Patent ID: 8464348

Claim:
A computer that is adapted for pay-for-use operation, the computer comprising: a first unsecure memory; a display; a processor operatively coupled to the first unsecure memory and the display; an isolated computing environment that is adapted to communicate with the processor and allow the computer to be used in pay-for-use operations, the isolated computing environment including: a second memory that is different than the first unsecure memory, is operably coupled to the processor, and is inaccessible by unauthorized execution environments on the first unsecure memory, the unauthorized execution environments including at least an operating system of the computer, a verification program stored in the second memory that is coded to monitor the computer, including the operating system, for any of a set of non-compliant conditions, the set of non-compliant conditions relating to pay-for-use operation of the computer, the set of non-compliant conditions comprising presence of a prohibited alternative boot device, a logic circuit that causes execution of the verification program, a clock that: provides the verification program with ensured processor cycles on the processor to monitor the computer; and triggers the logic circuit to force execution of the verification program via an interrupt that causes the processor to execute the verification program using the ensured processor cycles, and an enforcement program stored in the second memory that is coded to, when the verification program determines the presence of an individual non-compliant condition from the set of non-compliant conditions on the computer, initiate a sanction against a user of the computer by maintaining operation of the computer at a reduced function level until the user corrects the individual non-compliant condition of the computer; wherein the isolated computing environment is further designed to support changes of state of the computer related to functions associated with provisioning resources for the pay-for-use operation; wherein the isolated computing environment is further designed so that the clock provides timing intervals for metering programs and expiration dates related to the pay-for-use operation of the computer; and wherein the isolated computing environment, including the second memory, is disposed on a motherboard that forms a part of the computer and is protected from tampering by unauthorized users of the computer by means of a tamper resistant mechanism.