Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include a Baseboard Management Controller (BMC) having computer-executable instructions to receive a request to boot a factory firmware on the BMC in which the factory firmware is signed by a first private key of a first asymmetric private/public key pair. Using the first private key, the instructions verify an authenticity of the factory firmware using a public key associated with the first private/public key pair, and allow booting of the factory firmware only when it is authenticated by the first public key.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include a Baseboard Management Controller (BMC) having computer-executable instructions to, during a boot sequence of the BMC, determine a type of a firmware that is to be booted on the BMC, and selectively restrict access to the resources based upon the determined type of firmware.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a request for a secret known by the IHS, and attest the RAC by verifying that the public key exists in a manifest that is configured to store identifying information about a plurality of devices configured in the IHS. The request is signed using a private key of a first asymmetric key pair generated by a Remote Access Controller (RAC). Using a second public key of a second asymmetric key pair, the instructions encrypt the requested secret; and send the encrypted secret to the RAC, wherein the RAC is configured to use the second private key of the second asymmetric key pair to decrypt the encrypted secret.

Abstract: The invention provides a body-worn monitor featuring a processing system that receives a digital data stream from an ECG system. A cable houses the ECG system at one terminal end, and plugs into the processing system, which is worn on the patient's wrist like a conventional wristwatch. The ECG system features: i) a connecting portion connected to multiple electrodes worn by the patient; ii) a differential amplifier that receives electrical signals from each electrode and process them to generate an analog ECG waveform; iii) an analog-to-digital converter that converts the analog ECG waveform into a digital ECG waveform; and iv) a transceiver that transmits a digital data stream representing the digital ECG waveform (or information calculated from the waveform) through the cable and to the processing system. Different ECG systems, typically featuring three, five, or twelve electrodes, can be interchanged with one another.

Abstract: A handheld device measures all vital signs and some hemodynamic parameters from the human body and transmits measured information wirelessly to a web-based system, where the information can be analyzed by a clinician to help diagnose a patient. The system utilizes our discovery that bio-impedance signals used to determine vital signs and hemodynamic parameters can be measured over a conduction pathway extending from the patient's wrist to a location on their thoracic cavity, e.g. their chest or navel. The device's form factor can include re-usable electrode materials to reduce costs. Measurements made by the handheld device, which use the belly button as a ‘fiducial’ marker, facilitate consistent, daily measurements, thereby reducing positioning errors that reduce accuracy of standard impedance measurements. In this and other ways, the handheld device provides an effective tool for characterizing patients with chronic diseases, such as heart failure, renal disease, and hypertension.

Abstract: An ambulatory medical device capable of delivering therapy to a patient is provided. The ambulatory medical device comprises at least one controller operatively connected to at least one sensor configured to detect a health disorder of the patient, at least one treatment element configured to deliver therapy to the patient, and at least one response mechanism configured to be actuated by the patient, the at least one response mechanism having one of a first state and a second state. The at least one controller being configured to delay delivery of the therapy to patient for a first predetermined period of time responsive to detection of the health disorder and the at least one response mechanism having the first state, and to deliver the therapy to the patient in response to continued detection of the health disorder, the at least one response mechanism remaining in the first state.

Abstract: A wearable treatment device for monitoring physical activity and providing therapy to a subject includes a garment, cardiac sensing electrodes configured to detect cardiac information for the subject, at least one activity sensor configured to monitor at least one of motion or position for the subject, treatment electrodes configured to deliver treatment shocks to the subject, and a controller. The controller is configured to guide the subject through a physical activity, measure the subject's performance of the physical activity using the detected cardiac information for the subject and the monitored at least one of motion or position for the subject, monitor the detected cardiac information for the subject to identify whether the subject is experiencing a treatable arrhythmia, and determine a confidence level for an identified treatable arrhythmia using the monitored at least one of motion or position for the subject.

Abstract: The invention provides a neck-worn sensor (referred to herein as the ‘necklace’) that is a single, body-worn system that measures the following parameters from an ambulatory patient: heart rate, pulse rate, pulse oximetry, respiratory rate, temperature, thoracic fluid levels, stroke volume, cardiac output, and a parameter sensitive to blood pressure called pulse transit time. From stroke volume, a first algorithm employing a linear model can estimate the patient's pulse pressure. And from pulse pressure and pulse transit time, a second algorithm, also employing a linear algorithm, can estimate systolic blood pressure and diastolic blood pressure. Thus, the necklace can measure all five vital signs along with hemodynamic parameters. It also includes a motion-detecting accelerometer, from which it can determine motion-related parameters such as posture, degree of motion, activity level, respiratory-induced heaving of the chest, and falls.

Abstract: Embodiments provide methods for validating secure delivery of an IHS (Information Handling System) by confirming that the packages by which the IHS was delivered include only the packages used to ship the IHS from a factory or other trusted entity. During factory provisioning of the IHS, a shipping certificate is uploaded to the IHS, where the certificate includes shipping identifiers that are each associated with a package used to ship the IHS. Upon receiving packages by which the IHS has been shipped, shipping identifiers, such as bar codes and RFID codes, are collected from the received packages. The shipping identifiers collected from the received packages are compared against the shipping identifiers from the shipping certificate in order to validate the plurality of received packages as the same packages that were used to ship the IHS.

Abstract: The invention provides a body-worn monitor that measures a patient's vital signs (e.g. blood pressure, SpO2, heart rate, respiratory rate, and temperature) while simultaneously characterizing their activity state (e.g. resting, walking, convulsing, falling). The body-worn monitor processes this information to minimize corruption of the vital signs by motion-related artifacts. A software framework generates alarms/alerts based on threshold values that are either preset or determined in real time. The framework additionally includes a series of ‘heuristic’ rules that take the patient's activity state and motion into account, and process the vital signs accordingly. These rules, for example, indicate that a walking patient is likely breathing and has a regular heart rate, even if their motion-corrupted vital signs suggest otherwise.

