Providing power control to an electronic device using authentication

• US 9,485,655 B1
• Filed: 02/11/2015
• Issued: 11/01/2016
• Est. Priority Date: 02/11/2015
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Pirrotta, Joseph M.
• Primary Examiner(s): Taylor, Barry
• Application Number:
  US14/619,274
• Time in Patent Office: 629 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 52/0274 by switching on or off the equipment or parts thereof
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

A technique provides power control for an electronic device. The technique involves receiving a “turn off” command from a user of the electronic device, the “turn off” command directing the electronic device to turn off. The technique further involves, in response to the “turn off” command, invoking an authentication operation to authenticate the user, the authentication operation providing an authentication result indicating whether the electronic device considers the user to be an authorized operator of the electronic device. The technique further involves performing a power control operation in response to the authentication result, the power control operation (i) powering down location identification circuitry when the authentication result indicates that the electronic device considers the user to be an authorized operator, and (ii) maintaining power to the location identification circuitry when the authentication result indicates that the electronic device considers the user not to be an authorized operator.

Claims

1. A method of operating an electronic device, the method comprising:

receiving, by the electronic device, a “

turn off”

command from a user of the electronic device, the “

turn off”

command directing the electronic device to turn off;

in response to the “

turn off”

command, invoking, by the electronic device, an authentication operation to authenticate the user, the authentication operation providing an electronic power control authentication result indicating whether the electronic device considers the user to be an authorized operator of the electronic device; and

performing, by the electronic device, a power control operation in response to the electronic power control authentication result, the power control operation (i) powering down location identification circuitry of the electronic device when the electronic power control authentication result indicates that the electronic device considers the user to be an authorized operator of the electronic device, and (ii) maintaining power to the location identification circuitry of the electronic device when the electronic power control authentication result indicates that the electronic device considers the user not to be an authorized operator of the electronic device;

wherein invoking the authentication operation to authenticate the user includes;

in response to the “

turn off”

command, prompting the user to input a user credential,

after prompting the user, receiving the user credential from the user and performing an evaluation operation on the user credential to determine whether the user is an authorized operator of the electronic device, and

outputting the electronic power control authentication result based on the evaluation operation to indicate whether the electronic device considers the user to be an authorized operator of the electronic device;

the method further comprising;

incrementing a counter which stores a current count of unsuccessful authentication attempts in response to each determination that the user is not an authorized operator of the electronic device,

resetting the counter in response to a determination that the user is an authorized operator of the electronic device, and

performing a remedial operation when the current count of unsuccessful authentication attempts stored by the counter reaches a predefined threshold;

wherein the electronic device includes memory which stores firmware; and

wherein performing the remedial operation includes;

disabling the electronic device from performing an upgrade to the firmware until the electronic device receives a “

proper reset”

command.

2. A method as in claim 1 wherein the electronic device includes other circuitry which is different from the location identification circuitry;

and wherein performing the power control operation includes;

(i) powering down both the location identification circuitry and the other circuitry of the electronic device when the electronic power control authentication result indicates that the electronic device considers the user to be an authorized operator of the electronic device, and

(ii) powering down the other circuitry of the electronic device while continuing to provide power to the location identification circuitry of the electronic device when the electronic power control authentication result indicates that the electronic device considers the user not to be an authorized operator of the electronic device.

3. A method as in claim 2 wherein the location identification circuitry includes global satellite positioning (GPS) circuitry and communications circuitry;

and wherein the method further comprises;

after powering down the other circuitry of the electronic device, operating the GPS circuitry to provide geolocation data which identifies a current geolocation of the electronic device and operating the communications circuitry to send an electronic message from the electronic device to an external security server, the electronic message including the geolocation data which identifies the current geolocation of the electronic device.

4. A method as in claim 3 wherein the electronic device is an electronic mobile apparatus;

wherein the communications circuitry is a wireless transceiver of the electronic mobile apparatus; and

wherein operating the communications circuitry includes;

transmitting the electronic message from the wireless transceiver of the electronic mobile apparatus to the external security server.

