专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07412596B2 Method for preventing system wake up from a sleep state if a boot log returned during the system wake up cannot be authenticated 有权
标题翻译：如果在系统唤醒期间返回的引导日志无法验证，则防止系统从睡眠状态唤醒的方法
公开(公告)号：US07412596B2
公开(公告)日：2008-08-12
申请号：US10967760
申请日：2004-10-16
申请人： David Carroll Challener , Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , James Patrick Hoff , Howard Jeffrey Locker , Randall Scott Springfield , James Peter Ward
发明人： David Carroll Challener , Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , James Patrick Hoff , Howard Jeffrey Locker , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F9/00 , G06F15/177
CPC分类号： G06F21/575
摘要： A method and system for enabling security attestation for a computing device during a return from an S4 sleep state. When the computing device enters into the S4 state following a successful boot up, the attestation log is appended to the TPM tick count and the log is signed (with a security signature). When the device is awaken from S4 state, the BIOS obtains and verifies the log created during the previous boot. The CRTM maintains a set of virtual PCRs and references these virtual PCRs against the log. If the values do not match, the return from S4 state fails and the device is rebooted.
摘要翻译：一种用于在从S4睡眠状态返回期间为计算设备提供安全认证的方法和系统。当计算设备在成功启动后进入S4状态时，认证日志会追加到TPM刻度计数，并且日志被签名（具有安全签名）。当设备从S4状态唤醒时，BIOS将获取并验证在以前引导过程中创建的日志。 CRTM维护一组虚拟PCR，并将这些虚拟PCR引用到日志中。如果值不匹配，则S4状态返回失败，设备重启。

2. 发明授权

US08862709B2 Remote management of boot application 有权
标题翻译：远程管理引导应用程序
公开(公告)号：US08862709B2
公开(公告)日：2014-10-14
申请号：US11955886
申请日：2007-12-13
申请人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
IPC分类号： G06F9/44 , H04L29/08 , H04L29/12 , G06F15/177 , H04N21/443
CPC分类号： G06F9/4416 , G06F9/4401 , G06F9/4406 , G06F9/4408 , G06F15/177 , H04L29/12235 , H04L67/34 , H04N21/443
摘要： Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.
摘要翻译：可以考虑通过用于具有LAN唤醒（WOL）功能的计算机的WOL分组来远程选择可启动图像的系统和布置。服务器端实施例包括用于确定要管理的客户机的硬件和/或软件，确定客户端是否在网络上是活动的，以及发送具有向量的WOL分组或操作系统分区标识（OSPID）来描述可引导的 WOL功能的计算机可访问的图像。一些实施例可以包括指向安全可启动图像的OSPID，例如硬盘驱动器上的可引导映像，连接到计算机的光盘（CD）或其他本地资源。客户端实施例可以在例如网络接口卡（NIC）处接收WOL分组，识别WOL分组包括描述可启动图像引导的OSPID，并且实现替代的引导顺序以从该可启动图像引导。

3. 发明授权

US08677117B2 Remote management of boot application 失效
公开(公告)号：US08677117B2
公开(公告)日：2014-03-18
申请号：US10749583
申请日：2003-12-31
申请人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
IPC分类号： H04L29/06
CPC分类号： G06F9/4416 , G06F9/4401 , G06F9/4406 , G06F9/4408 , G06F15/177 , H04L29/12235 , H04L67/34 , H04N21/443
摘要： Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.

