Wireless communication between an integrated circuit memory device and a wireless controller device

11662918 · 2023-05-30

Assignee

Inventors

Cpc classification

International classification

Abstract

An integrated circuit device that includes a secure or protected memory component is herein disclosed and enabled. The integrated circuit device may be a wireless communication device, a smart phone, or a smart card. Additionally, the integrated circuit device may be part of, or included in, a computing device or a mobile device. The integrated circuit device includes a protected memory section for storing protected data that is not accessible by a user at the protected memory section, but is accessible by a memory controller included in the integrated circuit device. The access and transfer of the protected data is protected using combination security operations that may include encryption, cryptography, and user authentication. The integrated circuit device may further include a wireless component for establishing a wireless connection with wireless computing devices or readers for wirelessly transmitting the protected data accessed by the memory controller.

Claims

1. An integrated circuit memory device that is a wireless device for wirelessly transmitting protected encrypted data stored in the integrated circuit memory device, the integrated circuit memory device comprising: a user interface for interacting with a user; a memory controller for executing software or firmware stored at the integrated circuit memory device; memory that includes a protected memory area for storing protected data, the protected data stored in the protected memory area is not accessible, from the protected memory area, by the user of the integrated circuit memory device but is accessible by the memory controller; and wireless communication circuitry for short range radio frequency wireless communication with wireless controller devices that are within a limited physical distance from the integrated circuit memory device, wherein the integrated circuit memory device is operable to: (1) wirelessly discover, over the short range radio frequency wireless communication and using the wireless communication circuitry of the integrated circuit memory device, a wireless controller device that is within a limited physical distance from the integrated circuit memory device; (2) establish, using the wireless communication circuitry of the integrated circuit memory device, a short range wireless communication link between the integrated circuit memory device and the wireless controller device that is wirelessly discovered in (1), the short range wireless communication link being a radio communication link; (3) wirelessly provide, using the wireless communication circuitry of the integrated circuit memory device and over the short wireless communication link established in (2), from the integrated circuit memory device and to the wireless controller device wirelessly discovered in (1), at least device information for identifying the integrated circuit memory device to the wireless controller device; (4) access, using the software or firmware executable by the memory controller of the integrated circuit memory device, the protected data that is stored in the protected memory area, the accessing of the protected data from the protected memory area is based on the memory controller implementing a cryptographic algorithm; (5) encrypt, at the integrated circuit memory device, the protected data into encrypted data, the encrypted data is related, at least in part, to the protected data accessed by the memory controller in (4) from the protected memory area of the integrated circuit memory device, the encryption of the data is for wireless transmission of the encrypted data securely over short-range wireless communication from the integrated circuit memory device to the wireless controller device; (6) receive, using the user interface of the integrated circuit memory device, and from the user of the integrated circuit memory device, at least a user input for transmitting at least part of the encrypted data encrypted in (5), the user input including at least authentication information related to the user; (7) implement an authentication procedure, at and by the integrated circuit memory device, for authentication of the user of the integrated circuit memory device, the authentication procedure includes at least authenticating or interpreting the authentication information related to the user that is received in (6) or implementing cryptography techniques, individually or in any combination, the authentication information related to the user includes at least one or more of biometric information, voice information, or a password, individually or in any combination; and (8) wirelessly transmit, using the wireless communication circuitry of the integrated circuit memory device, directly from the integrated circuit memory device securely over the short range wireless communication link established in (2), and to the wireless controller device wirelessly discovered in (1), at least part of the encrypted data encrypted in (5), the wireless transmission of the encrypted data is subsequent to having wirelessly provided the at least device information from the integrated circuit memory device to the wireless controller device in (3) and is based on successful authentication of the user in (7), which includes at least authenticating or interpreting the authentication information related to the user that is received in (6); wherein the integrated circuit memory device provides protection of the protected data by storing the protected data in the protected memory area and requiring use of the integrated circuit memory device for wirelessly transmitting the encrypted data securely and directly from the integrated circuit memory device to the wireless controller device in (8).

2. The integrated circuit memory device of claim 1, wherein subsequent to wirelessly transmitting the encrypted data securely and directly from the integrated circuit memory device to the wireless controller device in (8), the integrated circuit memory device is further operable to receive, at the integrated circuit memory device, over the short range wireless communication link established in (2), and from the wireless controller device, status information related to the wireless transmitting of the encrypted data in (8).

