Portable desktop device and method of host computer system hardware recognition and configuration

• US 8,516,236 B2
• Filed: 09/30/2009
• Issued: 08/20/2013
• Est. Priority Date: 09/30/2009
• Status: Active Grant

• Current Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Original Assignee: Imation Corporation (Glassbridge Enterprises, Inc.)
• Inventors: Hamid, Laurence
• Primary Examiner(s): Huynh, Kim
• Assistant Examiner(s): Choudhury, Zahid
• Application Number:
  US12/570,608
• Publication Number:
  US 20110078428A1
• Time in Patent Office: 1,420 Days
• Field of Search: 713/1, 713/2
• US Class Current: 713/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/4411 Configuring for operating with peripheral devices; Loading of device drivers

Abstract

A portable desktop device and method for host computer system hardware recognition and configuration are provided. The portable desktop device causes on a first boot, the host computer system to recognize hardware devices connected thereto, and to configure hardware configuration files of the portable desktop O/S in accordance with the recognized hardware. Once the hardware configuration files have been configured, the system is rebooted. On the second boot, the host computer determines that the portable desktop has been configured for its hardware, and initiates start-up of the portable desktop.

Claims

1. A method of host computer system hardware recognition and configuration for a portable desktop device, the method comprising:

on a first boot of the host computer system from the portable desktop device;

recognizing at least one hardware device connected to the host computer system,

configuring at least one hardware configuration file of a portable desktop O/S stored in memory of the portable desktop device in accordance with the at least one hardware device, and

rebooting the host computer system to execute the portable desktop O/S on a second boot from the portable desktop device, in accordance with a security specification of the portable desktop device;

on the second boot of the host computer system from the portable desktop device;

starting up the portable desktop O/S on the host computer system using the at least one hardware configuration file of the portable desktop O/S stored in the memory of the portable desktop device; and

enabling or disabling the at least one hardware device in accordance with the security specification;

checking the at least one hardware configuration file for minimal functionality in accordance with a functionality specification of the portable desktop device; and

in a case that it is determined that the host computer has other than the minimal functionality in accordance with the functionality specification, ceasing the hardware recognition and configuration.

2. A method according to claim 1, wherein recognizing at least one hardware device comprises identifying a driver for the at least one hardware device connected to the host computer system and further comprising enabling or disabling operation of the driver based on the security specification of the portable desktop device.

3. A method according to claim 1, wherein recognizing at least one hardware device comprises collecting information comprising a configuration of the at least one hardware device and further comprising restricting operation of the at least one hardware device in dependence upon the configuration.

4. A method according to claim 1, further comprising:

determining whether the at least one hardware device is known; and

in a case that the at least one hardware device is determined to be known;

identifying a device driver for the hardware device.

5. A method according to claim 4, further comprising:

performing one of creating and modifying the at least one hardware configuration file in accordance with the security specification of the portable desktop device.

6. A method according to claim 5, further comprising:

in a case that the at least one hardware device is determined to be unknown, performing one of;

disabling the unknown hardware device and restricting operation of the unknown hardware device, in accordance with the security specification.

7. A method according to claim 5, further comprising:

in a case that the at least one hardware device or the device driver is determined to have any associated security concerns, performing one of;

disabling the device driver and restricting operation of the device driver, in accordance with the security specification.

8. A method according to claim 5, further comprising:

in a case that the device driver is determined to be uncertified, performing one of;

disabling the uncertified device driver and restricting operation of the uncertified device driver, in accordance with the security specification.

9. A method according to claim 5, further comprising:

in a case that the device driver is determined to be unsupported, performing one of;

disabling the unsupported device driver and restricting operation of the unsupported device driver, in accordance with the security specification.

10. A method according to claim 5, further comprising:

in a case that the device driver is determined to be unavailable, restricting operation of the at least one hardware device in accordance with the security specification.

11. A method according to claim 5, further comprising:

establishing a secure connection between the host computer system and a remote location in accordance with the security specification; and

retrieving the device driver from the remote location.

12. A method according to claim 1, further comprising:

requesting authentication of a user of the portable desktop device, and in a case that the user is determined to be other than authenticated, ceasing the hardware recognition and configuration.

