# US 10,768,941 B2 · Operating system management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,768,941 B2 - Document ID: US10768941B2 - Status: Granted - Kind: B2 - Application number: 15/563,981 - Filed: 2015-06-26 - Published: 2018-05-17 - Granted: 2020-09-08 - Earliest claimed: 2015-06-26 - Assignees: Hewlett-Packard Development Company, L.P. - Applicants: Hewlett-Packard Development Company, L.P. - Inventors: Kate Mallichan; Boris Balacheff; Vali Ali; Shane Steiger; Logan Clay Browne - Web page: https://patentgrep.com/patent/US10768941B2 ## CPC - G06F 9/4406: {Loading of operating system} - G06F 8/61: Installation - G06F 9/441: {Multiboot arrangements, i.e. selecting an operating system to be loaded} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 11/1469: {Backup restoration techniques} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 21/74: operating in dual or compartmented mode, i.e. at least one secure mode - G06F 2009/45562: {Creating, deleting, cloning virtual machine instances} - G06F 2009/45583: {Memory management, e.g. access or allocation} - G06F 2201/84: Using snapshots, i.e. a logical point-in-time copy of the data - G06F 2221/034: Test or assess a computer or a system - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A computing device includes a processor, a memory coupled to the processor, and a non-transitory computer readable storage medium coupled to the processor that includes instructions, that when executed by the processor, cause the processor to manage a transition between a first operating system and a second operating system. The instructions cause the processor to instantiate a copy-on-write virtual computing system executing a first operating system, delete a second operating system from the non-transitory computer readable storage medium or the memory, copy the first operating system to the non-transitory computer readable storage medium. The instructions can further cause the processor to instantiate the first operating system on the computing device. ## Claims ### Claim 1 A computing device comprising: a processor; a memory coupled to the processor; and a non-transitory computer readable storage medium coupled to the processor and comprising instructions, that when executed by the processor, cause the processor to: change an operating parameter of the computing device based on a domain change, wherein the domain change represents: a physical change in location of the computing device from a first geographic location having a first network to a second geographic location having a second network; and a change in a network security level from the first network to the second network; select, based on the changed operating parameter, a first operating system to be instantiated from a library of operating systems; instantiate a copy-on-write virtual computing system executing the first operating system based on the domain change; delete a second operating system from the non-transitory computer readable storage medium or the memory in parallel with the instantiation of the copy-on-write virtual computing system executing the first operating system; copy the first operating system to the non-transitory computer readable storage medium; and instantiate the first operating system on the computing device. ### Claim 2 (depends on 1) The computing device of claim 1 wherein the instructions that cause the processor to copy the first operating system further cause the processor to receive an image of the first operating system from a remote computing system. ### Claim 3 (depends on 1) The computing device of claim 1 wherein the instructions further cause the processor to write data corresponding to copy-on-write operations performed by the copy-on-write virtual computing system to the non-transitory computer readable storage medium using the first operating system. ### Claim 4 (depends on 1) The computing device of claim 1 wherein the first operating system comprises a first set of operating parameters associated with use of the computing device in a trusted operating environment and the second operating system comprises a set of operating parameter associated with use of the computing device in an untrusted operating environment. ### Claim 5 (depends on 1) The computing device of claim 1 wherein the instructions that cause the processor to delete the second operating system first cause the processor to save a backup image of the second operating system to a backup storage medium different from the non-transitory computer storage medium and the memory. ### Claim 6 (depends on 5) The computing device of claim 5 wherein the instructions further cause the processor to: receive a command to restore the second operating system from a remote computing system; and in response to the command to restore the second operating system the instructions further cause the processor to: send to the remote computing system: security audit logs regarding operation of the first operating system; send an image of the first operating system as of the time the command to restore the second operating system is received; and send user data generated during the operation of the first operating system for quarantine; instantiate a restore copy-on-write virtual computing system executing the second operating system from the backup storage medium; delete the first operating system from the computing device; and instantiate the second operating system on the computing device. ### Claim 7 (depends on 6) The computing device of claim 6, wherein the instructions further cause the processor to write copy-on-write operations performed by the restore copy-on-write virtual computing system to the non-transitory computer readable storage medium. ### Claim 8 (depends on 1) The computing device of claim 1 wherein the instructions that cause the processor to instantiate the copy-on-write virtual computing system further cause the processor to receive a trigger command from a remote computing system to trigger the instantiation of the copy-on-write virtual computing system. ### Claim 9 (depends on 8) The computing device of claim 8 wherein the trigger command from the remote computing system comprises an indication of a change to a domain associated with the first operating system. ### Claim 10 (depends on 8) The computing device of claim 8 wherein the instructions that cause the processor to copy the first operating system further cause the processor to copy the first operating system from a hidden partition to an active partition of the non-transitory computer readable storage medium. ### Claim 11 A method managing operating systems comprising: generating, using a processor of a mobile computing device, a backup image of a first operating system associated with a first operating environment in which the mobile computing device was previously used; changing, using the processor, an operating para meter of the mobile computing device based on a domain change, wherein the domain change represents: a physical change in location of the mobile computing device from a first geographic location having a first network to a second geographic location having a second network; and a change in a network security level from the first network to the second network; selecting, using the processor based on the changed operating parameter, a second operating system to be instantiated from a library of operating systems; instantiating, using the processor and based the domain change, a copy-on-write virtual computing system executing the second operating system associated with a second operating environment in which the mobile computing device is to be used; deleting, using the processor, the first operating system from a memory associated with the processor in parallel with the instantiation of the copy-on-write virtual computing system executing the second operating system; copying, using the processor, an image of the second operating system to the memory associated with the processor; and instantiating, using the processor, the second operating system from the image of the second operating system. ### Claim 12 (depends on 11) The method of claim 11, further comprising writing, using the processor, data corresponding to copy-on-write operations performed by the copy-on-write virtual computing system to the memory. ### Claim 13 (depends on 11) The method of claim 11, further comprising: in response to a command to restore the first operating system: generating audit logs composing information about operation of the second operating; generating an image of the second operating system as of the time the command to restore the first operating system is received; generating a backup of user data generated during the operation of the second operating system for quarantine; instantiating a restore copy-on-write virtual computing system executing the first operating system from the backup image; deleting, using the processor, the second operating system from the computing device in parallel with the instantiation of the restore copy-on-write virtual computing system executing the first operating system; and instantiating the first operating system on the computing device. ### Claim 14 A non-transitory computer readable storage medium comprising instructions stored in a first partition, that when executed by a processor, cause the processor to instantiate a hypervisor to: initiate a backup process to generate a backup image of a first operating system currently running on a computing device associated with the processor; change an operating parameter of the computing device based on a domain change, wherein the domain change represents: a physical change in location of the computing device from a first geographic location having a first network to a second geographic location having a second network; and a change in a network security level from the first network to the second network; select, based on the changed operating parameter, a second operating system to be instantiated from a library of operating systems; instantiate a copy-on-write virtual computing system executing the second operating system based on the domain change; delete the first operating system from a second partition of the non-transitory computer readable storage medium in parallel with the instantiation of the copy-on-write virtual computing system executing the second operating system; copy the second operating system to the second partition of the non-transitory computer readable storage medium; and instantiate the second operating system on the computing device from the second partition of the non-transitory computer readable storage medium. ### Claim 15 (depends on 14) The non-transitory computer readable storage medium of claim 14, wherein the first and second partitions are isolated from each other.