Secure platform management device

• US 8,307,055 B2
• Filed: 01/21/2009
• Issued: 11/06/2012
• Est. Priority Date: 01/22/2008
• Status: Active Grant

• Current Assignee: Absolute Software Corporation
• Original Assignee: Absolute Software Corporation
• Inventors: Banga, Gaurav
• Primary Examiner(s): RECEK, JASON D
• Application Number:
  US12/321,503
• Publication Number:
  US 20090187655A1
• Time in Patent Office: 1,385 Days
• Field of Search: 709/228, 709/229, 709220-222
• US Class Current: 709/222
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

A platform management device configured to control the functionality of a provisioned electronic device is disclosed. The platform management device includes a processor operative to execute commands. A memory maintains a series of instructions that when executed by the processor, causes the processor to: (1) establish a connection with a corresponding electronic device; and (2) transfer operating parameters to the corresponding electronic device, such that access to and operation of the electronic device may be controlled. Examples of device control include denying access to an unauthorized user and forcing the electronic device into a disabled state by remote operation from an authorized user.

Claims

1. A platform management device, comprising:

one or more non-transitory computer readable storage mediums storing one or more sequences of instructions, which when executed, cause;

transmitting operating parameters to a corresponding electronic device configured to read the operating parameters, wherein the operating parameters include a disable command,

wherein the corresponding electronic device comprises firmware to initialize and configure underlying hardware subsystems, the firmware causing the corresponding device to enter and maintain a disabled state that prevents the underlying hardware subsystems from running when (a) the disable command instructs the corresponding electronic device to enter the disabled state or (b) the corresponding electronic device does not receive the operating parameters after a predetermined event,

wherein the corresponding electronic device, upon being powered on, enters the disabled state, and

wherein the corresponding electronic device may only transition from the disabled state to an enabled state upon the corresponding electronic device (a) determining that a user of the corresponding electronic device is authenticated and (b) determining that the platform management device is physically connected to the corresponding electronic device; and

upon the platform management device determining that the corresponding electronic device is not provisioned with the platform management device, the platform management device exchanging a set of security keys with the corresponding electronic device to establish the platform management device authority to act as a controller for the corresponding electronic device.

2. The platform management device of claim 1, further including a biometric reader operative to authenticate a user, and wherein the operating parameters further includes authentication data, generated using the biometric reader, which indicates whether the user is authenticated.

3. The platform management device of claim 2, further including an audio device operative to provide an audible warning when the user is not authenticated.

4. The platform management device of claim 2, further including a visual indicator operative to provide a visual warning when the user is not authenticated.

5. The platform management device of claim 1, wherein the disabled state includes one member of the group consisting of:

standby, low power, keyboard disable and monitor disable.

6. The platform management device of claim 1, wherein the platform management device causes the disable command to be generated when the distance from the corresponding electronic device to the platform management device exceeds a predetermined threshold value.

7. The platform management device of claim 1, further comprising:

a disable button, which when depressed, causes a disable command to be issued from the platform management device to the corresponding electronic device, wherein receipt of the disable command by the corresponding electronic device causes the corresponding electronic device to enter the disabled state.

8. The platform management device of claim 1, wherein the platform management device is configured to:

upon determining that a button has been pressed on the platform management device, the platform management device transmitting to or displaying on a cellular phone a last known location of the corresponding electronic device.

9. A platform management device, comprising:

a storage device, and operating parameters stored on the storage device including a disable command, wherein a corresponding electronic device including firmware to initialize and configure underlying hardware subsystems, reads the operating parameters; and

a transmitter capable of transmitting the operating parameters to the corresponding electronic device,

wherein the firmware causes the corresponding electronic device to enter and maintain a disabled state wherein the underlying hardware systems are prevented from running when (a) the disable command instructs the corresponding electronic device to enter the disabled state or (b) the corresponding electronic device does not receive the operating parameters after a predetermined event,

wherein the corresponding electronic device, upon being powered on, enters the disabled state,

wherein the corresponding electronic device may only transition from the disabled state to an enabled state upon the corresponding electronic device (a) determining that a user of the corresponding electronic device is authenticated and (b) determining that the platform management device is physically connected to the corresponding electronic device, and

wherein the platform management device, upon determining that the corresponding electronic device is not provisioned with the platform management device, is configured to exchange a set of security keys with the corresponding electronic device to establish the platform management device authority to act as a controller for the corresponding electronic device.

10. A method for selectively enabling a device, comprising:

on a management device, storing operating parameters, wherein the operating parameters include a disable command;

transferring the operating parameters from the management device to a corresponding electronic device, the corresponding electronic device including firmware to initialize and configure underlying hardware subsystems,

wherein the firmware causes the electronic device to enter and maintain a disabled state wherein the underlying hardware subsystems are prevented from running when (a) the disable command instructs the corresponding electronic device to enter the disabled state or (b) the corresponding electronic device does not receive the operating parameters after a predetermined event,

wherein the corresponding electronic device, upon being powered on, enters the disabled state, and

wherein the corresponding electronic device may only transition from the disabled state to an enabled state upon the corresponding electronic device (a) determining that a user of the corresponding electronic device is authenticated and (b) determining that the platform management device is physically connected to the corresponding electronic device; and

upon the management device determining that the corresponding electronic device is not provisioned with the management device, the management device exchanging a set of security keys with the corresponding electronic device to establish the management device authority to act as a controller for the corresponding electronic device.

