Computing device limiting mechanism

• US 20070136570A1
• Filed: 08/31/2006
• Published: 06/14/2007
• Est. Priority Date: 12/09/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Xu, Zhangwei, Frank, Alexander, Westerinen, William, Steeb, Curt
• Granted Patent: US 7,669,048 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters

Abstract

Described is a technology by which a computing device is booted into a normal mode of operation or a limited mode of operation, depending on whether the computing device was operating correctly (e.g., with respect to policy) prior to a reboot. The reboot may be forced. Examples of incorrect state include an overdue payment on a leased computer, or improper execution of certain important software. A metering mechanism evaluates the state of the computing device, and when an incorrect state is detected, configures the computing device for operation in the limited mode, by setting the computing device to boot via one boot path (e.g., a limited-mode BIOS) instead of another boot path (e.g., a normal-mode BIOS). A BIOS selector switches to the limited BIOS on the next reboot, wherein the computing device is restricted to the limited mode of operation (regardless of subsequent reboots) until the correct state is restored.

Claims

1. At least one computer-readable medium having computer-executable instructions, which when executed perform steps, comprising:

executing logic to determine whether a computing device is operating in a correct operating state; and

when the computing device is not operating in the correct operating state, configuring the computing device such that a subsequent reboot of the computing device boots the computing device into a limited mode of operation.

2. The computer-readable medium of claim 1 having further computer-executable instructions comprising, forcing a reboot when the computing device is not operating in the correct operating state.

3. The computer-readable medium of claim 1 wherein executing the logic to determine whether the computing device is operating in the correct operating state comprises metering state data.

4. The computer-readable medium of claim 1 wherein configuring the computing device such that a subsequent reboot of the computing device boots the computing device into the limited mode of operation comprises setting the computing device to boot from a different BIOS or other booting code with respect to the BIOS or booting code from which the computing device was currently booted.

5. The computer-readable medium of claim 1 having further computer-executable instructions comprising, detecting that the computing device is not operating in the correct operating state and configuring the computing device such that the subsequent reboot of the computing device boots the computing device into the limited mode of operation, rebooting the computing device into the limited mode of operation, detecting that the computing device is modified for subsequent operation in the correct operating state, and reconfiguring the computing device such that a subsequent reboot of the computing device boots the computing device into a normal mode of operation.

6. The computer-readable medium of claim 5 having further computer-executable instructions comprising, rebooting the computing device into the normal mode of operation, and re-executing the logic to determine whether the computing device is operating in a correct operating state.

7. In a computing device, a method comprising:

detecting that the computing device is not compliant with policy data;

rebooting the computing device into a limited mode of operation; and

restricting the computing device to remain in the limited mode of operation until the computing device is compliant with the policy data.

8. The method of claim 7 wherein detecting that the computing device is not compliant with policy data comprises determining that the computing device needs data from a provisioning source.

9. The method of claim 7 wherein rebooting the computing device into the limited mode of operation comprises booting the computing device from a boot path corresponding to the limited mode of operation instead of a boot path corresponding to a normal mode of operation.

10. The method of claim 9 wherein restricting the computing device to remain in the limited mode of operation comprises setting data that configures the computing device to reboot using the boot path corresponding to the limited mode of operation.

11. In a computing device, a system comprising:

a metering mechanism that observes a state of the computing device; and

a selector coupled to the metering mechanism to operate the computing device using a first set of instructions including first boot path instructions when the metering device indicates the computing device was operating in one state prior to reboot, or to operate the computing device using a second set of instructions including second boot path instructions when the metering device indicates that the computing device was operating in another state prior to reboot.

12. The system of claim 11 wherein the first set of instructions including the first boot path instructions is contained within a first BIOS component, and wherein the second set of instructions including the second boot path instructions is contained within a second BIOS component.

13. The system of claim 11 wherein the first boot path instructions and the second first boot path instructions are contained within a single flash memory chip.

14. The system of claim 11 wherein the embedded controller and the metering mechanism are incorporated into an application-specific integrated circuit.

15. The system of claim 11 wherein the application-specific integrated circuit is incorporated into a multiple-chip module, and wherein the multiple-chip module further includes at least one component that contains the first set of instructions and the second set of instructions.

16. The system of claim 11 wherein the metering mechanism, the selector, and the second set of instructions are contained in a secure execution environment incorporated at least in part in a separate hardware component.

17. The system of claim 11 wherein the metering mechanism, the selector, and the second set of instructions are contained in a secure execution environment incorporated at least in part into a hardware component that performs at least one other computing function.

18. The system of claim 11 wherein the computing device comprises a personal computer, and wherein the metering mechanism, the selector, and the second set of instructions are contained in a secure execution environment coupled to a Southbridge of the personal computer system.

19. The system of claim 11 wherein the first set of instructions corresponds to a normal operating mode, and wherein the second set of instructions corresponds to a limited operating mode.

20. The system of claim 19 wherein the limited operating mode is capable of executing logic to restore the state of the computer to use the first set of instructions, including the first boot path instructions.