Abstract: A computer system which includes a CPU for performing various processes by program control and storage elements which store at least one operating system and a BIOS, wherein upon starting a system, the CPU recognizes the system's own hardware configuration, and starts a selected one operating system stored in the storage elements in accordance with the recognized hardware configuration under the control of the BIOS.

Abstract: An apparatus and method for enabling screen brightness of a display unit to be adjusted automatically according to display brightness, thereby improving the visibility of the display screen to a viewing user. A brightness adjusting system including a gray scale gradation evaluator for calculating the display brightness in a certain window displayed on the screen of a display unit and a display controller for controlling the screen brightness of the display unit according to the display brightness in the certain window, calculated by the gray scale gradation evaluator, is provided for.

Abstract: Unsecure system software and secure system software on the same computer system is switched between. A computer system includes one or more processors, which may not have any built-in security features, memory, and firmware. The memory stores secure system software and unsecure system software. In response to receiving a user signal, the firmware switches from the unsecure system software running on the processors to the secure system software running on the processors (and back again). While the unsecure system software is running, the secure system software is protected from tampering by the unsecure system software.

Abstract: A method for performing a domain logon to a computer network is disclosed. A secure storage area containing user identification information and domain password information corresponding to the user identification information is provided. In response to a receipt of a user-entered user identification and a user-entered domain password by a first module of a Windows® operating system, the domain password information stored in the secure storage area and the corresponding user identification information are written to a registry of the Windows® operating system. Authentication for domain logon is then performed by a second module of the Windows® operating system based on the received domain password and the domain password information written to the registry of the Windows® operating system. After the authentication, the domain password information is subsequently removed by the first module of the Windows® operating system from the registry of the Windows® operating system.

Abstract: An apparatus, system, and method are disclosed for remotely accessing a shared password. A storage module stores identifiers, passwords, and keys within a secure key structure of a client. The passwords and keys include a shared password encrypted with a shared password key that is encrypted with a service structure key. The storage module also stores the service structure key encrypted with a key derived from a service password on a trusted server. An input/output module accesses the trusted server from the client with a prospective service password and receives the encrypted service structure key from the trusted server if a hash of the prospective service password is equivalent to the service password. An encryption module may decrypt the service structure key with the prospective service password, the shared password key with the service structure key, and the shared password with the shared password key.

Abstract: Power usage of computing device components is controlled in a holistic manner. The projected total power consumption for the computing device to satisfy a power consumption policy for the device is determined. Power usage of each component of the computing device is controlled in a holistic manner—i.e., balancing the power usage of the component against the power usage of other components—so that the total power usage of the computing device falls within the projected total power consumption needed to satisfy the power consumption policy. How the user is currently utilizing the computing device may be periodically detected, based at least on a power consumption distribution of the components of the computing device. A current usage model is determined based on how the user is currently utilizing the computing device. The power usage of each component of the computing device is controlled based on the current usage model.

Abstract: Protection of an authentication password stored in a database held by a SAM of Windows® is strengthened. A GINA, a part of the OS, receives an authentication password in ASCII codes. The authentication password is converted to first UNICODES, and the first UNICODES are salted with a random number and converted to second UNICODES. The random number used for salting is associated with a user account and a password and stored in a read/write protected non-volatile memory or a non-volatile memory which can be accessed only by a BIOS. An LSA of the OS can process UNICODES without being changed.

Abstract: A computer system which includes a CPU for performing various processes by program control and storage elements which store at least one operating system and a BIOS, wherein upon starting a system, the CPU recognizes the system's own hardware configuration, and starts a selected one operating system stored in the storage elements in accordance with the recognized hardware configuration under the control of the BIOS.

Abstract: A method for managing shared passwords on a multi-user computer system is disclosed. A set of shared passwords and an administrator internal key are initially generated. After the receipt of an administrator external key, the administrator internal key is encrypted with the administrator external key. For each user level within the computer system, an internal key is generated by hashing the administrator internal key. For each user level within the computer system, each of the shared passwords encrypted with a respective one of the internal keys. The internal keys and the encrypted shared passwords are then stored in a non-volatile storage device.

Abstract: A computer system which includes a CPU for performing various processes by program control and storage elements which store at least one operating system and a BIOS, wherein upon starting a system, the CPU recognizes the system's own hardware configuration, and starts a selected one operating system stored in the storage elements in accordance with the recognized hardware configuration under the control of the BIOS.

Abstract: Methods and apparatus are provided for securely inputting highly confidential information, exchanging the information via a network, and securely reflecting the information in a computer, without the information being stolen by malicious software. Upon a transfer of encrypted information from a server to a computer, the transferred information is stored in a memory of the computer and the computer is switched to a suspended state and immediately thereafter returns-to the previous state to be shifted to under the control of a BIOS. The information stored in the memory is decrypted and processed there. Processing information generated based on the processed information is then encrypted and it is transferred to the server after the computer is switched to under the control of the operating system.

