Abstract: A virtual non-volatile memory system includes a BIOS coupled to a non-volatile storage system and a volatile memory system. The BIOS designates a portion of the volatile memory system as a virtual NVDIMM, reserves a portion of the non-volatile storage system for storing virtual NVDIMM data, reports the virtual NVDIMM to an operating system using an ACPI NFIT, and emulates an NVDIMM controller. When a virtual NVDIMM storage event occurs, the BIOS copies data from the portion of the volatile memory system designated as the virtual NVDIMM to the portion of the non-volatile storage system reserved for storing virtual NVDIMM data. When the BIOS subsequently determines that a virtual NVDIMM recovery event has occurred, it copies the data stored in the portion of the non-volatile storage system reserved for storing virtual NVDIMM data to the portion of the volatile memory system designated as the virtual NVDIMM.

Abstract: A layered composite boot device, and a corresponding layered composite file system, can be implemented by a boot manager. Requests directed to the layered composite boot device and file system, can be serviced from a primary device and file system that are encapsulated by the layered composite boot device and file system. The primary device and file system can correspond to a virtualized file system within a container environment, thereby enabling changes within the container environment to affect early stages of operating system booting in the container environment. Should such requests not be serviceable from the primary layers, the composite device and file system can comprise secondary layers that can correspond to a container host connection and the host file system, providing fallback to existing data if changes within the container environment were not made, thereby enabling booting to proceed in a traditional manner.

Abstract: In some examples, a server receives configuration data from a device. The server receives a software or firmware update from a vendor and determines, based on the configuration data, that the update is installable on the device. The server creates and configures a container, based on the configuration data, to create a replica of the device. The server installs the update in the replica and performs multiple tests that generate logs. If the logs indicate that the update caused no issues, the server sends the update to the device. If the logs indicate that the update caused an issue, the server sends the update to the vendor. In response, the server receives, from the vendor, a modified update that addresses the issue, installs the modified update in the replica, performs the tests, determines that the modified update causes no issues, and sends the modified update to the device.

Abstract: Disclosed herein are an apparatus and method for authenticating an IoT device. The method, performed by the IoT device authentication apparatus, includes transmitting, by the IoT device authentication apparatus, a random number to the IoT device and encrypting, by the IoT device authentication apparatus, the random number using a previously registered first white-box cryptography value through a white-box cryptography method; generating, by the IoT device, a first device response value from a previously registered first device challenge value using a Physical Unclonable Function (PUF) and encrypting, by the IoT device, the random number, received from the IoT device authentication apparatus, using the first device response value; and performing, by the IoT device authentication apparatus, authentication of the IoT device by checking whether the random number encrypted using the white-box cryptography method matches the random number encrypted using the PUF, which is received from the IoT device.

Abstract: A system, computer-readable media and computer-implemented method for automated network adapter activation in connection with fibre channel uplink mapping. The system includes a non-virtualized storage area network switch having a plurality of fibre channel ports. Each of the fibre channel ports is coupled to a corresponding cable to at least partly define a fibre channel uplink. The system also includes a plurality of client devices. Each client device has a network adapter.

Abstract: The multi-operating system device comprises a processor, a transceiver, and an output device. The processor is configured to host a first operating system in the foreground and a second operating system (OS2) in the background, or vice versa. The output device is configured to be controlled by an OS hosted in the foreground. The transceiver is configured to receive a S1 from a notification device over a communication system, the S1 indicating a notification associated to the OS2. The output device further is configured to output the notification associated to the second OS2 when the OS1 is hosted in the foreground.

Abstract: Techniques for an ultra-fast installation of a new operating system are provided. Conventional dependencies are ignored in a way that allows multiple components to be installed at once, even when certain components traditionally could not be installed until one or more other components had successfully completed their installation. An operating system executing on a computing device receives a container with files that collectively include a new operating system and a definition with the locations for the files in memory. An uninstalled state may be assigned to each file. Each file may be moved from the container to the location specified in the definition in parallel and independently of other files. After each file is moved, each file may be switched from the uninstalled state to the installed state. The new operating system may be transitioned from an uninstalled state to an installed state once files are switched to installed states.

