Whitelist-authenticated image and interactive service

Patent metadata

Field	Value
Publication number	US-12445444-B2
Application number	US-202217895631-A
Country	US
Kind code	B2
Filing date	Aug 25, 2022
Priority date	Aug 26, 2021
Publication date	Oct 14, 2025
Grant date	Oct 14, 2025

Abstract

Systems and methods of the disclosure provide for receiving, from a GUI on a client device, a request to download and install an OS image and integrated interactive service on a bootable resource; transmitting to the client device the OS image and the integrated interactive service to be installed on the bootable resource, wherein the bootable resource is configured to: on a restart of the client device, boot to the OS image and launch the interactive service; and deny access to any software, service, or resource not available on the bootable resource.

First claim

What is claimed is:

1. A system comprising:
a bootable resource comprising memory configured to store data; and
a server comprising at least one computing device coupled to a network of computing devices and comprising at least one processor executing instructions within a memory which, when executed by the at least one processor, cause the system to:
generate a graphical user interface (GUI) to be displayed on a client device coupled to the network;
receive, from the client device via the GUI, a user input comprising a request to download and install an operating system (OS) image and an integrated interactive service on the bootable resource;
transmit, through the network to the client device, the OS image and the integrated interactive service to be installed on the bootable resource, the bootable resource thereby being configured to:
on a restart of the client device, boot to the OS image and launch the interactive service; and
deny access to any software, service, or resource not available on the bootable resource;

transmit, through the network for installation, an access token creator for the integrated interactive service; and
boot the OS image using an access token created by the access token creator,

wherein responsive to the access token creator for the integrated interactive service being installed on the client device, the instructions cause the system to perform a uniform resource locator (URL) lookup for an access key generated by the access token creator.

2. The system of claim 1 , wherein the instructions further cause the system to determine whether the client device is connected to the network as prerequisite to booting the OS image using the access token.

3. The system of claim 1 , wherein the instructions further cause the system to boot the OS image using the access token responsive to a proper functioning of the integrated interactive service.

4. The system of claim 1 , wherein the instructions further cause the system to install the OS image and the integrated interactive service by executing, within the instructions, at least one formatting and imaging software module.

5. The system of claim 4 , wherein, prior to executing the at least one formatting and imaging software module, the instructions determine whether the formatting and imaging software module is installed on the client device.

6. The system of claim 1 , wherein the GUI comprises:
a first GUI component comprising a prompt to insert and select a universal serial bus (USB) drive as the bootable resource into the client device; and
a second GUI component comprising a prompt to connect to the network using a user identifier and a password.

7. The system of claim 1 , wherein, to boot to the OS image on the restart of the client device, a boot loader of the client device points to the OS image that is on the bootable resource and the client device executes the OS image that is on the bootable resource.

8. The system of claim 1 , wherein the request is to download and install the OS image and integrated interactive system onto the bootable resource from the server.

9. The system of claim 1 , wherein the GUI comprises a prompt to select the bootable resource as a destination for the OS image and integrated interactive system.

10. A method comprising:
generating, by a server comprising at least one computing device coupled to a network of computing devices and comprising at least one processor executing instructions within a memory, a graphical user interface (GUI) to be displayed on a client device coupled to the network;
receiving, by the server from the client device via the GUI, a user input comprising a request to download and install an operating system (OS) image and an integrated interactive service on a bootable resource comprising memory configured to store data;
transmitting, by the server through the network to the client device, the OS image and the integrated interactive service to be installed on the bootable resource, the bootable resource thereby being configured to:
on a restart of the client device, boot to the OS image and launch the interactive service; and
deny access to any software, service, or resource not available on the bootable resource;

transmitting, by the server through the network for installation, an access token creator for the integrated interactive service;
booting the OS image using an access token created by the access token creator, and
responsive to the access token creator for the integrated interactive service being installed on the client device, performing a uniform resource locator (URL) lookup for an access key generated by the access token creator.

11. The method of claim 10 , further comprising the step of determining whether the client device is connected to the network as prerequisite to booting the OS image using the access token.

12. The method of claim 10 , further comprising the step of booting the OS image using the access token responsive to a proper functioning of the integrated interactive service.

13. The method of claim 10 , further comprising the step of installing the OS image and the integrated interactive service by executing, within the instructions, at least one formatting and imaging software module.

14. The method of claim 13 , further comprising the step of prior to executing the at least one formatting and imaging software module, determining whether the formatting and imaging software module is installed on the client device.

15. The method of claim 10 , wherein the GUI comprises:
a first GUI component comprising a prompt to insert and select a universal serial bus (USB) drive as the bootable resource into the client device; and
a second GUI component comprising a prompt to connect to the network using a user identifier and a password.

16. A non-transitory computer-readable medium storing instructions that, when executed by an electronic processor, perform a set of functions, the set of functions comprising:
generating a graphical user interface (GUI) to be displayed on a client device coupled to a network;
receiving, from the client device via the GUI, a user input comprising a request to download and install an operating system (OS) image and an integrated interactive service on a bootable resource, the bootable resource comprising memory configured to store data;
transmitting, through the network to the client device, the OS image and the integrated interactive service to be installed on the bootable resource, the bootable resource thereby being configured to:
on a restart of the client device, boot to the OS image and launch the interactive service; and
deny access to any software, service, or resource not available on the bootable resource;

transmitting, through the network for installation, an access token creator for the integrated interactive service;
booting the OS image using an access token created by the access token creator; and
responsive to the access token creator for the integrated interactive service being installed on the client device, performing a uniform resource locator (URL) lookup for an access key generated by the access token creator.

17. The computer-readable medium of claim 16 , wherein the set of functions further comprises:
determining whether the client device is connected to the network as prerequisite to booting the OS image using the access token.

Assignees

• Pearson Education Inc

Inventors

• Nealis Michael

Classifications

• G06F21/575 Primary

  Secure boot · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F8/63

  Image based installation; Cloning; Build to order · CPC title

• G06F2221/034

  Test or assess a computer or a system · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title