Abstract: A computer apparatus provides control for automatically switching the apparatus between various operating modes requiring varying levels of power consumption. An embedded controller determines whether or not the computer apparatus is in motion (vibration, acceleration, rotation, etc.) on the basis of acceleration information obtained through an accelerometer provided in the computer apparatus. If the computer apparatus is in motion, the embedded controller provides control so as to prevent switching between system operating modes in order to protect certain components of the apparatus from damage which might be caused by switching operating modes while in motion.

Abstract: An information processor having a normal-operation mode in which coherence control is performed for making data in a cache memory of a processor identical to data in a main memory and a power-saving mode in which the coherence control is suppressed to lower the power consumption from power consumption in the normal-operation mode and entering the normal-operation mode when an input/output device accesses the main memory in the power-saving mode includes an attribute setting module for setting a device area of the main memory, accessed by the input/output device of the information processor to a non-cacheable attribute for exempting said device area from said coherence control even in the normal-operation mode; an operation mode setting module for allowing the input/output device to access the device area while keeping the operation mode of the information processor in the power-saving mode when the input/output device requests access to the device area in the power-saving mode.

Abstract: An information processor includes a power-saver which switches a display memory to a power-saving state that causes image data to be lost and restores the display memory from the power-saving state. A storage area stores a predetermined activation condition and an activation routine mechanism activates a predetermined routine when the activation condition is satisfied. A routine termination mechanism ends the routine and an image data re-creation mechanism executes re-creation of the image data on the display memory when the routine is terminated. Provided are: an activation condition rewriting mechanism which rewrites the activation condition stored in the storage area so that the routine is activated when the display memory is switched to or restored from the power-saving state; and an activation condition restoration mechanism which restores the rewritten activation condition to the original condition after the routine is activated.

Abstract: There is provided an information processor including a central processing unit that includes an instruction execution module and has a normal mode for operating the instruction execution module and an execution halt mode for halting the instruction execution module.

Abstract: A process, apparatus, and system are disclosed that allow information to be passed between software modules in different partitions in an environment for a predetermined operating system (OS) and an area hidden from the operating system (OS) in a storage device, such as hard disk drive (HDD). The computer system may include a hard disk drive (HDD) that meets a protected area run time interface extension services (PARTIES) specification and that has an access environment for an operating system (OS) and a PARTIES partition. The PARTIES partition is an area hidden from the operating system (OS). The computers system also includes a CMOS/NVRAM that provides a work area for communication between a user mode module, operating in the access environment for the operating system (OS) in a user data management application, and a management mode module, operating in an environment corresponding to the hidden area.

Abstract: An information processor having a plurality of operating modes differing in power consumption and capable of changing the operating mode according to the amount of processing has periodic switching detection means of performing detection as to whether the information processor is periodically switching from a low-power-consumption operating mode in which the power consumption is lower to a high-power-consumption operating mode in which the power consumption is higher in the plurality of operating modes, and operating mode changing means of changing the operating modes between which the information processor switches to a combination of the operating modes such that the difference between the power consumptions is reduced relative to that at the time of switching between the low-power-consumption operating mode and the high-power-consumption operating mode if the switching cycle detected by the periodic switching detection means is shorter than a set cycle determined in advance.

Abstract: An information processor having a plurality of operating modes differing in power consumption and capable of changing the operating mode according to the amount of processing has periodic switching detection means of performing detection as to whether the information processor is periodically switching from a low-power-consumption operating mode in which the power consumption is lower to a high-power-consumption operating mode in which the power consumption is higher in the plurality of operating modes, and operating mode changing means of changing the operating modes between which the information processor switches to a combination of the operating modes such that the difference between the power consumptions is reduced relative to that at the time of switching between the low-power-consumption operating mode and the high-power-consumption operating mode if the switching cycle detected by the periodic switching detection means is shorter than a set cycle determined in advance.

Abstract: A method for updating an ISO file, e.g., to add a digital signature to the ISO file, includes adding a supplemental file composed of, e.g., all zeroes to the ISO file before recording, and then recording the ISO file with supplemental file to an optical disk using ISO format. A digital signature is computed after recording. The zeroes in the supplemental file are replaced by the values of the digital signature and the file is re-saved. Also, an ISO file that might have a common part and several unique parts, e.g., for respective languages, is deconstructed such that only a single copy of the common part is recorded to disk, avoiding multiple recordations of the same data.

Abstract: Units are provided for determining whether or not a coordinate input is continued as being substantially the same coordinate and a predetermined time period has lapsed after an initial input of an arbitrary coordinate by a coordinate input unit. A first processing unit performs a first processing in accordance with the coordinate when the determination is not met, and a second processing unit performs a second processing different from the first processing when the determination is met.