# US 8,789,148 B1 · Systems and methods for deployment of secure shell devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,789,148 B1 - Document ID: US8789148B1 - Status: Granted - Kind: B1 - Application number: 13/770,223 - Filed: 2013-02-19 - Granted: 2014-07-22 - Earliest claimed: 2008-04-09 - Assignees: United Services Automobile Association - Applicants: United Services Automobile Association (USAA) - Inventors: Charles L. Oakes, III; Reynaldo Medina, III; Bradly J. Billman - Web page: https://patentgrep.com/patent/US8789148B1 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 67/125: involving control of end-device applications over a network - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/06: Authentication - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A shell device with minimal software and/or hardware resources can download from a server configuration information and/or user data in order to allow the shell device to communicate with other computing devices (whether cell phones, personal digital assistants, laptops, and the like). Various security features can also be used herein, including a shell device password and a server network access password. In another aspect, any time code and/or data is downloaded from the server to the shell device, such code and/or data resides on the shell device during the time of a communication between the server and the shell device; thereafter, it can be deleted, thereby returning the shell device to its minimalistic resource state. When the shell device contacts the server again and attempts to establish another communication, such code and/or data can be downloaded anew, and after the communication it can be deleted again. ## Claims ### Claim 1 A system comprising: a subsystem configured to determine whether a shell device activation input is valid to contact a server; a subsystem configured to establish communication with the server and check a network access input upon a valid shell device activation input determination; a subsystem configured to receive configuration information on a shell device from the server; a subsystem configured to maintain the configuration information during the communication between the shell device and the server; and a subsystem configured to remove information about the communication and the configuration information from the shell device. ### Claim 2 (depends on 1) The system of claim 1, further comprising a subsystem configured to establish communication between the shell device and a second shell device. ### Claim 3 (depends on 2) The system of claim 2, wherein the shell device relays a signal from the second shell device to the server. ### Claim 4 (depends on 3) The system of claim 3, wherein the relay is a passive relay. ### Claim 5 (depends on 1) The system of claim 1, wherein the configuration information. ### Claim 6 (depends on 1) The system of claim 1, wherein the information is removed based at least in part upon a location of the shell device. ### Claim 7 (depends on 1) The system according to claim 1, wherein the information is removed based at least in part upon a security specification of the server. ### Claim 8 A computer implemented method comprising: determining whether a shell device activation input is valid to contact a server; establishing communication with the server and checking a network access activation input upon a valid shell device activation input determination; receiving configuration information on a shell device from the server; maintaining the configuration information during the communication between the shell device and the server; and removing information about the communication and the configuration information from the shell device. ### Claim 9 (depends on 8) The method of claim 8, wherein the shell device activation includes a display. ### Claim 10 (depends on 8) The method of claim 8, wherein the server monitors the communication. ### Claim 11 (depends on 8) The method of claim 8, wherein the server ends the communication based upon a time interval. ### Claim 12 (depends on 8) The method of claim 8, further comprising providing the shell device a second communication with a computing device remote from the server. ### Claim 13 (depends on 12) The method of claim 12, wherein the second communication is encrypted. ### Claim 14 (depends on 12) The method of claim 12, wherein the second communication is monitored by the server. ### Claim 15 A non-transitory computer readable medium comprising instructions stored thereon and executed by a processing resource to: determine whether a shell device activation input is valid to contact a server; establish communication with the server and check a network access activation input upon a valid shell device activation input determination; receive configuration information on the shell device from the server; maintain the configuration information during the communication between the shell device and the server; and remove information about the communication and the configuration information from the shell device. ### Claim 16 (depends on 15) The computer readable medium of claim 15, wherein information from the server is stored on a secured memory of the shell device. ### Claim 17 (depends on 15) The computer readable medium of claim 15, further comprising instructions executed to authenticate a user of the shell device. ### Claim 18 (depends on 17) The computer readable medium of claim 17, wherein the authentication includes an analysis of biometric data. ### Claim 19 (depends on 18) The computer readable medium of claim 18, wherein the biometric data includes voice recognition. ### Claim 20 (depends on 18) The computer readable medium of claim 18, wherein the biometric data includes at least one of an iris scan and a finger print.