3. The integrated circuit memory device of claim 1, wherein the integrated circuit memory device is included in at least one of a smart card, a dongle, a USB memory device, or a wireless communication device.

4. The integrated circuit memory device of claim 3, further comprising a structural interface for connecting the integrated circuit memory device to a reader or a computing device.

5. The integrated circuit memory device of claim 4, wherein the integrated circuit memory device is further configured for transmitting the encrypted protected data from the integrated circuit memory device, over the structural interface and via a structural connection, to the reader or the computing device.

6. The integrated circuit memory device of claim 1, wherein the integrated circuit memory device is included in a smart phone.

7. The integrated circuit memory device of claim 6, wherein the short range radio frequency wireless communication is a local point-to-point wireless communication and the short range wireless communication link established in (2) is a local point-to-point wireless communication connection.

8. A security method for transmitting protected data stored in an integrated circuit memory device to a wireless computing device, the integrated circuit memory device having: a wireless communication circuitry for establishing a short range wireless communication connection with the wireless computing device, the short range wireless communication connection being a radio communication connection; a memory controller; a memory component; a protected memory section in the memory component storing the protected data that is implemented to be not accessible by a user of the integrated circuit memory device at the protected memory section, but is implemented to be accessible by the memory controller; and an internal memory area in the memory component storing program or firmware that is implemented to be not accessible by the user of the integrated circuit memory device, but is implemented to be accessible and executable by the memory controller to support at least part of functionalities of the memory controller, the method comprising: (a) wirelessly discovering, over short range wireless communication and using the wireless communication circuitry of the integrated circuit memory device, the wireless computing device; (b) establishing, using the wireless communication circuitry of the integrated circuit memory device, a short range wireless communication link between the integrated circuit memory device and the wireless computing device wirelessly discovered in (a), the short range wireless communication link being a radio communication link; and (c) executing, by the memory controller, the program or firmware stored in the internal memory area, and the execution of the program or firmware manages to: access, using the program or firmware executable by the memory controller of the integrated circuit memory device, the protected data that is stored in the protected memory section; generate, using the program or firmware executable by the memory controller of the integrated circuit memory device, output data from the protected data that is accessed by the memory controller from the protected memory section of the integrated circuit memory device, the output data being related to the protected data; encrypt, using the program or firmware executable by the memory controller of the integrated circuit memory device, the generated output data for ensuring security of communication of encrypted output data from the integrated circuit memory device to the wireless computing device, the encrypted output data being related to the protected data; (d) implementing an authentication procedure, at and by the integrated circuit memory device, for authentication of the user of the integrated circuit memory device, the authentication procedure includes at least authenticating or interpreting authentication information related to the user or implementing cryptography techniques, individually or in any combination, the authentication information related to the user includes at least one or more of biometric information, voice information, or a password, individually or in any combination; and (e) wirelessly transmitting, using the wireless communication circuitry of the integrated circuit memory device, directly from the integrated circuit memory device securely over the short range wireless communication link established in (b), and to the wireless computing device wirelessly discovered in (a), at least part of the encrypted output data encrypted in (c), the wireless transmission of the encrypted output data is subsequent to having implemented the authentication procedure to authenticate the user of the integrated circuit memory device in (d).

9. The method of claim 8, wherein the integrated circuit memory device is included in a mobile phone or a smart phone.

10. The method of claim 8, wherein the method provides protection of the protected data by storing the protected data in the protected memory section of the integrated circuit memory device, by requiring use of the integrated circuit memory device for the wireless transmission of the encrypted output data, by the encryption operation in (c), and by the wireless transmission of the encrypted output data over the short range wireless communication link in (e).

11. The method of claim 9, wherein the method further comprises displaying information, related to the secure wireless transmitting of the encrypted output data in (e), on a graphical user interface provided in the mobile phone or the smart phone, the information displayed includes at least one of payment information or status information, individually or in any combination.

12. The method of claim 10, wherein the protected data includes user payment information, and wherein the encryption of output data includes encrypting, using the program or firmware executable by the memory controller of the integrated circuit memory device, the output data specific to the user payment information.

13. The method of claim 10, wherein the accessing of the protected data from the protected memory section in (c) is based on the memory controller implementing a cryptographic algorithm.

