Abstract: Various systems and methods for providing a trusted key access broker are described herein. A system may be configured to receive, at a trusted key access broker, from a requestor via a broker application programming interface, a request for a cryptographic key operation, the request associated with attestation evidence data; use the attestation evidence data to validate the requestor; in response to validating the requestor, translate and transmit the request for the cryptographic key operation to one of the plurality of key management systems; receive a response from the one of the plurality of key management systems; and transmit the response to the requestor.

Abstract: In a method to utilize a secure public cloud, a computer receives a domain manager image and memory position-dependent address information in response to requesting a service from a cloud services provider. The computer also verifies the domain manager image and identifies a key domain key to be used to encrypt data stored in a key domain of a key domain-capable server. The computer also uses the key domain key and the memory-position dependent address information to encrypt a domain launch image such that the encrypted domain launch image is cryptographically bound to at least one memory location of the key domain. The computer also encrypts the key domain key and sends the encrypted domain launch image and the encrypted key domain key to the key domain-capable server, to cause a processor of the key domain-capable server to create the key domain. Other embodiments are described and claimed.

Abstract: In a method to utilize a secure public cloud, a computer receives a domain manager image and memory position-dependent address information in response to requesting a service from a cloud services provider. The computer also verifies the domain manager image and identifies a key domain key to be used to encrypt data stored in a key domain of a key domain-capable server. The computer also uses the key domain key and the memory-position dependent address information to encrypt a domain launch image such that the encrypted domain launch image is cryptographically bound to at least one memory location of the key domain. The computer also encrypts the key domain key and sends the encrypted domain launch image and the encrypted key domain key to the key domain-capable server, to cause a processor of the key domain-capable server to create the key domain. Other embodiments are described and claimed.

Abstract: A method, system, computer-readable media, and apparatus for ensuring a secure cloud environment is provided, where public cloud services providers can remove their code from the Trusted Computing Base (TCB) of their cloud services consumers. The method for ensuring a secure cloud environment keeps the Virtual Machine Monitor (VMM), devices, firmware and the physical adversary (where a bad administrator/technician attempts to directly access the cloud host hardware) outside of a consumer's Virtual Machine (VM) TCB. Only the consumer that owns this secure VM can modify the VM or access contents of the VM (as determined by the consumer).

Abstract: A method, system, computer-readable media, and apparatus for ensuring a secure cloud environment is provided, where public cloud services providers can remove their code from the Trusted Computing Base (TCB) of their cloud services consumers. The method for ensuring a secure cloud environment keeps the Virtual Machine Monitor (VMM), devices, firmware and the physical adversary (where a bad administrator/technician attempts to directly access the cloud host hardware) outside of a consumer's Virtual Machine (VM) TCB. Only the consumer that owns this secure VM can modify the VM or access contents of the VM (as determined by the consumer).

Abstract: An apparatus for aggregating secured credentials is described herein. The apparatus includes a processor and a memory. The memory includes code causing the processor to provision a plurality of secured credentials on the apparatus. The code causes the processor to isolate the secured credentials from each other in the memory. The code also causes the processor to emulate a selected secured credential from the secured credentials for a transaction.

Abstract: Methods, apparatuses and techniques for security evaluation. A security profile of a client device is evaluated. The security profile is based on hardware and software security mechanism utilization of the client device. A security score is generated based on the security profile. The security score is provided to a service provider.

Abstract: Methods, systems and apparatus are disclosed to facilitate client-based authentication. An example method includes associating an identity authority with a client platform in an isolated execution environment, associating a user identity with the identity authority, generating a first key pair associated with a first service provider, generating an attestation based on a first authorization sequence of the client platform, and signing the attestation with a portion of the key pair and sending the signed attestation to the first service provider to authorize communication between the client platform and the first service provider.

Abstract: An embodiment of the present invention provides an apparatus, comprising a wireless device capable of integrating a cellular phone stack in an extended firmware interface (EFI) layer, wherein the cellular phone stack within the EFI layer may include TDMA or CDMA0-based technology. An embodiment of the present invention may further provide at least one agent running under an OS/EFI continuously monitoring said wireless device status, OS availability and remaining power and wherein anytime events occur where said OS is unavailable, missing, infected, corrupted or when the remaining power is less than threshold, the wireless device may switch itself to the low power secure EFI mode where it may continue to use basic cell phone services and applications seamlessly.

Abstract: A method, apparatus, and signal-bearing media for communicating information relative to the location of a mobile device via an instant message. A mobile device may request information from an instant-messaging server, which personalizes the information to the location of the mobile device.

Abstract: A method, apparatus, and signal-bearing media for communicating information relative to the location of a mobile device via an instant message. A mobile device may request information from an instant-messaging server, which personalizes the information to the location of the mobile device.

Abstract: A method, apparatus, and signal-bearing media for communicating information relative to the location of a mobile device via an instant message. A mobile device may request information from an instant-messaging server, which personalizes the information to the location of the mobile device.

Abstract: Briefly, an access point may include one or more software defined radios that may be arranged to implement one or more radio transmission protocols or standards. New radio transmission protocol or standards may be downloaded into the access point so that the access point may communicate according to new radio transmission protocols or standards as they are developed.

Abstract: An embodiment of the present invention provides an apparatus, comprising a wireless device capable of integrating a cellular phone stack in an extended firmware interface (EFI) layer, wherein the cellular phone stack within the EFI layer may include TDMA or CDMA-based technology. An embodiment of the present invention may further provide at least one agent running under an OS/EFI continuously monitoring said wireless device status, OS availability and remaining power and wherein anytime events occur where said OS is unavailable, missing, infected, corrupted or when the remaining power is less than threshold, the wireless device may switch itself to the low power secure EFI mode where it may continue to use basic cell phone services and applications seamlessly.

Abstract: An embodiment of the present invention provides an apparatus, comprising a wireless device capable of integrating a cellular phone stack in an extended firmware interface (EFI) layer, wherein the cellular phone stack within the EFI layer may include TDMA or CDMA0-based technology. An embodiment of the present invention may further provide at least one agent running under an OS/EFI continuously monitoring said wireless device status, OS availability and remaining power and wherein anytime events occur where said OS is unavailable, missing, infected, corrupted or when the remaining power is less than threshold, the wireless device may switch itself to the low power secure EFI mode where it may continue to use basic cell phone services and applications seamlessly.

Abstract: Apparatus and systems, as well as methods and articles, may operate to receive status from an operating system (OS)-independent module capable of providing OS-independent geolocation information associated with a device to a network at some time before executing an operating system.

Abstract: Methods and apparatuses for providing service availability information to a waiting customer using the customer's wireless device are generally introduced herein.

Abstract: Methods and apparatuses for maintaining customization information for an electronic device in an operating system independent component that may be accessed prior to completion of a boot up process to be used to provide customized functionality of the electronic device.

Abstract: Techniques and structures are disclosed for providing proximity based authentication, security, and/or user notification in a wireless system.

Abstract: Apparatus and systems, as well as methods and articles, may operate to receive status from an operating system (OS)-independent module capable of providing OS-independent geolocation information associated with a device to a network at some time before executing an operating system.