Abstract: A method, computer program product and system for restoring previously un-backed up data during a system restore. A computing system may include a locked partition in its storage medium to store an alternate operating system and backed-up files. The alternate operating system may determine which files have been modified since the most recent backup and run a virus scan on those modified files. The alternate operating system may copy the modified files with no detected viruses as well as those modified files with a detected virus but cleaned by the virus scan. The backup files in the locked partition that have been modified since the most recent backup operation may be replaced with these uncorrupted modified files. In this manner, the system may be able to recover files since the most recent backup while ensuring at least in part that the restored files do not contain any viruses.

Abstract: A wireless communication network comprising: (1) a plurality of mobile devices each configured to receive a beacon being broadcasted within the network and determine based on information transmitted within the beacon whether the mobile device is supported within the network; and (2) one or more access devices configured to broadcast the beacon within the network. Each of the mobile devices has a transmitting mechanism for communicating with the one or more access device. However, only those mobile devices that are supported by the network respond to the receipt of the beacon. Thus, no transmission occurs from the mobile devices until the device is identified as being supported by the network. These mobile devices instantiating a communication path with the one or more access devices and request an authentication from the one or more access devices. In this manner, a handshake mechanism is established between the access devices and the mobile devices that are supported by the network.

Abstract: Apparatus and method provides dynamic load balancing of network bandwidth between access points in an 802.11 wireless LAN. The access point generates and monitors average bandwidth utilization of client devices connected to said access point. The average bandwidth utilization for each client device is aggregated and selected clients are forced to roam to other access points if the aggregate bandwidth is equal or exceeds a threshold.

Abstract: A method and system for providing automatic notification of an end of lease of a computer system and its location within a computer network is disclosed. The computer network includes a server computer system and multiple client computer systems. A message is initially sent from the server computer system to all the client computer systems to inquire the lease status of each of the client computer systems. At each of the client computer systems, a determination is made as to whether or not a current date falls within a predetermined amount of days from the end of lease date for the client computer system. If the current date falls within the predetermined amount of days from the end of lease date for the client computer system, the physical location of the client computer system is obtained from a storage device located at an Ethernet wall plate to which the client computer system is attached.

Abstract: A method and system is described for remotely managing a battery powered client computer. A data packet, which includes a set of instructions, is sent to the client computer from a managing computer. Included in the data packet is a field indicating how much computing time is needed to execute the set of instructions. If the client computer is operating on battery power, the client computer determines if there is enough battery life remaining to execute the set of instructions. If not, then the set of instructions are disregarded.

Abstract: A method for authentication in a computer system includes registering a biometric template in the computer system, thereafter, verifying the authenticity of the registered biometric template and then comparing the biometric template with a biometric image of a user if the biometric template is authentic. If the user's biometric image matches the biometric template, the computer system will continue to boot.

Abstract: A remote mobile unit (MU) including a radio device is provided with an ability to communicate through a LAN by remote association with an access point (AP) that is out of range for communication with the radio device of the remote MU. The remote MU transmits a quest frames that is received and retransmitted by one or more intermediate MUs until a connection is made with the AP. Each of the intermediate MUs adds an identifying address to the request, forming a path that is used in both directions to transmit a response from the AP to the remote MU and to transmit data between the AP and the MU.

Abstract: In accordance with the preferred embodiment, an access point provides dynamic load balancing of network bandwidth between access points within the 802.11 wireless LAN. The access point uses the RTS/CTS protocol to reduce the bandwidth available to a single device using an excessive amount of network bandwidth. The access point places a device that has been monopolizing a network channel on a Restricted List, and regulates bandwidth on the network by not returning a CTS to any client on the Restricted List. When the client's network usage drops below a policy driven threshold set by the number of network users, the client is removed from the list and the access point will respond to a RTS from the client with a CTS.

Abstract: An embedded security subsystem, and method for implementing the same, which provide secure controllability of a data security device within a data processing system. The embedded security subsystem of the present invention includes a persistent enable flag for providing control access to the data security device, wherein the persistent enable flag is accessible only in response to a power-on reset cycle of the data processing system. The persistent enable flag is read-only accessible to runtime program instructions. A pending state change flag that is write accessible by runtime program instructions is utilized for setting an intended next state of the persistent enable flag such that control access to the data security device is enabled only during a subsequent power-on reset of said data processing system.

Abstract: A method and system for conserving battery strength of a client device, such as a laptop computer, on a wireless local area network (WLAN). The client device monitors the addresses of incoming data packet messages while running at a lowest bandwidth permitted by the protocol of the client device. When a data packet is detected that is addressed to the client device, the client device bandwidth is increased to a higher bandwidth to receive subsequent data packets. Subsequent incoming data packets are received by the client device until transmissions cease, after which the client device returns to the lowest bandwidth. By remaining in a lowest bandwidth mode while monitoring incoming packets, the client device is able to extend the life of the client device battery.

