Persistent agent supported by processor

• US 9,465,959 B2
• Filed: 03/29/2014
• Issued: 10/11/2016
• Est. Priority Date: 03/18/2005
• Status: Active Grant

• Current Assignee: Absolute Software Corporation
• Original Assignee: Absolute Software Corporation
• Inventors: Gardner, Philip B.
• Primary Examiner(s): Tolentino, Roderick
• Application Number:
  US14/229,849
• Publication Number:
  US 20140298485A1
• Time in Patent Office: 927 Days
• Field of Search: 713/100, 726 1- 21
• US Class Current: 1/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 9/4411 Configuring for operating with peripheral devices; Loading of device drivers
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A tamper resistant servicing Agent for providing various services (e.g., data delete, firewall protection, data encryption, location tracking, message notification, and updating software) comprises multiple functional modules, including a loader module (CLM) that loads and gains control during POST, independent of the OS, an Adaptive Installer Module (AIM), and a Communications Driver Agent (CDA). Once control is handed to the CLM, it loads the AIM, which in turn locates, validates, decompresses and adapts the CDA for the detected OS environment. The CDA exists in two forms, a mini CDA that determines whether a full or current CDA is located somewhere on the device, and if not, to load the full-function CDA from a network; and a full-function CDA that is responsible for all communications between the device and the monitoring server. The servicing functions can be controlled by a remote server.

Claims

1. One or more non-transient computer readable media disposed in an electronic device connectable by a network to a remote server, the media storing code to enable, support or provide at least one persistent service with respect to the electronic device when executed, the code comprising:

a first portion of code and a second portion of code, wherein the first portion of code is located in a processor of the electronic device and configured when executed to cause the processor to;

determine whether the second portion of code configured to enable, support or provide the service is available in the electronic device;

when the second portion of code has been deleted or disabled in the electronic device, initiate download of the second portion of code from the server to restore the second portion of code; and

when the second portion of code is available in the electronic device, execute the second portion of code to enable, support or provide the service,

wherein the first portion of code is configured to provide functions that are part of a reduced set of functions of the second portion of code, and

wherein persistence of the service is enabled, supported or provided by the first portion of code being located in the processor, and wherein the first portion of code is configured to automatically initiate two-way communication with the server without user intervention to initiate such communication.

2. The computer readable media of claim 1, wherein both the first and second portions of code cause the electronic device to automatically communicate with the server.

3. The computer readable media of claim 1, wherein the server initiates communication with the electronic device.

4. The computer readable media of claim 1, wherein the first portion of code comprises generic sub-functions that can be leveraged to provide a multitude of functionalities.

5. The computer readable media of claim 1 wherein the at least one persistent service is inventory taking, device tracking, device recovery, software deployment, data deletion, firewall protection, reporting data deletion, data encryption, message notification, device messaging, device management, password changing, encryption key changing, rendering the device non-functional, device shut-off, device disablement, rendering at least one device function inoperable, software configuration, software update, or software upgrade.

6. The computer readable media of claim 1 wherein the first portion of code is configured to:

determine whether the second portion of code is functioning in the electronic device, and

if the second portion of code is not functioning, download another second portion of code from the server to the electronic device.

7. The computer readable media of claim 1 wherein the first portion of code is configured to:

determine whether the second portion of code in the electronic device is current, and

if the second portion of code is not current, download a current second portion of code from the server to the electronic device.

8. The computer readable media of claim 1 wherein the first portion of code is programmable.

9. The computer readable media of claim 1, wherein the first portion of code keeps itself current by updating itself from the server.

10. The computer readable media of claim 1 wherein the service is controlled by the server.

11. The computer readable media of claim 10, wherein the first portion of code is configured to:

receive from the server a transmission of information in one or more packets, the information comprising;

a number that denotes a quantity of bytes to be read or written; and

optional data;

write the data if the data is present; and

read said quantity of bytes from a memory in the electronic device if the data is absent,

thereby further enabling or supporting the service.

12. The computer readable media of claim 11, wherein the information further comprises an address, the first portion of code further configured to:

write the data, if the data is present, to the memory starting at the address; and

read from the memory, if the data is absent, starting from the address.

13. A method of enabling, supporting or providing at least one persistent service with respect to an electronic device comprising the steps of:

storing a first portion of code located in a processor of the electronic device, said first portion of code configured, when executed, to cause the processor to;

determine whether a second portion of code configured to enable, support or provide the service is available in the electronic device;

when the second portion of code has been deleted or disabled in the electronic device, initiate download of the second portion of code from a server to restore the second portion of code; and

when the second portion of code is available in the electronic device, executing the second portion of code to enable, support or provide the service,

wherein the first portion of code is configured to provide functions that are part of a reduced set of functions of the second portion of code, and

wherein persistence of the service is enabled, supported or provided by the first portion of code being stored in the processor, and wherein the first portion of code is configured to automatically initiate two-way communication with the server without user intervention to initiate such communication.

14. The method of claim 13, wherein the at least one persistent service is inventory taking device tracking, device recovery, software deployment, data deletion, firewall protection, reporting data deletion, data encryption, message notification, device messaging, device management, password changing, encryption key changing, rendering the device non-functional, device shut-off, device disablement, rendering at least one device function inoperable, software configuration software update or software upgrade.

15. The method of claim 13, further comprising the steps of:

the processor executing the first portion of code to determine whether the second portion of code is functioning in the electronic device, and

if the second portion of code is not functioning, the processor executing the first portion code to download another second portion of code from the server to the electronic device.

16. The method of claim 13, further comprising the steps of:

the processor executing the first portion of code to determine whether the second portion of code in the electronic device is current, and

if the second portion of code is not current, the processor executing the first portion of code to download a current second portion of code from the server to the electronic device.

17. The method of claim 13, wherein the second portion code is executed under control of the server.

18. The method of claim 13, further comprising the processor executing the first portion of code to perform the steps of:

receiving from the server a transmission of information in one or more packets, the information comprising;

a number that denotes a quantity of bytes to be read or written; and

optional data;

writing the data if the data is present; and

reading said quantity of bytes from a memory in the electronic device if the data is absent,

thereby further enabling or supporting the service.

19. The method of claim 18, wherein the information comprises an address, the method further comprising the processor executing the first portion of code to perform the steps of:

writing the data, if the data is present, to the memory starting at the address; and

reading from the memory, if the data is absent, starting from the address.

20. An electronic device connectable by a network to a remote server, the electronic device comprising a processor, a network interface and storage, wherein the electronic device storing code to enable, support or provide at least one persistent service with respect to the electronic device when executed, the code comprising:

a first portion of code and a second portion of code, wherein the first portion of code is located in the processor of the electronic device and configured when executed to cause the processor to;

determine whether a second portion of code configured to enable, support or provide the service is available in the electronic device;

when the second portion of code has been deleted or disabled in the electronic device, initiate download of the second portion of code from the server to restore the second portion of code; and

when the second portion of code is available in the electronic device, execute the second portion of code to enable, support or provide the service,

wherein the first portion of code is configured to provide functions that are part of a reduced set of functions of the second portion of code, and

wherein persistence of the service is enabled, supported or provided by the first portion of code being located in the processor, and wherein the first portion of code is configured to automatically initiate two-way communication with the server without user intervention to initiate such communication.