Patent Application
20080246774
Pay-as-you-go or pay-per-use business models have been used in many areas of commerce, from cellular telephones to commercial laundromats. In developing a pay-as-you go business, a provider, for example, a cellular telephone provider, offers the use of hardware (a cellular telephone) at a lower-than-market cost in exchange for a commitment to remain a subscriber to their network. In this specific example, the customer receives a cellular phone for little or no money in exchange for signing a contract to become a subscriber for a given period of time. Over the course of the contract, the service provider recovers the cost of the hardware by charging the consumer for using the cellular phone.
The pay-as-you-go business model is predicated on the concept that the hardware provided has little or no value, or use, if disconnected from the service provider. To illustrate, should the subscriber mentioned above cease to pay his or her bill, the service provider deactivates their account, and while the cellular telephone may power up, calls cannot be made because the service provider will not allow them. The deactivated phone has no “salvage” value, because the phone will not work elsewhere and the component parts are not easily salvaged nor do they have a significant street value. When the account is brought current, the service provider will reconnect the device to network and allow making calls.
This model works well when the service provider, or other entity taking the financial risk of providing subsidized hardware, has a tight control on the use of the hardware and when the device has little salvage value. This business model does not work well when the hardware has substantial uses outside the service provider's span of control. For example, a personal computer may be disassembled and sold as components, creating a potentially significant loss to the underwriter of subsidized equipment. In the case where an Internet service provider underwrites the cost of the personal computer with the expectation of future fees, this “untethered value” creates an opportunity for fraudulent subscriptions and theft. Pre-pay business models, where a user pays In advance for use of a subsidized, high value computing system environment have similar risks of fraud and theft.
Enforcing an operating policy that requires payment of subscription fees or pay-per-use fees will encourage users to meet their financial commitments to an underwriter that subsidizes the purchase price of the computer. However, enforcement circuits will draw the attention of hackers or thieves who wish to benefit themselves by stealing computer services or by stealing the computer itself and/or its components and peripherals.
This Summary is provided to introduce a selection of concepts in a simplified form that arc further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.
A computer configured to self-monitor and enforce compliance to an operating policy, such as a pay-per-use operating policy or a subscription operating policy, may use a secure execution environment component configured to impede access to peripheral and support circuits when non-compliance to the operating policy is determined. By having the peripheral itself also respond to conditions of noncompliance to an operating policy, an additional level of enforcement may be provided and may make the peripheral less attractive as a target of theft.
When the peripheral is a display device, the response to a condition of noncompliance to an operating policy may be implemented by limiting or disabling a portion of the display such that the screen output is not suitable for normal use. A different portion of the display, however, may remain decipherable in order to support enough of a user interface to enable a return to a full unrestricted use mode. The limited function mode of the display device may also be entered if thieves try to steal the display device itself or a component of the display, thus rendering the display device unusable. In another scenario, the display device may power up in a limited function mode to ensure that the display device does not operate with a non-pay-per-use system. Upon connection with a pay-per-use system and compliance to an operating policy, the display device may re-establish an unrestricted use mode and return to producing full quality output.
a illustrates an embodiment of a display distorter from
Although the following text sets forth a detailed description of numerous different embodiments, it should be understood that the legal scope of the description is defined by the words of the claims set forth at the end of this patent. The detailed description is to be construed as exemplary only and does not describe every possible embodiment since describing every possible embodiment would be impractical, if not impossible. Numerous alternative embodiments could be implemented, using either current technology or technology developed after the filing date of this patent, which would still Fill within the scope of the claims.
It should also be understood that, unless a term is expressly defined in this patent using the sentence “As used herein, the term ‘______’ is hereby defined to mean . . . ” or a similar sentence, there is no intent to limit the meaning of that term, either expressly or by implication, beyond its plain or ordinary meaning, and such term should not be interpreted to be limited in scope based on any statement made in any section of this patent (other than the language of the claims). To the extent that any term recited in the claims at the end of this patent is referred to in this patent in a manner consistent with a single meaning, that is done for sake of clarity only so as to not confuse the reader, and it is not intended that such claim term by limited, by implication or otherwise, to that single meaning. Finally, unless a claim element is defined by reciting the word “means” and a function without the recital of any structure, it is not intended that the scope of any claim element be interpreted based on the application of 35 U.S.C. §112, sixth paragraph.