4. 发明授权

US07827376B2 System and method for protecting hidden protected area of HDD during operation 有权
标题翻译：操作期间保护HDD隐藏保护区的系统和方法
公开(公告)号：US07827376B2
公开(公告)日：2010-11-02
申请号：US11168088
申请日：2005-06-27
申请人： Nathan J. Peterson , Joseph Wayne Freeman , Rod David Waltermann , Randall Scott Springfield , Mark Charles Davis , Steven Dale Goodman , Howard Jeffrey Locker , Daryl Carvis Cromer
发明人： Nathan J. Peterson , Joseph Wayne Freeman , Rod David Waltermann , Randall Scott Springfield , Mark Charles Davis , Steven Dale Goodman , Howard Jeffrey Locker , Daryl Carvis Cromer
IPC分类号： G06F12/00 , G06F13/00
CPC分类号： G06F21/80
摘要： A “setmax” command is issued in BIOS to hide the service area (HPA) of a HDD during normal operation, so that the HPA cannot be accessed or erased inadvertently by the user or by a virus. Pressing a special key (e.g., F11) during booting permits access to the HPA.
摘要翻译：在BIOS中发出“setmax”命令，以在正常操作期间隐藏HDD的服务区（HPA），使得HPA无法被用户或病毒无意中访问或擦除。在启动过程中按特殊键（例如F11），可以访问HPA。

5. 发明申请

US20080155075A1 REMOTE MANAGEMENT OF BOOT APPLICATION 有权
标题翻译：启动应用程序远程管理
公开(公告)号：US20080155075A1
公开(公告)日：2008-06-26
申请号：US11955886
申请日：2007-12-13
申请人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Richard Alan Dayan , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Howard Jeffrey Locker , Randall Scott Springfield
IPC分类号： G06F15/177
CPC分类号： G06F9/4416 , G06F9/4401 , G06F9/4406 , G06F9/4408 , G06F15/177 , H04L29/12235 , H04L67/34 , H04N21/443
摘要： Systems and arrangements for remotely selecting a bootable image via a WOL packet for a wake-on-LAN (WOL) capable computer are contemplated. Server-side embodiments include hardware and/or software for determining a client to be managed, determining whether the client is active on the network, and transmitting a WOL packet having a vector, or operating system partition identification (OSPID), to describe a bootable image accessible by the WOL capable computer. Some embodiments may include an OSPID that points to a secure bootable image such as a bootable image on a hard drive, a compact disk (CD) connected to the computer, or other local resource. Client-side embodiments may receive the WOL packet at, for instance, a network interface card (NIC), recognize that the WOL packet includes an OSPID that describes the bootable image to boot, and implement an alternative boot sequence to boot from that bootable image.
摘要翻译：可以考虑通过用于具有LAN唤醒（WOL）功能的计算机的WOL分组来远程选择可启动图像的系统和布置。服务器端实施例包括用于确定要管理的客户机的硬件和/或软件，确定客户端是否在网络上是活动的，以及发送具有向量的WOL分组或操作系统分区标识（OSPID）来描述可引导的 WOL功能的计算机可访问的图像。一些实施例可以包括指向安全可启动图像的OSPID，例如硬盘驱动器上的可引导映像，连接到计算机的光盘（CD）或其他本地资源。客户端实施例可以在例如网络接口卡（NIC）处接收WOL分组，识别WOL分组包括描述可启动图像引导的OSPID，并且实现替代引导顺序以从该可启动图像引导。

6. 发明授权

US06823464B2 Method of providing enhanced security in a remotely managed computer system 有权
标题翻译：在远程管理的计算机系统中提供增强的安全性的方法
公开(公告)号：US06823464B2
公开(公告)日：2004-11-23
申请号：US09793239
申请日：2001-02-26
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield , James Peter Ward
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Randall Scott Springfield , James Peter Ward
IPC分类号： G06F124
CPC分类号： G06F21/305 , G06F21/57
摘要： Authentication of an entity remotely managing a data processing system is enabled to allow changes by the remote entity to hard-locked critical security information normally accessible only during the POST and only to trusted entities such as the system BIOS. The remote entity builds a change request and generates a hash from the change request with a current password appended. The change request and the hash are stored in a lockable non-volatile buffer which, once locked, requires a system reset to access. During the next POST, a trusted entity such as the system BIOS reads the change request, generates an authentication hash from the change request and the current password within the hard-locked security information, and compares the buffered hash with the generated hash. If a match is determined, the security information is updated; otherwise a tamper error is reported.
摘要翻译：允许远程管理数据处理系统的实体的认证允许远程实体更改硬锁定通常只能在POST期间可访问的关键安全性信息，并且只允许受信任的实体（如系统BIOS）。远程实体构建更改请求，并从附加当前密码的更改请求生成哈希值。更改请求和哈希存储在可锁定的非易失性缓冲区中，该缓冲区一旦被锁定就需要系统重置才能访问。在下一个POST期间，诸如系统BIOS的受信任的实体读取更改请求，从改变请求中生成认证散列，并在硬锁定的安全信息内生成当前密码，并将缓冲的散列与生成的散列进行比较。如果确定匹配，则更新安全信息; 否则报告篡改错误。

