Methods and apparatuses for securely operating shared host computers with portable apparatuses
View Patent ↗The present invention provides methods and apparatuses that utilize a portable apparatus to securely operate a host electronic device. Typically, each portable apparatus includes a data storage unit which stores an operating system and other software. In one example, a portable apparatus can provide a virtual operating environment on top of a host's operating system for a host device. In another example, a portable apparatus containing its operating system can directly boot a host device with one or more hardware profiles. Furthermore, a device-dependent protection against software piracy, a user-dependent protection against sensitive data leaks, a controllable host operating environment to prevent unwanted information exposure, and a secure restoration procedure to prevent virus infection between the host device users may be incorporated. Moreover, a pre-defined information may also be utilized to authorize a connected-state guest operation environment in the host device.
1. A system comprising:
a computer-readable portable storage medium containing a guest portable operation system which is encrypted;
a host computer adapted to receive a password from a user to decrypt the guest portable operation system and activate a guest operation environment on the host computer from the guest portable operation system wherein the guest portable operation system is a virtual operation system running on top of the host computer's operating system and the host computer provides a plurality of drivers for operation of the guest portable operation system;
wherein the guest operation environment provided by the guest portable operation system accommodates authorized use of intellectual property data from the portable storage medium; and
wherein the host system is restored from the guest operation environment to a pre-connection state when the portable storage medium is disconnected from the host computer.
2. The system of claim 1 , further comprising:
a central server connected to the host computer and capable of monitoring usage of the host computer by the guest portable operation system.
3. A system comprising:
a computer-readable portable storage medium containing device identification information and a guest portable operation system, wherein the guest portable operation is encrypted and a host computer is adapted to receive a password from a user before decrypting the guest portable operation system;
the host computer adapted to grant an authorization for activating a guest operation environment on the host computer from the guest portable operation system based on a comparison of the device identification information with an activation key wherein the guest portable operation system is a virtual operation system running on top of a host computer's operating system and the host computer provides a plurality of drivers for operation of the guest portable operation system;
wherein the guest operation environment provided by the guest portable operation system accommodates authorized use of intellectual property data from the portable storage medium; and
wherein the host system is restored from the guest operation environment to a pre-connection state when the portable storage medium is disconnected from the host computer.
4. The system of claim 3 , wherein the activation key is stored in at least one of the portable storage medium and the host computer.
5. The system of claim 3 , further comprising:
a central server connected to the host computer and adapted to manage the activation key for the host computer so as to activate the guest portable operation system.
6. A method of creating an activated guest operation environment on a host computer from a computer-readable portable storage medium comprising:
loading a first set of instructions from a portable storage medium onto a host computer;
receiving a password for the first set of instructions;
loading a second set of instructions which are encrypted from a guest operation system in the portable storage medium onto the host computer; decrypting the second set of instructions by the first set of instructions with the received password wherein the decrypted second set of instructions create an activated guest operation environment on the host computer wherein the guest portable operation system is a virtual operation system running on top of a host computer's operating system and providing a plurality of drivers from the host computer for operation of the guest portable operation system;
authorizing use of intellectual property data from the portable storage medium; and
restoring the host system from the guest operation environment to a pre-connection state when the portable storage medium is disconnected from the host computer.
7. The method of claim 6 , further comprising:
monitoring usage of the host computer by the guest portable operation system from a central server.