Patent ID: 8255988

Claim:
An electronic device adapted to use an unrestricted mode of operation and a restricted mode of operation, the electronic device comprising: a first processor coupled to a system bus and used to operate the computer in the unrestricted mode of operation; a controller coupled to the first processor; and a security module comprising: a second processor to operate the computer in the restricted mode of operation; a secondary bus connected between the security module and the controller, the secondary bus separate from the system bus and allowing the security module to manage direct communication with the controller without involvement of the first processor; storage storing a mode setting flag, a first program executable by the second processor, and a second program executable by the first processor, wherein whenever the computer reboots the security module first locks components of the computer and then checks the mode setting flag to determine if the computer is to operate in the restricted mode of operation or the unrestricted mode of operation, and according to the determining: when the mode setting flag indicates the restricted mode of operation one of the components is unlocked and the second program is executed by the second processor, the second program sends a message to the controller requesting user to provide a unlock code or a token; when user enter a unlock code or a token, or provide from a removable memory or from a remote computer through a network interface, received data in response to the message is determined to be sufficient to allow restoration of full operation, the second program sets the flag to indicate the unrestricted mode of operation and reboots the computer, wherein the message is sent and the response is verified while the computer operates in the restricted mode with at least one of the components remaining locked; and when the mode setting flag indicates the unrestricted mode of operation all of the locked components are unlocked and the computer boots using the first program executing on the first processor, wherein while the computer operates in the unrestricted mode a condition change causes the mode setting flag to be set to the restricted mode of operation and the computer is rebooted.