5. A method as in claim 4 wherein receiving the user credential includes obtaining a set of current user authentication factors;

wherein performing the evaluation operation includes;

performing a comparison operation between the set of current user authentication factors and a set of expected user authentication factors, and

outputting a comparison result indicating whether the set of current user authentication factors matches the set of expected user authentication factors; and

wherein performing the remedial operation further includes;

transmitting an alert message from the electronic device to the external security server, the alert message (i) identifying the current geolocation of the electronic device and (ii) indicating that the counter which stores the current count of unsuccessful authentication attempts has reached the predefined threshold.

6. A method as in claim 3 wherein the electronic device is stationary computerized equipment;

wherein the communications circuitry is a wireless transceiver of the stationary computerized equipment; and

wherein operating the communications circuitry includes;

transmitting the electronic message from the wireless transceiver of the stationary computerized equipment to the external security server.

7. A method as in claim 6 wherein receiving the user credential includes obtaining a set of current user authentication factors;

wherein performing the evaluation operation includes;

performing a comparison operation between the set of current user authentication factors and a set of expected user authentication factors, and

outputting a comparison result indicating whether the set of current user authentication factors matches the set of expected user authentication factors; and

wherein performing the remedial operation further includes;

transmitting an alert message from the electronic device to the external security server, the alert message (i) identifying the current geolocation of the electronic device and (ii) indicating that the counter which stores the current count of unsuccessful authentication attempts has reached the predefined threshold.

8. A method as in claim 3 wherein the electronic device is vehicle;

wherein the communications circuitry is a wireless transceiver of the vehicle; and

wherein operating the communications circuitry includes;

transmitting the electronic message from the wireless transceiver of the vehicle to the external security server.

9. A method as in claim 2 wherein receiving the user credential includes obtaining a set of current user authentication factors;

and wherein performing the evaluation operation includes;

performing a comparison operation between the set of current user authentication factors and a set of expected user authentication factors, and

outputting a comparison result indicating whether the set of current user authentication factors matches the set of expected user authentication factors.

10. A method as in claim 2 wherein receiving the user credential includes obtaining a set of current user authentication factors;

and wherein performing the evaluation operation includes;

performing a risk-based authentication operation which provides an electronic numerical risk score indicating an overall measure of riskiness based on aggregating sub-scores resulting from individual evaluations of the current user authentication factors, and

outputting, as the electronic power control authentication result, a “

success”

message when the electronic numerical risk score is less than a predetermined risk threshold to indicate that authentication is successful and a “

fail”

message when the electronic numerical risk score is greater than the predetermined risk threshold to indicate that authentication is unsuccessful.

11. A method as in claim 1 wherein performing the remedial operation further includes:

locking out the user to prevent the user from normally operating the electronic device until the electronic device receives a “

proper reset”

command.

12. A method as in claim 11, further comprising:

receiving, as the “

proper reset”

command, a reset credential which is different from the user credential, and

in response to the reset credential, resetting the counter and allowing the user to normally operate the electronic device.

13. A method as in claim 1 wherein performing the remedial operation further includes:

transmitting an alert message from the electronic device to an external security server, the alert message (i) identifying a current location of the electronic device and (ii) indicating that the counter which stores the current count of unsuccessful authentication attempts has reached the predefined threshold.

14. A method as in claim 1 wherein prompting the user to input the user credential includes:

visibly displaying a prompt that requests entrance of a password to turn off the electronic device, and

in response to the prompt, receiving the user credential for use in authentication.

15. A method as in claim 1 wherein performing the remedial operation further includes:

in response to the current count of unsuccessful authentication attempts stored by the counter reaching the predefined threshold, directing the electronic device to continuously ring as an alert that the electronic device has been stolen.

16. A method as in claim 1 wherein performing the remedial operation further includes:

in response to the current count of unsuccessful authentication attempts stored by the counter reaching the predefined threshold, erasing data from the memory to prevent a thief in possession of the electronic device from having access to the data.