The steps of the claimed method and apparatus are operational with numerous other general purpose or special purpose computing system environments or configurations. Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the methods or apparatus of the claims include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
The steps of the claimed method and apparatus may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The methods and apparatus may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
With reference to
Computer 110 typically includes a variety of computer readable media. Computer readable media can be any available media that can be accessed by computer 110 and includes both volatile and nonvolatile media, removable and non-removable media. By way of example, and not limitation, computer readable media may be computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can accessed by computer 110. Communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media. The term “modulated data signal” means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, infrared and other wireless media. Combinations of the any of the above should also be included within the scope of computer readable media.
The system memory 130 includes computer storage media in the form of volatile and/or nonvolatile memory such as read only memory (ROM) 131 and random access memory (RAM) 132. A basic input/output system 133 (BIOS), containing the basic routines that help to transfer information between elements within computer 110, such as during start-up, is typically stored in ROM 131. RAM 132 typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processing unit 120. By way of example, and not limitation,
The computer 110 may also include other removable/non-removable, volatile/nonvolatile computer storage media. By way of example only,
The drives and their associated computer storage media discussed above and illustrated in
The computer 110 may operate in a networked environment using logical connections to one or more remote computers, such as a remote computer 180. The remote computer 180 may be a personal computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to the computer 110, although only a memory storage device 181 has been illustrated in
When used in a LAN networking environment, the computer 110 is connected to the LAN 171 through a network interface or adapter 170. When used in a WAN networking environment, the computer 110 typically includes a modem 172 or other means for establishing communications over the WAN 173, such as the Internet. The modem 172, which may be internal or external, may be connected to the system bus 121 via the user input interface 160, or other appropriate mechanism. In a networked environment, program modules depicted relative to the computer 110, or portions thereof, may be stored in the remote memory storage device. By way of example, and not limitation,
A variety of functional circuits may be coupled to either the graphics and memory interface 204 or the I/O Interface 210. The graphics and memory interface 204 may be coupled to system memory 206 and a graphics processor 208, which may itself be connected to a display (not depicted). A mouse/keyboard 212 may be coupled to the I/O interface 210. A universal serial bus (USB) 214 may be used to interface external peripherals including flash memory, cameras, network adapters, etc. (not depicted). Board slots 216 may accommodate any number of plug-in devices, known and common in the industry. A local area network interface (LAN) 218, such as an Ethernet board may be connected to the I/O interface 210. Firmware, such as a basic input output system (BIOS) 220 may be accessed via the I/O interface 210. Nonvolatile memory 222, such as a hard disk drive, may also be coupled to the I/O interface 210.
A secure execution environment 224 is shown disposed in the I/O interface 210. An alternate embodiment, showing another secure execution environment 226 disposed in the graphics and memory interface 204 is also shown. While system configurations with more than one secure execution environment are supported, one embodiment is directed to a single instance of the secure execution environment. The secure execution environment 224 or secure execution environment 226 may be the interface to peripherals and support circuits to impede access in response to noncompliance to an operating policy.
The display device 300 may consist of a display controller 305 in communication with the computer. The display controller 305 may be in communication with a driver 310 which supports output to a portion of a screen 302. The communication channel 309 between the display controller 305 and the driver 310 may or may not be wireless. A security manager 315 may be in communication with a distorter 312 such that the security manager 315 directs the distorter 312 to activate when a condition corresponding to operation in the limited function mode occurs, thus distorting output to a portion of the screen. The communication channel 314 between the security manager 315 and the distorter 312 may or may not be wireless.
A condition corresponding to operation in the limited function mode may include receiving a command over the communication link 304 when the computer detects noncompliance with an operating policy and signals the display device 300 to enter a limited function mode. The command may be routed by the display controller 305 to the security manager 315. Alternatively, the command may be intercepted by the display controller 305 and forwarded to the security manager 315. In another embodiment, the command bypasses the display controller 305 and arrives directly at the security manager 315. The security manager 315 may also include a cryptographic function for verifying commands from the computer. Of course, other embodiments are possible.
Other conditions corresponding to operation in the limited function mode may include the initial operation of the display device 300 after application of power or after a warm restart, the display device 300 detecting degraded or lost communication with the computer, and the display device 300 detecting a loss of communication with a component of the display device 300. Any of these conditions occurring independently may be sufficient for the display device 300 to activate distortion to a portion of the screen 302.