13. A method of host computer system hardware recognition and configuration for a portable desktop device, the method comprising:

on a first boot of the host computer system from the portable desktop device;

recognizing at least one hardware device connected to the host computer system,

configuring at least one hardware configuration file of a portable desktop O/S stored in memory of the portable desktop device in accordance with the at least one hardware device, and

rebooting the host computer system to execute the portable desktop O/S on a second boot from the portable desktop device, in accordance with a security specification of the portable desktop device;

on the second boot of the host computer system from the portable desktop device;

starting up the portable desktop O/S on the host computer system using the at least one hardware configuration file of the portable desktop O/S stored in the memory of the portable desktop device; and

enabling or disabling the at least one hardware device in accordance with the security specification;

and further comprising;

on the first boot of the host computer system from the portable desktop device;

determining that a previously configured flag has a value indicating that the portable desktop device is other than configured; and

setting the previously configured flag to a value indicating that the portable desktop device has been configured; and

on the second boot of the host computer system from the portable desktop device;

determining that the previously configured flag has the value indicating that the portable desktop device has been configured; and

resetting the previously configured flag to the value indicating that the portable desktop device is other than configured.

14. The method of claim 13, further comprising:

operating a subset of the at least one hardware device in the portable desktop environment, wherein the portable desktop O/S is configured to enable hardware devices which meet the security specification and to disable hardware devices which fall below the security specification, based on the hardware configuration file.

15. The method of claim 14, further comprising determining whether the hardware devices have any security concerns, and wherein operating a subset of the hardware devices comprises restricting operation of at least one hardware device based on the security concerns, in accordance with the security specification of the portable desktop device.

16. The method of claim 14, wherein the security concerns comprise one or more of a hardware device being unknown or a hardware driver for the hardware device being uncertified, unavailable or unsupported by the desktop environment.

17. A method of host computer system hardware recognition and configuration for a portable desktop device, the method comprising:

on a first boot of the host computer system from the portable desktop device;

recognizing at least one hardware device connected to the host computer system,

configuring at least one hardware configuration file of a portable desktop O/S stored in memory of the portable desktop device in accordance with the at least one hardware device, and

rebooting the host computer system to execute the portable desktop O/S on a second boot from the portable desktop device, in accordance with a security specification of the portable desktop device;

on the second boot of the host computer system from the portable desktop device;

starting up the portable desktop O/S on the host using the at least one hardware configuration file of the portable desktop O/S stored in the memory of the portable desktop device; and

enabling or disabling the at least one hardware device in accordance with the security specification;

and further comprising;

on the first boot of the host computer system from the portable desktop device;

determining whether a hardware profile defining a previously executed hardware configuration exists for the at least one hardware device;

in a case that it is determined that the hardware profile exists, configuring the at least one hardware configuration file in accordance with the hardware profile; and

in a case that it is determined that the hardware profile other than exists, saving a hardware profile comprising a definition of the previously executed hardware configuration.

18. A portable desktop device comprising:

I/O hardware for coupling the portable desktop device to a host computer system, the host computer system connected to at least one hardware device; and

memory storage comprising;

a portable desktop storage block comprising a portable desktop O/S for execution by the host computer system in accordance with a security specification of the portable desktop device;

a boot process block for execution by the host computer system; and

a hardware recognition and configuration process block for causing the host computer system, on a first boot of the host computer system, to;

recognize the at least one hardware device connected to the host computer system; and

configure at least one hardware configuration file of the portable desktop O/S in the memory storage in accordance with the at least one hardware device;

wherein the boot process block is configured for causing the host computer system to reboot itself to execute the portable desktop O/S on a second boot of the host computer system, the host computer system starting up the portable desktop O/S on the second boot, using the at least one hardware configuration file to enable or disable the at least one hardware device in accordance with the security specification; and

wherein the hardware recognition and configuration process block is configured for causing the host computer system to;

check the at least one hardware configuration file for minimal functionality in accordance with a functionality specification of the portable desktop device; and

in a case that it is determined that the host computer system has other than the minimal functionality in accordance with the functionality specification, cease the hardware recognition and configuration process.

19. A device according to claim 18, wherein the hardware recognition and configuration process block is configured for identifying a driver for the at least one hardware device connected to the host computer system and for enabling or disabling operation of the driver based on the security specification of the portable desktop device.

20. A device according to claim 18, wherein the hardware recognition and configuration process block is configured for collecting information comprising a configuration of the at least one hardware device and for restricting operation of the at least one hardware device in dependence upon the configuration.

21. A device according to claim 18, wherein the hardware recognition and configuration process block is configured for:

determining whether the at least one hardware device is known; and

in a case that the at least one hardware device is determined to be known;

identifying a device driver for the hardware device.

22. A device according to claim 21, wherein the hardware recognition and configuration process block is configured for:

in a case that the device driver is determined to be uncertified, performing one of;

disabling the uncertified device driver and restricting operation of the uncertified device driver, in accordance with the security specification.

