Portable desktop device and method of host computer system hardware recognition and configuration

• US 9,792,441 B2
• Filed: 02/22/2016
• Issued: 10/17/2017
• Est. Priority Date: 09/30/2009
• Status: Active Grant

• Current Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Original Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Inventors: Hamid, Laurence
• Primary Examiner(s): Choudhury, Zahid
• Application Number:
  US15/049,985
• Publication Number:
  US 20170024564A1
• Time in Patent Office: 603 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/4411 Configuring for operating with peripheral devices; Loading of device drivers

Abstract

A portable desktop device and method for host computer system hardware recognition and configuration are provided. The portable desktop device causes on a first boot, the host computer system to recognize hardware devices connected thereto, and to configure hardware configuration files of the portable desktop O/S in accordance with the recognized hardware. Once the hardware configuration files have been configured, the system is rebooted. On the second boot, the host computer determines that the portable desktop has been configured for its hardware, and initiates start-up of the portable desktop.

Claims

1. A portable device comprising:

hardware for coupling to a host system connected to a number of hardware devices; and

memory storage comprising a portable operating system for execution on the host system;

wherein;

on a first boot the host system recognizes at least one of the hardware devices and configures at least one hardware configuration file in the memory storage, in accordance with the at least one recognized hardware device;

on the first boot, the host system sets a flag indicating that the portable device has been configured;

the host system reboots to execute the portable operating system on a second boot, wherein hardware devices which meet a security specification are enabled and hardware devices which fall below the security specification are disabled, based on the at least one hardware configuration file; and

on the second boot, the host system resets the flag indicating that the portable device is other than configured.

2. The device of claim 1, further comprising authentication hardware on the portable device for authentication of a user, and a security process configured to notify the host system whether the authentication has failed or succeeded.

3. The device of claim 2, wherein the authentication hardware comprises biometric authentication hardware for authentication of the user.

4. The device of claim 2, wherein the authentication hardware comprises input hardware configured for receiving an encryption key for authentication of the user.

5. The device of claim 1, wherein at least one of the hardware devices is disabled based on a security concern in accordance with the security specification.

6. The device of claim 1, further comprising the memory storage having portable operating systems for operating separate portable environments on the host system.

7. The device of claim 6, wherein users of each portable environment are separated, such that each user can access one of the portable environments within an independent area of the memory storage accessible only to the respective portable environment.

8. The device of claim 1, wherein the portable operating system is pre-configured for the host system and hardware devices, the security specification ensuring a level of security for each such hardware device enabled for use by the portable environment.

9. A method of operating a host computer with a portable device, the method comprising:

on a first boot of the host computer from the portable device;

recognizing hardware connected to the host computer;

configuring a hardware configuration file stored in memory of the portable device, in accordance with the recognized hardware; and

setting a flag indicating that the portable device has been configured;

rebooting the host computer to execute a portable environment on a second boot from the portable device; and

on the second boot;

operating a subset of the recognized hardware in the portable environment, wherein operation of hardware that meets a security specification is enabled and operation of hardware that falls below the security specification is restricted, based on the hardware configuration file; and

resetting the flag to indicate that the portable device is other than configured.

10. The method of claim 9, further comprising checking the hardware configuration file for minimal functionality according to a threshold stored with the security specification.

11. The method of claim 10, further comprising ceasing recognizing the hardware in a case where the host computer has other than the minimal functionality.

12. The method of claim 10, further comprising storing a log or record of failure of the host computer to have the minimal functionality.

13. The method of claim 9, further comprising invoking a security process for authentication of a user of the portable device, wherein the host computer invokes the security process for execution on the portable device and the security process notifies the host computer whether the authentication has succeeded.

14. The method of claim 13, wherein the security process determines user authentication information requested of the user, the user authentication information comprising biometric information or an encryption key.

15. The method of claim 13, wherein a full functionality of the portable environment is not enabled until the security process has authenticated the user.

16. The method of claim 9, further comprising preventing the portable environment from modifying the hardware configuration file.

17. A portable device comprising non-transitory computer readable storage media having program data stored thereon, the program data executable on a host processor to perform a method comprising:

recognizing hardware connected to the host processor;

configuring a hardware configuration file for a portable operating system stored in memory of the portable device, in accordance with the recognized hardware;

setting a flag indicating that the portable device has been configured;

rebooting the host processor to execute the portable operating system on the host processor;

enabling operation of recognized hardware that meets a security specification for the portable device, based on the hardware configuration file;

restricting operation of recognized hardware that falls below the security specification, based on the hardware configuration file; and

resetting the flag to indicate that the portable device is other than configured.

18. The device of claim 17, further comprising authentication hardware for authenticating a user of the device, the authentication hardware comprising biometric authentication hardware or input hardware for receiving a bar code, encryption key, combination or password.

19. The device of claim 17, wherein the security specification ensures a level of security for each hardware device enabled for use by the portable environment.

20. The device of claim 17, wherein the security specification prevents data from being stored locally on the host system.