Abstract: A method is implemented by a control terminal communicable with a computer, and includes: receiving a modification request, obtaining a configuration path that contains a target option name of a target option to be modified and a target page name of a target page; obtaining a current page name of a current page presented in a current setup screen of BIOS of the computer; transmitting a control instruction to the computer so as to enable the computer to switch contents presented in the current setup screen from the current page to the target page, and to change option selection from a current option to the target option; and transmitting a modification instruction to the computer so as to enable the computer to modify the target option to have a target configuration value.

Abstract: Automatic server configuration by a switch may include determining, by a firmware interface application of the switch, a configuration pattern for a plurality of servers; generating, by a network caching application of the switch, a network cache; receiving, based on the configuration pattern, a solution stack; storing the solution stack in the network cache; and providing, from the network cache, the solution stack to the plurality of servers.

Abstract: Methods, systems, and computer programs for receiving, by an information handling system firmware driver, a request for a feature associated with information handling system firmware, the feature stored in a baseboard management controller; determining a transfer size associated with the feature; identifying a plurality of connectivity points, each of the plurality of connectivity points communicatively coupling the information handling system firmware driver to the baseboard management controller, and each of the plurality of connectivity points associated with a bandwidth; selecting a transport route from the plurality of connectivity points based in part on the transfer size associated with the feature; and in response to selecting the transport route: transmitting the request for the feature to the baseboard management controller via the transport route; receiving the feature from the baseboard management controller via the transport route; and providing the feature to the information handling system firm

Abstract: A task may be executed using a domain specific language (DSL) debugger, the task including one or more modules. A module debugger associated with a module of the one or more modules of the task may be identified. Task debugging data associated with the execution of the task using the DSL debugger may be transmitted to the identified module debugger. Module debugging data may be received from the identified module debugger. Multi-level debugging data including the task debugging data and the received module debugging data may be generated.

Abstract: Aspects of the present disclosure provide systems and methods for improved power loss protection in a memory sub-system of a device. In particular, a power loss protection component allocates a portion of the memory sub-system to non-volatile memory. Responsive to detecting a trigger event at the device, wherein the trigger event may include asynchronous power loss of the device, the power loss protection component detects data written to a volatile cache of the memory sub-system, retrieves the data from the volatile cache, and writes the data to the portion of the memory sub-system allocated to the non-volatile memory.

Abstract: An electronic device includes one or more sensors, a user interface having one or more user interface output devices, and one or more processors operable with the one or more sensors and the user interface. The one or more processors receive, from the user interface, a command to power OFF the electronic device. Upon failing to detect, with the one or more sensors, an authorized user of the electronic device as a source of the command to power OFF the electronic device, the one or more processors disable the one or more user interface output devices while leaving the one or more sensors operational.

Abstract: A disclosed information handling system is configured to display a consistent logo or image throughout a platform initialization process. In a first-time boot, in a DXE phase, image information is read from firmware storage and processed for native resolution for a display panel and HOB information is saved to firmware volumes with Hand-Off Block (HOB) information. In subsequent iterations of the platform initialization process, the processed image is displayed early in a PEI phase and the HOB information is stored with the processed image. The image is displayed throughout the DXE and BDS phases of each subsequent platform initialization process and the display is consistent for different information handling systems and display panels.

Abstract: In some examples, a computing device may initiate a chat session with a software agent on a server. During the chat session, the software agent may ask questions and receive answers in response. The server may process logs sent from the computing device and a transcript of the chat session to identify tokens. A supervised learning model on the server may select a script based on the tokens and send the script to the computing device. The computing device may store the script in non-volatile memory and boot into a setup state of a basic input output system (BIOS) of the computing device. The BIOS may retrieve the script, convert BIOS procedure calls in the script into an action tree, and execute the actions in the action tree, causing a virtual mouse and/or virtual keyboard to provide input to the BIOS to modify the BIOS to address an issue.

Abstract: Disclosed are systems and methods that include user interfaces (“UIs”) and a controller for automating the building, management, and distribution of operation systems (“OSes”) with different customizations for different users. A UI may include selectable elements for different OS distributions, and may present a first set of components from a selected particular OS distribution and a second set of components that are not included with the particular OS distribution. The controller may generate a custom OS build based on a first subset of components that are selected from the first set of components, and a second subset of components that are selected from the second set of component using the UI. The controller may provide a repository that is accessed with an identifier and that links to each selected component of the custom OS build, and may distribute the custom OS build from the repository to a node.