7. 发明授权

US07814532B2 Data processing system and method for password protecting a boot device 有权
标题翻译：用于密码保护引导设备的数据处理系统和方法
公开(公告)号：US07814532B2
公开(公告)日：2010-10-12
申请号：US09847085
申请日：2001-05-02
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： G06F7/04 , G08B29/00 , G06F9/00 , G06F15/177
CPC分类号： G06F21/575
摘要： A data processing system and method of password protecting the boot of a data processing system are disclosed. According to the method, in response to an attempt to boot the data processing system utilizing a boot device, the boot device is interrogated for a password. If the boot device supplies password information corresponding to that of a trusted boot device, the data processing system boots utilizing the boot device. If, however, the boot device does not supply password information corresponding to that of a trusted boot device, booting from the boot device is inhibited. In a preferred embodiment, the password information comprises a unique combination of the boot device's manufacturer-supplied model and serial numbers.
摘要翻译：公开了一种密码保护数据处理系统引导的数据处理系统和方法。根据该方法，响应于利用引导设备引导数据处理系统的尝试，引导设备被询问密码。如果引导设备提供与可信引导设备的密码信息相对应的密码信息，则数据处理系统使用引导设备引导。但是，如果引导设备不提供与受信任引导设备相对应的密码信息，则禁止从引导设备引导。在优选实施例中，密码信息包括引导设备的制造商提供的模型和序列号的唯一组合。

8. 发明授权

US07191464B2 Method and system for tracking a secure boot in a trusted computing environment 有权
标题翻译：用于在可信计算环境中跟踪安全引导的方法和系统
公开(公告)号：US07191464B2
公开(公告)日：2007-03-13
申请号：US09978381
申请日：2001-10-16
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L9/32 , G06F15/177
CPC分类号： G06F21/575
摘要： A method, system and computer readable medium containing programming instructions for tracking a secure boot in a computer system having a plurality of devices is disclosed. The method, system and computer readable medium include providing an embedded security system (ESS) in the computer system, wherein the ESS includes at least one boot platform configuration register (PCR) and a shadow PCR for each of the at least one boot PCRs, initiating a platform reset to boot the computer system via BIOS, and, for a device booted, generating a measurement value for the device and extending that value to one of the at least one boot PCRs and its corresponding shadow PCR. The system, method and computer readable medium of the present invention also includes comparing the measurement values of the boot PCRs to their corresponding shadow PCRs, whereby the computer system is trusted if the measurement values match.
摘要翻译：公开了一种包含用于在具有多个设备的计算机系统中跟踪安全引导的编程指令的方法，系统和计算机可读介质。所述方法，系统和计算机可读介质包括在所述计算机系统中提供嵌入式安全系统（ESS），其中所述ESS包括用于所述至少一个启动PCR中的每一个的至少一个引导平台配置寄存器（PCR）和阴影PCR，启动平台重置以通过BIOS引导计算机系统，并且对于引导的设备，生成所述设备的测量值并将该值扩展到所述至少一个启动PCR中的一个及其相应的阴影PCR。本发明的系统，方法和计算机可读介质还包括将引导PCR的测量值与其相应的阴影PCR进行比较，从而如果测量值匹配，则计算机系统被信任。

