Abstract: An exemplary method includes transmitting, via a network interface, at least a currency amount in an attempt to confirm a financial transaction; responsive to the transmitting, receiving a confirmation indicator for the financial transaction; storing at least the currency amount in non-volatile memory; hashing at least the currency amount to generate a hash and storing the hash in a secure non-volatile memory; hashing at least the currency amount stored in the non-volatile memory to generate a verification hash; and in an attempt to verify at least the financial transaction, comparing the verification hash to the hash stored in the secure non-volatile memory. Various other apparatuses, systems, methods, etc., are also disclosed.

Abstract: A method and apparatus are disclosed for sharing an integrity security module in a dual-environment computing device. The apparatus include an integrity security module, one or more processors, a detection module and a regeneration module. The one or more processors may have access to the integrity security module and may operate in two distinct operating environments of a dual-environment computing device. The detection module may detect, during an initialization sequence, a power state transition of an operating environment of the dual-environment computing device. The regeneration module may regenerate one or more integrity values from a stored integrity metric log in response to detecting the power state transition of the operating environment of the dual-environment computing device.

Abstract: An apparatus, system, and method are disclosed for auditing access to secure data. A detection module detects an access to the secure data. A record module records an encrypted log entry describing the access to the secure data. A verification module verifies the secure data is securely stored.

Abstract: Hypervisors are a new technology in the industry that enable multiple Operating Systems to co-exist on a single client. The use of a hypervisor provides a novel approach to email virus protection. The hypervisor is able to fire up an Operating System on demand, for a specific purpose, or have it running from the powering of the computer. A second Operating System can be provided as a donor Operating System that acts as a scratch area or scratch pad. Emails sent to the recipient are opened under the donor Operating System, or the “Scratch OS”. Once the email activities are complete, the “Scratch OS” can be discarded. Thus, any damage that may be caused by an email virus would be nil, and further the User Operating System would be undamaged. This method would be effective in precluding any damage that a virus may have done.

Abstract: An apparatus, method, and computer program product are disclosed to provide a virtual touchpad for a touch device. A placement module places a virtual touchpad at a dynamic location within a touch sensitive area of a touch device. A touch input module positions a pointer on a screen of the touch device in response to a touch input on the virtual touchpad.

Abstract: An exemplary apparatus includes one or more processors; memory; circuitry configured to hash a value associated with core root of trust measurement code and system management code; store the hash in a secure register; load an operating system; validate a certificate associated with the core root of trust measurement code and validate a certificate associated with the system management code; based on the validated certificates, provide an expected hash associated with the core root of trust measurement code and the system management code; decide if the expected hash matches the hash stored in the register; and, if the expected hash matches the hash stored in the register, commence a dynamic root of trust measurement session. Various other apparatuses, systems, methods, etc., are also disclosed.

Abstract: A method, computer program product and system for enabling a client device in a client device/data center environment to resume from sleep state more quickly. The resource in the server blade used for suspending the activity of the computing state of the client device in order to enter the client device in a sleep state is not reallocated for a period of time. If the client device indicates to the server blade to resume the client device from sleep state prior to the ending of that period of time, then the server blade reinitializes the computing state using the same resource as used in suspending the computing state of the client device. By using the same resource, steps traditionally implemented in resuming the client device from sleep state are avoided thereby reducing the time in resuming the client device from sleep state.

Abstract: An improved system for tracking luggage and other such objects. The system features a transmitter tag for attachment to an object to be tracked and a receiver. When the tag comes within range of the receiver, the receiver provides notification to the user both visually and audibly. Audible notification can occur through the receiver's speaker, a wireless phone, a PDA, or an iPod or other portable music player. GPS capabilities allow the tag to store and transmit its exact coordinates to assist in locating the tag. Airport and airline security personnel can access the tag data with a dedicated interface device.

Abstract: A computer system is disclosed that includes a primary processor and a service processor operable regardless of a power state of the computer system. A non-volatile memory device is communicatively coupled to the primary processor and the service processor. The non-volatile memory device stores firmware which includes a first list of patches required for installation on the computer system and a second list of patches previously installed on the computer system. A comparator module is provided to determine whether there are patches included in the first list that are not included in second list. A boot module is provided to boot a maintenance operating system in the event the first list includes patches not included in the second list. The maintenance operating system is configured to install, on the computer system, patches included in the first list but not the second list.

Abstract: A method for preventing unauthorized modifications to a rental computer system is disclosed. During boot up of the rental computer system, a determination is made whether or not a time-day card is bound to the rental computer system. If the time-day card is bound to the rental computer system, another determination is made whether or not a time/date value on the time-day card is less than a secure time/date value stored in a secure storage location during the most recent power down. If the time/date value on the time-day card is not less than the secure time/date value, yet another determination is made whether or not the secure time/date value is less than an end time/date rental value. If the secure time/date value is less than the end time/date rental value, the rental computer system continues to boot.

