Abstract:
A method, machine readable medium, and system are disclosed. In one embodiment the method comprises sending a message on a wireless network to a mobile computer and disabling the mobile computer upon receipt of the message.

Description:
FIELD OF THE INVENTION  
       [0001]     The invention is related to mobile computers. More specifically, the invention relates to remotely locking down a mobile computer over a wireless network.  
       BACKGROUND OF THE INVENTION  
       [0002]     Mobile computers come in all sizes and shapes, from notebooks and laptops to handheld devices. People from business professionals to college students are realizing the benefits of having a computer that is mobile. For all the benefits that mobility creates, it also leads to certain mobile-specific problems. Mobile computer theft and loss is a problem facing many of today&#39;s mobile users. Often these computers hold valuable and confidential corporate and personal data that can be damaging if in the wrong hands. It is therefore important that a user can remotely lockdown (i.e. disable) his mobile computer when necessary. Thus, what is needed is an effective method to remotely lockdown a mobile computer to protect data located on the computer.  
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0003]     The present invention is illustrated by way of example and is not limited by the figures of the accompanying drawings, in which like references indicate similar elements, and in which:  
         [0004]      FIG. 1  illustrates one embodiment of the environment in which the present invention operates.  
         [0005]      FIG. 2  details a process for authenticating the lockdown message.  
         [0006]      FIG. 3  illustrates a process for queuing and postponing the message until the mobile computer reacquires the wireless network.  
         [0007]      FIG. 4  details a process for securing the mobile computer in one embodiment of the present invention.  
     
    
     DETAILED DESCRIPTION  
       [0008]     Embodiments of an effective method to remotely lockdown a mobile computer to protect data located on the computer are disclosed. In the following description, numerous specific details are set forth. However, it is understood that embodiments may be practiced without these specific details. In other instances, well-known elements, applications, and protocols have not been discussed in detail in order to avoid obscuring the present invention.  
         [0009]      FIG. 1  illustrates one embodiment of the environment in which the present invention operates. A mobile computer  104  is lost or stolen. In one embodiment the mobile computer  104  is a handheld device (e.g. a Pocket PC, a smart phone, etc.). In another embodiment the mobile computer  104  is a notebook computer. In yet another embodiment the mobile computer  104  is any another given wireless device. The mobile computer  104  is connected to a wireless network  102 . In different embodiments the wireless network  102  can utilize any given wireless protocol such as Global System for Mobile Communications (GSM), Code-Division Multiple Access (CDMA), Bluetooth, and 802.11 among others. In another embodiment the wireless network  102  can be a combination of more than one of these protocols. Once the owner of the mobile computer  104  realizes it is lost or stolen he sends a message to the computer to perform a lockdown. The message is sent from a device  100  that has access to the wireless network  102 . In one embodiment the access device  100  is a cellular telephone that sends a Short Message Service (SMS) message to the mobile computer  104 . In another embodiment the access device  100  is another mobile computer. In yet another embodiment the access device  100  is any device capable of sending a message over the wireless network  102 . The mobile computer  104  performs a lockdown sequence that disables any further use once the message has been received.  
         [0010]     The message sent by the mobile computer user to the mobile computer should be authenticated. This prevents any person other than the owner of the mobile computer from disabling the mobile computer remotely.  FIG. 2  details a process for authenticating the lockdown message. At the start  200  of the process the message is received on the wireless network  202 . The content of the message is then checked to determine if a lockdown has been requested ( 204  and  206 ). If the message does not contain a lockdown request the process is finished  214 . If the message does contain a lockdown request then the message is checked for authenticity. This check occurs by matching a specific security code stored within the mobile computer with the security code located in the body of the received message ( 208  and  210 ). If the security codes match the lockdown request has been authenticated the mobile computer initiates a system lockdown  212  and the process is finished  214 . Otherwise, if the authentication fails the mobile computer does not initiate a system lockdown and the process is finished  216 . In one embodiment, the received message is only the security code. In this case the lockdown request is granted automatically because the security code itself is an authenticated lockdown request. In one embodiment, the security code stored within the mobile computer can be set by the user upon initial setup of the computer such as any other password. In another embodiment, once the mobile computer has received and executed the lockdown procedure initiated by the user, the mobile computer can send a message back to the user to confirm the lockdown was received and successfully executed.  
