IP Library Granted Patent US 9,304,942
Granted Patent B2
US 9,304,942 · App. 12/956,606 · Granted Apr 5, 2016

Security configuration for memory access control

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,304,942
App. No.
12/956,606
Granted
Apr 5, 2016
Kind
B2
Abstract

A system for controlling access to resources in an apparatus when the apparatus is not active. Emerging technologies may allow information to be accessed in an apparatus memory without the operating system of the apparatus facilitating the access. In such instances, a subsystem in the apparatus may become active upon reception of wireless signals, and may grant direct access to memory. An access control configuration for the subsystem may be implemented in order to control memory access even when other software systems are inactive. The subsystem access control configuration may be configured (e.g., by the user) when the apparatus is active, and may be established (e.g., installed or updated) upon subsystem activation.

Claims (53)

1. A method, comprising:

activating a subsystem in an apparatus for providing access to a memory also in the apparatus;

establishing a subsystem access control configuration in the subsystem in response to the activation,

wherein the subsystem access control configuration comprises access parameters for use in determining, by the subsystem, when the apparatus is inactive, whether to grant a request for accessing the memory of the apparatus received by the subsystem from an external source while the apparatus is inactive;

receiving in the subsystem a request to access the memory while the apparatus is inactive;

comparing, by the subsystem, the access request to the access parameters of the subsystem access control configuration; and

if the access request is permitted by the access parameters of the subsystem access control configuration, allowing, by the subsystem, access to the memory in accordance with the access request;

wherein establishing the subsystem access control configuration comprises loading the subsystem access control configuration from the memory into the subsystem in response to the activation.

2. The method of claim 1 , wherein the subsystem comprises one or more integrated circuits configured to transmit and receive information via wireless communication regardless of whether the apparatus as a whole is active.

3. The method of claim 1 , wherein the access parameters of the subsystem access control configuration specifies one or more ranges of memory addresses that may be accessed by the subsystem.

4. The method of claim 3 , wherein the access to each of the one or more ranges of memory addresses is specified as either read-only access or read-write access.

5. The method of claim 1 , wherein comparing the access request to the access parameters of the subsystem access control configuration further comprises sending a request for access from a communication component in the subsystem to an intermediary security component in the subsystem interposed between the communication component and the memory.

6. The method of claim 1 , further comprising transmitting an access success notification via wireless communication; and if the access request is not permitted by the subsystem access control configuration, transmitting an access failure notification via wireless communication.

7. The method of claim 1 , wherein the apparatus is inactive when operating system software of the apparatus is inactive.

8. An apparatus, comprising:

at least one processor; and

at least one memory including executable instructions, the at least one memory and the executable instructions being configured to, in cooperation with the at least one processor, cause the apparatus to perform at least the following:

activate a subsystem in the apparatus, for providing access to a memory also in the apparatus;

establish a subsystem access control configuration in the subsystem in response to the activation,

wherein the subsystem access control configuration comprises access parameters for use in determining, by the subsystem, when the apparatus is inactive, whether to grant a request for accessing the memory of the apparatus received by the subsystem from an external source while the apparatus is inactive;

receive in the subsystem a request to access the memory while the apparatus is inactive;

compare by the subsystem the access request to the access parameters of the subsystem access control configuration; and

if the access request is permitted by the access parameters of the subsystem access control configuration, allow by the subsystem access to the memory in accordance with the access request;

wherein establishing the subsystem access control configuration comprises loading the subsystem access control configuration from the memory into the subsystem in response to the activation.

9. The apparatus of claim 8 , wherein the subsystem comprises one or more integrated circuits configured to transmit and receive information via wireless communication regardless of whether the apparatus as a whole is active.

10. The apparatus of claim 8 , wherein the access parameters of the subsystem access control configuration specifies one or more ranges of memory addresses that may be accessed by the subsystem.

11. The apparatus of claim 10 , wherein the access to each of the one or more ranges of memory addresses is specified as either read-only access or read-write access.

12. The apparatus of claim 8 , wherein the at least one memory and the executable instructions being configured to, in cooperation with the at least one processor, cause the apparatus to compare the access request to the access parameters of the subsystem access control configuration further comprises the at least one memory and the executable instructions being configured to, in cooperation with the at least one processor, cause the apparatus to send a request for access from a communication component in the subsystem to an intermediary security component in the subsystem interposed between the communication component and the memory.

13. The apparatus of claim 8 , further comprising the at least one memory and the executable instructions being configured to, in cooperation with the at least one processor, cause the apparatus to transmit an access success notification via wireless communication; and the at least one memory and the executable instructions being configured to, in cooperation with the at least one processor, cause the apparatus to, if the access request is not permitted by the subsystem access control configuration, transmit an access failure notification via wireless communication.

14. The apparatus of claim 8 , wherein the apparatus is inactive when operating system software of the apparatus is inactive.

