Abstract: An I/O housing holds an I/O port and is pivotable between a housed position, wherein the I/O housing is held snugly flat in a chassis of the computer, and an extended position, wherein the port end of the housing is distanced from the chassis. The I/O housing can mechanically engage an I/O device with the port establishing communication between the I/O device and the computer processor.

Abstract: A method of selecting a network connection for use with a data processing system includes detecting environmental information indicative of a current environment in which the system is operating, determining whether the current environment is a known environment, and, rapidly selecting a current network connection by identifying a known environment network connection. Detecting environmental information may include detecting time information and detecting whether specified hardware (e.g., docking station, external monitor, printer, external network adapter) is present. The determining may include accessing a network connection data structure containing historical network connection information. The network connection data structure may include a plurality of records, each record identifying an environmental state and a network connection used in conjunction with the respective environmental state.

Abstract: When a disk sector is written to, a bit for the sector is set indicating that the sector will require secure data disposal (SDD) to be run on it. To save time during end of life disposal, SDD is executed only on sectors whose bits indicate that they have been written to. SDD can be executed on each dirty sector in one operation at end of life or incrementally during use as disk activity permits.

Abstract: A hypervisor operating system instantiates a virtual video driver to a main operating system that supports only one type of graphics adapter. The virtual driver handles graphics remapping among plural different display drivers associated with plural different display monitors to enable a computer to output data on multiple different monitors even though the main O.S. supports only one type of display driver.

Abstract: A system, method, and program product is provided that recovers from a sector error affecting a critical file. A damaged sector prevents a critical file from being read prevents the computer system from booting. A controller records a sector number corresponding to the damaged sector. The system is rebooted using an alternative boot media. The system accesses the primary nonvolatile storage media after the rebooting. The damaged sector number is read from the error log and a file map is used to determine the critical file that is stored in the damaged sector. A backup copy of the critical file is retrieved from a backup media. The backup copy is written to the primary media using undamaged sectors and the critical file is mapped to the undamaged sectors. The system is subsequently booted successfully from the primary nonvolatile storage media.

Abstract: A first battery assembly is in a first battery housing that is mechanically engageable with a portable computer, and a second battery assembly is in a second battery housing that is mechanically couplable to the first battery housing. A switch has a first configuration in which communication is established between the portable computer and the first battery assembly and a second configuration in which communication is established between the portable computer and the second battery assembly.

Abstract: A wireless network access point is described which provides the resources of a backbone network to wireless clients. The access point is able to balance loads by deferring association of new clients and thereby directing clients to associate with alternative access points having improved backbone connectivity. Where the client is unable to find an alternative access point, the client will eventually make a second association request to the access point. The access point, in identifying the second association request of the client, proceeds to associate the client in response to the second association request. Specific time limits can be imposed relative to the second association request.

Abstract: An I/O housing holds an I/O port and is pivotable between a housed position, wherein the I/O housing is held snugly flat in a chassis of the computer, and an extended position, wherein the port end of the housing is distanced from the chassis. The I/O housing can mechanically engage an I/O device with the port establishing communication between the I/O device and the computer processor.

Abstract: A first device captures session data for each application session that is executing on a first device, and provides the session data to a second device in order for the second device to reconstruct the application sessions. A first device identifies one or more application sessions currently executing on the first device. Each of the application sessions include a media object and session data, which includes a media object identifier that corresponds to the media object and a first device media session position. The first device captures the session data transmits the captured session data to one or more second devices. The second devices are adapted to reconstruct at least one of the application sessions using the received session data and positions the application sessions at a second device media session position that corresponds to the received first device media session position.

Abstract: When a disk sector is written to, a bit for the sector is set indicating that the sector will require secure data disposal (SDD) to be run on it. To save time during end of life disposal, SDD is executed only on sectors whose bits indicate that they have been written to. SDD can be executed on each dirty sector in one operation at end of life or incrementally during use as disk activity permits.

Abstract: When a disk sector is written to, a bit for the sector is set indicating that the sector will require secure data disposal (SDD) to be run on it To saw time during end of life disposal, SDD is executed only on sectors whose bits indicate that they have been written to. SDD can be executed on each dirty sector in one operation at end of life or incrementally during use as disk activity permits.

