Patents by Inventor Duncan Glendinning

Duncan Glendinning has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 8346305
    Abstract: Theft deterrence and secure mobile platform subscription techniques for wireless mobile devices are described. An apparatus may comprise a removable secure execution module arranged to connect with a computing platform for a wireless mobile device. The removable secure execution module may comprise a first processing system to execute a security control module. The security control module may be operative to communicate with a security server over a wireless channel on a periodic basis to obtain a security status for the wireless mobile device. The security control module may output control directives to control operations for one or more components of the computing platform based on the security status. Other embodiments are described and claimed.
    Type: Grant
    Filed: September 25, 2009
    Date of Patent: January 1, 2013
    Assignee: Intel Corporation
    Inventors: Duncan Glendinning, Mojtaba Mirashrafi, Saurabh Dadu, Mousumi M. Hazra, Gyan Prakash, Carol A. Bell
  • Patent number: 8307175
    Abstract: Methods and systems to access data in a computer system independent of an operating environment of the computer system, including to recover data to a remote system, to overwrite data, and to copy data to a hidden partition. A management system may directly access a storage device of the computer system and communicate with the remote system over a data channel that is secure from an operating environment of the computer system. The management system may access the storage device on a block basis, using a device driver associated with a storage device controller, and may include a virtualization engine to access the storage device. The remote system may include logic to request meta-data, to identify disk blocks corresponding to files of interest from the meta-data, and to construct the files of interest from the disk blocks.
    Type: Grant
    Filed: June 26, 2009
    Date of Patent: November 6, 2012
    Assignee: Intel Corporation
    Inventors: Hormuzd M. Khosravi, Mojtaba Mojy Mirashrafi, Duncan Glendinning, Gyan Prakash
  • Publication number: 20110238970
    Abstract: A method to lock an electronic device comprising an operating system comprises placing the electronic device in a disable state in which the processor is blocked from accessing the operating system, receiving a first unlock password from a remote source during a power-up operation of the electronic device, and placing the electronic device in a temporary unlock state which allows the processor to boot the operating system for a predetermined period of time when the first unlock password matches a password stored in the electronic device. Other embodiments may be described.
    Type: Application
    Filed: March 29, 2010
    Publication date: September 29, 2011
    Inventors: Gyan Prakash, Duncan Glendinning, Saurabh Dadu, Mojtaba Mojy Mirashrafi, Mousumi M. Hazra, Carol A. Bell
  • Publication number: 20110154030
    Abstract: Embodiments of methods for restoration an anti-theft platform are generally described herein. Other embodiments may be described and claimed.
    Type: Application
    Filed: December 18, 2009
    Publication date: June 23, 2011
    Inventors: Mousumi Hazra, Gyan Prakash, Saurabh Dadu, Mojtaba Mirashrafi, Duncan Glendinning
  • Publication number: 20110154502
    Abstract: A method to manage data access in an electronic device comprising a housing having a lid comprises receiving, from a remote server, a data protection policy, storing the data protection policy in a memory location on the electronic device, detecting a transition from a lid open status to a lid closed status, and in response to the transition, implementing the data protection policy on the electronic device. Other embodiments may be described.
    Type: Application
    Filed: December 18, 2009
    Publication date: June 23, 2011
    Inventors: Gyan Prakash, Sanjay Bakshi, Duncan Glendinning, Saurabh Dadu
  • Publication number: 20110131447
    Abstract: A method, apparatus, system, and computer program product for an automated modular and secure boot firmware update. An updated boot firmware code module is received in a secure partition of a system, the updated boot firmware code module to replace one original boot firmware code module for the system. Only the one original boot firmware code module is automatically replaced with the updated boot firmware code module. The updated boot firmware code module is automatically executed with the plurality of boot firmware code modules for the system and without user intervention when the system is next booted. The updated boot firmware code module may be written to an update partition of a firmware volume, wherein the update partition of the firmware volume is read along with another partition of the firmware volume containing the plurality of boot firmware code modules when the system is booted.
