Patent ID: 9117083
Filing Date: 2015-08-25
Classification: G06F

Abstract:
1. On a device having a collection of hardware resources designated as a security block, a method of executing an untrusted operating system, said method comprising: performing a transition from an unprovisioned state into a first operational mode, said first operational mode allowing execution of untrusted operating systems; storing an indication that said device is in said first operational mode; loading said untrusted operating system; subsequent to said loading, determining that said untrusted operating system has not been signed by a trusted entity; subsequent to said loading, determining, upon review of said indication, that said device is in said first operational mode; responsive to determining that said device is in said first operational mode, determining that a counter of allowed insecure boots exceeds zero; responsive to the determining that the counter exceeds zero: decrementing the counter of allowed insecure boots; disabling untrusted operating system access to said security block; and executing said untrusted operating system; responsive to the determining that the counter equals zero: deactivate said first operational mode; and restart the device.