Patent Application
20090248827
Embodiments of the disclosure relate to the field of data processing, in particular, to connection and network independent methods and apparatuses for deterring or thwarting theft of processor based devices.
With computing devices getting more and more ubiquitous and mobile, and with user-data becoming more distributed amongst laptops, desktops, servers, and handhelds, the theft of processor based devices, from desktops to mobile devices, has also increased. In response, the computing industry has developed various techniques to physically recover processor based devices, but typically these techniques employ synchronous protocols requiring a theft-management server to be in constant communication with remote devices. Thus, these techniques are often unable to address the situations where the theft-management server is located behind a firewall, and the remote devices may operate out of the environment protected by the firewall. Likewise, these techniques are unable to address the situations where the devices to be protected may not have network access at times.
Embodiments of the disclosure will be described by way of exemplary embodiments, but not limitations, illustrated in the accompanying drawings in which like references denote similar elements, and in which:
Illustrative embodiments of the disclosure include, but are not limited to, methods and apparatuses for deterring theft of processor based devices.
Various aspects of the illustrative embodiments will be described using terms commonly employed by those skilled in the art to convey the substance of their work to others skilled in the art. However, it will be apparent to those skilled in the art that alternate embodiments may be practiced with only some of the described aspects. For purposes of explanation, specific numbers, materials, and configurations are set forth in order to provide a thorough understanding of the illustrative embodiments. However, it will be apparent to one skilled in the art that alternate embodiments may be practiced without the specific details. In other instances, well-known features are omitted or simplified in order not to obscure the illustrative embodiments.
Further, various operations will be described as multiple discrete operations, in turn, in a manner that is most helpful in understanding the illustrative embodiments; however, the order of description should not be construed as to imply that these operations are necessarily order dependent. In particular, these operations need not be performed in the order of presentation.
The phrase “in one embodiment” is used repeatedly. The phrase generally does not refer to the same embodiment; however, it may. The terms “comprising,” “having,” and “including” are synonymous, unless the context dictates otherwise. The phrase “A/B” means “A or B”. The phrase “A and/or B” means “(A), (B), or (A and B)”. The phrase “at least one of A, B and C” means “(A), (B), (C), (A and B), (A and C), (B and C) or (A, B and C)”. The phrase “(A) B” means “(B) or (A B)”, that is, A is optional.
As will be described in more detail below, messages containing instructions of actions to deter or thwart theft of client device 102 may be sent from server 106 to client device 102 via intermediate server 108. TD HA 114 may be configured to assist TD ME 112 of client device 102 in the theft-deterrence protocol, including e.g. determining whether network 104 is accessible, querying intermediate server 108 for messages from TD SVC 122, and/or relaying the message to TD ME 112. TD ME 112 may be configured to verify the relayed message from TD HA 114 and instruct client device 102 to perform theft deterrence actions accordingly.
For the illustrated embodiments, TD HA 114 may be configured to operate in a processor operated application execution environment of the client device 102, whereas TD ME 112 may be configured to operate outside the application execution environment. Client device 102 may have one or more processor operated application execution environments, virtual or otherwise.
Further, client device 102 may be any one of a number of processor based devices, including but are not limited to desktop computing devices, portable computing devices (laptops as well as handhelds), set-top boxes, and game consoles. Handhelds may include, but are not limited to, personal digital assistants, digital cameras, media players, and mobile phones. Server 106 may be any number of servers, including but are not limited to blade servers. Networks 104 may include one or more private and/or public, wire line based and/or wireless, local and/or wide area networks.
Additionally, for the illustrated embodiments, each client device 102 may include a basic input/output system (BIOS) 113 configured to cooperate with TD ME 112 in implementing the theft-deterrence process on client device 102.
These and other aspects of the various embodiments, including the various elements and the manner the elements cooperate with each other to deter theft of the client devices 102, will be described in further details in turn below.
Referring now to
In response to the receipt of a theft report, TD SVC 122 may generate 204 a message with instructions of actions for client device 102 to perform in order to thwart or deter the theft. In embodiments, TD SVC 122 may sign 206 the message with a private TDT Server Signing Key (TSSKprivate) which may be used to secure the communication between TD SVC 122 and TD ME 112. In embodiments, the message may also include a timestamp to indicate freshness of the message and a pre-specified High-Entropy Nonce pre-provided by client device 102 before it was stolen. After the message is signed, TD SVC 122 may send 208 the message to a communication “address” associated with client device 102. In various embodiments, the “address” may correspond to an account located at intermediate sever 108 which may be accessible via network 104. The account may hold the message for client device 102. In embodiments, the “address” may be an e-mail address or a telephone number for Short Message Service (SMS) service. Accordingly, intermediate server 108 may be an e-mail relay server or a SMS relay server. Thus, the term “address” as used herein is intended to broadly cover all forms of addresses of various forms for communication.