         [0011]     An issue can arise if the mobile computer is not connected to the wireless network during the broadcast of the lockdown request message. In this case the user is trying to send a lockdown request but the mobile computer is not receiving it for some reason. This lack of a wireless network connection can be due to a number of factors such as the mobile computer being in a powered down state, the mobile computer being in a standby state, and leaving the effective range of the wireless network among other reasons.  FIG. 3  illustrates a process for queuing and postponing the message until the mobile computer reacquires the wireless network. At the start  300  of the process the lockdown message is sent over the wireless network to the mobile computer  302 . Next, a check is made to determine if the mobile computer is connected to the wireless network  304 . In one embodiment, this can be determined if the message is sent to the mobile computer but no acknowledgement is returned verifying the message has been received. In one embodiment, the mobile computer connectivity check occurs on a local or wide area network message server located separately on the wireless network. In another embodiment, the message server could be located within the user&#39;s device in which he sends the message to the mobile computer (i.e. a desktop computer, a second mobile computer, a cellular telephone, etc.). In different embodiments the network message server could attempt to deliver the message using any one or more of a number of message protocols such as SMS and POP3 among others. In further embodiments, the message server could be connected to the network using a wireless protocol such as GSM, CDMA, Bluetooth, 802.11b, 802.11a, or 802.11 g among others. If the message delivery fails, the message is queued on the message server  306 . The next time the mobile computer connects to the network the message server delivers the queued message. Otherwise, if an acknowledgement is received that the mobile computer is connected to the wireless network the message is delivered to and processed by the mobile computer  308  and the process is complete  310 .  
         [0012]     Some mobile computers are in an always-on state such as cellular technology based computers or notebook computers with an always-on, separately operating wireless subsystem. In one embodiment if the mobile computer is on but outside of the effective range of the wireless network it will be constantly searching for the wireless network signal. Once the mobile computer finds the wireless network signal it will connect to the network and check for any incoming and queued messages. In another embodiment, if the mobile computer is powered off or in a suspend state and is subsequently powered on or woken up the mobile computer will connect to the network and check for any incoming and queued messages.  
         [0013]     Once the mobile computer has received and authenticated the lockdown request the specific lockdown method must be performed to disable and secure the information within the computer.  FIG. 4  details a process for securing the mobile computer in one embodiment of the present invention. At the start  400  of the process the BIOS is set to enable the boot-up password  402 . In one embodiment this password can be similar or identical to the hard drive password that is set within the BIOS of many laptops. In another embodiment the password can be located further along during boot up and be stored with the mobile computer&#39;s operating system registry. Thus, subsequent to enabling this password check the user would need to provide the password to boot up the operating system on the mobile computer&#39;s hard drive. Otherwise a person would not be able to boot the computer to gain access to information stored in the computer. In one embodiment a global positioning system (GPS) within the mobile computer would allow for a pinpointed location. In this embodiment location information of the mobile computer is sent to the user who sent the lockdown message  404 . Finally, the system initiates an immediate overriding shutdown sequence  406  and the process is finished  408 . In one embodiment, the overriding shutdown sequence would include a mandatory and immediate system shutdown command in the operating system. In another embodiment, the overriding shutdown sequence would actually trigger a hardware reset, which would toggle the reset pin located in the hardware of the mobile computer. In this embodiment the entire operating system running on the mobile computer would be bypassed and an immediate reboot would take place regardless of the state of the operating system on the mobile computer. After the mobile computer has powered down the password would be required to boot into the operating system on any ensuing restart.  
         [0014]     In one embodiment the lockdown message can relay different levels of severe disabling measures depending on the situation presented to the user. If the information is highly secretive and cannot afford to enter into other hands the shutdown sequence can include a formatting procedure to erase the hard drive or any other storage media located within the mobile computer. In another embodiment the user, upon retrieving his mobile computer sometime after initiating a lockdown sequence could disable the boot password within the OS after successfully entering the password. In yet another embodiment the lockdown sequence could automatically be disabled, along with the boot password requirement once the password was entered correctly once.  
         [0015]     Thus, an effective method to remotely lockdown a mobile computer to protect data located on the computer is disclosed. These embodiments have been described with reference to specific exemplary embodiments thereof. It will, however, be evident to persons having the benefit of this disclosure that various modifications and changes may be made to these embodiments without departing from the broader spirit and scope of the embodiments described herein. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense.