. The host computing device of claim 13, wherein executing the alternate computing environment involves performing a keyboard and pointing-device lock-in operation, which prevents the user of the alternate computing environment from interacting with other applications and features which are present on the host computing device.

17. The host computing device of claim 13, wherein the host computing device is configured to allow the user to interact directly with the native computing environment after the user provides a username and password or some other form of authentication.

18. The host computing device of claim 13, wherein if the removable storage device is associated with an existing account on the host computing device, presenting the alternate computing environment involves logging in to the existing account.

19. The host computing device of claim 13, wherein the environment player on the host computing device is implemented as a virtual machine.

20. The host computing device of claim 13, further comprising a system manager component, which is configured to commence execution of the alternate computing environment when the host computing device is in a locked state, wherein during the locked state the host computing device is waiting for a user to log in.