15. A computer program product comprising computer executable program code recorded on a non-transitory computer readable medium, the computer executable program code comprising:

code configured to cause an apparatus to activate a subsystem in the apparatus, for providing access to a memory also in the apparatus;

code configured to cause the apparatus to establish a subsystem access control configuration in the subsystem in response to the activation,

wherein the subsystem access control configuration comprises access parameters for use in determining, by the subsystem, when the apparatus is inactive, whether to grant a request for accessing the memory of the apparatus received by the subsystem from an external source while the apparatus is inactive;

code configured to cause the apparatus to receive in the subsystem a request to access the memory while the apparatus is inactive;

code configured to cause the subsystem to compare the access request to the access parameters of the subsystem access control configuration; and

code configured to cause the subsystem to, if the access request is permitted by the access parameters of the subsystem access control configuration, allow access to the memory in accordance with the access request;

wherein the code configured to cause the apparatus to establish the subsystem access control configuration further comprises code configured to cause the apparatus to load the subsystem access control configuration from the memory into the subsystem in response to the activation.

16. The computer program product of claim 15 , wherein the subsystem comprises one or more integrated circuits configured to transmit and receive information via wireless communication regardless of whether the apparatus as a whole is active.

17. The computer program product of claim 15 , wherein the access parameters of the subsystem access control configuration specifies one or more ranges of memory addresses that may be accessed by the subsystem.

18. The computer program product of claim 17 , wherein the access to each of the one or more ranges of memory addresses is specified as either read-only access or read-write access.

19. The computer program product of claim 15 , wherein the code configured to cause the apparatus to compare the access request to the access parameters of the subsystem access control configuration further comprises code configured to cause the apparatus to send a request for access from a communication component in the subsystem to an intermediary security component in the subsystem interposed between the communication component and the memory.

20. The computer program product of claim 15 , further comprising code configured to cause the apparatus to transmit an access success notification via wireless communication; and

code configured to cause the apparatus to, if the access request is not permitted by the subsystem access control configuration, transmit an access failure notification via wireless communication.

21. The computer program product of claim 15 , wherein the apparatus is inactive when operating system software of the apparatus is inactive.

22. A system, comprising:

an apparatus; and

at least one other apparatus;

the apparatus receiving a wireless signal from the at least one other apparatus and activating a subsystem in the apparatus, for providing access to a memory also in the apparatus;

the apparatus further establishing a subsystem access control configuration in the subsystem in response to the activation, wherein the subsystem access control configuration comprises access parameters for use in determining, by the subsystem, when the apparatus is inactive, whether to grant a request for accessing the memory of the apparatus received from an external source while the apparatus is inactive, and receiving in the subsystem a request to access the memory while the apparatus is inactive from the at least one other apparatus via wireless communication; and

the apparatus further comparing the access request from the at least one other apparatus to the access parameters of the subsystem access control configuration, and if the access request is permitted by the access parameters of the subsystem access control configuration, allowing, by the subsystem, the at least one other apparatus to access the memory in accordance with the access request;

wherein the apparatus further establishing the subsystem access control configuration comprises apparatus configured to load the subsystem access control configuration from the memory into the subsystem in response to the activation.

23. The system of claim 22 , wherein the apparatus is inactive when operating system software of the apparatus is inactive.

Assignments (10)
PATENT SECURITY AGREEMENT Recorded Apr 22, 2023
From: RPX CORPORATION
To: BARINGS FINANCE LLC, AS COLLATERAL AGENT
Reel/Frame 063429/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 28, 2021
From: PROVENANCE ASSET GROUP LLC
To: RPX CORPORATION
Reel/Frame 059352/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 30, 2021
From: NOKIA US HOLDINGS INC.
To: PROVENANCE ASSET GROUP HOLDINGS LLC; PROVENANCE ASSET GROUP LLC
Reel/Frame 058363/0723 →
RELEASE OF SECURITY INTEREST Recorded Nov 30, 2021
From: CORTLAND CAPITAL MARKETS SERVICES LLC
To: PROVENANCE ASSET GROUP HOLDINGS LLC; PROVENANCE ASSET GROUP LLC
Reel/Frame 058983/0104 →
ASSIGNMENT AND ASSUMPTION AGREEMENT Recorded Feb 14, 2019
From: NOKIA USA INC.
To: NOKIA US HOLDINGS INC.
Reel/Frame 048370/0682 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 13, 2017
From: NOKIA TECHNOLOGIES OY; NOKIA SOLUTIONS AND NETWORKS BV; ALCATEL LUCENT SAS
To: PROVENANCE ASSET GROUP LLC
Reel/Frame 043877/0001 →
SECURITY INTEREST Recorded Sep 13, 2017
From: PROVENANCE ASSET GROUP HOLDINGS, LLC; PROVENANCE ASSET GROUP LLC
To: NOKIA USA INC.
Reel/Frame 043879/0001 →
SECURITY INTEREST Recorded Sep 13, 2017
From: PROVENANCE ASSET GROUP HOLDINGS, LLC; PROVENANCE ASSET GROUP, LLC
To: CORTLAND CAPITAL MARKET SERVICES, LLC
Reel/Frame 043967/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 21, 2015
From: NOKIA CORPORATION
To: NOKIA TECHNOLOGIES OY
Reel/Frame 035457/0847 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 27, 2010
From: VARTEVA, JAAKKO; JANTUNEN, JONI
To: NOKIA CORPORATION
Reel/Frame 025537/0486 →