Portable operating system and portable user data

Patent metadata

Field	Value
Publication number	US-11467848-B2
Application number	US-202016868950-A
Country	US
Kind code	B2
Filing date	May 7, 2020
Priority date	May 7, 2020
Publication date	Oct 11, 2022
Grant date	Oct 11, 2022

Abstract

Aspects described herein may relate to methods, systems, and apparatuses for allowing the access of user data across multiple devices. The access may be performed based on a portable hardware device that comprises an operating system and the user data. When the portable hardware device is inserted or otherwise connected to a computing device, the portable hardware device may, based on execution of the operating system, use or otherwise control one or more computing resources of the computing device. By this use and/or control of the one or more computing resources, the user data may be accessed. A computing platform may communicate with the portable hardware device and the computing device to manage the portable hardware device's access to the user data and monitor usage of computer resources by the portable hardware device.

First claim

We claim:

1. A method comprising:
receiving, by one or more first computing devices and via a network, a registration request from a second computing device;
registering, by the one or more first computing devices, the second computing device as part of a pool of computing devices available for use by a plurality of portable hardware devices, wherein a first portable hardware device of the plurality of portable hardware devices comprises (a) memory storing user data in an encrypted form, authentication data for the first portable hardware device, and an operating system; and (b) one or more processors configured to execute the operating system;
sending, by the one or more first computing devices via the network and for installation on the second computing device, software that is configured to interface with the first portable hardware device and is configured to enable the first portable hardware device to, based on execution of the operating system by the first portable hardware device, use one or more computing resources of the second computing device;
receiving, by the one or more first computing devices, a first indication that indicates the first portable hardware device has been connected to the second computing device;
storing, by the one or more first computing devices and based on the first indication, a second indication that indicates the second computing device is in use;
receiving, by the one or more first computing devices, the authentication data;
based on the authentication data, sending, by the one or more first computing devices and to the first portable hardware device, a decryption key for decrypting the user data into an unencrypted form;
receiving, by the one or more first computing devices, a third indication that, based on execution of the operating system by the first portable hardware device and based on the first portable hardware device accessing the user data in the unencrypted form, indicates the one or more computing resources were used by the first portable hardware device;
storing, by the one or more first computing devices, the third indication;
receiving, by the one or more first computing devices, a fourth indication that indicates the portable hardware device has been disconnected from the second computing device; and
storing, by the one or more first computing devices and based on the fourth indication, a fifth indication that indicates the second computing device is available for use by the plurality of portable hardware devices.

2. The method of claim 1 , wherein the first portable hardware device comprises a hardware interface, wherein the hardware interface is configured to establish a Peripheral Control Interface Express (PCIe) bus to the second computing device based on the first portable hardware device being inserted into the second computing device, and wherein the first indication is sent based on the PCIe bus being established.

3. The method of claim 1 , wherein the user data comprises a containerized application, wherein the third indication indicates usage of the one or more computing devices based on the second computing device executing code of the containerized application.

4. The method of claim 1 , further comprising:
determining, based on the third indication, a price for usage of the one or more computing resources of the second computing device; and
billing, based on the price, an account associated with the first portable hardware device.

5. The method of claim 1 , further comprising:
registering a third computing device as part of the pool of computing devices available for use by the plurality of portable hardware devices;
receiving a sixth indication that indicates the first portable hardware device has been connected to the third computing device;
storing, based on the sixth indication, a seventh indication that indicates the third computing device is in use;
receiving an eighth indication that indicates one or more computing resources of the third computing device were used by the first portable hardware device;
receiving a ninth indication that indicates the portable hardware device has been disconnected from the third computing device; and
storing, based on the ninth indication, a tenth indication that indicates the third computing device is available for use by the plurality of portable hardware devices.

6. The method of claim 1 , wherein the second indication is based on a blockchain associated with the second computing device.

7. The method of claim 1 , wherein the second computing device comprises a laptop computer.

8. The method of claim 1 , wherein the second computing device comprises a mobile phone.

9. The method of claim 1 , wherein the one or more computing resources comprise a processor, and wherein the third indication indicates that the processor was used by the first portable hardware device.

10. The method of claim 1 , further comprising:
determining, based on a key rotation algorithm, the decryption key.

11. The method of claim 10 , wherein the first portable hardware device is configured to delete the decryption key as part of a de-coupling process for disconnecting the first portable hardware device.

12. The method of claim 1 , further comprising:
receiving a sixth indication that indicates a second portable hardware device of the plurality of portable hardware devices has been connected to the second computing device;
storing, based on the sixth indication, a seventh indication that indicates the second computing device is unavailable for use;
receiving an eighth indication that indicates the one or more computing resources of the second computing device were used by the second portable hardware device;
receiving a ninth indication that indicates the second portable hardware device has been disconnected from the second computing device; and
storing, based on the ninth indication, a tenth indication that indicates the second computing device is available for use by the plurality of portable hardware devices.

13. One or more non-transitory media storing instructions that, when executed, cause one or more first computing devices to perform steps comprising:
receiving, via a network, a registration request from a second computing device;
registering the second computing device as part of a pool of computing devices available for use by a plurality of portable hardware devices, wherein a first portable hardware device of the plurality of portable hardware devices comprises (a) memory storing user data in an encrypted form, authentication data for the first portable hardware device, and an operating system; and (b) one or more processors configured to execute the operating system;
sending, via the network and for installation on the second computing device, software that is configured to interface with the first portable hardware device and is configured to enable the first portable hardware device to, based on execution of the operating system by the first portable hardware device, use one or more computing resources of the second computing device;
receiving a first indication that indicates the first portable hardware device has been connected to the second computing device;
storing, based on the first indication, a second indication that indicates the second computing device is in use;
receiving the authentication data;
based on the authentication data, sending, to the first portable hardware device, a decryption key for decrypting the user data into an unencrypted form;
receiving a third indication that, based on execution of the operating system by the first portable hardware device and based on the first portable hardware device acces

Assignees

• Capital One Services Llc

Inventors

• Walters Austin
• Rafferty Galen
• Watson Mark
• Truong Anh
• Pham Vincent
• Farivar Reza
• Goodsitt Jeremy

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06F21/34

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• G06F2213/0026

  PCI express · CPC title

• G06F21/44

  Program or device authentication · CPC title