    Type: Application
    Filed: November 30, 2009
    Publication date: June 2, 2011
    Inventors: Gyan Prakash, Saurabh Dadu, Selim Aissi, Hormuzd M. Khosravi, Duncan Glendinning, Cris Rhodes
  • Publication number: 20110076986
    Abstract: Theft deterrence and secure mobile platform subscription techniques for wireless mobile devices are described. An apparatus may comprise a removable secure execution module arranged to connect with a computing platform for a wireless mobile device. The removable secure execution module may comprise a first processing system to execute a security control module. The security control module may be operative to communicate with a security server over a wireless channel on a periodic basis to obtain a security status for the wireless mobile device. The security control module may output control directives to control operations for one or more components of the computing platform based on the security status. Other embodiments are described and claimed.
    Type: Application
    Filed: September 25, 2009
    Publication date: March 31, 2011
    Inventors: Duncan Glendinning, Mojtaba Mirashrafi, Saurabh Dadu, Mousumi M. Hazra, Gyan Prakash, Carol A. Bell
  • Publication number: 20100332744
    Abstract: Methods and systems to access data in a computer system independent of an operating environment of the computer system, including to recover data to a remote system, to overwrite data, and to copy data to a hidden partition. A management system may directly access a storage device of the computer system and communicate with the remote system over a data channel that is secure from an operating environment of the computer system. The management system may access the storage device on a block basis, using a device driver associated with a storage device controller, and may include a virtualization engine to access the storage device. The remote system may include logic to request meta-data, to identify disk blocks corresponding to files of interest from the meta-data, and to construct the files of interest from the disk blocks.
    Type: Application
    Filed: June 26, 2009
    Publication date: December 30, 2010
    Inventors: Hormuzd M. Khosravi, Mojtaba Mojy Mirashrafi, Duncan Glendinning, Gyan Prakash
  • Publication number: 20100164722
    Abstract: For one disclosed embodiment, an enabled state of a mobile computing platform may be modified in response to an asynchronous notification from a server. Other embodiments are also disclosed.
    Type: Application
    Filed: December 31, 2008
    Publication date: July 1, 2010
    Inventors: Duncan Glendinning, Vijay Rao
  • Publication number: 20090086980
    Abstract: A platform feature licensing module (e.g., a USB Smart Card Token) securely stores and communicates a platform feature enabling license, corresponding to a selectable platform feature, to an authenticated platform. The module includes a secure microcontroller, a secure communication port, and secure non-volatile memory in which is stored the platform feature enabling license. The module is configured to securely communicate with, and to authenticate the identity of the platform, via an integrated embedded controller embedded into the platform. The integrated embedded controller enables the selectable platform feature in response to a platform feature enabling license received from the platform feature licensing module. The integrated embedded controller and platform feature licensing module communicate securely using a predetermined public-key cryptography technique, with each having a PKI-based key pair to provide authentication and cryptographic services.
    Type: Application
    Filed: September 29, 2007
    Publication date: April 2, 2009
    Inventor: Duncan Glendinning
  • Publication number: 20090086965
    Abstract: A two-stage storage security system comprising an address translator and a cryptographic engine for a mobile computing platform is provided. In response to a write operation, the address translator receives unencrypted data blocks, from an initiator, and associates the blocks with corresponding scrambled data storage addresses. The cryptographic engine encrypts the unencrypted data blocks to be stored on the platform storage component at the corresponding scrambled data storage addresses. The address translator applies a predetermined reversible translation function to reversibly remap addresses, and the cryptographic engine applies a predetermined cryptographic technique to encrypt and decrypt the data blocks. In a read operation, encrypted data blocks retrieved from the storage component are decrypted and restored to an original logical order. Decryption of storage component data is allowed when storage component is coupled to the corresponding platform.
    Type: Application
    Filed: September 29, 2007
    Publication date: April 2, 2009
    Inventor: Duncan Glendinning
  • Publication number: 20090002162
    Abstract: A system embodiment associated with making a computer a less desirable target for a thief is described. A system embodiment may include a security timer that is to be periodically refreshed. If the security timer is not periodically refreshed, then a computer in which the system embodiment is located may be disabled by a theft deterrence logic. The system embodiment may also include a communication logic to communicate with a TDSP to request a signal to update the security timer. While a system embodiment is described, it is to be appreciated that other system embodiments having different elements and that method embodiments may be described.
    Type: Application
    Filed: June 29, 2007
    Publication date: January 1, 2009
    Inventor: Duncan Glendinning
  • Patent number: 7327688
    Abstract: A computer communications network comprises a plurality of interconnected ATM switches forming a WAN or LAN area network over which ATM cells are transmitted, and a plurality of user devices including LAN interface adapters for connection to one or more to local area networks (LANs). An interface device connects at least some of the respective ATM switches to the LAN interface adapters. The interface adapts the ATM cells for transport over the LANS. The user devices can thus communicate through the LAN interface adapters transparently with the wide area network.
