Patent ID: 12204428

DETAILED DESCRIPTION

In the following description, reference is made to the accompanying drawings that form a part hereof, and in which is shown by way of illustration specific embodiments which may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention, and it is to be understood that other embodiments may be utilized and that structural, logical and electrical changes may be made without departing from the scope of the present invention. The following description of example embodiments is, therefore, not to be taken in a limited sense, and the scope of the present invention is defined by the appended claims.

The functions or algorithms described herein may be implemented in software in one embodiment. The software may consist of computer executable instructions stored on computer readable media or computer readable storage device such as one or more non-transitory memories or other type of hardware-based storage devices, either local or networked. Further, such functions correspond to modules, which may be software, hardware, firmware or any combination thereof. Multiple functions may be performed in one or more modules as desired, and the embodiments described are merely examples. The software may be executed on a digital signal processor, ASIC, microprocessor, or other type of processor operating on a computer system, such as a personal computer, server or other computer system, turning such computer system into a specifically programmed machine.

The functionality can be configured to perform an operation using, for instance, software, hardware, firmware, or the like. For example, the phrase “configured to” can refer to a logic circuit structure of a hardware element that is to implement the associated functionality. The phrase “configured to” can also refer to a logic circuit structure of a hardware element that is to implement the coding design of associated functionality of firmware or software. The term “module” refers to a structural element that can be implemented using any suitable hardware (e.g., a processor, among others), software (e.g., an application, among others), firmware, or any combination of hardware, software, and firmware. The term, “logic” encompasses any functionality for performing a task. For instance, each operation illustrated in the flowcharts corresponds to logic for performing that operation. An operation can be performed using, software, hardware, firmware, or the like. The terms, “component,” “system,” and the like may refer to computer-related entities, hardware, and software in execution, firmware, or combination thereof. A component may be a process running on a processor, an object, an executable, a program, a function, a subroutine, a computer, or a combination of software and hardware. The term, “processor,” may refer to a hardware component, such as a processing unit of a computer system.

Furthermore, the claimed subject matter may be implemented as a method, apparatus, or article of manufacture using standard programming and engineering techniques to produce software, firmware, hardware, or any combination thereof to control a computing device to implement the disclosed subject matter. The term, “article of manufacture,” as used herein is intended to encompass a computer program accessible from any computer-readable storage device or media. Computer-readable storage media can include, but are not limited to, magnetic storage devices, e.g., hard disk, floppy disk, magnetic strips, optical disk, compact disk (CD), digital versatile disk (DVD), smart cards, flash memory devices, among others. In contrast, computer-readable media, i.e., not storage media, may additionally include communication media such as transmission media for wireless signals and the like.

Security measures for transporting electronic devices such as computers storing customer sensitive data can be lacking. While palletization and locking measure may be employed, it is still possible for a bad actor to intercept and access the devices during transport. Upon receipt at a destination, the access that occurred may not be detectible, leaving the potential for customer data to have been breached without knowledge of the breach having occurred. Customers may not know to take steps to prevent nefarious use of the breached customer data.

A secure transport mode function enables users to protect electronic devices during transport to a destination. The destination may be a manufacturer or distributor of electronic devices performing asset recovery. Asset recovery may be performed for a variety of situations, such as updates, repair, or scrapping. It is important that the data on assets being recovered is protected.

The secure transport function in one example enables a user to select two or more transport function mode options for execution prior to shipping the device. Example transport function mode options include placing the electronic device in a shipping mode to disconnect a device battery until the device is reconnected to a power adapter, performing an encryption on selected data stored on the device, capturing a Connection fingerprint of connections, such as wireless local area network (WLAN), wireless wide area network (WWAN), and Bluetooth gateways upon power on during transport, and logging power on hours during transport. The selected options are applied via the secure transport mode function just prior to transport.

Upon receipt at the destination, data collected via some of the selected options may be provided to detect whether or not unauthorized access to the device was attempted during transport.