By virtue of the fact that TD SVC 122 provides its instructions to client device 102 indirectly via an intermediate server, with client device 102 not being started up or having access to network 104 at the time the instructions are provided. In various embodiments, when client device 102 is started up (in due course), TD HA 114 checks 210 for the availability of network 104. In embodiments, even if client device 102 may be in standby mode, TD HA 114 may wake client device 102 up at a pre-determined time to check network availability. If network 104 is available, TD HA 114 may further query intermediate server 108 through network 104 to check 212 if there are messages in the client device's account. If there are messages in the account, TD HA 114 may receive/retrieve 214 the messages and check if one of the messages is from TD SVC 122. On retrieval, TD HA 114 may extract 216 the content of the retrieved message from TD SVC 122 and relay 218 it to TD ME 112 for further operations.
Upon receiving the replayed message from TD HA 114, TD ME 112 may verify 220 the message with a public TDT Server Signing Key (TSSKpublic). Also, the TD ME 112 may check 222 the timestamp included in the message for validity purpose and check the nonce to ensure it matches the one stored in client device 102. If the message fulfills the verification requirements, TD ME 112 may inform client device 102 to perform 224 actions instructed in the message. In various embodiments, the theft-deterrence actions may comprise locking client device 102. In other embodiments, the theft-deterrence actions may alternatively or additionally comprise halting all operations, partially disabling client device 102, shutting down client device 102 and preventing it from being started up, shredding or deleting data from client device 102, notifying an owner of client device 102, and/or notifying a technical support group supporting client device 102, or deleting cryptographic key material. In embodiments, client device 102 may also revive from actions taken to deter the theft upon the receipt of an updated message from TD SVC 122 informing the safe state of client device 102. And a new nonce may be provided by client device 102 to server 106 for future theft-deterrence use.
In various embodiments, as alluded to earlier, client device 102 may report theft of itself to server 106 in a similar asynchronous way which is connection and network independent as stated above. An address may be associated with server 106 so that client device 102 may send a theft report to server 106, when client device 102 determines it has access to the network, thus negating the need of server 106 to necessarily have access to the network when client device 102 makes the reporting. In various embodiments, the theft report may likewise be in the form of an e-mail or a SMS message. In embodiments, the communication between TD SVC 122 and client device 102 may be symmetric so that the theft report and the message containing theft deterrence instructions are of the same communication type. In other embodiments, it is not necessary for the communications between TD SVC 122 and client device 102 to be symmetric. For example, client device 102 may submit its theft report in the form of an email, while TD SVC 122 provides its instructions in the form of SMS messages, or vice versa.
Above embodiments are described in a way that the client device 102 has the logic to practice the theft deterrence method via TD HA 114 and TD ME 112. In other embodiments, the functions may be consolidated in a single component, or distributed further involving even more components.
Each of these elements performs its conventional functions known in the art. In particular, chipset 303 may be employed to practice all or some of the described aspects of TD ME 112 (shown as 321). System memory 304 and mass storage 306 may be employed to store a working copy and a permanent copy of the programming instructions implementing, in whole or in part, the various other components, such as TD HA 114 (herein commonly denoted as 322). In embodiments, the functions of TD HA 114 may be incorporated into TD ME 112 to access network 104. The various components may be implemented by assembler instructions supported by processor(s) 302 or high-level languages, such as C, that can be compiled into such instructions.
In embodiments, a permanent copy of the programming instructions may be placed into permanent storage 306 in the factory, or in the field, through, for example, a distribution medium (not shown), such as a compact disc (CD), or through communication interface 310 (from a distribution server (not shown)). That is, one or more distribution media having an implementation of the agent program may be employed to distribute the agent program to various computing devices. In embodiments, the distribution medium may be an article of manufacture having programming instructions configured to implement one or more aspects of one or more methods as disclosed herein. More specifically, the article of manufacture may comprise a computer readable storage medium having the plurality of programming instructions stored in the storage medium. The programming instruction may then be read or loaded into the computer system to practice or contribute to the practice of the methods described herein to deter or thwart theft of a processor based device, through connection and network independent communication.
The constitution of these elements 302-312 are known, and accordingly will not be further described.
By adopting the asynchronous theft-deterrence protocol and corresponding devices disclosed above, impacts from device status and network availability are substantially negated, and a cost efficient way is created to implement theft-deterrence even if the stolen device is out of the secured intranet.
Although specific embodiments have been illustrated and described herein, it will be appreciated by those of ordinary skill in the art that a wide variety of alternate and/or equivalent implementations may be substituted for the specific embodiments shown and described, without departing from the scope of the embodiments of the present invention. This application is intended to cover any adaptations or variations of the embodiments discussed herein. Therefore, it is manifestly intended that the embodiments of the present invention be limited only by the claims and the equivalents thereof.
