Persistent agent supported by operating system in handheld device

• US 9,465,958 B2
• Filed: 08/30/2013
• Issued: 10/11/2016
• Est. Priority Date: 03/18/2005
• Status: Active Grant

• Current Assignee: Absolute Software Corporation
• Original Assignee: Absolute Software Corporation
• Inventors: Gardner, Philip B.
• Primary Examiner(s): Tolentino, Roderick
• Application Number:
  US14/015,031
• Publication Number:
  US 20140082746A1
• Time in Patent Office: 1,138 Days
• Field of Search: 726 1- 21
• US Class Current: 1/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 9/4411 Configuring for operating with peripheral devices; Loading of device drivers
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A tamper resistant servicing Agent for providing various services (e.g., data delete, firewall protection, data encryption, location tracking, message notification, and updating software) comprises multiple functional modules, including a loader module (CLM) that loads and gains control during POST, independent of the OS, an Adaptive Installer Module (AIM), and a Communications Driver Agent (CDA). Once control is handed to the CLM, it loads the AIM, which in turn locates, validates, decompresses and adapts the CDA for the detected OS environment. The CDA exists in two forms, a mini CDA that determines whether a full or current CDA is located somewhere on the device, and if not, to load the full-function CDA from a network; and a full-function CDA that is responsible for all communications between the device and the monitoring server. The servicing functions can be controlled by a remote server.

Claims

1. One or more non-transient computer readable media disposed in a handheld electronic device connected by a network to a remote server, the media storing a persistent agent to enable, support or provide at least one service with respect to the handheld electronic device when executed, the persistent agent comprising:

a first code and a second code in the handheld electronic device, wherein the first code is configured to;

be persistent against external tampering by being written into an operating system of the device;

determine whether second code configured to enable, support or provide the service is available in the device; and

when the second code has been deleted or disabled in the device, initiate download the second code from the server to the device to restore the second code,

wherein the first code is configured to provide functions that are part of a reduced set of functions of the second code, and

wherein both the first and second codes are configured to cause the persistent agent to automatically initiate two-way communication with the server without user intervention to initiate such communication.

2. The computer readable media of claim 1, wherein the operating system and first code are stored in flash memory.

3. The computer readable media of claim 1, wherein the second code is located outside the operating system.

4. The computer readable media of claim 1, wherein the second code is stored in volatile memory.

5. The computer readable media of claim 1, wherein at least one service is device tracking, device recovery, software deployment, data deletion, firewall protection, reporting data deletion, data encryption, message notification, device messaging, device management, password changing, encryption key changing, rendering the device non-functional, device shut-off, device disablement, rendering at least one device function inoperable, software configuration, software update, or software upgrade.

6. The computer readable media of claim 1, wherein the first code is configured to:

determine whether the second code is functioning in the device, and

if the second code is not functioning, download another second code from the server to the device.

7. The computer readable media of claim 1, wherein the first code is configured to:

determine whether the second code in the device is current, and

if the second code is not current, download a current second code from the server to the device.

8. The computer readable media of claim 1, wherein the service is controlled by the remote server.

9. The computer readable media of claim 1, wherein the second code of persistent agent is programmable by the server.

10. The computer readable media of claim 1, wherein the handheld electronic device is a cell phone.

11. The computer readable media of claim 1, wherein the server initiates a further two-way communication to the persistent agent.

12. The computer readable media of claim 11 wherein the service is a time-sensitive service.

13. The computer readable media of claim 1 wherein the handheld electronic device is a gaming console.

14. The computer readable media of claim 1 wherein the handheld electronic device is a media player.

15. A method of enabling, supporting or providing at least one service with respect to a handheld electronic device comprising the steps of:

providing a persistent agent comprising a first code and a second code in the handheld electronic device, wherein the first code is configured to be persistent against external tampering by being written into an operating system of the device, and the second code is configured to enable, support or provide the service;

determining, by execution of the first code, whether the second code configured to enable, support or provide the service is available in the device; and

when the second code has been deleted or disabled in the device, the first code initiating downloading the second code from a remote server to the device to restore the second code,

wherein the first code is configured to provide functions that are part of a reduced set of functions of the second code, and

wherein both the first and second codes are configured to cause the persistent agent to automatically initiate two-way communication with the server without user intervention to initiate such communication.

16. The method of claim 15, wherein the operating system and first code are stored in flash memory.

17. The method of claim 15, wherein the second code is located outside the operating system.

18. The method of claim 15, wherein at least one service is device tracking, device recovery, software deployment, data deletion, firewall protection, reporting data deletion, data encryption, message notification, device messaging, device management, password changing, encryption key changing, rendering the device non-functional, device shut-off, device disablement, rendering at least one device function inoperable, software configuration, software update or software upgrade.

19. The method of claim 15, wherein the second code is disposed in a protected area.

20. The method of claim 15, comprising the server initiating a further two-way communication to the persistent agent to provide the service.