Abstract: In one embodiment, the invention provides a method comprising storing user authentication information in a hardware structure of a computer system, the hardware structure including a security mechanism to protect the stored authentication information from unauthorized access, and authenticating a user of the computer system by comparing user input authentication information with the stored authentication information.

Abstract: A method for deterring unauthorized use of an electronic device is described. The method includes installing security data in a protected storage area, installing a security routine operable to check for the security data, and prompting a user for identity information if the security data is found, before permitting use of the device. In an implementation, the device is shut down if the identity information is incorrect, and manufacturer contact information may be displayed before shutting down. But if the user responds correctly, the activation process is continued to enable normal operation of the device.

Abstract: According to one embodiment, a network is disclosed. The network includes a server computer and a client computer. The client computer accesses an authentication stack during power on self test (POST) that enables authentication of boot code that is to be downloaded from the server computer prior to control being passed to the operating system.

Abstract: According to one embodiment a method is disclosed. The method includes receiving encrypted video data at a graphics controller from a microprocessor, decrypting the data at the graphics controller and rendering the data.

Abstract: A wireless network transmits digital data. The network includes an active transceiver to transmit carrier waves at a succession of preselected frequencies and a transponder. The transponder transmits digital data to the active transceiver by partially reflecting the carrier waves.

Abstract: An improvement to a graphics controller to prevent the contents of selected portions of the frame buffer from being read by devices external to the graphics controller. The invention defines one or more viewable rectangles in the frame buffer as a protected write-only area. Any attempt to read data from the protected area of the frame buffer triggers a security violation which can delete or destroy the contents of that area to prevent it from being read. The controller can also operate in a bypass mode in which the security functions are bypassed so the graphics controller operates in a conventional manner. A security violation may return the controller to the bypass mode. The invention can prevent protected data, such as copyrighted data downloaded over the Internet, from being copied from the frame buffer and used in an unauthorized manner.

Abstract: For one embodiment of the present invention, a protected storage device of a computer system includes a password stored therein. Instructions may be included on the computer system to authenticate the user. Once authenticated, the password may be transferred to a hard drive where it may be used to unlock the drive. Subsequent to unlocking the drive, an operating system may be loaded. For one embodiment of the present invention, the drive may be relocked by reducing the voltage supplied to the drive in accordance with a power management policy. The drive may be again unlocked by re-authenticating the user and transferring the password from protected storage to the drive.

Abstract: A system and method for protected messaging. The method comprises providing a first interface to a protected storage medium to enable a pre-operating system software program access to the protected storage medium. Similarly the method also comprises providing a second interface to the protected storage medium to enable an operating system present software program access to the protected storage medium. In one embodiment, the method comprises enabling a pre-operating system software program to pass information to and receive information from an operating system present software program or another pre-operating system software program by accessing a protected storage medium via the first interface. In another embodiment, the method comprises enabling an operating system present software program to pass information to and receive information from a pre-operating system software program or another operating system present software program by accessing the protected storage medium via the second interface.

Abstract: A system and method for protected messaging. The method comprises providing a first interface to a protected storage medium to enable a pre-operating system software program access to the protected storage medium. Similarly the method also comprises providing a second interface to the protected storage medium to enable an operating system present software program access to the protected storage medium. In one embodiment, the method comprises enabling a pre-operating system software program to pass information to and receive information from an operating system present software program or another pre-operating system software program by accessing a protected storage medium via the first interface. In another embodiment, the method comprises enabling an operating system present software program to pass information to and receive information from a pre-operating system software program or another operating system present software program by accessing the protected storage medium via the second interface.

Abstract: A wireless network transmits digital data. The network includes an active transceiver to transmit carrier waves at a succession of preselected frequencies and a transponder. The transponder transmits digital data to the active transceiver by partially reflecting the carrier waves.

Abstract: The present invention relates to wirelessly locking a computer platform to discourage theft as the platform is transported in a distribution channel. A computer platform having a chipset, a random access memory (RAM) coupled to the chipset, a central processing unit coupled to the chipset, a protected storage device in communication with the chipset, and a wireless communication device coupled to the chipset is presented. A radio signal having an authentication lock is introduced into the wireless communication device. The authentication lock is then placed in the protected storage device. The computer platform is placed in the distribution channel.

Abstract: A pipelined data processor has instructions at different stages of execution. Some of the instructions specify virtual addresses into a file of registers having physical addresses. A speculative translator maps the virtual registers of an instruction at one pipeline stage into physical registers for speculative use by the instruction at a later pipeline stage. The registers have multiple differently translated regions. Failure of speculative renaming reverts to an archive copy of renaming data.

Abstract: For one embodiment of the present invention, a protected storage device of a computer system includes a password stored therein. Instructions may be included on the computer system to authenticate the user. Once authenticated, the password may be transferred to a hard drive where it may be used to unlock the drive. Subsequent to unlocking the drive, an operating system may be loaded. For one embodiment of the present invention, the drive may be relocked by reducing the voltage supplied to the drive in accordance with a power management policy. The drive may be again unlocked by re-authenticating the user and transferring the password from protected storage to the drive.

Abstract: According to one embodiment, a network is disclosed. The network includes a server computer and a client computer. The client computer accesses an authentication stack during power on self test (POST) that enables authentication of boot code that is to be downloaded from the server computer prior to control being passed to the operating system.

Abstract: A computing system including a remote thin client and a server are disclosed. The server transmits a display command to the remote thin client. The remote thin client displays an image according to the display command.

Abstract: A method and system for protecting data on a computer is presented. A computer is provided that has a pre-operating system (pre-OS) space and an operating system-present (OS-present) space. Protected storage is accessed from pre-OS space via a trusted platform module (TPM). Similarly, protected storage is accessed from OS-present space via the TPM. As such, from both pre-OS space and OS-present space, a computer may prevent unauthorized users from gaining access to data stored in protected storage.

Abstract: A mobile system is provided with a theft recovery mechanism. The mobile system comprises a host chipset; a locator subsystem connected to the host chipset and arranged to determine a current location of the mobile system; and a main storage connected to the host chipset and arranged to store an operating system (OS) and contain an OS-Present application and/or a Pre-OS application configured to enforce security policies during user authentication, to access the locator subsystem and determine whether the mobile system may have been stolen or used inappropriately based on the security policies.

Abstract: According to one embodiment a method is disclosed. The method includes receiving encrypted video data at a graphics controller from a microprocessor, decrypting the data at the graphics controller and rendering the data.