Abstract: The disclosed embodiments relate to the field of remote server management. More particularly, the disclosed embodiments relate to providing secure communications in the context of remote server management. In an exemplary embodiment of the invention, a client computer uses an established encrypted communication channel to request secret data from a managed server. The managed server provides the requested secret data, which is used by both the managed server and the client computer to encrypt communications across a second communications link.

Abstract: Virtual media images of actual physical media resources, such as O/S boot files and software installation disks, are provided in a remote directory structure. The remote directory structure stores the virtual media images along with access rights of multiple authorized users, such that control is provided over the retrieval of the virtual media images and use of data/programs within the images. The virtual media images may be stored in blocks, or multiple sub-blocks/children, corresponding the actual media resources. Moreover, the remote directory server may simply store virtual media pointers, or location identifiers, which point to another storage location (i.e., a remote computer) having the actual data content of the virtual media image. Accordingly, the directory server processes a user request for a desired portion of the virtual media images by evaluating whether the user is one of the plurality of authorized users and whether the access rights of the user encompass the desired portion.

Abstract: A technique is provided for managing network devices and computer systems via a remote directory environment. The remote directory environment organizes various resources, such as servers, in a directory structure and provides access rights and restrictions to the resources based on groups or roles. A user with the proper access rights is then able to access the desired resource, such as a server, and create or modify management operations, device configurations, and other tasks. The subject device may then be notified of the new or modified operation, configuration, or task. The subject device also may routinely or periodically retrieve various management tasks from the remote directory environment.

Abstract: A technique is provided for identifying the write protect status of a removable storage media, such as a computer diskette, prior to normal interaction with the media. The present technique interacts with the removable storage media and identifies the write protect status as write protected if the interaction produces a failure code indicative of write protection. For example, data storage may be attempted at a non-storage location, thereby producing a write protect error if the media is write protected or an invalid write error if the media is not write protected. Alternatively, the present technique may attempt to read and rewrite data back to the media, thereby producing the write protect error if the media is write protected.

Abstract: A disk cache writing system that substantially improves disk drive caching. A cache disk drive, or a reserved portion of a standard disk drive, is provided that is dedicated to cache data. Any of the current data of the disk drive or cache portion is temporary cache data that may be overwritten at any time. Cache data is written to a write section, including one or more sequential sectors, where the write section has a minimal write access time. The write section begins at a first offset sector associated with a minimal write access time, or at any one of several potential start sectors including the first offset sector. One or more potential start sectors are determined, where each corresponds with a first start sector in a current track to avoid moving the R/W heads from the current track. The only initial delay that is encountered is the delay to switch the R/W heads from read to write.

Abstract: A system comprising a processor, a memory coupled to the processor, and a bridge device coupling a system bus to the processor. The system bus is configured to couple to an expansion bus of a managed computer system. The memory is configured to hold a bootable image for the managed computer system, and wherein the processor is configured to emulate a disk drive device storing the bootable image, and to boot the managed computer system from the bootable image stored in the memory.

Abstract: A management sub-system is associated with a host computer system. The host system includes a network interface controller to facilitate transmissions between the host system and a distributed computer network. In addition, the management sub-system and host computer share an Ethernet network interface controller (NIC), which is assigned at least two different addresses. The management NIC includes decode logic that detects either of the addresses assigned to it, and routes the associated data packet to the management processor, or to the host processor. As a result, all management operations to either the management sub-system or the host system may be routed through the management NIC, while other standard operations may be routed through the host NIC. In addition, the management NIC may be used as a back-up or spare for the host NIC in the event it fails, or becomes overly busy.

Abstract: The disclosed embodiments relate to verifying whether equipment is within a promised warranty period before warranty service is performed on the equipment. In one embodiment, the MAC address of a computer system is used to verify whether the computer system is covered by a promised warranty.

Abstract: The specification discloses a system and related method for tracking access to digital information that involves combining biometric information of a person seeking access with the digital information and a digital signature. Each person who accesses the digital information has their biometric and digital signatures combined in this manner. Thus, the digital information itself reflects who has accessed the information. Where the digital information is a video, the combining of the biometric and digital signatures is done on a frame-by-frame basis.

Abstract: A security system includes different authentication levels and/or different privileges based on certain criteria. For example, if a user's identity can be somewhat assured due to the directness of the connection, authentication may be less rigorous than in a situation where the connection is more remote, thus making the user's identity less assured. Also, a user's privileges may be restricted if the user accesses the system from a remote location or during non-business hours.

