Device re-configuration for security

Patent metadata

Field	Value
Publication number	US-11243783-B2
Application number	US-201916526460-A
Country	US
Kind code	B2
Filing date	Jul 30, 2019
Priority date	Jul 30, 2019
Publication date	Feb 8, 2022
Grant date	Feb 8, 2022

Abstract

In accordance with some embodiments, an apparatus that controls device re-configuration for security is provided. The apparatus includes a storage storing a first firmware image for a re-configurable data communication device. In some embodiments, the first firmware image provides one or more operating parameter configurations for the re-configurable data communication device. The apparatus also includes a controller, which is coupled to the storage and the re-configurable data communication device and operable to manage transport of data by the re-configurable data communication device, including obtaining the first firmware image from the storage and loading the first firmware image to the re-configurable data communication device. The apparatus additionally includes a housing at least partially supporting the storage and the controller.

First claim

What is claimed is:

1. An apparatus comprising:
a storage storing a first firmware image for a re-configurable data communication device, wherein the first firmware image provides one or more operating parameter configurations for the re-configurable data communication device;
a controller, coupled to the storage and the re-configurable data communication device, operable to manage transport of data by the re-configurable data communication device, including:
obtaining the first firmware image from the storage; and
loading the first firmware image to the re-configurable data communication device; and

a housing at least partially supporting the storage and the controller, wherein the housing is arranged to hold a personal communication device, including a native data communication device, and the housing at least partially supports the re-configurable data communication device, and the re-configurable data communication device is operable as a proxy for the native data communication device of the personal communication device.

2. The apparatus of claim 1 , wherein:
the housing is arranged to hold a personal communication device, wherein the re-configurable data communication device is included in the personal communication device; and
the controller is connected to the re-configurable data communication device through a physical connection.

3. The apparatus of claim 1 , further comprising a peripheral interface supported by the housing, wherein:
the peripheral interface is connectable to a supplemental functional device and coupled to the controller; and
the re-configurable data communication device is included in the supplemental functional device and supplements at least one of a personal communication device held by the housing or the apparatus.

4. The apparatus of claim 1 , wherein:
the first firmware image is a trusted firmware image; and
loading the firmware image to the re-configurable data communication device includes at least one of overwriting at least a portion of a firmware image on the re-configurable data communication device with the trusted firmware image or overwriting at least a subset of operating parameters on the reconfigurable data communication device to set the re-configurable data communication device to a pre-determined operating parameter configuration.

5. The apparatus of claim 1 , wherein the storage further stores a second firmware image different from the first firmware image, and the controller is further operable to select an image between the first firmware image and the second firmware image based on a policy and load the selected image to the re-configurable data communication device.

6. The apparatus of claim 1 , wherein the controller is coupled to the re-configurable data communication device via a non-Direct Memory Access (DMA) channel.

7. The apparatus of claim 1 , wherein obtaining the first firmware image and loading the first firmware image are performed based on a re-configuration policy.

8. The apparatus of claim 1 , wherein obtaining the firmware image and loading the firmware image are performed in accordance with a determination by the controller that based on a context, the re-configurable data communication device is operating in an unsafe state.

9. The apparatus of claim 1 , further comprising a first communication device, at least partially supported by the housing, connectable to a second communication device of the personal communication device in order to establish a local communication channel.

10. The apparatus of claim 9 , wherein the controller is further operable to, via the local communication channel, disable the native data communication device of the personal communication device.

11. The apparatus of claim 9 , wherein the local communication channel is through a wired connection at least partially supported by the housing or a wireless connection establishing by pairing the first communication device and the second communication device.

12. The apparatus of claim 1 , wherein the controller is further operable to configure the re-configurable data communication device as the proxy for the native data communication device of the personal communication device, including:
selecting the re-configurable data communication device to provide alternative transport of the data for the personal communication device.

13. A method comprising:
at an apparatus including a controller and a storage storing a first firmware image that provides one or more operating parameter configurations for a re-configurable data communication device:
obtaining at least one of operational characteristics of a personal communication device or current operating parameter configurations of the re-configurable data communication device;
retrieving the first firmware image from the storage upon determining that at least one of the operational characteristics of the personal communication device or the current operating parameter configurations of the re-configurable data communication device satisfies a re-configuration policy;
loading the first firmware image to the re-configurable data communication device in order to configure the re-configurable data communication device in accordance with the one or more operating parameter configurations provided by the first firmware image;
establishing a local communication channel with the personal communication device;
directing, via the local communication channel, the personal communication device to disable a native data communication device of the personal communication device; and
communicating data exchanged with an external device to the personal communication device to provide a proxy for the native data communication device.

14. The method of claim 13 , wherein the re-configuration policy specifies a context associated with the personal communication device or the re-configurable data communication device.

15. The method of claim 13 , wherein loading the first firmware image to the re-configurable data communication device includes loading the first firmware image to the re-configurable data communication device via a wired connection.

16. The method of claim 13 , wherein:
the first firmware image is a trusted firmware image; and
loading the firmware image to the re-configurable data communication device includes overwriting at least a portion of a firmware image on the re-configurable data communication device with the trusted firmware image to set the re-configurable data communication device to a pre-determined operating parameter configuration.

17. The method of claim 13 , wherein loading the first firmware image to the re-configurable data communication device includes sending the first firmware image to the re-configurable data communication device via a non-DMA channel.

18. The method of claim 13 , wherein the local communication channel is through a wired connection or a wireless connection.

19. The method of claim 13 , wherein the storage further stores a second firmware image different from the first firmware image, and the method further includes:
selecting an image between the first firmware image and the second firmware image based on a policy; and
loading the selected image to the re-configurable data communication device to configure the re-configurable data communication device in accordance with the selected image.

20. The apparatus of claim 13 , wherein communicating the data exchanged with the external device to the personal communication device to provide the proxy for the native data commu

Assignees

• Ppip Llc

Inventors

• Fong Michael
• Fong Neric Hsin-Wu
• Speers Ryan Mark
• Foustok Mohamad Ahmad

Classifications

• G06F21/572

  Secure firmware programming, e.g. of basic input output system [BIOS] · CPC title

• G06F8/654

  using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories · CPC title

• G06F1/1632

  External expansion units, e.g. docking stations · CPC title

• G06F13/102 Primary

  where the program performs an interfacing function, e.g. device driver (G06F13/105 takes precedence; contention policies within device drivers G06F9/4881; scheduling within device drivers G06F9/52) · CPC title

• G06F1/182

  with special features, e.g. for use in industrial environments; grounding or shielding against radio frequency interference [RFI] or electromagnetical interference [EMI] · CPC title