Abstract: A method, system and computer-usable medium for detecting an occurrence of visual hacking via a visual hacking detection operation which includes: receiving a surveillance image; processing the surveillance image to generate surveillance image data; and, performing a visual hacking detection operation using the surveillance image data, the visual hacking detection operation determining whether visual hacking has been detected.

Abstract: Data storage operation commands are digitally signed to enhance data security in a distributed system. A data storage client and a compute-enabled data storage device may share access to a cryptographic key. The data storage client uses the cryptographic key to digitally sign commands transmitted to the data storage device, which can use its copy to verify a digital signature of a command before fulfilling the command. The storage device can also determine whether to perform a transformation, such that requests authenticated to a first identity might receive cleartext while a request authenticated to a second identity might receive ciphertext. The compute-enabled storage device can also receive unauthenticated calls and attempt to retrieve the appropriate key from a key management service or other such source.

Abstract: In one embodiment, a computer-implemented method of performing a secure boot operation in an autonomous driving vehicle includes reading a first marker from a storage device in which the storage device includes a plurality of partitions and at least the first marker. The plurality of partitions includes a first partition including stored software, the first marker associated with the first partition, and wherein the first marker includes a unique identifier and an authentication code. The method further includes determining if the read first marker associated with the first partition is valid during a boot-up operation and executing the stored software in the first partition if the read first marker is determined valid.

Abstract: An information handling system may include a processor and a basic input/output system communicatively coupled to the processor and comprising a plurality of firmware volumes embodied in non-transitory computer readable media, each firmware volume comprising executable code for a respective functionality of the basic input/output system, wherein the basic input/output system is configured to, based on the presence or absence of an action or event associated with the basic input/output system, select a boot path for execution from a plurality of boot paths, each of the plurality of boot paths comprising a respective trust chain of a subset of the plurality of firmware volumes and execute the boot path selected.

Abstract: The invention provides a data storage device comprising a controller and a data storage unit. The data storage unit comprises a first system storage area and a second system storage area. The first system storage area stores an original operating system, and comprises a first initial sector address. The second system storage area stores a backup operating system, and comprises a second initial sector address. The controller comprises a firmware. A boot pointer offset procedure is defined in the firmware. A boot pointer is preset by the firmware to point to the first initial sector address of the first system storage area, and therefore a boot operation is executed by the original operating system. When the original operating system damages, the firmware executes the boot pointer offset procedure to offset the boot pointer to the second initial sector address, and executes the boot operation by the backup operating system.

Abstract: A method and apparatus for microcontroller (MCU) memory relocation. The MCU includes a central processing unit (CPU) and memory, but lacks a memory management unit (MMU). In one embodiment of the method, a first program is selected for execution by the CPU. The first program is one of a plurality of programs stored in the memory of the MCU. Each of the programs includes position dependent instructions. The programs are compiled from source code written in position dependent code.

Abstract: In one or more embodiments, one or more systems, methods, and/or processes may receive an interrupt from a device associated with the information handling, the device different from a memory medium; retrieve an executable from the device; store the executable via the memory medium; provide a signal to an operating system executing on the information handling system, the signal indicating that the executable was stored via the memory medium; and execute the executable via the processor, the executable configured to: retrieve, from the device, a device driver and firmware for the device; and install the device driver and the firmware for the device.

Abstract: Multiple binary images stored in the firmware of an electronic device are written to the device's configuration tables during booting of the device, where one of the binary images is a manager binary. During booting, the manager binary is saved to the file system of the operating system such that it automatically executes upon completion of booting. The manager binary then saves the other binary images to the OS file system, such that they also execute automatically.

Abstract: A USB test device for testing a power feed device having a USB plug includes: a connector connected to the USB plug; a communication control unit that communicates with the power feed device through a communication line of the connector; a load control unit capable of controlling a load of a power supply line of the connector receiving power supply from the power feed device; a test control unit that gives an instruction to the load control unit based on power supply information which was obtained by the communication control unit and which is about a combination of electric power that can be supplied from the power feed device, and examines a state of power supply to the load from the power feed device; and a display unit that displays a result of examination by the test control unit.

