Abstract: A method of encrypting information in a data storage device that includes a storage medium having a plurality of physical memory locations referenced through logical block addresses is provided. The method includes receiving, in the data storage device, data from a host computer. At least a portion of the received data is encrypted, within the data storage device, if the at least a portion of the received data is destined for storage in at least a subset of the plurality of physical memory locations, which correspond to a predetermined range of logical block addresses. The encryption of the at least a portion of the received data is substantially transparent to the host computer and independent of a file to which the at least a portion of the data belongs. In addition, a data storage device readable by a computer system for implementing the above encryption method is provided.

Abstract: An apparatus comprises a data storage device including a plurality of virtual smart cards in a plurality of security partitions, and a controller including a card operating system for controlling access to the smart cards.

Abstract: The present methods and systems use specially isolated techniques for promoting security in a computer system. In one embodiment of these methods and systems, a simple file system is concealed in the storage of the computer system and is managed with a processor and simple non-writeable code operating on the storage device. Strong cryptographic design permits the present computer security methods and systems to secure data on the storage device. In one method embodiment, a computer system is provided with an operating system in operative association with at least one storage device, wherein the storage device includes firmware and a processor for processing data and instructions stored on the storage device. The method includes creating at least one security partition in, and restricting access to, at least a portion of the storage device by the operating system. The method also includes creating at least one security partition in the storage device.

Abstract: A storage system has integrated information security features adapted to interact with a host system. The storage system includes a storage media, controller firmware and a controller. The storage media is adapted to store data. Controller firmware stores a secret. The controller controls data transfers between the host system and the storage media, and is adapted encrypt and decrypt data written to or read from the storage media using an encryption key based on the secret.

Abstract: A method for providing enhanced security features in a storage device involves partitioning a storage media in the storage device into a hidden partition and a storage partition in the storage media. A base class is written to the hidden partition. A security provider base class is instantiated from the base class. The security provider base class is adapted to control access to the storage media.

Abstract: The benchmarking server is a method and apparatus for benchmarking electronic mail filters that requires no client software other than a conventional standard email client and a standard web client. In the preferred embodiment, the email address of the client is obtained and validated with an email transaction. This is followed by manufacturing a benchmark suite of emails that are then sent to the client. The manufacturing includes a means of obtaining different categories of email examples automatically and customizing these emails for use in benchmarking.

Abstract: A method for providing enhanced security features in a storage device involves partitioning a storage media in the storage device into a hidden partition and a storage partition in the storage media. A base class is written to the hidden partition. A security provider base class is instantiated from the base class. The security provider base class is adapted to control access to the storage media.

Abstract: A data processor is connected to a digital communication system such that information packets broadcast on the system are examined to determine if the contents of each packet meet selection criteria, whereupon the packet is coupled to the processor. A state machine or interface processor is connected between the processor and the network, and compares packets to the selection criteria, passing accepted packets and blocking rejected ones. The selection criteria are programmed into the state machine as a decision tree of any length, configuration or data requirements, preferably by the attached data processor, and can include examination of arbitrary sections of the packet for equality/inequality, greater-than/less than, signed and unsigned comparisons and bit mask comparisons. Thus content is variably examined, as opposed to checking for an address or key code at a given byte position. The state machine operates on recognition instructions including byte offset and content specifics.

Abstract: Location specific messages or programming are generally broadcast and selectively filtered by user terminals which have encoded one or more arbitrary locations of interest. The area surrounding a user, a remote location, a route to be travelled, or the like may be selected for receipt of local warnings, local commercial messages, and the like. A set-top receiver being a preferably tunable apparatus capable of receiving digital information transmitted by a variety of means. Transmitted messages contain information targeted to geographical groups of users, with location designation coding accompanying location-specific messages. A geographic location selection code is entered into a data processor coupled to the user's receiver to define the user's selected location(s) of interest. The processor receives the information segment and its designation code and compares the designated location to the selected one. Segments where the designated and selected points or areas overlap are processed. e.g.

Abstract: Location specific messages or programming are generally broadcast and selectively filtered by user terminals which have encoded one or more arbitrary locations of interest. The area surrounding a user, a remote location, a route to be travelled or the like may be selected for receipt of local warnings, local commercial messages and the like. Transmitted messages contain information targeted to geographical groups of users, with location designation coding accompanying location-specific messages. A geographic location selection code is entered into a data processor coupled to the user's receiver to define the user's selected location(s) of interest. The processor receives the information segment and its designation code and compares the designated location to the selected one. Segments where the designated and selected points or areas overlap are processed, e.g., being displayed, stored or used to trigger a warning. The user's selection code is variable and plural locations can be used and prioritized.