14. The method of claim 13, wherein the method further comprises wirelessly providing, using the wireless communication circuitry of the integrated circuit memory device, from the integrated circuit memory device to the wireless computing device wirelessly discovered in (a), and over the short range wireless communication link established in (b), at least a device descriptor interface, including at least device identification information, for identifying the integrated circuit memory device to the wireless computing device.

15. A wireless communication device that includes an integrated circuit memory device for storing protected data and a wireless communication circuitry for communicating securely with a wireless controller device, the wireless communication device comprising: the wireless communication circuitry for establishing a local point-to-point wireless communication connection with the wireless controller device, the local point-to-point wireless communication connection being a radio communication connection; a memory controller; a protected memory area storing protected data that is implemented to be not accessible by a user of the wireless communication device at the protected memory area, but is implemented to be accessible by the memory controller, the protected data includes data related to user payment information; and an internal memory area storing program or firmware that is implemented to be not accessible by the user of the wireless communication device, but is implemented to be accessible and executable by the memory controller to support at least part of functionalities of the memory controller, wherein operations of the wireless communication device include: (1) executing, by the memory controller, the program or firmware stored in the internal memory area; (2) accessing, using the program or firmware executable by the memory controller of the wireless communication device in (1), the protected data that is related to the user payment information, the accessing of the protected data that is related to the user payment information from the protected memory area is based on the memory controller implementing a cryptographic algorithm, and the accessing of the protected data that is related to the user payment information from the protected memory area is subsequent to the execution of the program or firmware by the memory controller in (1); (3) generating, using the program or firmware executable by the memory controller of the wireless communication device in (1), output data from the protected data that is related to the user payment information and that is accessed by the memory controller from the protected memory area of the wireless communication device in (2), the output data being related to the user payment information; (4) wirelessly discovering, over short range wireless communication and using the wireless communication circuitry of the wireless communication device, the wireless controller device; (5) establishing, using the wireless communication circuitry of the wireless communication device, a short range wireless communication link between the wireless communication device and the wireless controller device wirelessly discovered in (4), the short range wireless communication link being a radio communication link; (6) implementing an authentication procedure, at and by the wireless communication device, for authentication of the user of the wireless communication device, the authentication procedure includes at least authenticating or interpreting authentication information related to the user or implementing cryptography techniques, individually or in any combination, the authentication information related to the user includes at least one or more of biometric information, voice information, or a password, individually or in any combination; (7) wirelessly providing, using the wireless communication circuitry of the wireless communication device, from the wireless communication device over the short range wireless communication link established in (5), and to the wireless controller device wirelessly discovered in (4), at least device identification information for identifying the wireless communication device to the wireless controller device, the wireless providing of the at least device identification information from the wireless communication device to the wireless controller device is subsequent to the memory controller having executed the program or firmware stored in the internal memory area in (1); and (8) wirelessly transmitting, using the wireless communication circuitry of the wireless communication device, directly from the wireless communication device, securely over the short range wireless communication link established in (5), and to the wireless controller device wirelessly discovered in (4), at least part of the output data generated in (3), the wireless transmission of the output data is subsequent to having wirelessly provided the at least device identification information from the wireless communication device to the wireless controller device in (7) and is based on successful authentication of the user in (6).

16. The wireless communication device of claim 15, wherein the generation of output data in (3) includes encrypting the protected data into the output data, using the program or firmware executable by the memory controller of the wireless communication device in (1), and the encryption of the protected data is specific to the user payment information.

17. The wireless communication device of claim 15, wherein subsequent to wirelessly transmitting of at least part of the output data securely and directly from the wireless communication device to the wireless controller device in (8), operations of the wireless communication device further include receiving, at the wireless communication device, over the short range wireless communication link established in (5), and from the wireless controller device wirelessly discovered in (4), status information related to the secure wireless transmitting of at least part of the output data in (8).

18. The wireless communication device of claim 17, wherein the wireless communication device is further operable to display the status information, related to the secure wireless transmitting of at least part of the output data in (8), on a graphical user interface provided in the wireless communication device.

19. The wireless communication device of claim 18, wherein the wireless communication device is a mobile phone or a smart phone.

20. The wireless communication device of claim 15, wherein the wireless communication device further comprises a structural interface for connecting the wireless communication device to a reader or a computing device, and operations of the wireless communication device further include transmitting at least part of the output data generated in (3) from the wireless communication device, over the structural interface and via a structural connection, to the reader or the computing device.

