Recipient-specific feature activation

• US 9,838,250 B1
• Filed: 04/04/2014
• Issued: 12/05/2017
• Est. Priority Date: 04/04/2014
• Status: Active Grant

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: Ali, Wajahat
• Primary Examiner(s): Donabed, Ninos
• Application Number:
  US14/245,177
• Time in Patent Office: 1,341 Days
• Field of Search: None
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

The present disclosure relates to recipient-specific feature activation. In an embodiment, a device may store firmware for executing a superset of device features associated with an intended recipient. The device may be configured to limit device functions to a subset of the device features or a specific firmware configuration based on an indication remotely received from an activation authority. Intended recipients may include specific customers of the device, an intended market or region, or other recipients.

Claims

1. A method comprising:

determining a set of features to include in a device, the set of features specifically associated with an intended recipient;

storing firmware adapted to execute the set of features to the device based on the intended recipient;

receiving a feature selection request;

providing a random data string based on the feature selection request;

receiving at the device, from an activation entity remote from the device, an activation package including;

an indication limiting the device to performing a subset of the set of features;

an encrypted copy of the random data string;

decrypting the encrypted copy based on a stored key to authenticate the activation package;

permanently disabling features of the set of features identified in the activation package; and

remotely enabling the subset on the device.

2. The method of claim 1 further comprising:

determining the set of features to include based on prior orders from the intended recipient.

3. The method of claim 1 further comprising:

determining the set of features to include based on the intended recipient requesting that the set of features be made available to the intended recipient.

4. The method of claim 1 further comprising:

shipping the device from a manufacturing location after storing the firmware and prior to enabling the subset.

5. The method of claim 1 further comprising:

storing firmware capable of executing the set of features to a plurality of devices for the intended recipient; and

based on selections by the specific intended recipient, remotely enabling a first subsets of features on a first device of the plurality of devices and remotely enabling a second subset of features on a second device of the plurality of devices.

6. The method of claim 1 further comprising:

remotely enabling additional features from the set of features after remotely enabling the subset.

7. The method of claim 1 further comprising:

remotely enabling the subset includes permanently deactivating features from the set of features outside the subset.

8. The method of claim 1 further comprising:

remotely enabling the subset includes submitting the activation package for the device, the activating package identifying the subset and including security information to authenticate the activation package; and

loading, in the device, security data configured for verifying the security information of the activation package.

9. A device comprising:

a storage medium storing firmware for executing a superset of device features, the superset specifically associated with an intended recipient of the device;

a processor configured to;

receive a feature selection request;

provide a random data string based on the feature selection request;

receive, from an activation entity remote from the device, an activation package including;

an indication limiting the device to performing a subset of the superset;

an encrypted copy of the random data string;

decrypt the encrypted copy based on a stored key to authenticate the activation package;

permanently disable features of the superset identified in the activation package; and

implement an operating state including the subset.

10. The device of claim 9, the processor further configured to:

provide identifying information to authenticate the device to the activation entity.

11. The device of claim 9 further comprising:

receive the activation package including the indication and security information;

the processor further configured to;

authenticate the activation package based on the security information; and

not implement the operating state including the subset when the activation package is not authenticated.

12. The device of claim 11 further comprising:

the security information includes digitally signed data;

the processor further configured to authenticate the digitally signed data using a key stored on the device.

13. The device of claim 9, the processor further configured to:

limiting the device to performing the subset by permanently deactivating device features of the superset based on the indication.

14. The device of claim 9, further comprising:

the intended recipient includes a customer having purchased the device.

15. The device of claim 9, the processor configured to receive the indication from the activation entity over a network.

16. A device comprising:

a data storage device including;

a memory storing firmware for executing a superset of features specifically determined based on an intended recipient, the firmware loaded to the device during a manufacturing process and adapted to have multiple potential configurations of subsets of features from the superset to control operation of the device;

an interface to;

receive a feature selection request;

receive, from an activation entity remote from the device, an indication limiting the device to implementing a selected configuration from the multiple potential configurations;

a processor configured to;

provide a random data string based on the feature selection request;

receive an activation package including the indication and an encrypted copy of the random data string;

decrypt the encrypted copy based on a stored key to authenticate the activation package;

permanently disable features of the superset identified in the activation package; and

operate the device based on the selected configuration.

17. The device of claim 16, the processor further configured to provide identifying information to authenticate the device to the activation entity.

18. The device of claim 16 the processor further configured to limit the device from performing features from the superset not included in the selected configuration.