Enabling output to the full screen 302 may occur when the computer detects compliance with the operating policy and sends a command over the communication link 304 instructing the display device 300 to cease activity in the limited function mode. This command may be received after the display device 300 is integrated into a pay-per-use environment and the communication link 304 is of sufficient quality. The command to cease operation in the limited function mode may be routed from the communication link 304 to the security manager 315 such as in the embodiments described in paragraph [0034]. When the command is received by the security manager 315, the security manager 315 may direct the distorter 312 to cease distortion, provided that all communication with the computer and display device components are operating at a specified level of quality.
The display device 300 may use different technologies. In one embodiment, the screen 302 is a LCD (liquid crystal display), the driver 310 is a line driver integrated circuit, and the distorter 312 generates RF (radio frequency) interference to distort the output of the line driver. In another embodiment, the screen 302 is a CRT (cathode ray tube), the driver 310 is an electron beam generator, and the distorter 312 is an electromagnetic field generator to distort the electron beam. In a third embodiment, the display uses plasma display technology, the driver 310 uses electrodes to charge gas ions in the cells of the screen 302, and the distorter 312 uses control circuitry to selectively charge the electrodes in a manner such that the output to the screen 302 is distorted. Other embodiments using organic light emitting diode (OLED), surface-conduction electron-emitter display (SED), video projection, and electrophoretic display and proper drivers are possible and are contemplated.
Different architectures may be used that support different embodiments, by varying combinations of multiple or single security managers 315, distorters 312, and/or drivers 310. As an example and not a limitation, in one embodiment, the display controller 305 and the security manager 315 are the same entity in the display device 300 while in another embodiment, they are separate entities. In a different embodiment, there is one distorter 312 in communication with multiple drivers 310. In yet another embodiment, there are multiple distorters 312 in communication with one-on-one with multiple drivers 310. In yet another embodiment, a single security manager 315 is in communication to a plurality of distorters 312.
In another embodiment, communication link 304 to the display device 300 may be wireless. In one scenario, the wireless communication to the display device 300 over communication link 304 is degraded and may cause the limited function mode condition. In another embodiment scenario, a wireless signal is communicated over communication link 304 to the display device 300 to degrade the display. In yet other embodiments, communication channel 309 may be wireless and communication channel 314 may be wireless; if either communication channel 300 or 314 is degraded, the limited function mode condition may occur. Of course, other embodiments are possible.
a is illustrates one architectural embodiment of a display device 400. In this embodiment, the display controller 305 and security manager 415 are separate single entities, the security manager 415 is in communication to multiple distorters 412a-412c. there is a plurality of drivers 410a-f, and each distorter 412a-c is in communication with a selected driver 410a-c. When the computer directs the display device 400 to enter a limited function mode, this information may be communicated via the display controller 305 to the security manager port 433. The security manager controller 437 interprets the command and may store the limited function mode state in the security manager memory 435, and then may direct the distorters 412a-c to activate distortion. The security manager 437 may also direct the distorters 412a-c to activate when a loss or degradation of communication with the computer is detected. Note that this architecture may distort a portion of the screen 402's output corresponding to drivers 410a-c. The output corresponding to drivers 410d-f may not be affected.
A detailed view of the distorter 412 is illustrated by
If the condition is a command to cease operation in the limited function mode 710, the limited function off state may be stored 712, and communication quality may be checked 716. If the quality is acceptable, output maybe enabled to the full screen 724, otherwise, output to a portion of the screen may be disabled 722. The stored state 720 may be retained and checked 718 with each condition received 706 to safeguard for overlapping conditions when commands are sent by the computer and the communication channel quality is unstable. After enabling 724 or disabling 722 output, the security manager is ready to respond to another condition 726.
The embodiment in
Although the forgoing text sets forth a detailed description of numerous different embodiments, it should be understood that the scope of the patent is defined by the words of the claims set forth at the end of this patent. The detailed description is to be construed as exemplary only and does not describe every possible embodiment because describing every possible embodiment would be impractical, if not impossible. Numerous alternative embodiments could be implemented, using either current technology or technology developed after the filing date of this patent, which would still fall within the scope of the claims.
Thus, many modifications and variations may be made in the techniques and
structures described and illustrated herein without departing from the spirit and scope of the present claims. Accordingly, it should be understood that the methods and apparatus described herein are illustrative only and are not limiting upon the scope of the claims.