Abstract: Systems and procedures are provided for validating an IHS (Information Handling System) as operating using only factory-provisioned firmware. During factory provisioning of the IHS, a signed inventory certificate is uploaded to the IHS that includes an inventory identifying firmware for use in the operation of the IHS. Upon delivery and initialization of the IHS, the inventory certificate is retrieved by a pre-boot validation process. An inventory of firmware used by hardware components of the IHS is then collected. The validation process compares the collected inventory of firmware against the inventory of factory-provisioned firmware from the inventory certificate in order to validate the IHS is operating using only factory-provisioned firmware. A validation failure is signaled when the comparison indicates that a hardware component is not operating using the factory-provisioned firmware specified in the inventory certificate.

Abstract: A method for dynamic immutable security personalization for enterprise products. Specifically, the disclosed method describes how a computer processor (e.g., baseboard management controller) of an enterprise product can personalize security requirements in trusted facilities, along the supply chain route of the enterprise product, so that trusted assumptions concerning the enterprise product can be made. Further, through dynamic immutable security personalization, these trusted assumptions are allowed to change over time (e.g., from being less restrictive to more restrictive) as changing enterprise product configuration states are captured while the enterprise product traverses the supply chain route.

Abstract: Embodiments of the invention relate to generating compliance scores based on first party data on a second party system for viewing by a third party.

Abstract: A system and method for measuring vital signs and motion from a patient comprising a plurality of sensors, each comprising a processor and analog-to-digital converter configured to generate the physiologic data waveform(s) from the sensor as synchronized, separately resolvable digital data comprising a header indicating the sensor from which the digital data originates, and to transmit the physiologic data waveform(s) to a processing system via a cable comprising a terminal connector that reversibly mates with one of a plurality functionally equivalent of connectors to operably connect the sensor to the processing system. The processing system receive sthe physiologic data waveforms and determines therefrom one or more vital signs for the individual, which are transmitted to a remote vital sign monitor.

Abstract: Various embodiments provide methods for validating hardware modifications of an IHS (Information Handling System) by confirming that a hardware modification corresponds to a hardware component supplied for installation in the IHS by a trusted entity. During factory provisioning of an IHS, an inventory certificate that specifies the factory installed IHS hardware is uploaded to the IHS and is also stored for ongoing support of the IHS. Upon a hardware component being supplied for installation in the IHS by a trusted entity, the inventory of the stored inventory certificate is updated to identify the supplied component and the updated certificate is transmitted to the IHS. An inventory of detected hardware components of the IHS is compared against the inventory from the updated inventory certificate in order to validate the detected hardware of the IHS includes the component, supplied by the trusted entity, that is identified in the updated inventory certificate.

Abstract: An information handling system includes a memory, a baseboard management controller (BMC), and a basic input/output system (BIOS). The memory stores a secure boot policy for a plurality of input/output (I/O) devices in the information handling system. The BMC performs a firmware update for a first I/O device of the I/O devices. In response to the firmware update being completed successfully, the BMC creates a system management task. During a next boot after the creation of the system management task, the BIOS detects the system management task. The BIOS calculates a new hash value for a firmware image of the firmware update. The BIOS replaces a previous hash value with the new hash value in the secure boot policy.

Abstract: An information handling system includes a memory and a baseboard management controller (BMC). The memory stores a secure boot policy for multiple input/output (I/O) devices in the information handling system. The BMC extracts a new firmware hash value from a firmware update package. The new firmware hash value is associated with a new firmware image of a first I/O device of the I/O devices. The BMC performs a firmware update for the first I/O device. In response to the firmware update being successfully completed, the BMC replaces an old firmware hash value with the new firmware hash value in the secure boot policy.

Abstract: An information handling system includes a memory and a basic input/output system (BIOS). The memory stores a lookup table to associate each of a plurality of device firmware hashes with a corresponding one of a plurality of device identification strings. The BIOS calculates the each of the device firmware hashes. Each device firmware hash is associated with a different device firmware. The BIOS creates the lookup table based on the calculated device firmware hashes and the device identification strings. Based on the lookup table, the BIOS displays a secure boot allowed devices database list on a display device.

Abstract: A wearable medical device for detecting and treating life-threatening arrhythmias includes a wearable vest portion, sensing electrodes, therapy pads, at least one motion sensor, and a cardiac monitor. The cardiac monitor is configured to detect whether the patient is experiencing a treatable arrhythmia using an ECG signal and in response, determine a confidence level for the detected treatable arrhythmia using outputs from the at least one motion sensor. Determining the confidence level includes detecting patient motion prior to the detection of the treatable arrhythmia. Determining the confidence level further includes increasing the confidence level in response to determining that the patient is motionless coinciding with the detection of the treatable arrhythmia, or decreasing the confidence level in response to determining the patient motion after the detection of the treatable arrhythmia. The cardiac monitor is configured to determine whether to deliver a treatment shock based on the confidence level.

Abstract: An ambulatory medical device includes two or more response mechanisms; a memory storing an active operation mode parameter identifying an active operation mode from a plurality of operation modes; a controller connected with the two or more response mechanisms; and a therapy manager component executable by the controller and configured to identify the active operation mode, detect a physiological parameter indicative of a health disorder of the patient, request that the patient change the state of one of the two or more response mechanisms in response to detection of the physiological parameter, monitor the state of each of the two or more response mechanisms within a first predetermined period, and delay therapy to the patient in response to detection of a first change in the state of one of the two or more response mechanisms within the predetermined period and identification of a first mode as the active operation mode.