Abstract: Methods, apparatus and program products which monitor wireless access points (12, 16) through which data can be exchanged with a network (10), identify an unauthorized access point (16), and respond to monitored data flow in a variety of manners including determining the location of the identified unauthorized access point, establishing filtering, and controlling accounting for access services.

Abstract: Provides protection to wireless portable transponders from an unauthorized interrogation by employing a mechanical member. Transponders include: cards, fobs and RFID tags that a persons may carry. Such transponders generally have means for receiving and storing electronic and other information, commonly in binary form using memories as in electronic circuits, etc. The invention is designed to provide privacy of electronic information and yet permit the information to be queried at the users discretion. The cards and tags can be protected from receiving or providing unauthorized or unwanted information. The invention provides the mechanical member with means that permit the owner to decide when reception/interrogation of personal or other information is desirable by employing the provided mechanical enable/disable control means.

Abstract: A method, computer program product, and data processing system for automatically configuring a networking-enabled device for use with different networks are disclosed. In a preferred embodiment, a client stores multiple configuration profiles containing configuration settings corresponding to different networks. When the client becomes connected to a network, a router or other form of server detects the addition of the client to the network. In response to the client connecting to the network, the server broadcasts an identifier over the network, which the client receives. The client uses the identifier to identify the appropriate stored configuration profile corresponding to the network. The client then completes its configuration using the identified configuration profile.

Abstract: A threat management domain controller is responsive to a computer-actionable threat management vector that includes a first computer-readable field that provides identification of at least one system type that is affected by a computer security threat, a second computer-readable field that provides identification of a release level for the system type and a third computer-readable field that provides identification of a set of possible countermeasures for a system type and release level. The threat management domain controller processes a threat management vector that is received for use by a domain of target computer systems, and transmits the threat management vector that has been processed to at least one of the target computer systems in the domain of target computer systems.

Abstract: A series power supply circuit and a switching power supply circuit are combined within a single power supply unit. The switching power supply circuit provides an efficiency lower than that of the series power supply circuit under a light load and provides an efficiency higher than that of the series power supply circuit under a heavy load. A standby signal that is asserted under a light load and is deasserted under a heavy load is input to a negative logic enable terminal (?EN) of the series power supply circuit through an inverter0. The standbysignal is directly input to the negative logic enable terminal (?EN) of a PWM controller in the switching power supply circuit.

Abstract: A method for booting into computer memory a non-operating system (O.S.) program from a hard disk drive (HDD) prior to booting into memory an O.S. from the HDD. The method includes establishing a table of contents (TOC) on the HDD that contains entries for special O.S. programs. A pointer to the TOC is placed in non-volatile memory of the computer that is associated with the HDD, and when BIOS of the computer is prompted to load into memory one of the special O.S. programs, the pointer is accessed and used to locate the TOC, which in turn is accessed to load the special O.S. program.

Abstract: A method that utilizes software and hardware mechanisms to meet the FCC requirement for a U-NII antenna to be an integral part of the device in which it operates, while providing wireless ready U-NII devices and CRUable U-NII radios. Enhancements are made to the software BIOS, including the inclusion of a table of approved radio-antenna PCI ID pairs to create an authentication scheme that verifies and authenticates the radio and antenna combination as being an FCC-approved unique coupling during boot-up of the system. The BIOS also comprises an OEM field that stores an encrypted secret key utilized to complete a second check of the radio model placed in the device. During boot up of the device, the PCI ID pairs from the BIOS are compared against the PCI ID of the radio and the secret key is checked against the radio model.

Abstract: A system, computer program product and method for booting to a partition in a non-volatile storage unit without a local operator. In one embodiment, one or more bits in a BOOT register may be set by an operating system indicating if the BIOS should boot to the partition. The BIOS may then read the BOOT register to determine if the BIOS is to boot to the partition as well as any activities to perform if the BIOS is to boot to the partition. In another embodiment, a network interface card may insert directive information received from a packet in a register within the network interface card. The BIOS may then read the register within the network interface card to determine if the BIOS is to boot to the partition as well as any activities to perform if the BIOS is to boot to the partition.

Abstract: A computer system, such as a small footprint Person Computer (PC) or notebook computer, PC pointing device and method of displaying information on the PC. The notebook computer includes a pointing device, such as a mouse button, with an illuminated region. The notebook computer also includes a message handler monitoring information streams for changes and a local store storing a response profile of registered illumination responses for corresponding changes in monitored information streams. For each identified change the message handler identifies a corresponding registered response in the response profile and varies illumination from illumination devices (e.g., LEDs) in the illuminated region.

Abstract: A computer device, according to the present invention, includes: a power source judging means for judging whether power is supplied from an AC power source to the computer device capable of connecting with a wireless communications module which transmits and receives data to/from an access point; and a control means for controlling the timing of measuring the strength of connection with the above described access point based on judgment by the above described power source judging means. Therefore, by setting the timing of measuring the strength of connection with the access point based on whether or not the computer device is used at an almost fixed location, which in turn is judged by distinguishing the type of power source, it is possible to change the amounts of data transmitted and received by the wireless communications module.