Description

BRIEF DESCRIPTIONS OF THE DRAWINGS

(1) FIG. 1 illustrates an exemplary implementation of an autorun integrated circuit (IC) memory device according to the present invention.

(2) FIG. 2 is a block diagram of a prior art arrangement in which a host personal computer includes an intermediate hardware dock that provides an autorun feature.

(3) FIG. 3 is a flow diagram of an IC memory device autorun method.

(4) FIGS. 4A and 4B illustrate autorun firmware according to the present invention be embedded into alternative USB device configurations

(5) FIG. 5 is a block diagram of a USB peripheral having multiple functionalities.

(6) FIG. 6 is a block diagram of a USB hub with autorun firmware and access to multiple distinct functionalities.

(7) FIG. 7 is a schematic diagram of a person-operable physical slide switch.

(8) FIG. 8 is a flow diagram of a software-implemented copy protection method.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENT

(9) FIG. 1 illustrates an exemplary implementation of an autorun integrated circuit (IC) memory device 100 according to the present invention. Autorun IC memory device may be in the form of a USB memory device, a compact flash card, a smart card, etc. For purposes of illustration, autorun IC memory device 100 will be described with reference to a universal serial bus (USB) memory device implementation.

(10) Autorun IC memory device 100 includes a memory component 110 that communicates with a USB microcontroller 120 having autorun firmware 130 incorporated or embedded into microcontroller 120. Autorun IC memory device 100 includes an upstream port 140 for connecting to a host computing device 150 (e.g., personal or laptop computer, handheld computer, PDA, smart phone, etc., not shown). In the illustrated implementation, upstream port 140 is a USB port.

(11) Autorun firmware 130 causes an application or executable stored in memory component 110 to be installed or run automatically upon activation of the IC memory device 100 vis-à-vis the host computing device 150. This activation may be achieved in a variety of ways including connecting or inserting the autorun IC memory device 100 into a docking system or port present on or interfaced to the host computing device 150. For example, IC memory device 100 with autorun firmware 130 incorporated into USB microcontroller 120 allows a “USB Flash Drive” storing one or more application executables or installables to be run automatically (i.e., autorun) upon activation, such as being plugged into the USB port of a host PC 150.

(12) FIG. 2 is a block diagram of a prior art arrangement in which a host personal computer 200 includes an intermediate hardware dock 220 that provides an autorun feature for a storage medium like a CD-ROM 230. Intermediate hardware dock 220 functions as a storage media reader that may be internally integrated with or externally connected to the host personal computer 200 and the storage medium 230.

(13) In this prior art implementation, insertion of a CD-ROM disc 230 into a CD-ROM dock/reader 220 may cause activation of an autorun feature that is stored on or incorporated into CD-ROM dock/reader 220. Executables or installers stored on the CD-ROM disc 230 may then be executed by the host personal computer 200 based upon activation by the autorun feature CD-ROM dock/reader 220.

(14) As another example of such a prior art implementation, a flash memory card reader connected to a host computing device, such as a personal computer, may also include an autorun feature that can activate an executable or installer to run on the host computing device.

(15) A disadvantage of such prior art implementations is that autorun features are incorporated into hardware docks or readers that are separate from the storage media. However, the popular and widely-adopted Universal Serial Bus technology does not include such distinct autorun features. As a consequence, conventional integrated circuit memory devices such as USB memory devices do not have autorun functionality. In contrast, the present invention provides autorun functionality to any IC memory device, such as any USB peripheral that has a memory component interfaced to a USB microcontroller.

(16) FIG. 3 is a flow diagram of an IC memory device autorun method 300 that may be implemented from firmware 130 incorporated into a USB controller 120.

(17) In step 305, a USB peripheral is inserted into or connected to a USB port of a host computing device (e.g., a personal computer).

(18) In step 310, the host computing device performs an enumeration to identify the newly attached USB peripheral.

(19) Step 320 is a query as to whether the USB peripheral includes autorun firmware that is enabled. If so, step 320 proceeds to step 330. If not, step 320 proceeds to step 370.

(20) In step 330, the autorun firmware in the USB peripheral announces itself with a device interface description. For example, the device interface description may include Mass Storage Class, SCSI transparent command set, Bulk Only Transport corresponding to a CD-ROM, for example.