FIG.1is a block diagram representation of a device100having a secure transport function with selectable options for protecting and monitoring device100during transport. Device100may be an electronic device that can process information, such as a laptop device, tablet, or smart phone.

In one example, device100includes a keyboard110and a display115. Display115is shown cut away to illustrate that device100includes electronics, such as a system board120and a battery125for providing power to the device. Display115is shown displaying a secure transport mode function checkbox130, which when selected, causes display of multiple transport mode options135.

The transport options in one example include connection fingerprint140, log power on145, enter ship mode150, and encrypt data155, and may be selected via respective checkboxes. While checkboxes are shown and described as a means for selecting functions and options, other user interface constructs may be used, such as clicking on words or icons associated with the functions or options to select the function or option. The options may be highlighted upon selection to provide a user perceivable indication that an option has have been selected. Upon completion of selecting the options, a user may select to continue157to cause execution of the options.

Device100may also include additional components such as a charging port160or coupling the battery125to an AC adapter, referred to as charger device165. Battery125may also include firmware170. System board120or other electronics of device100may include a BIOS175and circuitry, such as CMOS circuitry that is powered by a separate battery180. System board120may also include a wireless transceiver185. The additional components of device100may be used in implementing one or more of the selected options135.

In one example, the ability to select the transport options135may be initiated by navigating from the start menu to a settings menu that includes the ability to select the secure transport mode function such as checkbox130. A command may be used to reach a bios setup menu. In further examples, a physical switch may be selected, or a combination of keys, a series of button presses such as power key held in while pressing the esc key multiple times. In response, the device100can prompt the user for entering secure transit mode and initiate display of the transport options135or even straight into pre-selected transport options.

A separate device, such as a USB device190may be plugged into a port on device100. The device190may include script to put device100into the transport mode with preselected options or cause the display of options. The separate device190may use a trusted device handshake and boot the device100into the secure transit mode.

To take the device out of the transport mode, depending on options selected, a separate USB device may be utilized, or the device100may be coupled to the charger165.

The connection fingerprint option140captures and stores a record of all known WLAN, WWAN, and Bluetooth gateways that are detected upon powering on device100. The record is accessible to a device administrator. In one example, a snapshot of every gateway within range is captured and saved on non-volatile memory. In one example, the snapshot may be sent to the administrator via a connection that may be established during transport or on receipt at the destination.

FIG.2is an example, of a history or record200of detected available connections or connections made, such as gateways during transport. The record200may include a connection name210, address215(such as an IP address), time range220that identifies the beginning and end of time that the connection was within range or actually connected and a date225. In example record200, a first row230identifies an owner/user connection that was connected at the time transport mode was entered. A final row235identifies a destination connection that was within range at the time device100is turned on to inspect transport events that may have occurred. The rows may be organized by date and time, name, or any other desired column values.

Record200also indicates that during transport, three connections were detected at rows240,245, and250. Rows240and245indicate that one day after transport began, a device power on event must have occurred as the device detected gateways A and B within range. The event is indicative of a first bad actor having accessed the device. Row250indicate that one day later, the device was accessed again, resulting in detection of gateway C. Two days later, the device reached its destination. The record200indicates that two separate events occurred. The IP addresses and names of the gateways may provide information for investigation to help identify the bad actor or bad actors responsible for the events.

Connections may pertain to both connections to Wi-Fi networks, a form of WLAN, and connections to other non-Wi-Fi networks, such as Bluetooth networks, ethernet networks, connection between a user device and an automated teller machine (ATM), and connection between two user devices via near-field communication (NFC). Another example is connection to another device via a virtual private network (VPN). In this regard, a network connection may be a connection for communication between only two devices such as a smart phone and vehicle via Bluetooth, or a connection for communication with more than two devices such as might occur when connecting to a Wi-Fi network to browse Internet websites.