Abstract: The present disclosure relates to a method for booting startup of an electronic device, an electronic device, and a readable storage medium. The electronic device includes a boot program Boot, an operating system, a preset boot memory, and a display screen, wherein the preset boot memory is configured to store image information. The method for booting startup of an electronic device includes: running the boot program Boot to start up the operating system, and during the startup of the operating system by the boot program Boot, refreshing, by the boot program Boot, the image information stored in the preset boot memory to a controller of the display screen.

Abstract: Structure monitoring software includes measuring software, arithmetic software, and communication software. The measuring software collects an output signal from an inertial sensor, stores a result of collection into a first storage unit, and outputs the result of collection to the arithmetic software. The arithmetic software computes the result of collection received from the measuring software, stores a result of computation into a second storage unit, and outputs the result of computation to the communication software. The communication software stores the result of computation received from the arithmetic software into a third storage unit and transmits the result of computation to outside. Management software determines whether each of the measuring software, the arithmetic software, and the communication software is operating normally or not, and terminates and restarts the software that is not operating normally.

Abstract: A virtual disk file format conversion method and an apparatus that relate to the field of virtualization technologies and to resolve a service interruption caused by offline conversion of a virtual machine disk image file format when a virtual machine is migrated between different types of VMMs. The method and apparatus include establishing a mapping table between a virtual address of a virtual machine (VM) disk image file and a physical address of a disk image file that is compatible with a virtual machine monitor (VMM), converting, according to the mapping table, the virtual address used when a user performs reading/writing on the VM disk image file, into the physical address mapped to the virtual address, and performing data reading/writing on the VM disk image file based on the physical address.

Abstract: A method and system for performing secure database backups with a globally unique identifier to prevent unauthorized access to or restoration of backup data are provided, wherein a first database management system (DBMS) generates an instance of a database and a corresponding globally unique identifier (GUID) to uniquely identify and secure the database instance. The first DBMS uses a hash function to generate a hash of the GUID, which is then stored in association with the database instance. Encrypted backup sets of the database instance are generated by the first DBMS, wherein the GUID is encrypted and stored in association with each backup set. The first DBMS encodes each encrypted backup set to require that a second or subsequent DBMS possess the identical GUID associated with the database instance before any attempt to access or restore the backup set is permitted.

Abstract: An information processing apparatus includes: a processing unit configured to write setting data to be used for boot processing by BIOS (Basic Input Output System) in a predetermined area of a non-volatile memory in an order of changing, and execute the boot processing based on the setting data; a writing unit configured to write at least one tag in the predetermined area of the non-volatile memory at a predetermined timing during the boot processing, the tag corresponding to the timing; and an instruction unit configured to instruct the processing unit to execute the boot processing using setting data written before the tag in the predetermined area of the non-volatile memory.

Abstract: A computing system includes a server to stream a base disk image over a communications network, and a client machine. The client machine includes a read cache to store preboot data including a network driver, and a processor coupled to the read cache. The processor initiates prebooting of the client machine using the preboot data, and after the network driver is running, receives the streamed base disk image from the server via the communications network to continue booting the client machine.

Abstract: Various embodiments of a system and method for secure, authenticated communication with one or more unmanned aerial vehicles (UAVs) are described herein. The system includes at least one computing system which is operable with instructions to: receive, from an unmanned aerial vehicle of one or more unmanned vehicles, a message; extract, from the message, an unmanned aerial vehicle serial number and a secret key; compute a hash of the secret key to generate a first hashed secret key; retrieve, from an internal database located on a non-transient memory of the at least one computing system, a second hashed secret key associated with the unmanned aerial vehicle serial number; and compare the first hashed secret key with the second hashed secret key to determine whether the message is valid.

Abstract: An information handling system may include a host system comprising a host system processor, a management controller communicatively coupled to the host system processor and a logic device and configured to perform out-of-band management of the information handling system, and a logic device communicatively coupled to the host system and the management controller. The logic device may be configured to, upon determining that a watchdog timer has timed out a threshold number of times without completion of a boot of the management controller, allow boot of the host system, after boot of the host system, determine if a later boot of the management controller occurs, and if the later boot of the management controller occurs, force the host system to power off.

Abstract: In general, techniques are described for improving security of a boot sequence of an application processor. In some examples, a computing device includes a first processor coupled to a first storage device, the first processor and first storage device configured to obtain firmware from a storage device external to the first processor; run a verification routine on the firmware; and in response to validation of the firmware with the verification routine, communicate the firmware to a second processor; and the second processor coupled to a second storage device, the second processor and second storage device configured to load the firmware.