Abstract: A management sub-system connects via a USB bus to a server or computer being managed. The management sub-system also couples to a management console, which has a number of conventional peripherals, including CD-ROM, floppy drive, hard disk, keyboard, mouse, and the like. These peripherals are emulated as USB peripherals coupled to the server by the management sub-system. The management sub-system includes a Composite USB function logic device that connects to the USB controller in the server. The Composite USB function logic device emulates the various peripherals available at the management console, and provides configuration data to the USB controller consistent with the emulation. Consequently, the server sends and receives data from these peripherals at the management console, as if the peripherals were locally connected by the USB bus to the server. The management sub-system monitors the operation of the server and publishes a web page that can be viewed by a web browser at the management console.

Abstract: A technique is provided for authenticating a client for multiple network devices and services using a single sign-on mechanism. The present technique stores client credentials at each of the multiple network devices and services, which generate and transform an authentication challenge (e.g., a random number) using an appropriate one of the client credentials stored thereon. At the client-side, the single sign-on mechanism stores client credentials entered during a first authentication process. Subsequent authentication processes simply retrieve the client credentials stored by the single sign-on mechanism during the first authentication process. The technique then independently transforms the authentication challenge received at the client-side using the client credentials at the client-side. The technique then authenticates the client if the independent transformations produce an equivalent result.

Abstract: A technique is provided for preserving a strong random number for use in a cryptographic security system for a processor-based device. The technique is particularly useful for restoring a random number to memory after data in the memory has been lost due to, for example, battery failure and replacement. Bits comprising a random number are automatically and periodically written to remote storage for subsequent recall, as needed, for substantially restoring the random number to the processor-based device. Further randomness also may be provided by masking in additional bits, such as those relating to other system components, the real-time clock, or the MAC address.

Abstract: A computing device includes a network connector located on its front panel. The location of the network connector allows a user, such as a system administrator, to connect a management console to the front of the computing device to facilitate management operations.

Abstract: A technique is provided for emulating sound of a remote computer system, such as a server, on another computer system interfacing with the remote computer system via a network. The technique emulates sound of the remote computer system by using a standard audio format or by copying audio settings of the remote computer system to the interfacing computer system. For example, the input/output addresses, sound tables, and register settings of audio circuitry for the remote computer system may be detected, copied, transferred, and used by audio circuitry for the interfacing computer system.

Abstract: A technique is provided for managing network devices and computer systems via a remote directory environment. The remote directory environment organizes various resources, such as servers, in a directory structure and provides access rights and restrictions to the resources based on groups or roles. A user with the proper access rights is then able to access the desired resource, such as a server, and create or modify management operations, device configurations, and other tasks. The subject device may then be notified of the new or modified operation, configuration, or task. The subject device also may routinely or periodically retrieve various management tasks from the remote directory environment.

Abstract: A technique is provided for identifying the write protect status of a removable storage media, such as a computer diskette, prior to normal interaction with the media. The present technique interacts with the removable storage media and identifies the write protect status as write protected if the interaction produces a failure code indicative of write protection. For example, data storage may be attempted at a non-storage location, thereby producing a write protect error if the media is write protected or an invalid write error if the media is not write protected. Alternatively, the present technique may attempt to read and rewrite data back to the media, thereby producing the write protect error if the media is write protected.

Abstract: The disclosed embodiments relate to the field of remote server management. More particularly, the disclosed embodiments relate to providing secure communications in the context of remote server management. In an exemplary embodiment of the invention, a client computer uses an established encrypted communication channel to request secret data from a managed server. The managed server provides the requested secret data, which is used by both the managed server and the client computer to encrypt communications across a second communications link.

Abstract: Virtual media images of actual physical media resources, such as O/S boot files and software installation disks, are provided in a remote directory structure. The remote directory structure stores the virtual media images along with access rights of multiple authorized users, such that control is provided over the retrieval of the virtual media images and use of data/programs within the images. The virtual media images may be stored in blocks, or multiple sub-blocks/children, corresponding the actual media resources. Moreover, the remote directory server may simply store virtual media pointers, or location identifiers, which point to another storage location (i.e., a remote computer) having the actual data content of the virtual media image. Accordingly, the directory server processes a user request for a desired portion of the virtual media images by evaluating whether the user is one of the plurality of authorized users and whether the access rights of the user encompass the desired portion.

Abstract: A file system technique extends the life cycle of limited read/write media. Rewrite cycles of each file and/or each region of the media may be tracked. Different regions of the media are classified as static and dynamic based on their respective number of rewrite cycles. Static files are migrated to the more worn out or dynamic regions of the media, and dynamic files are integrated to the less worn out or static regions of the media. The file system is further sensitized by allocating a new file to an available region after a most recently used region. Where multiple versions of a data region exist, the file system marks a version of the data region as unstable after a certain number of rewrite cycles to the version and directs rewrite cycles to a subsequent version of the data region.