Streamlined provisioning and configuration of computing devices

• US 8,886,933 B1
• Filed: 12/17/2013
• Issued: 11/11/2014
• Est. Priority Date: 12/17/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Poiesz, Benjamin, Abramson, Andrew
• Primary Examiner(s): Dada, Beemnet
• Assistant Examiner(s): BEHESHTI SHIRAZI, SAYED ARESH
• Application Number:
  US14/108,691
• Time in Patent Office: 329 Days
• Field of Search: 713/164
• US Class Current: 713/164
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

Methods and systems for provisioning a computing device are provided. An example method may include receiving, by a computing device, information indicating a uniform resource identifier (URI) and a wireless access point configured to allow the computing device to connect to a wireless network to enable the computing device to access the URI. The method may also include downloading, onto the computing device, a provisioning software application from the URI. The method may also include executing the provisioning software application on the computing device, wherein the provisioning software application is configured to provision the computing device such that the provisioned computing device is configured to operate in a limited function mode. The method may also include locking the provisioned computing device to prevent changes to the limited function mode.

Claims

1. A method performed by a computing device, comprising:

if the computing device is in a provisioned state, requesting a reset of the computing device;

if the computing device is in an unprovisioned state, receiving, by the computing device, information indicating

     1) a uniform resource identifier (URI) and

     2) a wireless access point configured to allow the computing device to connect to a wireless network to enable the computing device to access the URI;

downloading, onto the computing device, a provisioning software application from the URI;

executing, by the computing device, the provisioning software application,

wherein the provisioning software application is configured to provision the computing device such that the provisioned computing device is configured to operate in a limited function mode, and

wherein the limited function mode comprises at least a list of software applications allowed on the computing device, restricting a functionality of one or more functions of one or more software applications on the computing device and preventing a removal of one or more software applications on the computing device; and

locking the provisioned computing device to prevent changes to the limited function mode.

2. The method of claim 1, wherein prior to executing the provisioning software application on the computing device, the computing device is unprovisioned such that the computing device is unregistered and unable to operate in the limited function mode.

3. The method of claim 1, wherein the limited function mode of the provisioned computing device further comprises preventing any additional software applications.

4. The method of claim 1, wherein the information indicating a wireless access point includes an authentication key configured to establish a secure connection between the computing device and the wireless network.

5. The method of claim 1, wherein the limited function mode of the provisioned computing device further comprises preventing a reset of the computing device.

6. The method of claim 1, wherein the provisioned computing device further includes a certificate configured to grant the computing device access to the wireless network.

7. The method of claim 1, wherein the provisioning software application is configured to access one or more URIs to download a plurality of software applications for execution in the limited function mode.

8. A non-transitory computer readable memory storing instructions that, when executed by one or more processors of a computing device, cause the computing device to perform functions comprising:

if the computing device is in a provisioned state, requesting a reset of the computing device;

if the computing device is in an unprovisioned state, receiving information indicating

     1) a uniform resource identifier (URI) and

     2) a wireless access point configured to allow the computing device to connect to a wireless network to enable the computing device to access the URI;

downloading, onto the computing device, a provisioning software application from the URI;

executing the provisioning software application,

wherein the provisioning software application is configured to provision the computing device such that the provisioned computing device is configured to operate in a limited function mode, and

wherein the limited function mode comprises at least a list of software applications allowed on the computing device, restricting a functionality of one or more functions of one or more software applications on the computing device and preventing a removal of one or more software applications on the computing device; and

locking the provisioned computing device to prevent changes to the limited function mode.

9. The non-transitory computer readable memory of claim 8, wherein prior to executing the provisioning software application on the computing device, the computing device is unprovisioned such that the computing device is unregistered and unable to operate in the limited function mode.

10. The non-transitory computer readable memory of claim 8, wherein the information indicating a wireless access point includes an authentication key configured to establish a secure connection between the computing device and the wireless network.

11. The non-transitory computer readable memory of claim 8, wherein the limited function mode of the provisioned computing device further comprises preventing a reset of the computing device.

12. The non-transitory computer readable memory of claim 8, wherein the provisioning software application is configured to access one or more URIs to download a plurality of software applications for execution in the limited function mode.

13. A system comprising:

one or more processors; and

data storage storing instructions that, when executed by the one or more processors, cause the system to perform functions comprising;

if the system is in a provisioned state, requesting a reset of the system;

if the system is in an unprovisioned state, receiving information indicating

     1) an IP address,

     2) a file path, and

     3) a wireless access point configured to allow the system to connect to a wireless network to enable the computing device to access the file path at the IP address;

downloading a provisioning software application from the file path at the IP address;

executing the provisioning software application,

wherein the provisioning software application is configured to provision the system such that the provisioned system operates in a limited function mode, and

wherein the limited function mode comprises at least a list of software applications allowed in the system, restricting a functionality of one or more functions of one or more software applications in the system and preventing a removal of one or more software applications in the system; and

locking the provisioned system to prevent changes to the limited function mode.

14. The system of claim 13, wherein the limited function mode of the provisioned computing device further comprises preventing any additional software applications.

15. The system of claim 13, wherein the information indicating a wireless access point includes an authentication key configured to establish a secure connection between the computing device and the wireless network.

16. The system of claim 13, wherein the limited function mode of the provisioned system further comprises preventing a reset of the system.

17. The system of claim 13, wherein the provisioning software application is configured to access one or more URIs to download a plurality of software applications for execution in the limited function mode.