Abstract: A method and corresponding network interface device for communicating between devices connected to a LAN includes attempting to communicate between the network devices over an initial subset of the network media wires. If the communication fails, a subsequent subset of media wires is selected. The wires of this subsequent subset differ from the wires of the initial subset. If the attempted communication succeeds, the current subset of network media wires is used as the media over which subsequent network data is transmitted. Attempting to communicate over the media may include sending an initialization sequence such as an Ethernet Auto-negotiate sequence. In one embodiment, the network media is implemented as 8 wires of CAT 5 cabling suitable for use with a Gigabit Ethernet. In this embodiment, any subsequent subsets of the network media wires may consist of 4 of the 8 wires over which 100 Mbps Ethernet operation may occur.

Abstract: A system, method, and program product is provided that initializes expected PCRs stored in a TPM by generating and storing a random number, seeding expected PCRs with the random number, inputting a set of startup code processes to a hash algorithm resulting in a set of hash values, updating the expected PCRs using the set of hash values, and saving the expected PCRs in a nonvolatile data area that is secured by the TPM. Upon reboot, the random number is retrieved from the nonvolatile data area, the PCRs are seeded with the retrieved random number, the startup code processes are input to the hash algorithm process resulting in another set of hash values, the PCRs are updated using the resulting set of hash values, and an encrypted data object is decrypted in response to the PCRs being the same as the expected PCRs.

Abstract: A “setmax” command is issued in BIOS to hide the service area (HPA) of a HDD during normal operation, so that the HPA cannot be accessed or erased inadvertently by the user or by a virus. Pressing a special key (e.g., F11) during booting permits access to the HPA.

Abstract: A system and method to avoid disk lube pooling is presented. A track access monitor tracks the number of times that a program accesses a particular track located on a hard drive. When the track access monitor determines that the number of track accesses to a particular track exceed a track access threshold, the track access monitor invokes a sequence of events to scan adjacent tracks in order to uniformly redistribute lubrication over the hard drive. In one embodiment, the track access monitor incrementally performs the adjacent track scanning during hard drive idle periods, such as when the system waits for a password from a user or when the operating system conserves power and idles the hard drive due to lack of activity.

Abstract: To unlock a HDD when a computer is in the suspend state, at both BIOS and the HDD a secret is combined with a password to render a new one-time password. BIOS sends its new one-time password to the HDD which unlocks itself only if a match is found. The new one-time password is then saved as an “old” password for subsequent combination with the secret when coming out of subsequent suspend states. In this way, if a computer is stolen the thief cannot sniff the bus between BIOS and the HDD to obtain a password that is of any use once the computer ever re-enters the suspend state.

Abstract: A system and method for using a client-side hypervisor in conjunction with a secure network-side monitoring mechanism to detect removable media insertions since a client's last network session with the secure network is presented. The hypervisor uses a “client-side insertion value” to track the number of times that a user inserts removable media into a socket located on the client. When the client is connected to the secure network, the client's hypervisor notifies the secure network of each insertion and the secure network increments a “secure network-side tracker value.” For each login request, the client includes the client-side insertion value, which the secure network compares against its secure network-side tracker value. When the two values are different, the secure network sends an action request to the client, such as a request to perform a full system scan.

Abstract: A method and system is described for selectively downloading antidotes onto a client computer. The client computer is connected via a network interface card (NIC) to a network that contains an anti-virus server. The NIC is initially logically isolated from the client computer, thus permitting the NIC to autonomously examine packets to and from the client computer and the network. The NIC selectively accepts packets only from trusted Internet Protocol (IP) addresses that conform to a security format such as Internet Protocol Security (IPSec).

Abstract: A computer tablet includes a wireless receiver, and a pen is configured to be manipulated by a person to ride against the computer tablet and thereby provide input to the computer tablet. The pen includes a wireless transmitter. A processor associated with the computer tablet outputs an alarm when a signal from the transmitter of the pen is not sensed by the computer tablet within a time period.

Abstract: Fingertip-sized discrete areas are provided on a slate computer and have different tactile characteristics than the remainder of the surface on which they are disposed. The discrete areas are arranged to mimic home keys of a keyboard and each discrete area corresponds to a respective home key. In this way, a user is given tactile feedback of when fingers are properly placed in the home position, with home key finger placement triggering the presentation of a full keyboard on screen. Other embodiments do not use tactilely distinct keys, with simultaneous placement of two or more fingers on the computer triggering display of the virtual keyboard.