Changing product behavior in accordance with license
AssigneeMicrosoft Corporation
InventorsIsaac Ahdout, Martin Hall, Zhangwei Xu
Life of this patent
Estimating the term…
Abstract
A computer or other electronic device uses a cryptographic capability and hardware identifier to verify a provisioning packet for changing the mode of operation of the device or a licensed component. A secure memory stores the provisioning packet for future reference. A sequence number may be used to limit replay attacks. An exemplary use is conversion of a computer from metered use during a subscription period to unlimited use when the subscription terms have been satisfied.
Claims18
A computer adapted for pay-per-use operation, the computer comprising:
- a cryptographic unit;
- a tamper-resistant non-volatile memory storing at least a hardware identifier and a local cryptographic key;
- a policy enforcement device;
- and
- a processor coupled to the cryptographic unit and the tamper-resistant non-volatile memory operable to convert the computer from a first licensing mode of operation to a second licensing mode of operation in response to an instruction, the instruction including the hardware identifier and digitally-signed with a cryptographic key corresponding to the local cryptographic key.
A method of setting a system configuration for an electronic device comprising:
- storing, in a tamper-resistant fashion, a hardware identifier associated with the electronic device;
- storing, in a tamper-resistant fashion, a public key;
- storing a provisioning packet, the provisioning packet digitally signed and including the hardware identifier;
- verifying the digitally signed provisioning packet using the public key;
- and
- configuring the electronic device for operation in compliance with instructions included in the provisioning packet when the digitally signed provisioning packet is verified.
A method for configuring a computer capable of operating in a metered-use mode comprising:
- generating, at a server, a provisioning packet including instructions for reconfiguring the metering state of the computer;
- digitally signing the provisioning packet using a trusted private key;
- receiving the provisioning packet from the server at the computer;
- verifying the provisioning packet at the computer using a securely stored public key corresponding to the trusted private key;
- and
- setting the metering state of the computer according to the instructions in the provisioning packet when the verifying the provisioning packet is successful.
Dependencies are inferred from the claim text.