Methods and apparatuses for securely operating shared host devices with portable apparatuses

摘要

The present invention provides methods and apparatuses that utilize a portable apparatus to securely operate a host electronic device. Typically, each portable apparatus includes a data storage unit which stores an operating system and other software. In one example, a portable apparatus can provide a virtual operating environment on top of a host's operating system for a host device. In another example, a portable apparatus containing its operating system can directly boot a host device with one or more hardware profiles. Furthermore, a device-dependent protection against software piracy, a user-dependent protection against sensitive data leaks, a controllable host operating environment to prevent unwanted information exposure, and a secure restoration procedure to prevent virus infection between the host device users may be incorporated. Moreover, an authorization signature may also be utilized to authorize a connected-state guest operation environment in the host device.

主权项

1. A method for establishing an activated connected-state operation environment between a host device and an operation system contained in a portable apparatus, the method comprising the steps of:
before locating an activation key and deciding to allow or deny the activated connected-state operation environment, executing a portable apparatus loader program from the portable apparatus in a CPU and a memory unit of the host device, wherein the portable apparatus loader program creates a pre-activated connected-state operation environment between the host device and the operation system contained in the portable apparatus by loading part of a guest operating system from the portable apparatus into a virtual operating system environment in the host device; generating a hardware-dependent installation identification by utilizing at least one piece of information from hardware configuration parameters associated with the portable apparatus or by incorporating at least one piece of information from a hardware profile or an authorization signature associated with the host device or a server computer operatively connected to the host device; locating the activation key; and allowing the activated connected-state operation environment between the operation system in the portable apparatus and the host device, when the hardware-dependent installation identification matches the activation key in the pre-activated connected-state operation environment.