23. A device according to claim 21, wherein the hardware recognition and configuration process block is configured for:

in a case that the device driver is determined to be unsupported, performing one of;

disabling the unsupported device driver and restricting operation of the unsupported device driver, in accordance with the security specification.

24. A device according to claim 21, wherein the hardware recognition and configuration process block is configured for:

in a case that the device driver is determined to be unavailable, restricting operation of the at least one hardware device in accordance with the security specification.

25. A device according to claim 21, wherein the hardware recognition and configuration process block is configured for causing the host computer system to:

establish a secure connection with a remote location, in accordance with the security specification; and

retrieve the device driver from the remote location.

26. A device according to claim 18, wherein the hardware recognition and configuration process block is configured for:

modifying the at least one hardware configuration file in accordance with the security specification of the portable desktop device.

27. A device according to claim 18, wherein the hardware recognition and configuration process block is configured for:

disabling the hardware device in accordance with the security specification.

28. A device according to claim 18, wherein the hardware recognition and configuration process block is configured for:

restricting operation of the hardware device in accordance with the security specification.

29. A device according to claim 18, wherein the boot process block is configured for causing the host computer system to:

request authentication of a user of the portable desktop device, and in a case that the user is determined to be other than authenticated, cease the hardware recognition and configuration.

30. A portable desktop device comprising:

I/O hardware for coupling the portable desktop device to a host computer system, the host computer system connected to at least one hardware device; and

memory storage comprising;

a portable desktop storage block comprising a portable desktop O/S for execution by the host computer system in accordance with a security specification of the portable desktop device;

a boot process block for execution by the host computer system; and

a hardware recognition and configuration process block for causing the host computer system, on a first boot of the host computer system, to;

recognize the at least one hardware device connected to the host computer system; and

configure at least one hardware configuration file of the portable desktop O/S in the memory storage in accordance with the at least one hardware device;

wherein the boot process block is configured for causing the host computer system to reboot itself to execute the portable desktop O/S on a second boot of the host computer system, the host computer system starting up the portable desktop O/S on the second boot, using the at least one hardware configuration file to enable or disable the at least one hardware device in accordance with the security specification; and

wherein the boot process block is further configured for causing the host computer system to;

on the first boot of the host computer system from the portable desktop device;

determine that a previously configured flag has a value indicating that the portable desktop device is other than configured; and

set the previously configured flag to a value indicating that the portable desktop device has been configured; and

on the second boot of the host computer system from the portable desktop device;

determine that the previously configured flag has the value indicating that the portable desktop device has been configured; and

reset the previously configured flag to the value indicating that the portable desktop device is other than configured.

31. A portable memory storage device comprising the portable desktop device of claim 30, wherein:

the portable desktop O/S is configured to enable hardware devices which meet the security specification and to disable hardware devices which fall below the security specification, based on the hardware configuration file.

32. The portable memory storage device of claim 31, further comprising a security process, a processor and authentication hardware on the portable memory storage device for authentication of a user, wherein the security process is configured to cause the host system to invoke security processing by the processor and the processor is configured to notify the host system whether the authentication has failed or succeeded.

33. The portable memory storage device of claim 31, wherein the hardware recognition and configuration block is configured to disable a hard drive of the host computer during operation of the portable desktop environment, in accordance with the security specification.

34. A portable desktop device comprising:

I/O hardware for coupling the portable desktop device to a host computer system, the host computer system connected to at least one hardware device; and

memory storage comprising;

a portable desktop storage block comprising a portable desktop O/S for execution by the host computer system in accordance with a security specification of the portable desktop device;

a boot process block for execution by the host computer system; and

a hardware recognition and configuration process block for causing the host computer system, on a first boot of the host computer system, to;

recognize the at least one hardware device connected to the host computer system; and

configure at least one hardware configuration file of the portable desktop O/S in the memory storage in accordance with the at least one hardware device;

wherein the boot process block is configured for causing the host computer system to reboot itself to execute the portable desktop O/S on a second boot of the host computer system, the host computer system starting up the portable desktop O/S on the second boot, using the at least one hardware configuration file to enable or disable the at least one hardware device in accordance with the security specification; and

wherein the boot process block is further configured for causing the host computer system to;

on the first boot of the host computer from the portable desktop device;

determine whether a hardware profile defining a previously executed hardware configuration exists for the at least one hardware device;

in a case that it is determined that the hardware profile exists, configure the at least one hardware configuration file in accordance with the hardware profile; and

in a case that it is determined that the hardware profile other than exists, save a hardware profile comprising a definition of the previously executed hardware configuration.