9. 发明授权

US07082129B2 Secure method and system to prevent external unauthorized remotely initiated power up events in computer 失效
标题翻译：安全的方法和系统，以防止外部未经授权的远程启动电脑中的加电事件
公开(公告)号：US07082129B2
公开(公告)日：2006-07-25
申请号：US10134936
申请日：2002-04-29
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： H04L12/28
CPC分类号： G06F1/3209 , H04L12/12 , H04L45/20 , Y02D50/40
摘要： In a computer network including a plurality of interconnected computers, one of the computers being a sleeping computer in a power down state, the sleeping computer listening for a packet associated with the sleeping computer, a method and system of waking the sleeping computer from the computer network. An incoming packet of data is transmitted from one of the computers in the network to the sleeping computer. When the sleeping computer detects the incoming packet, it determines if the incoming packet contains a data sequence associated with the sleeping computer. Further, the sleeping computer compares a transit value in the incoming packet to a predetermined value stored at the sleeping computer. The transit value indicates how far the data packet has traveled through the network, indicating the approximate origin of the data packet. Knowing the approximate origin of the data packet allows the client system to identify if the data packet originated from an external network. The predetermined value represents an origin within the internal network. Accordingly, if the incoming packet matches the particular data sequence associated with the sleeping computer, and the transit value in the packet matches the predetermined value stored at the sleeping computer, then a signal is issued to wake the sleeping computer. Otherwise, the incoming packet is discarded and the sleeping computer is not awaken.
摘要翻译：在包括多个相互连接的计算机的计算机网络中，计算机中的一个是处于断电状态的休眠计算机，睡眠计算机监听与休眠计算机相关联的分组，从计算机唤醒睡眠计算机的方法和系统网络。传入的数据包从网络中的一台计算机发送到睡眠计算机。当睡眠计算机检测到传入分组时，它确定传入分组是否包含与睡眠计算机相关联的数据序列。此外，睡眠计算机将输入分组中的传输值与存储在睡眠计算机上的预定值进行比较。传输值表示数据分组通过网络传播的距离，指示数据分组的近似来源。知道数据包的近似来源允许客户端系统识别数据包是否源自外部网络。预定值表示内部网络内的原点。因此，如果输入分组与休眠计算机相关联的特定数据序列匹配，并且分组中的传输值与存储在睡眠计算机上的预定值匹配，则发出信号以唤醒睡眠计算机。否则，传入的数据包被丢弃，并且睡眠的计算机没有被唤醒。

10. 发明授权

US06990515B2 Secure method and system to prevent internal unauthorized remotely initiated power up events in computer systems 有权
公开(公告)号：US06990515B2
公开(公告)日：2006-01-24
申请号：US10135010
申请日：2002-04-29
申请人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
发明人： Daryl Carvis Cromer , Joseph Wayne Freeman , Chad Lee Gettelfinger , Steven Dale Goodman , Eric Richard Kern , Randall Scott Springfield
IPC分类号： G06F1/26 , G06F15/173
CPC分类号： G06F21/575 , H04L63/12
摘要： In a computer network including a plurality of interconnected computers, one of the computers being a sleeping computer in a power down state, the sleeping computer listening for a packet associated with the sleeping computer, a method of waking the sleeping computer from the computer network. An incoming packet of data is transmitted from an administration system in the network to the sleeping computer. When the sleeping computer detects the incoming packet, it determines if the incoming packet contains a data sequence associated with the sleeping computer. If the incoming packet matches the particular data sequence associated with the sleeping computer, the sleeping computer transmits a reply message to the administration system. Upon receiving the reply, the administration system modifies the reply message in a predetermined manner and transmits the modified reply to the sleeping computer. If the sleeping computer determines the reply message was modified in the predetermined manner, then a signal is issued to wake the sleeping computer. Otherwise, the incoming packet is discarded and the sleeping computer is not awakened.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式