Abstract: The present invention provides a “smart” AP, whereby the AP periodically checks its connection with a network and, if a determination is made that the connection between the AP and the network server has been lost, an indication of this loss of connection is made available to all wireless stations connected to the AP. In a preferred embodiment, the indication given to the wireless stations is in the form of an SSID change. When the AP detects the loss of network connection, it automatically changes its SSID from a primary SSID to an alternative SSID. The wireless stations receive the alternative SSID and, since they are configured to connect to the primary SSID, immediately and automatically begin to search for another AP in the system that is using the primary SSID, and then connect to AP having the strongest signal. In one embodiment, the alternative SSID's can be selected so as to provide diagnostic assistance to a person attempting repairs to the faulty AP/network connection.

Abstract: Provided is a Method and Computer Apparatus being capable of safely and reliably making a backup copy of data stored on the Hard Disk Drive (HDD). A user places a PC in a hibernation state by inputting a particular key operation under a typical OS environment. The working state data is stored on the HDD just before the backup copy of data is created. During the process of backup, an OS in a hidden partition of the HDD is booted so as to execute a program for making a dead copy of the HDD. When the dead copy processing by the copy program from the HDD to the backup HDD is completed, the PC system's operation is resumed and an OS is booted so as to recover from the hibernation state to the original state.

Abstract: A method of matching a query fingerprint to a plurality of file fingerprints. The method comprises the steps of determining a plurality of partial features of each of the file fingerprints. For each partial feature, derive a list of all file fingerprints which have said partial feature as one of their partial features. Determine a plurality of query partial features of the query fingerprint, and derive a ranked list of the file fingerprints based on identifying the individual query partial features in the partial features of the respective file fingerprints. Then perform one-to-one matching of the query fingerprint with selected ones of the ranked list of the file fingerprints.

Abstract: A wireless network access point is described which provides the resources of a backbone network to wireless clients. The access point is able to minimize the performance impact on 802.11g clients in the presence of mixed in 802.11g/802.11b traffic by isolating wireless network traffic based on protocol. At least one 802.11g timer is maintained for 802.11g traffic. Request for transfers by 802.11b clients which are blind to 802.11g traffic are delayed until after the expiration of the 802.11g timer. Traffic for 802.11g clients proceeds unimpeded while the 802.11g timer is active. A similar timer is optionally maintained for 802.11b traffic.

Abstract: A parallelepiped-shaped plastic cover for a PCI express ×16 connector array has a top defining a window. Some but not all of the connector array elements are blocked by the top when the cover is positioned over the connector array, so that in the event that the associated computer is not configured for receiving components requiring connections to all elements of the PCI express ×16 connector array, a user cannot unwittingly plug such a component into the PCI express connector array but can only plug in, through the window, components requiring fewer than all connector elements.

Abstract: A client computer is connected via a network to an anti-virus server and polls the server for indication that an anti-virus needs to be immediately downloaded from the anti-virus server. The client computer disengages from the network, and re-establishes a link with only the trusted anti-virus server. The anti-virus fix is installed, the client computer re-booted, and the client computer is then allowed to reconnect to the full network. If the client's primary operating system (OS) is infected, a secondary OS in the client computer performs the anti-virus download and execution. The disengagement from the network is performed by applying a filter in a network interface card (NIC) driver by the primary OS, the secondary OS, a service processor (SP), or by a virtual machine manager (VMM), depending on which is available at the client computer.

Abstract: A system and method for improved scroll mouse operation is presented. A user operates a computer mouse, which includes a scroll ring that functions as a middle mouse button. During operation, the user configures a scroll suppression manager to discard a particular number of scroll commands when the user moves the computer mouse's scroll ring. The user specifies a number of scroll commands to discard when the computer mouse's pointer location is positioned over particular mouse-over conditions, such as a web page link or a drop down menu. Once the scroll suppression manager has discarded the user-specified number of scroll commands, the scroll suppression manager processes subsequent scroll commands until the user stops scrolling or the user selects an object on the user's computer screen.

Abstract: In a system providing for user access of secure resources upon user authentication by a remote authentication server, a successful user authentication is saved locally for use when the authentication server is not available. The successful user authentication returns an authenticated credential which is stored on the local client utilizing a security method such as Public Key Infrastructure which prevents tampering with the credential. If a gateway machine provides connectivity between the client and the authentication server, the credential is also stored on the gateway.

Abstract: A method for providing an image of software installed on a computer system is disclosed. The method includes the steps of deconstructing the image into at least one portion and creating at least one module from the at least one portion of the image. The deconstructing step can include the steps of scanning an image and identifying at least one portion of the image to be modularized. The creating step can include the steps of extracting the at least one portion of the image identified to be modularized and generating at least one module from the extracted portion of the image. The modules that are created in accordance with the present invention can be formatted for use in a new image or part of a new image to be used with a software program such as with a hardware-independent imaging tool.

Abstract: A method for restricting access to an encryption key of an encrypted file system (EFS), whereby access is provided only when a computer system is booted in a trusted state. The EFS encrypts the files within a TPM chip according to TCPA specifications and simultaneously creates the encryption key, which is also stored in the TPM. The key is sealed to one or more platform control register (PCR) states (i.e., the TPM will export the key only when the PCRs are in a pre-defined state.). The original PCR states are modified during boot up of the computer system via a secure hashing algorithm, which extends a value of one PCR to a next PCR at each stage of the boot process and then hashes the value with the remaining content of the next PCR. When the system boot process is completed and before control passes to the user, the values within the PCRs are compared to values stored in a PCR table within the TPM, and the encryption key is exported to the OS kernel only when the PCR values match the table values.