Methods and apparatuses for securely operating shared host computers with portable apparatuses

摘要

The present invention provides methods and apparatuses that utilize a portable apparatus to securely operate a host electronic device. Typically, each portable apparatus includes a data storage unit which stores an operating system and other software. In one example, a portable apparatus can provide a virtual operating environment on top of a host's operating system for a host device. In another example, a portable apparatus containing its operating system can directly boot a host device with one or more hardware profiles. Furthermore, a device-dependent protection against software piracy, a user-dependent protection against sensitive data leaks, a controllable host operating environment to prevent unwanted information exposure, and a secure restoration procedure to prevent virus infection between the host device users may be incorporated. Moreover, an authorization signature may also be utilized to authorize a connected-state guest operation environment in the host device.

主权项

1. A data processing system comprising:
a host computer containing a microprocessor coupled to a memory block; a portable apparatus containing a data storage unit; a data communication port in the portable apparatus containing the data storage unit, wherein the data communication port accommodates transfer of data between the host computer and the portable apparatus; a host operating system originating from the host computer, wherein the host operating system is configured to operate the host computer with a system-level firmware or BIOS in a pre-connection state, in which an authorization signature associated with the host computer decides to grant or deny an authorization request for creating a guest operation environment from a guest operating system contained in the portable apparatus; the guest operating system contained in the portable apparatus, wherein the guest operating system is configured to provide the guest operation environment to the host computer and the portable apparatus when the authorization request is granted by the authorization signature associated with the host computer; a computer system server connected to the host computer, wherein the computer system server manages an authorization of the guest operation environment between the portable apparatus and the host computer, with the authorization signature stored and maintained in the computer system server by the host computer; and a plurality of computers connected to the computer system server, wherein the computer system server manages a plurality of authorizations for data transfer activities between a plurality of portable apparatuses and the plurality of computers.