17. A method as in claim 1 wherein performing the evaluation operation on the user credential includes:

sending an authentication request that includes the user credential to a remote authentication server, the remote authentication server being constructed and arranged to output the electronic power control authentication result in response to the authentication request.

18. An electronic device, comprising:

location identification circuitry;

memory; and

control circuitry coupled to the location identification circuitry and the memory, the memory storing instructions which, when carried out by the control circuitry, cause the control circuitry to;

receive a “

turn off”

command from a user of the electronic device, the “

turn off”

command directing the electronic device to turn off,

in response to the “

turn off”

command, invoke an authentication operation to authenticate the user, the authentication operation providing an electronic power control authentication result indicating whether the electronic device considers the user to be an authorized operator of the electronic device, and

perform a power control operation in response to the electronic power control authentication result, the power control operation (i) powering down the location identification circuitry when the electronic power control authentication result indicates that the electronic device considers the user to be an authorized operator of the electronic device, and (ii) maintaining power to the location identification circuitry when the electronic power control authentication result indicates that the electronic device considers the user not to be an authorized operator of the electronic device;

wherein the control circuitry, when invoking the authentication operation, is constructed and arranged to;

in response to the “

turn off”

command, prompt the user to input a user credential,

after prompting the user, receive the user credential from the user and perform an evaluation operation on the user credential to determine whether the user is an authorized operator of the electronic device, and

output the electronic power control authentication result based on the evaluation operation to indicate whether the electronic device considers the user to be an authorized operator of the electronic device;

wherein the instructions further cause the control circuitry to;

increment a counter which stores a current count of unsuccessful authentication attempts in response to each determination that the user is not an authorized operator of the electronic device,

reset the counter in response to a determination that the user is an authorized operator of the electronic device, and

perform a remedial operation when the current count of unsuccessful authentication attempts stored by the counter reaches a predefined threshold;

wherein the memory of the electronic device stores firmware; and

wherein the control circuitry, when performing the remedial operation, is constructed and arranged to;

disable the electronic device from performing an upgrade to the firmware until the electronic device receives a “

proper reset”

command.

19. A computer program product having a non-transitory computer readable medium which stores a set of instructions to operate an electronic device, the set of instructions, when carried out by the electronic device, causing the electronic device to perform a method of:

receiving a “

turn off”

command from a user of the electronic device, the “

turn off”

command directing the electronic device to turn off;

in response to the “

turn off”

command, invoking an authentication operation to authenticate the user, the authentication operation providing an electronic power control authentication result indicating whether the electronic device considers the user to be an authorized operator of the electronic device; and

performing a power control operation in response to the electronic power control authentication result, the power control operation (i) powering down location identification circuitry of the electronic device when the electronic power control authentication result indicates that the electronic device considers the user to be an authorized operator of the electronic device, and (ii) maintaining power to the location identification circuitry of the electronic device when the electronic power control authentication result indicates that the electronic device considers the user not to be an authorized operator of the electronic device,

wherein invoking the authentication operation to authenticate the user includes;

in response to the “

turn off”

command, prompting the user to input a user credential,

after prompting the user, receiving the user credential from the user and performing an evaluation operation on the user credential to determine whether the user is an authorized operator of the electronic device, and

outputting the electronic power control authentication result based on the evaluation operation to indicate whether the electronic device considers the user to be an authorized operator of the electronic device;

the method further comprising;

incrementing a counter which stores a current count of unsuccessful authentication attempts in response to each determination that the user is not an authorized operator of the electronic device,

resetting the counter in response to a determination that the user is an authorized operator of the electronic device, and

performing a remedial operation when the current count of unsuccessful authentication attempts stored by the counter reaches a predefined threshold; and

wherein performing the remedial operation includes;

disabling the electronic device from performing an upgrade to the set of instructions in the non-transitory computer readable medium until the electronic device receives a “

proper reset”

command.