Microsoft Technology Licensing, LLC

Koninklijke Philips Electronics N.v.

Shon Schmidt

William Jefferson Westerinen

Todd L Carpenter

David Jaroslav Sebesta

Alexander Frank

David Jay Foster

Stephen Richard Drake

Bernard Joseph Savord

Kurt Jenkins

Andrew Lee Robinson

Zhangwei Xu

Curt Andrew Steeb

David Michael Lane

Steven Russell Freeman

Tse-Ching Yu

Nicholas Temple

Thomas Patrick Lennon

A system for binding a subscription-based computer to an internet service provider (ISP) may include a binding module and a security module residing on the computer. The binding module may identify and authenticate configuration data from peripheral devices that attempt to connect to the computer, encrypt any requests for data from the computer to the ISP, and decrypt responses from the ISP. If the binding module is able to authenticate the configuration data and the response to the request for data from the ISP, then the security module may allow the communication between the computer and the ISP. However, if either the configuration cycle or the response cannot be properly verified, then the security module may degrade operation of the computer.

System and method for binding a subscription-based computing system to an internet service

A system for managing a subscription-based computer independent of an operating system of the computer may include a security module that accesses, decrements, and stores subscription data during operation of the subscription-based computer. Additionally, the system may include a network module in communication with the security module and comprising a network stack, a web server, and a user interface in an operating system independent format. A web browser of the computer may request the user interface from the network stack. The interface may be populated with the subscription data, and a network driver may retrieve the populated user interface from the network module. The populated interface may then be sent to the web server to be served back to the requesting web browser.

Operating system independent architecture for subscription computing

A computer or other electronic device requiring physical integrity of its components, for example, a pay-per-use computer may use a master security device in communication with a plurality of slave security devices, known as security beans. Each security bean may be given a cryptographic key or keys for use in authenticating communication with the master security device. Each security bean may be coupled to an associated component and may have the ability to disable that associated component. In one embodiment, security bean has an analog switch that may be configured to block or attenuate a critical signal used by the associated component. The security bean may start up in the disable mode and respond to a verified signal from the master security device to enable its corresponding component.

Master-slave security devices

A method having a socket for coupling signals between an electrical component and a circuit board or equivalent has a mechanism that, when activated, attaches the electrical component to the socket so that it is not possible to remove the electrical component without damaging it. The mechanism may include a clamshell lid with a one-time locking mechanism, a pin contact mechanism that, after initial locking, will detach the pins of the electrical component if further disturbed, or a moat around the base of the electrical component for disposing an epoxy fastener. The moat may include a heating element to cure the epoxy or other glue. The socket may include an electrical component that allows detection of tampering with the socket.

Method and apparatus for enhanced packaging for PC security

System and method for binding a subscription-based computing system to an internet service provider

A pay-per-use computer, or other electronic device that uses local security, may use a security module or other circuit for monitoring and enforcement of a usage policy. To help prevent physical attacks on the security module, or the circuit board near the security module, a second circuit may be mounted over the security module to help prevent access to the security module. Both circuits may be mounted on a interposer and the interposer mounted to the circuit board, creating a stack including the first circuit, the interposer, the security module, and a main PC board. When the PC board includes dense signal traces under the security module a three dimensional envelope is created around the security module. When the first circuit is a high value circuit, such as a Northbridge, the risk/reward of attacking the security module is increased substantially and may deter all but the most determined hackers.

Enhanced packaging for PC security

Apodization control techniques for a microbeamformer including a plurality of microbeamformer channels each including a transducer, a microbeamformer transmitter for driving the transducer, a microbeamformer receiver for receiving signals from the transducer and usually a delay element for delaying the received transducer signals. To improve the generation of waveforms by the transducers, the voltage provided to the microbeamformer transmitters is adjusted and/or the current provided by the microbeamformer transmitters is adjusted. The microbeamformer channels can also be grouped together into patches and/or clusters with the patches and clusters being provided with a common voltage source or current.

Transmit apodization control for microbeamformers

A security module for a pay-per-use computer supplies an appropriate BIOS for a given mode of operation. A power manager in the security module powers only essential circuits until the BIOS is operational to help prevent substitution of a non-authorized BIOS. The security module also includes a capability to monitor and restrict data lines on a bus between a main computer processor and computer system memory. When the computer is operating in a restricted use mode, data lines may be restricted to allow only minimal access to the computer system memory. Bus transactions may be monitored to ensure that only valid transactions are occurring and are within the designated memory space.

Growing community of inventors

Seattle, WA, United States of America

Shon Schmidt