Abstract: Method and apparatus for enabling applications on security processors of computer systems. In one aspect, a security processor apparatus includes a processor and a memory coupled to the processor and operative to store a secure table. The secure table stores different certified endorsement keys and different values, each value associated with one of the endorsement keys. Each stored value is derived from a different application that is certified by the associated endorsement key to be executed on the processor.

Abstract: A system and method for authenticating suspect code includes steps of: receiving the suspect code for a first instance of a trusted platform module; loading the suspect code into a trusted platform module device operatively associated with a processor, wherein the suspect code is loaded outside of a shielded location within the trusted platform module device; retrieving a validation public key from a table and storing it in a register in the trusted platform module device, the validation public key indexed by the suspect code; and retrieving a hash algorithm from the table, the hash algorithm indexed by the suspect code. The hash algorithm is run to derive a first hash value; then, using the validation public key, the second hash value is decrypted to derive a second decrypted hash value. The two hash values are compared; and upon determining a match, the suspect code is loaded into the shielded location of the processor for execution by the processor.

Abstract: In a customizable data migration method and system, when a migration program is launched, it queries a system server for entity-level and user-level policies. The migration program then creates a customized interface to the user, where the entity-level and user-level polices are applied with hierarchical priorities. In this manner, flexibility is provided in the data migration process. The end user is allowed to maintain a personality on a given user system and to transfer this personality along with the company specified data. This increases the uptime of the user by reducing the re-customization time when the user is cascaded to a new user system.

Abstract: A system and method for authenticating suspect code includes steps of: receiving the suspect code for a first instance of a trusted platform module; loading the suspect code into a trusted platform module device operatively associated with a processor, wherein the suspect code is loaded outside of a shielded location within the trusted platform module device; retrieving a validation public key from a table and storing it in a register in the trusted platform module device, the validation public key indexed by the suspect code; and retrieving a hash algorithm from the table, the hash algorithm indexed by the suspect code. The hash algorithm is run to derive a first hash value; then, using the validation public key, the second hash value is decrypted to derive a second decrypted hash value. The two hash values are compared; and upon determining a match, the suspect code is loaded into the shielded location of the processor for execution by the processor.

Abstract: Method and apparatus for enabling applications on security processors of computer systems. In one aspect, a security processor apparatus includes a processor and a memory coupled to the processor and operative to store a secure table. The secure table stores different certified endorsement keys and different values, each value associated with one of the endorsement keys. Each stored value is derived from a different application that is certified by the associated endorsement key to be executed on the processor.

Abstract: Data exchanged between memory components is protected against possible misuse and breach of security by providing for encryption of data swapped out to another location such as a disk drive.

Abstract: A cooled vane or blade for a gas turbine engine has a cooling arrangement for its trailing region which can be accommodated in the relatively thin section available. In this arrangement the trailing region of the hollow interior of the blade is divided off from the remainder by a partition which may be apertured to allow cooling air to enter the compartment thus formed. The concave, pressure flank of the compartment is cooled by arrays of film cooling holes while the convex, suction flank has a perforated plate spaced therefrom to provide impingement cooling. The suction flank is therefore unapertured and there is no disturbance of the high speed airflow in this region. The spent impingement air leaves the aerofoil via a slot and may pass over pedestals en route to cool the entire trailing edge.