The log power on option145cause logging of power on hours in response to the option being executed. In one example, an existing BIOS feature may be used to log the power on hours. Turing on BIOS feature makes use of the CMOS battery180to power CMOS circuitry on the system board120to keep time as well as detecting powering the device100on and off. The logged power on and off data may be stored on non-volatile storage on the system board120even if the main battery125is disconnected via a different option. The logged power on and off data may then be obtained by the administrator at the destination to determine whether or not the device100was powered on by a bad actor during transport.

The enter ship mode option150may utilize an existing ship mode function of the device100. The ship mode function disables the main, onboard, battery125until an AC adapter such as charger165is plugged into charging port170, which may include a sensing device to determine a charger has been connected to the port. A line192communicates the sensed connection and provides an indication to the system board120, which takes the device out of ship mode, reconnecting the battery125to power the system board and other electronic components of device100. Battery180may be used to process the indication to effect the exit from ship mode.

The ship or shipping mode function is used for reducing battery consumption by cutting off the current path to the device100at its OFF state. Battery powered portable devices use this or a similar function to suppress the battery power consumption after manufacturing until delivery to the end user. The ship mode function may be entered by flipping a hit via a BIOS setting that disables the battery discharge via a switch, such as an PET, and reenables battery discharge when connected to charger165. In one example, ship mode may be enabled using the F1 key and selecting Setup→Config→Power→Disable Internal Battery. This same sequence may be performed by selecting enter ship mode150from options135and selecting continue157, or as part of a preselected set of options used when selecting to enter secure transit mode using preselected options.

The ship mode function may utilize battery125firmware170to monitor and log internal data, such as cell voltage and cumulative count of power on time such as by hour or minute. Disconnecting the battery from the remainder of system100does not disrupted the powering of the firmware170which is integrated with the battery125. A counter field may be incremented continuously. The count is captured at time secure transit mode entered. A serial number of battery may also be stored to ensure that the same battery is in place at the destination. This may help detect if the battery was replaced in order for a bad actor to gain access during transport. The firmware170may also monitor and store information from any installed tamper switch or switched indicated at197.

FIG.3is a block diagram illustrating operation of the encrypt data option155generally at300. The encrypt data option155may be selected and executed to perform a base level encryption on selected data previously identified by the user. The encrypt data option may be selected at310and generate a view of storage315with options320to select one or more areas of storage, such as user data325or various user folders330and335which may contain sensitive data. Rather than encrypting the entire storage310, which also includes system data340, the user can select either all of the user data, or only selected portions of user data that are known to contain sensitive information that the user would not like exposed to bad actors. The ability to select selected portions results in much less work and time being required to encrypt the smaller amount of data. Encryption of the selected data may be a better option that reformatting or otherwise destroying data to protect form access during transport. Reformatting can take more time and may not be effective. Destroying the data results in loss of unbacked up data. Encryption provides protection without loss of the data.

In one example, the selection of transport mode may default to the user data325which may include an entire user directory or folder. In other examples the user may have previously selected storage areas to protect. In still other examples, selection of the encrypt data option157may result in display of the encrypt options320for selection by the user.

A decryption key may be generated at345on entering the encryption option in the secure transport mode. A pseudo random key may be generated to encrypt using a symmetric or asymmetric key. The key may be sent to receiver/destination of the device100, optionally using a handshake to ensure the key has been received at the destination prior to encrypting the information.

In one example, the USB device190may store the key and automatically check to confirm at that the key works. The USB device190may be sent separately, or the key may be sent separately to the destination. On confirmation that the key works or that the key has been received at the destination, the selected data is encrypted at355.

Other options may be selected in further examples, such as ensuring that a tamper switch has been set. Upon receipt at the destination, the tamper switch, or data captured from the tamper switch may be inspected to determine if the tamper switch was tripped. A bad actor may have simply removed the storage315, such as a disk drive or solid-state drive. The tamper switch may detect such acts.

FIG.4is a flowchart of a computer implemented method400of preparing an electronic device for transport to a destination. Method400starts at operation410by activating a secure transport function for an electronic device. An encryption is performed on selected data stored on the device at operation420. The electronic device is placed in a shipping mode at operation430to disconnect a device battery until the device is reconnected to a power adapter. Upon receipt at the destination, at operation440, power is received from a power adapter. A key is received or used to decrypt the selected data at operation450.