Abstract: A method and system for conserving battery strength of a mobile node, such as a laptop computer, on a wireless local area network (WLAN). The mobile node transmit symbols, which are units of data, during transmission cycles to maintain a connection with the WLAN. A battery charge level of the mobile node is measured. As the battery charge level drops below pre-defined levels, a frequency of symbol transmission for the mobile node is reduced. The reduction of the frequency of the symbol transmission results in lower power demands by a transmitter chipset of the mobile node. Thus, the mobile node is able to prolong the life of the battery of the mobile node.

Abstract: The battery life of batteries of a mobile device operating in a wireless network is optimized by dynamically changing symbol rates and bits per symbol and selecting one for communicating based upon the source providing power to the mobile device.

Abstract: A computer system and method are disclosed for generating a certificate that can be validated against a trusted hardware subsystem within a computer system. A security subsystem is established within the computer system. A master key pair including a master public key and master private key are established. The master private key is stored in protected storage within the security subsystem such that the master private key is inaccessible outside of the security subsystem. Generation of a self-verifying certificate is requested. A user of the computer system is then prompted to enter an authentication code in response to the request for generation of the certificate. A certificate is generated utilizing the master key pair only in response to a correct entry of the authentication code. The certificate is used only internally within the computer system.

Abstract: A data processing system and method are disclosed for maintaining secure user private keys in a non-secure storage device. A master key pair is established for the system. The master key pair includes a master private key and a master public key. The master key pair is stored in a protected storage device. A unique user key pair is established for each user. The user key pair includes a user private key and a user public key. The user private key is encrypted utilizing the master public key. The encrypted user private key is stored in the non-secure storage device, wherein the encrypted user private key is secure while stored in the non-secure storage device.

Abstract: The hard disk drive of a computer system is loaded with a preloaded image including an operating system, a number of application programs, and a device driver installation routine, all of which are not dependent on the hardware configuration of the computer system. A hidden partition of the hard disk drive is also loaded with a number of device drivers, which are dependent upon the hardware configuration. During the first boot only of the preloaded image, the device drivers are installed by the device driver installation routine.

Abstract: A computing system includes a motherboard including one or more connection subsystems, each of which includes a port connector and a device interface circuit conditioning signals transmitted or received through the port connector. The port connector includes a connection-sensing terminal, which is connected to ground through a cable, and which is allowed to float to a voltage supplied through a pull-up resistor when the cable is disconnected. The motherboard also includes a main voltage plane supplying electrical power to a separate voltage plane for each device interface circuit only when a cable is connected to the port connector which is also connected to the device interface circuit.

Abstract: A method and system for reconfiguring a multi-dimension sound system is disclosed. The method and system include a remote control that is capable of emitting a low-frequency sound wave pulse pattern, and a plurality of speakers, wherein each speaker includes a pulse counter that counts a number of sound wave pulses received from the remote control over a predetermined time period. The method and system further include an audio receiver that includes a digital audio encoding system. The receiver uses the respective sound wave pulse count from each of the speakers to compute the distance between the remote control and each speaker, and programs the digital audio encoding system with speaker delay times based on the computed distances.

Abstract: An Ethernet auto-negotiate extension incorporates a gigabit verification procedure following the establishment of a gigabit level of serve. If auto-negotiate resolves a gigabit data rate for a particular connection, the auto-negotiate extension verifies that each of the eight required wires is functional. The verification extension sends a data pattern that can by detected only if all eight wires are functional. In this manner, the ability of each wire to transition between 1's and 0's at the highest possible data rate is verified. The gigabit verification extension will detect flag any wires that are missing, grounded from a previous 10 or 100 Mbps system or otherwise non-functional. By incorporating this functional verification extension, the invention recognizes the limited functional verification inherent in auto-negotiate. The invention leaves the core pieces of the auto-negotiate process intact thereby minimizing the impact on existing systems.

Abstract: A method and system for conserving battery strength of a mobile node, such as a laptop computer, on a wireless local area network (WLAN). The mobile node transmit symbols, which are units of data, during transmission cycles to maintain a connection with the WLAN. A battery charge level of the mobile node is measured. As the battery charge level drops below pre-defined levels, a frequency of symbol transmission for the mobile node is reduced. The reduction of the frequency of the symbol transmission results in lower power demands by a transmitter chipset of the mobile node. Thus, the mobile node is able to prolong the life of the battery of the mobile node.

Abstract: Aspects for allowing a client to connect to an access point that has the greatest bandwidth in a wireless are described. The aspects include connecting a client to a first access point and determining if bandwidth of the first access point is at a predetermined level. Further included are determining if there are other access points available to the client if the bandwidth is below the predetermined level, and testing each of the other access points to find another bandwidth that is higher than the bandwidth of the first access point.