(21) In step 340, the host and the USB peripheral communicate with each other using, for example a standard MMC-2 specification set. The communication includes a response to host commands from the autorun firmware according to the MMC-2 specification. As a part of the MMC-2 specification, the host requests enumeration of files in root directory and the autorun firmware responds to the request.

(22) In step 350, the autorun firmware informs the host of the presence of an autorun executable file to be executed and provides the file to the host. For example, the file may be named “Autorun.inf,” which may be stored on the memory component of the USB peripheral. The host executes the autorun executable file to provide the autorun functionality.

(23) Step 360 is a query whether the autorun firmware is to be enumerated again or “re-enumerated.” If so, step 360 proceeds to step 370. If not, step 360 proceeds to step 390. Re-enumeration allows the autorun firmware to announce itself to the host as one or more other USB peripherals (e.g. data storage device, communication adapter, etc.) or, if there is no re-enumeration, the autorun firmware can continue to function as per MMC-2 specifications.

(24) In step 370, the autorun firmware re-enumerates or identifies itself as another USB device, such as a USB flash drive or a USB wireless (e.g., Bluetooth, WiFi, IrDA) device or “dongle.” With such a re-enumeration, the autorun firmware identifies itself with device interface descriptors for the other USB devices (e.g., USB flash drive or USB Bluetooth dongle).

(25) In step 380, the autorun firmware loads the firmware associated with the enumerated USB peripheral (e.g., USB flash drive or USB Bluetooth dongle).

(26) In step 390, the autorun firmware is configured to not re-enumerate itself and continues to act as a virtual CD-ROM type device implementing the MMC-2 specifications.

(27) Process steps 320, 330, 340, 350 and 360 correspond to the autorun firmware implementation. Step 390 provides for the implementation of a virtual mass storage device from a memory component that implements SCSI command set and MMC-2 specifications.

(28) Autorun firmware according to the present invention can be embedded into multiple USB device configurations to provide a variety of unique USB peripherals with autorun functionality and into other peripheral devices with similar functionality. For example, FIG. 4A shows a USB hub 400 in which a USB microcontroller 410 with auto run firmware 415 communicates with an internal memory component 420. In FIG. 4B, a USB microcontroller 450 is connected to an external memory component 460 through a USB downstream port 470.

(29) With reference to FIG. 4A, the USB microcontroller 410 that forms a part of the USB hub 400 typically is a repeater type entity allowing for cascaded multiple USB peripherals to connect through a single upstream port to a host system. The USB microcontroller 410 includes support for programming capability, which includes the autorun firmware 415. The Autorun firmware can then be ported to work on the USB microcontroller 410. The firmware may be stored on the internal memory component 420. Alternatively, the Autorun firmware may be stored on external memory that is in an attached USB memory component 430.

(30) As another configuration, FIG. 5 is a block diagram of a USB peripheral 500 having multiple functionalities. In this implementation, USB peripheral 500 includes an internal microprocessor with USB interfacing 510, or alternatively a USB microcontroller, that communicates with a memory component 520 and wireless (e.g., Bluetooth) networking hardware 530. As a result, USB peripheral 500 is capable of operating as a wireless (e.g., Bluetooth) networking device or “dongle” and as USB flash drive, both of which are accessible with autorun functionality

(31) In one configuration, the microprocessor 510 has USB interfacing ability. It is coupled with a memory component 520 and Bluetooth radio component 530. Microprocessor 510 implements client layers of the Bluetooth stack. The firmware that the microprocessor 510 executes is stored in memory component 520. The autorun firmware can also be additionally stored as a part of the functionality of existing firmware or separately in the memory component 520. In another configuration, the microprocessor 510 may not directly have USB interfacing capability and could use a separate USB microcontroller (not shown).

(32) A feature of including autorun firmware in USB peripherals is that software applications can be bundled with the USB peripherals. The bundled software application may or may not utilize the USB peripheral.

(33) As an example, FIG. 6 is a block diagram of a USB hub 600 that includes a USB microcontroller 610 with autorun firmware 615 and access to one or multiple distinct functionalities or USB peripherals, such as an external memory component 630, a Bluetooth networking component 640, or a WLAN component 650. Such USB peripherals 630-650 could be formed in combination with USB hub 600. USB hub 600 may be externally connected with one or more of these components 630-650, as illustrated, or alternatively one or more of the components 630-650 can be internally integrated to form a USB peripheral or device with multiple distinct functionalities.