Abstract: In a wireless network in which a client has access to multiple Access Points the client usually attaches to one of the Access Points (AP) and stays attached even though signal transmission is impaired, whereas transmission would not be impaired if the client attaches to another one of the multiple APs. Apparatus and method are described to detect interference noise level and force the client to roam and attach to another AP if interference noise level impairs signal transmission.

Abstract: Executable files are extended with a file signature containing a header containing validation data. This header may be added to an existing executable and linking format (ELF) header, added as a new section, or placed in a file's extended attribute store. The header contains results of all previous validation checks that have been performed. The file signature is inserted, with a date stamp, into the file attributes. On execution, the system checks the previously-created file signature against a current file signature, instead of creating the file signature for every file during the execution process. Checks to ensure that the file signature is secure, and is valid and up to date, are also implemented. Only if the file signature is not valid and up-to-date does the execution program create a new file signature at the time of execution.

Abstract: A method and system for providing diagonal scrolling on a touchpad of a device is disclosed. The method and system comprises determining if at least one finger is in contact with the touchpad, and entering a diagonal scroll mode if more than one finger is in contact with the touchpad. A system and method in accordance with the present invention allows the user to initiate a diagonal scroll at any location on a touchpad by using two fingers, thereby greatly enhancing the functions of the touchpad and allowing the user to manipulate computer programs from the touchpad much more efficiently and easily. The present invention supports diagonal scrolling on a touchpad and does not require a precise location for vertical or horizontal scrolling, since the entire touchpad area/surface can be used.

Abstract: A procedure and implementations thereof are disclosed that significantly reduce the amount of time necessary to perform a virus scan. A file signature is created each time a file is modified (i.e., with each “file write” to that file). The file signature is inserted, with a date stamp, into the file attributes. The virus scan program checks the previously-created file signature against the virus signature file instead of creating the file signature for every file during the virus scan. Checks to ensure that the file signature is secure, and is valid and up to date, are also implemented. Only if the file signature is not valid and up-to-date does the virus scan program create a new file signature at the time of the running of the virus scan.

Abstract: An apparatus, system, and method are disclosed for reassigning a client. A selection module selects a second computation module that is hardware compatible with a first computation module. A suspension module suspends a software process for a client executing on the first computation module. An execution state module copies a computation module execution state of the first computation module to the second computation module. A memory map module copies a memory map of a software process image associated with the software process and stored in a first storage system from the first computation module to the second computation module. In one embodiment, a resumption module resumes the software process executing on the second computation module.

Abstract: A method and system are disclosed in which a management module (MM) designates an idle blade in a client blade farm to be an “administrative blade” that has administrator access to the virtual images of all users. The MM identifies when a particular user image is, or is not, in use and conveys this information to the administrative blade. The administrative blade performs virus scans, backups, defrags, patch installs, software upgrades, and other such maintenance functions on user images when they are inactive, thereby eliminating the performance impact to active users.

Abstract: Systems and arrangements for permitting the transmission of fingerprint authentication data to a system remotely, while also permitting the system to employ such data as well as passwords in order to operate a computer system, while ensuring a reliable level of security for any group or organization using such systems and arrangements.

Abstract: A client computer system is provided with two operating systems, one of which is a user operating system (UOS) and the other of which is a service operating system (SOS), and a hypervisor. In the event of a hang in the first operating system, the second operating system remains active, out of the awareness of the user of the system, and has reporting and command response capabilities beyond those of prior technology.

Abstract: Solutions which address a growing and compelling need recognized in connection with rendering VOIP systems on laptops, or even on other mobile devices, even more versatile and user-friendly so as to even better replicate the advantages of cell phones. Broadly contemplated herein two modes of network access and two modes of user interface, which modes can be combined in any way as deemed suitable or appropriate. Preferably, a commonality between the contemplated network access and user interface modes is the use of a low-powered secondary processor, a secondary operating system, and non volatile storage applications which could be networking applications (e.g., an Always On subsystem).

Abstract: An improved system for tracking luggage and other such objects. The system features a transmitter tag for attachment to an object to be tracked and a receiver. When the tag comes within range of the receiver, the receiver provides notification to the user both visually and audibly. Audible notification can occur through the receiver's speaker, a wireless phone, a PDA, or an iPod or other portable music player. GPS capabilities allow the tag to store and transmit its exact coordinates to assist in locating the tag. Airport and airline security personnel can access the tag data with a dedicated interface device.