In one example, method400also includes monitoring and logging power-on hours via a device battery function during transport and providing the log for inspection at the destination to determine power-on information during transport.

FIG.5is a flowchart of a computer implemented method500of preparing an electronic device for transport to a destination. Method500starts at operation510by activating a secure transport function for an electronic device. At operation520, a selection of at least two transport mode options is received. The options may be selected from the group consisting of placing the electronic device in a shipping mode to disconnect a device battery until the device is reconnected to a power adapter at530, performing an encryption on selected data stored on the device at540, capturing a connection fingerprint of gateways upon power on during transport at550. and logging power on hours during transport at560. At operation570, the elected transport mode options are performed via the secure transport mode function prior to transport.

The various options are designed to both protect data and to detect that data has been accessed during transport. The fingerprint and log power-on options are directed toward detecting that data has been accessed. The ship mode and encryption options are directed toward protecting data. The ability to select from the multiple options allows users and administrators to design protection commensurate with the sensitivity or value of the data stored on devices to be recovered via transport. The use of the various options significantly decreases the risk of data breach during asset recovery operations and may lower the need for pickup insurance. The protection provided may help meet security requirements that may be more stringent in healthcare applications where data security is paramount.

FIG.6is a block schematic diagram of a computer system600to perform secure transport functions and for performing methods and algorithms according to example embodiments. All components need not be used in various embodiments.

One example computing device in the form of a computer600may include a processing unit602, memory603, removable storage610, and non-removable storage612. Although the example computing device is illustrated and described as computer600, the computing device may be in different forms in different embodiments. For example, the computing device may instead be a smartphone, a tablet, smartwatch, smart storage device (SSD), or other computing device including the same or similar elements as illustrated and described with regard toFIG.6. Devices, such as smartphones, tablets, and smartwatches, are generally collectively referred to as mobile devices or user equipment.

Although the various data storage elements are illustrated as part of the computer600, the storage may also or alternatively include cloud-based storage accessible via a network, such as the Internet or server-based storage. Note also that an SSD may include a processor on which the parser may be run, allowing transfer of parsed, filtered data through I/O channels between the SSD and main memory.

Memory603may include volatile memory614and non-volatile memory608. Computer600may include—or have access to a computing environment that includes—a variety of computer-readable media, such as volatile memory614and non-volatile memory608, removable storage610and non-removable storage612. Computer storage includes random access memory (RAM), read only memory (ROM), erasable programmable read-only memory (EPROM) or electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD ROM), Digital Versatile Disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium capable of storing computer-readable instructions.

Computer600may include or have access to a computing environment that includes input interface606, output interface604, and a communication interface616. Output interface604may include a display device, such as a touchscreen, that also may serve as an input device. The input interface606may include one or more of a touchscreen, touchpad, mouse, keyboard, camera, one or more device-specific buttons, one or more sensors integrated within or coupled via wired or wireless data connections to the computer600, and other input devices. The computer may operate in a networked environment using a communication connection to connect to one or more remote computers, such as database servers. The remote computer may include a personal computer (PC), server, router, network PC, a peer device or other common data flow network switch, or the like. The communication connection may include a Local Area Network (LAN), a Wide Area Network (WAN), cellular, Wi-Fi, Bluetooth, or other networks. According to one embodiment, the various components of computer600are connected with a system bus620.

Computer-readable instructions stored on a computer-readable medium are executable by the processing unit602of the computer600, such as a program618. The program618in some embodiments comprises software to implement one or more methods described herein. A hard drive, CD-ROM, and RAM are some examples of articles including a non-transitory computer-readable medium such as a storage device. The terms computer-readable medium, machine readable medium, and storage device do not include carrier waves or signals to the extent carrier waves and signals are deemed too transitory. Storage can also include networked storage, such as a storage area network (SAN). Computer program618along with the workspace manager622may be used to cause processing unit602to perform one or more methods or algorithms described herein.