Abstract: Systems, apparatuses, and methods related to configurable media structure are described. A memory device can be configured to boot up in a variety of configurations. The variety of configurations can include using the memory device for persistent memory storage, for non-persistent memory storage, etc. For instance, an apparatus can include a first memory array and a second memory array. The apparatus can include a memory controller coupled to the first memory array and the second memory array. The second memory array can be configured to store at least two boot images. The first memory array can be configured to operate based on which of the at least two boot images is used.

Abstract: One example method includes copying code and a security signature of a first off-chip boot to a static random access memory (SRAM) for signature verification, where a function implemented by the first off-chip boot includes initializing a double data rate synchronous dynamic random access memory (DDR), and the DDR initialization includes configuring a DDR secure zone, executing, in the SRAM, the code of the first off-chip boot after the signature verification on the first off-chip boot succeeds to initialize the DDR and configure the DDR secure zone, copying code and a security signature of a second off-chip boot to the DDR secure zone for signature verification, where the second off-chip boot is all of other boots in off-chip boots except the first off-chip boot, and executing, in the DDR secure zone, the code of the second off-chip boot after the signature verification on the second off-chip boot succeeds.

Abstract: An asset includes a physical computing resource. The physical computing resource is directly used by a virtual entity. The asset also includes a resource manager. The resource manager disconnects the virtual entity from the physical computing resource during a low resource consumption reboot of the asset until the low resource consumption reboot of the asset is complete. The resource manager also directly connects the virtual entity to the physical computing resource after the low resource consumption reboot of the asset.

Abstract: The embodiments of the present disclosure disclose a firmware boot implementation method based on Flash chip simulation, the method comprising: when there are at least two MCUs, one of the MCUs is selected as a master MCU and each remaining MCU is as slave MCU which is connected with the master MCU respectively, and the master MCU is connected with a Flash chip; when the master MCU is started, the master MCU is started by reading firmware data in the Flash chip; when the slave MCU is started, the master MCU controls the slave MCU to be powered on, and the slave MCU sends a request for reading the firmware data to the master MCU; the master MCU transmits the request to the Flash chip, and transmits the firmware data returned by the Flash chip to the slave MCU, so as to start the slave MCU.

Abstract: A handheld, man-portable countermeasure device can include a directional antenna and signal disruption components in electronic communication with the directional antenna. The signal disruption components can include a signal generator coupled to an amplifier. The countermeasure device can include a computing device coupled to an electronic communications transceiver. The computing device can provide, via the electronic communications transceiver, at least one bilateral communication link to operatively connect with a UAV tracking system. The computing device can determine status information associated with the electronic circuitry of the countermeasure device. The computing device can transmit, via the bilateral communication link, the status information to the UAV tracking system.

Abstract: A computer-implemented method, according to one embodiment, includes: storing information in a specified system memory location, attaching an external process to the specified system memory location in response to experiencing a system halt event, sending the information stored in the specified system memory location to a memory location associated with the external process, restarting the system in a recovery mode, retrieving the information from the external process, and using the retrieved information to restore the system to a state the system was in when the system halt event occurred. Other systems, methods, and computer program products are described in additional embodiments.

Abstract: A solid-state disk and a startup method are provided. The solid-state disk includes a control circuit, a firmware switching circuit, a first firmware storage unit, and a second firmware storage unit. The firmware switching circuit is coupled to the control circuit. The first firmware storage unit is coupled to the firmware switching circuit and stores a first firmware. The second firmware storage unit is coupled to the firmware switching circuit and stores a second firmware. The control circuit reads the first firmware storage unit or the second firmware storage unit according to whether the firmware switching circuit is triggered so as to startup according to the first firmware or the second firmware.

Abstract: A data processing system may include: a host; and a memory system including a plurality of memory units and a controller coupled to the plurality of memory units. The controller may include a memory manager suitable for acquiring characteristic data from serial presence detect (SPD) components in the plurality of memory units when power is supplied, providing the characteristic data to the host, setting an operation mode of each of the plurality of memory units based on the characteristic data, and performing memory training, and the host may perform interface training with the controller.