    Type: Grant
    Filed: August 20, 2003
    Date of Patent: February 5, 2008
    Assignee: Alcatel Canada Inc.
    Inventors: Wayne Burwell, Dave Coomber, Tom Duxbury, Nutan Behki, Keith Galway, James Watt, Duncan Glendinning, Eugene Zywicki
  • Patent number: 7174564
    Abstract: The secure wireless local area network of the present invention includes a single wired network that supports both wired and wireless devices. The network addresses security concerns by including an authentication server that services a plurality of access points. Each access point includes a first authentication device that generates and transmits a first authentication message to the corresponding wireless device over an air channel. The first authentication message includes encrypted validating information about the access point including an access point key that uniquely identifies the access point. Each wireless device includes a second authentication device. The wireless device receives the first authentication message and determines whether the access point is authorized to connect to the wired network. If the access point is valid, the second authentication device responds to the first authentication message by generating and transmitting a second authentication message to the access point.
    Type: Grant
    Filed: September 3, 1999
    Date of Patent: February 6, 2007
    Assignee: Intel Corporation
    Inventors: Sultan Weatherspoon, Duncan Glendinning
  • Publication number: 20040131064
    Abstract: A computer communications network comprises a plurality of interconnected ATM switches forming a WAN or LAN area network over which ATM cells are transmitted, and a plurality of user devices including LAN interface adapters for connection to one or more to local area networks (LANs). An interface device connects at least some of the respective ATM switches to the LAN interface adapters. The interface adapts the ATM cells for transport over the LANS. The user devices can thus communicate through the LAN interface adapters transparently with the wide area network.
    Type: Application
    Filed: August 20, 2003
    Publication date: July 8, 2004
    Applicant: Alcatel Canada Inc.
    Inventors: Wayne Burwell, Dave Coomber, Tom Duxbury, Nutan Behki, Keith Galway, James Watt, Duncan Glendinning, Eugene Zywicki
  • Patent number: 6650646
    Abstract: A computer communications network comprises a plurality of interconnected ATM switches forming a WAN or LAN area network over which ATM cells are transmitted, and a plurality of user devices including LAN interface adapters for connection to one or more to local area networks (LANs). An interface device connects at least some of the respective ATM switches to the LAN interface adapters. The interface adapts the ATM cells for transport over the LANS. The user devices can thus communicate through the LAN interface adapters transparently with the wide area network.
    Type: Grant
    Filed: August 14, 1998
    Date of Patent: November 18, 2003
    Assignee: Alcatel Canada Inc.
    Inventors: Keith Galway, James Watt, Duncan Glendinning, Eugene Zywicki, Wayne Burwell, Dave Coomber, Tom Duxbury, Nutan Behki
  • Patent number: 6101395
    Abstract: What is disclosed is a method and apparatus for optimizing call setup traffic in a communications network with out-of-band call control signaling. The method includes the steps of determining a profile and an associated handle, establishing a communications link with an opposing party; and, transmitting a call setup request containing the associated handle to the opposing party. The apparatus includes a processor, a transmit and receive unit coupled to the processor, and a memory coupled to the processor to cause the processor to perform the method.
    Type: Grant
    Filed: February 13, 1998
    Date of Patent: August 8, 2000
    Assignee: Intel Corporation
    Inventors: Bhaktha Keshavachar, Duncan Glendinning
  • Patent number: 5818842
    Abstract: A computer communications network comprises a plurality of interconnected ATM switches forming a WAN or LAN area network over which ATM cells are transmitted, and a plurality of user devices including LAN interface adapters for connection to one or more to local area networks (LANs). An interface device connects at least some of the respective ATM switches to the LAN interface adapters. The interface adapts the ATM cells for transport over the LANS. The user devices can thus communicate through the LAN interface adapters transparently with the wide area network.
    Type: Grant
    Filed: September 16, 1996
    Date of Patent: October 6, 1998
    Assignee: Newbridge Networks Corporation
    Inventors: Wayne Burwell, Dave Coomber, Tom Duxbury, Nutan Behki, Keith Galway, James Watt, Duncan Glendinning, Eugene Zywicki