EXAMPLES

1. A computer implemented method of preparing an electronic device for transport to a destination, the method includes activating a secure transport function for an electronic device, performing an encryption on selected data stored on the device, and placing the electronic device in a shipping mode to disconnect a device battery until the device is reconnected to a power adapter. Upon receipt at the destination, the method includes receiving power from a power adapter and receiving a key to decrypt the selected data.

2. The method of example 1 and further including monitoring and logging power-on hours via a device battery function during transport and providing the log for inspection to determine power-on information during transport.

3. The method of any of examples 1-2 wherein placing the device in the shipping mode is performed by flipping a bit via a BIOS setting to disable battery discharge via a switch.

4. The method of any of examples 1-3 wherein firmware in the device battery monitors and logs power on times.

5. The method of any of examples 1-4 wherein performing the encryption includes generating a key for decryption, sending the key to the destination, and confirming receipt of the key by the destination prior to performing the encryption.

6. The method of example 5 wherein the key and code for execution to perform the method are stored on separate device for coupling to the electronic device via a port.

7. The method of any of examples 5-6 wherein the selected data includes selected user data.

8. The method of example 7 wherein the user selected data is identified by generating an interface to facilitate selection of user folders.

9. The method of any of examples 1-8 and further including engaging a fingerprint function to capture a connection fingerprint identifying each connection detected upon power-on during transport.

10. The method of example 9 and further including providing the connection fingerprint for inspection at the destination.

11. The method of any of examples 9-10 wherein the fingerprint includes a connection name, IP address, and time for each connection detected.

12. The method of example 11 wherein the connections include wireless local area network (WLAN) connections, wireless wide area network (WWAN) connections, Bluetooth connections, ethernet connections, and near field communication (NFC) connections.

13. A computer implemented method of preparing an electronic device for transport to a destination includes activating a secure transport function for an electronic device and receiving a selection of at least two transport mode options. The transport mode options may include placing the electronic device in a shipping mode to disconnect a device battery until the device is reconnected to a power adapter, performing an encryption on selected data stored on the device, capturing a connection fingerprint of gateways upon power on during transport, and logging power on hours during transport. The method includes applying, via the secure transport mode function, the selected transport mode operations prior to transport.

14. The method of example 13 and further including upon receipt at the destination, providing data collected via the selected options.

15. The method of any of examples 13-14 wherein performing the encryption includes generating a key for decryption, sending the key to the destination, and confirming receipt of the key by the destination prior to performing the encryption.

16. The method of example 15 wherein the key and code for execution to perform the method are stored on separate device for coupling to the electronic device via a port.

17. The method of any of examples 15-16 wherein the selected data comprises selected user data.

18. The method of example 17 wherein the user selected data is identified by generating an interface to facilitate selection of user folders.

19. The method of any of examples 13-18 wherein the fingerprint includes a connection name, IP address, and time for each connection detected and wherein the connections include wireless local area network (WLAN) connections, wireless wide area network (WWAN) connections, and Bluetooth connections, ethernet connections, and near field communication (NFC) connections.

20. A device includes a processor and a memory device coupled to the processor and having a program stored thereon for execution by the processor to perform operations to prepare an electronic device for transport to a destination, the operations comprising:activating a secure transport function for an electronic device;performing an encryption on selected data stored on the device;placing the electronic device in a shipping mode to disconnect a device battery until the device is reconnected to a power adapter; andupon receipt at the destination; andupon receipt at the destination:receiving power from a power adapter; andreceiving a key to decrypt the selected data.

Although a few embodiments have been described in detail above, other modifications are possible. For example, the logic flows depicted in the figures do not require the particular order shown, or sequential order, to achieve desirable results. Other steps may be provided, or steps may be eliminated, from the described flows, and other components may be added to, or removed from, the described systems. Other embodiments may be within the scope of the following claims.