Independent Computation Environment and Provisioning of Computing Device Functionality

• US 20080005560A1
• Filed: 06/29/2006
• Published: 01/03/2008
• Est. Priority Date: 06/29/2006
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Westerinen, William J., Frank, Alexander, Phillips, Thomas G., Duffus, James
• Application Number:
  US11/427,666
• Publication Number:
  US 20080005560A1
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Techniques are described which provide an independent computation environment. The independent computation environment is contained at least in part in a set of one or more hardware components and configured to host a provisioning module that is executable to provision functionality of the computing device according to a wide variety of factors. In an implementation, when the provisioning module determines that particular functionality is referenced in an inclusion list, the computing device is permitted to access the particular functionality. When the provisioning module determines that the particular functionality is referenced in an exclusion list, the computing device is prevented from accessing the particular functionality.

Claims

1. A method comprising executing a provisioning module in an independent computation environment that is contained at least in part in one or more hardware components of a computing device to bind network access of the computing device to one or more web services.

2. A method as described in claim 1, wherein the provisioning module binds the computing device to one or more web services through use of an inclusion list.

3. A method as described in claim 1, wherein the provisioning module binds the computing device to one or more web services through use of an exclusion list.

4. A method as described in claim 1, wherein:

the computing device is bound such that access to the one or more web services is made available without use of personally identifiable information of a user; and

access to another web service is made available through use of personally identifiable information.

5. A method as described in claim 1, wherein the independent computation environment is protected from unauthorized access by other modules of the computing device including an operating system.

6. A method comprising:

providing a computing device bound to access one or more web services of a service provider through use of a provisioning module that is executable in an independent computation environment contained at least in part in one or more hardware components of the computing device; and

subsidizing at least a portion of a purchase price of the computing device.

7. A method as described in claim 6, wherein the computing device is bound such that access to the one or more web services is made available without use of personally identifiable information of a user.

8. A method as described in claim 6, wherein the subsidizing is performed by the service provider.

9. A method as described in claim 6, wherein the subsidizing is performed through collection of ad revenue by the service provider.

10. A method as described in claim 6, wherein:

the subsidizing is performed through collection of fees from a user of the computing device to maintain a balance on the computing device; and

the balance is used by the provisioning module to manage access to functionality of the computing device.

11. A method as described in claim 6, wherein the binding is performed through use of an inclusion list that specifies web services that are permissible to access by the computing device and an exclusion list that specifies web services that are not permitted to be accessed by the computing device.

12. A computing device comprising:

secure storage configured to maintain;

an inclusion list that references functionality that is permitted to be accessed via the computing device; and

an exclusion list that references functionality that is not permitted to be accessed via the computing device; and

one or more hardware components configured to provide an independent computation environment, in which, a provisioning module is executable to identify functionality and determine whether access to the identified functionality is permitted through use of the inclusion and exclusion lists.

13. A computing device as described in claim 12, wherein:

the secure storage is further configured to maintain conditions; and

the provisioning module is executable to determine how access is to be permitted to the identified functionality when the identified functionality is not referenced by the inclusion list and the exclusion list.

14. A computing device as described in claim 13, wherein the conditions permit the identified functionality to execute on the processor for a specified number of cycles, after which, execution is blocked.

15. A computing device as described in claim 13, wherein the independent computation environment is protected from unauthorized access by other modules of the computing device including an operating system.

16. A computing device as described in claim 13, wherein the inclusion list or the exclusion list expires after a predetermined amount of time, after which, a hardware lock mode is implemented by the provisioning module.

17. A computing device as described in claim 13, wherein the inclusion list or the exclusion list includes one or more conditions regarding enablement of the particular functionality.

18. A method as described in claim 17, wherein at least one of the conditions specifies:

a particular amount of time, during which, access to the particular functionality is permitted;

or

that payment is to be collected by a service provider before enabling the particular functionality.

19. A method as described in claim 17, wherein at least one of the conditions specifies proof of consumption of an advertisement.

20. A computing device as described in claim 13, wherein:

the particular functionality is identified using a first technique to determine whether the particular functionality is referenced in the inclusion list;

the particular functionality is identified using a second technique to determine whether the particular functionality is referenced in the exclusion list; and

the first technique is different from the second technique.