11. The method of claim 10, further comprising:

the management device accessing biometric reader coupled thereto to determine whether a user is authenticated, and wherein the operating parameters further includes authentication data, generated using the biometric reader, which indicates whether the user is authenticated.

12. The method of claim 10, further comprising:

the management device accessing biometric reader coupled thereto to determine whether a user is authenticated; and

upon the management device determining that the user is not authenticated, issuing an audible warning to indicate the user is not authenticated.

13. The method of claim 10, further comprising:

the management device accessing biometric reader coupled thereto to determine whether a user is authenticated; and

upon the management device determining that the user is not authenticated, displaying a visual indicator to indicate the user is not authenticated.

14. The method of claim 10, wherein the disabled state includes one member of the group consisting of:

standby, low power, keyboard disable and monitor disable.

15. The method of claim 10, further comprising:

the management device sending the disable command to the corresponding electronic device when a distance from the corresponding electronic device to the management device exceeds a predetermined threshold value.

16. The method of claim 10, further comprising:

upon determining that a disable button, resident on the management device, has been depressed, causing the disable command to be issued from the management device to the corresponding electronic device.

17. The method of claim 10, further comprising:

upon the management device determining that a button has been pressed on the management device, the management device transmitting to or displaying on a cellular phone a last known location of the corresponding electronic device.

18. A platform management device, comprising:

one or more non-transitory computer readable storage mediums storing one or more sequences of instructions, which when executed, cause;

transmitting operating parameters to a corresponding electronic device configured to read the operating parameters, wherein the operating parameters include a disable command,

wherein the corresponding electronic device comprises firmware to initialize and configure underlying hardware subsystems, the firmware causing the corresponding device to enter and maintain a disabled state that prevents the underlying hardware subsystems from running when (a) the disable command instructs the corresponding electronic device to enter the disabled state or (b) the corresponding electronic device does not receive the operating parameters after a predetermined event,

wherein the corresponding electronic device, upon being powered on, enters the disabled state,

wherein the corresponding electronic device may only transition from the disabled state to an enabled state upon the corresponding electronic device (a) determining that a user of the corresponding electronic device is authenticated and (b) determining that the platform management device is physically connected to the corresponding electronic device, and

wherein the corresponding electronic device comprises an accelerometer configured to determine when the corresponding electronic device is being moved, wherein the accelerometer, in response to determining the corresponding electronic device is being moved, instructs the firmware comprised on the corresponding electronic device to either emit an audible or visual signal to indicate that the corresponding electronic device is being moved.

19. A platform management device, comprising:

a storage device, and operating parameters stored on the storage device including a disable command, wherein a corresponding electronic device including firmware to initialize and configure underlying hardware subsystems, reads the operating parameters; and

a transmitter capable of transmitting the operating parameters to the corresponding electronic device,

wherein the firmware causes the corresponding electronic device to enter and maintain a disabled state wherein the underlying hardware systems are prevented from running when (a) the disable command instructs the corresponding electronic device to enter the disabled state or (b) the corresponding electronic device does not receive the operating parameters after a predetermined event,

wherein the corresponding electronic device, upon being powered on, enters the disabled state,

wherein the corresponding electronic device may only transition from the disabled state to an enabled state upon the corresponding electronic device (a) determining that a user of the corresponding electronic device is authenticated and (b) determining that the platform management device is physically connected to the corresponding electronic device, and

wherein the corresponding electronic device comprises an accelerometer configured to determine when the corresponding electronic device is being moved, wherein the accelerometer, in response to determining the corresponding electrical device is being moved, instructs the firmware comprised on the corresponding electronic device to either emit an audible or visual signal to indicate that the corresponding electronic device is being moved.

20. A method for selectively enabling a device, comprising:

on a management device, storing operating parameters, wherein the operating parameters include a disable command;

transferring the operating parameters from the management device to a corresponding electronic device, the corresponding electronic device including firmware to initialize and configure underlying hardware subsystems,

wherein the firmware causes the electronic device to enter and maintain a disabled state wherein the underlying hardware subsystems are prevented from running when (a) the disable command instructs the corresponding electronic device to enter the disabled state or (b) the corresponding electronic device does not receive the operating parameters after a predetermined event,

wherein the corresponding electronic device, upon being powered on, enters the disabled state, and

wherein the corresponding electronic device may only transition from the disabled state to an enabled state upon the corresponding electronic device (a) determining that a user of the corresponding electronic device is authenticated and (b) determining that the platform management device is physically connected to the corresponding electronic device;

an accelerometer determining when the corresponding electronic device is being moved; and

in response to the accelerometer determining that the corresponding electronic device is being moved, the accelerometer instructing the firmware comprised on the corresponding electronic device to either emit an audible or visual signal to indicate that the corresponding electronic device is being moved.