Abstract: A system for sharing a trusted platform module (TPM) comprises a TPM operable to execute an operating system (OS)-level process, the TPM operable to pause the execution of the OS-level process and execute a non-OS-level process.

Abstract: A persistent security system comprises a computing system comprising an operating system (OS), a basic input/output system (BIOS) and a hard disk drive (HDD), the OS configured to initiate a call to the BIOS to cause the BIOS to write an instance of a security routine to the HDD.

Abstract: A trusted platform field upgrade system comprises a trusted platform module (TPM) having a volatile memory, the volatile memory having a flag for verifying physical presence in a non-ownership state of the TPM, the TPM configured to enable a field upgrade to the TPM in an operating system (OS) environment based on assertion of the physical presence flag.

Abstract: Described herein is a computing platform incorporating a trusted entity, which is controllable to perform cryptographic operations using selected ones of a plurality of cryptographic algorithms and associated parameters, the entity being programmed to record mode of operation information, which is characterised by the algorithms and associated parameters that are selected to perform an operation.

Abstract: A multi-battery charging system comprises a computing device having a controller configured to control a plurality of power regulators, each of the plurality of power regulators for regulating charging power to a respective battery, at least one of the power regulators disposed external to the computing device.

Abstract: A system comprises a basic-input-output-system (“BIOS”), a disk drive, and a security system configured to prevent unauthenticated access to the disk drive. For each of at least two users out of a plurality of users, the BIOS authenticates the user based on the user's token. The BIOS also accesses secured data based on the authentication, and provides the secured data to the security system without input from the user.

Abstract: An encryption system can include a first port and a second port. A format translator can be coupled to the first port and the second port to translate a first header format of data received from the first port to a second header format of the second port. The format translator can translate the second header format of data received from the second port to the first header format. An encryptor can receive the data and encrypts the data received from the first port and decrypts the data received from the second port.

Abstract: A virtual user authentication system comprising a virtual machine manager (VMM) communicatively coupled to a user operating system (OS) and a service OS, the VMM configured to receive keystroke input destined for an application executing on the user OS and communicate the keystroke input to the service OS, the keystroke input processed by the service OS.

Abstract: Exemplary embodiments of the present invention disclosed herein relate to a method of providing a system management command. The method comprises receiving from an authorized requestor information identifying the electronic device and a request to issue a system management command to the electronic device. The method additionally comprises providing, in response to the request, a system management command, information identifying a source of the command as a trusted source and the information identifying the electronic device. Also disclosed are an electronic device and a computer system according to the invention.

Abstract: A fingerprint reader resetting method comprising enabling an electronic device to accept a reset command for a fingerprint reader in response to a physical presence state being set to unlocked during initialization of an electronic device to reset a state of the fingerprint reader.

Abstract: During a boot block part of a boot procedure in an electronic device having a persistent secondary storage, a feature that prevents access to the persistent secondary storage is disabled. The persistent secondary storage is accessed during the boot block part of the boot procedure to retrieve information to perform a predetermined task.

Abstract: A computer system has first and second password-protectable domains. The first domain has a multi-domain password manager for determining whether a password candidate is valid for both the first domain and the second domain. If so, the password manager submits the password candidate to the second domain.

Abstract: A portable device comprise non-volatile storage. The non-volatile storage comprises a basic input/output system (BIOS) setting. The BIOS setting is applied from the portable device onto a system to which the portable device can be coupled.

Abstract: In at least some embodiments, a system comprises a hardware unit and a plurality of software agents that couple to and utilize at least one function of the hardware unit. The system further comprises a consensus module coupled to the hardware unit and the software agents. The consensus module is configured to detect an event that changes a state of the hardware unit, notify the software agents of the event before the state changes and selectively permit the state to change based on responses from the software agents.

Abstract: A fingerprint reader resetting method comprising enabling an electronic device to accept a reset command for a fingerprint reader in response to a physical presence state being set to unlocked during initialization of an electronic device to reset a state of the fingerprint reader.

Abstract: An electronic device comprises a biometric module having a contact-based sensor configured to capture a biometric image, the biometric module configured to discharge electrostatic energy from a user of the biometric module before activating the sensor.

Abstract: A multi-battery charging system comprises a computing device having a controller configured to control a plurality of power regulators, each of the plurality of power regulators for regulating charging power to a respective battery, at least one of the power regulators disposed external to the computing device.

Abstract: A trusted component update system comprises verify logic configured to validate integrity of an update to a trusted component of a computing device, and logic disposed in the trusted component and configured to validate integrity of the verify logic.

Abstract: A system for sharing a trusted platform module (TPM) comprises a TPM operable to execute an operating system (OS)-level process, the TPM operable to pause the execution of the OS-level process and execute a non-OS-level process.

Abstract: A biometric security system comprises a token generator executable by a processor and configured to combine biometric information with a security payload to form a security token, the security payload usable to verify integrity of the biometric information.