Abstract: Among other things, techniques for securely booting processors in a vehicle are described. An apparatus comprises a circuit coupled to one or more processors of a vehicle and managing a secure boot process for the processors. The circuit receives an indication that the vehicle has been powered on and sends, to a network server, a request for boot files for the processors of the vehicle. In response, the circuit receives, from the server, most recent versions of boot files respectively corresponding to the processors, wherein each boot file includes a digital signature of a trusted authority. In response to obtaining the most recent versions of the boot files, the circuit sequentially boots the processors using the respective boot files, wherein each processor executes a corresponding boot file upon verifying authenticity of the digital signature in the boot file using a corresponding class authentication key.

Abstract: Technologies for secure native code invocation include a computing device having an operating system and a firmware environment. The operating system executes a firmware method in an operating system context using a virtual machine. In response to invoking the firmware method, the operating system invokes a callback to a bridge driver in the operating system context. In response to the callback, the bridge driver invokes a firmware runtime service in the operating system context. The firmware environment executes a native code handler in the operating system context in response to invoking the firmware runtime service. The native code handler may be executed in a de-privileged container. The firmware method may process results data stored in a firmware mailbox by the native code handler, which may include accessing a hardware resource using a firmware operation region.

Abstract: The present disclosure provides systems and methods to stepwise increasing the IT security of elements of a technological system. In an exemplary aspect, the method comprises gathering data on technological systems and a plurality of elements comprising the technological system by intercepting traffic between the plurality of elements using data exchange protocols, identifying vulnerable elements of the technological system by one or more of: detecting suspicious actions on the vulnerable elements and statistical data relating to the elements, analyzing the vulnerable elements to generate a classification of severity of vulnerabilities of the vulnerable elements, identifying most vulnerable portions of the vulnerable elements as compared to other elements in the vulnerable elements, operating the most vulnerable portions of the vulnerable elements in a protected environment.

Abstract: Methods, non-transitory machine readable media, and computing devices that facilitate cache rewarming in a failover domain are disclosed. With this technology, a tag is inserted into a local tagstore. The tag includes a location of data in a cache hosted by a failover computing device and is retrieved from a snapshot of a remote tagstore for the cache. An invalidation log for an aggregate received from the failover computing device is replayed subsequent to mounting a filesystem that is associated with the aggregate and comprises the data. The data is retrieved from the cache following determination of the location from the tag in the local tagstore in order to service a received storage operation associated with the data. Takeover nodes do not have to wait for a cache to repopulate organically, and can leverage the contents of a cache of a failover node to thereby improve performance following takeover events.

Abstract: An operation parameter configuration method includes configuring at least two groups of operation parameters of an application, detecting a startup signal of the application in real time, confirming one of the at least two groups of operation parameters according to the startup signal, and starting the application in a foreground of the electronic device according to one confirmed group of operation parameters. The at least two groups of operation parameters include a group of default operation parameters and a group of optimal operation parameters. The group of optimal operation parameters are calculated according to a history of execution of the application by an electronic device. The group of optimal operation parameters is calculated according to a history of execution of the application in the foreground of the electronic device.

Abstract: A multi-die and multi-core computing platform in which multiple dies share the same storage device for firmware code storage is shown. After a slave die loads #1 firmware code from the storage device through a bus, the right to use the bus is released by the slave die and the slave die outputs a #0 enable signal to a master die. According to the #0 enable signal, the master die gains the right to use the bus. Through the bus, the master die loads #0 firmware code from the storage device. The slave die executes the #1 firmware code and the master die executes the #0 firmware code to initialize a link between the master and slave dies.

Abstract: A fault recoverable computer system including an instruction table having a plurality of processor instructions. The system also includes at least one sensor arranged to monitor an environmental condition and output sensor data. A monitor module is arranged to receive sensor data and/or processor state information. A testing module is arranged to perform a plurality of self-tests including a first self-test of the computer system and, if the first self-test fails, output a failure notification. A recovery module is arranged to update the instruction table in response to receiving the failure notification. The update includes replacing a first processor instruction arranged to perform a first function with a replacement set of processor instructions configured to alternatively perform the first function.

Abstract: The present disclosure relates generally to a system that includes a storage component that stores data and a processor. The processor may install an application using a portion of the storage component, partition the portion of the storage component from a remaining portion of the storage component, and execute the application via the portion of the storage component.