(34) There could be multiple executions of autorun firmware from each or some of these peripherals. Thus the autorun firmware allows for distribution of software (e.g. device drivers, synchronization software, etc.) that can be autorun along with any USB peripheral.

(35) The implementation options also include mechanisms for allowing the autorun feature to be enabled or disabled by an external mechanism (e.g., switch) that is included on the device or peripheral. The switch could be manually operable by a person. The switch could be a simple two-mode (e.g., autorun on/off) switch or could be a switch that selects from among more than two modes.

(36) FIG. 7 is a schematic diagram of a person-operable physical slide switch 700 that allows a person to select from among multiple modes, functionalities, or peripherals available on a USB device or “dongle.” As an example, switch 700 relates to features or peripherals available from USB hub 600 of FIG. 6, including external memory component 630, and wireless dongle or module (640 or 650) for adding wireless (e.g. Bluetooth, WiFi, IrDA) interface to its host PC.

(37) In this exemplary illustration, switch 700 has 4 user-selectable positions. In position 710, autorun functionality is enabled, the wireless component is disabled. In position 720, autorun functionality is disabled, wireless component is disabled. In position 730, autorun functionality is enabled, wireless component is enabled. In position 740, autorun functionality is disabled, wireless component is enabled.

(38) The autorun firmware enables the distribution of software that can be autorun from a memory component. There is also a unique security mechanism that can be incorporated to protect the software that is installable or executable from the memory component by the autorun firmware.

(39) A section of the internal memory component (e.g., memory component 620, FIG. 6) may be protected from public access by password protecting it or by physical security means such as a lock, among other means. The flash memory component can also be segmented into public and private sections. Private sections can be used to store installable or executables that cannot be viewed or accessed by the user, and public sections can be viewed or accessed by users in a conventional manner. The installable or executable software being distributed through the memory component can be stored in the protected region of the memory component. Security by way of copy protection of this installable software can be achieved by allowing only an application launcher executable, which is autorun from the memory component, to access the installable software.

(40) In one implementation, the application launcher executable has the following characteristics: it is autorun from memory component, and it has access to the protected or private region of memory component. This access is gained by authenticating itself to the memory controller (e.g. USB microcontroller) and/or to the installable software in the protected region of the memory component. The authentication mechanism may be a password-based mechanism or a more involved cryptographic algorithm. Among the various techniques used for authentication are digital signatures and unique identifiers like the Bluetooth Device Address, MAC address, etc. The application launcher executable may authenticate itself directly to the memory controller software and/or installable software or to a separate authentication software that resides in the protected region of the memory component.

(41) The application launcher executable may be built generically to execute any or all executables and installables that exist within the protected region of the memory component. Alternatively, the application launcher executable may be programmed to launch a particular executable or installable from the protected region. Considering the possibility of the memory component being segmented into “n” protected sections where n is greater than 1, the application launcher executable may access one or more of these sections in the mechanism described herein. The protected memory region may contain, for example, executable software (also called an application executable), or installable software (also called an application installable), or protected data.

(42) FIG. 8 is a flow diagram of a software-implemented copy protection method for protecting of software that is executable or installable on using autorun firmware.

(43) In step 810, an application launcher executable that is stored in a memory component of an IC memory device is run automatically on a host computer by an autorun firmware stored on the IC memory device. The autorun firmware is operates automatically upon activation of the IC memory device, such as occurs when the memory device is plugged into a port or socket of the host computer.

(44) In step 820, the application launcher authenticates itself to authentication agent software that resides in the protected region of the memory component. The authentication agent software may be incorporated within the software executable or installable that is being protected or may be a separate application. The authentication algorithm may be password based or may involve cryptographic techniques.

(45) Step 830 is a query whether the authentication is successful. If not, access to the protected executable or installable is denied. If authentication is successful, step 830 proceeds to step 840 and the application launcher executable gains access to the protected memory region.

(46) In step 840, the application launcher executable executes the application executable or installable that is stored in the protected region of the memory component. The application launcher executable may also be programmed to execute any or all executables and installables that exist within the protected region of the memory component.

(47) In step 850, the executables and installables thus launched are executed on the host computer.

(48) In view of the many possible embodiments to which the principles of our invention may be applied, it should be recognized that the detailed embodiments are illustrative only and should not be taken as limiting the scope of our invention. Rather, we claim as our invention all such embodiments as may come within the scope and spirit of the following claims and equivalents thereto.